last executing test programs: 2m33.421604221s ago: executing program 1 (id=6526): openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2484c0, 0x0) close(r1) ioctl$TUNSETLINK(r0, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) 2m32.48851278s ago: executing program 1 (id=6529): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) 2m32.139126911s ago: executing program 1 (id=6533): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f8481100000001000000000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) 2m11.396044296s ago: executing program 1 (id=6547): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000001000)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x3}]}) 2m10.184505153s ago: executing program 1 (id=6606): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r1}, &(0x7f0000000c00), &(0x7f0000000c40)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) syz_clone(0xc2002000, 0x0, 0x0, 0x0, 0x0, 0x0) 2m8.888377723s ago: executing program 1 (id=6613): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x69) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r0, 0x0, 0x111, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000000180)=""/76, 0x4000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40), 0x1, 0x0, 0x13}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x10}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000000000000000000005000014000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 1m53.364254388s ago: executing program 32 (id=6613): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x69) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100", @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r0, 0x0, 0x111, 0x4c, &(0x7f0000001cc0)="633268f83ca3000000a2029e3815bb2fa117d8326687688b2c969fd7267d546214af00d1ca2524d00f9e4d9555f3ab381b5d44fd6bda8c509e66101d296f10c805252e7c5d48d9814f46db8f07441878734b13270fe47fba418b7358984b9a61c2bbf964a520459fd0d90590b46cf1677d580a26933b6e35aee75996b73a15a25aa8ae2f1f9bc9699a505c0dc4050ab2255fc35f508ccc52f10ac12febf28652fe36f725714868675ca2a7042ab4b26904b2f000589694f69ab0b22a5aec72c5036ce1c8974690045e4ab412a70336b4c65b2dfc8121af4143c2e10a0e5632bcd44e0b000029da424d86f298656822dae2c002e289fbfa6fe0dfb2fd57713a7684dc166c628dc45027ac174c5db54f22e4", &(0x7f0000000180)=""/76, 0x4000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40), 0x1, 0x0, 0x13}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x2a, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext={0x10}, 0x410, 0x2000001, 0x0, 0x8}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000000000000000000005000014000000005f"], &(0x7f0000000280)=""/265, 0x41, 0x109, 0x1}, 0x20) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 11.781461289s ago: executing program 4 (id=6905): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002064000000000000002020207bd2000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 7.601987947s ago: executing program 5 (id=6919): perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000380)="d22208d9c2978888ca8d8b0086dd", 0x0, 0xc000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.896964909s ago: executing program 5 (id=6921): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(r1, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 6.422276394s ago: executing program 0 (id=6924): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB]) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 3.93134895s ago: executing program 5 (id=6925): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180900000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 3.870974172s ago: executing program 0 (id=6926): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x1}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0x81}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) 3.648306779s ago: executing program 5 (id=6929): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23ffffff, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.632066949s ago: executing program 0 (id=6931): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x1e, 0x100000000}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) syz_clone(0x41980100, 0x0, 0x0, 0x0, 0x0, 0x0) 3.405865796s ago: executing program 4 (id=6932): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000000000000000000400000000d9000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5, &(0x7f0000000000)=@raw=[@func, @map_fd, @exit, @jmp={0x5, 0x0, 0x4, 0x0, 0x3}], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 3.224245511s ago: executing program 4 (id=6933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 3.084001066s ago: executing program 4 (id=6935): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000b00), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x5, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x901011abcdfca016, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.003021978s ago: executing program 3 (id=6936): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x50) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 2.896243212s ago: executing program 2 (id=6937): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB]) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 2.814140924s ago: executing program 0 (id=6939): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) 2.753517966s ago: executing program 4 (id=6940): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x7d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) syz_clone(0x22023500, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000040420f00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) 2.553924032s ago: executing program 5 (id=6941): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.469107555s ago: executing program 2 (id=6942): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x6, 0x8, 0xae, 0x0, 0x1, 0x20727ff}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbac141416ac14141686089f034d2f8702890c6aab845013f2325f1a39018302038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0d5bd2da71000000040000000640000005000000", @ANYRES32=r6, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000800"/28], 0x50) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x7fffffff}, 0x48) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x1cad, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r8 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x40082406, &(0x7f0000001000)='(pu&\"\xf9\x81\xa8\"') socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r9) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r10, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r11) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r12, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="05000000010000000b00000002"], 0x48) 2.396325147s ago: executing program 3 (id=6943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000100)=[{0x20, 0x40, 0x7, 0xfffff020}, {0x6, 0x2, 0x85, 0xc6}]}) 1.910792722s ago: executing program 5 (id=6944): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xda, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x2, 0xa, 0x4, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0xc5bf) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB='8-1'], 0x31) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000180)={r2}, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101080, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000400)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100000000009500000000000000bd0afeff00000000d500f4ff0100030018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010000006500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100, 0x2f}, 0x21) 1.608379181s ago: executing program 3 (id=6945): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x66, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 1.552606613s ago: executing program 0 (id=6946): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x42, &(0x7f00000007c0)=r3, 0x47) 1.430620286s ago: executing program 4 (id=6947): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20061, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_bp={0x0}, 0x10000, 0x100, 0x6}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x3) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000180)=r8) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 1.429738286s ago: executing program 2 (id=6957): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.32252242s ago: executing program 3 (id=6948): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x54, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0xec, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x1a756, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x2, @perf_config_ext={0xfffffffffffffffa, 