last executing test programs: 21.348301441s ago: executing program 2 (id=9516): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 19.080240827s ago: executing program 2 (id=9524): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x2000005e, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) 18.852136228s ago: executing program 2 (id=9527): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000280)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r4, 0x4e, &(0x7f00000000c0)}, 0x8) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0x0, '\x00', 0x0, r6}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="8c38"], 0x0, 0x42, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r9, &(0x7f0000000000), 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r7}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xa0}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.621340005s ago: executing program 2 (id=9533): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x200000000000024e, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0x20, &(0x7f0000000680)={&(0x7f0000000080)=""/14, 0xe, 0x0, &(0x7f00000004c0)=""/242, 0xf2}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xc, &(0x7f0000000080)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4020, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x100000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair(0x14, 0x80000, 0xfffffff8, &(0x7f0000000000)) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000480), 0xa}, 0x100109, 0x3, 0x0, 0x8, 0xffffffffffffefff}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_netprio_ifpriomap(r5, 0x0, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x10, 0x2000000000000216, &(0x7f0000000140)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x10, 0x0, 0x0, 0x0, 0x201, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4014, 0x0, 0x1, 0x8, 0xffffffffffffff80, 0x0, 0x101, 0x0, 0x0, 0x0, 0x26aa0cd6}, 0x0, 0xffffffffffffffff, r4, 0x0) r6 = bpf$ITER_CREATE(0xb, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r6}, 0x8) write$cgroup_int(r7, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8922, &(0x7f0000000900)={'vcan0\x00', @random="0600002000"}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x5421, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200008000000000000000000000008500000028000000c5"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) 16.920298138s ago: executing program 2 (id=9536): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3a}, 0x94) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 15.643591898s ago: executing program 2 (id=9541): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x8, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x9b, &(0x7f0000000580)}, 0x10) socketpair$unix(0x2f, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000280)="218aca9442b42ad53b8499469b2c655afbc5d12b56637c2d4847a589eb4e9707de9cd40350ca60882210bf37ef7c327596e9feef4481ebe5a3d51d45887e7f6f168f04db77ab02199b4d5d2fd736d3e4878d2e2ecae42d6854fa69f79fc990f4ce257aec5fd3ccf9044797501a1da481176130fe58b0ef0a66fdcb3d3c86d81ec7a40cb17042e05c49324425af13154017fd4a6cd749aa2338b705e2ecb5f2f747da24636169765444e1af0d3da5d4176bcd26e1a5a829605786a7b6ad9314a2c83e5a25bd3684aa9da7e6050efd8dfe", &(0x7f0000000380)=""/52}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b400, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)) 12.872773158s ago: executing program 4 (id=9554): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 10.04502672s ago: executing program 0 (id=9560): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000500), &(0x7f00000001c0)}, 0x20) gettid() r1 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xb0000}, 0x805, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0xc280, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32], 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8922, &(0x7f0000000080)) 9.760375264s ago: executing program 4 (id=9563): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x10, 0x14, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0xb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf9ad}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 9.595040681s ago: executing program 4 (id=9564): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x2109, 0x0, 0x0, 0x6, 0x0, 0xfffffff7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) 9.39739231s ago: executing program 1 (id=9565): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa7, 0xa}, 0x0, 0x1, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x18, 0x13, &(0x7f0000000600)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @initr0={0x18, 0x0, 0x0, 0x0, 0x289, 0x0, 0x0, 0x0, 0x653}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffbff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f00000006c0)='syzkaller\x00', 0x3ff, 0xbd, &(0x7f0000000880)=""/189, 0x41000, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000a80)={0x2, 0x10, 0xffffe027, 0x8}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000ac0)=[r0, r0, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b00)=[{0x4, 0x1, 0xe, 0x1}, {0x5, 0x5, 0x10, 0x5}], 0x10, 0xcfaf}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r7, 0x0, 0x1}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000340)='8\']:#:*+\'-,!^]{*-{#)!&\x00') bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) 9.163697101s ago: executing program 1 (id=9567): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x20, 0x7266218f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37b1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00ff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xc, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 8.963160871s ago: executing program 0 (id=9568): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffe2f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/225, 0xe1}], 0x1}, 0x2) 8.33954296s ago: executing program 4 (id=9569): close(0xffffffffffffffff) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x18000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x66) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0/file0\x00', 0x116) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000780), 0x12) 8.036476444s ago: executing program 1 (id=9570): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x63) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r1}, 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f00000002c0)=r1}, 0x20) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r8, &(0x7f0000000380), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x80086601, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 7.111499747s ago: executing program 0 (id=9571): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x1b, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc0, 0x5, 0x0, 0x0, 0x0, 0x8, 0x401, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x300, 0xd1, 0x0, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 7.111242777s ago: executing program 1 (id=9572): perf_event_open(&(0x7f0000001340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x10020, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8e20, 0xa2a}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x6, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={r0, 0x69}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 6.583924582s ago: executing program 3 (id=9575): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) close(0xffffffffffffffff) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000080000000050000000010"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x6) 6.163353801s ago: executing program 3 (id=9576): perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0xb5, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 5.862707466s ago: executing program 0 (id=9577): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={0xffffffffffffffff, r0, 0x4}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 5.627474537s ago: executing program 0 (id=9578): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext={0x8, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 5.627186607s ago: executing program 3 (id=9579): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x2b, 0xa, 0x80000000, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000180)={r2, r0, 0x4, r2}, 0x10) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2b, 'pids'}]}, 0x6) write$cgroup_subtree(r4, &(0x7f00000000c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x27) 5.321034981s ago: executing program 0 (id=9580): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0309004d8871ef2885634a8270e7112b00000000000000000000000000ac141401827511d5b4d3a9f536f45ae68ab6086c2f"], 0xee8a) 4.601364995s ago: executing program 3 (id=9581): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xc, 0x0, r0}, 0x50) 4.436484293s ago: executing program 4 (id=9582): perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x3, 0xfd, 0x0, 0x0, 0x20, 0x7266218f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfff7fffffffffffd, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x6}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xd, &(0x7f0000000a80)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='memory.events\x00', 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001680)=@base={0x1a, 0x4, 0x80, 0x1, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x37b1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x17, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630a00ff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0x0, 0x0, &(0x7f0000000400)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xc, 0x1, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) 4.294736989s ago: executing program 3 (id=9583): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffe2f}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000940)=""/225, 0xe1}], 0x1}, 0x2) 3.653856389s ago: executing program 4 (id=9584): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB], 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x63) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r1}, 0x50) close(0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, 0x0, &(0x7f00000002c0)=r1}, 0x20) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r8, &(0x7f0000000380), 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r7, 0x80086601, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) close(r3) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r0) 3.64114771s ago: executing program 1 (id=9594): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x13bb711e) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f00000000c0)=r0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x275a, 0x0) 2.829984068s ago: executing program 3 (id=9585): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r4}, 0x18) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000340)={r3, 0x0, 0x0}, 0x10) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_clone(0x10c0280, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000140)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000380)=r6, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r7) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 2.709518363s ago: executing program 1 (id=9586): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='rdma.current\x00', 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000001200)={&(0x7f0000000200)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000001140)=[{0x0}, {&(0x7f0000000b00)="b735a9a00026efacdbefa0d05abac7658b4c00ba6aafdf6bc9758656d405cc09bd1bf18a8a9fc91f068b6e919d941bbcc6fea83e205cc20b24615a007cfc4355736d10313e302eb764c4dd593aff62f68d5ac8b7891b457ece7d837062991ab707b35ca67baa94e6a0d383", 0x6b}, {0x0}, {&(0x7f0000000dc0)="92789a26d8d03911631c5e25e83c78e9540ab3514046bce79a3dc23217654a5d7057c52ba534d71630d7ef48f6740378958c4378990dcf0a164046a7563361f54fcf42a6ad00282d296e11b115173264ab410162dc26cb44c0ba990e6eb7d61656bdb2bf5ea766596bd8af4d96d2f663eb7620d41430590a8e265034189247626a6d5ab347f0", 0x86}, {&(0x7f0000000e80)}, {&(0x7f0000000ec0)}, {&(0x7f0000000f00)="d678438e7f12014f359f3d868a048bd7fee915f609f787d43f2e436eea759ea2796730b9dea4d5f03cd7b8e34901f3b2dc716c1cc6f61d9d90a7c68e5311df79559088afa5dad9a3b4f9ee0881a670fb3ddce010dced25ab54cfac", 0x5b}, {&(0x7f0000001040)="b859eb029c75b6c93b866eda1d9fe155965783aa97fa30c846a7fba6f18114ae31ea6b5f9da8de87bbb2e4933e79f2a6d9ccd9167f33e07d108e81aaacc02422fb36011650c34ee32f417c86ba220ebe734ab716b2f730", 0x57}], 0x8}, 0x810) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x18011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xa, 0x4}, 0x101048, 0x0, 0x0, 0x5, 0x0, 0xa4c7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x63, 0x1, 0x0, 0x0, 0x0, 0xce, 0x8002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, @perf_bp={0x0, 0xc}, 0x800, 0x1, 0x0, 0x0, 0x3}, 0x0, 0x100000000000, 0xffffffffffffffff, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x5, 0x7, &(0x7f0000001440)=ANY=[@ANYBLOB="18000000050000000000000005000000185700001000000000000000000000007f000000950000000000000054bcc0889504d69c2a88faf6c9b275b3ac8843a0f40a5059590454037c6d24ce5e6c4f1fe1"], &(0x7f0000000c00)='syzkaller\x00', 0x4, 0x0, &(0x7f0000000f80), 0x40f00, 0x9, '\x00', 0x0, @fallback=0x38, r0, 0x8, &(0x7f0000001240)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000001280)={0x4, 0xc, 0x0, 0xffffff01}, 0x10, 0x0, r2, 0x2, &(0x7f0000001300)=[r0, r0, r0, r0, r0, 0xffffffffffffffff, r0], &(0x7f0000001340)=[{0x0, 0x4, 0xb, 0x5}, {0x2, 0x3, 0xd, 0x6}], 0x10, 0x8}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x210, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x8, 0x0, 0x58c4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) close(0xffffffffffffffff) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$TUNSETIFF(r3, 0xb701, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x12140) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 32 (id=9541): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x13, 0x8, 0x0, 0x0, 0x5}, 0x48) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x440, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc///\x00\x82q\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x9b, &(0x7f0000000580)}, 0x10) socketpair$unix(0x2f, 0x5, 0x0, &(0x7f00000029c0)) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000280)="218aca9442b42ad53b8499469b2c655afbc5d12b56637c2d4847a589eb4e9707de9cd40350ca60882210bf37ef7c327596e9feef4481ebe5a3d51d45887e7f6f168f04db77ab02199b4d5d2fd736d3e4878d2e2ecae42d6854fa69f79fc990f4ce257aec5fd3ccf9044797501a1da481176130fe58b0ef0a66fdcb3d3c86d81ec7a40cb17042e05c49324425af13154017fd4a6cd749aa2338b705e2ecb5f2f747da24636169765444e1af0d3da5d4176bcd26e1a5a829605786a7b6ad9314a2c83e5a25bd3684aa9da7e6050efd8dfe", &(0x7f0000000380)=""/52}, 0x20) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x10b400, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000100)) kernel console output (not intermixed with test programs): link becomes ready [ 1780.355843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1780.380226][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1780.423393][T31769] device veth0_macvtap entered promiscuous mode [ 1780.435834][T31769] device veth1_macvtap entered promiscuous mode [ 1780.467282][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.483783][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.572449][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.600029][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.617656][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.631232][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.651306][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1780.662688][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1780.681667][T31769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1780.716062][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1780.736932][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1780.768811][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1780.793797][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1780.868498][T31933] netlink: 'syz.2.8967': attribute type 10 has an invalid length. [ 1780.897320][T31933] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8967'. [ 1780.942599][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.007121][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.054920][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.126120][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.184903][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.256162][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.299231][T31769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1781.363605][T31769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1781.489291][T31769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.547444][T31936] netlink: 'syz.4.8966': attribute type 21 has an invalid length. [ 1781.575826][T31936] netlink: 'syz.4.8966': attribute type 7 has an invalid length. [ 