last executing test programs: 21.74654593s ago: executing program 1 (id=13639): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x3f7, &(0x7f00000002c0)=""/195}, 0x48) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000019c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000001bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) sendmsg$kcm(r3, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001d00)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x2, 0x10, &(0x7f0000001e40)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000001ec0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)="04", 0x1}], 0x1}, 0x8054) r5 = socket$kcm(0x2, 0x5, 0x0) recvmsg(r5, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r5, 0x1, 0x7, &(0x7f00000017c0), 0x43) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 20.811505825s ago: executing program 1 (id=13642): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x409b4aa8, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x1}, 0x50) r0 = gettid() r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_lsm={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000440)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000480)={r1}, 0x8) close(r2) recvmsg$unix(r2, &(0x7f0000003040)={&(0x7f0000000080), 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/245, 0xf5}, {&(0x7f0000000200)}, {&(0x7f0000000240)=""/86, 0x56}], 0x3, &(0x7f0000002f00)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x108}, 0x11043) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) openat$cgroup_int(r3, 0x0, 0x2, 0x0) ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0) r4 = openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000300), 0x2, 0x0) close(r1) write$cgroup_netprio_ifpriomap(r4, &(0x7f00000006c0)={'veth1_to_bridge', 0x32, 0x37}, 0x12) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000540)={r2, 0xffffffffffffffff, 0x4, r1}, 0x21) sendmsg(r2, &(0x7f0000000580)={&(0x7f00000005c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1}, 0x80, &(0x7f0000000640)=[{&(0x7f00000006c0)}, {&(0x7f0000000700)="d084418513efbc2a72ab8d59896aca0cef8ee615a9e83ad43fffdbe0abe2e5999b1af7f24bfe9591fec8ddc4d9e8b1d5e6acf98f62d9b9d948209c95fa2122d95be814bbf934", 0x46}, {&(0x7f0000000780)="eaf0030e1ae47c8e2e575d3244403964de5ea70739a0", 0x16}, {&(0x7f0000000880)="9add7666bca281d1ef9a5072c7aa92d1cecfa52e4a3dfdd94e21c8c78c20dc60a959496d8af1e12a043d038f46d8ac05bf6f351e00c38637693cddc33cb8b8e7341f9a7816ace06955302234bef851848abff12da4d3010c0ef39b", 0x5b}, {&(0x7f0000000900)="8c71c6ce5ba1d398136e8e34177baf26cab3a06041c35a3b761a5598238f07a3f78772998387eb07c2fd9bce3f590a411289e9b4eaa33c89dea737da259fb36b789dc43973407b7353605cc24f6253a2c980b1ac5798bf4cc27650e6108d011ce57dd41c08606b958c6b1710a01dbc31ef2b3a8ce9c6828483353c48175fa4f776cff7f6969634695a49111b282fadf2f80202a13a9d7b5539b8cbb07801d992ee1120be8600ebb5edc09b741623d50625ed56b75dd117ded881491f30abdd7dd607f7a833f4e52cf6716d7333c2a9f5643564bae473a922", 0xd8}, {&(0x7f0000000a00)="043918d07952d9a7130671047aebf46d7123102632648cea8ea62936b327939f904be71d2c85cb901f9e2eaffc965e27b451ddd01d42d09a9523408998a2c4bfb46fb89a0bba9fe99cdd", 0x4a}, {&(0x7f0000000a80)="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", 0x1000}], 0x7, &(0x7f0000001a80)=[{0x58, 0x118, 0x3, "01cce0eb8f801fbe2466310e067663558a6d529482e69c51e1d48f2a9c5d9d3fa151f321c151d5b075c0fa9017677cd006f9191232645bc34c6086819c299b8519b225"}, {0x28, 0x101, 0x5, "a9c3d5977fd18b90820f57438c4ce196225c0c"}, {0xc0, 0x84, 0x0, "2f8a8095cef1e7da40ed80dbedd5ebbe756645f5301b2f4997d89f15438eba59c83c3598118a48f6170e48a090157d1bc5a44363bbae3501f6ae8588e224ab28c12e68aa2510eb1f81fe24c7560ab767c58ad3f7bacfa1df2425b2fe97f71ad9792b61fbd587a5b0693a0cbec5a25fa56f41637fdcaf931cb401a19f4896dc4d275c97ea175d838bff299cc30630483a4c4c8f9320bf99e6afc542de01b8652a2389675c421b9c23a99b800b"}, {0x108, 0x103, 0x3, "d4ed8df4946a492c93365cf56c1d0c0b67a6a01087e77f66fdaace0ab202caef541ffdf4dc4e60b894bd443afde86148f7a63111d561a8261f782481f6b3f37d12d3d005bad8ccb7748d7a01beae75f357a86e09a627c9404d2e78c1d8897ce591e4d623746f1558689001aebf0f3d2429268c4028f17d8a6df41893118227f53af496d282ba5cee5ef41129d64b869236cd6bf03aae4711e973248159bf39de64b5a9f8ba6cb2fe79805818643d3c516e381674ecb2389bb9597217af5a12ac9c3e469509c89bfa9fdd1f01756bb78839f78062ef98a8a22d25189360507ee81bf156b8160e07a6a2cabcee9eea18072408a8ec79a4"}, {0x108, 0x84, 0x5, "99a9e3ff18060d65869e19ca6656cfa2f000c0e26520cf3f6585068beb184e4f647a97a47d9500a15f06b7c9969c87bc299d2013025999b7df036df767182b6214d791c192f520cd8d50862af759087dea656852eb5729ad8c03b7165f5bee16444bca2f5b7cd83f0147bf8f29555982deabf70988cf3361b9ef129ed85b9456d64e89dadec23feadb69492b3dd558be740c7f275492129f7baad5a84b32572ff29157e54df9f76cbd18fea51627b121b8a4a329d4a7419ebceee79e0d95586b9a0510b68a3040f2f58296a7afc1e45ba2b44c8e3699de181565826365311aec8930a605ebd2bd53caee54813e85616a079cef7b"}, {0x40, 0x1, 0x100, "5bea109b3ab984b49e5632cd06a502e4efbddea86d0bf5e07d49420663bea5016182adb6ab8d8ce29e750376d2db"}, {0x1010, 0x116, 0x7, "465db65b20a2d96262f20411ffe2028cd454aa33c886bd7212ccf63a498c733c9a1f324fdc6b785afcbd3483bde3e8f824336b6755bde55b5117dbe3d5e9cf527192f444aea2dca0d358e988c71efe2a0f8639a38cfc08605f3c86e85f62ffea3fdf30526a9244113aff2049862cf5ac9357c025afd7609bfe0c173a449b36dad62e920c42068fc81799e900aa2fbe9da7ae4bb98292264639a707bbaee60d16a829d6b61f4f3986ce4992883c0d278e58afebc450baf520e0b432e4a6c7ef6fad417763c520b095a9e7326b913f6780b9cc22ab28f2febd1b0d23ab55942b9b63f869de6a44eb98eeb759d8484b2bf755e800cb405b3f08f1fa2a50e4d1a52043eef3eb91c3321cba426f2a6713979af23176be80294bc6dc0612e41c871f5dea1ab49ecc7169bc8b18da5cc1e8a63ea2f0eed540dc2b5abf1d8c74e843ea73e43c82baccd05489d8e6177c42dba099e80e19b06e4bc2efa32df2a067cb8cf59227b29cb8648ec9f2545c5375b0e82ae298e7ad3dcffb97fc9129cdd58ae40c0bef45d76afba28ff67be4563b8c5ac6042b8815ebeefd9950e6cd4bb999415c760242a190d01b0124fce7f297172f39537d81952b2bcf60db605c3203e7e2cfda8a061ab6e212da6edaab9ea2bfc59585d5f2991c6ac3da6a5128d1278027068e4e258e452e03b4484c4e16a0d82ad24b24ddc4811e917acf879572eeaecd8e5c8702ed54700145f3c4b87e1ad225275ec9505ef32eb2ad9d275b2f38cf6827804beb2fa6c958a7b1eca24d9da13bbeb31de8bb44cf56597a69c14768b7c82387e5f75194e5de8cdd6dd43801752689e9e7b35496307588f15cab6158ee2ee6f79f6a3a5348ae25e2a73ef183695861493c5b7a2375d6a196e98fa6e0e9ec824915e7c318b629f8553114e6b1be82084076579b954f56f3a7d25eba3f0bdecc59f87036b7c78ed1f23a6f946ab7c450e3afa6cf9e99317b3dabe4465496026f1883d0ec286f3d095ffbaae25ef89376279ab0b5f2167d10e78514f03ad99a9cc318e135a0ab32da745351d200e61dceb4d908a7206b743d5b4f08fcfdaeeed2fc22dbfd14baa55fc3610fd27f153c253d474b53a74990e2f925a85e450942d268d62c157ea4c35b95d092ed6ea05022f4a3f71322a48773b5d498f8e1c93d9fb71dfb52ff2f674410d441099393ae1e0c88b037add3edcf8707bdb809a7956977ddd24417c84d2fca61861374f08920176d5dea649f0e8a2bf48c5a78a3c6427bfedb28ec8c3262b97046508e86278f7337ea28a04411e815e1a5fd2a9c326645c231236ce9d92fd9bf4ea195dfa5c7db72a8df8279b732fee4dbd660f6ad5678954c5e332d6224cf9aff5af63dc0e407ff310dbb23073a9a89c9806c42059f666d721bb194a6748ccbdb507c959f9ec84c2dcd239d4583c1419f0b6c414293d1f77b98783c6d993942429f142ce842507eb70629e31a80c01f9412ba61e516af44620135b923febca5c44b1e0a9ec8a85a6f4980417e2dacbda1b96d96a6de7019313c412658cfc003ea39d10c9c89c494e17d7190a937cba64630b860220aa50f7605a7ae19e1933f85d78b2ecef332c73bc673c975ea562590bfe3dd170a6c039d03b3bc46bf77ce412afcb4617a5f63b91ff742e5adcb7bb8ae0756aaaf756b897e0e7ed1ee55ea19a77250251b4ef817c753e171cb8b8520a790c4c69c6645adfb27309f99da3cd55e40b857f792d31070d40acef80e5e40e043e3c00afaefc34ac3e51b5c6baf707b3eef4a4615bd08076b07884d46ea861b5c5a61f9973883e494b26f37bd30d609c33092254377c61a31a9b7aa451e889735169b01c6206ae07666ec7a7c6b02f20b4ed70cb160fa5418b3ca0a84d095fe24b9a762e08a8f0ff5b31cf381fd90a2a08b645ab878c052a8b663b41fc800e7e8bfdf98ab9f92f63716f06d99db79c545f4856052f1631e4e389113063c9ecae1ce0137c95fddba6a36240abae912ff5f33ff0bad6316c0a83a30fb930fc623f33a5319975bb6b94e5f86f6810d844b41b574b73826a23752fb4d58f512a3234f07ba9df9203d2e8fa1113c2d119995971ae5de0ac42f129a35bbca8d66974e0207fad3f56dfcfcfc076c886954afce676b733441e417638ed4cd313e11ad9a1770568f0947e075f14537620c958c1bfa01213d6b3f17055e4be46e1b980636ff70860bbb90d5f94794ce874545787fd4f6fba300f72e26047ea0870346eb6f3511ed3e79247babe9bf2756d65f211193c4576faf0e57b3ad3a36dd342009fde4e21e35513311398e15509cf661671414d001301663a6bbd95197b18c2dee34262a0b35a4b4f299d772374db8ca87bdd57f96a99239a85efbe964d0c85ca3809506127025dea058e60009f1ff7e4897308fc317ae79d82749f896529dc73d3dab64c01ac7ae2b4ae56cdde1987bea2e511dfaed6534e7b0f7058c6861bdd07d72ae2451e1a7c7e3cee1f43299cf91940364815a37af8cf33fe2b437032103b625111ae89fcb6325e15fc3231b57b91feb3d8ca487200f34566210c3e72d3c1ce0c19e8882193b3e36fde4bfabf1f747ee576719decb00aa04168cdce68525bc629500f592c442f20b20da0c3773c2295e7f5803fb822ce6b3710d6e415c7a7d6cf5bdeea732f3eb651d71f40d0b29cc2d760862ad184d43e246c095ba7ff89d2bb0d1c75181431c21c6cb141c8e1ffa82fe37bd959f080b4ca27dbb1e4dc9ac767ce2773321499d1117dce6ce59fe430bfa60cae8e630480f49b529b9ff66315710286eb7406f0f3e3a652f2d178c823231c4120b2acc7983777fe31d3645cbfc5355c44c42ee51e61b10475174bd30b172bad2b5f8676f1effdc884160f385ce577d19b6ed68db53c5d93645886c456c99c9520e4202b6212fb8b835bf7a0827a5da85c5c54e9fd6689e3dd481c2d436c59fa84cb12bd674f1c872254340f94ee92a5d87dac8fdb1709ef53195548c28d5c942d9aa27d0c6d851181de40dda9ab50f614adcf71d2bead31903cd78757e8e32292ebf3852364a8b8d8d1441293db481c3f3831295d7b1ce05db33ffcd932653d2bf7fa7489ac24dcf5a07fd540b6f3cb0e2114af1ca73f9531b3f5f5c70ceeb91858bd5f6d847f51007d856e2252a2fb2fdfa1fbf5d60e6ab8a21147a0159413fd15dfb4961d6ebf25c1c4bb3ad3d6669c6fec3a4ecbac438aea5f31b4a93fde7fdf5a1ea3a4becd9a3f4f45336c3e2e0b155514d7028f0db068af82415916f2b928e15b2d3ea1777fe82c518a92cb390013a8de822fe1050331fedcc2622923fbaac7546a462d000fba5fe35835b1781501495fab769246242b6d7435ecf44620d14ce07e066a8a217344b799e42be690e3dcf093089fc6d70d604f917275a978259104e7f3cadbb4740ea58361c16b44269fe6e501b09367e845c3080a5ce608ff32d16ab648db48b00f06162941be6960171b26875ce85421c315cd4647238330ef7fd63d7e23bb095bccc522dbc93c479763a14493c031c31a484592e8cddcb4b3d02061df6a02b82be3f2bd22192c1157a1c0f2dea07807c16cdb2e4fbfc08cf0910476975e28677516a972d0a31094693b2021632bb32a138ff4d978ecbc6e29d61972551a9db6dbb4f343d00266b029e54ec3919458e8b05f7496e3fbfbbceb4105fa2e22e8679ebea207be6df82a9fe5b61b5a92175b9d6afa73d2ecc7ab784b3f994f166c2353ca59bdbe9fa4f76ef22cdb99ded2a847ab8136795cdac10f4f139e842322debde2c9ef2ac205cd1f8e7b61e7a823c0914211ed6c563666e407360198e2f79bf7eaa1aab02553b58f1df86495abf49df8c18372cd6f590bed2388bba8eeb6a50f6cb12e3c5bd142a2b23e836f1e608290b3a5b8457eb53fccbad859fd7c9185d5be238dbf27f60dde014b3d423d1d42a4f52657fa5e111685d14de5dfc440f7ed1223dee95de0d53c1d48440bd9021e5d4c13883be90bcde3d6bfaf727399388845e2a7d4a8bc5e5a2fbc17dd1dbcbefe8bda9757dd284664bff2ad82b7661da3fb235afd705bd7e73a0ca24da90d37a94357e1d63e3d4239338a74e8e4d16690c0c738a1ddf21cc05f4dbe96ff8f0ba5951370a067c896528c30ce5309b6ff09c23e5c7f7970739f917ef493876521ab8044e313167ccd1179d49861e75283b3e977d35581577fb69f8dc847bd0e65103dc7a5e0d106a0a60d1462fec71f495592a5af596e43260c703c28828fec26f490ef26c7b48162579ab5f96f23826f382415771399a55526b1bc88fd6554e748ddb87073c81738df38b794188aed1c48cb2e680653be2831bc689ade23f6140dba586af27c8ec055024ac667c6d26deb226eff4178209321951b536fa436b370cdd8cb65a15d702e7a819b71dfd5e892e1390ca083ee7fe835b2d14dfacf377a8f19731acdfd5c78fba094006600824e42c63884f6c2a68d6954fda09c0ef4e6959a30155e4c2bf2d9c1a2d934b65ac0a8e8e3730727e27b915fc252abf2774e7e5912486b366bb4a59b9d178bfef3d05d8803410b410cb2d7953f3a8942efeebe6d5ab01d2cdfbaf628ccdea3d0622f69eb863585d86592c2d8ae31c16f56e4d6c91f0c242f5265100eb04ba55eaa09be8009f8cd7190f0c2fcada182f423b15a0181dd5a00895c5cc3457be5015cd1ea8878a5d77da646d7ad5d300d28d5ddcc3debc75f6fab5bba78017984d8f580ced894b6c3bf31828395b9d4c859631190dab46e06b7fd5e09ff18cff12a1c61a45b97e36baf2b7179b7d3c88f227aedb949235ab1aa7451362b82a59ef2ac499e5e02d0fb932969b13fbc7d12846dde61cb021190b4b68d3d08d77139c4973ac93d7ed8d1bc964baee1aec085e3a4d6ab3040b09b4d9ca27e4ed279c8c9966271d95692a4332d95b157d94624b3a847383f6e318e5d8a404d5c7e141bffd3b0b5f70f38b239ed2f08b4cfcc5dbf75f732ea8bfdfe1c2af1d3812bb7f8c06929232338988c97cef3d414a247b0c70a2a5e919320759a930ad56b6e94f416b80d392d570324c9c718da150b027a5a118aa9806959ac7823a36b3aac145f467e78837b974a1a856c2b87e2fa8165abcd966ff5a049483606cc488cf4dd673781873717fe5e135bdeaf1a82ec8e24e862fa2a14cf500aa48e64290dc05ea59b6b360c114f8718e9dc20b9c0f9b69bb2f0669209507f6fcbe83bb47797734f706f904d611c8a4223e65ba890687bb7fd45651394a3103641db10cd4a638e967e86960fa7d0c49f1b35d2554f8cdd38f044257bf4e4149ff0ac194655584f56b701fb1d60c4550434dae3a53afd1a2300e6794af60c5d84de2cb6f0bb8e0472b8801ee0265d8315e097cc4195e3d7ba601ee772457b93cee85c648f713c3e46a49757b251e29e61824d6a9004a5f7d7e405667a93ed64300484bd4196f3bed2ec798b662fc5ff22021ae67c197c7d83a63b5531a277cb796cfa8c3a483eafe00fb57c1679fe6dcad936d9c8e62e87d19af8db98b8e5485e9ca83b62600ed19f71ba5d7292baa6dda0fb5611864dcd878b792773f7e8aef6b44596a8cb4a8e8f9133bf4f36c0242ea15e6bd17e5c5fdcb281f06b01df13323f81e04ab16069a5c45ee9b0bb781ebf61b354c89102e2a1015c3fdf32f2926f136c6bfde7e52bcfe539e2737ed5efb7c96a6d4902c26ad3b48573c61f725519cab217ec7cbc36deba4bbfb6b9deee1a1b19dba89f7c03f8278f2b4f20d6f8d0b293060b241faca150c290c0d8d81fd6f"}], 0x13a0}, 0x4000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002e40)={r2, 0x58, &(0x7f0000002e80)}, 0x10) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x4e, 0x3, 0x9, 0x0, 0x3, 0x5, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x3, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xfffffc01, 0x0, @perf_config_ext={0x1, 0x8000000000000000}, 0x10, 0x6, 0x9, 0x4, 0x7, 0x8, 0x2, 0x0, 0x6, 0x0, 0x6}, r0, 0x9, r2, 0x0) 20.440751523s ago: executing program 1 (id=13645): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20004800) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x16, &(0x7f0000000700)=ANY=[@ANYBLOB="61154c00000000006113300000000000bfa00000000000001503000008004e002d3501000000fffe950000bc000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf500000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffad4501000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a81426104000000000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546ccd3f1d5ab2af27546e7c0700000000000000b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4d08000000ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43000000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d0000000000000000b712c1e47be511fe32fbc90e2364a55e9bb609c64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd4722a11dc3c693962895496d4f6e9cc54db6c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c835d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff5af657a67463d7dbf85ae9321fad16ee751cd7dde94ec97549c2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf377b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059a6cffb92e2a0cfd81434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5c4d188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a5cbb8be3f7741b18007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873d0ecdf904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566fffffffffc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054e5deb27f7922fe6c14eba96c9af409da03290e4009f872d5aaca63dbe239efb1e02dd4fc07f8c5b070e2ddeb4b5afa6df2e7e162962e334d8553cc56008ddc8277fa9e8f6684513bfa827686b6fb71259743f55f46fa7e6379312e93213faf275f0441d46bc5690181244c44bea45854ed4ccd99f3fd328110ae22ef1504ec0566652d742ed8a7e202539c6531824f7399b486fbb906a91b77f2a6ba27bf97ebc7482cea32278a7acd9f2210e6ed2defcbd112f29a92401c5a37c58835f870b056186ef3971d3d9effa5661cabc2a059689dcfb030dd4ac0fe54db67510d3e9a5d36b900000000000000000000000000000000c9e484cf5f8c0955c11b285de46871d62f9d986e73658d228225b21f694dd2dc80e96ce476496973ee14e3d4fd03507c6f7c0c8ae809ddc9a36b4f30d15d08cc8e72d750f5e529cf4cec823b923d382f3f2c42dcb4b316eba77e7f767ae17d4d3427c9379eadbd040fbbe0c6dd8100f1558354bdd35626052c2e66cc34f4e266cc04218764824533cac2736e236b50ae4d800565910200af9cb11002791a91d834ffcc65a6226ecafe0372e3ace29c2441eca24371857aa9eb9b3910a2eb"], &(0x7f0000001100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000001140), 0xffffffffffffffd2}, 0x48) 19.786947209s ago: executing program 1 (id=13647): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, 0x0}, 0x4000040) socket$kcm(0x1e, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a00)=@bpf_ext={0x1a, 0x0, 0x0, &(0x7f0000000ac0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x3, &(0x7f0000000c00)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x1, 0x71, 0x10, 0xb4}}, &(0x7f0000000c40)='syzkaller\x00', 0xf00, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8}, 0x50) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454c9, 0xba98575a95aeb70d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0xa, 0x0, &(0x7f0000000400)="7a7fa22c2aff88df53ef", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 18.905598428s ago: executing program 1 (id=13648): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x16, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x8, 0x10, &(0x7f0000000f40), 0x10}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x5, 0xc, &(0x7f0000001200)=ANY=[], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x23, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000900000000000000ff7f000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095000000000000009500000000000000180100002020692500000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500"/128], &(0x7f0000001200)='syzkaller\x00', 0xffffffff, 0xda, &(0x7f0000001480)=""/218, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x3, 0x6, 0x4, 0xbeb1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001a00)=[r4, r4, r7], &(0x7f0000001a40)=[{0x0, 0x3, 0x5, 0x3}], 0x10, 0x8}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="140000002d000b02d25a806f8c6394f9031a0400", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r3, 0x0, 0xe, 0x0, &(0x7f0000001100)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0xffff8880b8d0f000, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) 17.273176335s ago: executing program 1 (id=13654): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20800000, 0x1, @perf_config_ext={0x1, 0x7}, 0xc00, 0x0, 0x9, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x40811) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x41) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x7, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000008c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0xffffffff, r5}, 0x38) r6 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}, {&(0x7f0000000340)="eec80e33f7156c3d24024abfec23163bcae8a87851122520f5716c30201ba7697e1a9e2d2ce993cc7db0e0eb3b12fdfe137c0344e7d3a627e66714a4a2a0475d4957825d51b56089f78207588d97c1e28550847ae886f243921968c9ca588cdcf6b54f2826466689d0e323c158f8aa69dc4b78d428e5a7c4e78877dbb6664f7591efad", 0x83}, {&(0x7f0000000400)}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x12) setsockopt$sock_attach_bpf(r3, 0x29, 0x10, 0x0, 0x1300) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0x9) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) 4.730605219s ago: executing program 3 (id=13702): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0x600000a0) socketpair(0x22, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.670577345s ago: executing program 2 (id=13703): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f00000006c0), 0x4) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESOCT=r2], 0x48) perf_event_open(&(0x7f0000000440)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0xd, 0x4, &(0x7f0000000600)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000700)={r4}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f00000001c0), &(0x7f00000002c0)=r4}, 0x20) 4.488978234s ago: executing program 3 (id=13704): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000780)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f00000005c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000700)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x8901, 0x0) sendmsg$tipc(r1, &(0x7f0000001340)={&(0x7f0000000b00)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x3}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001280)="5be05bc11bf75804fba58b3e03121741320711f1232d8ff821039f292fb05c8164380284bb62869fec4a8f7b028bee09b16b71e9043f42fde4d4962552a0d19b2644bd20b7a739bfa2", 0x49}], 0x1, 0x0, 0x0, 0x8004}, 0x4001) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x1f6, &(0x7f0000000ec0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1830000001000400000000000000000095"], &(0x7f0000001240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000001040)={r6, &(0x7f0000001080), &(0x7f00000010c0)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 4.408187352s ago: executing program 0 (id=13705): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x2}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000016c0)={0x16, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000ec0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, &(0x7f0000000f00), 0x8, 0x10, &(0x7f0000000f40), 0x10}, 0x94) socket$kcm(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x5, 0xc, &(0x7f0000001200)=ANY=[], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000001340)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000019c0)={{r4, 0xffffffffffffffff}, &(0x7f0000001940), &(0x7f0000001980)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x1, 0x23, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000900000000000000ff7f000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000100850000000600000018100000", @ANYRES32=r7, @ANYBLOB="000000000000000095000000000000009500000000000000180100002020692500000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000010000008500000085000000b7000000000000009500"/128], &(0x7f0000001200)='syzkaller\x00', 0xffffffff, 0xda, &(0x7f0000001480)=""/218, 0x0, 0x8, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, &(0x7f00000018c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000001900)={0x3, 0x6, 0x4, 0xbeb1}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000001a00)=[r4, r4, r7], &(0x7f0000001a40)=[{0x0, 0x3, 0x5, 0x3}], 0x10, 0x8}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000001440)="140000002d000b02d25a806f8c6394f9031a0400", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000f80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8004, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x4, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001080)={r3, 0x0, 0xe, 0x0, &(0x7f0000001100)="05806ab382844306d758e60803dc", 0x0, 0x6b2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30040041) setsockopt$sock_attach_bpf(r2, 0x1, 0x9, &(0x7f0000000080), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0040011004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x8000) r10 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0xffff8880b8d0f000, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) 4.246501509s ago: executing program 2 (id=13706): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0xfdc2, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x600000a0) socketpair(0x22, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.161900689s ago: executing program 2 (id=13707): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x3f7, &(0x7f00000002c0)=""/195}, 0x48) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x29, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000001a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x5, 0x5, &(0x7f0000001b40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) sendmsg$kcm(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001d00)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x2, 0x10, &(0x7f0000001e40)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000001ec0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)="04", 0x1}], 0x1}, 0x8054) r6 = socket$kcm(0x2, 0x5, 0x0) recvmsg(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f00000017c0), 0x43) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 3.072286188s ago: executing program 3 (id=13708): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000580)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000640)='@', 0x1}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000840000060000000001"], 0x18}, 0x41) 3.064645939s ago: executing program 0 (id=13709): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 2.832698102s ago: executing program 2 (id=13710): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40001000, &(0x7f0000000040)="7446372b19d18acbb1d9d6b0fd2270a18dcb67ece524c472cd7a4fe040e4ed0f13f36e28d3bb989674430236c842f04968290697398872f47097a1856f651856893c0780c6086377b9612434b61dc7f880781ed1d8d1cf25169c45fcbf9dcbb2f1cae4fa057f5a72bc9feec4e35747a7e30cfeda0ad554ac46cedeed62372abde80f6924471abe592e69489ba67453a55c6c0dc2d6a6d477c46bcebec704b452a6de6a935b0f82f1a6b904d89a5d9abc0b", 0xb1, &(0x7f0000000100), &(0x7f0000000140), &(0x7f00000001c0)="256ed5c1469e76b9947f0a6c5adae8d552a47c4988dc") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000180)='cgroup\x00'}, 0x30) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000003c0), 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="381d00030010000000000000ff2cda0002000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000000000000400"/28], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0e000000040000000400000003"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000200)={0x0, 0xffffff2d, &(0x7f0000000240)=[{&(0x7f0000000280)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x15, 0x1c, &(0x7f0000000e40)=ANY=[@ANYBLOB="1808000060000000000000000000008018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908000000000035090100000000009500000000070000b7020000000000007b9a00fe000000006609000000000000dbaaf0ff50000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffff770000000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000180000084609f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000f40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.694802876s ago: executing program 3 (id=13711): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000680)={&(0x7f00000008c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000940)=[{&(0x7f0000000980)="ee", 0xfffffdef}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000106860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 2.592428846s ago: executing program 0 (id=13712): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)}, 0x600000a0) socketpair(0x22, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x7, 0x51, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a06030000002300"/49], 0xfdef) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.35698165s ago: executing program 0 (id=13713): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1000000}, 0x48) 2.301200226s ago: executing program 3 (id=13714): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001580)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xfffffffffffffffd}, 0x1, 0x5c4}, 0x80, &(0x7f00000029c0)=[{&(0x7f0000001480)="89", 0x1}], 0x1}, 0xc9) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) sendmsg$sock(r1, &(0x7f00000007c0)={&(0x7f00000001c0)=@phonet={0x23, 0x6, 0x4, 0xf8}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000280)="0254652b36dd63ef11b733dc82d03f3a0d1469de6dc81c0950286dd46b6791a223c28003a3ef64671d7d51327b189482fb681ead647748adacac7706c4575a658c85714ad10da68bcdf143d735a583d1587ef4b3f6a96d33cdf1f196b688ee3bb3b4d6e0d58db543586965fd0a287702ffb6b022544fe10ff3f391420e77dd8a76d67b8d1f46e0cd98e63f60a01de247995b2c177d", 0x95}, {&(0x7f0000000340)="c4ff3cbca7c7703d19d02482ced33b47ae03156ba66f46ea878e960b406e3b6342bd37ddbd7a0f28138fad8015db1e5f2d99a3312d416ea19ffe947304883d14d531a372f7af0c5dae5b15f2bb7634f52f45f735492c81d1d234aec6", 0x5c}, {0x0}], 0x3, &(0x7f0000000700)}, 0x800) r4 = socket$kcm(0x10, 0x3, 0x10) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x0, 0xc, &(0x7f0000000b40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x0, 0x4, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0xa, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000850000006d75dcfef07bb846a94863dd62933a5eebadea64777877be51c7cb3666f69294ad2da24e64d66e6fa0d72affe1d1980033a2200d892b40228477f589c8086cc9fc2079c5a029c1b955513f4537978bfb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x14, &(0x7f0000000e40)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000ec0)={r6}, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYRES64=r0, @ANYRES32=0x0, @ANYBLOB="00000000a24ceb6e0000000001004530bc660000186e68294054d0992bc8a0cbed40598ec18df4e73900000076d764cb8ab5f06fa5cf8463d8409ed6e87bbebacf60400ceb727cc77d6725e05ab4310872c21a125c8ae6585a40d7839ce428", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) syz_clone(0x400, &(0x7f00000004c0)="48437a5fc07f91244e51f47b08a57e1d5f451fcd825a2ed5ea596efe", 0x1c, &(0x7f0000000500), &(0x7f0000000700), &(0x7f0000000740)="ebdfdf89fe63aef4175b35ff714e9e224495f5d236d2f6f9c08da97538563033c71baca98a54b701e237599df3b20a80991f3758ad24f01c88ff631ace7c9abf565f3469") bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r8}, &(0x7f0000000280), &(0x7f0000000240)=r5}, 0x20) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="0400000000000000000000000000530000000000"]) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.498785418s ago: executing program 0 (id=13715): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000001a40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0xfdc2, &(0x7f0000000300)=[{&(0x7f0000000140)='i-', 0xffe3}], 0x1, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @private=0xa010102}}}], 0x20}, 0x600000a0) socketpair(0x22, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.459352121s ago: executing program 32 (id=13654): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$kcm(0x29, 0x7, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0xe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20800000, 0x1, @perf_config_ext={0x1, 0x7}, 0xc00, 0x0, 0x9, 0x0, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(r3, 0x0, 0x40811) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, 0x0, 0x41) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x401, 0xc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0xc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x88e}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x7, 0x0, &(0x7f0000000740)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x22}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f00000008c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000980), &(0x7f00000009c0), 0xffffffff, r5}, 0x38) r6 = perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa16ae, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x90, 0xa4, 0x2, 0x1, 0xa1, 0x9b9b, 0xa, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x7, 0xc, &(0x7f0000000b40)=ANY=[], &(0x7f0000000b80)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="1400000035000b63717a3c4a01d8985b0808aa78", 0x14}, {&(0x7f0000000340)="eec80e33f7156c3d24024abfec23163bcae8a87851122520f5716c30201ba7697e1a9e2d2ce993cc7db0e0eb3b12fdfe137c0344e7d3a627e66714a4a2a0475d4957825d51b56089f78207588d97c1e28550847ae886f243921968c9ca588cdcf6b54f2826466689d0e323c158f8aa69dc4b78d428e5a7c4e78877dbb6664f7591efad", 0x83}, {&(0x7f0000000400)}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r8, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x102) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000440)=0x3, 0x12) setsockopt$sock_attach_bpf(r3, 0x29, 0x10, 0x0, 0x1300) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='a'], 0x9) ioctl$TUNSETIFF(r0, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00', 0x800}) 1.429741475s ago: executing program 2 (id=13717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x830eb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000780)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xc}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b000000"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x9, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0xb, &(0x7f00000005c0)=@framed={{}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4, 0x0, 0x0, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x0, 0xe, 0x0, &(0x7f0000000700)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782700000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000840), 0x8901, 0x0) sendmsg$tipc(r1, &(0x7f0000001340)={&(0x7f0000000b00)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x4, 0x3}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000001280)="5be05bc11bf75804fba58b3e03121741320711f1232d8ff821039f292fb05c8164380284bb62869fec4a8f7b028bee09b16b71e9043f42fde4d4962552a0d19b2644bd20b7a739bfa2", 0x49}], 0x1, 0x0, 0x0, 0x8004}, 0x4001) perf_event_open(&(0x7f0000000880)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x1e, 0x4, &(0x7f00000009c0)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2e}]}, &(0x7f0000000a00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000a80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000e80)='GPL\x00', 0x0, 0x1f6, &(0x7f0000000ec0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000f80), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="1830000001000400000000000000000095"], &(0x7f0000001240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000001040)={r6, &(0x7f0000001080), &(0x7f00000010c0)=""/73}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 627.029126ms ago: executing program 3 (id=13718): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000240)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x4b}, [@ldst={0x4}]}, &(0x7f0000000280)='GPL\x00', 0x2, 0x3f7, &(0x7f00000002c0)=""/195}, 0x48) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000019c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r1 = perf_event_open(&(0x7f0000001a00)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0x5, 0x5, &(0x7f0000001b40)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000001bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) r4 = socket$kcm(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c8c00005f00071b189da80400008000000000af1f"], 