0xf}, 0x2, 0x0, 0x7, 0x1, 0x7, 0x5, 0x9, 0x0, 0xa, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1.181920354s ago: executing program 2 (id=6949): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x10, 0x1}]}}, 0x0, 0x26}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.042030808s ago: executing program 0 (id=6950): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 892.227683ms ago: executing program 3 (id=6951): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x3}, @fwd={0x2}, @struct={0x0, 0x0, 0x0, 0x9, 0x0, 0x1}]}, {0x0, [0x0, 0x51]}}, &(0x7f0000000980)=""/240, 0x40, 0xf0, 0x1}, 0x28) 839.744534ms ago: executing program 2 (id=6952): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x30}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 670.42066ms ago: executing program 3 (id=6953): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xc) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_ext={0x1c, 0x0, 0x0, &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x5d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x16f64, 0xffffffffffffffff, 0x0, &(0x7f0000000b40), 0x0, 0x10, 0x51a0}, 0x94) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffa7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x6f5}, 0x0, 0x7, 0x0, 0x0, 0x13ffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a20fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000540)='(pu&00\t||') 0s ago: executing program 2 (id=6954): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002d80)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): 60][T23877] netlink_sendmsg+0x8ad/0xbd0 [ 1470.599445][T23877] ? netlink_getsockopt+0x550/0x550 [ 1470.604656][T23877] ? aa_sock_msg_perm+0x94/0x150 [ 1470.609602][T23877] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1470.614918][T23877] ? security_socket_sendmsg+0x7c/0xa0 [ 1470.620387][T23877] ? netlink_getsockopt+0x550/0x550 [ 1470.625600][T23877] ____sys_sendmsg+0x5be/0x970 [ 1470.630379][T23877] ? __sys_sendmsg_sock+0x30/0x30 [ 1470.635416][T23877] ? __import_iovec+0x315/0x500 [ 1470.640281][T23877] ? import_iovec+0x6f/0xa0 [ 1470.644796][T23877] ___sys_sendmsg+0x2a2/0x360 [ 1470.649485][T23877] ? try_to_wake_up+0x6ae/0x1080 [ 1470.654441][T23877] ? __sys_sendmsg+0x290/0x290 [ 1470.659258][T23877] __se_sys_sendmsg+0x1bb/0x2a0 [ 1470.664119][T23877] ? __x64_sys_sendmsg+0x80/0x80 [ 1470.669081][T23877] ? lockdep_hardirqs_on+0x94/0x140 [ 1470.674297][T23877] do_syscall_64+0x4c/0xa0 [ 1470.678722][T23877] ? clear_bhb_loop+0x60/0xb0 [ 1470.683415][T23877] ? clear_bhb_loop+0x60/0xb0 [ 1470.688105][T23877] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1470.694011][T23877] RIP: 0033:0x7f1c9e59ce59 [ 1470.698436][T23877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1470.718054][T23877] RSP: 002b:00007f1c9f435028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.726484][T23877] RAX: ffffffffffffffda RBX: 00007f1c9e815fa0 RCX: 00007f1c9e59ce59 [ 1470.734474][T23877] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1470.742450][T23877] RBP: 00007f1c9e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1470.750427][T23877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.758417][T23877] R13: 00007f1c9e816038 R14: 00007f1c9e815fa0 R15: 00007ffec1e31d88 [ 1470.766425][T23877] [ 1474.637035][T23924] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6057'. [ 1475.931682][T23934] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6060'. [ 1476.077780][T23934] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1476.263023][T23934] CPU: 0 PID: 23934 Comm: syz.1.6060 Not tainted syzkaller #0 [ 1476.270560][T23934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1476.280654][T23934] Call Trace: [ 1476.283963][T23934] [ 1476.286920][T23934] dump_stack_lvl+0x188/0x24e [ 1476.291637][T23934] ? show_regs_print_info+0x12/0x12 [ 1476.296891][T23934] ? load_image+0x400/0x400 [ 1476.301460][T23934] sysfs_warn_dup+0x8a/0xa0 [ 1476.305992][T23934] sysfs_do_create_link_sd+0xc0/0x110 [ 1476.311422][T23934] device_add+0x7f6/0x1000 [ 1476.315866][T23934] wiphy_register+0x1d9f/0x2ac0 [ 1476.320751][T23934] ? cfg80211_event_work+0x40/0x40 [ 1476.325874][T23934] ? minstrel_ht_alloc+0x894/0xa20 [ 