1781.589163][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1781.619166][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1781.666669][T31769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.714614][T31769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.764820][T31769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1781.773582][T31769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.301145][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.317234][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.377504][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1782.718068][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.737259][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.846373][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1783.581131][T31978] netlink: 'syz.2.8978': attribute type 10 has an invalid length. [ 1783.621677][T31978] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8978'. [ 1783.850841][T31989] netlink: 'syz.3.8981': attribute type 21 has an invalid length. [ 1783.952967][T31989] netlink: 'syz.3.8981': attribute type 7 has an invalid length. [ 1786.190074][T32038] netlink: 'syz.1.8994': attribute type 21 has an invalid length. [ 1786.254956][T32038] netlink: 'syz.1.8994': attribute type 7 has an invalid length. [ 1786.372977][T32036] netlink: 'syz.3.8993': attribute type 10 has an invalid length. [ 1786.409668][T32036] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8993'. [ 1787.004664][T32050] netlink: 'syz.4.8998': attribute type 10 has an invalid length. [ 1787.025114][T32050] netlink: 55 bytes leftover after parsing attributes in process `syz.4.8998'. [ 1788.996008][T32101] netlink: 'syz.1.9008': attribute type 21 has an invalid length. [ 1789.003961][T32101] netlink: 'syz.1.9008': attribute type 7 has an invalid length. [ 1789.489201][T32114] netlink: 'syz.1.9012': attribute type 10 has an invalid length. [ 1789.530601][T32114] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9012'. [ 1790.121876][T32126] netlink: 'syz.3.9016': attribute type 21 has an invalid length. [ 1790.170671][T32126] netlink: 'syz.3.9016': attribute type 7 has an invalid length. [ 1791.717094][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.723540][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.910790][T32164] netlink: 'syz.0.9023': attribute type 21 has an invalid length. [ 1791.983777][T32164] netlink: 'syz.0.9023': attribute type 7 has an invalid length. [ 1792.752954][T32181] mac80211_hwsim hwsim289 ªªªªª@: renamed from wlan0 [ 1793.118975][T32187] netlink: 'syz.1.9032': attribute type 10 has an invalid length. [ 1793.139848][T32187] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9032'. [ 1793.612363][T32196] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9034'. [ 1793.881247][T32196] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1793.896810][T32196] CPU: 0 PID: 32196 Comm: syz.1.9034 Not tainted syzkaller #0 [ 1793.904352][T32196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1793.914453][T32196] Call Trace: [ 1793.917785][T32196] [ 1793.920757][T32196] dump_stack_lvl+0x188/0x24e [ 1793.925478][T32196] ? show_regs_print_info+0x12/0x12 [ 1793.930718][T32196] ? load_image+0x410/0x410 [ 1793.935287][T32196] sysfs_warn_dup+0x8a/0xa0 [ 1793.939853][T32196] sysfs_do_create_link_sd+0xc0/0x110 [ 1793.945307][T32196] device_add+0x83b/0x1050 [ 1793.949786][T32196] wiphy_register+0x1d8b/0x2aa0 [ 1793.954711][T32196] ? cfg80211_event_work+0x40/0x40 [ 1793.959869][T32196] ? minstrel_ht_alloc+0x894/0xa20 [ 1793.965028][T32196] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1793.971142][T32196] ieee80211_register_hw+0x2d48/0x39f0 [ 1793.976652][T32196] ? ieee80211_register_hw+0xf41/0x39f0 [ 1793.982268][T32196] ? ieee80211_register_hw+0xf41/0x39f0 [ 1793.987859][T32196] ? ieee80211_tasklet_handler+0x20/0x20 [ 1793.993535][T32196] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1793.999488][T32196] ? __debug_object_init+0xed/0x440 [ 1794.004736][T32196] ? memset+0x1e/0x40 [ 1794.008760][T32196] ? __hrtimer_init+0x189/0x270 [ 1794.013689][T32196] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1794.019469][T32196] ? memcpy+0x3c/0x60 [ 1794.023505][T32196] hwsim_new_radio_nl+0xab7/0xc90 [ 1794.028588][T32196] genl_family_rcv_msg_doit+0x22f/0x350 [ 1794.034180][T32196] ? end_current_label_crit_section+0x170/0x170 [ 1794.040495][T32196] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1794.046435][T32196] ? bpf_lsm_capable+0x5/0x10 [ 1794.051154][T32196] ? security_capable+0x85/0xb0 [ 1794.056054][T32196] genl_rcv_msg+0x601/0x790 [ 1794.060639][T32196] ? genl_bind+0x360/0x360 [ 1794.065108][T32196] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1794.071514][T32196] netlink_rcv_skb+0x1ef/0x440 [ 1794.076319][T32196] ? genl_bind+0x360/0x360 [ 1794.080773][T32196] ? netlink_ack+0x1160/0x1160 [ 1794.085580][T32196] ? down_read+0x1a8/0x2d0 [ 1794.090043][T32196] genl_rcv+0x24/0x40 [ 1794.094087][T32196] netlink_unicast+0x7ad/0x920 [ 1794.098912][T32196] netlink_sendmsg+0x8ad/0xbd0 [ 1794.103739][T32196] ? netlink_getsockopt+0x550/0x550 [ 1794.108983][T32196] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1794.114601][T32196] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1794.119952][T32196] ? security_socket_sendmsg+0x7c/0xa0 [ 1794.125474][T32196] ? netlink_getsockopt+0x550/0x550 [ 1794.130712][T32196] ____sys_sendmsg+0x5ed/0x9a0 [ 1794.135523][T32196] ? __sys_sendmsg_sock+0x30/0x30 [ 1794.140597][T32196] ? __import_iovec+0x306/0x510 [ 1794.145511][T32196] ? import_iovec+0x6f/0xa0 [ 1794.150106][T32196] ___sys_sendmsg+0x2a2/0x360 [ 1794.154846][T32196] ? __sys_sendmsg+0x2a0/0x2a0 [ 1794.159676][T32196] ? ktime_get+0x7b/0x270 [ 1794.164101][T32196] __se_sys_sendmsg+0x1c3/0x2b0 [ 1794.168996][T32196] ? perf_trace_preemptirq_template+0x268/0x320 [ 1794.175300][T32196] ? __x64_sys_sendmsg+0x80/0x80 [ 1794.180293][T32196] ? lockdep_hardirqs_on+0x94/0x140 [ 1794.185536][T32196] do_syscall_64+0x4c/0xa0 [ 1794.190001][T32196] ? clear_bhb_loop+0x60/0xb0 [ 1794.194719][T32196] ? clear_bhb_loop+0x60/0xb0 [ 1794.199437][T32196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1794.205416][T32196] RIP: 0033:0x7fc7ca99e159 [ 1794.209876][T32196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.229553][T32196] RSP: 002b:00007fc7cb84e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1794.238013][T32196] RAX: ffffffffffffffda RBX: 00007fc7cac26090 RCX: 00007fc7ca99e159 [ 1794.246027][T32196] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1794.254042][T32196] RBP: 00007fc7caa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1794.262059][T32196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.270066][T32196] R13: 00007fc7cac26128 R14: 00007fc7cac26090 R15: 00007fffe6ba4718 [ 1794.278089][T32196] [ 1794.983677][T32220] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9049'. [ 1795.073043][T32220] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1795.095509][T32220] CPU: 0 PID: 32220 Comm: syz.1.9049 Not tainted syzkaller #0 [ 1795.103032][T32220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1795.113103][T32220] Call Trace: [ 1795.116414][T32220] [ 1795.119382][T32220] dump_stack_lvl+0x188/0x24e [ 1795.124877][T32220] ? show_regs_print_info+0x12/0x12 [ 1795.130107][T32220] ? load_image+0x410/0x410 [ 1795.134644][T32220] sysfs_warn_dup+0x8a/0xa0 [ 1795.139176][T32220] sysfs_do_create_link_sd+0xc0/0x110 [ 1795.144588][T32220] device_add+0x83b/0x1050 [ 1795.149053][T32220] wiphy_register+0x1d8b/0x2aa0 [ 1795.153955][T32220] ? cfg80211_event_work+0x40/0x40 [ 1795.159105][T32220] ? minstrel_ht_alloc+0x894/0xa20 [ 1795.164269][T32220] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1795.170429][T32220] ieee80211_register_hw+0x2d48/0x39f0 [ 1795.175926][T32220] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1795.182128][T32220] ? ieee80211_register_hw+0xf41/0x39f0 [ 1795.187712][T32220] ? ieee80211_register_hw+0xf41/0x39f0 [ 1795.193294][T32220] ? ieee80211_tasklet_handler+0x20/0x20 [ 1795.198953][T32220] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1795.204892][T32220] ? __debug_object_init+0xed/0x440 [ 1795.210125][T32220] ? memset+0x1e/0x40 [ 1795.214134][T32220] ? __hrtimer_init+0x189/0x270 [ 1795.219020][T32220] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1795.224808][T32220] ? memcpy+0x3c/0x60 [ 1795.228830][T32220] hwsim_new_radio_nl+0xab7/0xc90 [ 1795.233901][T32220] genl_family_rcv_msg_doit+0x22f/0x350 [ 1795.239477][T32220] ? end_current_label_crit_section+0x170/0x170 [ 1795.245766][T32220] ? lock_chain_count+0x20/0x20 [ 1795.250656][T32220] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1795.256583][T32220] ? bpf_lsm_capable+0x5/0x10 [ 1795.261293][T32220] ? security_capable+0x85/0xb0 [ 1795.266195][T32220] genl_rcv_msg+0x601/0x790 [ 1795.270742][T32220] ? genl_bind+0x360/0x360 [ 1795.275185][T32220] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1795.281579][T32220] netlink_rcv_skb+0x1ef/0x440 [ 1795.286392][T32220] ? genl_bind+0x360/0x360 [ 1795.290836][T32220] ? netlink_ack+0x1160/0x1160 [ 1795.295633][T32220] ? down_read+0x1a8/0x2d0 [ 1795.300097][T32220] genl_rcv+0x24/0x40 [ 1795.304133][T32220] netlink_unicast+0x7ad/0x920 [ 1795.308937][T32220] netlink_sendmsg+0x8ad/0xbd0 [ 1795.313734][T32220] ? netlink_getsockopt+0x550/0x550 [ 1795.318963][T32220] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1795.324561][T32220] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1795.329877][T32220] ? security_socket_sendmsg+0x7c/0xa0 [ 1795.335368][T32220] ? netlink_getsockopt+0x550/0x550 [ 1795.340592][T32220] ____sys_sendmsg+0x5ed/0x9a0 [ 1795.345390][T32220] ? __sys_sendmsg_sock+0x30/0x30 [ 1795.350434][T32220] ? __import_iovec+0x306/0x510 [ 1795.355322][T32220] ? import_iovec+0x6f/0xa0 [ 1795.359870][T32220] ___sys_sendmsg+0x2a2/0x360 [ 1795.364577][T32220] ? __sys_sendmsg+0x2a0/0x2a0 [ 1795.369388][T32220] ? rcu_is_watching+0x11/0xa0 [ 1795.374208][T32220] __se_sys_sendmsg+0x1c3/0x2b0 [ 1795.379092][T32220] ? __x64_sys_sendmsg+0x80/0x80 [ 1795.384094][T32220] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1795.390018][T32220] do_syscall_64+0x4c/0xa0 [ 1795.394474][T32220] ? clear_bhb_loop+0x60/0xb0 [ 1795.399197][T32220] ? clear_bhb_loop+0x60/0xb0 [ 1795.403899][T32220] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1795.409837][T32220] RIP: 0033:0x7fc7ca99e159 [ 1795.414277][T32220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1795.433916][T32220] RSP: 002b:00007fc7cb84e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1795.442349][T32220] RAX: ffffffffffffffda RBX: 00007fc7cac26090 RCX: 00007fc7ca99e159 [ 1795.450342][T32220] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1795.458343][T32220] RBP: 00007fc7caa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1795.466335][T32220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1795.474331][T32220] R13: 00007fc7cac26128 R14: 00007fc7cac26090 R15: 00007fffe6ba4718 [ 1795.482346][T32220] [ 1797.607691][T32260] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9051'. [ 1797.698021][T32260] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1797.789501][T32260] CPU: 1 PID: 32260 Comm: syz.3.9051 Not tainted syzkaller #0 [ 1797.797065][T32260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1797.807156][T32260] Call Trace: [ 1797.810469][T32260] [ 1797.813425][T32260] dump_stack_lvl+0x188/0x24e [ 1797.818144][T32260] ? show_regs_print_info+0x12/0x12 [ 1797.823365][T32260] ? load_image+0x410/0x410 [ 1797.827905][T32260] sysfs_warn_dup+0x8a/0xa0 [ 1797.832457][T32260] sysfs_do_create_link_sd+0xc0/0x110 [ 1797.837863][T32260] device_add+0x83b/0x1050 [ 1797.842311][T32260] wiphy_register+0x1d8b/0x2aa0 [ 1797.847203][T32260] ? cfg80211_event_work+0x40/0x40 [ 1797.852340][T32260] ? minstrel_ht_alloc+0x894/0xa20 [ 1797.857489][T32260] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1797.863586][T32260] ieee80211_register_hw+0x2d48/0x39f0 [ 1797.869077][T32260] ? ieee80211_register_hw+0xf41/0x39f0 [ 1797.874658][T32260] ? ieee80211_register_hw+0xf41/0x39f0 [ 1797.880234][T32260] ? ieee80211_tasklet_handler+0x20/0x20 [ 1797.885886][T32260] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1797.891805][T32260] ? __debug_object_init+0xed/0x440 [ 1797.897018][T32260] ? memset+0x1e/0x40 [ 1797.901012][T32260] ? __hrtimer_init+0x189/0x270 [ 1797.905883][T32260] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1797.911635][T32260] ? memcpy+0x3c/0x60 [ 1797.915644][T32260] hwsim_new_radio_nl+0xab7/0xc90 [ 1797.920710][T32260] genl_family_rcv_msg_doit+0x22f/0x350 [ 1797.926280][T32260] ? end_current_label_crit_section+0x170/0x170 [ 1797.932582][T32260] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1797.938526][T32260] ? bpf_lsm_capable+0x5/0x10 [ 1797.943226][T32260] ? security_capable+0x85/0xb0 [ 1797.948102][T32260] genl_rcv_msg+0x601/0x790 [ 1797.952636][T32260] ? genl_bind+0x360/0x360 [ 1797.957072][T32260] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1797.963446][T32260] netlink_rcv_skb+0x1ef/0x440 [ 1797.968234][T32260] ? genl_bind+0x360/0x360 [ 1797.972672][T32260] ? netlink_ack+0x1160/0x1160 [ 1797.977483][T32260] ? down_read+0x1a8/0x2d0 [ 1797.981930][T32260] genl_rcv+0x24/0x40 [ 1797.985944][T32260] netlink_unicast+0x7ad/0x920 [ 1797.990740][T32260] netlink_sendmsg+0x8ad/0xbd0 [ 1797.995540][T32260] ? netlink_getsockopt+0x550/0x550 [ 1798.000768][T32260] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1798.006344][T32260] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1798.011659][T32260] ? security_socket_sendmsg+0x7c/0xa0 [ 1798.017150][T32260] ? netlink_getsockopt+0x550/0x550 [ 1798.022372][T32260] ____sys_sendmsg+0x5ed/0x9a0 [ 1798.027156][T32260] ? __sys_sendmsg_sock+0x30/0x30 [ 1798.032196][T32260] ? __import_iovec+0x306/0x510 [ 1798.037086][T32260] ? import_iovec+0x6f/0xa0 [ 1798.041628][T32260] ___sys_sendmsg+0x2a2/0x360 [ 1798.046430][T32260] ? __sys_sendmsg+0x2a0/0x2a0 [ 1798.051241][T32260] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1798.057037][T32260] __se_sys_sendmsg+0x1c3/0x2b0 [ 1798.061943][T32260] ? __x64_sys_sendmsg+0x80/0x80 [ 1798.066944][T32260] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1798.072900][T32260] do_syscall_64+0x4c/0xa0 [ 1798.077369][T32260] ? clear_bhb_loop+0x60/0xb0 [ 1798.082084][T32260] ? clear_bhb_loop+0x60/0xb0 [ 1798.086821][T32260] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1798.092773][T32260] RIP: 0033:0x7f56a5b9e159 [ 1798.097277][T32260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1798.116925][T32260] RSP: 002b:00007f56a6b35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1798.125388][T32260] RAX: ffffffffffffffda RBX: 00007f56a5e26090 RCX: 00007f56a5b9e159 [ 1798.133398][T32260] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1798.141404][T32260] RBP: 00007f56a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1798.149425][T32260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1798.157421][T32260] R13: 00007f56a5e26128 R14: 00007f56a5e26090 R15: 00007ffe61b64988 [ 1798.165473][T32260] [ 1799.764480][T32295] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9058'. [ 1799.907024][T32295] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1800.205189][T32306] netlink: 'syz.2.9061': attribute type 10 has an invalid length. [ 1800.222600][T32306] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9061'. [ 1801.552206][T32331] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9069'. [ 1801.684110][T32331] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1803.147667][T32352] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9077'. [ 1803.272148][T32352] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1803.284986][T32352] CPU: 1 PID: 32352 Comm: syz.3.9077 Not tainted syzkaller #0 [ 1803.292518][T32352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1803.302614][T32352] Call Trace: [ 1803.305935][T32352] [ 1803.308905][T32352] dump_stack_lvl+0x188/0x24e [ 1803.313666][T32352] ? show_regs_print_info+0x12/0x12 [ 1803.318919][T32352] ? load_image+0x410/0x410 [ 1803.323499][T32352] sysfs_warn_dup+0x8a/0xa0 [ 1803.328062][T32352] sysfs_do_create_link_sd+0xc0/0x110 [ 1803.333520][T32352] device_add+0x83b/0x1050 [ 1803.338021][T32352] wiphy_register+0x1d8b/0x2aa0 [ 1803.342965][T32352] ? cfg80211_event_work+0x40/0x40 [ 1803.348141][T32352] ? _dev_printk+0x1/0x175 [ 1803.352646][T32352] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1803.358784][T32352] ieee80211_register_hw+0x2d48/0x39f0 [ 1803.364300][T32352] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1803.370514][T32352] ? ieee80211_register_hw+0xf41/0x39f0 [ 1803.376110][T32352] ? ieee80211_register_hw+0xf41/0x39f0 [ 1803.381744][T32352] ? ieee80211_tasklet_handler+0x20/0x20 [ 1803.387454][T32352] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1803.393514][T32352] ? __debug_object_init+0xed/0x440 [ 1803.398827][T32352] ? memset+0x1e/0x40 [ 1803.402865][T32352] ? __hrtimer_init+0x189/0x270 [ 1803.407787][T32352] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1803.413559][T32352] ? memcpy+0x3c/0x60 [ 1803.417583][T32352] hwsim_new_radio_nl+0xab7/0xc90 [ 1803.422659][T32352] genl_family_rcv_msg_doit+0x22f/0x350 [ 1803.428246][T32352] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1803.434190][T32352] genl_rcv_msg+0x601/0x790 [ 