0xfe33) sendmsg$kcm(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c80)}, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000001d00)=ANY=[], 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x2, 0x10, &(0x7f0000001e40)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe00}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000001ec0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000001980)="04", 0x1}], 0x1}, 0x8054) r6 = socket$kcm(0x2, 0x5, 0x0) recvmsg(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x102) setsockopt$sock_attach_bpf(r6, 0x1, 0x7, &(0x7f00000017c0), 0x43) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 67.588173ms ago: executing program 2 (id=13719): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x6, 0x3, &(0x7f0000001700)=ANY=[@ANYBLOB="1800000093030000000000000095000000000000000000003214b1499a5f3b2e6caa1fa4e1a2b038133036dd9fec66868c882e7c9919f3115ab6000000007dca7753"], &(0x7f0000000140)='GPL\x00', 0x903, 0x16, &(0x7f0000000000)=""/22, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x7d, 0xa6, 0x8, 0xf8, 0x0, 0x4d7e, 0x800, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xd9, 0x2, @perf_config_ext={0x9, 0x401}, 0x2900, 0x401, 0x5, 0x7, 0x1, 0x8001, 0x40, 0x0, 0x7fff, 0x0, 0x6}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x300440c4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000005000000000000cbd55603df6aac3a110ced6cbbe85a3e3f2b092355e23b418ae3a8bb14f04abc3c4107bd50dc4984ab9a96319502d14ff2477df77d6d6b1a41f90700b23136b6c181ec8cee11778abbb21f6374a80f47e2fffc742233febc3f3a17b55dfb8a7326c76384c6fcb06bd47a20b34d7e731b05b3f9ba675f9b8d8cdf88221de4e2de39fd3e804cc67372f2bfb69cc28517bfa5e912d94faa9386385ba6d053a4295232cbf2"], 0x0, 0x26}, 0x20) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000500)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000540)=[{&(0x7f00000005c0)="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", 0x3eb}, {&(0x7f00000009c0)="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", 0x614}, {&(0x7f0000001000)='\'', 0x1}, {&(0x7f0000001040)="2d9f28eb5907570ca68ddf36b625c8ea7d3037f6b95304442b56f5e41fff2cd2db37275ad4c1f13a7449d9079e4c63a309621e3c0b", 0x35}, {&(0x7f0000001080)="3c68dd0118fcf2092a657921635175", 0xf}], 0x5, &(0x7f00000010c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) socket$kcm(0x29, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001100)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001140), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000001180)='notify_on_release\x00', 0x2, 0x0) close(0x3) r5 = perf_event_open(&(0x7f00000011c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x5, 0x5, &(0x7f0000001300)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) perf_event_open(&(0x7f0000001380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_pressure(r3, &(0x7f0000001400)='cpu.pressure\x00', 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f00000014c0)="5c0000001200e96c52d0e3d86e17aa0a076b876c1d0000007ea60864160af3650400410038001d001931a0e69ee517d3efc532ff000000a705251e618293c600000000005b5289b80da5434b9d00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001540)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001580), 0x200002, 0x0) r9 = openat$cgroup_netprio_ifpriomap(r8, &(0x7f00000015c0), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r9, &(0x7f0000001600)=ANY=[@ANYBLOB='gretap0 8'], 0xa) r10 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r10, &(0x7f0000001640)={&(0x7f0000001680)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) write$cgroup_int(r4, &(0x7f00000016c0)=0xfffffffffffffffc, 0x12) 0s ago: executing program 0 (id=13720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x6, 0x4, 0x4, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x10, &(0x7f00000003c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000440)=r2, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x3, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) write$cgroup_type(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x4, &(0x7f0000000880)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r5, 0x0, 0xe, 0x0, &(0x7f0000000bc0)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) kernel console output (not intermixed with test programs): ] Bluetooth: hci1: command tx timeout [ 1978.400236][ T9053] hsr_slave_0: entered promiscuous mode [ 1978.411788][ T9097] syz.2.11776[9097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1978.411947][ T9097] syz.2.11776[9097] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1978.456346][ T9053] hsr_slave_1: entered promiscuous mode [ 1978.484220][ T9053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1978.495447][ T9053] Cannot create hsr debugfs directory [ 1978.824246][ T9110] netlink: 'syz.3.11779': attribute type 10 has an invalid length. [ 1978.835874][ T9111] netlink: 'syz.3.11779': attribute type 10 has an invalid length. [ 1978.977232][ T9053] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.159457][ T9053] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.309555][ T9053] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1979.481648][ T9053] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1980.009912][ T9053] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1980.031646][ T9053] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1980.059147][ T9053] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1980.087561][ T9053] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1980.262915][ T9053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1980.298195][ T9053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1980.324337][ T4827] bridge0: port 1(bridge_slave_0) entered blocking state [ 1980.331629][ T4827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1980.365997][ T2347] Bluetooth: hci1: command tx timeout [ 1980.395870][ T4827] bridge0: port 2(bridge_slave_1) entered blocking state [ 1980.403108][ T4827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1980.911214][ T9162] sit0: entered promiscuous mode [ 1981.210430][ T9053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1981.320855][ T9053] veth0_vlan: entered promiscuous mode [ 1981.352934][ T9053] veth1_vlan: entered promiscuous mode [ 1981.410769][ T9053] veth0_macvtap: entered promiscuous mode [ 1981.459275][ T9053] veth1_macvtap: entered promiscuous mode [ 1981.523582][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1981.537975][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.551677][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1981.585288][ T9053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1981.615582][ T9053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1981.627800][ T9053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1981.643927][ T9053] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.653954][ T9053] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.665982][ T9053] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.674790][ T9053] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1981.847572][ T4846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.875768][ T4846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1981.952410][ T4846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1981.975509][ T4846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1982.445493][ T2347] Bluetooth: hci1: command tx timeout [ 1983.266722][ T9219] netlink: 'syz.3.11822': attribute type 2 has an invalid length. [ 1983.274746][ T9219] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.11822'. [ 1983.400812][ T9225] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.11822'. [ 1984.526438][ T2347] Bluetooth: hci1: command tx timeout [ 1986.801191][ T9272] FAULT_INJECTION: forcing a failure. [ 1986.801191][ T9272] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1986.824400][ T9272] CPU: 1 PID: 9272 Comm: syz.1.11838 Not tainted syzkaller #0 [ 1986.831972][ T9272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1986.842105][ T9272] Call Trace: [ 1986.845449][ T9272] [ 1986.848443][ T9272] dump_stack_lvl+0x18c/0x250 [ 1986.853223][ T9272] ? show_regs_print_info+0x20/0x20 [ 1986.858509][ T9272] ? load_image+0x420/0x420 [ 1986.863094][ T9272] ? __might_fault+0xaa/0x120 [ 1986.867938][ T9272] ? __lock_acquire+0x7eb0/0x7eb0 [ 1986.873137][ T9272] should_fail_ex+0x394/0x4c0 [ 1986.877958][ T9272] _copy_from_user+0x2f/0xe0 [ 1986.882624][ T9272] __sys_bpf+0x23e/0x890 [ 1986.886946][ T9272] ? bpf_link_show_fdinfo+0x560/0x560 [ 1986.892432][ T9272] ? lock_chain_count+0x20/0x20 [ 1986.897429][ T9272] __x64_sys_bpf+0x7c/0x90 [ 1986.901915][ T9272] do_syscall_64+0x55/0xb0 [ 1986.906405][ T9272] ? clear_bhb_loop+0x40/0x90 [ 1986.911159][ T9272] ? clear_bhb_loop+0x40/0x90 [ 1986.915916][ T9272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1986.921874][ T9272] RIP: 0033:0x7fac5199fb19 [ 1986.926366][ T9272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1986.946059][ T9272] RSP: 002b:00007fac52937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1986.954564][ T9272] RAX: ffffffffffffffda RBX: 00007fac51c25fa0 RCX: 00007fac5199fb19 [ 1986.962624][ T9272] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1986.970722][ T9272] RBP: 00007fac52937090 R08: 0000000000000000 R09: 0000000000000000 [ 1986.978758][ T9272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1986.986794][ T9272] R13: 00007fac51c26038 R14: 00007fac51c25fa0 R15: 00007ffd4e3259e8 [ 1986.994868][ T9272] [ 1990.780877][ T9334] netlink: 'syz.1.11862': attribute type 10 has an invalid length. [ 1994.358131][ T9388] FAULT_INJECTION: forcing a failure. [ 1994.358131][ T9388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1994.393038][ T9388] CPU: 0 PID: 9388 Comm: syz.1.11886 Not tainted syzkaller #0 [ 1994.401376][ T9388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1994.411491][ T9388] Call Trace: [ 1994.414848][ T9388] [ 1994.417821][ T9388] dump_stack_lvl+0x18c/0x250 [ 1994.422564][ T9388] ? show_regs_print_info+0x20/0x20 [ 1994.427831][ T9388] ? load_image+0x420/0x420 [ 1994.432396][ T9388] ? __might_fault+0xaa/0x120 [ 1994.437141][ T9388] ? __lock_acquire+0x7eb0/0x7eb0 [ 1994.442228][ T9388] should_fail_ex+0x394/0x4c0 [ 1994.446980][ T9388] _copy_from_user+0x2f/0xe0 [ 1994.451713][ T9388] __sys_bpf+0x23e/0x890 [ 1994.456035][ T9388] ? bpf_link_show_fdinfo+0x560/0x560 [ 1994.461483][ T9388] ? lock_chain_count+0x20/0x20 [ 1994.466409][ T9388] __x64_sys_bpf+0x7c/0x90 [ 1994.470892][ T9388] do_syscall_64+0x55/0xb0 [ 1994.475366][ T9388] ? clear_bhb_loop+0x40/0x90 [ 1994.480109][ T9388] ? clear_bhb_loop+0x40/0x90 [ 1994.484849][ T9388] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1994.490799][ T9388] RIP: 0033:0x7fac5199fb19 [ 1994.495261][ T9388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1994.514918][ T9388] RSP: 002b:00007fac52937028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1994.523392][ T9388] RAX: ffffffffffffffda RBX: 00007fac51c25fa0 RCX: 00007fac5199fb19 [ 1994.531446][ T9388] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 1994.539512][ T9388] RBP: 00007fac52937090 R08: 0000000000000000 R09: 0000000000000000 [ 1994.547551][ T9388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1994.555615][ T9388] R13: 00007fac51c26038 R14: 00007fac51c25fa0 R15: 00007ffd4e3259e8 [ 1994.563658][ T9388] [ 1994.960250][ T9397] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.11890'. [ 1994.988733][ T9397] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1997.024743][ T9447] mac80211_hwsim hwsim235 wlan0: left promiscuous mode [ 1997.056282][ T9447] mac80211_hwsim hwsim235 wlan0: left allmulticast mode [ 1997.211891][ T9448] mac80211_hwsim hwsim235 wlan0: entered promiscuous mode [ 1997.232017][ T9448] mac80211_hwsim hwsim235 wlan0: entered allmulticast mode [ 2009.889029][ T9611] netlink: 203100 bytes leftover after parsing attributes in process `syz.3.11978'. [ 2009.949305][ T9611] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2009.969320][ T9611] CPU: 0 PID: 9611 Comm: syz.3.11978 Not tainted syzkaller #0 [ 2009.976880][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2009.987028][ T9611] Call Trace: [ 2009.990351][ T9611] [ 2009.993326][ T9611] dump_stack_lvl+0x18c/0x250 [ 2009.998082][ T9611] ? show_regs_print_info+0x20/0x20 [ 2010.003349][ T9611] ? load_image+0x420/0x420 [ 2010.007934][ T9611] sysfs_warn_dup+0x8e/0xa0 [ 2010.012594][ T9611] sysfs_do_create_link_sd+0xc0/0x110 [ 2010.018092][ T9611] device_add_class_symlinks+0x1cf/0x240 [ 2010.023826][ T9611] device_add+0x4f9/0xc40 [ 2010.028236][ T9611] wiphy_register+0x1f24/0x2c70 [ 2010.033206][ T9611] ? cfg80211_event_work+0x40/0x40 [ 2010.038387][ T9611] ? minstrel_ht_alloc+0x88a/0x990 [ 2010.043582][ T9611] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2010.049741][ T9611] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2010.055372][ T9611] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2010.061022][ T9611] ? ieee80211_tasklet_handler+0x20/0x20 [ 2010.066732][ T9611] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2010.072699][ T9611] ? __debug_object_init+0xec/0x450 [ 2010.077988][ T9611] ? __asan_memset+0x22/0x40 [ 2010.082651][ T9611] ? __hrtimer_init+0x189/0x270 [ 2010.087573][ T9611] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2010.093357][ T9611] ? mac80211_hwsim_free+0x220/0x220 [ 2010.098721][ T9611] ? rcu_is_watching+0x15/0xb0 [ 2010.103559][ T9611] ? kstrndup+0xbd/0x140 [ 2010.107879][ T9611] hwsim_new_radio_nl+0xdad/0x1a70 [ 2010.113039][ T9611] ? __nla_validate+0x50/0x50 [ 2010.117773][ T9611] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2010.124157][ T9611] ? __nla_parse+0x40/0x50 [ 2010.128642][ T9611] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2010.135033][ T9611] genl_family_rcv_msg_doit+0x21a/0x310 [ 2010.140626][ T9611] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2010.146562][ T9611] ? bpf_lsm_capable+0x9/0x10 [ 2010.151278][ T9611] ? security_capable+0x89/0xb0 [ 2010.156171][ T9611] genl_rcv_msg+0x611/0x7a0 [ 2010.160720][ T9611] ? genl_bind+0x360/0x360 [ 2010.165170][ T9611] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2010.171557][ T9611] ? ref_tracker_free+0x686/0x830 [ 2010.176654][ T9611] netlink_rcv_skb+0x235/0x4c0 [ 2010.181645][ T9611] ? genl_bind+0x360/0x360 [ 2010.186106][ T9611] ? netlink_ack+0x1160/0x1160 [ 2010.190911][ T9611] ? __lock_acquire+0x7eb0/0x7eb0 [ 2010.195986][ T9611] ? down_read+0x1ac/0x2e0 [ 2010.200468][ T9611] genl_rcv+0x28/0x40 [ 2010.204483][ T9611] netlink_unicast+0x856/0x9e0 [ 2010.209306][ T9611] netlink_sendmsg+0x8d0/0xbf0 [ 2010.214135][ T9611] ? netlink_getsockopt+0x590/0x590 [ 2010.219370][ T9611] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2010.224961][ T9611] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2010.230282][ T9611] ? security_socket_sendmsg+0x80/0xa0 [ 2010.235777][ T9611] ? netlink_getsockopt+0x590/0x590 [ 2010.241007][ T9611] ____sys_sendmsg+0x61b/0x980 [ 2010.245808][ T9611] ? __asan_memset+0x22/0x40 [ 2010.250436][ T9611] ? __sys_sendmsg_sock+0x30/0x30 [ 2010.255512][ T9611] ? __import_iovec+0x5f2/0x850 [ 2010.260421][ T9611] ? import_iovec+0x73/0xa0 [ 2010.264973][ T9611] ___sys_sendmsg+0x2a6/0x360 [ 2010.269695][ T9611] ? __sys_sendmsg+0x2b0/0x2b0 [ 2010.274547][ T9611] ? ktime_get+0x7f/0x280 [ 2010.278945][ T9611] __se_sys_sendmsg+0x1d0/0x2c0 [ 2010.283928][ T9611] ? __x64_sys_sendmsg+0x80/0x80 [ 2010.288921][ T9611] ? lockdep_hardirqs_on+0x98/0x150 [ 2010.294157][ T9611] do_syscall_64+0x55/0xb0 [ 2010.298731][ T9611] ? clear_bhb_loop+0x40/0x90 [ 2010.303494][ T9611] ? clear_bhb_loop+0x40/0x90 [ 2010.308344][ T9611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2010.314285][ T9611] RIP: 0033:0x7f245059fb19 [ 2010.318738][ T9611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2010.338390][ T9611] RSP: 002b:00007f2451448028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2010.346839][ T9611] RAX: ffffffffffffffda RBX: 00007f2450825fa0 RCX: 00007f245059fb19 [ 2010.354934][ T9611] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2010.362931][ T9611] RBP: 00007f2450637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2010.370970][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2010.378987][ T9611] R13: 00007f2450826038 R14: 00007f2450825fa0 R15: 00007ffc8150ab08 [ 2010.387023][ T9611] [ 2010.768147][ T9055] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2010.829258][ T9055] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2010.866119][ T9055] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2010.880002][ T9055] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2010.889260][ T9055] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2010.900626][ T9055] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2010.954783][ T9618] rxe_eth0 speed is unknown, defaulting to 1000 [ 2011.940187][ T9618] chnl_net:caif_netlink_parms(): no params data found [ 2012.087105][ T9618] bridge0: port 1(bridge_slave_0) entered blocking state [ 2012.094531][ T9618] bridge0: port 1(bridge_slave_0) entered disabled state [ 2012.102699][ T9618] bridge_slave_0: entered allmulticast mode [ 2012.113847][ T9618] bridge_slave_0: entered promiscuous mode [ 2012.123611][ T9618] bridge0: port 2(bridge_slave_1) entered blocking state [ 2012.134057][ T9618] bridge0: port 2(bridge_slave_1) entered disabled state [ 2012.148681][ T9618] bridge_slave_1: entered allmulticast mode [ 2012.157270][ T9618] bridge_slave_1: entered promiscuous mode [ 2012.206660][ T9618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2012.274072][ T9618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2012.343068][ T9618] team0: Port device team_slave_0 added [ 2012.353488][ T9618] team0: Port device team_slave_1 added [ 2012.399063][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2012.406885][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.434010][ T9618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2012.448023][ T9618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2012.455224][ T9618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2012.481673][ T9618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2012.584114][ T9618] hsr_slave_0: entered promiscuous mode [ 2012.591175][ T9618] hsr_slave_1: entered promiscuous mode [ 2012.597894][ T9618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2012.613273][ T9618] Cannot create hsr debugfs directory [ 2012.797644][ T9618] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.889232][ T9618] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2012.925503][ T9055] Bluetooth: hci0: command tx timeout [ 2012.962418][ T9618] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.067370][ T9618] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.293277][ T9618] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2013.305066][ T9618] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2013.316516][ T9618] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2013.342576][ T9618] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2013.481218][ T9618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2013.512961][ T9618] 8021q: adding VLAN 0 to HW filter on device team0 [ 2013.531806][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state [ 2013.539065][ T4855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2013.570355][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state [ 2013.577633][ T4855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2013.613115][ T9618] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2013.625615][ T9618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2013.703688][ T4844] hsr_slave_0: left promiscuous mode [ 2013.726837][ T4844] hsr_slave_1: left promiscuous mode [ 2013.743210][ T4844] bridge_slave_0: left allmulticast mode [ 2013.749576][ T4844] bridge_slave_0: left promiscuous mode [ 2013.757755][ T4844] bridge0: port 1(bridge_slave_0) entered disabled state [ 2013.784420][ T4844] veth1_vlan: left promiscuous mode [ 2014.431184][ T4844]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 2014.482508][ T4844]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 2014.783212][ T4844]  (unregistering): Released all slaves [ 2014.971634][ T9618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2015.011851][ T9055] Bluetooth: hci0: command tx timeout [ 2015.044943][ T9618] veth0_vlan: entered promiscuous mode [ 2015.061914][ T9618] veth1_vlan: entered promiscuous mode [ 2015.134202][ T9618] veth0_macvtap: entered promiscuous mode [ 2015.154542][ T9618] veth1_macvtap: entered promiscuous mode [ 2015.181404][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.194070][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.204193][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2015.214733][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.227710][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2015.242810][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.254366][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.264993][ T9618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2015.278686][ T9618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2015.290989][ T9618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2015.305105][ T9618] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.314026][ T9618] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.323423][ T9618] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.333166][ T9618] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2015.413117][ T4844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2015.428630][ T4844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2015.459719][ T4855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2015.468426][ T4855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2017.085800][ T9055] Bluetooth: hci0: command tx timeout [ 2018.798547][ T9700] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.12003'. [ 2018.855413][ T9700] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2018.873554][ T9700] CPU: 0 PID: 9700 Comm: syz.0.12003 Not tainted syzkaller #0 [ 2018.881317][ T9700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2018.891421][ T9700] Call Trace: [ 2018.894755][ T9700] [ 2018.897742][ T9700] dump_stack_lvl+0x18c/0x250 [ 2018.902517][ T9700] ? show_regs_print_info+0x20/0x20 [ 2018.907786][ T9700] ? load_image+0x420/0x420 [ 2018.912379][ T9700] sysfs_warn_dup+0x8e/0xa0 [ 2018.916949][ T9700] sysfs_do_create_link_sd+0xc0/0x110 [ 2018.922394][ T9700] device_add_class_symlinks+0x1cf/0x240 [ 2018.928102][ T9700] device_add+0x4f9/0xc40 [ 2018.932513][ T9700] wiphy_register+0x1f24/0x2c70 [ 2018.937461][ T9700] ? cfg80211_event_work+0x40/0x40 [ 2018.942661][ T9700] ? minstrel_ht_alloc+0x88a/0x990 [ 2018.948023][ T9700] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2018.954159][ T9700] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2018.959679][ T9700] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2018.965272][ T9700] ? ieee80211_tasklet_handler+0x20/0x20 [ 2018.970963][ T9700] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2018.977077][ T9700] ? __debug_object_init+0xec/0x450 [ 2018.982324][ T9700] ? __asan_memset+0x22/0x40 [ 2018.986959][ T9700] ? __hrtimer_init+0x189/0x270 [ 2018.991850][ T9700] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2018.997622][ T9700] ? mac80211_hwsim_free+0x220/0x220 [ 2019.002939][ T9700] ? rcu_is_watching+0x15/0xb0 [ 2019.007792][ T9700] ? kstrndup+0xbd/0x140 [ 2019.012094][ T9700] hwsim_new_radio_nl+0xdad/0x1a70 [ 2019.017249][ T9700] ? __nla_validate+0x50/0x50 [ 2019.021976][ T9700] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2019.028353][ T9700] ? __nla_parse+0x40/0x50 [ 2019.032838][ T9700] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2019.039304][ T9700] genl_family_rcv_msg_doit+0x21a/0x310 [ 2019.044983][ T9700] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2019.050923][ T9700] ? bpf_lsm_capable+0x9/0x10 [ 2019.055646][ T9700] ? security_capable+0x89/0xb0 [ 2019.060628][ T9700] genl_rcv_msg+0x611/0x7a0 [ 2019.065177][ T9700] ? genl_bind+0x360/0x360 [ 2019.069624][ T9700] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2019.076062][ T9700] netlink_rcv_skb+0x235/0x4c0 [ 2019.080878][ T9700] ? genl_bind+0x360/0x360 [ 2019.085373][ T9700] ? netlink_ack+0x1160/0x1160 [ 2019.090213][ T9700] ? __lock_acquire+0x7eb0/0x7eb0 [ 2019.095284][ T9700] ? down_read+0x1ac/0x2e0 [ 2019.099777][ T9700] genl_rcv+0x28/0x40 [ 2019.103800][ T9700] netlink_unicast+0x856/0x9e0 [ 2019.108627][ T9700] netlink_sendmsg+0x8d0/0xbf0 [ 2019.113454][ T9700] ? netlink_getsockopt+0x590/0x590 [ 2019.118690][ T9700] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2019.124287][ T9700] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2019.129616][ T9700] ? security_socket_sendmsg+0x80/0xa0 [ 2019.135112][ T9700] ? netlink_getsockopt+0x590/0x590 [ 2019.140345][ T9700] ____sys_sendmsg+0x61b/0x980 [ 2019.145150][ T9700] ? __asan_memset+0x22/0x40 [ 2019.149868][ T9700] ? __sys_sendmsg_sock+0x30/0x30 [ 2019.154923][ T9700] ? __import_iovec+0x5f2/0x850 [ 2019.159849][ T9700] ? import_iovec+0x73/0xa0 [ 2019.164396][ T9700] ___sys_sendmsg+0x2a6/0x360 [ 2019.169119][ T9700] ? __sys_sendmsg+0x2b0/0x2b0 [ 2019.173933][ T9700] ? ktime_get+0x7f/0x280 [ 2019.178339][ T9700] __se_sys_sendmsg+0x1d0/0x2c0 [ 2019.183247][ T9700] ? __x64_sys_sendmsg+0x80/0x80 [ 2019.188279][ T9700] do_syscall_64+0x55/0xb0 [ 2019.192765][ T9700] ? clear_bhb_loop+0x40/0x90 [ 2019.197488][ T9700] ? clear_bhb_loop+0x40/0x90 [ 2019.202211][ T9700] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2019.208146][ T9700] RIP: 0033:0x7f596a59fb19 [ 2019.212598][ T9700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2019.232247][ T9700] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2019.240786][ T9700] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2019.248798][ T9700] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2019.256808][ T9700] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2019.264844][ T9700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2019.272851][ T9700] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2019.280921][ T9700] [ 2019.337676][ T9055] Bluetooth: hci0: command tx timeout [ 2019.855402][ T9714] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.12018'. [ 2019.976945][ T9714] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2019.990781][ T9714] CPU: 1 PID: 9714 Comm: syz.1.12018 Not tainted syzkaller #0 [ 2019.998326][ T9714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2020.008433][ T9714] Call Trace: [ 2020.011762][ T9714] [ 2020.014830][ T9714] dump_stack_lvl+0x18c/0x250 [ 2020.019585][ T9714] ? show_regs_print_info+0x20/0x20 [ 2020.024851][ T9714] ? load_image+0x420/0x420 [ 2020.029446][ T9714] sysfs_warn_dup+0x8e/0xa0 [ 2020.034014][ T9714] sysfs_do_create_link_sd+0xc0/0x110 [ 2020.039447][ T9714] device_add_class_symlinks+0x1cf/0x240 [ 2020.045142][ T9714] device_add+0x4f9/0xc40 [ 2020.049534][ T9714] wiphy_register+0x1f24/0x2c70 [ 2020.054481][ T9714] ? cfg80211_event_work+0x40/0x40 [ 2020.059666][ T9714] ? minstrel_ht_alloc+0x88a/0x990 [ 2020.064849][ T9714] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2020.070992][ T9714] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2020.076607][ T9714] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2020.082214][ T9714] ? ieee80211_tasklet_handler+0x20/0x20 [ 2020.087883][ T9714] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2020.093813][ T9714] ? __debug_object_init+0xec/0x450 [ 2020.099047][ T9714] ? __asan_memset+0x22/0x40 [ 2020.103686][ T9714] ? __hrtimer_init+0x189/0x270 [ 2020.108585][ T9714] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2020.114368][ T9714] ? mac80211_hwsim_free+0x220/0x220 [ 2020.119683][ T9714] ? rcu_is_watching+0x15/0xb0 [ 2020.124489][ T9714] ? kstrndup+0xbd/0x140 [ 2020.128781][ T9714] hwsim_new_radio_nl+0xdad/0x1a70 [ 2020.133957][ T9714] ? __nla_validate+0x50/0x50 [ 2020.138708][ T9714] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2020.145084][ T9714] ? __nla_parse+0x40/0x50 [ 2020.156131][ T9714] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2020.162520][ T9714] genl_family_rcv_msg_doit+0x21a/0x310 [ 2020.168120][ T9714] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2020.174070][ T9714] ? bpf_lsm_capable+0x9/0x10 [ 2020.178803][ T9714] ? security_capable+0x89/0xb0 [ 2020.183743][ T9714] genl_rcv_msg+0x611/0x7a0 [ 2020.188377][ T9714] ? genl_bind+0x360/0x360 [ 2020.192826][ T9714] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2020.199189][ T9714] ? ref_tracker_free+0x686/0x830 [ 2020.204255][ T9714] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2020.209604][ T9714] netlink_rcv_skb+0x235/0x4c0 [ 2020.214404][ T9714] ? genl_bind+0x360/0x360 [ 2020.218852][ T9714] ? netlink_ack+0x1160/0x1160 [ 2020.223664][ T9714] ? __lock_acquire+0x7eb0/0x7eb0 [ 2020.228742][ T9714] ? down_read+0x1ac/0x2e0 [ 2020.233211][ T9714] genl_rcv+0x28/0x40 [ 2020.237233][ T9714] netlink_unicast+0x856/0x9e0 [ 2020.242057][ T9714] netlink_sendmsg+0x8d0/0xbf0 [ 2020.246876][ T9714] ? netlink_getsockopt+0x590/0x590 [ 2020.252113][ T9714] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2020.257709][ T9714] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2020.263030][ T9714] ? security_socket_sendmsg+0x80/0xa0 [ 2020.268546][ T9714] ? netlink_getsockopt+0x590/0x590 [ 2020.273778][ T9714] ____sys_sendmsg+0x61b/0x980 [ 2020.278584][ T9714] ? __asan_memset+0x22/0x40 [ 2020.283304][ T9714] ? __sys_sendmsg_sock+0x30/0x30 [ 2020.288356][ T9714] ? __import_iovec+0x5f2/0x850 [ 2020.293252][ T9714] ? import_iovec+0x73/0xa0 [ 2020.297800][ T9714] ___sys_sendmsg+0x2a6/0x360 [ 2020.302527][ T9714] ? __sys_sendmsg+0x2b0/0x2b0 [ 2020.307353][ T9714] ? trace_call_bpf+0xc3/0x6c0 [ 2020.312153][ T9714] ? trace_call_bpf+0x5e9/0x6c0 [ 2020.317081][ T9714] __se_sys_sendmsg+0x1d0/0x2c0 [ 2020.321993][ T9714] ? perf_trace_preemptirq_template+0x269/0x330 [ 2020.328285][ T9714] ? __x64_sys_sendmsg+0x80/0x80 [ 2020.333295][ T9714] ? lockdep_hardirqs_on+0x98/0x150 [ 2020.338532][ T9714] do_syscall_64+0x55/0xb0 [ 2020.342990][ T9714] ? clear_bhb_loop+0x40/0x90 [ 2020.347726][ T9714] ? clear_bhb_loop+0x40/0x90 [ 2020.352469][ T9714] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2020.358400][ T9714] RIP: 0033:0x7fac5199fb19 [ 2020.362845][ T9714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2020.382487][ T9714] RSP: 002b:00007fac52937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2020.390943][ T9714] RAX: ffffffffffffffda RBX: 00007fac51c25fa0 RCX: 00007fac5199fb19 [ 2020.398986][ T9714] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2020.407008][ T9714] RBP: 00007fac51a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2020.415027][ T9714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2020.423134][ T9714] R13: 00007fac51c26038 R14: 00007fac51c25fa0 R15: 00007ffd4e3259e8 [ 2020.431156][ T9714] [ 2026.981141][ T9799] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.12036'. [ 2027.034794][ T9799] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2027.044162][ T9799] CPU: 0 PID: 9799 Comm: syz.0.12036 Not tainted syzkaller #0 [ 2027.051726][ T9799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2027.061834][ T9799] Call Trace: [ 2027.065203][ T9799] [ 2027.068186][ T9799] dump_stack_lvl+0x18c/0x250 [ 2027.072932][ T9799] ? show_regs_print_info+0x20/0x20 [ 2027.078188][ T9799] ? load_image+0x420/0x420 [ 2027.082770][ T9799] sysfs_warn_dup+0x8e/0xa0 [ 2027.087333][ T9799] sysfs_do_create_link_sd+0xc0/0x110 [ 2027.092783][ T9799] device_add_class_symlinks+0x1cf/0x240 [ 2027.098484][ T9799] device_add+0x4f9/0xc40 [ 2027.102875][ T9799] wiphy_register+0x1f24/0x2c70 [ 2027.107814][ T9799] ? cfg80211_event_work+0x40/0x40 [ 2027.112986][ T9799] ? minstrel_ht_alloc+0x88a/0x990 [ 2027.118164][ T9799] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2027.124296][ T9799] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2027.129817][ T9799] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2027.135523][ T9799] ? ieee80211_tasklet_handler+0x20/0x20 [ 2027.141215][ T9799] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2027.147162][ T9799] ? __debug_object_init+0xec/0x450 [ 2027.152406][ T9799] ? __asan_memset+0x22/0x40 [ 2027.157049][ T9799] ? __hrtimer_init+0x189/0x270 [ 2027.161940][ T9799] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2027.167742][ T9799] ? mac80211_hwsim_free+0x220/0x220 [ 2027.173067][ T9799] ? rcu_is_watching+0x15/0xb0 [ 2027.177875][ T9799] ? kstrndup+0xbd/0x140 [ 2027.182167][ T9799] hwsim_new_radio_nl+0xdad/0x1a70 [ 2027.187319][ T9799] ? __nla_validate+0x50/0x50 [ 2027.192066][ T9799] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2027.198471][ T9799] ? __nla_parse+0x40/0x50 [ 2027.202942][ T9799] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2027.209422][ T9799] genl_family_rcv_msg_doit+0x21a/0x310 [ 2027.215009][ T9799] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2027.220950][ T9799] ? bpf_lsm_capable+0x9/0x10 [ 2027.225665][ T9799] ? security_capable+0x89/0xb0 [ 2027.230578][ T9799] genl_rcv_msg+0x611/0x7a0 [ 2027.235121][ T9799] ? genl_bind+0x360/0x360 [ 2027.239592][ T9799] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2027.245981][ T9799] netlink_rcv_skb+0x235/0x4c0 [ 2027.250791][ T9799] ? genl_bind+0x360/0x360 [ 2027.255242][ T9799] ? netlink_ack+0x1160/0x1160 [ 2027.260055][ T9799] ? __lock_acquire+0x7eb0/0x7eb0 [ 2027.265142][ T9799] ? down_read+0x1ac/0x2e0 [ 2027.269596][ T9799] genl_rcv+0x28/0x40 [ 2027.273610][ T9799] netlink_unicast+0x856/0x9e0 [ 2027.278448][ T9799] netlink_sendmsg+0x8d0/0xbf0 [ 2027.283259][ T9799] ? netlink_getsockopt+0x590/0x590 [ 2027.288497][ T9799] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2027.294088][ T9799] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2027.299408][ T9799] ? security_socket_sendmsg+0x80/0xa0 [ 2027.304905][ T9799] ? netlink_getsockopt+0x590/0x590 [ 2027.310142][ T9799] ____sys_sendmsg+0x61b/0x980 [ 2027.315039][ T9799] ? __asan_memset+0x22/0x40 [ 2027.319674][ T9799] ? __sys_sendmsg_sock+0x30/0x30 [ 2027.324733][ T9799] ? __import_iovec+0x5f2/0x850 [ 2027.329628][ T9799] ? import_iovec+0x73/0xa0 [ 2027.334182][ T9799] ___sys_sendmsg+0x2a6/0x360 [ 2027.338902][ T9799] ? __sys_sendmsg+0x2b0/0x2b0 [ 2027.343754][ T9799] __se_sys_sendmsg+0x1d0/0x2c0 [ 2027.348663][ T9799] ? __x64_sys_sendmsg+0x80/0x80 [ 2027.353658][ T9799] ? lockdep_hardirqs_on+0x98/0x150 [ 2027.358920][ T9799] do_syscall_64+0x55/0xb0 [ 2027.363374][ T9799] ? clear_bhb_loop+0x40/0x90 [ 2027.368092][ T9799] ? clear_bhb_loop+0x40/0x90 [ 2027.372813][ T9799] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2027.378773][ T9799] RIP: 0033:0x7f596a59fb19 [ 2027.383220][ T9799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2027.402928][ T9799] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2027.411385][ T9799] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2027.419417][ T9799] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2027.427423][ T9799] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2027.435426][ T9799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2027.443444][ T9799] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2027.451643][ T9799] [ 2031.399919][ T9831] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.12050'. [ 2031.458008][ T9831] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2031.486660][ T9831] CPU: 0 PID: 9831 Comm: syz.1.12050 Not tainted syzkaller #0 [ 2031.494273][ T9831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2031.504390][ T9831] Call Trace: [ 2031.507740][ T9831] [ 2031.510720][ T9831] dump_stack_lvl+0x18c/0x250 [ 2031.515475][ T9831] ? show_regs_print_info+0x20/0x20 [ 2031.520744][ T9831] ? load_image+0x420/0x420 [ 2031.525315][ T9831] sysfs_warn_dup+0x8e/0xa0 [ 2031.529882][ T9831] sysfs_do_create_link_sd+0xc0/0x110 [ 2031.535314][ T9831] device_add_class_symlinks+0x1cf/0x240 [ 2031.541031][ T9831] device_add+0x4f9/0xc40 [ 2031.545418][ T9831] wiphy_register+0x1f24/0x2c70 [ 2031.550437][ T9831] ? cfg80211_event_work+0x40/0x40 [ 2031.557135][ T9831] ? minstrel_ht_alloc+0x88a/0x990 [ 2031.562360][ T9831] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2031.568505][ T9831] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2031.574046][ T9831] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2031.579678][ T9831] ? ieee80211_tasklet_handler+0x20/0x20 [ 2031.585360][ T9831] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2031.591313][ T9831] ? __debug_object_init+0xec/0x450 [ 2031.596570][ T9831] ? __asan_memset+0x22/0x40 [ 2031.601231][ T9831] ? __hrtimer_init+0x189/0x270 [ 2031.606190][ T9831] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2031.611993][ T9831] ? mac80211_hwsim_free+0x220/0x220 [ 2031.617335][ T9831] ? rcu_is_watching+0x15/0xb0 [ 2031.622156][ T9831] ? kstrndup+0xbd/0x140 [ 2031.626559][ T9831] hwsim_new_radio_nl+0xdad/0x1a70 [ 2031.631732][ T9831] ? __nla_validate+0x50/0x50 [ 2031.636561][ T9831] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2031.642985][ T9831] ? __nla_parse+0x40/0x50 [ 2031.647464][ T9831] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2031.653856][ T9831] genl_family_rcv_msg_doit+0x21a/0x310 [ 2031.659463][ T9831] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2031.665434][ T9831] ? bpf_lsm_capable+0x9/0x10 [ 2031.670241][ T9831] ? security_capable+0x89/0xb0 [ 2031.675147][ T9831] genl_rcv_msg+0x611/0x7a0 [ 2031.679719][ T9831] ? genl_bind+0x360/0x360 [ 2031.684188][ T9831] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2031.690583][ T9831] netlink_rcv_skb+0x235/0x4c0 [ 2031.695398][ T9831] ? genl_bind+0x360/0x360 [ 2031.699873][ T9831] ? netlink_ack+0x1160/0x1160 [ 2031.704703][ T9831] ? __lock_acquire+0x7eb0/0x7eb0 [ 2031.709808][ T9831] ? down_read+0x1ac/0x2e0 [ 2031.714283][ T9831] genl_rcv+0x28/0x40 [ 2031.718337][ T9831] netlink_unicast+0x856/0x9e0 [ 2031.723189][ T9831] netlink_sendmsg+0x8d0/0xbf0 [ 2031.728036][ T9831] ? netlink_getsockopt+0x590/0x590 [ 2031.733296][ T9831] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2031.738932][ T9831] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2031.744287][ T9831] ? security_socket_sendmsg+0x80/0xa0 [ 2031.749803][ T9831] ? netlink_getsockopt+0x590/0x590 [ 2031.755053][ T9831] ____sys_sendmsg+0x61b/0x980 [ 2031.759881][ T9831] ? __asan_memset+0x22/0x40 [ 2031.764531][ T9831] ? __sys_sendmsg_sock+0x30/0x30 [ 2031.769609][ T9831] ? __import_iovec+0x5f2/0x850 [ 2031.774533][ T9831] ? import_iovec+0x73/0xa0 [ 2031.779090][ T9831] ___sys_sendmsg+0x2a6/0x360 [ 2031.783824][ T9831] ? __sys_sendmsg+0x2b0/0x2b0 [ 2031.788695][ T9831] __se_sys_sendmsg+0x1d0/0x2c0 [ 2031.793643][ T9831] ? __x64_sys_sendmsg+0x80/0x80 [ 2031.798665][ T9831] ? lockdep_hardirqs_on+0x98/0x150 [ 2031.803938][ T9831] do_syscall_64+0x55/0xb0 [ 2031.808452][ T9831] ? clear_bhb_loop+0x40/0x90 [ 2031.813183][ T9831] ? clear_bhb_loop+0x40/0x90 [ 2031.817917][ T9831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2031.823882][ T9831] RIP: 0033:0x7fac5199fb19 [ 2031.828354][ T9831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2031.848011][ T9831] RSP: 002b:00007fac52937028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2031.856488][ T9831] RAX: ffffffffffffffda RBX: 00007fac51c25fa0 RCX: 00007fac5199fb19 [ 2031.864511][ T9831] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2031.872619][ T9831] RBP: 00007fac51a37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2031.880641][ T9831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2031.888941][ T9831] R13: 00007fac51c26038 R14: 00007fac51c25fa0 R15: 00007ffd4e3259e8 [ 2031.896992][ T9831] [ 2033.430553][ T9853] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.12055'. [ 2035.836147][ T9901] netlink: 'syz.0.12077': attribute type 4 has an invalid length. [ 2035.899953][ T9901] netlink: 152 bytes leftover after parsing attributes in process `syz.0.12077'. [ 2036.160167][ T9901] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2036.268495][ T9914] netlink: 'syz.3.12082': attribute type 10 has an invalid length. [ 2036.344579][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.479692][ T9914] bridge_slave_1 (unregistering): left allmulticast mode [ 2036.488526][ T9914] bridge_slave_1 (unregistering): left promiscuous mode [ 2036.503695][ T9914] bridge0: port 2(bridge_slave_1) entered disabled state [ 2036.590705][ T9922] netlink: 'syz.0.12084': attribute type 10 has an invalid length. [ 2036.609138][ T9922] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12084'. [ 2036.635823][ T9922] veth0_vlan: entered allmulticast mode [ 2036.642311][ T9922] bridge0: port 3(veth0_vlan) entered blocking state [ 2036.669601][ T9922] bridge0: port 3(veth0_vlan) entered disabled state [ 2036.692570][ T9922] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2036.993866][ T9942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12090'. [ 2037.005138][ T9942] ÿÃ: renamed from  (while UP) [ 2037.687084][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.693460][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.102896][ T9967] FAULT_INJECTION: forcing a failure. [ 2038.102896][ T9967] name failslab, interval 1, probability 0, space 0, times 0 [ 2038.173687][ T9967] CPU: 1 PID: 9967 Comm: syz.2.12101 Not tainted syzkaller #0 [ 2038.181276][ T9967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2038.191397][ T9967] Call Trace: [ 2038.194718][ T9967] [ 2038.197692][ T9967] dump_stack_lvl+0x18c/0x250 [ 2038.202454][ T9967] ? show_regs_print_info+0x20/0x20 [ 2038.207717][ T9967] ? load_image+0x420/0x420 [ 2038.212279][ T9967] ? __might_sleep+0xe0/0xe0 [ 2038.216973][ T9967] ? __lock_acquire+0x7eb0/0x7eb0 [ 2038.222063][ T9967] should_fail_ex+0x394/0x4c0 [ 2038.226807][ T9967] should_failslab+0x9/0x20 [ 2038.231367][ T9967] slab_pre_alloc_hook+0x59/0x300 [ 2038.236453][ T9967] ? __lock_acquire+0x7eb0/0x7eb0 [ 2038.241535][ T9967] kmem_cache_alloc_node+0x5e/0x320 [ 2038.246792][ T9967] ? __alloc_skb+0x103/0x2c0 [ 2038.251438][ T9967] __alloc_skb+0x103/0x2c0 [ 2038.255913][ T9967] netlink_sendmsg+0x66a/0xbf0 [ 2038.260739][ T9967] ? netlink_getsockopt+0x590/0x590 [ 2038.265990][ T9967] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2038.271603][ T9967] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2038.276952][ T9967] ? security_socket_sendmsg+0x80/0xa0 [ 2038.282475][ T9967] ? netlink_getsockopt+0x590/0x590 [ 2038.287727][ T9967] ____sys_sendmsg+0x61b/0x980 [ 2038.292548][ T9967] ? __asan_memset+0x22/0x40 [ 2038.297224][ T9967] ? __sys_sendmsg_sock+0x30/0x30 [ 2038.302296][ T9967] ? __import_iovec+0x5f2/0x850 [ 2038.307204][ T9967] ? import_iovec+0x73/0xa0 [ 2038.311767][ T9967] ___sys_sendmsg+0x2a6/0x360 [ 2038.316506][ T9967] ? __sys_sendmsg+0x2b0/0x2b0 [ 2038.321371][ T9967] __se_sys_sendmsg+0x1d0/0x2c0 [ 2038.326283][ T9967] ? __x64_sys_sendmsg+0x80/0x80 [ 2038.331297][ T9967] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2038.337241][ T9967] do_syscall_64+0x55/0xb0 [ 2038.341719][ T9967] ? clear_bhb_loop+0x40/0x90 [ 2038.346494][ T9967] ? clear_bhb_loop+0x40/0x90 [ 2038.351228][ T9967] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2038.357183][ T9967] RIP: 0033:0x7f5c59d9fb19 [ 2038.361651][ T9967] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2038.381313][ T9967] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2038.389794][ T9967] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2038.397829][ T9967] RDX: 000000000000c000 RSI: 0000200000000980 RDI: 0000000000000008 [ 2038.405876][ T9967] RBP: 00007f5c5ac51090 R08: 0000000000000000 R09: 0000000000000000 [ 2038.413915][ T9967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2038.421932][ T9967] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2038.429969][ T9967] [ 2039.150725][ T2347] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2039.170540][ T2347] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2039.189499][ T2347] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2039.216591][ T2347] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2039.232342][ T2347] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2039.247996][ T2347] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2040.292958][ T9988] rxe_eth0 speed is unknown, defaulting to 1000 [ 2040.313459][ T9999] netlink: 'syz.2.12114': attribute type 21 has an invalid length. [ 2040.322473][ T9999] netlink: 156 bytes leftover after parsing attributes in process `syz.2.12114'. [ 2040.466768][T10000] sit0: entered allmulticast mode [ 2040.664376][T10007] netlink: 'syz.3.12118': attribute type 3 has an invalid length. [ 2040.687434][T10007] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12118'. [ 2041.129527][ T9988] chnl_net:caif_netlink_parms(): no params data found [ 2041.327637][ T2347] Bluetooth: hci2: command tx timeout [ 2041.723590][ T9988] bridge0: port 1(bridge_slave_0) entered blocking state [ 2041.731559][ T9988] bridge0: port 1(bridge_slave_0) entered disabled state [ 2041.744724][ T9988] bridge_slave_0: entered allmulticast mode [ 2041.783070][ T9988] bridge_slave_0: entered promiscuous mode [ 2041.801883][ T9988] bridge0: port 2(bridge_slave_1) entered blocking state [ 2041.816248][ T9988] bridge0: port 2(bridge_slave_1) entered disabled state [ 2041.823599][ T9988] bridge_slave_1: entered allmulticast mode [ 2041.832829][ T9988] bridge_slave_1: entered promiscuous mode [ 2041.888529][ T9988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2041.916642][ T9988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2042.013228][ T9988] team0: Port device team_slave_0 added [ 2042.037709][ T9988] team0: Port device team_slave_1 added [ 2042.102647][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2042.117782][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.157857][ T9988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2042.188180][ T9988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2042.210996][ T9988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2042.238159][ T9988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2042.381645][ T9988] hsr_slave_0: entered promiscuous mode [ 2042.398063][ T9988] hsr_slave_1: entered promiscuous mode [ 2042.569927][T10054] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12135'. [ 2043.416579][ T2347] Bluetooth: hci2: command tx timeout [ 2043.637311][ T9988] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.819524][ T9988] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2043.854470][T10067] netlink: 'syz.0.12140': attribute type 10 has an invalid length. [ 2044.663758][T10067] team0 (unregistering): Port device team_slave_0 removed [ 2044.725411][T10067] team0 (unregistering): Port device team_slave_1 removed [ 2044.859902][ T9988] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.074557][ T9988] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2045.412595][ T9988] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2045.475561][ T9988] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2045.485481][ T2347] Bluetooth: hci2: command tx timeout [ 2045.510205][ T9988] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2045.520669][T10100] FAULT_INJECTION: forcing a failure. [ 2045.520669][T10100] name failslab, interval 1, probability 0, space 0, times 0 [ 2045.544722][ T9988] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2045.550770][T10100] CPU: 1 PID: 10100 Comm: syz.2.12148 Not tainted syzkaller #0 [ 2045.559100][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2045.569277][T10100] Call Trace: [ 2045.572613][T10100] [ 2045.575588][T10100] dump_stack_lvl+0x18c/0x250 [ 2045.580331][T10100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2045.586566][T10100] ? show_regs_print_info+0x20/0x20 [ 2045.591801][T10100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2045.598014][T10100] ? dump_stack+0x9/0x20 [ 2045.602299][T10100] should_fail_ex+0x394/0x4c0 [ 2045.607020][T10100] should_failslab+0x9/0x20 [ 2045.611553][T10100] slab_pre_alloc_hook+0x59/0x300 [ 2045.616628][T10100] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2045.622227][T10100] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2045.627814][T10100] __kmem_cache_alloc_node+0x53/0x260 [ 2045.633251][T10100] ? bpf_prog_test_run_skb+0x242/0x18f0 [ 2045.638836][T10100] __kmalloc+0xa7/0x240 [ 2045.643036][T10100] bpf_prog_test_run_skb+0x242/0x18f0 [ 2045.648461][T10100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2045.654663][T10100] ? lockdep_hardirqs_on+0x98/0x150 [ 2045.659901][T10100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2045.666166][T10100] ? cpu_online+0x60/0x60 [ 2045.670534][T10100] bpf_prog_test_run+0x31f/0x390 [ 2045.675605][T10100] __sys_bpf+0x49d/0x890 [ 2045.679883][T10100] ? bpf_link_show_fdinfo+0x560/0x560 [ 2045.685303][T10100] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2045.691505][T10100] __x64_sys_bpf+0x7c/0x90 [ 2045.695957][T10100] do_syscall_64+0x55/0xb0 [ 2045.700409][T10100] ? clear_bhb_loop+0x40/0x90 [ 2045.705135][T10100] ? clear_bhb_loop+0x40/0x90 [ 2045.709854][T10100] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2045.715789][T10100] RIP: 0033:0x7f5c59d9fb19 [ 2045.720254][T10100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2045.740063][T10100] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2045.748543][T10100] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2045.756560][T10100] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 2045.764631][T10100] RBP: 00007f5c5ac51090 R08: 0000000000000000 R09: 0000000000000000 [ 2045.772647][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2045.780653][T10100] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2045.788681][T10100] [ 2045.882050][T10105] netlink: 'syz.3.12150': attribute type 25 has an invalid length. [ 2045.894090][T10105] netlink: 'syz.3.12150': attribute type 5 has an invalid length. [ 2045.903289][T10105] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12150'. [ 2046.050725][ T9988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2046.189851][ T9988] 8021q: adding VLAN 0 to HW filter on device team0 [ 2046.223229][ T4814] bridge0: port 1(bridge_slave_0) entered blocking state [ 2046.230540][ T4814] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2046.275330][T10109] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.12151'. [ 2046.300610][ T4802] bridge0: port 2(bridge_slave_1) entered blocking state [ 2046.307881][ T4802] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2046.355317][T10109] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2047.547874][ T9988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2047.565586][ T2347] Bluetooth: hci2: command tx timeout [ 2047.763448][T10137] netlink: 'syz.2.12160': attribute type 10 has an invalid length. [ 2047.779128][T10137] team0: Device ipvlan1 failed to register rx_handler [ 2047.837864][ T9988] veth0_vlan: entered promiscuous mode [ 2047.854598][T10139] Q±6ã�`Ò˜: renamed from lo (while UP) [ 2047.874888][ T9988] veth1_vlan: entered promiscuous mode [ 2047.984400][ T9988] veth0_macvtap: entered promiscuous mode [ 2048.010558][ T9988] veth1_macvtap: entered promiscuous mode [ 2048.084109][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2048.101368][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.111569][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2048.122388][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.137190][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2048.147865][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.182129][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2048.228302][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.280902][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.296010][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.308400][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.318881][ T9988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2048.335893][ T9988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2048.369579][ T9988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2048.429576][ T9988] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.445622][ T9988] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.454441][ T9988] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2048.479386][ T9988] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2049.254758][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.290579][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2049.359077][T10163] netlink: 'syz.2.12168': attribute type 25 has an invalid length. [ 2049.372237][T10163] netlink: 'syz.2.12168': attribute type 28 has an invalid length. [ 2049.384998][ T4802] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2049.406827][ T4802] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2050.086530][T10174] netlink: 'syz.1.12172': attribute type 3 has an invalid length. [ 2050.097287][T10174] netlink: 'syz.1.12172': attribute type 5 has an invalid length. [ 2050.108658][T10174] netlink: 'syz.1.12172': attribute type 6 has an invalid length. [ 2050.126509][T10174] netlink: 197520 bytes leftover after parsing attributes in process `syz.1.12172'. [ 2050.413143][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12175'. [ 2054.063744][T10224] netlink: 188 bytes leftover after parsing attributes in process `syz.0.12189'. [ 2054.422649][T10226] netlink: 203100 bytes leftover after parsing attributes in process `syz.3.12190'. [ 2054.496519][T10226] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2054.505321][T10226] CPU: 0 PID: 10226 Comm: syz.3.12190 Not tainted syzkaller #0 [ 2054.512924][T10226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2054.523018][T10226] Call Trace: [ 2054.526340][T10226] [ 2054.529424][T10226] dump_stack_lvl+0x18c/0x250 [ 2054.534176][T10226] ? show_regs_print_info+0x20/0x20 [ 2054.539473][T10226] ? load_image+0x420/0x420 [ 2054.544052][T10226] sysfs_warn_dup+0x8e/0xa0 [ 2054.548699][T10226] sysfs_do_create_link_sd+0xc0/0x110 [ 2054.554148][T10226] device_add_class_symlinks+0x1cf/0x240 [ 2054.559854][T10226] device_add+0x4f9/0xc40 [ 2054.564242][T10226] wiphy_register+0x1f24/0x2c70 [ 2054.569214][T10226] ? cfg80211_event_work+0x40/0x40 [ 2054.574384][T10226] ? minstrel_ht_alloc+0x88a/0x990 [ 2054.579558][T10226] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2054.585723][T10226] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2054.591278][T10226] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2054.596901][T10226] ? ieee80211_tasklet_handler+0x20/0x20 [ 2054.602616][T10226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2054.608851][T10226] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2054.614650][T10226] ? mac80211_hwsim_free+0x220/0x220 [ 2054.619982][T10226] ? rcu_is_watching+0x15/0xb0 [ 2054.624805][T10226] ? kstrndup+0xbd/0x140 [ 2054.629122][T10226] hwsim_new_radio_nl+0xdad/0x1a70 [ 2054.634308][T10226] ? mark_lock+0x94/0x320 [ 2054.638711][T10226] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2054.645163][T10226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2054.651400][T10226] ? lockdep_hardirqs_on+0x98/0x150 [ 2054.656653][T10226] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2054.662892][T10226] genl_family_rcv_msg_doit+0x21a/0x310 [ 2054.668677][T10226] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2054.674634][T10226] ? bpf_lsm_capable+0x9/0x10 [ 2054.679384][T10226] ? security_capable+0x89/0xb0 [ 2054.684303][T10226] genl_rcv_msg+0x611/0x7a0 [ 2054.688862][T10226] ? genl_bind+0x360/0x360 [ 2054.693317][T10226] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2054.699721][T10226] ? ref_tracker_free+0x686/0x830 [ 2054.704798][T10226] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2054.710163][T10226] netlink_rcv_skb+0x235/0x4c0 [ 2054.715008][T10226] ? genl_bind+0x360/0x360 [ 2054.719482][T10226] ? netlink_ack+0x1160/0x1160 [ 2054.724311][T10226] ? __lock_acquire+0x7eb0/0x7eb0 [ 2054.729400][T10226] ? down_read+0x1ac/0x2e0 [ 2054.733872][T10226] genl_rcv+0x28/0x40 [ 2054.737904][T10226] netlink_unicast+0x856/0x9e0 [ 2054.742759][T10226] netlink_sendmsg+0x8d0/0xbf0 [ 2054.747673][T10226] ? netlink_getsockopt+0x590/0x590 [ 2054.752936][T10226] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2054.758554][T10226] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2054.763921][T10226] ? security_socket_sendmsg+0x80/0xa0 [ 2054.769446][T10226] ? netlink_getsockopt+0x590/0x590 [ 2054.774750][T10226] ____sys_sendmsg+0x61b/0x980 [ 2054.779587][T10226] ? __asan_memset+0x22/0x40 [ 2054.784260][T10226] ? __sys_sendmsg_sock+0x30/0x30 [ 2054.789382][T10226] ? __import_iovec+0x5f2/0x850 [ 2054.794304][T10226] ? import_iovec+0x73/0xa0 [ 2054.798881][T10226] ___sys_sendmsg+0x2a6/0x360 [ 2054.803644][T10226] ? __sys_sendmsg+0x2b0/0x2b0 [ 2054.808630][T10226] __se_sys_sendmsg+0x1d0/0x2c0 [ 2054.813543][T10226] ? __x64_sys_sendmsg+0x80/0x80 [ 2054.818572][T10226] ? lockdep_hardirqs_on+0x98/0x150 [ 2054.823826][T10226] do_syscall_64+0x55/0xb0 [ 2054.828409][T10226] ? clear_bhb_loop+0x40/0x90 [ 2054.833142][T10226] ? clear_bhb_loop+0x40/0x90 [ 2054.837876][T10226] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2054.843829][T10226] RIP: 0033:0x7f245059fb19 [ 2054.848304][T10226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2054.867965][T10226] RSP: 002b:00007f2451448028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2054.876440][T10226] RAX: ffffffffffffffda RBX: 00007f2450825fa0 RCX: 00007f245059fb19 [ 2054.884463][T10226] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2054.892476][T10226] RBP: 00007f2450637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2054.900501][T10226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2054.908518][T10226] R13: 00007f2450826038 R14: 00007f2450825fa0 R15: 00007ffc8150ab08 [ 2054.916569][T10226] [ 2056.552933][T10259] netlink: 'syz.3.12202': attribute type 10 has an invalid length. [ 2056.570442][T10259] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12202'. [ 2056.582979][T10259] bridge0: port 2(veth0_vlan) entered blocking state [ 2056.608028][T10259] bridge0: port 2(veth0_vlan) entered disabled state [ 2056.636997][T10259] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2056.993100][T10262] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.12204'. [ 2057.592139][T10262] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2057.600294][T10262] CPU: 0 PID: 10262 Comm: syz.0.12204 Not tainted syzkaller #0 [ 2057.607916][T10262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2057.618028][T10262] Call Trace: [ 2057.621357][T10262] [ 2057.624331][T10262] dump_stack_lvl+0x18c/0x250 [ 2057.629074][T10262] ? show_regs_print_info+0x20/0x20 [ 2057.634336][T10262] ? load_image+0x420/0x420 [ 2057.638931][T10262] sysfs_warn_dup+0x8e/0xa0 [ 2057.643495][T10262] sysfs_do_create_link_sd+0xc0/0x110 [ 2057.648928][T10262] device_add_class_symlinks+0x1cf/0x240 [ 2057.654606][T10262] device_add+0x4f9/0xc40 [ 2057.658976][T10262] wiphy_register+0x1f24/0x2c70 [ 2057.663881][T10262] ? cfg80211_event_work+0x40/0x40 [ 2057.669049][T10262] ? minstrel_ht_alloc+0x88a/0x990 [ 2057.674198][T10262] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2057.680310][T10262] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2057.685929][T10262] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2057.691526][T10262] ? ieee80211_tasklet_handler+0x20/0x20 [ 2057.697213][T10262] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2057.703242][T10262] ? __debug_object_init+0xec/0x450 [ 2057.708489][T10262] ? __asan_memset+0x22/0x40 [ 2057.713121][T10262] ? __hrtimer_init+0x189/0x270 [ 2057.718007][T10262] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2057.723792][T10262] ? mac80211_hwsim_free+0x220/0x220 [ 2057.729114][T10262] ? rcu_is_watching+0x15/0xb0 [ 2057.733915][T10262] ? kstrndup+0xbd/0x140 [ 2057.738225][T10262] hwsim_new_radio_nl+0xdad/0x1a70 [ 2057.743389][T10262] ? __nla_validate+0x50/0x50 [ 2057.748110][T10262] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2057.754484][T10262] ? __nla_parse+0x40/0x50 [ 2057.758958][T10262] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2057.765338][T10262] genl_family_rcv_msg_doit+0x21a/0x310 [ 2057.770935][T10262] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2057.776871][T10262] ? bpf_lsm_capable+0x9/0x10 [ 2057.781601][T10262] ? security_capable+0x89/0xb0 [ 2057.786508][T10262] genl_rcv_msg+0x611/0x7a0 [ 2057.791066][T10262] ? genl_bind+0x360/0x360 [ 2057.795534][T10262] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2057.801931][T10262] netlink_rcv_skb+0x235/0x4c0 [ 2057.806747][T10262] ? genl_bind+0x360/0x360 [ 2057.811216][T10262] ? netlink_ack+0x1160/0x1160 [ 2057.816024][T10262] ? __lock_acquire+0x7eb0/0x7eb0 [ 2057.821076][T10262] ? net_generic+0x1e/0x240 [ 2057.825624][T10262] ? down_read+0x1ac/0x2e0 [ 2057.830071][T10262] genl_rcv+0x28/0x40 [ 2057.834089][T10262] netlink_unicast+0x856/0x9e0 [ 2057.838919][T10262] netlink_sendmsg+0x8d0/0xbf0 [ 2057.843740][T10262] ? netlink_getsockopt+0x590/0x590 [ 2057.848982][T10262] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2057.854576][T10262] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2057.859908][T10262] ? security_socket_sendmsg+0x80/0xa0 [ 2057.865410][T10262] ? netlink_getsockopt+0x590/0x590 [ 2057.870649][T10262] ____sys_sendmsg+0x61b/0x980 [ 2057.875451][T10262] ? __asan_memset+0x22/0x40 [ 2057.880080][T10262] ? __sys_sendmsg_sock+0x30/0x30 [ 2057.885140][T10262] ? __import_iovec+0x5f2/0x850 [ 2057.890042][T10262] ? import_iovec+0x73/0xa0 [ 2057.894598][T10262] ___sys_sendmsg+0x2a6/0x360 [ 2057.899318][T10262] ? __sys_sendmsg+0x2b0/0x2b0 [ 2057.904190][T10262] __se_sys_sendmsg+0x1d0/0x2c0 [ 2057.909172][T10262] ? __x64_sys_sendmsg+0x80/0x80 [ 2057.914171][T10262] ? lockdep_hardirqs_on+0x98/0x150 [ 2057.919404][T10262] do_syscall_64+0x55/0xb0 [ 2057.923946][T10262] ? clear_bhb_loop+0x40/0x90 [ 2057.928677][T10262] ? clear_bhb_loop+0x40/0x90 [ 2057.933392][T10262] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2057.939318][T10262] RIP: 0033:0x7f596a59fb19 [ 2057.943797][T10262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2057.963441][T10262] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2057.971893][T10262] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2057.979894][T10262] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2057.987897][T10262] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2057.995906][T10262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2058.003905][T10262] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2058.011921][T10262] [ 2061.283548][T10308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12221'. [ 2062.545952][T10335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12233'. [ 2063.313716][T10368] FAULT_INJECTION: forcing a failure. [ 2063.313716][T10368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2063.350544][T10368] CPU: 0 PID: 10368 Comm: syz.3.12248 Not tainted syzkaller #0 [ 2063.358196][T10368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2063.368315][T10368] Call Trace: [ 2063.371693][T10368] [ 2063.374720][T10368] dump_stack_lvl+0x18c/0x250 [ 2063.379484][T10368] ? show_regs_print_info+0x20/0x20 [ 2063.384773][T10368] ? load_image+0x420/0x420 [ 2063.389364][T10368] ? __lock_acquire+0x7eb0/0x7eb0 [ 2063.394463][T10368] should_fail_ex+0x394/0x4c0 [ 2063.399243][T10368] _copy_from_user+0x2f/0xe0 [ 2063.403912][T10368] bpf_test_init+0xde/0x140 [ 2063.408508][T10368] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 2063.413942][T10368] ? __lock_acquire+0x7eb0/0x7eb0 [ 2063.419063][T10368] ? dev_put+0x80/0x80 [ 2063.423247][T10368] ? dev_put+0x80/0x80 [ 2063.427386][T10368] bpf_prog_test_run+0x31f/0x390 [ 2063.432397][T10368] __sys_bpf+0x49d/0x890 [ 2063.436735][T10368] ? bpf_link_show_fdinfo+0x560/0x560 [ 2063.442210][T10368] ? lock_chain_count+0x20/0x20 [ 2063.447151][T10368] __x64_sys_bpf+0x7c/0x90 [ 2063.451662][T10368] do_syscall_64+0x55/0xb0 [ 2063.456176][T10368] ? clear_bhb_loop+0x40/0x90 [ 2063.460924][T10368] ? clear_bhb_loop+0x40/0x90 [ 2063.465680][T10368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2063.471647][T10368] RIP: 0033:0x7f245059fb19 [ 2063.476136][T10368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2063.495807][T10368] RSP: 002b:00007f2451448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2063.504312][T10368] RAX: ffffffffffffffda RBX: 00007f2450825fa0 RCX: 00007f245059fb19 [ 2063.512354][T10368] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 2063.520401][T10368] RBP: 00007f2451448090 R08: 0000000000000000 R09: 0000000000000000 [ 2063.528441][T10368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2063.536476][T10368] R13: 00007f2450826038 R14: 00007f2450825fa0 R15: 00007ffc8150ab08 [ 2063.544549][T10368] [ 2063.650550][T10375] netlink: 'syz.0.12257': attribute type 3 has an invalid length. [ 2063.660050][T10375] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12257'. [ 2063.922663][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12250'. [ 2064.921671][T10399] netlink: 'syz.3.12259': attribute type 10 has an invalid length. [ 2065.404063][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12264'. [ 2065.674251][T10417] netlink: 'syz.3.12265': attribute type 10 has an invalid length. [ 2066.036559][T10422] FAULT_INJECTION: forcing a failure. [ 2066.036559][T10422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2066.098300][T10422] CPU: 1 PID: 10422 Comm: syz.1.12268 Not tainted syzkaller #0 [ 2066.105947][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2066.116065][T10422] Call Trace: [ 2066.119427][T10422] [ 2066.122412][T10422] dump_stack_lvl+0x18c/0x250 [ 2066.127180][T10422] ? show_regs_print_info+0x20/0x20 [ 2066.132468][T10422] ? load_image+0x420/0x420 [ 2066.137033][T10422] ? __lock_acquire+0x7eb0/0x7eb0 [ 2066.142124][T10422] should_fail_ex+0x394/0x4c0 [ 2066.146972][T10422] _copy_from_user+0x2f/0xe0 [ 2066.151621][T10422] bpf_prog_test_run_skb+0x267/0x18f0 [ 2066.157066][T10422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2066.163286][T10422] ? lockdep_hardirqs_on+0x98/0x150 [ 2066.168540][T10422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2066.174764][T10422] ? cpu_online+0x60/0x60 [ 2066.179177][T10422] ? bpf_prog_test_run+0x313/0x390 [ 2066.184352][T10422] ? cpu_online+0x60/0x60 [ 2066.188782][T10422] bpf_prog_test_run+0x31f/0x390 [ 2066.193785][T10422] __sys_bpf+0x49d/0x890 [ 2066.198100][T10422] ? bpf_link_show_fdinfo+0x560/0x560 [ 2066.203579][T10422] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2066.209818][T10422] __x64_sys_bpf+0x7c/0x90 [ 2066.214307][T10422] do_syscall_64+0x55/0xb0 [ 2066.218797][T10422] ? clear_bhb_loop+0x40/0x90 [ 2066.223532][T10422] ? clear_bhb_loop+0x40/0x90 [ 2066.228294][T10422] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2066.234253][T10422] RIP: 0033:0x7fd0c1d9fb19 [ 2066.238723][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2066.258374][T10422] RSP: 002b:00007fd0c2cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2066.266855][T10422] RAX: ffffffffffffffda RBX: 00007fd0c2025fa0 RCX: 00007fd0c1d9fb19 [ 2066.274873][T10422] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 2066.282873][T10422] RBP: 00007fd0c2cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2066.291008][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2066.299029][T10422] R13: 00007fd0c2026038 R14: 00007fd0c2025fa0 R15: 00007fff5afa1a18 [ 2066.307076][T10422] [ 2066.625925][T10435] netlink: 'syz.1.12270': attribute type 4 has an invalid length. [ 2066.776069][T10435] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12270'. [ 2067.762854][T10446] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.12275'. [ 2067.772469][T10433] netlink: 'syz.0.12272': attribute type 25 has an invalid length. [ 2067.782992][T10433] netlink: 'syz.0.12272': attribute type 5 has an invalid length. [ 2067.795052][T10433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12272'. [ 2067.837997][T10446] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2067.852712][T10446] CPU: 0 PID: 10446 Comm: syz.2.12275 Not tainted syzkaller #0 [ 2067.860346][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2067.870627][T10446] Call Trace: [ 