1476.331007][T23934] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1476.337095][T23934] ieee80211_register_hw+0x2d00/0x39f0 [ 1476.342580][T23934] ? ieee80211_register_hw+0xec1/0x39f0 [ 1476.348133][T23934] ? ieee80211_register_hw+0xec1/0x39f0 [ 1476.353696][T23934] ? ieee80211_tasklet_handler+0x20/0x20 [ 1476.359352][T23934] ? memset+0x1e/0x40 [ 1476.363348][T23934] ? __hrtimer_init+0x186/0x270 [ 1476.368215][T23934] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1476.373966][T23934] hwsim_new_radio_nl+0xafa/0xce0 [ 1476.379015][T23934] genl_family_rcv_msg_doit+0x22a/0x330 [ 1476.384583][T23934] ? end_current_label_crit_section+0x170/0x170 [ 1476.390841][T23934] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1476.396758][T23934] ? bpf_lsm_capable+0x5/0x10 [ 1476.401450][T23934] ? security_capable+0x85/0xb0 [ 1476.406348][T23934] genl_rcv_msg+0x604/0x790 [ 1476.410887][T23934] ? genl_bind+0x360/0x360 [ 1476.415315][T23934] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1476.421681][T23934] netlink_rcv_skb+0x1fb/0x450 [ 1476.426469][T23934] ? genl_bind+0x360/0x360 [ 1476.430911][T23934] ? netlink_ack+0x1170/0x1170 [ 1476.435788][T23934] ? down_read+0x1a8/0x2d0 [ 1476.440224][T23934] genl_rcv+0x24/0x40 [ 1476.444220][T23934] netlink_unicast+0x74d/0x8d0 [ 1476.449037][T23934] netlink_sendmsg+0x8ad/0xbd0 [ 1476.453824][T23934] ? netlink_getsockopt+0x550/0x550 [ 1476.459052][T23934] ? aa_sock_msg_perm+0x94/0x150 [ 1476.464000][T23934] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1476.469296][T23934] ? security_socket_sendmsg+0x7c/0xa0 [ 1476.474769][T23934] ? netlink_getsockopt+0x550/0x550 [ 1476.479973][T23934] ____sys_sendmsg+0x5be/0x970 [ 1476.484779][T23934] ? __sys_sendmsg_sock+0x30/0x30 [ 1476.489839][T23934] ? __import_iovec+0x315/0x500 [ 1476.494720][T23934] ? import_iovec+0x6f/0xa0 [ 1476.499243][T23934] ___sys_sendmsg+0x2a2/0x360 [ 1476.503935][T23934] ? try_to_wake_up+0x67c/0x1080 [ 1476.508897][T23934] ? __sys_sendmsg+0x290/0x290 [ 1476.513731][T23934] __se_sys_sendmsg+0x1bb/0x2a0 [ 1476.518593][T23934] ? ct_nmi_exit+0x145/0x1c0 [ 1476.523203][T23934] ? __x64_sys_sendmsg+0x80/0x80 [ 1476.528170][T23934] ? lockdep_hardirqs_on+0x94/0x140 [ 1476.533394][T23934] do_syscall_64+0x4c/0xa0 [ 1476.537819][T23934] ? clear_bhb_loop+0x60/0xb0 [ 1476.542534][T23934] ? clear_bhb_loop+0x60/0xb0 [ 1476.547243][T23934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1476.553166][T23934] RIP: 0033:0x7f067779ce59 [ 1476.557603][T23934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.577229][T23934] RSP: 002b:00007f0678671028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1476.585659][T23934] RAX: ffffffffffffffda RBX: 00007f0677a15fa0 RCX: 00007f067779ce59 [ 1476.593640][T23934] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1476.601624][T23934] RBP: 00007f0677832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1476.609601][T23934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.617578][T23934] R13: 00007f0677a16038 R14: 00007f0677a15fa0 R15: 00007ffca4f6fb18 [ 1476.625581][T23934] [ 1480.546347][T23956] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6065'. [ 1480.663420][T23956] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1480.761271][T23956] CPU: 0 PID: 23956 Comm: syz.0.6065 Not tainted syzkaller #0 [ 1480.768814][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1480.778918][T23956] Call Trace: [ 1480.782231][T23956] [ 1480.785201][T23956] dump_stack_lvl+0x188/0x24e [ 1480.789922][T23956] ? show_regs_print_info+0x12/0x12 [ 1480.795143][T23956] ? load_image+0x400/0x400 [ 1480.799684][T23956] sysfs_warn_dup+0x8a/0xa0 [ 1480.804303][T23956] sysfs_do_create_link_sd+0xc0/0x110 [ 1480.809696][T23956] device_add+0x7f6/0x1000 [ 1480.814134][T23956] wiphy_register+0x1d9f/0x2ac0 [ 1480.819023][T23956] ? cfg80211_event_work+0x40/0x40 [ 1480.824146][T23956] ? minstrel_ht_alloc+0x894/0xa20 [ 1480.829275][T23956] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1480.835361][T23956] ieee80211_register_hw+0x2d00/0x39f0 [ 1480.840841][T23956] ? ieee80211_register_hw+0xec1/0x39f0 [ 1480.846397][T23956] ? ieee80211_register_hw+0xec1/0x39f0 [ 1480.851961][T23956] ? ieee80211_tasklet_handler+0x20/0x20 [ 1480.857616][T23956] ? memset+0x1e/0x40 [ 1480.861608][T23956] ? __hrtimer_init+0x186/0x270 [ 