1803.438734][T32352] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1803.444930][T32352] ? genl_bind+0x360/0x360 [ 1803.449377][T32352] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1803.455756][T32352] ? lock_acquire+0x225/0x4a0 [ 1803.460478][T32352] netlink_rcv_skb+0x1ef/0x440 [ 1803.465272][T32352] ? genl_bind+0x360/0x360 [ 1803.469721][T32352] ? netlink_ack+0x1160/0x1160 [ 1803.474520][T32352] ? down_read+0x1a8/0x2d0 [ 1803.478989][T32352] genl_rcv+0x24/0x40 [ 1803.482998][T32352] netlink_unicast+0x7ad/0x920 [ 1803.487796][T32352] netlink_sendmsg+0x8ad/0xbd0 [ 1803.492594][T32352] ? netlink_getsockopt+0x550/0x550 [ 1803.497831][T32352] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1803.503423][T32352] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1803.508758][T32352] ? security_socket_sendmsg+0x7c/0xa0 [ 1803.514260][T32352] ? netlink_getsockopt+0x550/0x550 [ 1803.519496][T32352] ____sys_sendmsg+0x5ed/0x9a0 [ 1803.524311][T32352] ? __sys_sendmsg_sock+0x30/0x30 [ 1803.529370][T32352] ? __import_iovec+0x306/0x510 [ 1803.534265][T32352] ? import_iovec+0x6f/0xa0 [ 1803.538817][T32352] ___sys_sendmsg+0x2a2/0x360 [ 1803.543535][T32352] ? __sys_sendmsg+0x2a0/0x2a0 [ 1803.548393][T32352] __se_sys_sendmsg+0x1c3/0x2b0 [ 1803.553285][T32352] ? perf_trace_preemptirq_template+0x268/0x320 [ 1803.559580][T32352] ? __x64_sys_sendmsg+0x80/0x80 [ 1803.564607][T32352] ? lockdep_hardirqs_on+0x94/0x140 [ 1803.569864][T32352] do_syscall_64+0x4c/0xa0 [ 1803.574319][T32352] ? clear_bhb_loop+0x60/0xb0 [ 1803.579031][T32352] ? clear_bhb_loop+0x60/0xb0 [ 1803.583746][T32352] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1803.589686][T32352] RIP: 0033:0x7f56a5b9e159 [ 1803.594139][T32352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1803.613804][T32352] RSP: 002b:00007f56a6b35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1803.622249][T32352] RAX: ffffffffffffffda RBX: 00007f56a5e26090 RCX: 00007f56a5b9e159 [ 1803.630248][T32352] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1803.638256][T32352] RBP: 00007f56a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1803.646253][T32352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1803.654271][T32352] R13: 00007f56a5e26128 R14: 00007f56a5e26090 R15: 00007ffe61b64988 [ 1803.662285][T32352] [ 1804.211084][T32363] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9079'. [ 1804.259394][T32363] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1804.271918][T32363] CPU: 0 PID: 32363 Comm: syz.3.9079 Not tainted syzkaller #0 [ 1804.279469][T32363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1804.289571][T32363] Call Trace: [ 1804.292909][T32363] [ 1804.295869][T32363] dump_stack_lvl+0x188/0x24e [ 1804.300582][T32363] ? show_regs_print_info+0x12/0x12 [ 1804.305829][T32363] ? load_image+0x410/0x410 [ 1804.310375][T32363] sysfs_warn_dup+0x8a/0xa0 [ 1804.314916][T32363] sysfs_do_create_link_sd+0xc0/0x110 [ 1804.320323][T32363] device_add+0x83b/0x1050 [ 1804.324792][T32363] wiphy_register+0x1d8b/0x2aa0 [ 1804.329726][T32363] ? cfg80211_event_work+0x40/0x40 [ 1804.334901][T32363] ? minstrel_ht_alloc+0x894/0xa20 [ 1804.340073][T32363] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1804.346171][T32363] ieee80211_register_hw+0x2d48/0x39f0 [ 1804.351666][T32363] ? lock_chain_count+0x20/0x20 [ 1804.356561][T32363] ? ieee80211_register_hw+0xf41/0x39f0 [ 1804.362131][T32363] ? ieee80211_register_hw+0xf41/0x39f0 [ 1804.367720][T32363] ? ieee80211_tasklet_handler+0x20/0x20 [ 1804.373392][T32363] ? kasan_check_range+0x8a/0x290 [ 1804.378473][T32363] ? memset+0x1e/0x40 [ 1804.382520][T32363] ? __hrtimer_init+0x189/0x270 [ 1804.387414][T32363] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1804.393195][T32363] ? memcpy+0x3c/0x60 [ 1804.397212][T32363] hwsim_new_radio_nl+0xab7/0xc90 [ 1804.402280][T32363] genl_family_rcv_msg_doit+0x22f/0x350 [ 1804.407883][T32363] ? end_current_label_crit_section+0x170/0x170 [ 1804.414174][T32363] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1804.420142][T32363] ? bpf_lsm_capable+0x5/0x10 [ 1804.424855][T32363] ? security_capable+0x85/0xb0 [ 1804.429746][T32363] genl_rcv_msg+0x601/0x790 [ 1804.434299][T32363] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1804.440067][T32363] ? genl_bind+0x360/0x360 [ 1804.444507][T32363] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1804.450895][T32363] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1804.456930][T32363] netlink_rcv_skb+0x1ef/0x440 [ 1804.461723][T32363] ? genl_bind+0x360/0x360 [ 1804.466205][T32363] ? netlink_ack+0x1160/0x1160 [ 1804.470999][T32363] ? genl_bind+0x360/0x360 [ 1804.475449][T32363] genl_rcv+0x24/0x40 [ 1804.479459][T32363] netlink_unicast+0x7ad/0x920 [ 1804.484266][T32363] netlink_sendmsg+0x8ad/0xbd0 [ 1804.489071][T32363] ? netlink_getsockopt+0x550/0x550 [ 1804.494316][T32363] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1804.499923][T32363] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1804.505247][T32363] ? security_socket_sendmsg+0x7c/0xa0 [ 1804.510748][T32363] ? netlink_getsockopt+0x550/0x550 [ 1804.515979][T32363] ____sys_sendmsg+0x5ed/0x9a0 [ 1804.520798][T32363] ? __sys_sendmsg_sock+0x30/0x30 [ 1804.525854][T32363] ? __import_iovec+0x306/0x510 [ 1804.530775][T32363] ? import_iovec+0x6f/0xa0 [ 1804.535320][T32363] ___sys_sendmsg+0x2a2/0x360 [ 1804.540031][T32363] ? __sys_sendmsg+0x2a0/0x2a0 [ 1804.544835][T32363] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1804.550613][T32363] __se_sys_sendmsg+0x1c3/0x2b0 [ 1804.555495][T32363] ? __x64_sys_sendmsg+0x80/0x80 [ 1804.560480][T32363] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1804.566585][T32363] do_syscall_64+0x4c/0xa0 [ 1804.571060][T32363] ? clear_bhb_loop+0x60/0xb0 [ 1804.575773][T32363] ? clear_bhb_loop+0x60/0xb0 [ 1804.580478][T32363] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1804.586411][T32363] RIP: 0033:0x7f56a5b9e159 [ 1804.590876][T32363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1804.610507][T32363] RSP: 002b:00007f56a6b35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1804.618947][T32363] RAX: ffffffffffffffda RBX: 00007f56a5e26090 RCX: 00007f56a5b9e159 [ 1804.626949][T32363] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1804.634948][T32363] RBP: 00007f56a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1804.642948][T32363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1804.650961][T32363] R13: 00007f56a5e26128 R14: 00007f56a5e26090 R15: 00007ffe61b64988 [ 1804.658969][T32363] [ 1806.216961][T32383] netlink: 'syz.4.9085': attribute type 10 has an invalid length. [ 1806.232591][T32383] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9085'. [ 1806.945091][T32397] netlink: 'syz.3.9092': attribute type 10 has an invalid length. [ 1806.988646][T32397] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1808.521450][T32424] netlink: 'syz.1.9100': attribute type 10 has an invalid length. [ 1808.547253][T32424] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9100'. [ 1810.104824][T32449] netlink: 'syz.0.9109': attribute type 10 has an invalid length. [ 1810.164881][T32449] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9109'. [ 1810.529478][T32458] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.9113'. [ 1810.608817][T32458] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1810.635278][T32458] CPU: 0 PID: 32458 Comm: syz.3.9113 Not tainted syzkaller #0 [ 1810.642815][T32458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1810.652908][T32458] Call Trace: [ 1810.656240][T32458] [ 1810.659203][T32458] dump_stack_lvl+0x188/0x24e [ 1810.663951][T32458] ? show_regs_print_info+0x12/0x12 [ 1810.669234][T32458] ? load_image+0x410/0x410 [ 1810.673811][T32458] sysfs_warn_dup+0x8a/0xa0 [ 1810.678375][T32458] sysfs_do_create_link_sd+0xc0/0x110 [ 1810.683809][T32458] device_add+0x83b/0x1050 [ 1810.688327][T32458] wiphy_register+0x1d8b/0x2aa0 [ 1810.693257][T32458] ? cfg80211_event_work+0x40/0x40 [ 1810.698419][T32458] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1810.704660][T32458] ieee80211_register_hw+0x2d48/0x39f0 [ 1810.710163][T32458] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1810.716379][T32458] ? ieee80211_register_hw+0xf41/0x39f0 [ 1810.721971][T32458] ? ieee80211_register_hw+0xf41/0x39f0 [ 1810.727566][T32458] ? ieee80211_tasklet_handler+0x20/0x20 [ 1810.733244][T32458] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1810.739208][T32458] ? __debug_object_init+0xed/0x440 [ 1810.744449][T32458] ? memset+0x1e/0x40 [ 1810.748457][T32458] ? __hrtimer_init+0x189/0x270 [ 1810.753342][T32458] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1810.759105][T32458] ? memcpy+0x3c/0x60 [ 1810.763117][T32458] hwsim_new_radio_nl+0xab7/0xc90 [ 1810.768182][T32458] genl_family_rcv_msg_doit+0x22f/0x350 [ 1810.773767][T32458] ? end_current_label_crit_section+0x170/0x170 [ 1810.780056][T32458] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1810.785984][T32458] ? bpf_lsm_capable+0x5/0x10 [ 1810.790692][T32458] ? security_capable+0x85/0xb0 [ 1810.795575][T32458] genl_rcv_msg+0x601/0x790 [ 1810.800150][T32458] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1810.806387][T32458] ? genl_bind+0x360/0x360 [ 1810.810845][T32458] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1810.817220][T32458] ? lock_acquire+0x225/0x4a0 [ 1810.821947][T32458] netlink_rcv_skb+0x1ef/0x440 [ 1810.826744][T32458] ? genl_bind+0x360/0x360 [ 1810.831207][T32458] ? netlink_ack+0x1160/0x1160 [ 1810.836010][T32458] ? down_read+0x1a8/0x2d0 [ 1810.840497][T32458] genl_rcv+0x24/0x40 [ 1810.844512][T32458] netlink_unicast+0x7ad/0x920 [ 1810.849342][T32458] netlink_sendmsg+0x8ad/0xbd0 [ 1810.854151][T32458] ? netlink_getsockopt+0x550/0x550 [ 1810.859385][T32458] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1810.864974][T32458] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1810.870285][T32458] ? security_socket_sendmsg+0x7c/0xa0 [ 1810.875774][T32458] ? netlink_getsockopt+0x550/0x550 [ 1810.881001][T32458] ____sys_sendmsg+0x5ed/0x9a0 [ 1810.885799][T32458] ? __sys_sendmsg_sock+0x30/0x30 [ 1810.890844][T32458] ? __import_iovec+0x306/0x510 [ 1810.895738][T32458] ? import_iovec+0x6f/0xa0 [ 1810.900285][T32458] ___sys_sendmsg+0x2a2/0x360 [ 1810.905002][T32458] ? __sys_sendmsg+0x2a0/0x2a0 [ 1810.909926][T32458] ? ktime_get+0x7b/0x270 [ 1810.914305][T32458] __se_sys_sendmsg+0x1c3/0x2b0 [ 1810.919188][T32458] ? perf_trace_preemptirq_template+0x268/0x320 [ 1810.925525][T32458] ? __x64_sys_sendmsg+0x80/0x80 [ 1810.930500][T32458] ? lockdep_hardirqs_on+0x94/0x140 [ 1810.935727][T32458] do_syscall_64+0x4c/0xa0 [ 1810.940161][T32458] ? clear_bhb_loop+0x60/0xb0 [ 1810.944862][T32458] ? clear_bhb_loop+0x60/0xb0 [ 1810.949560][T32458] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1810.955506][T32458] RIP: 0033:0x7f56a5b9e159 [ 1810.959945][T32458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1810.979584][T32458] RSP: 002b:00007f56a6b35028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1810.988025][T32458] RAX: ffffffffffffffda RBX: 00007f56a5e26090 RCX: 00007f56a5b9e159 [ 1810.996020][T32458] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1811.004015][T32458] RBP: 00007f56a5c3506b R08: 0000000000000000 R09: 0000000000000000 [ 1811.012007][T32458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1811.020045][T32458] R13: 00007f56a5e26128 R14: 00007f56a5e26090 R15: 00007ffe61b64988 [ 1811.028082][T32458] [ 1811.190869][T32462] netlink: 'syz.4.9114': attribute type 10 has an invalid length. [ 1811.247027][T32462] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9114'. [ 1811.720710][T32475] netlink: 'syz.4.9118': attribute type 21 has an invalid length. [ 1811.735091][T32475] netlink: 'syz.4.9118': attribute type 7 has an invalid length. [ 1814.772817][T32526] netlink: 'syz.3.9132': attribute type 21 has an invalid length. [ 1814.799049][T32526] netlink: 'syz.3.9132': attribute type 7 has an invalid length. [ 1817.587871][T32568] netlink: 'syz.4.9144': attribute type 21 has an invalid length. [ 1817.605178][T32568] netlink: 'syz.4.9144': attribute type 7 has an invalid length. [ 1817.929532][T32574] netlink: 'syz.3.9146': attribute type 21 has an invalid length. [ 1817.953101][T32574] netlink: 'syz.3.9146': attribute type 7 has an invalid length. [ 1818.522599][T32581] netlink: 'syz.0.9149': attribute type 10 has an invalid length. [ 1818.555379][T32581] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9149'. [ 1818.836420][T32591] netlink: 'syz.2.9153': attribute type 10 has an invalid length. [ 1818.857472][T32591] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9153'. [ 1819.256900][T32602] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9156'. [ 1819.370211][T32602] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1819.491412][T32602] CPU: 0 PID: 32602 Comm: syz.2.9156 Not tainted syzkaller #0 [ 1819.498998][T32602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1819.509105][T32602] Call Trace: [ 1819.512441][T32602] [ 1819.515415][T32602] dump_stack_lvl+0x188/0x24e [ 1819.520231][T32602] ? show_regs_print_info+0x12/0x12 [ 1819.525487][T32602] ? load_image+0x410/0x410 [ 1819.530056][T32602] sysfs_warn_dup+0x8a/0xa0 [ 1819.534612][T32602] sysfs_do_create_link_sd+0xc0/0x110 [ 1819.540055][T32602] device_add+0x83b/0x1050 [ 1819.544533][T32602] wiphy_register+0x1d8b/0x2aa0 [ 1819.549539][T32602] ? cfg80211_event_work+0x40/0x40 [ 1819.554829][T32602] ? minstrel_ht_alloc+0x894/0xa20 [ 1819.560019][T32602] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1819.566152][T32602] ieee80211_register_hw+0x2d48/0x39f0 [ 1819.571652][T32602] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1819.577892][T32602] ? ieee80211_register_hw+0xf41/0x39f0 [ 1819.583514][T32602] ? ieee80211_register_hw+0xf41/0x39f0 [ 1819.589120][T32602] ? ieee80211_tasklet_handler+0x20/0x20 [ 1819.594806][T32602] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1819.600757][T32602] ? __debug_object_init+0xed/0x440 [ 1819.606007][T32602] ? memset+0x1e/0x40 [ 1819.610066][T32602] ? __hrtimer_init+0x189/0x270 [ 1819.614979][T32602] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1819.620764][T32602] ? memcpy+0x3c/0x60 [ 1819.624792][T32602] hwsim_new_radio_nl+0xab7/0xc90 [ 1819.629889][T32602] genl_family_rcv_msg_doit+0x22f/0x350 [ 1819.635497][T32602] ? end_current_label_crit_section+0x170/0x170 [ 1819.641803][T32602] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1819.647760][T32602] ? bpf_lsm_capable+0x5/0x10 [ 1819.652487][T32602] ? security_capable+0x85/0xb0 [ 1819.657425][T32602] genl_rcv_msg+0x601/0x790 [ 1819.661999][T32602] ? genl_bind+0x360/0x360 [ 1819.666457][T32602] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1819.672873][T32602] netlink_rcv_skb+0x1ef/0x440 [ 1819.677686][T32602] ? genl_bind+0x360/0x360 [ 1819.682142][T32602] ? netlink_ack+0x1160/0x1160 [ 1819.686961][T32602] ? down_read+0x1a8/0x2d0 [ 1819.691419][T32602] genl_rcv+0x24/0x40 [ 1819.695457][T32602] netlink_unicast+0x7ad/0x920 [ 1819.700274][T32602] netlink_sendmsg+0x8ad/0xbd0 [ 1819.705096][T32602] ? netlink_getsockopt+0x550/0x550 [ 1819.710365][T32602] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1819.715972][T32602] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1819.721299][T32602] ? security_socket_sendmsg+0x7c/0xa0 [ 1819.726801][T32602] ? netlink_getsockopt+0x550/0x550 [ 1819.732042][T32602] ____sys_sendmsg+0x5ed/0x9a0 [ 1819.736854][T32602] ? __sys_sendmsg_sock+0x30/0x30 [ 1819.741915][T32602] ? __import_iovec+0x306/0x510 [ 1819.746854][T32602] ? import_iovec+0x6f/0xa0 [ 1819.751406][T32602] ___sys_sendmsg+0x2a2/0x360 [ 1819.756124][T32602] ? __sys_sendmsg+0x2a0/0x2a0 [ 1819.760933][T32602] ? ktime_get+0x7b/0x270 [ 1819.765332][T32602] __se_sys_sendmsg+0x1c3/0x2b0 [ 1819.770218][T32602] ? perf_trace_preemptirq_template+0x268/0x320 [ 1819.776503][T32602] ? __x64_sys_sendmsg+0x80/0x80 [ 1819.781493][T32602] ? lockdep_hardirqs_on+0x94/0x140 [ 1819.786758][T32602] do_syscall_64+0x4c/0xa0 [ 1819.791209][T32602] ? clear_bhb_loop+0x60/0xb0 [ 1819.795921][T32602] ? clear_bhb_loop+0x60/0xb0 [ 1819.800644][T32602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1819.806612][T32602] RIP: 0033:0x7f4f05d9e159 [ 1819.811058][T32602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1819.830732][T32602] RSP: 002b:00007f4f06cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1819.839196][T32602] RAX: ffffffffffffffda RBX: 00007f4f06026090 RCX: 00007f4f05d9e159 [ 1819.847208][T32602] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1819.855212][T32602] RBP: 00007f4f05e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1819.863220][T32602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1819.871219][T32602] R13: 00007f4f06026128 R14: 00007f4f06026090 R15: 00007ffe12759dd8 [ 1819.879283][T32602] [ 1820.509732][T32615] netlink: 'syz.1.9161': attribute type 21 has an invalid length. [ 1820.518604][T32615] netlink: 'syz.1.9161': attribute type 7 has an invalid length. [ 1820.892194][T32623] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9163'. [ 1820.958639][T32623] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1820.968638][T32623] CPU: 0 PID: 32623 Comm: syz.1.9163 Not tainted syzkaller #0 [ 