2067.873990][T10446] [ 2067.876983][T10446] dump_stack_lvl+0x18c/0x250 [ 2067.881728][T10446] ? show_regs_print_info+0x20/0x20 [ 2067.886997][T10446] ? load_image+0x420/0x420 [ 2067.891583][T10446] sysfs_warn_dup+0x8e/0xa0 [ 2067.896159][T10446] sysfs_do_create_link_sd+0xc0/0x110 [ 2067.901690][T10446] device_add_class_symlinks+0x1cf/0x240 [ 2067.907387][T10446] device_add+0x4f9/0xc40 [ 2067.911778][T10446] wiphy_register+0x1f24/0x2c70 [ 2067.916769][T10446] ? cfg80211_event_work+0x40/0x40 [ 2067.921945][T10446] ? minstrel_ht_alloc+0x88a/0x990 [ 2067.927123][T10446] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2067.933288][T10446] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2067.938831][T10446] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2067.944449][T10446] ? ieee80211_tasklet_handler+0x20/0x20 [ 2067.950141][T10446] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2067.956110][T10446] ? __debug_object_init+0xec/0x450 [ 2067.961374][T10446] ? __asan_memset+0x22/0x40 [ 2067.966028][T10446] ? __hrtimer_init+0x189/0x270 [ 2067.970946][T10446] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2067.976766][T10446] ? mac80211_hwsim_free+0x220/0x220 [ 2067.982140][T10446] ? rcu_is_watching+0x15/0xb0 [ 2067.986998][T10446] ? kstrndup+0xbd/0x140 [ 2067.991330][T10446] hwsim_new_radio_nl+0xdad/0x1a70 [ 2067.996506][T10446] ? __nla_validate+0x50/0x50 [ 2068.001265][T10446] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2068.007665][T10446] ? __nla_parse+0x40/0x50 [ 2068.012160][T10446] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2068.018561][T10446] genl_family_rcv_msg_doit+0x21a/0x310 [ 2068.024186][T10446] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2068.030180][T10446] ? bpf_lsm_capable+0x9/0x10 [ 2068.034909][T10446] ? security_capable+0x89/0xb0 [ 2068.039839][T10446] genl_rcv_msg+0x611/0x7a0 [ 2068.044405][T10446] ? genl_bind+0x360/0x360 [ 2068.048881][T10446] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2068.055286][T10446] netlink_rcv_skb+0x235/0x4c0 [ 2068.060114][T10446] ? genl_bind+0x360/0x360 [ 2068.064583][T10446] ? netlink_ack+0x1160/0x1160 [ 2068.069406][T10446] ? __lock_acquire+0x7eb0/0x7eb0 [ 2068.074497][T10446] ? down_read+0x1ac/0x2e0 [ 2068.078968][T10446] genl_rcv+0x28/0x40 [ 2068.083013][T10446] netlink_unicast+0x856/0x9e0 [ 2068.087870][T10446] netlink_sendmsg+0x8d0/0xbf0 [ 2068.092753][T10446] ? netlink_getsockopt+0x590/0x590 [ 2068.098012][T10446] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2068.103635][T10446] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2068.109084][T10446] ? security_socket_sendmsg+0x80/0xa0 [ 2068.114613][T10446] ? netlink_getsockopt+0x590/0x590 [ 2068.119885][T10446] ____sys_sendmsg+0x61b/0x980 [ 2068.124723][T10446] ? __asan_memset+0x22/0x40 [ 2068.129558][T10446] ? __sys_sendmsg_sock+0x30/0x30 [ 2068.134644][T10446] ? __import_iovec+0x5f2/0x850 [ 2068.139671][T10446] ? import_iovec+0x73/0xa0 [ 2068.144238][T10446] ___sys_sendmsg+0x2a6/0x360 [ 2068.149038][T10446] ? __sys_sendmsg+0x2b0/0x2b0 [ 2068.153924][T10446] __se_sys_sendmsg+0x1d0/0x2c0 [ 2068.158843][T10446] ? __x64_sys_sendmsg+0x80/0x80 [ 2068.163885][T10446] ? lockdep_hardirqs_on+0x98/0x150 [ 2068.169148][T10446] do_syscall_64+0x55/0xb0 [ 2068.173640][T10446] ? clear_bhb_loop+0x40/0x90 [ 2068.178389][T10446] ? clear_bhb_loop+0x40/0x90 [ 2068.183131][T10446] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2068.189082][T10446] RIP: 0033:0x7f5c59d9fb19 [ 2068.193548][T10446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.213220][T10446] RSP: 002b:00007f5c5ac30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2068.221723][T10446] RAX: ffffffffffffffda RBX: 00007f5c5a026090 RCX: 00007f5c59d9fb19 [ 2068.229766][T10446] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2068.237801][T10446] RBP: 00007f5c59e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2068.245831][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2068.253862][T10446] R13: 00007f5c5a026128 R14: 00007f5c5a026090 R15: 00007fffa1965818 [ 2068.261913][T10446] [ 2068.507538][T10461] FAULT_INJECTION: forcing a failure. [ 2068.507538][T10461] name failslab, interval 1, probability 0, space 0, times 0 [ 2068.527935][T10461] CPU: 0 PID: 10461 Comm: syz.3.12279 Not tainted syzkaller #0 [ 2068.535564][T10461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2068.545674][T10461] Call Trace: [ 2068.548995][T10461] [ 2068.551973][T10461] dump_stack_lvl+0x18c/0x250 [ 2068.556701][T10461] ? show_regs_print_info+0x20/0x20 [ 2068.561937][T10461] ? load_image+0x420/0x420 [ 2068.566491][T10461] should_fail_ex+0x394/0x4c0 [ 2068.571207][T10461] should_failslab+0x9/0x20 [ 2068.575745][T10461] slab_pre_alloc_hook+0x59/0x300 [ 2068.580801][T10461] ? kvmalloc_node+0x70/0x180 [ 2068.585520][T10461] ? kvmalloc_node+0x70/0x180 [ 2068.590232][T10461] __kmem_cache_alloc_node+0x53/0x260 [ 2068.595645][T10461] ? dev_addr_init+0x15b/0x240 [ 2068.600444][T10461] ? kvmalloc_node+0x70/0x180 [ 2068.605178][T10461] __kmalloc_node+0xa6/0x240 [ 2068.609817][T10461] kvmalloc_node+0x70/0x180 [ 2068.614383][T10461] alloc_netdev_mqs+0x8c4/0x1090 [ 2068.619386][T10461] ? tun_get_tx_ring+0xa0/0xa0 [ 2068.624193][T10461] tun_set_iff+0x546/0xea0 [ 2068.628665][T10461] __tun_chr_ioctl+0x7e0/0x2070 [ 2068.633565][T10461] ? tun_flow_create+0x310/0x310 [ 2068.638563][T10461] ? bpf_lsm_file_ioctl+0x9/0x10 [ 2068.643556][T10461] ? security_file_ioctl+0x80/0xa0 [ 2068.648714][T10461] ? tun_chr_poll+0x630/0x630 [ 2068.653454][T10461] __se_sys_ioctl+0xfd/0x170 [ 2068.658087][T10461] do_syscall_64+0x55/0xb0 [ 2068.662544][T10461] ? clear_bhb_loop+0x40/0x90 [ 2068.667269][T10461] ? clear_bhb_loop+0x40/0x90 [ 2068.671988][T10461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2068.677918][T10461] RIP: 0033:0x7f245059fb19 [ 2068.682382][T10461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2068.702108][T10461] RSP: 002b:00007f2451448028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2068.710558][T10461] RAX: ffffffffffffffda RBX: 00007f2450825fa0 RCX: 00007f245059fb19 [ 2068.718580][T10461] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 2068.726587][T10461] RBP: 00007f2451448090 R08: 0000000000000000 R09: 0000000000000000 [ 2068.734616][T10461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2068.742629][T10461] R13: 00007f2450826038 R14: 00007f2450825fa0 R15: 00007ffc8150ab08 [ 2068.750657][T10461] [ 2069.283997][T10462] wg2: entered promiscuous mode [ 2069.327489][T10462] wg2: entered allmulticast mode [ 2077.531572][T10541] netlink: 212940 bytes leftover after parsing attributes in process `syz.3.12307'. [ 2078.499415][T10559] FAULT_INJECTION: forcing a failure. [ 2078.499415][T10559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2078.518230][T10559] CPU: 0 PID: 10559 Comm: syz.2.12313 Not tainted syzkaller #0 [ 2078.525867][T10559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2078.535983][T10559] Call Trace: [ 2078.539308][T10559] [ 2078.542290][T10559] dump_stack_lvl+0x18c/0x250 [ 2078.547034][T10559] ? show_regs_print_info+0x20/0x20 [ 2078.552287][T10559] ? load_image+0x420/0x420 [ 2078.556867][T10559] ? __might_fault+0xaa/0x120 [ 2078.561605][T10559] ? __lock_acquire+0x7eb0/0x7eb0 [ 2078.566690][T10559] should_fail_ex+0x394/0x4c0 [ 2078.571425][T10559] _copy_from_iter+0x1cd/0x1290 [ 2078.576369][T10559] ? __alloc_skb+0x161/0x2c0 [ 2078.581018][T10559] ? copyout_mc+0x70/0x70 [ 2078.585400][T10559] ? __virt_addr_valid+0x10c/0x380 [ 2078.590570][T10559] ? __virt_addr_valid+0x10c/0x380 [ 2078.595756][T10559] ? __virt_addr_valid+0x10c/0x380 [ 2078.600940][T10559] ? __check_object_size+0x4fc/0xa40 [ 2078.606287][T10559] netlink_sendmsg+0x76b/0xbf0 [ 2078.611115][T10559] ? __sanitizer_cov_trace_pc+0x8/0x60 [ 2078.616645][T10559] ? netlink_getsockopt+0x590/0x590 [ 2078.621902][T10559] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2078.627526][T10559] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2078.632896][T10559] ? security_socket_sendmsg+0x80/0xa0 [ 2078.638415][T10559] ? netlink_getsockopt+0x590/0x590 [ 2078.643665][T10559] ____sys_sendmsg+0x61b/0x980 [ 2078.648534][T10559] ? __asan_memset+0x22/0x40 [ 2078.653185][T10559] ? __sys_sendmsg_sock+0x30/0x30 [ 2078.658256][T10559] ? __import_iovec+0x5f2/0x850 [ 2078.663193][T10559] ? import_iovec+0x73/0xa0 [ 2078.667757][T10559] ___sys_sendmsg+0x2a6/0x360 [ 2078.672538][T10559] ? __sys_sendmsg+0x2b0/0x2b0 [ 2078.677434][T10559] __se_sys_sendmsg+0x1d0/0x2c0 [ 2078.682335][T10559] ? __x64_sys_sendmsg+0x80/0x80 [ 2078.687361][T10559] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2078.693337][T10559] do_syscall_64+0x55/0xb0 [ 2078.697816][T10559] ? clear_bhb_loop+0x40/0x90 [ 2078.702595][T10559] ? clear_bhb_loop+0x40/0x90 [ 2078.707334][T10559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2078.713316][T10559] RIP: 0033:0x7f5c59d9fb19 [ 2078.717785][T10559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2078.737478][T10559] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2078.745958][T10559] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2078.754001][T10559] RDX: 000000000000c000 RSI: 0000200000000980 RDI: 0000000000000008 [ 2078.762035][T10559] RBP: 00007f5c5ac51090 R08: 0000000000000000 R09: 0000000000000000 [ 2078.770067][T10559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2078.778092][T10559] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2078.786134][T10559] [ 2080.238391][T10578] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12320'. [ 2084.902583][T10612] netlink: 'syz.2.12332': attribute type 4 has an invalid length. [ 2084.971768][T10612] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12332'. [ 2088.686199][T10642] FAULT_INJECTION: forcing a failure. [ 2088.686199][T10642] name failslab, interval 1, probability 0, space 0, times 0 [ 2088.724368][T10642] CPU: 1 PID: 10642 Comm: syz.1.12345 Not tainted syzkaller #0 [ 2088.732043][T10642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2088.742162][T10642] Call Trace: [ 2088.745504][T10642] [ 2088.748480][T10642] dump_stack_lvl+0x18c/0x250 [ 2088.753234][T10642] ? show_regs_print_info+0x20/0x20 [ 2088.758493][T10642] ? load_image+0x420/0x420 [ 2088.763056][T10642] ? __might_sleep+0xe0/0xe0 [ 2088.767707][T10642] ? __lock_acquire+0x7eb0/0x7eb0 [ 2088.772808][T10642] should_fail_ex+0x394/0x4c0 [ 2088.777562][T10642] should_failslab+0x9/0x20 [ 2088.782126][T10642] slab_pre_alloc_hook+0x59/0x300 [ 2088.787203][T10642] ? lock_chain_count+0x20/0x20 [ 2088.792152][T10642] ? sk_prot_alloc+0xe7/0x210 [ 2088.796891][T10642] ? sk_prot_alloc+0xe7/0x210 [ 2088.801634][T10642] __kmem_cache_alloc_node+0x53/0x260 [ 2088.807067][T10642] ? sk_prot_alloc+0xe7/0x210 [ 2088.811921][T10642] __kmalloc+0xa7/0x240 [ 2088.816143][T10642] sk_prot_alloc+0xe7/0x210 [ 2088.820700][T10642] ? sk_alloc+0x24/0x350 [ 2088.825002][T10642] sk_alloc+0x3a/0x350 [ 2088.829127][T10642] ? sk_alloc+0x5/0x350 [ 2088.833345][T10642] bpf_prog_test_run_skb+0x371/0x18f0 [ 2088.838791][T10642] ? __fget_files+0x28/0x460 [ 2088.843528][T10642] ? __fget_files+0x3fc/0x460 [ 2088.848281][T10642] ? cpu_online+0x60/0x60 [ 2088.852670][T10642] bpf_prog_test_run+0x31f/0x390 [ 2088.857669][T10642] __sys_bpf+0x49d/0x890 [ 2088.861969][T10642] ? bpf_link_show_fdinfo+0x560/0x560 [ 2088.867453][T10642] ? lock_chain_count+0x20/0x20 [ 2088.872454][T10642] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2088.878518][T10642] __x64_sys_bpf+0x7c/0x90 [ 2088.882992][T10642] do_syscall_64+0x55/0xb0 [ 2088.887469][T10642] ? clear_bhb_loop+0x40/0x90 [ 2088.892218][T10642] ? clear_bhb_loop+0x40/0x90 [ 2088.896963][T10642] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2088.902936][T10642] RIP: 0033:0x7fd0c1d9fb19 [ 2088.907408][T10642] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2088.927086][T10642] RSP: 002b:00007fd0c2cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2088.935571][T10642] RAX: ffffffffffffffda RBX: 00007fd0c2025fa0 RCX: 00007fd0c1d9fb19 [ 2088.943688][T10642] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 2088.951793][T10642] RBP: 00007fd0c2cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2088.959822][T10642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2088.967844][T10642] R13: 00007fd0c2026038 R14: 00007fd0c2025fa0 R15: 00007fff5afa1a18 [ 2088.975914][T10642] [ 2089.039217][T10649] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12346'. [ 2089.231713][T10649] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.12346'. [ 2090.887833][T10655] netlink: 'syz.2.12347': attribute type 10 has an invalid length. [ 2091.363923][T10679] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.12354'. [ 2092.080467][T10679] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 2092.487485][T10695] netlink: 4068 bytes leftover after parsing attributes in process `syz.0.12357'. [ 2092.689590][T10695] netlink: 'syz.0.12357': attribute type 9 has an invalid length. [ 2092.717967][T10695] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12357'. [ 2092.770924][T10688] netlink: 10 bytes leftover after parsing attributes in process `syz.2.12364'. [ 2092.943241][T10693] netlink: 'syz.0.12357': attribute type 9 has an invalid length. [ 2093.014785][T10693] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12357'. [ 2096.567387][T10736] delete_channel: no stack [ 2096.572022][T10736] delete_channel: no stack [ 2098.198010][T10768] netlink: zone id is out of range [ 2098.245097][T10768] netlink: set zone limit has 8 unknown bytes [ 2098.742948][T10770] netlink: 'syz.2.12381': attribute type 9 has an invalid length. [ 2098.757980][T10770] netlink: 201644 bytes leftover after parsing attributes in process `syz.2.12381'. [ 2099.091432][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.097912][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2101.168149][ T9055] Bluetooth: hci1: command 0x0406 tx timeout [ 2101.658731][T10780] netlink: 'syz.1.12392': attribute type 9 has an invalid length. [ 2101.680673][T10780] netlink: 201644 bytes leftover after parsing attributes in process `syz.1.12392'. [ 2101.753438][ T4835] hsr_slave_0: left promiscuous mode [ 2101.779764][ T4835] hsr_slave_1: left promiscuous mode [ 2101.793928][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2101.801953][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2101.821287][ T4835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2101.829697][ T4835] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2101.840988][ T4835] bond0: left allmulticast mode [ 2101.846128][ T4835] bond_slave_1: left allmulticast mode [ 2101.852020][ T4835] bridge0: port 3(bond0) entered disabled state [ 2101.862225][ T4835] bridge_slave_1: left allmulticast mode [ 2101.868214][ T4835] bridge_slave_1: left promiscuous mode [ 2101.874034][ T4835] bridge0: port 2(bridge_slave_1) entered disabled state [ 2101.884242][ T4835] bridge_slave_0: left allmulticast mode [ 2101.896126][ T4835] bridge_slave_0: left promiscuous mode [ 2101.902120][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.959602][ T4835] veth1_vlan: left promiscuous mode [ 2102.735030][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2102.751656][ T4835] bond_slave_1 (unregistering): left promiscuous mode [ 2103.213698][ T4835] bond0 (unregistering): Released all slaves [ 2103.476604][T10793] batadv_slave_1: entered promiscuous mode [ 2103.482634][T10793] batadv_slave_1: entered allmulticast mode [ 2104.748766][T10803] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12389'. [ 2104.796767][T10803] : renamed from virt_wifi0 [ 2106.499291][T10824] batadv_slave_1: entered promiscuous mode [ 2106.505203][T10824] batadv_slave_1: entered allmulticast mode [ 2107.493362][ T9055] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2107.510187][ T9055] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2107.518682][ T9055] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2107.528678][ T9055] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2107.548360][ T9055] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 2107.556861][ T9055] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2107.603339][T10840] rxe_eth0 speed is unknown, defaulting to 1000 [ 2108.158924][T10840] chnl_net:caif_netlink_parms(): no params data found [ 2108.274110][T10840] bridge0: port 1(bridge_slave_0) entered blocking state [ 2108.281780][T10840] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.290585][T10840] bridge_slave_0: entered allmulticast mode [ 2108.341339][T10840] bridge_slave_0: entered promiscuous mode [ 2108.350623][T10840] bridge0: port 2(bridge_slave_1) entered blocking state [ 2108.358957][T10840] bridge0: port 2(bridge_slave_1) entered disabled state [ 2108.385559][T10840] bridge_slave_1: entered allmulticast mode [ 2108.394159][T10840] bridge_slave_1: entered promiscuous mode [ 2108.999990][ T4835] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.032380][T10840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2109.053828][T10840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2109.645841][ T2347] Bluetooth: hci3: command tx timeout [ 2109.686581][ T4835] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.747692][T10840] team0: Port device team_slave_0 added [ 2109.780375][T10840] team0: Port device team_slave_1 added [ 2109.834881][ T4835] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.877084][T10868] batadv_slave_1: entered promiscuous mode [ 2109.883885][T10868] batadv_slave_1: entered allmulticast mode [ 2109.907090][T10840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2109.914258][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2109.943945][T10840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2109.997439][T10840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2110.014164][T10840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2110.044694][T10840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2110.161598][T10840] hsr_slave_0: entered promiscuous mode [ 2110.216248][T10840] hsr_slave_1: entered promiscuous mode [ 2110.233384][T10840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2110.242866][T10875] FAULT_INJECTION: forcing a failure. [ 2110.242866][T10875] name failslab, interval 1, probability 0, space 0, times 0 [ 2110.255449][T10840] Cannot create hsr debugfs directory [ 2110.266639][T10875] CPU: 1 PID: 10875 Comm: syz.0.12409 Not tainted syzkaller #0 [ 2110.274300][T10875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2110.284446][T10875] Call Trace: [ 2110.287778][T10875] [ 2110.290752][T10875] dump_stack_lvl+0x18c/0x250 [ 2110.295492][T10875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2110.301711][T10875] ? show_regs_print_info+0x20/0x20 [ 2110.306976][T10875] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2110.313213][T10875] should_fail_ex+0x394/0x4c0 [ 2110.317965][T10875] should_failslab+0x9/0x20 [ 2110.322524][T10875] slab_pre_alloc_hook+0x59/0x300 [ 2110.327643][T10875] kmem_cache_alloc_node+0x5e/0x320 [ 2110.332907][T10875] ? __alloc_skb+0x103/0x2c0 [ 2110.337565][T10875] __alloc_skb+0x103/0x2c0 [ 2110.342043][T10875] netlink_dump+0x1ee/0xec0 [ 2110.346596][T10875] ? rcu_is_watching+0x15/0xb0 [ 2110.351426][T10875] ? __mutex_lock+0x30d/0xce0 [ 2110.356265][T10875] ? netlink_lookup+0x200/0x200 [ 2110.361208][T10875] ? netlink_lookup+0x30/0x200 [ 2110.366016][T10875] ? netlink_lookup+0x30/0x200 [ 2110.370835][T10875] __netlink_dump_start+0x57c/0x7a0 [ 2110.376099][T10875] rtnetlink_rcv_msg+0xe19/0xf90 [ 2110.381098][T10875] ? rtnetlink_rcv_msg+0x220/0xf90 [ 2110.386289][T10875] ? rtnl_getlink+0xd20/0xd20 [ 2110.391019][T10875] ? rtnetlink_bind+0x80/0x80 [ 2110.395765][T10875] ? mark_lock+0x94/0x320 [ 2110.400205][T10875] ? verify_lock_unused+0x140/0x140 [ 2110.405456][T10875] ? verify_lock_unused+0x140/0x140 [ 2110.410707][T10875] ? rtnl_getlink+0xd20/0xd20 [ 2110.415436][T10875] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2110.421216][T10875] netlink_rcv_skb+0x235/0x4c0 [ 2110.426026][T10875] ? rtnetlink_bind+0x80/0x80 [ 2110.430750][T10875] ? netlink_ack+0x1160/0x1160 [ 2110.435592][T10875] ? __lock_acquire+0x7eb0/0x7eb0 [ 2110.440669][T10875] ? net_generic+0x1e/0x240 [ 2110.445227][T10875] ? netlink_deliver_tap+0x2e/0x1b0 [ 2110.450475][T10875] netlink_unicast+0x856/0x9e0 [ 2110.455314][T10875] netlink_sendmsg+0x8d0/0xbf0 [ 2110.460139][T10875] ? netlink_getsockopt+0x590/0x590 [ 2110.465392][T10875] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2110.471011][T10875] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2110.476357][T10875] ? security_socket_sendmsg+0x80/0xa0 [ 2110.481877][T10875] ? netlink_getsockopt+0x590/0x590 [ 2110.487137][T10875] ____sys_sendmsg+0x61b/0x980 [ 2110.491960][T10875] ? __asan_memset+0x22/0x40 [ 2110.496611][T10875] ? __sys_sendmsg_sock+0x30/0x30 [ 2110.501695][T10875] ? __import_iovec+0x5f2/0x850 [ 2110.506619][T10875] ? import_iovec+0x73/0xa0 [ 2110.511186][T10875] ___sys_sendmsg+0x2a6/0x360 [ 2110.515937][T10875] ? __sys_sendmsg+0x2b0/0x2b0 [ 2110.520811][T10875] __se_sys_sendmsg+0x1d0/0x2c0 [ 2110.525727][T10875] ? __x64_sys_sendmsg+0x80/0x80 [ 2110.530713][T10875] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2110.536648][T10875] do_syscall_64+0x55/0xb0 [ 2110.541099][T10875] ? clear_bhb_loop+0x40/0x90 [ 2110.545811][T10875] ? clear_bhb_loop+0x40/0x90 [ 2110.550522][T10875] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2110.556457][T10875] RIP: 0033:0x7f596a59fb19 [ 2110.560909][T10875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2110.580551][T10875] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2110.588994][T10875] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2110.597006][T10875] RDX: 000000000000c000 RSI: 0000200000000980 RDI: 0000000000000008 [ 2110.605005][T10875] RBP: 00007f596b39f090 R08: 0000000000000000 R09: 0000000000000000 [ 2110.613003][T10875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.621036][T10875] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2110.629060][T10875] [ 2111.028928][ T4835] bridge0: port 3(ip6gretap0) entered disabled state [ 2111.193636][ T4835] ip6gretap0 (unregistering): left allmulticast mode [ 2111.203162][ T4835] ip6gretap0 (unregistering): left promiscuous mode [ 2111.246413][ T4835] bridge0: port 3(ip6gretap0) entered disabled state [ 2111.513352][T10901] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2111.520813][T10901] IPv6: NLM_F_CREATE should be set when creating new route [ 2111.528363][T10901] IPv6: NLM_F_CREATE should be set when creating new route [ 2111.535838][T10901] IPv6: NLM_F_CREATE should be set when creating new route [ 2111.626616][T10899] netlink: 'syz.2.12418': attribute type 9 has an invalid length. [ 2111.634588][T10899] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12418'. [ 2111.726451][ T2347] Bluetooth: hci3: command tx timeout [ 2112.493703][T10927] FAULT_INJECTION: forcing a failure. [ 2112.493703][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 2112.520564][T10927] CPU: 0 PID: 10927 Comm: syz.0.12423 Not tainted syzkaller #0 [ 2112.528205][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2112.538311][T10927] Call Trace: [ 2112.541635][T10927] [ 2112.544692][T10927] dump_stack_lvl+0x18c/0x250 [ 2112.549433][T10927] ? show_regs_print_info+0x20/0x20 [ 2112.554694][T10927] ? load_image+0x420/0x420 [ 2112.559281][T10927] ? __might_sleep+0xe0/0xe0 [ 2112.563938][T10927] ? __lock_acquire+0x7eb0/0x7eb0 [ 2112.569022][T10927] should_fail_ex+0x394/0x4c0 [ 2112.573761][T10927] should_failslab+0x9/0x20 [ 2112.578317][T10927] slab_pre_alloc_hook+0x59/0x300 [ 2112.583485][T10927] ? __get_vm_area_node+0x125/0x370 [ 2112.588764][T10927] __kmem_cache_alloc_node+0x53/0x260 [ 2112.594191][T10927] ? __get_vm_area_node+0x125/0x370 [ 2112.599452][T10927] kmalloc_node_trace+0x26/0xe0 [ 2112.604366][T10927] __get_vm_area_node+0x125/0x370 [ 2112.609495][T10927] __vmalloc_node_range+0x36f/0x1320 [ 2112.614847][T10927] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 2112.620476][T10927] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2112.626283][T10927] ? free_vm_area+0x50/0x50 [ 2112.630899][T10927] ? lockdep_hardirqs_on+0x98/0x150 [ 2112.636160][T10927] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 2112.641755][T10927] __vmalloc+0x7a/0x90 [ 2112.645887][T10927] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 2112.651490][T10927] bpf_prog_alloc_no_stats+0x46/0x460 [ 2112.656925][T10927] bpf_prog_alloc+0x3d/0x1a0 [ 2112.661582][T10927] bpf_prog_load+0x6b2/0x1610 [ 2112.666325][T10927] ? map_freeze+0x420/0x420 [ 2112.670923][T10927] ? __might_fault+0xaa/0x120 [ 2112.675657][T10927] ? __lock_acquire+0x7eb0/0x7eb0 [ 2112.680743][T10927] ? __might_fault+0xaa/0x120 [ 2112.685458][T10927] ? __might_fault+0xc6/0x120 [ 2112.690175][T10927] ? __might_fault+0xaa/0x120 [ 2112.694887][T10927] ? bpf_lsm_bpf+0x9/0x10 [ 2112.699259][T10927] ? security_bpf+0x7e/0xa0 [ 2112.703819][T10927] __sys_bpf+0x5ba/0x890 [ 2112.708125][T10927] ? bpf_link_show_fdinfo+0x560/0x560 [ 2112.713548][T10927] ? lock_chain_count+0x20/0x20 [ 2112.718441][T10927] __x64_sys_bpf+0x7c/0x90 [ 2112.722897][T10927] do_syscall_64+0x55/0xb0 [ 2112.727347][T10927] ? clear_bhb_loop+0x40/0x90 [ 2112.732064][T10927] ? clear_bhb_loop+0x40/0x90 [ 2112.736790][T10927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2112.742722][T10927] RIP: 0033:0x7f596a59fb19 [ 2112.747168][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2112.766822][T10927] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2112.775662][T10927] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2112.783720][T10927] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 2112.791732][T10927] RBP: 00007f596b39f090 R08: 0000000000000000 R09: 0000000000000000 [ 2112.799736][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2112.807766][T10927] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2112.815801][T10927] [ 2112.944428][T10927] syz.0.12423: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 2113.013952][T10927] CPU: 0 PID: 10927 Comm: syz.0.12423 Not tainted syzkaller #0 [ 2113.021608][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2113.031716][T10927] Call Trace: [ 2113.035067][T10927] [ 2113.038042][T10927] dump_stack_lvl+0x18c/0x250 [ 2113.042831][T10927] ? show_regs_print_info+0x20/0x20 [ 2113.048088][T10927] ? load_image+0x420/0x420 [ 2113.052656][T10927] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2113.059122][T10927] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2113.065688][T10927] warn_alloc+0x246/0x340 [ 2113.070072][T10927] ? __get_vm_area_node+0x125/0x370 [ 2113.075336][T10927] ? zone_watermark_ok_safe+0x230/0x230 [ 2113.080927][T10927] ? rcu_is_watching+0x15/0xb0 [ 2113.085759][T10927] ? __get_vm_area_node+0x356/0x370 [ 2113.091035][T10927] __vmalloc_node_range+0x394/0x1320 [ 2113.096808][T10927] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 2113.102595][T10927] ? free_vm_area+0x50/0x50 [ 2113.107136][T10927] ? lockdep_hardirqs_on+0x98/0x150 [ 2113.112372][T10927] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 2113.117961][T10927] __vmalloc+0x7a/0x90 [ 2113.122080][T10927] ? bpf_prog_alloc_no_stats+0x46/0x460 [ 2113.127657][T10927] bpf_prog_alloc_no_stats+0x46/0x460 [ 2113.133068][T10927] bpf_prog_alloc+0x3d/0x1a0 [ 2113.137694][T10927] bpf_prog_load+0x6b2/0x1610 [ 2113.142409][T10927] ? map_freeze+0x420/0x420 [ 2113.146953][T10927] ? __might_fault+0xaa/0x120 [ 2113.151666][T10927] ? __lock_acquire+0x7eb0/0x7eb0 [ 2113.156728][T10927] ? __might_fault+0xaa/0x120 [ 2113.161456][T10927] ? __might_fault+0xc6/0x120 [ 2113.166204][T10927] ? __might_fault+0xaa/0x120 [ 2113.170923][T10927] ? bpf_lsm_bpf+0x9/0x10 [ 2113.175295][T10927] ? security_bpf+0x7e/0xa0 [ 2113.179840][T10927] __sys_bpf+0x5ba/0x890 [ 2113.184128][T10927] ? bpf_link_show_fdinfo+0x560/0x560 [ 2113.189548][T10927] ? lock_chain_count+0x20/0x20 [ 2113.194442][T10927] __x64_sys_bpf+0x7c/0x90 [ 2113.198893][T10927] do_syscall_64+0x55/0xb0 [ 2113.203345][T10927] ? clear_bhb_loop+0x40/0x90 [ 2113.208059][T10927] ? clear_bhb_loop+0x40/0x90 [ 2113.212775][T10927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2113.218699][T10927] RIP: 0033:0x7f596a59fb19 [ 2113.223170][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2113.242810][T10927] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2113.251265][T10927] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2113.259266][T10927] RDX: 0000000000000094 RSI: 0000200000000b40 RDI: 0000000000000005 [ 2113.267260][T10927] RBP: 00007f596b39f090 R08: 0000000000000000 R09: 0000000000000000 [ 2113.275262][T10927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2113.283260][T10927] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2113.291301][T10927] [ 2113.337550][T10927] Mem-Info: [ 2113.340939][T10927] active_anon:10478 inactive_anon:0 isolated_anon:0 [ 2113.340939][T10927] active_file:19429 inactive_file:40779 isolated_file:0 [ 2113.340939][T10927] unevictable:768 dirty:197 writeback:0 [ 2113.340939][T10927] slab_reclaimable:11063 slab_unreclaimable:103023 [ 2113.340939][T10927] mapped:24954 shmem:1364 pagetables:604 [ 2113.340939][T10927] sec_pagetables:0 bounce:0 [ 2113.340939][T10927] kernel_misc_reclaimable:0 [ 2113.340939][T10927] free:1326094 free_pcp:5113 free_cma:0 [ 2113.390184][T10927] Node 0 active_anon:42012kB inactive_anon:0kB active_file:77716kB inactive_file:162920kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99816kB dirty:784kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11440kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no [ 2113.425142][T10927] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2113.456454][T10927] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2113.493938][T10927] lowmem_reserve[]: 0 2503 2504 2504 2504 [ 2113.500962][T10927] Node 0 DMA32 free:1375120kB boost:0kB min:34492kB low:43112kB high:51732kB reserved_highatomic:0KB active_anon:41976kB inactive_anon:0kB active_file:77716kB inactive_file:162096kB unevictable:1536kB writepending:780kB present:3129332kB managed:2567744kB mlocked:0kB bounce:0kB free_pcp:11852kB local_pcp:9576kB free_cma:0kB [ 2113.536364][T10927] lowmem_reserve[]: 0 0 0 0 0 [ 2113.541503][T10927] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:4kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 2113.601240][T10927] lowmem_reserve[]: 0 0 0 0 0 [ 2113.610163][T10927] Node 1 Normal free:3913672kB boost:0kB min:55396kB low:69244kB high:83092kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:8224kB local_pcp:0kB free_cma:0kB [ 2113.676594][T10927] lowmem_reserve[]: 0 0 0 0 0 [ 2113.685537][T10927] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2113.736556][T10927] Node 0 DMA32: 1854*4kB (UME) 1884*8kB (UME) 1398*16kB (UM) 1786*32kB (UME) 1809*64kB (UME) 1284*128kB (UME) 437*256kB (UME) 286*512kB (UME) 207*1024kB (UME) 7*2048kB (UM) 124*4096kB (UM) = 1374648kB [ 2113.807116][ T2347] Bluetooth: hci3: command tx timeout [ 2113.823149][T10927] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2113.824845][T10840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2113.836991][T10927] Node 1 Normal: 192*4kB (UE) 47*8kB (UE) 43*16kB (UE) 213*32kB (UE) 74*64kB (UME) 17*128kB (UME) 3*256kB (UE) 2*512kB (UM) 1*1024kB (U) 2*2048kB (UE) 950*4096kB (M) = 3913672kB [ 2113.861833][T10927] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2113.874447][T10927] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2113.940766][T10948] netlink: 'syz.2.12428': attribute type 9 has an invalid length. [ 2113.950302][T10948] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.12428'. [ 2113.960891][T10927] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2113.972290][T10927] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2113.982126][T10927] 61572 total pagecache pages [ 2113.987337][T10927] 0 pages in swap cache [ 2113.991667][T10927] Free swap = 124512kB [ 2113.996695][T10927] Total swap = 124996kB [ 2114.002451][T10927] 2097051 pages RAM [ 2114.006856][T10927] 0 pages HighMem/MovableOnly [ 2114.011679][T10927] 421729 pages reserved [ 2114.019208][T10927] 0 pages cma reserved [ 2114.029936][T10840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2114.068517][T10949] žÿ: renamed from team_slave_1 (while UP) [ 2114.119219][T10840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2114.343452][T10840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2115.885432][ T2347] Bluetooth: hci3: command tx timeout [ 2116.078671][T10980] netlink: 'syz.0.12435': attribute type 1 has an invalid length. [ 2116.093689][T10980] netlink: 'syz.0.12435': attribute type 3 has an invalid length. [ 2116.114525][T10980] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12435'. [ 2116.487050][T10984] netlink: 'syz.0.12435': attribute type 10 has an invalid length. [ 2116.515682][T10984] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12435'. [ 2116.845140][T11000] FAULT_INJECTION: forcing a failure. [ 2116.845140][T11000] name failslab, interval 1, probability 0, space 0, times 0 [ 2116.881985][T10840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.895915][T11000] CPU: 0 PID: 11000 Comm: syz.0.12439 Not tainted syzkaller #0 [ 2116.903537][T11000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2116.913653][T11000] Call Trace: [ 2116.916979][T11000] [ 2116.919949][T11000] dump_stack_lvl+0x18c/0x250 [ 2116.924688][T11000] ? show_regs_print_info+0x20/0x20 [ 2116.929940][T11000] ? load_image+0x420/0x420 [ 2116.934504][T11000] ? __lock_acquire+0x7eb0/0x7eb0 [ 2116.939585][T11000] should_fail_ex+0x394/0x4c0 [ 2116.944300][T11000] should_failslab+0x9/0x20 [ 2116.948846][T11000] slab_pre_alloc_hook+0x59/0x300 [ 2116.953897][T11000] ? security_sk_alloc+0x4b/0x130 [ 2116.958953][T11000] ? security_sk_alloc+0x4b/0x130 [ 2116.964010][T11000] __kmem_cache_alloc_node+0x53/0x260 [ 2116.969417][T11000] ? security_sk_alloc+0x4b/0x130 [ 2116.974474][T11000] __kmalloc+0xa7/0x240 [ 2116.978674][T11000] ? sk_prot_alloc+0xe7/0x210 [ 2116.983386][T11000] security_sk_alloc+0x4b/0x130 [ 2116.988278][T11000] sk_prot_alloc+0x101/0x210 [ 2116.992909][T11000] ? sk_alloc+0x24/0x350 [ 2116.997186][T11000] sk_alloc+0x3a/0x350 [ 2117.001282][T11000] ? bpf_ctx_init+0x154/0x190 [ 2117.006002][T11000] bpf_prog_test_run_skb+0x371/0x18f0 [ 2117.011416][T11000] ? __fget_files+0x28/0x460 [ 2117.016039][T11000] ? __fget_files+0x3fc/0x460 [ 2117.020753][T11000] ? cpu_online+0x60/0x60 [ 2117.025117][T11000] bpf_prog_test_run+0x31f/0x390 [ 2117.030084][T11000] __sys_bpf+0x49d/0x890 [ 2117.034355][T11000] ? bpf_link_show_fdinfo+0x560/0x560 [ 2117.039765][T11000] ? lock_chain_count+0x20/0x20 [ 2117.044645][T11000] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2117.050659][T11000] __x64_sys_bpf+0x7c/0x90 [ 2117.055108][T11000] do_syscall_64+0x55/0xb0 [ 2117.059555][T11000] ? clear_bhb_loop+0x40/0x90 [ 2117.064287][T11000] ? clear_bhb_loop+0x40/0x90 [ 2117.068999][T11000] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2117.074934][T11000] RIP: 0033:0x7f596a59fb19 [ 2117.079385][T11000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2117.099020][T11000] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2117.107481][T11000] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2117.115480][T11000] RDX: 0000000000000050 RSI: 0000200000000300 RDI: 000000000000000a [ 2117.123478][T11000] RBP: 00007f596b39f090 R08: 0000000000000000 R09: 0000000000000000 [ 2117.131479][T11000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2117.139474][T11000] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2117.147484][T11000] [ 2117.290462][ T4835] hsr_slave_0: left promiscuous mode [ 2119.723927][ T4835] hsr_slave_1: left promiscuous mode [ 2119.743371][ T4835] bridge_slave_0: left allmulticast mode [ 2119.749599][ T4835] bridge_slave_0: left promiscuous mode [ 2119.755491][ T4835] bridge0: port 1(bridge_slave_0) entered disabled state [ 2119.836261][ T4835] veth1_vlan: left promiscuous mode [ 2120.883818][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2120.938388][ T4835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2121.255189][ T4835] bond0 (unregistering): Released all slaves [ 2121.323822][T11010] netlink: 'syz.0.12441': attribute type 10 has an invalid length. [ 2121.332473][T11010] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12441'. [ 2121.344422][T11010] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2121.355064][T11010] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2121.381084][T11010] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2121.423761][T10840] 8021q: adding VLAN 0 to HW filter on device team0 [ 2121.479925][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.487157][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.534103][ T4848] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.541386][ T4848] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2122.088606][T11043] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12448'. [ 2122.261619][T10840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2122.363424][T10840] veth0_vlan: entered promiscuous mode [ 2122.404200][T10840] veth1_vlan: entered promiscuous mode [ 2122.480342][T10840] veth0_macvtap: entered promiscuous mode [ 2122.497889][T10840] veth1_macvtap: entered promiscuous mode [ 2122.534980][T10840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.548244][T10840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.558848][T10840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.580249][T10840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.591876][T10840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2122.607989][T10840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2122.620186][T10840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2124.872059][T10840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.891847][T10840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.904955][T10840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.919866][T10840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.937825][T10840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2124.951420][T10840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2124.963509][T10840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2124.982163][T10840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2124.991387][T10840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.001056][T10840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.019969][T10840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2125.248078][T11052] netlink: 'syz.1.12451': attribute type 5 has an invalid length. [ 2125.665287][T11057] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.12452'. [ 2125.845522][ T4807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2125.864959][ T4807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2125.919581][T11057] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2125.931485][T11057] CPU: 0 PID: 11057 Comm: syz.0.12452 Not tainted syzkaller #0 [ 2125.939113][T11057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2125.949230][T11057] Call Trace: [ 2125.952571][T11057] [ 2125.955552][T11057] dump_stack_lvl+0x18c/0x250 [ 2125.960315][T11057] ? show_regs_print_info+0x20/0x20 [ 2125.965577][T11057] ? load_image+0x420/0x420 [ 2125.970163][T11057] sysfs_warn_dup+0x8e/0xa0 [ 2125.974740][T11057] sysfs_do_create_link_sd+0xc0/0x110 [ 2125.980190][T11057] device_add_class_symlinks+0x1cf/0x240 [ 2125.985916][T11057] device_add+0x4f9/0xc40 [ 2125.990343][T11057] wiphy_register+0x1f24/0x2c70 [ 2125.995359][T11057] ? cfg80211_event_work+0x40/0x40 [ 2126.000517][T11057] ? minstrel_ht_alloc+0x88a/0x990 [ 2126.005676][T11057] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2126.011795][T11057] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2126.017309][T11057] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2126.022904][T11057] ? ieee80211_tasklet_handler+0x20/0x20 [ 2126.028578][T11057] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2126.034541][T11057] ? __debug_object_init+0xec/0x450 [ 2126.039777][T11057] ? __asan_memset+0x22/0x40 [ 2126.044435][T11057] ? __hrtimer_init+0x189/0x270 [ 2126.049349][T11057] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2126.055167][T11057] ? mac80211_hwsim_free+0x220/0x220 [ 2126.060496][T11057] ? rcu_is_watching+0x15/0xb0 [ 2126.065312][T11057] ? kstrndup+0xbd/0x140 [ 2126.069612][T11057] hwsim_new_radio_nl+0xdad/0x1a70 [ 2126.074773][T11057] ? __nla_validate+0x50/0x50 [ 2126.079507][T11057] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2126.085892][T11057] ? __nla_parse+0x40/0x50 [ 2126.090376][T11057] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2126.096842][T11057] genl_family_rcv_msg_doit+0x21a/0x310 [ 2126.102431][T11057] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2126.108382][T11057] ? bpf_lsm_capable+0x9/0x10 [ 2126.113093][T11057] ? security_capable+0x89/0xb0 [ 2126.117992][T11057] genl_rcv_msg+0x611/0x7a0 [ 2126.122535][T11057] ? genl_bind+0x360/0x360 [ 2126.127007][T11057] ? perf_trace_lock+0xfc/0x3b0 [ 2126.131895][T11057] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2126.138295][T11057] ? perf_trace_lock+0xfc/0x3b0 [ 2126.143199][T11057] netlink_rcv_skb+0x235/0x4c0 [ 2126.147998][T11057] ? genl_bind+0x360/0x360 [ 2126.152478][T11057] ? netlink_ack+0x1160/0x1160 [ 2126.157285][T11057] ? __lock_acquire+0x7eb0/0x7eb0 [ 2126.162367][T11057] ? net_generic+0x1e/0x240 [ 2126.166922][T11057] ? down_read+0x1ac/0x2e0 [ 2126.171375][T11057] genl_rcv+0x28/0x40 [ 2126.175396][T11057] netlink_unicast+0x856/0x9e0 [ 2126.180241][T11057] netlink_sendmsg+0x8d0/0xbf0 [ 2126.185049][T11057] ? netlink_getsockopt+0x590/0x590 [ 2126.190294][T11057] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2126.195892][T11057] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2126.201217][T11057] ? security_socket_sendmsg+0x80/0xa0 [ 2126.206984][T11057] ? netlink_getsockopt+0x590/0x590 [ 2126.212241][T11057] ____sys_sendmsg+0x61b/0x980 [ 2126.217053][T11057] ? __asan_memset+0x22/0x40 [ 2126.221689][T11057] ? __sys_sendmsg_sock+0x30/0x30 [ 2126.226751][T11057] ? __import_iovec+0x5f2/0x850 [ 2126.231674][T11057] ? import_iovec+0x73/0xa0 [ 2126.236262][T11057] ___sys_sendmsg+0x2a6/0x360 [ 2126.241003][T11057] ? lock_chain_count+0x20/0x20 [ 2126.246072][T11057] ? __sys_sendmsg+0x2b0/0x2b0 [ 2126.250903][T11057] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2126.258176][T11057] __se_sys_sendmsg+0x1d0/0x2c0 [ 2126.263074][T11057] ? __x64_sys_sendmsg+0x80/0x80 [ 2126.268072][T11057] ? lockdep_hardirqs_on+0x98/0x150 [ 2126.273312][T11057] do_syscall_64+0x55/0xb0 [ 2126.277770][T11057] ? clear_bhb_loop+0x40/0x90 [ 2126.282486][T11057] ? clear_bhb_loop+0x40/0x90 [ 2126.287206][T11057] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2126.293168][T11057] RIP: 0033:0x7f596a59fb19 [ 2126.297651][T11057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2126.317302][T11057] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2126.325781][T11057] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2126.333791][T11057] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2126.341795][T11057] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2126.349801][T11057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2126.357808][T11057] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2126.365868][T11057] [ 2126.565902][ T4817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2126.573801][ T4817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2127.099739][T11074] netlink: 'syz.3.12396': attribute type 9 has an invalid length. [ 2127.127188][T11074] netlink: 201644 bytes leftover after parsing attributes in process `syz.3.12396'. [ 2129.724317][T11078] netlink: 'syz.1.12456': attribute type 10 has an invalid length. [ 2131.522084][T11096] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.12461'. [ 2131.553084][T11096] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2131.596005][T11096] CPU: 0 PID: 11096 Comm: syz.2.12461 Not tainted syzkaller #0 [ 2131.603650][T11096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2131.613767][T11096] Call Trace: [ 2131.617113][T11096] [ 2131.620143][T11096] dump_stack_lvl+0x18c/0x250 [ 2131.624873][T11096] ? show_regs_print_info+0x20/0x20 [ 2131.630122][T11096] ? load_image+0x420/0x420 [ 2131.634685][T11096] sysfs_warn_dup+0x8e/0xa0 [ 2131.639596][T11096] sysfs_do_create_link_sd+0xc0/0x110 [ 2131.645027][T11096] device_add_class_symlinks+0x1cf/0x240 [ 2131.650698][T11096] device_add+0x4f9/0xc40 [ 2131.655089][T11096] wiphy_register+0x1f24/0x2c70 [ 2131.660002][T11096] ? cfg80211_event_work+0x40/0x40 [ 2131.665155][T11096] ? minstrel_ht_alloc+0x88a/0x990 [ 2131.670335][T11096] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2131.676477][T11096] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2131.681985][T11096] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2131.687571][T11096] ? ieee80211_tasklet_handler+0x20/0x20 [ 2131.693239][T11096] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2131.699185][T11096] ? __debug_object_init+0xec/0x450 [ 2131.704430][T11096] ? __asan_memset+0x22/0x40 [ 2131.709059][T11096] ? __hrtimer_init+0x189/0x270 [ 2131.713956][T11096] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2131.719733][T11096] ? mac80211_hwsim_free+0x220/0x220 [ 2131.725057][T11096] ? rcu_is_watching+0x15/0xb0 [ 2131.729872][T11096] ? kstrndup+0xbd/0x140 [ 2131.734173][T11096] hwsim_new_radio_nl+0xdad/0x1a70 [ 2131.739326][T11096] ? __nla_validate+0x50/0x50 [ 2131.744057][T11096] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2131.750435][T11096] ? __nla_parse+0x40/0x50 [ 2131.754910][T11096] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2131.761299][T11096] genl_family_rcv_msg_doit+0x21a/0x310 [ 2131.766915][T11096] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2131.772960][T11096] ? bpf_lsm_capable+0x9/0x10 [ 2131.777766][T11096] ? security_capable+0x89/0xb0 [ 2131.782657][T11096] genl_rcv_msg+0x611/0x7a0 [ 2131.787236][T11096] ? genl_bind+0x360/0x360 [ 2131.791708][T11096] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2131.798070][T11096] ? ref_tracker_free+0x686/0x830 [ 2131.803151][T11096] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2131.808500][T11096] netlink_rcv_skb+0x235/0x4c0 [ 2131.813301][T11096] ? genl_bind+0x360/0x360 [ 2131.817750][T11096] ? netlink_ack+0x1160/0x1160 [ 2131.822563][T11096] ? __lock_acquire+0x7eb0/0x7eb0 [ 2131.827642][T11096] ? down_read+0x1ac/0x2e0 [ 2131.832104][T11096] genl_rcv+0x28/0x40 [ 2131.836120][T11096] netlink_unicast+0x856/0x9e0 [ 2131.840949][T11096] netlink_sendmsg+0x8d0/0xbf0 [ 2131.845755][T11096] ? netlink_getsockopt+0x590/0x590 [ 2131.851007][T11096] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2131.856597][T11096] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2131.861955][T11096] ? security_socket_sendmsg+0x80/0xa0 [ 2131.867463][T11096] ? netlink_getsockopt+0x590/0x590 [ 2131.872699][T11096] ____sys_sendmsg+0x61b/0x980 [ 2131.877514][T11096] ? __asan_memset+0x22/0x40 [ 2131.882167][T11096] ? __sys_sendmsg_sock+0x30/0x30 [ 2131.887228][T11096] ? __import_iovec+0x5f2/0x850 [ 2131.892125][T11096] ? import_iovec+0x73/0xa0 [ 2131.896678][T11096] ___sys_sendmsg+0x2a6/0x360 [ 2131.901490][T11096] ? __sys_sendmsg+0x2b0/0x2b0 [ 2131.906387][T11096] __se_sys_sendmsg+0x1d0/0x2c0 [ 2131.911289][T11096] ? __x64_sys_sendmsg+0x80/0x80 [ 2131.916277][T11096] ? lockdep_hardirqs_on+0x98/0x150 [ 2131.921522][T11096] do_syscall_64+0x55/0xb0 [ 2131.925996][T11096] ? clear_bhb_loop+0x40/0x90 [ 2131.930711][T11096] ? clear_bhb_loop+0x40/0x90 [ 2131.935457][T11096] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2131.941391][T11096] RIP: 0033:0x7f5c59d9fb19 [ 2131.945844][T11096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2131.965486][T11096] RSP: 002b:00007f5c5ac30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2131.973934][T11096] RAX: ffffffffffffffda RBX: 00007f5c5a026090 RCX: 00007f5c59d9fb19 [ 2131.981934][T11096] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2131.989935][T11096] RBP: 00007f5c59e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2131.997939][T11096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2132.005945][T11096] R13: 00007f5c5a026128 R14: 00007f5c5a026090 R15: 00007fffa1965818 [ 2132.013993][T11096] [ 2132.682148][ T4835] hsr_slave_0: left promiscuous mode [ 2132.701814][ T4835] hsr_slave_1: left promiscuous mode [ 2132.863405][ T4835] veth1_vlan: left allmulticast mode [ 2132.873662][ T4835] veth1_vlan: left promiscuous mode [ 2133.886512][ T4835] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2133.950693][ T4835] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2134.337469][ T4835] bond0 (unregistering): Released all slaves [ 2134.389200][T11119] netlink: 'syz.2.12467': attribute type 10 has an invalid length. [ 2137.005820][ T9055] Bluetooth: hci0: command 0x0406 tx timeout [ 2137.954025][T11135] netlink: 'syz.0.12470': attribute type 9 has an invalid length. [ 2137.968350][T11135] netlink: 201644 bytes leftover after parsing attributes in process `syz.0.12470'. [ 2138.744590][T11142] netlink: 203100 bytes leftover after parsing attributes in process `syz.1.12474'. [ 2138.948483][T11150] netlink: 'syz.2.12476': attribute type 3 has an invalid length. [ 2138.956996][T11142] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2138.965205][T11142] CPU: 0 PID: 11142 Comm: syz.1.12474 Not tainted syzkaller #0 [ 2138.972896][T11142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2138.983104][T11142] Call Trace: [ 2138.986471][T11142] [ 2138.989462][T11142] dump_stack_lvl+0x18c/0x250 [ 2138.994239][T11142] ? show_regs_print_info+0x20/0x20 [ 2138.999506][T11142] ? load_image+0x420/0x420 [ 2139.004063][T11142] ? kasan_save_alloc_info+0xb/0x20 [ 2139.009328][T11142] sysfs_warn_dup+0x8e/0xa0 [ 2139.013890][T11142] sysfs_do_create_link_sd+0xc0/0x110 [ 2139.019314][T11142] device_add_class_symlinks+0x1cf/0x240 [ 2139.025014][T11142] device_add+0x4f9/0xc40 [ 2139.029426][T11142] wiphy_register+0x1f24/0x2c70 [ 2139.034359][T11142] ? cfg80211_event_work+0x40/0x40 [ 2139.039519][T11142] ? minstrel_ht_alloc+0x88a/0x990 [ 2139.044683][T11142] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2139.050817][T11142] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2139.056367][T11142] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2139.061975][T11142] ? ieee80211_tasklet_handler+0x20/0x20 [ 2139.067651][T11142] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2139.073596][T11142] ? __debug_object_init+0xec/0x450 [ 2139.078836][T11142] ? __asan_memset+0x22/0x40 [ 2139.083483][T11142] ? __hrtimer_init+0x189/0x270 [ 2139.088386][T11142] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2139.094181][T11142] ? mac80211_hwsim_free+0x220/0x220 [ 2139.099603][T11142] ? rcu_is_watching+0x15/0xb0 [ 2139.104442][T11142] ? kstrndup+0xbd/0x140 [ 2139.108744][T11142] hwsim_new_radio_nl+0xdad/0x1a70 [ 2139.113902][T11142] ? __nla_validate+0x50/0x50 [ 2139.118633][T11142] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2139.125115][T11142] ? __nla_parse+0x40/0x50 [ 2139.129575][T11142] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2139.135956][T11142] genl_family_rcv_msg_doit+0x21a/0x310 [ 2139.142016][T11142] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2139.147959][T11142] ? bpf_lsm_capable+0x9/0x10 [ 2139.152670][T11142] ? security_capable+0x89/0xb0 [ 2139.157569][T11142] genl_rcv_msg+0x611/0x7a0 [ 2139.162550][T11142] ? genl_bind+0x360/0x360 [ 2139.167020][T11142] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2139.173386][T11142] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 2139.180025][T11142] ? ref_tracker_free+0x686/0x830 [ 2139.185110][T11142] netlink_rcv_skb+0x235/0x4c0 [ 2139.189913][T11142] ? genl_bind+0x360/0x360 [ 2139.194374][T11142] ? netlink_ack+0x1160/0x1160 [ 2139.199200][T11142] ? __lock_acquire+0x7eb0/0x7eb0 [ 2139.204280][T11142] ? down_read+0x1ac/0x2e0 [ 2139.208738][T11142] genl_rcv+0x28/0x40 [ 2139.212768][T11142] netlink_unicast+0x856/0x9e0 [ 2139.217601][T11142] netlink_sendmsg+0x8d0/0xbf0 [ 2139.222422][T11142] ? netlink_getsockopt+0x590/0x590 [ 2139.227683][T11142] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2139.233284][T11142] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2139.238615][T11142] ? security_socket_sendmsg+0x80/0xa0 [ 2139.244157][T11142] ? netlink_getsockopt+0x590/0x590 [ 2139.249430][T11142] ____sys_sendmsg+0x61b/0x980 [ 2139.254243][T11142] ? __asan_memset+0x22/0x40 [ 2139.258912][T11142] ? __sys_sendmsg_sock+0x30/0x30 [ 2139.264086][T11142] ? __import_iovec+0x5f2/0x850 [ 2139.268993][T11142] ? import_iovec+0x73/0xa0 [ 2139.273571][T11142] ___sys_sendmsg+0x2a6/0x360 [ 2139.278298][T11142] ? __sys_sendmsg+0x2b0/0x2b0 [ 2139.283130][T11142] ? ktime_get+0x7f/0x280 [ 2139.287527][T11142] __se_sys_sendmsg+0x1d0/0x2c0 [ 2139.292448][T11142] ? __x64_sys_sendmsg+0x80/0x80 [ 2139.297517][T11142] ? lockdep_hardirqs_on+0x98/0x150 [ 2139.302770][T11142] do_syscall_64+0x55/0xb0 [ 2139.307312][T11142] ? clear_bhb_loop+0x40/0x90 [ 2139.312035][T11142] ? clear_bhb_loop+0x40/0x90 [ 2139.316765][T11142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2139.322707][T11142] RIP: 0033:0x7fd0c1d9fb19 [ 2139.327172][T11142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2139.346824][T11142] RSP: 002b:00007fd0c2cb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2139.355303][T11142] RAX: ffffffffffffffda RBX: 00007fd0c2025fa0 RCX: 00007fd0c1d9fb19 [ 2139.363339][T11142] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 2139.371350][T11142] RBP: 00007fd0c1e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2139.379379][T11142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2139.387397][T11142] R13: 00007fd0c2026038 R14: 00007fd0c2025fa0 R15: 00007fff5afa1a18 [ 2139.395434][T11142] [ 2139.424915][T11150] netlink: 'syz.2.12476': attribute type 1 has an invalid length. [ 2139.511762][T11150] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.12476'. [ 2139.655894][T11151] netlink: 'syz.3.12478': attribute type 10 has an invalid length. [ 2142.238040][T11198] netlink: 'syz.0.12495': attribute type 10 has an invalid length. [ 2142.734730][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.259020][T11198] bridge_slave_1: left allmulticast mode [ 2143.264812][T11198] bridge_slave_1: left promiscuous mode [ 2143.275649][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 2143.294723][T11198] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 2143.534811][T11218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12499'. [ 2144.273258][T11228] netlink: 'syz.3.12504': attribute type 3 has an invalid length. [ 2144.283099][T11228] netlink: 'syz.3.12504': attribute type 1 has an invalid length. [ 2144.312666][T11228] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.12504'. [ 2147.686820][T11259] syzkaller0: entered promiscuous mode [ 2147.701428][T11259] syzkaller0: entered allmulticast mode [ 2147.950061][T11270] FAULT_INJECTION: forcing a failure. [ 2147.950061][T11270] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.008762][T11270] CPU: 0 PID: 11270 Comm: syz.1.12520 Not tainted syzkaller #0 [ 2148.016431][T11270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2148.026555][T11270] Call Trace: [ 2148.029886][T11270] [ 2148.032860][T11270] dump_stack_lvl+0x18c/0x250 [ 2148.037633][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2148.043853][T11270] ? show_regs_print_info+0x20/0x20 [ 2148.049140][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2148.055382][T11270] should_fail_ex+0x394/0x4c0 [ 2148.060152][T11270] should_failslab+0x9/0x20 [ 2148.064710][T11270] slab_pre_alloc_hook+0x59/0x300 [ 2148.069793][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2148.076025][T11270] ? kvmalloc_node+0x70/0x180 [ 2148.080811][T11270] ? kvmalloc_node+0x70/0x180 [ 2148.085558][T11270] __kmem_cache_alloc_node+0x53/0x260 [ 2148.091007][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2148.097233][T11270] ? kvmalloc_node+0x70/0x180 [ 2148.101979][T11270] __kmalloc_node+0xa6/0x240 [ 2148.106659][T11270] kvmalloc_node+0x70/0x180 [ 2148.111227][T11270] tun_attach+0x8c8/0x1540 [ 2148.115701][T11270] ? rcu_is_watching+0x15/0xb0 [ 2148.120546][T11270] ? __mod_timer+0x9b0/0xd60 [ 2148.125208][T11270] tun_net_init+0x3f3/0x4e0 [ 2148.130120][T11270] register_netdevice+0x67e/0x1ba0 [ 2148.135301][T11270] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2148.141344][T11270] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 2148.148664][T11270] ? netif_stacked_transfer_operstate+0x210/0x210 [ 2148.155316][T11270] ? lockdep_hardirqs_on+0x98/0x150 [ 2148.160581][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2148.166806][T11270] ? tun_net_initialize+0x1ac/0x480 [ 2148.172115][T11270] ? tun_not_capable+0x1f0/0x1f0 [ 2148.177134][T11270] tun_set_iff+0x82b/0xea0 [ 2148.181630][T11270] __tun_chr_ioctl+0x7e0/0x2070 [ 2148.186557][T11270] ? tun_flow_create+0x310/0x310 [ 2148.191572][T11270] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2148.197822][T11270] ? tun_chr_poll+0x630/0x630 [ 2148.202653][T11270] ? tun_chr_ioctl+0x15/0x30 [ 2148.207306][T11270] ? tun_chr_poll+0x630/0x630 [ 2148.212060][T11270] __se_sys_ioctl+0xfd/0x170 [ 2148.216719][T11270] do_syscall_64+0x55/0xb0 [ 2148.221287][T11270] ? clear_bhb_loop+0x40/0x90 [ 2148.226047][T11270] ? clear_bhb_loop+0x40/0x90 [ 2148.230792][T11270] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2148.236749][T11270] RIP: 0033:0x7fd0c1d9fb19 [ 2148.241215][T11270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2148.260881][T11270] RSP: 002b:00007fd0c2cb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2148.269983][T11270] RAX: ffffffffffffffda RBX: 00007fd0c2025fa0 RCX: 00007fd0c1d9fb19 [ 2148.278100][T11270] RDX: 0000200000000000 RSI: 00000000400454ca RDI: 0000000000000004 [ 2148.286127][T11270] RBP: 00007fd0c2cb1090 R08: 0000000000000000 R09: 0000000000000000 [ 2148.294152][T11270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2148.302173][T11270] R13: 00007fd0c2026038 R14: 00007fd0c2025fa0 R15: 00007fff5afa1a18 [ 2148.310222][T11270] [ 2148.334149][T11278] netlink: 'syz.0.12519': attribute type 9 has an invalid length. [ 2148.345377][T11278] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.12519'. [ 2148.732414][T11266] delete_channel: no stack [ 2149.043906][T11291] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12523'. [ 2149.240846][T11293] netlink: 'syz.0.12522': attribute type 3 has an invalid length. [ 2149.287737][T11293] netlink: 'syz.0.12522': attribute type 1 has an invalid length. [ 2149.320153][T11293] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.12522'. [ 2149.357577][T11290] rxe_eth0 speed is unknown, defaulting to 1000 [ 2152.349476][T11301] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.12527'. [ 2152.430044][T11301] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2152.446132][T11301] CPU: 1 PID: 11301 Comm: syz.2.12527 Not tainted syzkaller #0 [ 2152.453777][T11301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2152.463901][T11301] Call Trace: [ 2152.467249][T11301] [ 2152.470246][T11301] dump_stack_lvl+0x18c/0x250 [ 2152.475000][T11301] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2152.481233][T11301] ? show_regs_print_info+0x20/0x20 [ 2152.486507][T11301] ? load_image+0x420/0x420 [ 2152.491099][T11301] sysfs_warn_dup+0x8e/0xa0 [ 2152.495674][T11301] sysfs_do_create_link_sd+0xc0/0x110 [ 2152.501131][T11301] device_add_class_symlinks+0x1cf/0x240 [ 2152.506870][T11301] device_add+0x4f9/0xc40 [ 2152.511253][T11301] wiphy_register+0x1f24/0x2c70 [ 2152.516173][T11301] ? cfg80211_event_work+0x40/0x40 [ 2152.521416][T11301] ? minstrel_ht_alloc+0x88a/0x990 [ 2152.526582][T11301] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2152.532715][T11301] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2152.538231][T11301] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2152.543825][T11301] ? ieee80211_tasklet_handler+0x20/0x20 [ 2152.549501][T11301] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2152.555455][T11301] ? __debug_object_init+0xec/0x450 [ 2152.560733][T11301] ? __asan_memset+0x22/0x40 [ 2152.565382][T11301] ? __hrtimer_init+0x189/0x270 [ 2152.570278][T11301] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2152.576057][T11301] ? mac80211_hwsim_free+0x220/0x220 [ 2152.581371][T11301] ? rcu_is_watching+0x15/0xb0 [ 2152.586201][T11301] ? kstrndup+0xbd/0x140 [ 2152.590507][T11301] hwsim_new_radio_nl+0xdad/0x1a70 [ 2152.595660][T11301] ? __nla_validate+0x50/0x50 [ 2152.600388][T11301] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2152.606767][T11301] ? __nla_parse+0x40/0x50 [ 2152.611241][T11301] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2152.617618][T11301] genl_family_rcv_msg_doit+0x21a/0x310 [ 2152.623210][T11301] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2152.629235][T11301] ? bpf_lsm_capable+0x9/0x10 [ 2152.633945][T11301] ? security_capable+0x89/0xb0 [ 2152.638840][T11301] genl_rcv_msg+0x611/0x7a0 [ 2152.643388][T11301] ? genl_bind+0x360/0x360 [ 2152.647861][T11301] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2152.654244][T11301] ? perf_trace_preemptirq_template+0xac/0x330 [ 2152.660443][T11301] ? rcu_read_unlock_special+0xf7/0x4d0 [ 2152.666048][T11301] netlink_rcv_skb+0x235/0x4c0 [ 2152.670853][T11301] ? genl_bind+0x360/0x360 [ 2152.675314][T11301] ? netlink_ack+0x1160/0x1160 [ 2152.680139][T11301] ? __lock_acquire+0x7eb0/0x7eb0 [ 2152.685227][T11301] ? down_read+0x1ac/0x2e0 [ 2152.689701][T11301] genl_rcv+0x28/0x40 [ 2152.693728][T11301] netlink_unicast+0x856/0x9e0 [ 2152.698554][T11301] netlink_sendmsg+0x8d0/0xbf0 [ 2152.703365][T11301] ? netlink_getsockopt+0x590/0x590 [ 2152.708618][T11301] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2152.714230][T11301] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2152.719561][T11301] ? security_socket_sendmsg+0x80/0xa0 [ 2152.725068][T11301] ? netlink_getsockopt+0x590/0x590 [ 2152.730303][T11301] ____sys_sendmsg+0x61b/0x980 [ 2152.735113][T11301] ? __asan_memset+0x22/0x40 [ 2152.739744][T11301] ? __sys_sendmsg_sock+0x30/0x30 [ 2152.744806][T11301] ? __import_iovec+0x5f2/0x850 [ 2152.749705][T11301] ? import_iovec+0x73/0xa0 [ 2152.754252][T11301] ___sys_sendmsg+0x2a6/0x360 [ 2152.758968][T11301] ? __sys_sendmsg+0x2b0/0x2b0 [ 2152.763784][T11301] ? ktime_get+0x7f/0x280 [ 2152.768178][T11301] __se_sys_sendmsg+0x1d0/0x2c0 [ 2152.773092][T11301] ? __x64_sys_sendmsg+0x80/0x80 [ 2152.778089][T11301] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2152.784014][T11301] do_syscall_64+0x55/0xb0 [ 2152.788471][T11301] ? clear_bhb_loop+0x40/0x90 [ 2152.793196][T11301] ? clear_bhb_loop+0x40/0x90 [ 2152.797917][T11301] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2152.803870][T11301] RIP: 0033:0x7f5c59d9fb19 [ 2152.808342][T11301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2152.828014][T11301] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2152.836483][T11301] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2152.844498][T11301] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2152.852530][T11301] RBP: 00007f5c59e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2152.860551][T11301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2152.868579][T11301] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2152.876728][T11301] [ 2153.517052][T11319] FAULT_INJECTION: forcing a failure. [ 2153.517052][T11319] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.536387][T11319] CPU: 0 PID: 11319 Comm: syz.0.12533 Not tainted syzkaller #0 [ 2153.544035][T11319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2153.554137][T11319] Call Trace: [ 2153.557460][T11319] [ 2153.560434][T11319] dump_stack_lvl+0x18c/0x250 [ 2153.565606][T11319] ? show_regs_print_info+0x20/0x20 [ 2153.570854][T11319] ? load_image+0x420/0x420 [ 2153.575428][T11319] ? __might_sleep+0xe0/0xe0 [ 2153.580075][T11319] ? __lock_acquire+0x7eb0/0x7eb0 [ 2153.585164][T11319] should_fail_ex+0x394/0x4c0 [ 2153.589903][T11319] should_failslab+0x9/0x20 [ 2153.594460][T11319] slab_pre_alloc_hook+0x59/0x300 [ 2153.599534][T11319] ? __lock_acquire+0x7eb0/0x7eb0 [ 2153.604616][T11319] kmem_cache_alloc_node+0x5e/0x320 [ 2153.609862][T11319] ? __alloc_skb+0x103/0x2c0 [ 2153.614509][T11319] __alloc_skb+0x103/0x2c0 [ 2153.618991][T11319] netlink_sendmsg+0x66a/0xbf0 [ 2153.623808][T11319] ? netlink_getsockopt+0x590/0x590 [ 2153.629051][T11319] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2153.634663][T11319] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2153.640020][T11319] ? security_socket_sendmsg+0x80/0xa0 [ 2153.645543][T11319] ? netlink_getsockopt+0x590/0x590 [ 2153.650827][T11319] ____sys_sendmsg+0x61b/0x980 [ 2153.655669][T11319] ? __asan_memset+0x22/0x40 [ 2153.660320][T11319] ? __sys_sendmsg_sock+0x30/0x30 [ 2153.665417][T11319] ? __import_iovec+0x5f2/0x850 [ 2153.670339][T11319] ? import_iovec+0x73/0xa0 [ 2153.674866][T11319] ___sys_sendmsg+0x2a6/0x360 [ 2153.679673][T11319] ? __sys_sendmsg+0x2b0/0x2b0 [ 2153.684519][T11319] ? trace_call_bpf+0xc3/0x6c0 [ 2153.689362][T11319] __se_sys_sendmsg+0x1d0/0x2c0 [ 2153.694281][T11319] ? perf_trace_preemptirq_template+0x269/0x330 [ 2153.700588][T11319] ? __x64_sys_sendmsg+0x80/0x80 [ 2153.705597][T11319] ? lockdep_hardirqs_on+0x98/0x150 [ 2153.710864][T11319] do_syscall_64+0x55/0xb0 [ 2153.715346][T11319] ? clear_bhb_loop+0x40/0x90 [ 2153.720082][T11319] ? clear_bhb_loop+0x40/0x90 [ 2153.724824][T11319] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2153.730778][T11319] RIP: 0033:0x7f596a59fb19 [ 2153.735257][T11319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2153.754945][T11319] RSP: 002b:00007f596b37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2153.763434][T11319] RAX: ffffffffffffffda RBX: 00007f596a826090 RCX: 00007f596a59fb19 [ 2153.771469][T11319] RDX: 0000000000044010 RSI: 0000200000000980 RDI: 0000000000000009 [ 2153.779496][T11319] RBP: 00007f596b37e090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.787527][T11319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.795556][T11319] R13: 00007f596a826128 R14: 00007f596a826090 R15: 00007ffcec9fe9c8 [ 2153.803636][T11319] [ 2157.080488][T11339] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.12540'. [ 2157.112718][T11339] netlink: 'syz.1.12540': attribute type 2 has an invalid length. [ 2157.413923][T11347] netlink: 'syz.0.12543': attribute type 9 has an invalid length. [ 2157.440277][T11347] netlink: 'syz.0.12543': attribute type 23 has an invalid length. [ 2157.459798][T11347] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.12543'. [ 2158.584795][T11372] netlink: 'syz.0.12551': attribute type 21 has an invalid length. [ 2158.734666][T11372] netlink: 128 bytes leftover after parsing attributes in process `syz.0.12551'. [ 2158.908261][T11372] netlink: 3 bytes leftover after parsing attributes in process `syz.0.12551'. [ 2159.316448][T11364] netlink: 'syz.1.12547': attribute type 3 has an invalid length. [ 2159.334095][T11364] netlink: 108472 bytes leftover after parsing attributes in process `syz.1.12547'. [ 2159.949179][T11390] netlink: 'syz.2.12558': attribute type 46 has an invalid length. [ 2159.985693][T11390] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12558'. [ 2160.017519][T11393] netlink: 'syz.2.12558': attribute type 46 has an invalid length. [ 2160.035613][T11393] netlink: 2 bytes leftover after parsing attributes in process `syz.2.12558'. [ 2160.120105][T11394] dummy0: entered promiscuous mode [ 2160.148859][T11394] netlink: 'syz.1.12557': attribute type 10 has an invalid length. [ 2160.198788][T11394] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12557'. [ 2160.252746][T11394] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 2160.533941][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.540442][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2162.612690][ T9055] Bluetooth: hci2: command 0x0406 tx timeout [ 2165.178805][T11424] netlink: 'syz.3.12566': attribute type 3 has an invalid length. [ 2165.317060][T11424] netlink: 108472 bytes leftover after parsing attributes in process `syz.3.12566'. [ 2165.641080][T11461] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.12579'. [ 2173.736956][T11492] netlink: 'syz.2.12587': attribute