1820.976163][T32623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1820.986240][T32623] Call Trace: [ 1820.989569][T32623] [ 1820.992528][T32623] dump_stack_lvl+0x188/0x24e [ 1820.997263][T32623] ? show_regs_print_info+0x12/0x12 [ 1821.002492][T32623] ? load_image+0x410/0x410 [ 1821.007059][T32623] sysfs_warn_dup+0x8a/0xa0 [ 1821.011612][T32623] sysfs_do_create_link_sd+0xc0/0x110 [ 1821.017026][T32623] device_add+0x83b/0x1050 [ 1821.021481][T32623] wiphy_register+0x1d8b/0x2aa0 [ 1821.026374][T32623] ? cfg80211_event_work+0x40/0x40 [ 1821.031508][T32623] ? minstrel_ht_alloc+0x894/0xa20 [ 1821.036647][T32623] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1821.042734][T32623] ieee80211_register_hw+0x2d48/0x39f0 [ 1821.048239][T32623] ? ieee80211_register_hw+0xf41/0x39f0 [ 1821.053821][T32623] ? ieee80211_register_hw+0xf41/0x39f0 [ 1821.059397][T32623] ? ieee80211_tasklet_handler+0x20/0x20 [ 1821.065058][T32623] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1821.070989][T32623] ? __debug_object_init+0xed/0x440 [ 1821.076219][T32623] ? memset+0x1e/0x40 [ 1821.080226][T32623] ? __hrtimer_init+0x189/0x270 [ 1821.085124][T32623] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1821.090888][T32623] ? memcpy+0x3c/0x60 [ 1821.094896][T32623] hwsim_new_radio_nl+0xab7/0xc90 [ 1821.099983][T32623] genl_family_rcv_msg_doit+0x22f/0x350 [ 1821.105554][T32623] ? end_current_label_crit_section+0x170/0x170 [ 1821.111834][T32623] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1821.117763][T32623] ? bpf_lsm_capable+0x5/0x10 [ 1821.122465][T32623] ? security_capable+0x85/0xb0 [ 1821.127336][T32623] genl_rcv_msg+0x601/0x790 [ 1821.131864][T32623] ? genl_bind+0x360/0x360 [ 1821.136307][T32623] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1821.142715][T32623] netlink_rcv_skb+0x1ef/0x440 [ 1821.147502][T32623] ? genl_bind+0x360/0x360 [ 1821.151939][T32623] ? netlink_ack+0x1160/0x1160 [ 1821.156740][T32623] ? down_read+0x1a8/0x2d0 [ 1821.161194][T32623] genl_rcv+0x24/0x40 [ 1821.165222][T32623] netlink_unicast+0x7ad/0x920 [ 1821.170021][T32623] netlink_sendmsg+0x8ad/0xbd0 [ 1821.174836][T32623] ? netlink_getsockopt+0x550/0x550 [ 1821.180066][T32623] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1821.185651][T32623] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1821.190981][T32623] ? security_socket_sendmsg+0x7c/0xa0 [ 1821.196482][T32623] ? netlink_getsockopt+0x550/0x550 [ 1821.201717][T32623] ____sys_sendmsg+0x5ed/0x9a0 [ 1821.206523][T32623] ? __sys_sendmsg_sock+0x30/0x30 [ 1821.211576][T32623] ? __import_iovec+0x306/0x510 [ 1821.216470][T32623] ? import_iovec+0x6f/0xa0 [ 1821.221011][T32623] ___sys_sendmsg+0x2a2/0x360 [ 1821.225726][T32623] ? __sys_sendmsg+0x2a0/0x2a0 [ 1821.230540][T32623] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1821.236336][T32623] __se_sys_sendmsg+0x1c3/0x2b0 [ 1821.241256][T32623] ? __x64_sys_sendmsg+0x80/0x80 [ 1821.246234][T32623] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1821.252164][T32623] do_syscall_64+0x4c/0xa0 [ 1821.256616][T32623] ? clear_bhb_loop+0x60/0xb0 [ 1821.261324][T32623] ? clear_bhb_loop+0x60/0xb0 [ 1821.266067][T32623] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1821.272001][T32623] RIP: 0033:0x7fc7ca99e159 [ 1821.276490][T32623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1821.296143][T32623] RSP: 002b:00007fc7cb84e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1821.304576][T32623] RAX: ffffffffffffffda RBX: 00007fc7cac26090 RCX: 00007fc7ca99e159 [ 1821.312572][T32623] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1821.320565][T32623] RBP: 00007fc7caa3506b R08: 0000000000000000 R09: 0000000000000000 [ 1821.328560][T32623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1821.336550][T32623] R13: 00007fc7cac26128 R14: 00007fc7cac26090 R15: 00007fffe6ba4718 [ 1821.344552][T32623] [ 1821.843544][T32634] netlink: 'syz.2.9166': attribute type 10 has an invalid length. [ 1821.873445][T32634] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9166'. [ 1822.497378][T32648] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9171'. [ 1822.640265][T32648] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1822.661439][T32648] CPU: 1 PID: 32648 Comm: syz.0.9171 Not tainted syzkaller #0 [ 1822.669003][T32648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1822.679133][T32648] Call Trace: [ 1822.682449][T32648] [ 1822.685441][T32648] dump_stack_lvl+0x188/0x24e [ 1822.690213][T32648] ? show_regs_print_info+0x12/0x12 [ 1822.695467][T32648] ? load_image+0x410/0x410 [ 1822.700056][T32648] sysfs_warn_dup+0x8a/0xa0 [ 1822.704613][T32648] sysfs_do_create_link_sd+0xc0/0x110 [ 1822.710055][T32648] device_add+0x83b/0x1050 [ 1822.714568][T32648] wiphy_register+0x1d8b/0x2aa0 [ 1822.719490][T32648] ? cfg80211_event_work+0x40/0x40 [ 1822.724660][T32648] ? minstrel_ht_alloc+0x894/0xa20 [ 1822.729829][T32648] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1822.735975][T32648] ieee80211_register_hw+0x2d48/0x39f0 [ 1822.741501][T32648] ? ieee80211_register_hw+0xf41/0x39f0 [ 1822.747102][T32648] ? ieee80211_register_hw+0xf41/0x39f0 [ 1822.752712][T32648] ? ieee80211_tasklet_handler+0x20/0x20 [ 1822.758398][T32648] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1822.764351][T32648] ? __debug_object_init+0xed/0x440 [ 1822.769604][T32648] ? memset+0x1e/0x40 [ 1822.773647][T32648] ? __hrtimer_init+0x189/0x270 [ 1822.778547][T32648] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1822.784364][T32648] ? memcpy+0x3c/0x60 [ 1822.788397][T32648] hwsim_new_radio_nl+0xab7/0xc90 [ 1822.793511][T32648] genl_family_rcv_msg_doit+0x22f/0x350 [ 1822.799118][T32648] ? end_current_label_crit_section+0x170/0x170 [ 1822.805425][T32648] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1822.811215][T32648] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1822.817296][T32648] ? bpf_lsm_capable+0x5/0x10 [ 1822.822061][T32648] ? security_capable+0x85/0xb0 [ 1822.826967][T32648] genl_rcv_msg+0x601/0x790 [ 1822.831535][T32648] ? genl_bind+0x360/0x360 [ 1822.835995][T32648] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1822.842402][T32648] netlink_rcv_skb+0x1ef/0x440 [ 1822.847239][T32648] ? genl_bind+0x360/0x360 [ 1822.851704][T32648] ? netlink_ack+0x1160/0x1160 [ 1822.856550][T32648] ? down_read+0x1a8/0x2d0 [ 1822.861010][T32648] genl_rcv+0x24/0x40 [ 1822.865034][T32648] netlink_unicast+0x7ad/0x920 [ 1822.869862][T32648] netlink_sendmsg+0x8ad/0xbd0 [ 1822.874706][T32648] ? netlink_getsockopt+0x550/0x550 [ 1822.879967][T32648] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1822.885569][T32648] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1822.890896][T32648] ? security_socket_sendmsg+0x7c/0xa0 [ 1822.896407][T32648] ? netlink_getsockopt+0x550/0x550 [ 1822.901660][T32648] ____sys_sendmsg+0x5ed/0x9a0 [ 1822.906492][T32648] ? __sys_sendmsg_sock+0x30/0x30 [ 1822.911571][T32648] ? __import_iovec+0x306/0x510 [ 1822.916496][T32648] ? import_iovec+0x6f/0xa0 [ 1822.921067][T32648] ___sys_sendmsg+0x2a2/0x360 [ 1822.925801][T32648] ? __sys_sendmsg+0x2a0/0x2a0 [ 1822.930640][T32648] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1822.936450][T32648] __se_sys_sendmsg+0x1c3/0x2b0 [ 1822.941353][T32648] ? __x64_sys_sendmsg+0x80/0x80 [ 1822.946350][T32648] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1822.952301][T32648] do_syscall_64+0x4c/0xa0 [ 1822.956757][T32648] ? clear_bhb_loop+0x60/0xb0 [ 1822.961476][T32648] ? clear_bhb_loop+0x60/0xb0 [ 1822.966204][T32648] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1822.972149][T32648] RIP: 0033:0x7f5a5819e159 [ 1822.976619][T32648] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1822.996273][T32648] RSP: 002b:00007f5a59095028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1823.004731][T32648] RAX: ffffffffffffffda RBX: 00007f5a58426090 RCX: 00007f5a5819e159 [ 1823.012764][T32648] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1823.020780][T32648] RBP: 00007f5a5823506b R08: 0000000000000000 R09: 0000000000000000 [ 1823.028807][T32648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1823.036835][T32648] R13: 00007f5a58426128 R14: 00007f5a58426090 R15: 00007ffc9053e848 [ 1823.044859][T32648] [ 1823.490436][T32660] netlink: 'syz.3.9174': attribute type 21 has an invalid length. [ 1823.521164][T32660] netlink: 'syz.3.9174': attribute type 7 has an invalid length. [ 1823.704424][T32669] netlink: 'syz.0.9175': attribute type 21 has an invalid length. [ 1823.723232][T32669] netlink: 'syz.0.9175': attribute type 7 has an invalid length. [ 1824.230190][T32678] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9178'. [ 1824.290911][T32678] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1824.341239][T32678] CPU: 0 PID: 32678 Comm: syz.4.9178 Not tainted syzkaller #0 [ 1824.348808][T32678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1824.358946][T32678] Call Trace: [ 1824.362295][T32678] [ 1824.365269][T32678] dump_stack_lvl+0x188/0x24e [ 1824.370007][T32678] ? show_regs_print_info+0x12/0x12 [ 1824.375269][T32678] ? load_image+0x410/0x410 [ 1824.379851][T32678] sysfs_warn_dup+0x8a/0xa0 [ 1824.384428][T32678] sysfs_do_create_link_sd+0xc0/0x110 [ 1824.389879][T32678] device_add+0x83b/0x1050 [ 1824.394369][T32678] wiphy_register+0x1d8b/0x2aa0 [ 1824.399295][T32678] ? cfg80211_event_work+0x40/0x40 [ 1824.404459][T32678] ? ieee80211_register_hw+0x2941/0x39f0 [ 1824.410133][T32678] ? ieee80211_register_hw+0x2aac/0x39f0 [ 1824.415813][T32678] ? kasan_check_range+0x8d/0x290 [ 1824.420894][T32678] ieee80211_register_hw+0x2d48/0x39f0 [ 1824.426399][T32678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1824.432620][T32678] ? ieee80211_register_hw+0xf41/0x39f0 [ 1824.438211][T32678] ? ieee80211_register_hw+0xf41/0x39f0 [ 1824.443810][T32678] ? ieee80211_tasklet_handler+0x20/0x20 [ 1824.449485][T32678] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1824.455441][T32678] ? __debug_object_init+0xed/0x440 [ 1824.460692][T32678] ? memset+0x1e/0x40 [ 1824.464723][T32678] ? __hrtimer_init+0x189/0x270 [ 1824.469639][T32678] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1824.475428][T32678] ? memcpy+0x3c/0x60 [ 1824.479462][T32678] hwsim_new_radio_nl+0xab7/0xc90 [ 1824.484574][T32678] genl_family_rcv_msg_doit+0x22f/0x350 [ 1824.490189][T32678] ? end_current_label_crit_section+0x170/0x170 [ 1824.496493][T32678] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1824.502442][T32678] ? bpf_lsm_capable+0x5/0x10 [ 1824.507175][T32678] ? security_capable+0x85/0xb0 [ 1824.512092][T32678] genl_rcv_msg+0x601/0x790 [ 1824.516659][T32678] ? genl_bind+0x360/0x360 [ 1824.521113][T32678] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1824.527492][T32678] netlink_rcv_skb+0x1ef/0x440 [ 1824.532280][T32678] ? genl_bind+0x360/0x360 [ 1824.536754][T32678] ? netlink_ack+0x1160/0x1160 [ 1824.541568][T32678] ? down_read+0x1a8/0x2d0 [ 1824.546027][T32678] genl_rcv+0x24/0x40 [ 1824.550063][T32678] netlink_unicast+0x7ad/0x920 [ 1824.554871][T32678] netlink_sendmsg+0x8ad/0xbd0 [ 1824.559675][T32678] ? netlink_getsockopt+0x550/0x550 [ 1824.564997][T32678] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1824.570602][T32678] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1824.575921][T32678] ? security_socket_sendmsg+0x7c/0xa0 [ 1824.581406][T32678] ? netlink_getsockopt+0x550/0x550 [ 1824.586652][T32678] ____sys_sendmsg+0x5ed/0x9a0 [ 1824.591457][T32678] ? __sys_sendmsg_sock+0x30/0x30 [ 1824.596510][T32678] ? __import_iovec+0x306/0x510 [ 1824.601411][T32678] ? import_iovec+0x6f/0xa0 [ 1824.605969][T32678] ___sys_sendmsg+0x2a2/0x360 [ 1824.610705][T32678] ? __sys_sendmsg+0x2a0/0x2a0 [ 1824.615513][T32678] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1824.621542][T32678] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1824.627722][T32678] ? lockdep_hardirqs_on+0x94/0x140 [ 1824.632977][T32678] ? __se_sys_sendmsg+0xee/0x2b0 [ 1824.637977][T32678] ? kasan_check_range+0x92/0x290 [ 1824.643053][T32678] __se_sys_sendmsg+0x1c3/0x2b0 [ 1824.647931][T32678] ? __x64_sys_sendmsg+0x80/0x80 [ 1824.652928][T32678] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1824.658889][T32678] do_syscall_64+0x4c/0xa0 [ 1824.663375][T32678] ? clear_bhb_loop+0x60/0xb0 [ 1824.668077][T32678] ? clear_bhb_loop+0x60/0xb0 [ 1824.672785][T32678] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1824.678716][T32678] RIP: 0033:0x7f3f76f9e159 [ 1824.683160][T32678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1824.702788][T32678] RSP: 002b:00007f3f77f0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1824.711234][T32678] RAX: ffffffffffffffda RBX: 00007f3f77226090 RCX: 00007f3f76f9e159 [ 1824.719232][T32678] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1824.727229][T32678] RBP: 00007f3f7703506b R08: 0000000000000000 R09: 0000000000000000 [ 1824.735225][T32678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1824.743211][T32678] R13: 00007f3f77226128 R14: 00007f3f77226090 R15: 00007ffcc576ce28 [ 1824.751227][T32678] [ 1824.942097][T32686] netlink: 'syz.2.9189': attribute type 21 has an invalid length. [ 1824.968283][T32686] netlink: 'syz.2.9189': attribute type 7 has an invalid length. [ 1826.622003][T32707] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.9186'. [ 1826.681497][T32706] netlink: 'syz.4.9185': attribute type 10 has an invalid length. [ 1826.720032][T32706] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9185'. [ 1826.766420][T32707] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1826.820503][T32707] CPU: 1 PID: 32707 Comm: syz.2.9186 Not tainted syzkaller #0 [ 1826.828038][T32707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1826.838123][T32707] Call Trace: [ 1826.841446][T32707] [ 1826.844410][T32707] dump_stack_lvl+0x188/0x24e [ 1826.849140][T32707] ? show_regs_print_info+0x12/0x12 [ 1826.854383][T32707] ? load_image+0x410/0x410 [ 1826.858949][T32707] sysfs_warn_dup+0x8a/0xa0 [ 1826.863502][T32707] sysfs_do_create_link_sd+0xc0/0x110 [ 1826.868928][T32707] device_add+0x83b/0x1050 [ 1826.873403][T32707] wiphy_register+0x1d8b/0x2aa0 [ 1826.878326][T32707] ? cfg80211_event_work+0x40/0x40 [ 1826.883510][T32707] ? minstrel_ht_alloc+0x894/0xa20 [ 1826.888671][T32707] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1826.894789][T32707] ieee80211_register_hw+0x2d48/0x39f0 [ 1826.900308][T32707] ? ieee80211_register_hw+0xf41/0x39f0 [ 1826.905917][T32707] ? ieee80211_register_hw+0xf41/0x39f0 [ 1826.911512][T32707] ? ieee80211_tasklet_handler+0x20/0x20 [ 1826.917228][T32707] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1826.923178][T32707] ? __debug_object_init+0xed/0x440 [ 1826.928425][T32707] ? memset+0x1e/0x40 [ 1826.932458][T32707] ? __hrtimer_init+0x189/0x270 [ 1826.937468][T32707] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1826.943247][T32707] ? memcpy+0x3c/0x60 [ 1826.947285][T32707] hwsim_new_radio_nl+0xab7/0xc90 [ 1826.952379][T32707] genl_family_rcv_msg_doit+0x22f/0x350 [ 1826.957977][T32707] ? rcu_is_watching+0x11/0xa0 [ 1826.962816][T32707] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1826.968772][T32707] ? lockdep_hardirqs_on+0x94/0x140 [ 1826.974048][T32707] ? genl_rcv_msg+0x550/0x790 [ 1826.978804][T32707] genl_rcv_msg+0x601/0x790 [ 1826.983359][T32707] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1826.989598][T32707] ? genl_bind+0x360/0x360 [ 1826.994064][T32707] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1827.000449][T32707] ? lock_acquire+0x225/0x4a0 [ 1827.005175][T32707] netlink_rcv_skb+0x1ef/0x440 [ 1827.010038][T32707] ? genl_bind+0x360/0x360 [ 1827.014547][T32707] ? netlink_ack+0x1160/0x1160 [ 1827.019373][T32707] ? down_read+0x1a8/0x2d0 [ 1827.023847][T32707] genl_rcv+0x24/0x40 [ 1827.027874][T32707] netlink_unicast+0x7ad/0x920 [ 1827.032703][T32707] netlink_sendmsg+0x8ad/0xbd0 [ 1827.037527][T32707] ? netlink_getsockopt+0x550/0x550 [ 1827.042781][T32707] ? ____sys_sendmsg+0x569/0x9a0 [ 1827.047794][T32707] ? netlink_getsockopt+0x550/0x550 [ 1827.053042][T32707] ____sys_sendmsg+0x5ed/0x9a0 [ 1827.057860][T32707] ? __sys_sendmsg_sock+0x30/0x30 [ 1827.062925][T32707] ? __import_iovec+0x306/0x510 [ 1827.067893][T32707] ? import_iovec+0x6f/0xa0 [ 1827.072453][T32707] ___sys_sendmsg+0x2a2/0x360 [ 1827.077180][T32707] ? __sys_sendmsg+0x2a0/0x2a0 [ 1827.081994][T32707] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1827.087815][T32707] __se_sys_sendmsg+0x1c3/0x2b0 [ 1827.092720][T32707] ? __x64_sys_sendmsg+0x80/0x80 [ 1827.097719][T32707] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1827.103663][T32707] do_syscall_64+0x4c/0xa0 [ 1827.108117][T32707] ? clear_bhb_loop+0x60/0xb0 [ 1827.112860][T32707] ? clear_bhb_loop+0x60/0xb0 [ 1827.117578][T32707] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1827.123519][T32707] RIP: 0033:0x7f4f05d9e159 [ 1827.127978][T32707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1827.147620][T32707] RSP: 002b:00007f4f06cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1827.156074][T32707] RAX: ffffffffffffffda RBX: 00007f4f06026090 RCX: 00007f4f05d9e159 [ 1827.164080][T32707] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1827.172095][T32707] RBP: 00007f4f05e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1827.180110][T32707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1827.188113][T32707] R13: 00007f4f06026128 R14: 00007f4f06026090 R15: 00007ffe12759dd8 [ 1827.196135][T32707] [ 1827.387212][T32714] netlink: 'syz.3.9187': attribute type 21 has an invalid length. [ 1827.408885][T32714] netlink: 'syz.3.9187': attribute type 7 has an invalid length. [ 1827.757926][T32724] netlink: 'syz.1.9190': attribute type 21 has an invalid length. [ 1827.873123][T32720] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9191'. [ 1830.997151][T12452] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1831.011823][T12452] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1831.020028][T12452] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1831.028677][T12452] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1831.039507][T12452] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1831.047183][T12452] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1831.342934][ T4336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.475294][ T4336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.539038][T32765] validate_nla: 4 callbacks suppressed [ 1831.539058][T32765] netlink: 'syz.0.9206': attribute type 10 has an invalid length. [ 1831.577108][T32765] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9206'. [ 1831.648714][ T4336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.816466][ T4336] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1831.830835][T32767] netlink: 'syz.2.9207': attribute type 10 has an invalid length. [ 1831.864953][T32767] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9207'. [ 1831.910798][T32759] chnl_net:caif_netlink_parms(): no params data found [ 1832.199401][ T309] netlink: 'syz.0.9210': attribute type 10 has an invalid length. [ 1832.207532][ T309] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9210'. [ 1832.296226][T32759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1832.303450][T32759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1832.312084][T32759] device bridge_slave_0 entered promiscuous mode [ 1832.395907][T32759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1832.403076][T32759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1832.456592][T32759] device bridge_slave_1 entered promiscuous mode [ 1832.825014][T32759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1832.836397][ T321] netlink: 'syz.0.9212': attribute type 10 has an invalid length. [ 1832.846266][ T321] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9212'. [ 1832.856265][ T325] netlink: 'syz.3.9214': attribute type 10 has an invalid length. [ 1832.882234][ T325] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9214'. [ 1832.945259][T32759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1833.155070][T31331] Bluetooth: hci4: command 0x0409 tx timeout [ 1833.173875][T32759] team0: Port device team_slave_0 added [ 1833.353483][T32759] team0: Port device team_slave_1 added [ 1833.363452][ T332] netlink: 'syz.2.9225': attribute type 10 has an invalid length. [ 1833.381113][ T332] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9225'. [ 1833.672797][T32759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1833.700243][T32759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1833.789063][T32759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1833.934050][ T344] netlink: 'syz.2.9217': attribute type 21 has an invalid length. [ 1833.944477][ T344] netlink: 'syz.2.9217': attribute type 7 has an invalid length. [ 1833.953472][T32759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1833.982407][T32759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1834.043115][T32759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1834.328502][T32759] device hsr_slave_0 entered promiscuous mode [ 1834.345918][T32759] device hsr_slave_1 entered promiscuous mode [ 1834.364744][T32759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1834.372502][T32759] Cannot create hsr debugfs directory [ 1834.826829][ T4336] team0: Port device wlan1 removed [ 1835.223408][ T4336] device hsr_slave_0 left promiscuous mode [ 1835.230431][ T4336] device hsr_slave_1 left promiscuous mode [ 1835.237539][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1835.245358][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1835.253443][ T4336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1835.254770][T12452] Bluetooth: hci4: command 0x041b tx timeout [ 1835.262379][ T4336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1835.277743][ T4336] device batadv0 left promiscuous mode [ 1835.283408][ T4336] bridge0: port 3(batadv0) entered disabled state [ 1835.293663][ T4336] device bridge_slave_1 left promiscuous mode [ 1835.301355][ T4336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1835.342786][ T4336] device bridge_slave_0 left promiscuous mode [ 1835.369159][ T4336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1835.409699][ T4336] device veth1_macvtap left promiscuous mode [ 1835.416089][ T4336] device veth1_vlan left promiscuous mode [ 1835.421926][ T4336] device veth0_vlan left promiscuous mode [ 1835.931252][ T4336] team0 (unregistering): Port device team_slave_1 removed [ 1835.967336][ T4336] team0 (unregistering): Port device team_slave_0 removed [ 1836.003256][ T4336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1836.040327][ T4336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1836.305654][ T4336] bond0 (unregistering): Released all slaves [ 1836.929076][ T381] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.9221'. [ 1837.062322][ T381] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1837.147558][ T381] CPU: 0 PID: 381 Comm: syz.4.9221 Not tainted syzkaller #0 [ 1837.155000][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1837.165089][ T381] Call Trace: [ 1837.168413][ T381] [ 1837.171383][ T381] dump_stack_lvl+0x188/0x24e [ 1837.176147][ T381] ? show_regs_print_info+0x12/0x12 [ 1837.181393][ T381] ? load_image+0x410/0x410 [ 1837.185972][ T381] sysfs_warn_dup+0x8a/0xa0 [ 1837.190541][ T381] sysfs_do_create_link_sd+0xc0/0x110 [ 1837.195966][ T381] device_add+0x83b/0x1050 [ 1837.200450][ T381] wiphy_register+0x1d8b/0x2aa0 [ 1837.205368][ T381] ? cfg80211_event_work+0x40/0x40 [ 1837.210536][ T381] ? minstrel_ht_alloc+0x894/0xa20 [ 1837.215712][ T381] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1837.221842][ T381] ieee80211_register_hw+0x2d48/0x39f0 [ 1837.227345][ T381] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1837.233550][ T381] ? ieee80211_register_hw+0xf41/0x39f0 [ 1837.239144][ T381] ? ieee80211_register_hw+0xf41/0x39f0 [ 1837.244747][ T381] ? ieee80211_tasklet_handler+0x20/0x20 [ 1837.250420][ T381] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1837.256365][ T381] ? __debug_object_init+0xed/0x440 [ 1837.261656][ T381] ? memset+0x1e/0x40 [ 1837.265700][ T381] ? __hrtimer_init+0x189/0x270 [ 1837.270602][ T381] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1837.276414][ T381] ? memcpy+0x3c/0x60 [ 1837.280451][ T381] hwsim_new_radio_nl+0xab7/0xc90 [ 1837.285551][ T381] genl_family_rcv_msg_doit+0x22f/0x350 [ 1837.291155][ T381] ? end_current_label_crit_section+0x170/0x170 [ 1837.297458][ T381] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1837.303408][ T381] ? bpf_lsm_capable+0x5/0x10 [ 1837.308134][ T381] ? security_capable+0x85/0xb0 [ 1837.313043][ T381] genl_rcv_msg+0x601/0x790 [ 1837.317598][ T381] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1837.323963][ T381] ? genl_bind+0x360/0x360 [ 1837.328468][ T381] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1837.334877][ T381] netlink_rcv_skb+0x1ef/0x440 [ 1837.339700][ T381] ? genl_bind+0x360/0x360 [ 1837.344168][ T381] ? netlink_ack+0x1160/0x1160 [ 1837.348994][ T381] ? down_read+0x1a8/0x2d0 [ 1837.353467][ T381] genl_rcv+0x24/0x40 [ 1837.357500][ T381] netlink_unicast+0x7ad/0x920 [ 1837.362319][ T381] netlink_sendmsg+0x8ad/0xbd0 [ 1837.367154][ T381] ? netlink_getsockopt+0x550/0x550 [ 1837.372408][ T381] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1837.378011][ T381] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1837.383346][ T381] ? security_socket_sendmsg+0x7c/0xa0 [ 1837.388872][ T381] ? netlink_getsockopt+0x550/0x550 [ 1837.394125][ T381] ____sys_sendmsg+0x5ed/0x9a0 [ 1837.398947][ T381] ? __sys_sendmsg_sock+0x30/0x30 [ 1837.404020][ T381] ? __import_iovec+0x306/0x510 [ 1837.408943][ T381] ? import_iovec+0x6f/0xa0 [ 1837.413525][ T381] ___sys_sendmsg+0x2a2/0x360 [ 1837.418259][ T381] ? __sys_sendmsg+0x2a0/0x2a0 [ 1837.423212][ T381] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1837.429092][ T381] __se_sys_sendmsg+0x1c3/0x2b0 [ 1837.434005][ T381] ? __x64_sys_sendmsg+0x80/0x80 [ 1837.439018][ T381] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1837.444975][ T381] do_syscall_64+0x4c/0xa0 [ 1837.449442][ T381] ? clear_bhb_loop+0x60/0xb0 [ 1837.454176][ T381] ? clear_bhb_loop+0x60/0xb0 [ 1837.458921][ T381] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.464878][ T381] RIP: 0033:0x7f3f76f9e159 [ 1837.469331][ T381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1837.488989][ T381] RSP: 002b:00007f3f77f0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1837.497450][ T381] RAX: ffffffffffffffda RBX: 00007f3f77226090 RCX: 00007f3f76f9e159 [ 1837.505460][ T381] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1837.513486][ T381] RBP: 00007f3f7703506b R08: 0000000000000000 R09: 0000000000000000 [ 1837.521492][ T381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1837.529503][ T381] R13: 00007f3f77226128 R14: 00007f3f77226090 R15: 00007ffcc576ce28 [ 1837.537536][ T381] [ 1837.542123][T31331] Bluetooth: hci4: command 0x040f tx timeout [ 1837.759449][T32759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1837.810715][T32759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1837.851864][T32759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1837.931594][T32759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1838.175301][ T397] netlink: 'syz.3.9223': attribute type 10 has an invalid length. [ 1838.204022][ T397] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9223'. [ 1838.240153][T32759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1838.303807][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1838.313476][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1838.396308][T32759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1838.477654][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1838.493448][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1838.521760][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1838.529010][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1838.634300][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1838.660632][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1838.689834][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1838.714369][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1838.721560][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1838.752090][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1838.806432][ T409] netlink: 'syz.3.9227': attribute type 10 has an invalid length. [ 1838.814545][ T409] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9227'. [ 1838.865273][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1838.960582][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1838.974209][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1839.023317][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1839.044091][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1839.069537][T32759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1839.100917][T32759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1839.148294][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1839.166108][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1839.187665][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1839.205233][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1839.213962][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1839.222830][ T415] netlink: 'syz.2.9239': attribute type 10 has an invalid length. [ 1839.231879][ T415] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9239'. [ 1839.268876][ T416] netlink: 'syz.3.9228': attribute type 10 has an invalid length. [ 1839.296324][ T416] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9228'. [ 1839.330728][T14113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1839.554830][T31331] Bluetooth: hci4: command 0x0419 tx timeout [ 1839.712883][ T425] netlink: 'syz.3.9232': attribute type 10 has an invalid length. [ 1839.773286][ T425] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1840.404340][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1840.450501][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1840.480387][T32759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1840.623506][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1840.635606][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1840.724143][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1840.742888][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1840.785082][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1840.793023][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1840.850883][T32759] device veth0_vlan entered promiscuous mode [ 1840.894569][T32759] device veth1_vlan entered promiscuous mode [ 1841.052950][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1841.088211][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1841.125822][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1841.161723][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1841.230827][T32759] device veth0_macvtap entered promiscuous mode [ 1841.272379][T32759] device veth1_macvtap entered promiscuous mode [ 1841.401833][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.466124][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.516612][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.534582][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.574770][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.606144][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.674292][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1841.725499][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.786816][T32759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1841.809828][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1841.827223][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1841.841856][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1841.858446][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1841.869055][ T460] netlink: 'syz.4.9237': attribute type 10 has an invalid length. [ 1841.880852][ T460] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9237'. [ 1841.901514][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.917943][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.928365][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.939145][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.950709][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.962304][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1841.977759][T32759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1841.990556][T32759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1842.004105][T32759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1842.022387][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1842.055407][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1842.107822][T32759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.121592][T32759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.131691][T32759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.140770][T32759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1842.537921][T14113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.589386][T14113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.650254][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1842.684940][ T480] netlink: 'syz.0.9242': attribute type 21 has an invalid length. [ 1842.692844][ T480] netlink: 'syz.0.9242': attribute type 7 has an invalid length. [ 1842.880059][T14113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.881079][ T486] bridge0: port 3(batadv0) entered blocking state [ 1842.908751][T14113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.924957][ T486] bridge0: port 3(batadv0) entered disabled state [ 1842.975656][ T486] device batadv0 entered promiscuous mode [ 1843.026621][ T486] bridge0: port 3(batadv0) entered blocking state [ 1843.033252][ T486] bridge0: port 3(batadv0) entered forwarding state [ 1843.075519][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1843.348585][T26730] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1843.358262][T26730] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1845.373919][ T527] netlink: 'syz.0.9252': attribute type 10 has an invalid length. [ 1845.506671][ T527] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9252'. [ 1846.758585][ T547] netlink: 'syz.3.9257': attribute type 21 has an invalid length. [ 1846.777960][ T547] netlink: 'syz.3.9257': attribute type 7 has an invalid length. [ 1848.202685][ T575] netlink: 'syz.1.9265': attribute