type 21 has an invalid length. [ 2173.744923][T11492] netlink: 128 bytes leftover after parsing attributes in process `syz.2.12587'. [ 2173.765375][T11492] netlink: 3 bytes leftover after parsing attributes in process `syz.2.12587'. [ 2174.254428][T11510] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12593'. [ 2176.101314][T11501] netlink: 'syz.0.12590': attribute type 3 has an invalid length. [ 2176.186208][T11501] netlink: 108472 bytes leftover after parsing attributes in process `syz.0.12590'. [ 2177.408229][T11524] netlink: 'syz.1.12597': attribute type 21 has an invalid length. [ 2177.444162][T11524] netlink: 'syz.1.12597': attribute type 12 has an invalid length. [ 2177.476734][T11524] netlink: 'syz.1.12597': attribute type 13 has an invalid length. [ 2177.505452][T11524] netlink: 'syz.1.12597': attribute type 14 has an invalid length. [ 2177.513443][T11524] netlink: 'syz.1.12597': attribute type 15 has an invalid length. [ 2177.540946][T11524] netlink: 'syz.1.12597': attribute type 16 has an invalid length. [ 2177.562864][T11524] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.12597'. [ 2178.321121][T11530] netlink: 'syz.1.12602': attribute type 21 has an invalid length. [ 2178.366191][T11530] netlink: 128 bytes leftover after parsing attributes in process `syz.1.12602'. [ 2178.407419][T11530] netlink: 3 bytes leftover after parsing attributes in process `syz.1.12602'. [ 2178.852667][T11541] netlink: 'syz.2.12605': attribute type 10 has an invalid length. [ 2181.034950][T11541] wlan1: mtu less than device minimum [ 2181.065389][T11541] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 2181.687741][T11560] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12609'. [ 2181.756561][T11560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2181.967485][T11562] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12610'. [ 2181.988811][T11562] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2183.495839][T11580] netlink: 'syz.3.12615': attribute type 21 has an invalid length. [ 2187.182596][T11639] netlink: 'syz.2.12639': attribute type 10 has an invalid length. [ 2187.211646][T11639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12639'. [ 2187.252085][T11639] veth0_vlan: entered allmulticast mode [ 2187.281340][T11639] bridge0: port 3(veth0_vlan) entered blocking state [ 2187.308205][T11639] bridge0: port 3(veth0_vlan) entered disabled state [ 2187.344304][T11639] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2189.054856][T11645] netlink: 128 bytes leftover after parsing attributes in process `syz.3.12643'. [ 2189.076950][T11645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2189.379228][T11649] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12642'. [ 2189.390929][T11649] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2189.855038][T11664] netlink: 'syz.0.12650': attribute type 10 has an invalid length. [ 2190.941270][T11672] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12653'. [ 2190.989667][T11677] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12654'. [ 2190.999306][T11677] ýÿ: renamed from virt_wifi0 [ 2191.914938][T11686] netlink: 'syz.0.12658': attribute type 21 has an invalid length. [ 2192.029790][T11691] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.12660'. [ 2192.558480][T11700] netlink: 'syz.1.12670': attribute type 21 has an invalid length. [ 2192.578541][T11701] FAULT_INJECTION: forcing a failure. [ 2192.578541][T11701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2192.618242][T11701] CPU: 0 PID: 11701 Comm: syz.0.12662 Not tainted syzkaller #0 [ 2192.625890][T11701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2192.636001][T11701] Call Trace: [ 2192.639352][T11701] [ 2192.642350][T11701] dump_stack_lvl+0x18c/0x250 [ 2192.647096][T11701] ? show_regs_print_info+0x20/0x20 [ 2192.652422][T11701] ? load_image+0x420/0x420 [ 2192.657017][T11701] ? __might_fault+0xaa/0x120 [ 2192.661750][T11701] ? __lock_acquire+0x7eb0/0x7eb0 [ 2192.666841][T11701] should_fail_ex+0x394/0x4c0 [ 2192.671599][T11701] _copy_from_user+0x2f/0xe0 [ 2192.676250][T11701] kstrtouint_from_user+0xde/0x170 [ 2192.681422][T11701] ? kstrtol_from_user+0x190/0x190 [ 2192.686607][T11701] proc_fail_nth_write+0x8f/0x250 [ 2192.691686][T11701] ? proc_fail_nth_read+0x260/0x260 [ 2192.696930][T11701] ? proc_fail_nth_read+0x260/0x260 [ 2192.702170][T11701] vfs_write+0x299/0x9a0 [ 2192.706472][T11701] ? file_end_write+0x250/0x250 [ 2192.711367][T11701] ? __fget_files+0x28/0x460 [ 2192.716012][T11701] ? __fget_files+0x3fc/0x460 [ 2192.720734][T11701] ? __fdget_pos+0x2a3/0x330 [ 2192.725360][T11701] ? ksys_write+0x74/0x260 [ 2192.729835][T11701] ksys_write+0x151/0x260 [ 2192.734211][T11701] ? __ia32_sys_read+0x90/0x90 [ 2192.739019][T11701] ? lockdep_hardirqs_on+0x98/0x150 [ 2192.744271][T11701] do_syscall_64+0x55/0xb0 [ 2192.748725][T11701] ? clear_bhb_loop+0x40/0x90 [ 2192.753434][T11701] ? clear_bhb_loop+0x40/0x90 [ 2192.758146][T11701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2192.764074][T11701] RIP: 0033:0x7f596a56034e [ 2192.768529][T11701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2192.788186][T11701] RSP: 002b:00007f596b39efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2192.796632][T11701] RAX: ffffffffffffffda RBX: 00007f596b39f6c0 RCX: 00007f596a56034e [ 2192.804716][T11701] RDX: 0000000000000001 RSI: 00007f596b39f0a0 RDI: 0000000000000009 [ 2192.812732][T11701] RBP: 00007f596b39f090 R08: 0000000000000000 R09: 0000000000000000 [ 2192.820779][T11701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2192.828787][T11701] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2192.836806][T11701] [ 2192.902271][T11702] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.12661'. [ 2192.946975][T11702] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2192.985774][T11706] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.12663'. [ 2195.820795][T11743] netlink: 'syz.1.12676': attribute type 9 has an invalid length. [ 2195.839224][T11743] netlink: 134780 bytes leftover after parsing attributes in process `syz.1.12676'. [ 2197.537162][T11731] netlink: 'syz.2.12675': attribute type 21 has an invalid length. [ 2197.552050][T11732] rxe_eth0 speed is unknown, defaulting to 1000 [ 2197.568868][T11741] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 2197.991937][T11750] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.12677'. [ 2198.739223][T11754] netlink: 'syz.3.12679': attribute type 3 has an invalid length. [ 2198.747478][T11754] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12679'. [ 2198.832517][T11754] nr0: port 1(hsr0) entered blocking state [ 2198.845766][T11754] nr0: port 1(hsr0) entered disabled state [ 2198.852142][T11754] hsr0: entered allmulticast mode [ 2198.872842][T11754] hsr_slave_0: entered allmulticast mode [ 2198.905514][T11754] hsr_slave_1: entered allmulticast mode [ 2198.947037][T11754] hsr0: entered promiscuous mode [ 2199.559976][T11773] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12687'. [ 2199.575947][T11773] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12687'. [ 2200.564644][T11782] netlink: 'syz.3.12692': attribute type 4 has an invalid length. [ 2200.597203][T11782] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.12692'. [ 2200.884650][T11792] netlink: 'syz.2.12695': attribute type 1 has an invalid length. [ 2200.893952][T11792] netlink: 'syz.2.12695': attribute type 3 has an invalid length. [ 2200.914907][T11792] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12695'. [ 2201.959045][T11810] rxe_eth0 speed is unknown, defaulting to 1000 [ 2208.033814][T11858] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.12714'. [ 2208.092230][T11858] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2208.108555][T11858] CPU: 0 PID: 11858 Comm: syz.0.12714 Not tainted syzkaller #0 [ 2208.116190][T11858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2208.126300][T11858] Call Trace: [ 2208.129625][T11858] [ 2208.132605][T11858] dump_stack_lvl+0x18c/0x250 [ 2208.137383][T11858] ? show_regs_print_info+0x20/0x20 [ 2208.142652][T11858] ? load_image+0x420/0x420 [ 2208.147224][T11858] ? kasan_save_alloc_info+0xb/0x20 [ 2208.152501][T11858] sysfs_warn_dup+0x8e/0xa0 [ 2208.157097][T11858] sysfs_do_create_link_sd+0xc0/0x110 [ 2208.162532][T11858] device_add_class_symlinks+0x1cf/0x240 [ 2208.168211][T11858] device_add+0x4f9/0xc40 [ 2208.172584][T11858] wiphy_register+0x1f24/0x2c70 [ 2208.177497][T11858] ? cfg80211_event_work+0x40/0x40 [ 2208.182649][T11858] ? minstrel_ht_alloc+0x88a/0x990 [ 2208.187803][T11858] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2208.193911][T11858] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2208.199421][T11858] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2208.205016][T11858] ? ieee80211_tasklet_handler+0x20/0x20 [ 2208.210687][T11858] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2208.216625][T11858] ? __debug_object_init+0xec/0x450 [ 2208.221866][T11858] ? __asan_memset+0x22/0x40 [ 2208.226495][T11858] ? __hrtimer_init+0x189/0x270 [ 2208.231382][T11858] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2208.237169][T11858] ? mac80211_hwsim_free+0x220/0x220 [ 2208.242484][T11858] ? rcu_is_watching+0x15/0xb0 [ 2208.247296][T11858] ? kstrndup+0xbd/0x140 [ 2208.251592][T11858] hwsim_new_radio_nl+0xdad/0x1a70 [ 2208.256742][T11858] ? __nla_validate+0x50/0x50 [ 2208.261503][T11858] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2208.267875][T11858] ? __nla_parse+0x40/0x50 [ 2208.272334][T11858] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2208.278701][T11858] genl_family_rcv_msg_doit+0x21a/0x310 [ 2208.284304][T11858] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2208.290239][T11858] ? bpf_lsm_capable+0x9/0x10 [ 2208.294950][T11858] ? security_capable+0x89/0xb0 [ 2208.299841][T11858] genl_rcv_msg+0x611/0x7a0 [ 2208.304382][T11858] ? genl_bind+0x360/0x360 [ 2208.308826][T11858] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2208.315200][T11858] netlink_rcv_skb+0x235/0x4c0 [ 2208.320009][T11858] ? genl_bind+0x360/0x360 [ 2208.324460][T11858] ? netlink_ack+0x1160/0x1160 [ 2208.329342][T11858] ? __lock_acquire+0x7eb0/0x7eb0 [ 2208.334400][T11858] ? net_generic+0x1e/0x240 [ 2208.338947][T11858] ? down_read+0x1ac/0x2e0 [ 2208.343395][T11858] genl_rcv+0x28/0x40 [ 2208.347409][T11858] netlink_unicast+0x856/0x9e0 [ 2208.352229][T11858] netlink_sendmsg+0x8d0/0xbf0 [ 2208.357053][T11858] ? netlink_getsockopt+0x590/0x590 [ 2208.362283][T11858] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2208.367867][T11858] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2208.373206][T11858] ? security_socket_sendmsg+0x80/0xa0 [ 2208.378699][T11858] ? netlink_getsockopt+0x590/0x590 [ 2208.383930][T11858] ____sys_sendmsg+0x61b/0x980 [ 2208.388743][T11858] ? __asan_memset+0x22/0x40 [ 2208.393382][T11858] ? __sys_sendmsg_sock+0x30/0x30 [ 2208.398436][T11858] ? __import_iovec+0x5f2/0x850 [ 2208.403340][T11858] ? import_iovec+0x73/0xa0 [ 2208.407897][T11858] ___sys_sendmsg+0x2a6/0x360 [ 2208.412640][T11858] ? __sys_sendmsg+0x2b0/0x2b0 [ 2208.417488][T11858] __se_sys_sendmsg+0x1d0/0x2c0 [ 2208.422381][T11858] ? __x64_sys_sendmsg+0x80/0x80 [ 2208.427354][T11858] ? lockdep_hardirqs_on+0x98/0x150 [ 2208.432595][T11858] ? __x64_sys_sendmsg+0x1d/0x80 [ 2208.437569][T11858] ? __sanitizer_cov_trace_pc+0x36/0x60 [ 2208.443159][T11858] do_syscall_64+0x55/0xb0 [ 2208.447616][T11858] ? clear_bhb_loop+0x40/0x90 [ 2208.452332][T11858] ? clear_bhb_loop+0x40/0x90 [ 2208.457072][T11858] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2208.463002][T11858] RIP: 0033:0x7f596a59fb19 [ 2208.467467][T11858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2208.487105][T11858] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2208.495639][T11858] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2208.503655][T11858] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2208.511650][T11858] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2208.519646][T11858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2208.527677][T11858] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2208.535804][T11858] [ 2208.591180][T11868] FAULT_INJECTION: forcing a failure. [ 2208.591180][T11868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2208.607723][T11868] CPU: 0 PID: 11868 Comm: syz.2.12718 Not tainted syzkaller #0 [ 2208.615360][T11868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2208.625470][T11868] Call Trace: [ 2208.628797][T11868] [ 2208.631776][T11868] dump_stack_lvl+0x18c/0x250 [ 2208.636535][T11868] ? show_regs_print_info+0x20/0x20 [ 2208.641793][T11868] ? load_image+0x420/0x420 [ 2208.646371][T11868] ? __lock_acquire+0x7eb0/0x7eb0 [ 2208.651451][T11868] ? snprintf+0xe9/0x140 [ 2208.655751][T11868] should_fail_ex+0x394/0x4c0 [ 2208.660495][T11868] _copy_to_user+0x2f/0xa0 [ 2208.664969][T11868] simple_read_from_buffer+0xe7/0x150 [ 2208.670415][T11868] proc_fail_nth_read+0x1e8/0x260 [ 2208.675510][T11868] ? proc_fault_inject_write+0x360/0x360 [ 2208.681214][T11868] ? fsnotify_perm+0x271/0x5e0 [ 2208.686035][T11868] ? proc_fault_inject_write+0x360/0x360 [ 2208.691728][T11868] vfs_read+0x298/0x990 [ 2208.695997][T11868] ? kernel_read+0x1e0/0x1e0 [ 2208.700650][T11868] ? __fget_files+0x28/0x460 [ 2208.705321][T11868] ? __fget_files+0x3fc/0x460 [ 2208.710062][T11868] ? __fdget_pos+0x2a3/0x330 [ 2208.714704][T11868] ? ksys_read+0x74/0x260 [ 2208.719095][T11868] ksys_read+0x151/0x260 [ 2208.723400][T11868] ? vfs_write+0x9a0/0x9a0 [ 2208.727873][T11868] ? lockdep_hardirqs_on+0x98/0x150 [ 2208.733191][T11868] do_syscall_64+0x55/0xb0 [ 2208.737719][T11868] ? clear_bhb_loop+0x40/0x90 [ 2208.742459][T11868] ? clear_bhb_loop+0x40/0x90 [ 2208.747200][T11868] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2208.753156][T11868] RIP: 0033:0x7f5c59d6034e [ 2208.757626][T11868] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2208.777285][T11868] RSP: 002b:00007f5c5ac50fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2208.785759][T11868] RAX: ffffffffffffffda RBX: 00007f5c5ac516c0 RCX: 00007f5c59d6034e [ 2208.793782][T11868] RDX: 000000000000000f RSI: 00007f5c5ac510a0 RDI: 0000000000000003 [ 2208.801820][T11868] RBP: 00007f5c5ac51090 R08: 0000000000000000 R09: 0000000000000000 [ 2208.809847][T11868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2208.817873][T11868] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2208.825963][T11868] [ 2209.248012][T11882] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.12722'. [ 2209.519605][T11891] FAULT_INJECTION: forcing a failure. [ 2209.519605][T11891] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2209.601426][T11891] CPU: 1 PID: 11891 Comm: syz.2.12725 Not tainted syzkaller #0 [ 2209.609065][T11891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2209.619170][T11891] Call Trace: [ 2209.622504][T11891] [ 2209.625479][T11891] dump_stack_lvl+0x18c/0x250 [ 2209.630315][T11891] ? show_regs_print_info+0x20/0x20 [ 2209.635581][T11891] ? load_image+0x420/0x420 [ 2209.640141][T11891] ? __might_fault+0xaa/0x120 [ 2209.644877][T11891] ? __lock_acquire+0x7eb0/0x7eb0 [ 2209.649992][T11891] should_fail_ex+0x394/0x4c0 [ 2209.654747][T11891] _copy_from_iter+0x1cd/0x1290 [ 2209.659684][T11891] ? rcu_is_watching+0x15/0xb0 [ 2209.664517][T11891] ? copyout_mc+0x70/0x70 [ 2209.668906][T11891] ? __virt_addr_valid+0x10c/0x380 [ 2209.674108][T11891] ? __virt_addr_valid+0x10c/0x380 [ 2209.679310][T11891] ? __virt_addr_valid+0x10c/0x380 [ 2209.684483][T11891] ? __check_object_size+0x4fc/0xa40 [ 2209.689833][T11891] netlink_sendmsg+0x76b/0xbf0 [ 2209.694666][T11891] ? netlink_getsockopt+0x590/0x590 [ 2209.699922][T11891] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2209.705549][T11891] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2209.710891][T11891] ? security_socket_sendmsg+0x80/0xa0 [ 2209.716398][T11891] ? netlink_getsockopt+0x590/0x590 [ 2209.721630][T11891] ____sys_sendmsg+0x61b/0x980 [ 2209.726476][T11891] ? __asan_memset+0x22/0x40 [ 2209.731103][T11891] ? __sys_sendmsg_sock+0x30/0x30 [ 2209.736160][T11891] ? __import_iovec+0x5f2/0x850 [ 2209.741055][T11891] ? import_iovec+0x73/0xa0 [ 2209.745595][T11891] ___sys_sendmsg+0x2a6/0x360 [ 2209.750314][T11891] ? __sys_sendmsg+0x2b0/0x2b0 [ 2209.755123][T11891] ? trace_call_bpf+0xc3/0x6c0 [ 2209.759969][T11891] __se_sys_sendmsg+0x1d0/0x2c0 [ 2209.764854][T11891] ? __x64_sys_sendmsg+0x80/0x80 [ 2209.769838][T11891] ? lockdep_hardirqs_on+0x98/0x150 [ 2209.775071][T11891] do_syscall_64+0x55/0xb0 [ 2209.779521][T11891] ? clear_bhb_loop+0x40/0x90 [ 2209.784233][T11891] ? clear_bhb_loop+0x40/0x90 [ 2209.788953][T11891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2209.794877][T11891] RIP: 0033:0x7f5c59d9fb19 [ 2209.799323][T11891] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2209.818965][T11891] RSP: 002b:00007f5c5ac30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2209.827417][T11891] RAX: ffffffffffffffda RBX: 00007f5c5a026090 RCX: 00007f5c59d9fb19 [ 2209.835458][T11891] RDX: 0000000000044010 RSI: 0000200000000980 RDI: 0000000000000009 [ 2209.843458][T11891] RBP: 00007f5c5ac30090 R08: 0000000000000000 R09: 0000000000000000 [ 2209.851458][T11891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2209.859463][T11891] R13: 00007f5c5a026128 R14: 00007f5c5a026090 R15: 00007fffa1965818 [ 2209.867484][T11891] [ 2210.632383][T11902] netlink: 156 bytes leftover after parsing attributes in process `syz.0.12730'. [ 2210.963263][T11903] rxe_eth0 speed is unknown, defaulting to 1000 [ 2213.633978][T11934] netlink: 156 bytes leftover after parsing attributes in process `syz.1.12741'. [ 2215.695898][T11979] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.12757'. [ 2215.729145][T11979] bridge_slave_1: default FDB implementation only supports local addresses [ 2215.805050][T11976] rxe_eth0 speed is unknown, defaulting to 1000 [ 2220.413130][T12023] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.12775'. [ 2220.675379][T12024] netlink: 'syz.1.12775': attribute type 27 has an invalid length. [ 2220.725342][T12024] netlink: 152 bytes leftover after parsing attributes in process `syz.1.12775'. [ 2220.735044][T12024] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2221.155087][T12031] delete_channel: no stack [ 2222.007159][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.013653][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2223.132507][T12058] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.12788'. [ 2223.180918][T12058] netlink: 'syz.3.12788': attribute type 27 has an invalid length. [ 2223.190974][T12058] netlink: 152 bytes leftover after parsing attributes in process `syz.3.12788'. [ 2223.206645][T12058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 2223.697763][T12064] netlink: 'syz.0.12789': attribute type 10 has an invalid length. [ 2225.860728][T12096] netlink: 'syz.2.12806': attribute type 10 has an invalid length. [ 2226.668125][T12095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2227.835891][T12118] netlink: 'syz.2.12814': attribute type 21 has an invalid length. [ 2227.880495][T12118] IPv6: NLM_F_CREATE should be specified when creating new route [ 2228.289553][T12131] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.12817'. [ 2228.553751][T12133] macvlan1: entered promiscuous mode [ 2228.559770][T12133] macvlan1: entered allmulticast mode [ 2228.565852][T12133] veth1_vlan: entered allmulticast mode [ 2229.840413][T12155] rxe_eth0 speed is unknown, defaulting to 1000 [ 2231.731690][T12172] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.12831'. [ 2231.796951][T12177] macvlan1: entered promiscuous mode [ 2231.823173][T12177] macvlan1: entered allmulticast mode [ 2231.840790][T12177] veth1_vlan: entered allmulticast mode [ 2231.873439][T12172] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 2231.958356][T12179] netlink: 'syz.3.12832': attribute type 10 has an invalid length. [ 2231.967529][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12832'. [ 2231.977757][T12179] veth0_vlan: entered allmulticast mode [ 2231.984173][T12179] bridge0: port 3(veth0_vlan) entered blocking state [ 2231.992210][T12179] bridge0: port 3(veth0_vlan) entered disabled state [ 2232.002726][T12179] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2233.870083][T12210] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.12841'. [ 2233.902515][T12210] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 2234.268363][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12856'. [ 2234.285501][ T9055] Bluetooth: hci3: command 0x0406 tx timeout [ 2235.775777][T12244] sit0: entered allmulticast mode [ 2235.823923][T12241] sit0: entered promiscuous mode [ 2236.214721][T12252] netlink: 156 bytes leftover after parsing attributes in process `syz.3.12855'. [ 2236.251530][T12250] rxe_eth0 speed is unknown, defaulting to 1000 [ 2238.766848][T12307] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12875'. [ 2238.793379][T12307] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12875'. [ 2238.847316][T12307] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12875'. [ 2239.384164][T12307] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12875'. [ 2239.499353][T12307] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.12875'. [ 2241.675804][T12344] netlink: 'syz.3.12890': attribute type 10 has an invalid length. [ 2241.805954][T12344] team0: Device wg1 is of different type [ 2242.943490][T12356] sit0: entered allmulticast mode [ 2242.995436][T12357] netlink: 'syz.0.12894': attribute type 10 has an invalid length. [ 2243.036410][T12357] veth1_vlan: left allmulticast mode [ 2243.056365][T12357] macvlan1: left promiscuous mode [ 2243.096566][T12358] sit0: entered promiscuous mode [ 2243.723405][T12379] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.12903'. [ 2243.799868][T12379] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2243.813068][T12379] CPU: 1 PID: 12379 Comm: syz.2.12903 Not tainted syzkaller #0 [ 2243.820693][T12379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2243.830821][T12379] Call Trace: [ 2243.834166][T12379] [ 2243.837152][T12379] dump_stack_lvl+0x18c/0x250 [ 2243.841901][T12379] ? show_regs_print_info+0x20/0x20 [ 2243.847165][T12379] ? load_image+0x420/0x420 [ 2243.851783][T12379] sysfs_warn_dup+0x8e/0xa0 [ 2243.856350][T12379] sysfs_do_create_link_sd+0xc0/0x110 [ 2243.861812][T12379] device_add_class_symlinks+0x1cf/0x240 [ 2243.867507][T12379] device_add+0x4f9/0xc40 [ 2243.871882][T12379] wiphy_register+0x1f24/0x2c70 [ 2243.876791][T12379] ? cfg80211_event_work+0x40/0x40 [ 2243.881940][T12379] ? minstrel_ht_alloc+0x88a/0x990 [ 2243.887092][T12379] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2243.893382][T12379] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2243.898895][T12379] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2243.904484][T12379] ? ieee80211_tasklet_handler+0x20/0x20 [ 2243.910147][T12379] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2243.916096][T12379] ? __debug_object_init+0xec/0x450 [ 2243.921344][T12379] ? __asan_memset+0x22/0x40 [ 2243.925992][T12379] ? __hrtimer_init+0x189/0x270 [ 2243.930889][T12379] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2243.936665][T12379] ? mac80211_hwsim_free+0x220/0x220 [ 2243.941974][T12379] ? rcu_is_watching+0x15/0xb0 [ 2243.946771][T12379] ? kstrndup+0xbd/0x140 [ 2243.951060][T12379] hwsim_new_radio_nl+0xdad/0x1a70 [ 2243.956208][T12379] ? __nla_validate+0x50/0x50 [ 2243.960945][T12379] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2243.967331][T12379] ? __nla_parse+0x40/0x50 [ 2243.971790][T12379] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2243.978173][T12379] genl_family_rcv_msg_doit+0x21a/0x310 [ 2243.983767][T12379] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2243.989700][T12379] ? bpf_lsm_capable+0x9/0x10 [ 2243.994412][T12379] ? security_capable+0x89/0xb0 [ 2243.999301][T12379] genl_rcv_msg+0x611/0x7a0 [ 2244.003855][T12379] ? genl_bind+0x360/0x360 [ 2244.008305][T12379] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2244.014671][T12379] ? perf_trace_lock+0x303/0x3b0 [ 2244.019654][T12379] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2244.025859][T12379] netlink_rcv_skb+0x235/0x4c0 [ 2244.030653][T12379] ? genl_bind+0x360/0x360 [ 2244.035098][T12379] ? netlink_ack+0x1160/0x1160 [ 2244.039903][T12379] ? __lock_acquire+0x7eb0/0x7eb0 [ 2244.044983][T12379] ? down_read+0x1ac/0x2e0 [ 2244.049433][T12379] genl_rcv+0x28/0x40 [ 2244.053456][T12379] netlink_unicast+0x856/0x9e0 [ 2244.058319][T12379] netlink_sendmsg+0x8d0/0xbf0 [ 2244.063184][T12379] ? netlink_getsockopt+0x590/0x590 [ 2244.068436][T12379] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2244.074049][T12379] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2244.079398][T12379] ? security_socket_sendmsg+0x80/0xa0 [ 2244.084908][T12379] ? netlink_getsockopt+0x590/0x590 [ 2244.090161][T12379] ____sys_sendmsg+0x61b/0x980 [ 2244.094970][T12379] ? __asan_memset+0x22/0x40 [ 2244.099604][T12379] ? __sys_sendmsg_sock+0x30/0x30 [ 2244.104667][T12379] ? __import_iovec+0x5f2/0x850 [ 2244.109565][T12379] ? import_iovec+0x73/0xa0 [ 2244.114109][T12379] ___sys_sendmsg+0x2a6/0x360 [ 2244.118824][T12379] ? __sys_sendmsg+0x2b0/0x2b0 [ 2244.123677][T12379] __se_sys_sendmsg+0x1d0/0x2c0 [ 2244.128562][T12379] ? __x64_sys_sendmsg+0x80/0x80 [ 2244.133549][T12379] ? lockdep_hardirqs_on+0x98/0x150 [ 2244.138794][T12379] do_syscall_64+0x55/0xb0 [ 2244.143245][T12379] ? clear_bhb_loop+0x40/0x90 [ 2244.147962][T12379] ? clear_bhb_loop+0x40/0x90 [ 2244.152689][T12379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2244.158627][T12379] RIP: 0033:0x7f5c59d9fb19 [ 2244.163077][T12379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2244.182725][T12379] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2244.191204][T12379] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2244.199209][T12379] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2244.207210][T12379] RBP: 00007f5c59e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2244.215211][T12379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2244.223217][T12379] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2244.231272][T12379] [ 2244.554758][T12394] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.12908'. [ 2244.803140][T12406] netlink: 'syz.3.12911': attribute type 10 has an invalid length. [ 2244.895700][T12407] netlink: 'syz.1.12910': attribute type 10 has an invalid length. [ 2244.987516][T12407] team0: Port device geneve1 added [ 2246.233909][T12446] sit0: entered promiscuous mode [ 2247.226702][T12480] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.12938'. [ 2247.297180][T12480] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2247.355387][T12480] CPU: 1 PID: 12480 Comm: syz.0.12938 Not tainted syzkaller #0 [ 2247.363039][T12480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2247.373153][T12480] Call Trace: [ 2247.376492][T12480] [ 2247.379475][T12480] dump_stack_lvl+0x18c/0x250 [ 2247.384243][T12480] ? show_regs_print_info+0x20/0x20 [ 2247.389530][T12480] ? load_image+0x420/0x420 [ 2247.394112][T12480] sysfs_warn_dup+0x8e/0xa0 [ 2247.398697][T12480] sysfs_do_create_link_sd+0xc0/0x110 [ 2247.404257][T12480] device_add_class_symlinks+0x1cf/0x240 [ 2247.409978][T12480] device_add+0x4f9/0xc40 [ 2247.414378][T12480] wiphy_register+0x1f24/0x2c70 [ 2247.419330][T12480] ? cfg80211_event_work+0x40/0x40 [ 2247.424518][T12480] ? minstrel_ht_alloc+0x88a/0x990 [ 2247.429712][T12480] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2247.435861][T12480] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2247.441426][T12480] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2247.447150][T12480] ? ieee80211_tasklet_handler+0x20/0x20 [ 2247.452855][T12480] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2247.458825][T12480] ? __debug_object_init+0xec/0x450 [ 2247.464096][T12480] ? __asan_memset+0x22/0x40 [ 2247.468765][T12480] ? __hrtimer_init+0x189/0x270 [ 2247.473689][T12480] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2247.479510][T12480] ? mac80211_hwsim_free+0x220/0x220 [ 2247.484863][T12480] ? rcu_is_watching+0x15/0xb0 [ 2247.489694][T12480] ? kstrndup+0xbd/0x140 [ 2247.494033][T12480] hwsim_new_radio_nl+0xdad/0x1a70 [ 2247.499219][T12480] ? __nla_validate+0x50/0x50 [ 2247.503997][T12480] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2247.510415][T12480] ? __nla_parse+0x40/0x50 [ 2247.514943][T12480] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2247.521439][T12480] genl_family_rcv_msg_doit+0x21a/0x310 [ 2247.527070][T12480] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2247.533055][T12480] ? bpf_lsm_capable+0x9/0x10 [ 2247.537799][T12480] ? security_capable+0x89/0xb0 [ 2247.542733][T12480] genl_rcv_msg+0x611/0x7a0 [ 2247.547325][T12480] ? genl_bind+0x360/0x360 [ 2247.551811][T12480] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2247.558307][T12480] netlink_rcv_skb+0x235/0x4c0 [ 2247.563144][T12480] ? genl_bind+0x360/0x360 [ 2247.567617][T12480] ? netlink_ack+0x1160/0x1160 [ 2247.572455][T12480] ? __lock_acquire+0x7eb0/0x7eb0 [ 2247.577540][T12480] ? net_generic+0x1e/0x240 [ 2247.582092][T12480] ? down_read+0x1ac/0x2e0 [ 2247.586548][T12480] genl_rcv+0x28/0x40 [ 2247.590570][T12480] netlink_unicast+0x856/0x9e0 [ 2247.595397][T12480] netlink_sendmsg+0x8d0/0xbf0 [ 2247.600204][T12480] ? netlink_getsockopt+0x590/0x590 [ 2247.605444][T12480] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2247.611040][T12480] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2247.616373][T12480] ? security_socket_sendmsg+0x80/0xa0 [ 2247.621878][T12480] ? netlink_getsockopt+0x590/0x590 [ 2247.627126][T12480] ____sys_sendmsg+0x61b/0x980 [ 2247.631946][T12480] ? __asan_memset+0x22/0x40 [ 2247.636588][T12480] ? __sys_sendmsg_sock+0x30/0x30 [ 2247.641758][T12480] ? __import_iovec+0x5f2/0x850 [ 2247.646662][T12480] ? import_iovec+0x73/0xa0 [ 2247.651212][T12480] ___sys_sendmsg+0x2a6/0x360 [ 2247.655977][T12480] ? __sys_sendmsg+0x2b0/0x2b0 [ 2247.660800][T12480] ? map_lookup_elem+0x653/0x7f0 [ 2247.665812][T12480] __se_sys_sendmsg+0x1d0/0x2c0 [ 2247.670719][T12480] ? __x64_sys_sendmsg+0x80/0x80 [ 2247.675711][T12480] ? lockdep_hardirqs_on+0x98/0x150 [ 2247.680946][T12480] do_syscall_64+0x55/0xb0 [ 2247.685412][T12480] ? clear_bhb_loop+0x40/0x90 [ 2247.690135][T12480] ? clear_bhb_loop+0x40/0x90 [ 2247.694871][T12480] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2247.700810][T12480] RIP: 0033:0x7f596a59fb19 [ 2247.705281][T12480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2247.724941][T12480] RSP: 002b:00007f596b37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2247.733398][T12480] RAX: ffffffffffffffda RBX: 00007f596a826090 RCX: 00007f596a59fb19 [ 2247.741405][T12480] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2247.749418][T12480] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2247.757425][T12480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2247.765459][T12480] R13: 00007f596a826128 R14: 00007f596a826090 R15: 00007ffcec9fe9c8 [ 2247.773513][T12480] [ 2248.151265][T12495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12946'. [ 2248.194215][T12495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12946'. [ 2248.265811][T12498] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12946'. [ 2248.313671][T12500] FAULT_INJECTION: forcing a failure. [ 2248.313671][T12500] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.329685][T12495] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12946'. [ 2248.351717][T12500] CPU: 0 PID: 12500 Comm: syz.0.12947 Not tainted syzkaller #0 [ 2248.359435][T12500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2248.369560][T12500] Call Trace: [ 2248.372902][T12500] [ 2248.375882][T12500] dump_stack_lvl+0x18c/0x250 [ 2248.380631][T12500] ? show_regs_print_info+0x20/0x20 [ 2248.385908][T12500] ? load_image+0x420/0x420 [ 2248.390480][T12500] ? __might_sleep+0xe0/0xe0 [ 2248.395151][T12500] ? __lock_acquire+0x7eb0/0x7eb0 [ 2248.400270][T12500] should_fail_ex+0x394/0x4c0 [ 2248.405021][T12500] should_failslab+0x9/0x20 [ 2248.409585][T12500] slab_pre_alloc_hook+0x59/0x300 [ 2248.414674][T12500] ? bpf_sk_storage_diag_alloc+0x221/0x690 [ 2248.420643][T12500] ? bpf_sk_storage_diag_alloc+0x221/0x690 [ 2248.426574][T12500] __kmem_cache_alloc_node+0x53/0x260 [ 2248.432038][T12500] ? bpf_sk_storage_diag_alloc+0x221/0x690 [ 2248.437913][T12500] __kmalloc+0xa7/0x240 [ 2248.442141][T12500] bpf_sk_storage_diag_alloc+0x221/0x690 [ 2248.447858][T12500] __inet_diag_dump_start+0x325/0x9f0 [ 2248.453296][T12500] ? netlink_lookup+0x30/0x200 [ 2248.458136][T12500] __netlink_dump_start+0x43c/0x7a0 [ 2248.463407][T12500] inet_diag_rcv_msg_compat+0x215/0x440 [ 2248.469043][T12500] ? __inet_diag_dump+0x380/0x380 [ 2248.474121][T12500] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 2248.479200][T12500] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 2248.484972][T12500] ? inet_diag_dump_start_compat+0x20/0x20 [ 2248.490819][T12500] ? inet_diag_dump+0x50/0x50 [ 2248.495544][T12500] ? __inet_diag_dump+0x380/0x380 [ 2248.500615][T12500] sock_diag_rcv_msg+0x3d3/0x5f0 [ 2248.505729][T12500] netlink_rcv_skb+0x235/0x4c0 [ 2248.510602][T12500] ? sock_diag_bind+0xb0/0xb0 [ 2248.515333][T12500] ? netlink_ack+0x1160/0x1160 [ 2248.520264][T12500] ? __lock_acquire+0x7eb0/0x7eb0 [ 2248.525356][T12500] ? net_generic+0x1e/0x240 [ 2248.529918][T12500] ? netlink_deliver_tap+0x2e/0x1b0 [ 2248.535163][T12500] sock_diag_rcv+0x2a/0x40 [ 2248.539633][T12500] netlink_unicast+0x856/0x9e0 [ 2248.544488][T12500] netlink_sendmsg+0x8d0/0xbf0 [ 2248.549415][T12500] ? netlink_getsockopt+0x590/0x590 [ 2248.554668][T12500] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2248.560280][T12500] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2248.565627][T12500] ? security_socket_sendmsg+0x80/0xa0 [ 2248.571138][T12500] ? netlink_getsockopt+0x590/0x590 [ 2248.576394][T12500] ____sys_sendmsg+0x61b/0x980 [ 2248.581230][T12500] ? __asan_memset+0x22/0x40 [ 2248.585875][T12500] ? __sys_sendmsg_sock+0x30/0x30 [ 2248.590944][T12500] ? __import_iovec+0x5f2/0x850 [ 2248.595858][T12500] ? import_iovec+0x73/0xa0 [ 2248.600413][T12500] ___sys_sendmsg+0x2a6/0x360 [ 2248.605144][T12500] ? __sys_sendmsg+0x2b0/0x2b0 [ 2248.609981][T12500] ? trace_call_bpf+0xc3/0x6c0 [ 2248.614827][T12500] __se_sys_sendmsg+0x1d0/0x2c0 [ 2248.619728][T12500] ? perf_trace_preemptirq_template+0x269/0x330 [ 2248.626039][T12500] ? __x64_sys_sendmsg+0x80/0x80 [ 2248.631039][T12500] ? lockdep_hardirqs_on+0x98/0x150 [ 2248.636287][T12500] do_syscall_64+0x55/0xb0 [ 2248.640763][T12500] ? clear_bhb_loop+0x40/0x90 [ 2248.645493][T12500] ? clear_bhb_loop+0x40/0x90 [ 2248.650244][T12500] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2248.656194][T12500] RIP: 0033:0x7f596a59fb19 [ 2248.660645][T12500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2248.680314][T12500] RSP: 002b:00007f596b37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2248.688786][T12500] RAX: ffffffffffffffda RBX: 00007f596a826090 RCX: 00007f596a59fb19 [ 2248.696808][T12500] RDX: 0000000000044010 RSI: 0000200000000980 RDI: 0000000000000009 [ 2248.704912][T12500] RBP: 00007f596b37e090 R08: 0000000000000000 R09: 0000000000000000 [ 2248.712924][T12500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2248.721112][T12500] R13: 00007f596a826128 R14: 00007f596a826090 R15: 00007ffcec9fe9c8 [ 2248.729154][T12500] [ 2249.124204][T12509] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.12951'. [ 2251.210024][T12549] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.12964'. [ 2251.894248][T12543] rxe_eth0 speed is unknown, defaulting to 1000 [ 2253.222282][T12587] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.12978'. [ 2253.466876][T12596] netlink: 'syz.1.12981': attribute type 21 has an invalid length. [ 2253.495578][T12596] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12981'. [ 2254.123961][T12602] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.12985'. [ 2254.557224][T12619] netlink: 'syz.0.12989': attribute type 4 has an invalid length. [ 2254.585410][T12619] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.12989'. [ 2255.056543][T12620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2256.591285][T12657] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.13003'. [ 2256.623385][T12662] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.13005'. [ 2256.650278][T12661] netlink: 209840 bytes leftover after parsing attributes in process `syz.0.13005'. [ 2257.000224][T12673] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13011'. [ 2257.057426][T12672] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13009'. [ 2257.855136][T12687] netlink: 'syz.0.13014': attribute type 10 has an invalid length. [ 2258.016486][T12689] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.13016'. [ 2258.138504][T12696] netlink: 'syz.2.13018': attribute type 10 has an invalid length. [ 2258.987524][T12707] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13022'. [ 2259.049488][T12707] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13022'. [ 2259.117361][T12707] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13022'. [ 2259.163021][T12707] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.13022'. [ 2259.393891][T12715] netlink: 'syz.1.13025': attribute type 10 has an invalid length. [ 2259.799606][T12715] wlan1: mtu less than device minimum [ 2259.818382][T12715] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 2260.836163][T12753] netlink: 'syz.1.13038': attribute type 12 has an invalid length. [ 2261.437749][T12763] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2261.469121][T12763] CPU: 0 PID: 12763 Comm: syz.1.13043 Not tainted syzkaller #0 [ 2261.476767][T12763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2261.486933][T12763] Call Trace: [ 2261.490278][T12763] [ 2261.493274][T12763] dump_stack_lvl+0x18c/0x250 [ 2261.498024][T12763] ? show_regs_print_info+0x20/0x20 [ 2261.503286][T12763] ? load_image+0x420/0x420 [ 2261.507869][T12763] sysfs_warn_dup+0x8e/0xa0 [ 2261.512459][T12763] sysfs_do_create_link_sd+0xc0/0x110 [ 2261.517908][T12763] device_add_class_symlinks+0x1cf/0x240 [ 2261.523699][T12763] device_add+0x4f9/0xc40 [ 2261.528118][T12763] wiphy_register+0x1f24/0x2c70 [ 2261.533031][T12763] ? cfg80211_event_work+0x40/0x40 [ 2261.538179][T12763] ? minstrel_ht_alloc+0x88a/0x990 [ 2261.543335][T12763] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2261.549454][T12763] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2261.554975][T12763] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2261.560581][T12763] ? ieee80211_tasklet_handler+0x20/0x20 [ 2261.566287][T12763] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2261.572236][T12763] ? __debug_object_init+0xec/0x450 [ 2261.577494][T12763] ? __asan_memset+0x22/0x40 [ 2261.582223][T12763] ? __hrtimer_init+0x189/0x270 [ 2261.587119][T12763] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2261.592915][T12763] ? mac80211_hwsim_free+0x220/0x220 [ 2261.598237][T12763] ? rcu_is_watching+0x15/0xb0 [ 2261.603038][T12763] ? kstrndup+0xbd/0x140 [ 2261.607324][T12763] hwsim_new_radio_nl+0xdad/0x1a70 [ 2261.612478][T12763] ? __nla_validate+0x50/0x50 [ 2261.617204][T12763] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2261.623574][T12763] ? __nla_parse+0x40/0x50 [ 2261.628036][T12763] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2261.634423][T12763] genl_family_rcv_msg_doit+0x21a/0x310 [ 2261.640029][T12763] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2261.645965][T12763] ? bpf_lsm_capable+0x9/0x10 [ 2261.650676][T12763] ? security_capable+0x89/0xb0 [ 2261.655571][T12763] genl_rcv_msg+0x611/0x7a0 [ 2261.660150][T12763] ? genl_bind+0x360/0x360 [ 2261.664600][T12763] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2261.671003][T12763] netlink_rcv_skb+0x235/0x4c0 [ 2261.675802][T12763] ? genl_bind+0x360/0x360 [ 2261.680258][T12763] ? netlink_ack+0x1160/0x1160 [ 2261.685087][T12763] ? __lock_acquire+0x7eb0/0x7eb0 [ 2261.690159][T12763] ? down_read+0x1ac/0x2e0 [ 2261.694611][T12763] genl_rcv+0x28/0x40 [ 2261.698648][T12763] netlink_unicast+0x856/0x9e0 [ 2261.703464][T12763] netlink_sendmsg+0x8d0/0xbf0 [ 2261.708276][T12763] ? netlink_getsockopt+0x590/0x590 [ 2261.713512][T12763] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2261.719105][T12763] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2261.724431][T12763] ? security_socket_sendmsg+0x80/0xa0 [ 2261.729933][T12763] ? netlink_getsockopt+0x590/0x590 [ 2261.735163][T12763] ____sys_sendmsg+0x61b/0x980 [ 2261.739974][T12763] ? __asan_memset+0x22/0x40 [ 2261.744607][T12763] ? __sys_sendmsg_sock+0x30/0x30 [ 2261.749660][T12763] ? __import_iovec+0x5f2/0x850 [ 2261.754555][T12763] ? import_iovec+0x73/0xa0 [ 2261.759101][T12763] ___sys_sendmsg+0x2a6/0x360 [ 2261.763847][T12763] ? __sys_sendmsg+0x2b0/0x2b0 [ 2261.768683][T12763] ? ktime_get+0x7f/0x280 [ 2261.773142][T12763] ? trace_call_bpf+0xc3/0x6c0 [ 2261.777972][T12763] __se_sys_sendmsg+0x1d0/0x2c0 [ 2261.782861][T12763] ? perf_trace_preemptirq_template+0x269/0x330 [ 2261.789155][T12763] ? __x64_sys_sendmsg+0x80/0x80 [ 2261.794138][T12763] ? lockdep_hardirqs_on+0x98/0x150 [ 2261.799373][T12763] do_syscall_64+0x55/0xb0 [ 2261.803843][T12763] ? clear_bhb_loop+0x40/0x90 [ 2261.808563][T12763] ? clear_bhb_loop+0x40/0x90 [ 2261.813290][T12763] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2261.819217][T12763] RIP: 0033:0x7fd0c1d9fb19 [ 2261.823668][T12763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2261.843300][T12763] RSP: 002b:00007fd0c2cb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2261.851744][T12763] RAX: ffffffffffffffda RBX: 00007fd0c2025fa0 RCX: 00007fd0c1d9fb19 [ 2261.859781][T12763] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2261.867785][T12763] RBP: 00007fd0c1e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2261.875790][T12763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2261.883800][T12763] R13: 00007fd0c2026038 R14: 00007fd0c2025fa0 R15: 00007fff5afa1a18 [ 2261.891818][T12763] [ 2266.389980][T12804] __nla_validate_parse: 33 callbacks suppressed [ 2266.390019][T12804] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13055'. [ 2266.682344][T12813] netlink: 'syz.2.13059': attribute type 21 has an invalid length. [ 2266.697901][T12813] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13059'. [ 2266.829573][T12813] netlink: 'syz.2.13059': attribute type 4 has an invalid length. [ 2266.847943][T12813] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.13059'. [ 2267.302342][T12827] netlink: 'syz.1.13063': attribute type 9 has an invalid length. [ 2267.333572][T12827] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.13063'. [ 2267.465763][T12833] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13066'. [ 2267.546593][T12835] netlink: 'syz.2.13067': attribute type 29 has an invalid length. [ 2267.573416][T12835] netlink: 'syz.2.13067': attribute type 29 has an invalid length. [ 2267.601745][T12837] netlink: 'syz.2.13067': attribute type 29 has an invalid length. [ 2267.946197][T12845] netlink: 1059 bytes leftover after parsing attributes in process `syz.3.13071'. [ 2268.447084][T12857] netlink: 'syz.1.13074': attribute type 3 has an invalid length. [ 2268.460291][T12857] netlink: 'syz.1.13074': attribute type 1 has an invalid length. [ 2268.470378][T12857] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13074'. [ 2269.061964][T12875] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13080'. [ 2269.378741][T12887] netlink: 'syz.0.13083': attribute type 2 has an invalid length. [ 2269.417331][T12887] netlink: 'syz.0.13083': attribute type 9 has an invalid length. [ 2269.457743][T12887] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13083'. [ 2270.639840][T12908] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13094'. [ 2271.123675][T12913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2271.132573][T12913] IPv6: NLM_F_CREATE should be set when creating new route [ 2271.145442][T12913] IPv6: NLM_F_CREATE should be set when creating new route [ 2271.156550][T12913] IPv6: NLM_F_CREATE should be set when creating new route [ 2271.929653][T12935] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13104'. [ 2272.174479][T12940] validate_nla: 3 callbacks suppressed [ 2272.174503][T12940] netlink: 'syz.1.13105': attribute type 10 has an invalid length. [ 2272.521888][T12940] team0 (unregistering): Port device team_slave_0 removed [ 2272.583829][T12940] team0 (unregistering): Port device 72žÿ removed [ 2272.689655][T12940] team0 (unregistering): Port device geneve1 removed [ 2272.912601][T12949] netlink: 'syz.1.13108': attribute type 10 has an invalid length. [ 2273.113074][T12956] netlink: 203100 bytes leftover after parsing attributes in process `syz.2.13109'. [ 2273.157234][T12956] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2273.195328][T12956] CPU: 0 PID: 12956 Comm: syz.2.13109 Not tainted syzkaller #0 [ 2273.202965][T12956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2273.213077][T12956] Call Trace: [ 2273.216406][T12956] [ 2273.219403][T12956] dump_stack_lvl+0x18c/0x250 [ 2273.224149][T12956] ? show_regs_print_info+0x20/0x20 [ 2273.229425][T12956] ? load_image+0x420/0x420 [ 2273.233998][T12956] sysfs_warn_dup+0x8e/0xa0 [ 2273.238601][T12956] sysfs_do_create_link_sd+0xc0/0x110 [ 2273.244031][T12956] device_add_class_symlinks+0x1cf/0x240 [ 2273.249722][T12956] device_add+0x4f9/0xc40 [ 2273.254104][T12956] wiphy_register+0x1f24/0x2c70 [ 2273.259044][T12956] ? cfg80211_event_work+0x40/0x40 [ 2273.264224][T12956] ? minstrel_ht_alloc+0x88a/0x990 [ 2273.269403][T12956] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2273.275537][T12956] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2273.281076][T12956] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2273.286667][T12956] ? ieee80211_tasklet_handler+0x20/0x20 [ 2273.292338][T12956] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2273.298267][T12956] ? __debug_object_init+0xec/0x450 [ 2273.303501][T12956] ? __asan_memset+0x22/0x40 [ 2273.308130][T12956] ? __hrtimer_init+0x189/0x270 [ 2273.313027][T12956] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2273.318820][T12956] ? mac80211_hwsim_free+0x220/0x220 [ 2273.324151][T12956] ? rcu_is_watching+0x15/0xb0 [ 2273.328972][T12956] ? kstrndup+0xbd/0x140 [ 2273.333260][T12956] hwsim_new_radio_nl+0xdad/0x1a70 [ 2273.338412][T12956] ? __nla_validate+0x50/0x50 [ 2273.343139][T12956] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2273.349516][T12956] ? __nla_parse+0x40/0x50 [ 2273.353999][T12956] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2273.360372][T12956] genl_family_rcv_msg_doit+0x21a/0x310 [ 2273.365956][T12956] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2273.371909][T12956] ? bpf_lsm_capable+0x9/0x10 [ 2273.376618][T12956] ? security_capable+0x89/0xb0 [ 2273.381506][T12956] genl_rcv_msg+0x611/0x7a0 [ 2273.386074][T12956] ? genl_bind+0x360/0x360 [ 2273.390527][T12956] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2273.396917][T12956] ? ref_tracker_free+0x686/0x830 [ 2273.401985][T12956] ? __kasan_kmalloc_large+0x8b/0xa0 [ 2273.407358][T12956] netlink_rcv_skb+0x235/0x4c0 [ 2273.412202][T12956] ? genl_bind+0x360/0x360 [ 2273.416659][T12956] ? netlink_ack+0x1160/0x1160 [ 2273.421470][T12956] ? __lock_acquire+0x7eb0/0x7eb0 [ 2273.426543][T12956] ? down_read+0x1ac/0x2e0 [ 2273.430990][T12956] genl_rcv+0x28/0x40 [ 2273.435011][T12956] netlink_unicast+0x856/0x9e0 [ 2273.439826][T12956] netlink_sendmsg+0x8d0/0xbf0 [ 2273.444631][T12956] ? netlink_getsockopt+0x590/0x590 [ 2273.449869][T12956] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2273.455467][T12956] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2273.460877][T12956] ? security_socket_sendmsg+0x80/0xa0 [ 2273.466374][T12956] ? netlink_getsockopt+0x590/0x590 [ 2273.471617][T12956] ____sys_sendmsg+0x61b/0x980 [ 2273.476424][T12956] ? __asan_memset+0x22/0x40 [ 2273.481059][T12956] ? __sys_sendmsg_sock+0x30/0x30 [ 2273.486115][T12956] ? __import_iovec+0x5f2/0x850 [ 2273.491013][T12956] ? import_iovec+0x73/0xa0 [ 2273.495554][T12956] ___sys_sendmsg+0x2a6/0x360 [ 2273.500356][T12956] ? __sys_sendmsg+0x2b0/0x2b0 [ 2273.505206][T12956] __se_sys_sendmsg+0x1d0/0x2c0 [ 2273.510156][T12956] ? __x64_sys_sendmsg+0x80/0x80 [ 2273.515139][T12956] ? lockdep_hardirqs_on+0x98/0x150 [ 2273.520398][T12956] do_syscall_64+0x55/0xb0 [ 2273.524861][T12956] ? clear_bhb_loop+0x40/0x90 [ 2273.529578][T12956] ? clear_bhb_loop+0x40/0x90 [ 2273.534296][T12956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2273.540226][T12956] RIP: 0033:0x7f5c59d9fb19 [ 2273.544686][T12956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2273.564331][T12956] RSP: 002b:00007f5c5ac30028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2273.572869][T12956] RAX: ffffffffffffffda RBX: 00007f5c5a026090 RCX: 00007f5c59d9fb19 [ 2273.580874][T12956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2273.588883][T12956] RBP: 00007f5c59e37b70 R08: 0000000000000000 R09: 0000000000000000 [ 2273.596881][T12956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2273.604876][T12956] R13: 00007f5c5a026128 R14: 00007f5c5a026090 R15: 00007fffa1965818 [ 2273.612902][T12956] [ 2273.682681][T12965] netlink: 'syz.1.13112': attribute type 10 has an invalid length. [ 2273.691633][T12964] netlink: 'syz.3.13113': attribute type 27 has an invalid length. [ 2273.715323][T12964] netlink: 'syz.3.13113': attribute type 3 has an invalid length. [ 2274.143703][T12973] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13116'. [ 2274.410781][T12985] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13121'. [ 2276.253472][T13019] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2277.617238][T13024] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13134'. [ 2277.669957][T13030] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.13136'. [ 2277.705628][T13030] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2277.733817][T13030] CPU: 1 PID: 13030 Comm: syz.0.13136 Not tainted syzkaller #0 [ 2277.741495][T13030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2277.751624][T13030] Call Trace: [ 2277.754943][T13030] [ 2277.757942][T13030] dump_stack_lvl+0x18c/0x250 [ 2277.762686][T13030] ? show_regs_print_info+0x20/0x20 [ 2277.767964][T13030] ? load_image+0x420/0x420 [ 2277.772594][T13030] sysfs_warn_dup+0x8e/0xa0 [ 2277.777164][T13030] sysfs_do_create_link_sd+0xc0/0x110 [ 2277.782607][T13030] device_add_class_symlinks+0x1cf/0x240 [ 2277.788323][T13030] device_add+0x4f9/0xc40 [ 2277.792888][T13030] wiphy_register+0x1f24/0x2c70 [ 2277.797849][T13030] ? cfg80211_event_work+0x40/0x40 [ 2277.803034][T13030] ? minstrel_ht_alloc+0x88a/0x990 [ 2277.808298][T13030] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2277.814473][T13030] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2277.820016][T13030] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2277.825651][T13030] ? ieee80211_tasklet_handler+0x20/0x20 [ 2277.831351][T13030] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2277.837311][T13030] ? __debug_object_init+0xec/0x450 [ 2277.842573][T13030] ? __asan_memset+0x22/0x40 [ 2277.847229][T13030] ? __hrtimer_init+0x189/0x270 [ 2277.852139][T13030] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2277.857945][T13030] ? mac80211_hwsim_free+0x220/0x220 [ 2277.863284][T13030] ? rcu_is_watching+0x15/0xb0 [ 2277.868108][T13030] ? kstrndup+0xbd/0x140 [ 2277.872432][T13030] hwsim_new_radio_nl+0xdad/0x1a70 [ 2277.877634][T13030] ? __nla_validate+0x50/0x50 [ 2277.882405][T13030] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2277.888804][T13030] ? __nla_parse+0x40/0x50 [ 2277.893280][T13030] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2277.899670][T13030] genl_family_rcv_msg_doit+0x21a/0x310 [ 2277.905276][T13030] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2277.911277][T13030] ? bpf_lsm_capable+0x9/0x10 [ 2277.916029][T13030] ? security_capable+0x89/0xb0 [ 2277.920941][T13030] genl_rcv_msg+0x611/0x7a0 [ 2277.925509][T13030] ? genl_bind+0x360/0x360 [ 2277.929972][T13030] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2277.936352][T13030] ? perf_trace_lock+0x303/0x3b0 [ 2277.941360][T13030] netlink_rcv_skb+0x235/0x4c0 [ 2277.946183][T13030] ? genl_bind+0x360/0x360 [ 2277.950659][T13030] ? netlink_ack+0x1160/0x1160 [ 2277.955489][T13030] ? __lock_acquire+0x7eb0/0x7eb0 [ 2277.960604][T13030] ? net_generic+0x1e/0x240 [ 2277.965180][T13030] ? down_read+0x1ac/0x2e0 [ 2277.969665][T13030] genl_rcv+0x28/0x40 [ 2277.973696][T13030] netlink_unicast+0x856/0x9e0 [ 2277.978547][T13030] netlink_sendmsg+0x8d0/0xbf0 [ 2277.983377][T13030] ? netlink_getsockopt+0x590/0x590 [ 2277.988629][T13030] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2277.994250][T13030] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2277.999587][T13030] ? security_socket_sendmsg+0x80/0xa0 [ 2278.005097][T13030] ? netlink_getsockopt+0x590/0x590 [ 2278.010351][T13030] ____sys_sendmsg+0x61b/0x980 [ 2278.015220][T13030] ? __asan_memset+0x22/0x40 [ 2278.019879][T13030] ? __sys_sendmsg_sock+0x30/0x30 [ 2278.024954][T13030] ? __import_iovec+0x5f2/0x850 [ 2278.029907][T13030] ? import_iovec+0x73/0xa0 [ 2278.034500][T13030] ___sys_sendmsg+0x2a6/0x360 [ 2278.039254][T13030] ? __sys_sendmsg+0x2b0/0x2b0 [ 2278.044138][T13030] ? trace_call_bpf+0xc3/0x6c0 [ 2278.049002][T13030] __se_sys_sendmsg+0x1d0/0x2c0 [ 2278.053936][T13030] ? perf_trace_preemptirq_template+0x269/0x330 [ 2278.060243][T13030] ? __x64_sys_sendmsg+0x80/0x80 [ 2278.065263][T13030] ? lockdep_hardirqs_on+0x98/0x150 [ 2278.070548][T13030] do_syscall_64+0x55/0xb0 [ 2278.075028][T13030] ? clear_bhb_loop+0x40/0x90 [ 2278.079856][T13030] ? clear_bhb_loop+0x40/0x90 [ 2278.084604][T13030] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2278.090558][T13030] RIP: 0033:0x7f596a59fb19 [ 2278.095028][T13030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2278.114712][T13030] RSP: 002b:00007f596b37e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2278.123185][T13030] RAX: ffffffffffffffda RBX: 00007f596a826090 RCX: 00007f596a59fb19 [ 2278.131215][T13030] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2278.139243][T13030] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2278.147265][T13030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2278.155287][T13030] R13: 00007f596a826128 R14: 00007f596a826090 R15: 00007ffcec9fe9c8 [ 2278.163342][T13030] [ 2278.868902][T13048] FAULT_INJECTION: forcing a failure. [ 2278.868902][T13048] name failslab, interval 1, probability 0, space 0, times 0 [ 2278.918140][T13050] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13144'. [ 2278.935369][T13048] CPU: 1 PID: 13048 Comm: syz.3.13142 Not tainted syzkaller #0 [ 2278.943053][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2278.953175][T13048] Call Trace: [ 2278.956508][T13048] [ 2278.959489][T13048] dump_stack_lvl+0x18c/0x250 [ 2278.964233][T13048] ? show_regs_print_info+0x20/0x20 [ 2278.969506][T13048] ? load_image+0x420/0x420 [ 2278.974078][T13048] ? __might_sleep+0xe0/0xe0 [ 2278.978773][T13048] ? __lock_acquire+0x7eb0/0x7eb0 [ 2278.983876][T13048] ? kasan_set_track+0x5f/0x70 [ 2278.988698][T13048] ? __kasan_kmalloc+0x8f/0xa0 [ 2278.993523][T13048] ? __kmalloc+0xb7/0x240 [ 2278.997928][T13048] should_fail_ex+0x394/0x4c0 [ 2279.002674][T13048] should_failslab+0x9/0x20 [ 2279.007309][T13048] slab_pre_alloc_hook+0x59/0x300 [ 2279.012416][T13048] kmem_cache_alloc_node+0x5e/0x320 [ 2279.017706][T13048] ? __alloc_skb+0x103/0x2c0 [ 2279.022363][T13048] __alloc_skb+0x103/0x2c0 [ 2279.026844][T13048] netlink_dump+0x1ee/0xec0 [ 2279.031451][T13048] ? __kmem_cache_alloc_node+0x197/0x260 [ 2279.037143][T13048] ? netlink_lookup+0x200/0x200 [ 2279.042064][T13048] ? __inet_diag_dump_start+0x88d/0x9f0 [ 2279.047665][T13048] ? netlink_lookup+0x30/0x200 [ 2279.052506][T13048] __netlink_dump_start+0x57c/0x7a0 [ 2279.057771][T13048] inet_diag_rcv_msg_compat+0x215/0x440 [ 2279.063417][T13048] ? __inet_diag_dump+0x380/0x380 [ 2279.068511][T13048] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 2279.073607][T13048] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 2279.079421][T13048] ? inet_diag_dump_start_compat+0x20/0x20 [ 2279.085285][T13048] ? inet_diag_dump+0x50/0x50 [ 2279.090023][T13048] ? __inet_diag_dump+0x380/0x380 [ 2279.095095][T13048] sock_diag_rcv_msg+0x3d3/0x5f0 [ 2279.100086][T13048] netlink_rcv_skb+0x235/0x4c0 [ 2279.104892][T13048] ? sock_diag_bind+0xb0/0xb0 [ 2279.109609][T13048] ? netlink_ack+0x1160/0x1160 [ 2279.114417][T13048] ? __lock_acquire+0x7eb0/0x7eb0 [ 2279.119494][T13048] ? netlink_deliver_tap+0x2e/0x1b0 [ 2279.124732][T13048] sock_diag_rcv+0x2a/0x40 [ 2279.129184][T13048] netlink_unicast+0x856/0x9e0 [ 2279.134016][T13048] netlink_sendmsg+0x8d0/0xbf0 [ 2279.138824][T13048] ? netlink_getsockopt+0x590/0x590 [ 2279.144158][T13048] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2279.149770][T13048] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2279.155125][T13048] ? security_socket_sendmsg+0x80/0xa0 [ 2279.160625][T13048] ? netlink_getsockopt+0x590/0x590 [ 2279.165858][T13048] ____sys_sendmsg+0x61b/0x980 [ 2279.170662][T13048] ? __asan_memset+0x22/0x40 [ 2279.175301][T13048] ? __sys_sendmsg_sock+0x30/0x30 [ 2279.180371][T13048] ? __import_iovec+0x5f2/0x850 [ 2279.185275][T13048] ? import_iovec+0x73/0xa0 [ 2279.189818][T13048] ___sys_sendmsg+0x2a6/0x360 [ 2279.194538][T13048] ? __sys_sendmsg+0x2b0/0x2b0 [ 2279.199370][T13048] ? trace_call_bpf+0xc3/0x6c0 [ 2279.204191][T13048] __se_sys_sendmsg+0x1d0/0x2c0 [ 2279.209102][T13048] ? perf_trace_preemptirq_template+0x269/0x330 [ 2279.215382][T13048] ? __x64_sys_sendmsg+0x80/0x80 [ 2279.220379][T13048] ? lockdep_hardirqs_on+0x98/0x150 [ 2279.225637][T13048] do_syscall_64+0x55/0xb0 [ 2279.230109][T13048] ? clear_bhb_loop+0x40/0x90 [ 2279.234845][T13048] ? clear_bhb_loop+0x40/0x90 [ 2279.239680][T13048] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2279.245704][T13048] RIP: 0033:0x7fb19479fb19 [ 2279.250160][T13048] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2279.269809][T13048] RSP: 002b:00007fb19562a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2279.278265][T13048] RAX: ffffffffffffffda RBX: 00007fb194a26090 RCX: 00007fb19479fb19 [ 2279.286274][T13048] RDX: 0000000000044010 RSI: 0000200000000980 RDI: 0000000000000009 [ 2279.294278][T13048] RBP: 00007fb19562a090 R08: 0000000000000000 R09: 0000000000000000 [ 2279.302298][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2279.310308][T13048] R13: 00007fb194a26128 R14: 00007fb194a26090 R15: 00007fff359ea608 [ 2279.318348][T13048] [ 2279.713459][T13057] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13146'. [ 2280.027794][T13060] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.13148'. [ 2280.074249][T13060] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2280.465640][T13067] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2280.474543][T13067] IPv6: NLM_F_CREATE should be set when creating new route [ 2280.482650][T13067] IPv6: NLM_F_CREATE should be set when creating new route [ 2280.494340][T13067] IPv6: NLM_F_CREATE should be set when creating new route [ 2281.833916][T13087] netlink: 'syz.1.13158': attribute type 10 has an invalid length. [ 2281.964627][T13091] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13160'. [ 2282.137378][T13098] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13162'. [ 2283.386730][T13116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2283.394316][T13116] IPv6: NLM_F_CREATE should be set when creating new route [ 2283.402117][T13116] IPv6: NLM_F_CREATE should be set when creating new route [ 2283.409775][T13116] IPv6: NLM_F_CREATE should be set when creating new route [ 2283.469754][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.478807][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.722948][T13132] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13173'. [ 2284.842500][T13136] netlink: 'syz.2.13172': attribute type 153 has an invalid length. [ 2284.935471][T13136] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.13172'. [ 2285.763568][T13147] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13179'. [ 2285.802986][T13147] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2287.930493][T13163] rxe_eth0 speed is unknown, defaulting to 1000 [ 2288.301183][T13187] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.13194'. [ 2288.325645][T13187] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2289.442845][T13198] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.13197'. [ 2289.455376][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13197'. [ 2290.842967][T13219] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13206'. [ 2290.858751][T13219] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13206'. [ 2290.878566][T13219] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.13206'. [ 2290.991859][T13224] netlink: 'syz.1.13208': attribute type 10 has an invalid length. [ 2291.382569][T13236] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.13213'. [ 2293.319512][T13246] sit0: left promiscuous mode [ 2295.126264][T13288] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13231'. [ 2295.970564][T13293] netlink: 168 bytes leftover after parsing attributes in process `syz.3.13231'. [ 2296.442625][T13315] FAULT_INJECTION: forcing a failure. [ 2296.442625][T13315] name failslab, interval 1, probability 0, space 0, times 0 [ 2296.465508][T13315] CPU: 0 PID: 13315 Comm: syz.2.13238 Not tainted syzkaller #0 [ 2296.473156][T13315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2296.483268][T13315] Call Trace: [ 2296.486592][T13315] [ 2296.489566][T13315] dump_stack_lvl+0x18c/0x250 [ 2296.494308][T13315] ? show_regs_print_info+0x20/0x20 [ 2296.499570][T13315] ? load_image+0x420/0x420 [ 2296.504128][T13315] ? __lock_acquire+0x7eb0/0x7eb0 [ 2296.509222][T13315] should_fail_ex+0x394/0x4c0 [ 2296.513952][T13315] should_failslab+0x9/0x20 [ 2296.518575][T13315] slab_pre_alloc_hook+0x59/0x300 [ 2296.523657][T13315] ? bpf_test_init+0x9f/0x140 [ 2296.528391][T13315] ? bpf_test_init+0x9f/0x140 [ 2296.533120][T13315] __kmem_cache_alloc_node+0x53/0x260 [ 2296.538552][T13315] ? bpf_test_init+0x9f/0x140 [ 2296.543285][T13315] __kmalloc+0xa7/0x240 [ 2296.547577][T13315] bpf_test_init+0x9f/0x140 [ 2296.552156][T13315] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 2296.557629][T13315] ? __lock_acquire+0x7eb0/0x7eb0 [ 2296.562731][T13315] ? dev_put+0x80/0x80 [ 2296.566970][T13315] ? dev_put+0x80/0x80 [ 2296.571178][T13315] bpf_prog_test_run+0x31f/0x390 [ 2296.576185][T13315] __sys_bpf+0x49d/0x890 [ 2296.580532][T13315] ? bpf_link_show_fdinfo+0x560/0x560 [ 2296.585974][T13315] ? lock_chain_count+0x20/0x20 [ 2296.590894][T13315] __x64_sys_bpf+0x7c/0x90 [ 2296.595360][T13315] do_syscall_64+0x55/0xb0 [ 2296.599844][T13315] ? clear_bhb_loop+0x40/0x90 [ 2296.604672][T13315] ? clear_bhb_loop+0x40/0x90 [ 2296.609510][T13315] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2296.615498][T13315] RIP: 0033:0x7f5c59d9fb19 [ 2296.619968][T13315] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2296.639658][T13315] RSP: 002b:00007f5c5ac30028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2296.648134][T13315] RAX: ffffffffffffffda RBX: 00007f5c5a026090 RCX: 00007f5c59d9fb19 [ 2296.656174][T13315] RDX: 0000000000000050 RSI: 0000200000001cc0 RDI: 000000000000000a [ 2296.664200][T13315] RBP: 00007f5c5ac30090 R08: 0000000000000000 R09: 0000000000000000 [ 2296.672221][T13315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2296.680243][T13315] R13: 00007f5c5a026128 R14: 00007f5c5a026090 R15: 00007fffa1965818 [ 2296.688288][T13315] [ 2297.572531][T13318] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13239'. [ 2299.013670][T13343] netlink: 'syz.3.13247': attribute type 6 has an invalid length. [ 2299.086038][T13343] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13247'. [ 2299.624940][T13353] netlink: 135056 bytes leftover after parsing attributes in process `syz.1.13246'. [ 2299.705773][T13353] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 2302.260635][T13369] rxe_eth0 speed is unknown, defaulting to 1000 [ 2302.753007][T13384] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2302.819141][T13384] netlink: 'syz.3.13259': attribute type 9 has an invalid length. [ 2302.831091][T13384] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13259'. [ 2305.513293][T13407] rxe_eth0 speed is unknown, defaulting to 1000 [ 2306.506316][T13427] netlink: 'syz.1.13273': attribute type 6 has an invalid length. [ 2306.544015][T13427] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13273'. [ 2307.440710][T13434] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.13277'. [ 2308.513786][T13459] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13285'. [ 2310.056211][T13470] netlink: 'syz.2.13286': attribute type 6 has an invalid length. [ 2310.066510][T13470] netlink: 164 bytes leftover after parsing attributes in process `syz.2.13286'. [ 2311.394578][T13486] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13295'. [ 2311.455554][T13484] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.13292'. [ 2311.518267][T13491] netlink: 'syz.0.13296': attribute type 21 has an invalid length. [ 2311.528557][T13491] IPv6: NLM_F_CREATE should be specified when creating new route [ 2311.540671][T13491] IPv6: Can't replace route, no match found [ 2313.080528][T13515] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13305'. [ 2314.309781][T13534] netlink: 'syz.2.13310': attribute type 10 has an invalid length. [ 2314.332174][T13533] netlink: 'syz.3.13311': attribute type 25 has an invalid length. [ 2314.375279][T13533] netlink: 'syz.3.13311': attribute type 5 has an invalid length. [ 2314.396285][T13533] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13311'. [ 2315.268694][T13542] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.13314'. [ 2315.314206][T13542] openvswitch: netlink: Message has 20476 unknown bytes. [ 2315.372860][T13542] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13314'. [ 2316.813654][T13560] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.13321'. [ 2316.837398][T13565] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 2316.891994][T13564] wg2: entered promiscuous mode [ 2316.899747][T13564] wg2: entered allmulticast mode [ 2317.042795][T13560] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2317.075253][T13562] FAULT_INJECTION: forcing a failure. [ 2317.075253][T13562] name failslab, interval 1, probability 0, space 0, times 0 [ 2317.096279][T13560] CPU: 0 PID: 13560 Comm: syz.0.13321 Not tainted syzkaller #0 [ 2317.104013][T13560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2317.114130][T13560] Call Trace: [ 2317.117459][T13560] [ 2317.120483][T13560] dump_stack_lvl+0x18c/0x250 [ 2317.125314][T13560] ? show_regs_print_info+0x20/0x20 [ 2317.130577][T13560] ? load_image+0x420/0x420 [ 2317.135164][T13560] sysfs_warn_dup+0x8e/0xa0 [ 2317.139731][T13560] sysfs_do_create_link_sd+0xc0/0x110 [ 2317.145174][T13560] device_add_class_symlinks+0x1cf/0x240 [ 2317.150878][T13560] device_add+0x4f9/0xc40 [ 2317.155269][T13560] wiphy_register+0x1f24/0x2c70 [ 2317.160255][T13560] ? cfg80211_event_work+0x40/0x40 [ 2317.165456][T13560] ? minstrel_ht_alloc+0x88a/0x990 [ 2317.170649][T13560] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2317.176789][T13560] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2317.182305][T13560] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2317.187907][T13560] ? ieee80211_tasklet_handler+0x20/0x20 [ 2317.193668][T13560] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2317.199620][T13560] ? __debug_object_init+0xec/0x450 [ 2317.204861][T13560] ? __asan_memset+0x22/0x40 [ 2317.209499][T13560] ? __hrtimer_init+0x189/0x270 [ 2317.214394][T13560] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2317.220184][T13560] ? mac80211_hwsim_free+0x220/0x220 [ 2317.225505][T13560] ? rcu_is_watching+0x15/0xb0 [ 2317.230326][T13560] ? kstrndup+0xbd/0x140 [ 2317.234711][T13560] hwsim_new_radio_nl+0xdad/0x1a70 [ 2317.239864][T13560] ? __nla_validate+0x50/0x50 [ 2317.244599][T13560] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2317.251006][T13560] ? __nla_parse+0x40/0x50 [ 