type 10 has an invalid length. [ 1848.262091][ T575] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9265'. [ 1848.641664][ T582] netlink: 'syz.2.9268': attribute type 21 has an invalid length. [ 1848.719299][ T582] netlink: 'syz.2.9268': attribute type 7 has an invalid length. [ 1850.453807][ T603] netlink: 'syz.1.9274': attribute type 21 has an invalid length. [ 1850.464173][ T603] netlink: 'syz.1.9274': attribute type 7 has an invalid length. [ 1850.852625][ T607] bridge0: port 3(batadv0) entered blocking state [ 1850.882796][ T607] bridge0: port 3(batadv0) entered disabled state [ 1850.930350][ T607] device batadv0 entered promiscuous mode [ 1850.960563][ T607] bridge0: port 3(batadv0) entered blocking state [ 1850.967699][ T607] bridge0: port 3(batadv0) entered forwarding state [ 1851.322526][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1851.331970][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1851.669985][ T625] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.9280'. [ 1851.907187][ T625] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 1852.114453][ T632] netlink: 'syz.4.9282': attribute type 10 has an invalid length. [ 1852.130798][ T632] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9282'. [ 1853.179949][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.186494][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.208739][ T660] netlink: 'syz.1.9291': attribute type 21 has an invalid length. [ 1854.265970][ T660] netlink: 'syz.1.9291': attribute type 7 has an invalid length. [ 1855.042234][ T670] netlink: 'syz.2.9294': attribute type 21 has an invalid length. [ 1855.079273][ T670] netlink: 'syz.2.9294': attribute type 7 has an invalid length. [ 1855.234950][T31331] Bluetooth: hci2: command 0x0406 tx timeout [ 1855.346650][ T676] mac80211_hwsim hwsim305 ªªªªª@: renamed from wlan0 [ 1855.523937][ T682] netlink: 'syz.1.9299': attribute type 21 has an invalid length. [ 1855.538864][ T682] netlink: 'syz.1.9299': attribute type 7 has an invalid length. [ 1856.510325][ T687] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.9300'. [ 1856.574444][ T687] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1856.616089][ T687] CPU: 0 PID: 687 Comm: syz.0.9300 Not tainted syzkaller #0 [ 1856.623461][ T687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1856.633562][ T687] Call Trace: [ 1856.636903][ T687] [ 1856.639883][ T687] dump_stack_lvl+0x188/0x24e [ 1856.644620][ T687] ? show_regs_print_info+0x12/0x12 [ 1856.649888][ T687] ? load_image+0x410/0x410 [ 1856.654474][ T687] sysfs_warn_dup+0x8a/0xa0 [ 1856.659132][ T687] sysfs_do_create_link_sd+0xc0/0x110 [ 1856.664573][ T687] device_add+0x83b/0x1050 [ 1856.669060][ T687] wiphy_register+0x1d8b/0x2aa0 [ 1856.673980][ T687] ? cfg80211_event_work+0x40/0x40 [ 1856.679139][ T687] ? minstrel_ht_alloc+0x894/0xa20 [ 1856.684310][ T687] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1856.690442][ T687] ieee80211_register_hw+0x2d48/0x39f0 [ 1856.695964][ T687] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1856.702186][ T687] ? ieee80211_register_hw+0xf41/0x39f0 [ 1856.707786][ T687] ? ieee80211_register_hw+0xf41/0x39f0 [ 1856.713399][ T687] ? ieee80211_tasklet_handler+0x20/0x20 [ 1856.719085][ T687] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1856.725050][ T687] ? __debug_object_init+0xed/0x440 [ 1856.730303][ T687] ? memset+0x1e/0x40 [ 1856.734332][ T687] ? __hrtimer_init+0x189/0x270 [ 1856.739269][ T687] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1856.745063][ T687] ? memcpy+0x3c/0x60 [ 1856.749098][ T687] hwsim_new_radio_nl+0xab7/0xc90 [ 1856.754202][ T687] genl_family_rcv_msg_doit+0x22f/0x350 [ 1856.759811][ T687] ? end_current_label_crit_section+0x170/0x170 [ 1856.766117][ T687] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1856.772075][ T687] ? bpf_lsm_capable+0x5/0x10 [ 1856.776807][ T687] ? security_capable+0x85/0xb0 [ 1856.781718][ T687] genl_rcv_msg+0x601/0x790 [ 1856.786328][ T687] ? genl_bind+0x360/0x360 [ 1856.790821][ T687] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1856.797229][ T687] netlink_rcv_skb+0x1ef/0x440 [ 1856.802055][ T687] ? genl_bind+0x360/0x360 [ 1856.806529][ T687] ? netlink_ack+0x1160/0x1160 [ 1856.811354][ T687] ? down_read+0x1a8/0x2d0 [ 1856.815831][ T687] genl_rcv+0x24/0x40 [ 1856.819865][ T687] netlink_unicast+0x7ad/0x920 [ 1856.824696][ T687] netlink_sendmsg+0x8ad/0xbd0 [ 1856.829523][ T687] ? netlink_getsockopt+0x550/0x550 [ 1856.834778][ T687] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1856.840411][ T687] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1856.845742][ T687] ? security_socket_sendmsg+0x7c/0xa0 [ 1856.851255][ T687] ? netlink_getsockopt+0x550/0x550 [ 1856.856503][ T687] ____sys_sendmsg+0x5ed/0x9a0 [ 1856.861337][ T687] ? __sys_sendmsg_sock+0x30/0x30 [ 1856.866416][ T687] ? __import_iovec+0x306/0x510 [ 1856.871336][ T687] ? import_iovec+0x6f/0xa0 [ 1856.875904][ T687] ___sys_sendmsg+0x2a2/0x360 [ 1856.880639][ T687] ? __sys_sendmsg+0x2a0/0x2a0 [ 1856.885480][ T687] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1856.891286][ T687] __se_sys_sendmsg+0x1c3/0x2b0 [ 1856.896194][ T687] ? __x64_sys_sendmsg+0x80/0x80 [ 1856.901200][ T687] ? syscall_enter_from_user_mode+0x2a/0x80 [ 1856.907156][ T687] do_syscall_64+0x4c/0xa0 [ 1856.911622][ T687] ? clear_bhb_loop+0x60/0xb0 [ 1856.916441][ T687] ? clear_bhb_loop+0x60/0xb0 [ 1856.921176][ T687] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1856.927130][ T687] RIP: 0033:0x7f5a5819e159 [ 1856.931589][ T687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1856.951277][ T687] RSP: 002b:00007f5a59095028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1856.959759][ T687] RAX: ffffffffffffffda RBX: 00007f5a58426090 RCX: 00007f5a5819e159 [ 1856.967764][ T687] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1856.975776][ T687] RBP: 00007f5a5823506b R08: 0000000000000000 R09: 0000000000000000 [ 1856.983794][ T687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1856.991791][ T687] R13: 00007f5a58426128 R14: 00007f5a58426090 R15: 00007ffc9053e848 [ 1856.999805][ T687] [ 1857.105548][ T690] netlink: 'syz.2.9301': attribute type 10 has an invalid length. [ 1857.113830][ T690] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9301'. [ 1857.598892][ T711] netlink: 'syz.3.9307': attribute type 21 has an invalid length. [ 1857.642480][ T711] netlink: 'syz.3.9307': attribute type 7 has an invalid length. [ 1858.621691][ T726] netlink: 'syz.1.9319': attribute type 21 has an invalid length. [ 1858.639457][ T726] netlink: 'syz.1.9319': attribute type 7 has an invalid length. [ 1858.760596][ T732] netlink: 'syz.4.9311': attribute type 21 has an invalid length. [ 1858.815514][ T732] netlink: 'syz.4.9311': attribute type 7 has an invalid length. [ 1858.859965][ T737] netlink: 'syz.3.9309': attribute type 10 has an invalid length. [ 1858.894837][ T737] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9309'. [ 1860.734099][ T753] validate_nla: 2 callbacks suppressed [ 1860.734139][ T753] netlink: 'syz.3.9317': attribute type 10 has an invalid length. [ 1860.773515][ T753] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9317'. [ 1861.379721][ T768] netlink: 'syz.2.9324': attribute type 10 has an invalid length. [ 1861.429588][ T768] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9324'. [ 1861.506781][ T772] netlink: 'syz.3.9325': attribute type 21 has an invalid length. [ 1861.535584][ T772] netlink: 'syz.3.9325': attribute type 7 has an invalid length. [ 1862.690332][ T780] netlink: 'syz.4.9337': attribute type 21 has an invalid length. [ 1862.709793][ T780] netlink: 'syz.4.9337': attribute type 7 has an invalid length. [ 1862.967797][ T785] netlink: 'syz.3.9328': attribute type 10 has an invalid length. [ 1863.019379][ T785] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9328'. [ 1863.703014][ T790] netlink: 'syz.0.9329': attribute type 21 has an invalid length. [ 1863.833397][ T790] netlink: 'syz.0.9329': attribute type 7 has an invalid length. [ 1863.885838][T12452] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1863.899683][T12452] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1863.935028][T12452] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1863.945445][T12452] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1863.954527][T12452] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1863.965010][T12452] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1864.976526][ T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.157633][ T795] chnl_net:caif_netlink_parms(): no params data found [ 1865.221087][ T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.499615][ T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.672448][ T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1865.694476][ T795] bridge0: port 1(bridge_slave_0) entered blocking state [ 1865.714944][ T795] bridge0: port 1(bridge_slave_0) entered disabled state [ 1865.722898][ T795] device bridge_slave_0 entered promiscuous mode [ 1865.844529][ T795] bridge0: port 2(bridge_slave_1) entered blocking state [ 1865.856165][ T795] bridge0: port 2(bridge_slave_1) entered disabled state [ 1865.864024][ T795] device bridge_slave_1 entered promiscuous mode [ 1866.034898][T12452] Bluetooth: hci0: command 0x0409 tx timeout [ 1866.049796][ T795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1866.061691][ T795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1866.194242][ T795] team0: Port device team_slave_0 added [ 1866.228848][ T795] team0: Port device team_slave_1 added [ 1866.395618][ T795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1866.410516][ T795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.475164][ T795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1866.551799][ T795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1866.580005][ T795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1866.699187][ T795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1867.316023][ T795] device hsr_slave_0 entered promiscuous mode [ 1867.380980][ T795] device hsr_slave_1 entered promiscuous mode [ 1867.408324][ T795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1867.423548][ T795] Cannot create hsr debugfs directory [ 1867.459421][ T836] netlink: 'syz.3.9342': attribute type 21 has an invalid length. [ 1867.487757][ T836] netlink: 'syz.3.9342': attribute type 7 has an invalid length. [ 1868.115093][T12452] Bluetooth: hci0: command 0x041b tx timeout [ 1868.202559][ T46] team0: Port device wlan1 removed [ 1868.586796][ T46] device hsr_slave_0 left promiscuous mode [ 1868.614335][ T46] device hsr_slave_1 left promiscuous mode [ 1868.662516][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1868.693461][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1868.753773][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1868.767216][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1868.835784][ T46] device batadv0 left promiscuous mode [ 1868.842404][ T46] bridge0: port 3(batadv0) entered disabled state [ 1868.945285][ T46] device bridge_slave_1 left promiscuous mode [ 1868.951598][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 1869.002997][ T46] device bridge_slave_0 left promiscuous mode [ 1869.029858][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 1869.204506][ T46] device veth1_macvtap left promiscuous mode [ 1869.224293][ T46] device veth1_vlan left promiscuous mode [ 1869.265146][ T46] device veth0_vlan left promiscuous mode [ 1870.041596][ T46] team0 (unregistering): Port device team_slave_1 removed [ 1870.085211][ T46] team0 (unregistering): Port device team_slave_0 removed [ 1870.125961][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1870.164358][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1870.200916][T12452] Bluetooth: hci0: command 0x040f tx timeout [ 1870.461854][ T46] bond0 (unregistering): Released all slaves [ 1870.722813][ T795] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1870.764219][ T795] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1870.786659][ T795] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1870.796895][ T795] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1871.024377][ T795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1871.070105][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1871.094304][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1871.116288][ T795] 8021q: adding VLAN 0 to HW filter on device team0 [ 1871.174575][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1871.190996][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1871.208795][T32269] bridge0: port 1(bridge_slave_0) entered blocking state [ 1871.216099][T32269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1871.252244][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1871.285084][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1871.307800][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1871.343524][T32269] bridge0: port 2(bridge_slave_1) entered blocking state [ 1871.350738][T32269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1871.385423][T32269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1871.484553][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1871.501312][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1871.571984][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1871.590112][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1871.608027][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1871.641324][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1871.687549][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1871.705465][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1871.743695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1871.785492][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1871.837450][ T795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1872.275128][T31331] Bluetooth: hci0: command 0x0419 tx timeout [ 1872.338451][ T889] netlink: 'syz.1.9353': attribute type 10 has an invalid length. [ 1872.400553][ T889] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9353'. [ 1872.787290][ T904] netlink: 'syz.1.9355': attribute type 21 has an invalid length. [ 1872.816794][ T904] netlink: 'syz.1.9355': attribute type 7 has an invalid length. [ 1872.879300][ T909] netlink: 'syz.3.9356': attribute type 21 has an invalid length. [ 1872.905571][ T909] netlink: 'syz.3.9356': attribute type 7 has an invalid length. [ 1873.227328][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1873.236502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1873.272416][ T795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1873.346374][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1873.357336][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1873.402981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1873.413609][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1873.428918][ T795] device veth0_vlan entered promiscuous mode [ 1873.475545][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1873.513633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1873.598972][ T795] device veth1_vlan entered promiscuous mode [ 1873.616846][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1873.771866][ T795] device veth0_macvtap entered promiscuous mode [ 1873.809232][ T924] netlink: 'syz.0.9359': attribute type 21 has an invalid length. [ 1873.853151][ T924] netlink: 'syz.0.9359': attribute type 7 has an invalid length. [ 1874.005277][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1874.045190][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1874.126196][ T795] device veth1_macvtap entered promiscuous mode [ 1874.190532][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1874.212114][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1874.436529][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.484476][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.531760][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.592734][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.657230][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.722590][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.786955][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1874.869488][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1874.957385][ T795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1874.967837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1874.978524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1874.999875][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.012040][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.053070][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.084016][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.101717][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.114232][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.124510][ T795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.154493][ T795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.206978][ T795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.240611][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1875.260064][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1875.283844][ T795] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.315235][ T795] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.345736][ T795] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.374801][ T795] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.472088][ T938] netlink: 'syz.0.9363': attribute type 10 has an invalid length. [ 1875.488732][ T938] netlink: 55 bytes leftover after parsing attributes in process `syz.0.9363'. [ 1875.594245][ T4353] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.609385][ T4353] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.629734][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1875.661728][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.679770][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.694307][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1875.956923][ T944] netlink: 'syz.3.9374': attribute type 10 has an invalid length. [ 1875.980010][ T944] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9374'. [ 1876.871998][ T956] netlink: 'syz.2.9369': attribute type 21 has an invalid length. [ 1876.944253][ T956] netlink: 'syz.2.9369': attribute type 7 has an invalid length. [ 1876.985203][ T953] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1877.154220][ T964] bridge0: port 3(batadv0) entered blocking state [ 1877.334902][ T964] bridge0: port 3(batadv0) entered disabled state [ 1877.523489][ T964] device batadv0 entered promiscuous mode [ 1877.646314][ T964] bridge0: port 3(batadv0) entered blocking state [ 1877.653019][ T964] bridge0: port 3(batadv0) entered forwarding state [ 1877.928457][ T967] validate_nla: 1 callbacks suppressed [ 1877.928472][ T967] netlink: 'syz.1.9371': attribute type 21 has an invalid length. [ 1877.974827][ T967] netlink: 'syz.1.9371': attribute type 7 has an invalid length. [ 1877.988743][ T4336] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1877.998082][ T4336] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1879.557603][ T979] netlink: 'syz.2.9376': attribute type 10 has an invalid length. [ 1879.585406][ T979] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9376'. [ 1881.333189][ T1000] netlink: 'syz.1.9383': attribute type 21 has an invalid length. [ 1881.363315][ T1000] netlink: 'syz.1.9383': attribute type 7 has an invalid length. [ 1882.189860][ T1015] netlink: 'syz.4.9386': attribute type 21 has an invalid length. [ 1882.204813][ T1015] netlink: 'syz.4.9386': attribute type 7 has an invalid length. [ 1884.693437][T31331] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1884.710516][T31331] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1884.723728][T31331] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1884.743575][ T1046] netlink: 'syz.2.9393': attribute type 21 has an invalid length. [ 1884.752860][T31331] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1884.761682][ T1046] netlink: 'syz.2.9393': attribute type 7 has an invalid length. [ 1884.771591][T31331] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1884.779980][T31331] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1885.405247][T32269] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.455602][ T1065] netlink: 'syz.4.9398': attribute type 21 has an invalid length. [ 1885.463769][ T1065] netlink: 'syz.4.9398': attribute type 7 has an invalid length. [ 1885.560954][T32269] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1885.843544][T32269] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.032571][ T1055] chnl_net:caif_netlink_parms(): no params data found [ 1886.189641][T32269] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1886.608567][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 1886.616039][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 1886.624310][ T1055] device bridge_slave_0 entered promiscuous mode [ 1886.711403][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 1886.725738][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 1886.733880][ T1055] device bridge_slave_1 entered promiscuous mode [ 1886.837551][T12452] Bluetooth: hci3: command 0x0409 tx timeout [ 1887.206370][ T1055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1887.264316][ T1055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1887.468550][ T1055] team0: Port device team_slave_0 added [ 1887.493105][ T1055] team0: Port device team_slave_1 added [ 1887.592047][ T1055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1887.606739][ T1055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.645081][ T1055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1887.699239][ T1055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1887.709587][ T1055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1887.745423][ T1055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1887.849915][ T1055] device hsr_slave_0 entered promiscuous mode [ 1887.863753][ T1055] device hsr_slave_1 entered promiscuous mode [ 1887.870826][ T1055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1887.881263][ T1055] Cannot create hsr debugfs directory [ 1888.647471][T32269] team0: Port device wlan1 removed [ 1888.916036][T12452] Bluetooth: hci3: command 0x041b tx timeout [ 1889.046819][T32269] device hsr_slave_0 left promiscuous mode [ 1889.053433][T32269] device hsr_slave_1 left promiscuous mode [ 1889.067177][T32269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1889.080603][T32269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1889.089353][T32269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1889.103465][T32269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1889.111948][T32269] device batadv0 left promiscuous mode [ 1889.130329][T32269] bridge0: port 3(batadv0) entered disabled state [ 1889.152874][T32269] device bridge_slave_1 left promiscuous mode [ 1889.181744][T32269] bridge0: port 2(bridge_slave_1) entered disabled state [ 1889.217955][T32269] device bridge_slave_0 left promiscuous mode [ 1889.255015][T32269] bridge0: port 1(bridge_slave_0) entered disabled state [ 1889.374667][T32269] device veth1_macvtap left promiscuous mode [ 1889.414947][T32269] device veth1_vlan left promiscuous mode [ 1889.434880][T32269] device veth0_vlan left promiscuous mode [ 1890.365273][T32269] team0 (unregistering): Port device team_slave_1 removed [ 1890.407942][T32269] team0 (unregistering): Port device team_slave_0 removed [ 1890.451998][T32269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1890.504973][T32269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1890.803757][T32269] bond0 (unregistering): Released all slaves [ 1890.917128][ T1126] netlink: 'syz.1.9412': attribute type 10 has an invalid length. [ 1890.925341][ T1126] netlink: 55 bytes leftover after parsing attributes in process `syz.1.9412'. [ 1890.995167][T12452] Bluetooth: hci3: command 0x040f tx timeout [ 1891.075083][T12452] Bluetooth: hci1: command 0x0406 tx timeout [ 1891.187084][ T1132] netlink: 'syz.4.9415': attribute type 21 has an invalid length. [ 1891.195722][ T1132] netlink: 'syz.4.9415': attribute type 7 has an invalid length. [ 1891.266423][ T1134] netlink: 'syz.1.9414': attribute type 21 has an invalid length. [ 1891.297339][ T1134] netlink: 'syz.1.9414': attribute type 7 has an invalid length. [ 1891.782389][ T1055] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1891.807179][ T1055] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1891.860339][ T1055] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1891.898000][ T1055] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1892.154094][ T1055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1892.231707][ T1055] 8021q: adding VLAN 0 to HW filter on device team0 [ 1892.239966][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1892.249116][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1892.297509][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1892.329705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1892.370626][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1892.377950][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1892.387133][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1892.396907][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1892.405888][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1892.413049][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1892.442157][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1892.463385][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1892.480209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1892.502936][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1892.533826][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1892.610598][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1892.625591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1892.651972][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1892.695840][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1892.715552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1892.747695][ T1055] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1892.853920][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1892.901552][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1892.930943][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1892.997683][ T1162] netlink: 'syz.0.9419': attribute type 21 has an invalid length. [ 1893.075249][T12452] Bluetooth: hci3: command 0x0419 tx timeout [ 1893.081517][ T1162] netlink: 'syz.0.9419': attribute type 7 has an invalid length. [ 1894.268981][ T1190] netlink: 'syz.4.9425': attribute type 21 has an invalid length. [ 1894.346337][ T1190] netlink: 'syz.4.9425': attribute type 7 has an invalid length. [ 1894.879146][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1894.897402][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1894.972538][ T1055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1895.174475][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1895.211859][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1895.325473][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1895.343151][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1895.388724][ T1055] device veth0_vlan entered promiscuous mode [ 1895.414219][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1895.426289][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1895.522925][ T1205] netlink: 'syz.0.9427': attribute type 21 has an invalid length. [ 1895.578653][ T1055] device veth1_vlan entered promiscuous mode [ 1895.679726][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1895.698784][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1895.713638][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1895.730915][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1895.743806][ T1055] device veth0_macvtap entered promiscuous mode [ 1895.771873][ T1055] device veth1_macvtap entered promiscuous mode [ 1895.820838][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.839885][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.851935][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.869786][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.880686][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.891905][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.902717][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1895.913788][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1895.951729][ T1055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1895.972289][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1895.982406][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1895.991449][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1896.001647][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1896.018597][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1896.030293][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1896.043043][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1896.054203][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1896.064568][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1896.075712][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1896.086261][ T1055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1896.097299][ T1055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1896.109396][ T1055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1896.120017][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1896.130146][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1896.162864][ T1055] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1896.178103][ T1055] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1896.189101][ T1055] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1896.201039][ T1055] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1896.430784][T14113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.454922][T14113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.496127][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1896.570005][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1896.615992][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1896.639530][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1897.734503][ T1237] validate_nla: 1 callbacks suppressed [ 1897.734524][ T1237] netlink: 'syz.2.9434': attribute type 21 has an invalid length. [ 1897.867511][ T1237] netlink: 'syz.2.9434': attribute type 7 has an invalid length. [ 1898.359837][ T1249] mac80211_hwsim hwsim311 ªªªªª@: renamed from wlan0 [ 1898.894365][ T1262] netlink: 'syz.1.9439': attribute type 21 has an invalid length. [ 1898.960872][ T1262] netlink: 'syz.1.9439': attribute type 7 has an invalid length. [ 1902.273308][ T1298] mac80211_hwsim hwsim309 ªªªªª@: renamed from wlan0 [ 1903.254483][ T1315] netlink: 'syz.3.9455': attribute type 21 has an invalid length. [ 1903.287578][ T1315] netlink: 'syz.3.9455': attribute type 7 has an invalid length. [ 1903.915809][ T1317] bridge0: port 3(batadv0) entered blocking state [ 1903.956686][ T1317] bridge0: port 3(batadv0) entered disabled state [ 1904.112677][ T1317] device batadv0 entered promiscuous mode [ 1904.176581][ T46] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1904.185998][ T46] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1904.197083][ T1317] bridge0: port 3(batadv0) entered blocking state [ 1904.204548][ T1317] bridge0: port 3(batadv0) entered forwarding state [ 1906.271368][ T1343] netlink: 'syz.4.9463': attribute type 10 has an invalid length. [ 1906.320921][ T1343] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9463'. [ 1908.047151][ T1360] netlink: 'syz.2.9480': attribute type 21 has an invalid length. [ 1908.060002][ T1360] netlink: 'syz.2.9480': attribute type 7 has an invalid length. [ 1909.300303][ T1366] netlink: 'syz.2.9471': attribute type 10 has an invalid length. [ 1909.319753][ T1366] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9471'. [ 1910.227748][ T1375] netlink: 'syz.1.9486': attribute type 21 has an invalid length. [ 1910.261026][ T1375] netlink: 'syz.1.9486': attribute type 7 has an invalid length. [ 1911.748627][ T1390] netlink: 'syz.2.9476': attribute type 10 has an invalid length. [ 1911.779565][ T1390] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9476'. [ 1913.156692][ T1404] netlink: 'syz.0.9482': attribute type 21 has an invalid length. [ 1913.196829][ T1404] netlink: 'syz.0.9482': attribute type 7 has an invalid length. [ 1914.623434][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.629923][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.242343][ T1435] netlink: 'syz.3.9494': attribute type 10 has an invalid length. [ 1916.256780][ T1435] netlink: 55 bytes leftover after parsing attributes in process `syz.3.9494'. [ 1916.939092][ T1442] netlink: 'syz.4.9497': attribute type 10 has an invalid length. [ 1916.968682][ T1442] netlink: 55 bytes leftover after parsing attributes in process `syz.4.9497'. [ 1917.051030][ T1445] netlink: 'syz.2.9498': attribute type 21 has an invalid length. [ 1917.112049][ T1445] netlink: 'syz.2.9498': attribute type 7 has an invalid length. [ 1920.127019][ T1468] netlink: 'syz.4.9505': attribute type 21 has an invalid length. [ 1920.161737][ T1468] netlink: 'syz.4.9505': attribute type 7 has an invalid length. [ 1921.270189][ T1485] netlink: 'syz.2.9510': attribute type 21 has an invalid length. [ 1921.316085][ T1485] netlink: 'syz.2.9510': attribute type 7 has an invalid length. [ 1922.226906][ T1491] device syzkaller0 entered promiscuous mode [ 1922.660326][ T1500] netlink: 'syz.2.9513': attribute type 10 has an invalid length. [ 1922.680414][ T1500] netlink: 55 bytes leftover after parsing attributes in process `syz.2.9513'. [ 1931.842286][ T1626] device sit0 entered promiscuous mode [ 1939.625190][ T1697] device syzkaller0 entered promiscuous mode [ 1945.079655][T12452] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1945.088437][T12452] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1945.104736][T12452] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1945.119156][T12452] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1945.127073][T12452] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1945.144828][T12452] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1947.228896][ T1726] chnl_net:caif_netlink_parms(): no params data found [ 1947.248693][T31331] Bluetooth: hci5: command 0x0409 tx timeout [ 1947.635609][ T1738] bridge0: port 3(batadv0) entered disabled state [ 1947.642414][ T1738] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.649934][ T1738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1947.695508][ T1739] device batadv0 left promiscuous mode [ 1947.764949][ T1739] bridge0: port 3(batadv0) entered disabled state [ 1947.807250][ T1739] device bridge_slave_1 left promiscuous mode [ 1947.813472][ T1739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1947.860568][ T1739] device bridge_slave_0 left promiscuous mode [ 1947.870246][ T1739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.197445][ T1726] bridge0: port 1(bridge_slave_0) entered blocking state [ 1948.296363][ T1726] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.326570][ T1726] device bridge_slave_0 entered promiscuous mode [ 1948.360811][ T1726] bridge0: port 2(bridge_slave_1) entered blocking state [ 1948.387282][ T1726] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.447374][ T1726] device bridge_slave_1 entered promiscuous mode [ 1948.727143][ T1726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1948.840799][ T1726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1949.137115][ T1726] team0: Port device team_slave_0 added [ 1949.232014][ T1726] team0: Port device team_slave_1 added [ 1949.317203][T31331] Bluetooth: hci5: command 0x041b tx timeout [ 1949.336943][ T1726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1949.434838][ T1726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.578207][ T1726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1949.626689][ T1726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1949.755851][ T1726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1949.828106][ T1726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1949.970194][ T1726] device hsr_slave_0 entered promiscuous mode [ 1949.995854][ T1726] device hsr_slave_1 entered promiscuous mode [ 1950.173173][ T1726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1950.183612][ T1726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1950.220806][ T1726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1950.238174][ T1726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1950.362268][ T1726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1950.397799][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1950.410800][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1950.428799][ T1726] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.443304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1950.453389][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1950.462443][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.469612][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1950.479049][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1950.490039][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1950.517833][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1950.528611][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.535774][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1950.546859][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1950.588477][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1950.598101][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1950.609118][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1950.618601][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1950.630753][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1950.641247][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1950.654169][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1950.664694][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1950.679705][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1950.688561][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1950.699122][ T1726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1950.897080][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1950.909513][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1950.923435][ T1726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.209076][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1951.222261][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1951.245740][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1951.254477][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1951.266410][ T1726] device veth0_vlan entered promiscuous mode [ 1951.275193][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1951.283756][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1951.296720][ T1726] device veth1_vlan entered promiscuous mode [ 1951.319311][ T1726] device veth0_macvtap entered promiscuous mode [ 1951.326802][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1951.340849][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1951.349297][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1951.358475][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1951.367303][T26730] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1951.383915][ T1726] device veth1_macvtap entered promiscuous mode [ 1951.395525][T31331] Bluetooth: hci5: command 0x040f tx timeout [ 1951.424314][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.438775][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.448705][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.459836][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.469789][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.480514][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.490592][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.501462][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.511406][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1951.525899][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.540122][ T1726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1951.550341][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1951.562463][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1951.571705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1951.582609][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.598027][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.609586][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.620982][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.631019][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.642367][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.652312][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.662913][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.672847][ T1726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1951.683744][ T1726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1951.695306][ T1726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1951.707698][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1951.722646][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1951.736080][ T1726] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.748752][ T1726] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.757572][ T1726] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.770729][ T1726] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1951.833534][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.848622][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.857689][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1951.881563][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1951.894550][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1951.903065][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1952.001158][ T1772] device syzkaller0 entered promiscuous mode [ 1953.485050][T31331] Bluetooth: hci5: command 0x0419 tx timeout [ 1957.635157][T12452] Bluetooth: hci4: command 0x0406 tx timeout [ 1976.036742][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.043078][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1988.354723][T12452] Bluetooth: hci0: command 0x0406 tx timeout [ 2008.835251][T12452] Bluetooth: hci3: command 0x0406 tx timeout [ 2037.477976][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.484358][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 2070.274816][T12452] Bluetooth: hci5: command 0x0406 tx timeout [ 2084.195049][ T27] INFO: task syz.2.9541:1584 blocked for more than 143 seconds. [ 2084.202746][ T27] Not tainted syzkaller #0 [ 2084.214449][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2084.223232][ T27] task:syz.2.9541 state:D stack:22160 pid:1584 ppid:795 flags:0x00004006 [ 2084.233315][ T27] Call Trace: [ 2084.237308][ T27] [ 2084.240279][ T27] __schedule+0x107f/0x4030 [ 2084.244893][ T27] ? __lock_acquire+0x7c40/0x7c40 [ 2084.249978][ T27] ? release_firmware_map_entry+0x187/0x187 [ 2084.256037][ T27] ? task_work_cancel+0xa1/0x220 [ 2084.261122][ T27] ? task_work_cancel_func+0x210/0x210 [ 2084.266659][ T27] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 2084.272350][ T27] schedule+0xb9/0x180 [ 2084.277740][ T27] ? _free_event+0x10d/0x1050 [ 2084.282469][ T27] _free_event+0x176/0x1050 [ 2084.287061][ T27] perf_event_release_kernel+0x7c4/0x850 [ 2084.293206][ T27] ? __might_sleep+0xd0/0xd0 [ 2084.297956][ T27] ? calc_timer_values+0x410/0x410 [ 2084.304125][ T27] ? __might_sleep+0xd0/0xd0 [ 2084.308843][ T27] ? perf_mmap+0x1470/0x1470 [ 2084.313485][ T27] perf_release+0x37/0x40 [ 2084.323715][ T27] __fput+0x20a/0x8b0 [ 2084.328896][ T27] task_work_run+0x1d0/0x260 [ 2084.333555][ T27] ? task_work_cancel+0x220/0x220 [ 2084.344263][ T27] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2084.351953][ T27] ? _raw_spin_unlock+0x40/0x40 [ 2084.362111][ T27] ? memcpy+0x3c/0x60 [ 2084.367337][ T27] get_signal+0x118d/0x1340 [ 2084.371926][ T27] ? add_device_randomness+0xc2/0x100 [ 2084.382384][ T27] ? crng_reseed+0x190/0x190 [ 2084.388821][ T27] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 2084.400439][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 2084.406888][ T27] arch_do_signal_or_restart+0xc4/0x1310 [ 2084.412608][ T27] ? create_io_thread+0x170/0x170 [ 2084.417864][ T27] ? __might_sleep+0xd0/0xd0 [ 2084.422498][ T27] ? get_sigframe_size+0x10/0x10 [ 2084.428240][ T27] ? __x64_sys_clone+0x1a7/0x220 [ 2084.433254][ T27] ? exit_to_user_mode_loop+0x3b/0x110 [ 2084.447422][ T27] exit_to_user_mode_loop+0x70/0x110 [ 2084.452790][ T27] exit_to_user_mode_prepare+0xee/0x180 [ 2084.458532][ T27] syscall_exit_to_user_mode+0x16/0x40 [ 2084.464051][ T27] do_syscall_64+0x58/0xa0 [ 2084.468622][ T27] ? clear_bhb_loop+0x60/0xb0 [ 2084.473343][ T27] ? clear_bhb_loop+0x60/0xb0 [ 2084.478121][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2084.484090][ T27] RIP: 0033:0x7f21e139e159 [ 2084.488576][ T27] RSP: 002b:00007f21e2344fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 2084.497577][ T27] RAX: fffffffffffffffc RBX: 00007f21e1625fa0 RCX: 00007f21e139e159 [ 2084.505648][ T27] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000041200000 [ 2084.513657][ T27] RBP: 00007f21e143506b R08: 0000000000000000 R09: 0000000000000000 [ 2084.521899][ T27] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 2084.529986][ T27] R13: 00007f21e1626038 R14: 00007f21e1625fa0 R15: 00007ffda2f29868 [ 2084.545979][ T27] [ 2084.549076][ T27] [ 2084.549076][ T27] Showing all locks held in the system: [ 2084.560937][ T27] 1 lock held by rcu_tasks_kthre/12: [ 2084.568360][ T27] #0: ffffffff8cb2e170 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2084.579669][ T27] 1 lock held by rcu_tasks_trace/13: [ 2084.585080][ T27] #0: ffffffff8cb2e990 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x33/0xef0 [ 2084.596648][ T27] 1 lock held by khungtaskd/27: [ 2084.601540][ T27] #0: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 2084.613412][ T27] 2 locks held by klogd/3629: [ 2084.622057][ T27] 2 locks held by getty/4032: [ 2084.627459][ T27] #0: ffff88802fbf9098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 2084.637520][ T27] #1: ffffc9000327b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x41e/0x1360 [ 2084.647815][ T27] 2 locks held by kworker/u4:6/4336: [ 2084.653129][ T27] #0: ffff8880b8f3acd8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x25/0x130 [ 2084.663231][ T27] #1: ffffffff8cb2d7e0 (rcu_read_lock){....}-{1:2}, at: ___perf_sw_event+0x184/0x6d0 [ 2084.679477][ T27] [ 2084.681845][ T27] ============================================= [ 2084.681845][ T27] [ 2084.691414][ T27] NMI backtrace for cpu 0 [ 2084.695772][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 2084.702992][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2084.713084][ T27] Call Trace: [ 2084.716364][ T27] [ 2084.719296][ T27] dump_stack_lvl+0x188/0x24e [ 2084.723991][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 2084.729453][ T27] ? show_regs_print_info+0x12/0x12 [ 2084.734675][ T27] ? load_image+0x410/0x410 [ 2084.739195][ T27] ? vprintk_emit+0x59f/0x6a0 [ 2084.743903][ T27] ? printk_sprint+0x460/0x460 [ 2084.748722][ T27] nmi_cpu_backtrace+0x3e6/0x460 [ 2084.753667][ T27] ? nmi_trigger_cpumask_backtrace+0x450/0x450 [ 2084.759824][ T27] ? _printk+0xda/0x130 [ 2084.764007][ T27] ? load_image+0x410/0x410 [ 2084.768525][ T27] ? load_image+0x410/0x410 [ 2084.773043][ T27] ? nmi_trigger_cpumask_backtrace+0xf3/0x450 [ 2084.779122][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 2084.785264][ T27] nmi_trigger_cpumask_backtrace+0x1d4/0x450 [ 2084.791265][ T27] watchdog+0xf0e/0xf50 [ 2084.795437][ T27] ? watchdog+0x1ed/0xf50 [ 2084.799808][ T27] kthread+0x29d/0x330 [ 2084.803903][ T27] ? hungtask_pm_notify+0x40/0x40 [ 2084.808972][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2084.813588][ T27] ret_from_fork+0x1f/0x30 [ 2084.818057][ T27] [ 2084.822374][ T27] Sending NMI from CPU 0 to CPUs 1: [ 2084.827752][ C1] NMI backtrace for cpu 1 [ 2084.827764][ C1] CPU: 1 PID: 4337 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 2084.827781][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2084.827792][ C1] Workqueue: bat_events batadv_nc_worker [ 2084.827901][ C1] RIP: 0010:rcu_is_watching+0x5a/0xa0 [ 2084.827929][ C1] Code: 03 42 80 3c 38 00 74 08 4c 89 f7 e8 90 4d 67 00 48 c7 c3 c8 57 03 00 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 2f <8b> 03 65 ff 0d 15 45 96 7e 74 0c 83 e0 04 c1 e8 02 5b 41 5e 41 5f [ 2084.827945][ C1] RSP: 0018:ffffc90004457bc0 EFLAGS: 00000246 [ 2084.827959][ C1] RAX: 0000000000000000 RBX: ffff8880b8f357c8 RCX: 24696f328dab5d00 [ 2084.827971][ C1] RDX: ffff88802c5e8000 RSI: ffffffff8adf6880 RDI: ffffffff8adf6840 [ 2084.827983][ C1] RBP: ffff88804fd58a68 R08: dffffc0000000000 R09: 1ffffffff2161e48 [ 2084.827996][ C1] R10: dffffc0000000000 R11: fffffbfff2161e49 R12: dffffc0000000000 [ 2084.828009][ C1] R13: ffffffff89fba46e R14: ffffffff8c664988 R15: dffffc0000000000 [ 2084.828022][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2084.828036][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2084.828048][ C1] CR2: 00005629bb2a5168 CR3: 000000000c88e000 CR4: 00000000003506e0 [ 2084.828064][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2084.828074][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2084.828085][ C1] Call Trace: [ 2084.828091][ C1] [ 2084.828099][ C1] batadv_nc_worker+0x108/0x600 [ 2084.828126][ C1] ? process_one_work+0x7b4/0x1160 [ 2084.828147][ C1] process_one_work+0x8ab/0x1160 [ 2084.828174][ C1] ? worker_detach_from_pool+0x240/0x240 [ 2084.828196][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2084.828222][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2084.828247][ C1] ? wq_worker_running+0x97/0x190 [ 2084.828271][ C1] worker_thread+0xaf5/0x12a0 [ 2084.828298][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2084.828328][ C1] kthread+0x29d/0x330 [ 2084.828342][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 2084.828361][ C1] ? kthread_blkcg+0xd0/0xd0 [ 2084.828377][ C1] ret_from_fork+0x1f/0x30 [ 2084.828407][ C1] [ 2084.829152][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 2085.048591][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 2085.055836][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 2085.065929][ T27] Call Trace: [ 2085.069237][ T27] [ 2085.072195][ T27] dump_stack_lvl+0x188/0x24e [ 2085.076910][ T27] ? memcpy+0x3c/0x60 [ 2085.080937][ T27] ? show_regs_print_info+0x12/0x12 [ 2085.086174][ T27] ? load_image+0x410/0x410 [ 2085.090726][ T27] panic+0x2d3/0x710 [ 2085.094657][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 2085.100321][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 2085.104864][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 2085.110543][ T27] ? nmi_trigger_cpumask_backtrace+0x35b/0x450 [ 2085.116729][ T27] ? nmi_trigger_cpumask_backtrace+0x360/0x450 [ 2085.122918][ T27] watchdog+0xf4d/0xf50 [ 2085.127103][ T27] ? watchdog+0x1ed/0xf50 [ 2085.131467][ T27] kthread+0x29d/0x330 [ 2085.135560][ T27] ? hungtask_pm_notify+0x40/0x40 [ 2085.140608][ T27] ? kthread_blkcg+0xd0/0xd0 [ 2085.145229][ T27] ret_from_fork+0x1f/0x30 [ 2085.149706][ T27] [ 2085.153334][ T27] Kernel Offset: disabled [ 2085.157682][ T27] Rebooting in 86400 seconds..