2317.255521][T13560] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 2317.261907][T13560] genl_family_rcv_msg_doit+0x21a/0x310 [ 2317.267500][T13560] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2317.273445][T13560] ? bpf_lsm_capable+0x9/0x10 [ 2317.278159][T13560] ? security_capable+0x89/0xb0 [ 2317.283052][T13560] genl_rcv_msg+0x611/0x7a0 [ 2317.287610][T13560] ? genl_bind+0x360/0x360 [ 2317.292074][T13560] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2317.298452][T13560] netlink_rcv_skb+0x235/0x4c0 [ 2317.303254][T13560] ? genl_bind+0x360/0x360 [ 2317.307713][T13560] ? netlink_ack+0x1160/0x1160 [ 2317.312558][T13560] ? __lock_acquire+0x7eb0/0x7eb0 [ 2317.317637][T13560] ? net_generic+0x1e/0x240 [ 2317.322186][T13560] ? down_read+0x1ac/0x2e0 [ 2317.326639][T13560] genl_rcv+0x28/0x40 [ 2317.330663][T13560] netlink_unicast+0x856/0x9e0 [ 2317.335494][T13560] netlink_sendmsg+0x8d0/0xbf0 [ 2317.340384][T13560] ? netlink_getsockopt+0x590/0x590 [ 2317.345619][T13560] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2317.351231][T13560] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2317.356579][T13560] ? security_socket_sendmsg+0x80/0xa0 [ 2317.362093][T13560] ? netlink_getsockopt+0x590/0x590 [ 2317.367345][T13560] ____sys_sendmsg+0x61b/0x980 [ 2317.372192][T13560] ? __asan_memset+0x22/0x40 [ 2317.376867][T13560] ? __sys_sendmsg_sock+0x30/0x30 [ 2317.381961][T13560] ? __import_iovec+0x5f2/0x850 [ 2317.386868][T13560] ? import_iovec+0x73/0xa0 [ 2317.391416][T13560] ___sys_sendmsg+0x2a6/0x360 [ 2317.396151][T13560] ? __sys_sendmsg+0x2b0/0x2b0 [ 2317.400979][T13560] ? ktime_get+0x7f/0x280 [ 2317.405345][T13560] ? trace_call_bpf+0xc3/0x6c0 [ 2317.410176][T13560] __se_sys_sendmsg+0x1d0/0x2c0 [ 2317.415059][T13560] ? perf_trace_preemptirq_template+0x269/0x330 [ 2317.421351][T13560] ? __x64_sys_sendmsg+0x80/0x80 [ 2317.426342][T13560] ? lockdep_hardirqs_on+0x98/0x150 [ 2317.431580][T13560] do_syscall_64+0x55/0xb0 [ 2317.436035][T13560] ? clear_bhb_loop+0x40/0x90 [ 2317.440774][T13560] ? clear_bhb_loop+0x40/0x90 [ 2317.445493][T13560] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2317.451422][T13560] RIP: 0033:0x7f596a59fb19 [ 2317.455901][T13560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2317.475550][T13560] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2317.484009][T13560] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2317.492016][T13560] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2317.500046][T13560] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2317.508056][T13560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2317.516062][T13560] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2317.524089][T13560] [ 2317.527470][T13562] CPU: 1 PID: 13562 Comm: syz.2.13322 Not tainted syzkaller #0 [ 2317.535128][T13562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2317.545255][T13562] Call Trace: [ 2317.548585][T13562] [ 2317.551551][T13562] dump_stack_lvl+0x18c/0x250 [ 2317.556287][T13562] ? show_regs_print_info+0x20/0x20 [ 2317.561617][T13562] ? load_image+0x420/0x420 [ 2317.566162][T13562] ? mark_lock+0x94/0x320 [ 2317.570526][T13562] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2317.576551][T13562] should_fail_ex+0x394/0x4c0 [ 2317.581271][T13562] should_failslab+0x9/0x20 [ 2317.585815][T13562] slab_pre_alloc_hook+0x59/0x300 [ 2317.590897][T13562] ? lockdep_hardirqs_on+0x98/0x150 [ 2317.596184][T13562] kmem_cache_alloc+0x5a/0x2d0 [ 2317.600982][T13562] ? skb_clone+0x1eb/0x370 [ 2317.605445][T13562] skb_clone+0x1eb/0x370 [ 2317.609729][T13562] __netlink_deliver_tap+0x411/0x7f0 [ 2317.615069][T13562] ? netlink_deliver_tap+0x2e/0x1b0 [ 2317.620310][T13562] netlink_deliver_tap+0x19c/0x1b0 [ 2317.625452][T13562] netlink_dump+0x95b/0xec0 [ 2317.630013][T13562] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2317.636212][T13562] ? netlink_lookup+0x200/0x200 [ 2317.641107][T13562] ? __inet_diag_dump_start+0x88d/0x9f0 [ 2317.646693][T13562] __netlink_dump_start+0x57c/0x7a0 [ 2317.651925][T13562] inet_diag_rcv_msg_compat+0x215/0x440 [ 2317.657511][T13562] ? __inet_diag_dump+0x380/0x380 [ 2317.662583][T13562] ? sock_diag_rcv_msg+0xcd/0x5f0 [ 2317.667643][T13562] ? inet_diag_rcv_msg_compat+0x440/0x440 [ 2317.673390][T13562] ? inet_diag_dump_start_compat+0x20/0x20 [ 2317.679244][T13562] ? inet_diag_dump+0x50/0x50 [ 2317.683956][T13562] ? lock_is_held_type+0x13e/0x190 [ 2317.689113][T13562] ? __inet_diag_dump+0x380/0x380 [ 2317.694170][T13562] sock_diag_rcv_msg+0x3d3/0x5f0 [ 2317.699157][T13562] netlink_rcv_skb+0x235/0x4c0 [ 2317.703963][T13562] ? sock_diag_bind+0xb0/0xb0 [ 2317.708675][T13562] ? netlink_ack+0x1160/0x1160 [ 2317.713502][T13562] ? __lock_acquire+0x7eb0/0x7eb0 [ 2317.718578][T13562] ? netlink_deliver_tap+0x2e/0x1b0 [ 2317.723807][T13562] sock_diag_rcv+0x2a/0x40 [ 2317.728265][T13562] netlink_unicast+0x856/0x9e0 [ 2317.733109][T13562] netlink_sendmsg+0x8d0/0xbf0 [ 2317.737916][T13562] ? netlink_getsockopt+0x590/0x590 [ 2317.743154][T13562] ? netlink_getsockopt+0x590/0x590 [ 2317.748393][T13562] ____sys_sendmsg+0x61b/0x980 [ 2317.753198][T13562] ? __asan_memset+0x22/0x40 [ 2317.757848][T13562] ? __sys_sendmsg_sock+0x30/0x30 [ 2317.762901][T13562] ? __import_iovec+0x5f2/0x850 [ 2317.767810][T13562] ? import_iovec+0x73/0xa0 [ 2317.772374][T13562] ___sys_sendmsg+0x2a6/0x360 [ 2317.777104][T13562] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 2317.783073][T13562] ? __sys_sendmsg+0x2b0/0x2b0 [ 2317.787899][T13562] ? lockdep_hardirqs_on+0x98/0x150 [ 2317.793161][T13562] __se_sys_sendmsg+0x1d0/0x2c0 [ 2317.798076][T13562] ? __x64_sys_sendmsg+0x80/0x80 [ 2317.803100][T13562] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2317.809039][T13562] do_syscall_64+0x55/0xb0 [ 2317.813497][T13562] ? clear_bhb_loop+0x40/0x90 [ 2317.818227][T13562] ? clear_bhb_loop+0x40/0x90 [ 2317.822941][T13562] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2317.828876][T13562] RIP: 0033:0x7f5c59d9fb19 [ 2317.833344][T13562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2317.852990][T13562] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2317.861520][T13562] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2317.869529][T13562] RDX: 0000000000044010 RSI: 0000200000000980 RDI: 0000000000000009 [ 2317.877535][T13562] RBP: 00007f5c5ac51090 R08: 0000000000000000 R09: 0000000000000000 [ 2317.885551][T13562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 2317.893593][T13562] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2317.901607][T13562] [ 2318.216000][T13578] netlink: 'syz.1.13325': attribute type 10 has an invalid length. [ 2318.609238][T13586] FAULT_INJECTION: forcing a failure. [ 2318.609238][T13586] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2318.665568][T13586] CPU: 1 PID: 13586 Comm: syz.2.13330 Not tainted syzkaller #0 [ 2318.673212][T13586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2318.683318][T13586] Call Trace: [ 2318.686643][T13586] [ 2318.689621][T13586] dump_stack_lvl+0x18c/0x250 [ 2318.694411][T13586] ? show_regs_print_info+0x20/0x20 [ 2318.699675][T13586] ? load_image+0x420/0x420 [ 2318.704241][T13586] ? __lock_acquire+0x7eb0/0x7eb0 [ 2318.709331][T13586] should_fail_ex+0x394/0x4c0 [ 2318.714107][T13586] _copy_from_user+0x2f/0xe0 [ 2318.718778][T13586] bpf_test_init+0xde/0x140 [ 2318.723371][T13586] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 2318.728801][T13586] ? __lock_acquire+0x7eb0/0x7eb0 [ 2318.733893][T13586] ? dev_put+0x80/0x80 [ 2318.738171][T13586] ? dev_put+0x80/0x80 [ 2318.742315][T13586] bpf_prog_test_run+0x31f/0x390 [ 2318.747343][T13586] __sys_bpf+0x49d/0x890 [ 2318.751641][T13586] ? bpf_link_show_fdinfo+0x560/0x560 [ 2318.757093][T13586] ? lock_chain_count+0x20/0x20 [ 2318.762045][T13586] __x64_sys_bpf+0x7c/0x90 [ 2318.766520][T13586] do_syscall_64+0x55/0xb0 [ 2318.771002][T13586] ? clear_bhb_loop+0x40/0x90 [ 2318.775736][T13586] ? clear_bhb_loop+0x40/0x90 [ 2318.780474][T13586] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2318.786419][T13586] RIP: 0033:0x7f5c59d9fb19 [ 2318.790893][T13586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2318.810580][T13586] RSP: 002b:00007f5c5ac51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2318.819034][T13586] RAX: ffffffffffffffda RBX: 00007f5c5a025fa0 RCX: 00007f5c59d9fb19 [ 2318.827047][T13586] RDX: 0000000000000050 RSI: 0000200000001cc0 RDI: 000000000000000a [ 2318.835077][T13586] RBP: 00007f5c5ac51090 R08: 0000000000000000 R09: 0000000000000000 [ 2318.843078][T13586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2318.851083][T13586] R13: 00007f5c5a026038 R14: 00007f5c5a025fa0 R15: 00007fffa1965818 [ 2318.859103][T13586] [ 2319.412502][T13580] rxe_eth0 speed is unknown, defaulting to 1000 [ 2320.823404][T13612] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13340'. [ 2320.883104][T13608] netlink: 14719 bytes leftover after parsing attributes in process `syz.3.13338'. [ 2320.909536][T13614] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.13340'. [ 2321.412434][T13624] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13344'. [ 2322.798396][T13636] netlink: 'syz.0.13345': attribute type 10 has an invalid length. [ 2323.921805][T13647] ipvlan1: entered promiscuous mode [ 2323.928550][T13647] ipvlan1: entered allmulticast mode [ 2325.013963][T13661] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13356'. [ 2325.283693][T13670] netlink: 14719 bytes leftover after parsing attributes in process `syz.0.13357'. [ 2326.123422][T13681] ipvlan1: entered promiscuous mode [ 2326.128947][T13681] ipvlan1: entered allmulticast mode [ 2326.140792][T13681] veth0_vlan: entered allmulticast mode [ 2326.239886][T13683] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13366'. [ 2327.818861][T13706] ipvlan1: entered promiscuous mode [ 2327.837108][T13706] ipvlan1: entered allmulticast mode [ 2329.175417][T13726] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13382'. [ 2329.483145][T13734] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13384'. [ 2331.970027][T13782] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13401'. [ 2332.103386][T13790] netlink: 'syz.1.13404': attribute type 10 has an invalid length. [ 2338.205755][T13870] netlink: 'syz.1.13436': attribute type 10 has an invalid length. [ 2338.645636][T13883] netlink: 'syz.2.13442': attribute type 10 has an invalid length. [ 2342.022160][T13931] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13457'. [ 2342.104198][T13933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13458'. [ 2343.444842][T13956] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13467'. [ 2343.665026][T13964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13470'. [ 2344.041767][T13969] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13472'. [ 2344.356011][T13979] netlink: 'syz.0.13474': attribute type 10 has an invalid length. [ 2344.850616][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.857329][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.755094][T14030] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13479'. [ 2346.012938][T14036] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13480'. [ 2346.107120][T14042] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13484'. [ 2346.571328][T14049] netlink: 'syz.3.13483': attribute type 10 has an invalid length. [ 2346.579562][T14049] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13483'. [ 2346.595554][T14049] hsr0: left allmulticast mode [ 2346.608684][T14049] hsr_slave_0: left allmulticast mode [ 2346.625382][T14049] hsr_slave_1: left allmulticast mode [ 2346.631145][T14049] nr0: port 1(hsr0) entered disabled state [ 2346.677618][T14049] bridge0: port 3(hsr0) entered blocking state [ 2346.760829][T14049] bridge0: port 3(hsr0) entered disabled state [ 2346.814408][T14049] hsr0: entered allmulticast mode [ 2346.830716][T14049] hsr_slave_0: entered allmulticast mode [ 2346.844835][T14049] hsr_slave_1: entered allmulticast mode [ 2346.861058][T14049] bridge0: port 3(hsr0) entered blocking state [ 2346.867546][T14049] bridge0: port 3(hsr0) entered forwarding state [ 2346.910337][T14057] netlink: 'syz.2.13488': attribute type 29 has an invalid length. [ 2346.934360][T14057] netlink: 'syz.2.13488': attribute type 29 has an invalid length. [ 2346.944039][T14057] netlink: 'syz.2.13488': attribute type 29 has an invalid length. [ 2346.987094][T14057] netlink: 'syz.2.13488': attribute type 29 has an invalid length. [ 2347.133652][T14063] netlink: 164 bytes leftover after parsing attributes in process `syz.3.13490'. [ 2347.880534][T14072] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13493'. [ 2348.168604][T14079] netlink: 'syz.2.13495': attribute type 10 has an invalid length. [ 2350.729340][T14109] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13506'. [ 2353.147381][T14112] FAULT_INJECTION: forcing a failure. [ 2353.147381][T14112] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2353.185334][T14112] CPU: 1 PID: 14112 Comm: syz.0.13507 Not tainted syzkaller #0 [ 2353.192972][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2353.203078][T14112] Call Trace: [ 2353.206396][T14112] [ 2353.209370][T14112] dump_stack_lvl+0x18c/0x250 [ 2353.214102][T14112] ? show_regs_print_info+0x20/0x20 [ 2353.219403][T14112] ? load_image+0x420/0x420 [ 2353.223957][T14112] ? __might_fault+0xaa/0x120 [ 2353.228706][T14112] ? __lock_acquire+0x7eb0/0x7eb0 [ 2353.233781][T14112] should_fail_ex+0x394/0x4c0 [ 2353.238510][T14112] _copy_from_user+0x2f/0xe0 [ 2353.243151][T14112] __sys_bpf+0x23e/0x890 [ 2353.247462][T14112] ? bpf_link_show_fdinfo+0x560/0x560 [ 2353.252899][T14112] ? lock_chain_count+0x20/0x20 [ 2353.257805][T14112] __x64_sys_bpf+0x7c/0x90 [ 2353.262255][T14112] do_syscall_64+0x55/0xb0 [ 2353.266706][T14112] ? clear_bhb_loop+0x40/0x90 [ 2353.271418][T14112] ? clear_bhb_loop+0x40/0x90 [ 2353.276125][T14112] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2353.282049][T14112] RIP: 0033:0x7f596a59fb19 [ 2353.286495][T14112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2353.306150][T14112] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2353.314598][T14112] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2353.322599][T14112] RDX: 0000000000000050 RSI: 0000200000000a00 RDI: 000000000000000a [ 2353.330589][T14112] RBP: 00007f596b39f090 R08: 0000000000000000 R09: 0000000000000000 [ 2353.338594][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2353.346682][T14112] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2353.354721][T14112] [ 2353.936920][T14125] netlink: 'syz.3.13509': attribute type 39 has an invalid length. [ 2353.956322][T14125] macvlan0: entered promiscuous mode [ 2353.983323][T14125] macvlan0: entered allmulticast mode [ 2354.000127][T14125] veth1_vlan: entered allmulticast mode [ 2354.836837][T14134] netlink: 'syz.0.13513': attribute type 10 has an invalid length. [ 2354.850614][T14134] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13513'. [ 2354.860693][T14134] hsr0: entered promiscuous mode [ 2354.869685][T14134] bridge0: port 2(hsr0) entered blocking state [ 2354.887727][T14134] bridge0: port 2(hsr0) entered disabled state [ 2354.904798][T14134] hsr0: entered allmulticast mode [ 2354.913587][T14134] hsr_slave_0: entered allmulticast mode [ 2354.921451][T14134] hsr_slave_1: entered allmulticast mode [ 2355.008049][T14134] bridge0: port 2(hsr0) entered blocking state [ 2355.016736][T14134] bridge0: port 2(hsr0) entered forwarding state [ 2355.476343][T14146] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13518'. [ 2357.115847][T14173] netlink: 'syz.0.13526': attribute type 39 has an invalid length. [ 2357.139936][T14173] macvlan0: entered promiscuous mode [ 2357.161726][T14173] macvlan0: entered allmulticast mode [ 2357.183223][T14173] veth1_vlan: entered allmulticast mode [ 2358.905769][T14195] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13533'. [ 2359.410074][T14199] netlink: 13951 bytes leftover after parsing attributes in process `syz.1.13537'. [ 2359.430358][T14201] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.13538'. [ 2360.557918][T14217] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.13544'. [ 2360.600293][T14217] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.13544'. [ 2361.120671][T14226] syz.0.13542[14226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2361.121243][T14226] syz.0.13542[14226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2361.950248][T14222] rxe_eth0 speed is unknown, defaulting to 1000 [ 2362.095650][T14237] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13546'. [ 2364.147655][T14274] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13558'. [ 2365.623878][T14315] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13569'. [ 2366.174533][T14317] netlink: 'syz.0.13571': attribute type 10 has an invalid length. [ 2366.489247][T14332] netlink: 'syz.0.13576': attribute type 10 has an invalid length. [ 2366.603583][T14323] netlink: 134780 bytes leftover after parsing attributes in process `syz.3.13574'. [ 2367.011248][T14344] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13580'. [ 2370.442180][T14358] netlink: 'syz.3.13585': attribute type 10 has an invalid length. [ 2371.436229][T14378] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.13592'. [ 2372.996668][T14405] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13600'. [ 2373.024226][T14405] : renamed from virt_wifi0 (while UP) [ 2373.122904][T14408] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13602'. [ 2373.145092][T14408] netlink: 6 bytes leftover after parsing attributes in process `syz.3.13602'. [ 2373.941058][T14426] netlink: 'syz.2.13609': attribute type 10 has an invalid length. [ 2374.401437][T14435] netlink: 128 bytes leftover after parsing attributes in process `syz.3.13613'. [ 2374.680508][T14435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2375.787742][T14465] netlink: 'syz.0.13625': attribute type 12 has an invalid length. [ 2375.796089][T14465] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.13625'. [ 2375.971793][T14468] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13626'. [ 2377.500600][T14502] netlink: 35840 bytes leftover after parsing attributes in process `syz.1.13639'. [ 2378.278213][T14501] rxe_eth0 speed is unknown, defaulting to 1000 [ 2379.098613][T14519] netlink: 'syz.3.13646': attribute type 10 has an invalid length. [ 2379.949831][T14519] team0 (unregistering): Port device team_slave_0 removed [ 2379.981232][T14519] team0 (unregistering): Port device team_slave_1 removed [ 2380.280522][T14526] netlink: 'syz.2.13649': attribute type 21 has an invalid length. [ 2380.325267][T14526] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13649'. [ 2380.471850][T14526] netlink: 'syz.2.13649': attribute type 21 has an invalid length. [ 2380.506727][T14526] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13649'. [ 2380.704370][T14528] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13650'. [ 2381.925551][T14542] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2382.118391][T14551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2382.260470][T14551] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2382.280442][T14561] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2382.540374][T14555] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2382.551414][T14563] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2382.579064][T14553] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13653'. [ 2383.233768][T14570] netlink: 'syz.2.13657': attribute type 2 has an invalid length. [ 2383.365329][T14570] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.13657'. [ 2385.999587][T14589] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13663'. [ 2386.287983][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.327131][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.372873][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.438414][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.444444][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.516949][T14597] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.13665'. [ 2386.533037][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.626430][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.752032][T14600] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2386.764723][T14600] syzkaller0: linktype set to 805 [ 2386.784992][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.856246][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.915549][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.928248][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.934476][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.951364][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2386.981064][T14606] netlink: 203100 bytes leftover after parsing attributes in process `syz.0.13668'. [ 2386.994053][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2387.001906][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2387.066531][T14595] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2387.091186][T14606] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 2387.100898][T14606] CPU: 1 PID: 14606 Comm: syz.0.13668 Not tainted syzkaller #0 [ 2387.108511][T14606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 2387.118618][T14606] Call Trace: [ 2387.121942][T14606] [ 2387.124922][T14606] dump_stack_lvl+0x18c/0x250 [ 2387.129680][T14606] ? show_regs_print_info+0x20/0x20 [ 2387.134957][T14606] ? load_image+0x420/0x420 [ 2387.139570][T14606] sysfs_warn_dup+0x8e/0xa0 [ 2387.144139][T14606] sysfs_do_create_link_sd+0xc0/0x110 [ 2387.149602][T14606] device_add_class_symlinks+0x1cf/0x240 [ 2387.155303][T14606] device_add+0x4f9/0xc40 [ 2387.159697][T14606] wiphy_register+0x1f24/0x2c70 [ 2387.164634][T14606] ? cfg80211_event_work+0x40/0x40 [ 2387.169835][T14606] ? minstrel_ht_alloc+0x88a/0x990 [ 2387.175025][T14606] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 2387.181174][T14606] ieee80211_register_hw+0x2f3d/0x3cb0 [ 2387.186703][T14606] ? ieee80211_register_hw+0xf51/0x3cb0 [ 2387.192319][T14606] ? ieee80211_tasklet_handler+0x20/0x20 [ 2387.197997][T14606] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 2387.203941][T14606] ? __debug_object_init+0xec/0x450 [ 2387.209231][T14606] ? __asan_memset+0x22/0x40 [ 2387.213868][T14606] ? __hrtimer_init+0x189/0x270 [ 2387.218765][T14606] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 2387.224546][T14606] ? mac80211_hwsim_free+0x220/0x220 [ 2387.229865][T14606] ? rcu_is_watching+0x15/0xb0 [ 2387.234668][T14606] ? kstrndup+0xbd/0x140 [ 2387.238983][T14606] hwsim_new_radio_nl+0xdad/0x1a70 [ 2387.244149][T14606] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 2387.250174][T14606] ? mark_lock+0x94/0x320 [ 2387.254552][T14606] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2387.260915][T14606] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2387.267115][T14606] ? lockdep_hardirqs_on+0x98/0x150 [ 2387.272349][T14606] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2387.278583][T14606] genl_family_rcv_msg_doit+0x21a/0x310 [ 2387.284172][T14606] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 2387.290130][T14606] ? bpf_lsm_capable+0x9/0x10 [ 2387.294840][T14606] ? security_capable+0x89/0xb0 [ 2387.299765][T14606] genl_rcv_msg+0x611/0x7a0 [ 2387.304330][T14606] ? genl_bind+0x360/0x360 [ 2387.308812][T14606] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 2387.315203][T14606] netlink_rcv_skb+0x235/0x4c0 [ 2387.320016][T14606] ? genl_bind+0x360/0x360 [ 2387.324473][T14606] ? netlink_ack+0x1160/0x1160 [ 2387.329302][T14606] ? __lock_acquire+0x7eb0/0x7eb0 [ 2387.334364][T14606] ? net_generic+0x1e/0x240 [ 2387.338917][T14606] ? down_read+0x1ac/0x2e0 [ 2387.343467][T14606] genl_rcv+0x28/0x40 [ 2387.347519][T14606] netlink_unicast+0x856/0x9e0 [ 2387.352447][T14606] netlink_sendmsg+0x8d0/0xbf0 [ 2387.357254][T14606] ? netlink_getsockopt+0x590/0x590 [ 2387.362489][T14606] ? apparmor_socket_sendmsg+0x8e/0x330 [ 2387.368091][T14606] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2387.373419][T14606] ? security_socket_sendmsg+0x80/0xa0 [ 2387.378935][T14606] ? netlink_getsockopt+0x590/0x590 [ 2387.384177][T14606] ____sys_sendmsg+0x61b/0x980 [ 2387.388988][T14606] ? __asan_memset+0x22/0x40 [ 2387.393619][T14606] ? __sys_sendmsg_sock+0x30/0x30 [ 2387.398677][T14606] ? __import_iovec+0x5f2/0x850 [ 2387.403595][T14606] ? import_iovec+0x73/0xa0 [ 2387.408141][T14606] ___sys_sendmsg+0x2a6/0x360 [ 2387.412862][T14606] ? __sys_sendmsg+0x2b0/0x2b0 [ 2387.417704][T14606] ? ktime_get+0x7f/0x280 [ 2387.422118][T14606] __se_sys_sendmsg+0x1d0/0x2c0 [ 2387.427030][T14606] ? __x64_sys_sendmsg+0x80/0x80 [ 2387.432043][T14606] ? syscall_enter_from_user_mode+0x2e/0x80 [ 2387.437991][T14606] do_syscall_64+0x55/0xb0 [ 2387.442454][T14606] ? clear_bhb_loop+0x40/0x90 [ 2387.447201][T14606] ? clear_bhb_loop+0x40/0x90 [ 2387.451918][T14606] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2387.457867][T14606] RIP: 0033:0x7f596a59fb19 [ 2387.462316][T14606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2387.481956][T14606] RSP: 002b:00007f596b39f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2387.490426][T14606] RAX: ffffffffffffffda RBX: 00007f596a825fa0 RCX: 00007f596a59fb19 [ 2387.498517][T14606] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2387.506564][T14606] RBP: 00007f596a637b70 R08: 0000000000000000 R09: 0000000000000000 [ 2387.514590][T14606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2387.522605][T14606] R13: 00007f596a826038 R14: 00007f596a825fa0 R15: 00007ffcec9fe9c8 [ 2387.530631][T14606] [ 2387.818702][T14595] delete_channel: no stack [ 2388.779136][T14622] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13674'. [ 2390.509412][T14649] netlink: 35840 bytes leftover after parsing attributes in process `syz.0.13685'. [ 2391.735510][T14664] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13689'. [ 2391.744675][T14664] : renamed from virt_wifi0 (while UP) [ 2392.801999][T14678] netlink: 'syz.0.13693': attribute type 2 has an invalid length. [ 2392.865956][T14678] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.13693'. [ 2393.904005][T14686] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13696'. [ 2394.491209][T14695] netlink: 'syz.0.13701': attribute type 10 has an invalid length. [ 2396.052857][T14714] netlink: 35840 bytes leftover after parsing attributes in process `syz.2.13707'. [ 2396.549237][T14722] netlink: 'syz.2.13710': attribute type 1 has an invalid length. [ 2396.558889][T14721] rxe_eth0 speed is unknown, defaulting to 1000 [ 2396.592225][T14722] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.13710'. [ 2397.504361][T14735] netlink: 'syz.3.13714': attribute type 9 has an invalid length. [ 2397.525257][T14735] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.13714'. [ 2398.589426][T14747] netlink: 35840 bytes leftover after parsing attributes in process `syz.3.13718'. [ 2398.888220][ T9055] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2398.897742][ T9055] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2398.906331][ T9055] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2398.914596][ T9055] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2398.923496][ T9055] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2398.933090][ T9055] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2399.085829][T14753] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.13719'. [ 2399.141893][T14748] rxe_eth0 speed is unknown, defaulting to 1000 [ 2399.168792][T14753] netlink: 'syz.2.13719': attribute type 29 has an invalid length. [ 2400.782723][T14748] chnl_net:caif_netlink_parms(): no params data found [ 2401.019113][ T2347] Bluetooth: hci4: command tx timeout [ 2401.216316][T14748] bridge0: port 1(bridge_slave_0) entered blocking state [ 2401.256993][T14748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2401.264308][T14748] bridge_slave_0: entered allmulticast mode [ 2401.302256][T14748] bridge_slave_0: entered promiscuous mode [ 2401.327461][T14748] bridge0: port 2(bridge_slave_1) entered blocking state [ 2401.335107][T14748] bridge0: port 2(bridge_slave_1) entered disabled state [ 2401.350916][T14748] bridge_slave_1: entered allmulticast mode [ 2401.360736][T14748] bridge_slave_1: entered promiscuous mode [ 2401.438388][T14748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2401.463974][T14748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2401.554849][T14748] team0: Port device team_slave_0 added [ 2401.592603][T14748] team0: Port device team_slave_1 added [ 2401.686397][T14748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2401.693574][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2401.751334][T14748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2401.778085][T14748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2401.800538][T14748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2401.836034][T14748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2402.363008][T14748] hsr_slave_0: entered promiscuous mode [ 2402.386957][T14748] hsr_slave_1: entered promiscuous mode [ 2402.405977][T14748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2402.413611][T14748] Cannot create hsr debugfs directory [ 2402.887876][T14748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2402.904861][T14748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2402.934326][T14748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2402.946238][T14748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2403.085407][ T2347] Bluetooth: hci4: command tx timeout [ 2403.156443][T14748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2403.214246][T14748] 8021q: adding VLAN 0 to HW filter on device team0 [ 2403.264530][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 2403.271775][T14013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2403.290359][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 2403.297654][T14013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2403.691248][T14748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2404.194992][T14748] veth0_vlan: entered promiscuous mode [ 2404.223013][T14748] veth1_vlan: entered promiscuous mode [ 2404.264090][T14748] veth0_macvtap: entered promiscuous mode [ 2404.284145][T14748] veth1_macvtap: entered promiscuous mode [ 2404.324296][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2404.335774][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.346260][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2404.357436][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.373412][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2404.392040][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.402316][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2404.414689][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.426591][T14748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2404.449637][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.466122][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.481621][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.492521][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.510856][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.524291][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.541384][T14748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2404.551982][T14748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2404.569360][T14748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2404.599013][T14748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.611060][T14748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.629806][T14748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.642839][T14748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2404.780770][T14022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.795217][T14022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2404.850139][T14011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2404.864222][T14011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2405.165500][ T2347] Bluetooth: hci4: command tx timeout [ 2406.300145][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2406.307790][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2407.256431][ T2347] Bluetooth: hci4: command tx timeout [ 2409.545560][T14015] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.607934][T14015] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.691946][T14015] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2409.747950][T14015] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2411.103724][T14015] hsr_slave_0: left promiscuous mode [ 2411.110219][T14015] hsr_slave_1: left promiscuous mode [ 2411.116971][T14015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2411.124464][T14015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2411.133036][T14015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2411.145957][T14015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2411.159627][T14015] bridge_slave_1: left allmulticast mode [ 2411.166176][T14015] bridge_slave_1: left promiscuous mode [ 2411.172055][T14015] bridge0: port 2(bridge_slave_1) entered disabled state [ 2411.194237][T14015] bridge_slave_0: left allmulticast mode [ 2411.202821][T14015] bridge_slave_0: left promiscuous mode [ 2411.217192][T14015] bridge0: port 1(bridge_slave_0) entered disabled state [ 2411.734722][T14015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2411.789404][T14015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2412.149333][T14015] bond0 (unregistering): Released all slaves [ 2467.730942][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2467.737450][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2526.125578][ T9055] Bluetooth: hci4: command 0x0406 tx timeout [ 2529.185786][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2529.192185][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.609771][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.616386][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2652.049702][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2652.056264][ T1295] ieee802154 phy1 wpan1: encryption failed: -22