1480.866478][T23956] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1480.872228][T23956] hwsim_new_radio_nl+0xafa/0xce0 [ 1480.877273][T23956] genl_family_rcv_msg_doit+0x22a/0x330 [ 1480.882833][T23956] ? end_current_label_crit_section+0x170/0x170 [ 1480.889089][T23956] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1480.895028][T23956] ? bpf_lsm_capable+0x5/0x10 [ 1480.899719][T23956] ? security_capable+0x85/0xb0 [ 1480.904590][T23956] genl_rcv_msg+0x604/0x790 [ 1480.909112][T23956] ? genl_bind+0x360/0x360 [ 1480.913543][T23956] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1480.919896][T23956] netlink_rcv_skb+0x1fb/0x450 [ 1480.924677][T23956] ? genl_bind+0x360/0x360 [ 1480.929107][T23956] ? netlink_ack+0x1170/0x1170 [ 1480.933892][T23956] ? down_read+0x1a8/0x2d0 [ 1480.938327][T23956] genl_rcv+0x24/0x40 [ 1480.942321][T23956] netlink_unicast+0x74d/0x8d0 [ 1480.947129][T23956] netlink_sendmsg+0x8ad/0xbd0 [ 1480.951916][T23956] ? netlink_getsockopt+0x550/0x550 [ 1480.957129][T23956] ? aa_sock_msg_perm+0x94/0x150 [ 1480.962083][T23956] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1480.967381][T23956] ? security_socket_sendmsg+0x7c/0xa0 [ 1480.972852][T23956] ? netlink_getsockopt+0x550/0x550 [ 1480.978062][T23956] ____sys_sendmsg+0x5be/0x970 [ 1480.982847][T23956] ? __sys_sendmsg_sock+0x30/0x30 [ 1480.987879][T23956] ? __import_iovec+0x315/0x500 [ 1480.992749][T23956] ? import_iovec+0x6f/0xa0 [ 1480.997266][T23956] ___sys_sendmsg+0x2a2/0x360 [ 1481.001976][T23956] ? try_to_wake_up+0x67c/0x1080 [ 1481.006940][T23956] ? __sys_sendmsg+0x290/0x290 [ 1481.011771][T23956] __se_sys_sendmsg+0x1bb/0x2a0 [ 1481.016651][T23956] ? ct_nmi_exit+0x145/0x1c0 [ 1481.021283][T23956] ? __x64_sys_sendmsg+0x80/0x80 [ 1481.026286][T23956] ? lockdep_hardirqs_on+0x94/0x140 [ 1481.031515][T23956] do_syscall_64+0x4c/0xa0 [ 1481.035946][T23956] ? clear_bhb_loop+0x60/0xb0 [ 1481.040646][T23956] ? clear_bhb_loop+0x60/0xb0 [ 1481.045347][T23956] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1481.051271][T23956] RIP: 0033:0x7f25cd19ce59 [ 1481.055720][T23956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.075341][T23956] RSP: 002b:00007f25cdfe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1481.083773][T23956] RAX: ffffffffffffffda RBX: 00007f25cd415fa0 RCX: 00007f25cd19ce59 [ 1481.091774][T23956] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1481.099842][T23956] RBP: 00007f25cd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1481.107824][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.115823][T23956] R13: 00007f25cd416038 R14: 00007f25cd415fa0 R15: 00007fff2981b3d8 [ 1481.123845][T23956] [ 1482.263514][T23975] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6071'. [ 1484.519992][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.526401][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.933972][T24013] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6081'. [ 1487.054781][T24013] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1487.221363][T24013] CPU: 0 PID: 24013 Comm: syz.3.6081 Not tainted syzkaller #0 [ 1487.228911][T24013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1487.238999][T24013] Call Trace: [ 1487.242309][T24013] [ 1487.245270][T24013] dump_stack_lvl+0x188/0x24e [ 1487.249987][T24013] ? show_regs_print_info+0x12/0x12 [ 1487.255218][T24013] ? load_image+0x400/0x400 [ 1487.259775][T24013] sysfs_warn_dup+0x8a/0xa0 [ 1487.264317][T24013] sysfs_do_create_link_sd+0xc0/0x110 [ 1487.269727][T24013] device_add+0x7f6/0x1000 [ 1487.274192][T24013] wiphy_register+0x1d9f/0x2ac0 [ 1487.279099][T24013] ? cfg80211_event_work+0x40/0x40 [ 1487.284325][T24013] ? minstrel_ht_alloc+0x894/0xa20 [ 1487.289481][T24013] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1487.295599][T24013] ieee80211_register_hw+0x2d00/0x39f0 [ 1487.301119][T24013] ? ieee80211_register_hw+0xec1/0x39f0 [ 1487.306699][T24013] ? ieee80211_register_hw+0xec1/0x39f0 [ 1487.312287][T24013] ? ieee80211_tasklet_handler+0x20/0x20 [ 1487.317975][T24013] ? memset+0x1e/0x40 [ 1487.321998][T24013] ? __hrtimer_init+0x186/0x270 [ 1487.326889][T24013] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1487.332666][T24013] hwsim_new_radio_nl+0xafa/0xce0 [ 1487.337733][T24013] genl_family_rcv_msg_doit+0x22a/0x330 [ 1487.343304][T24013] ? end_current_label_crit_section+0x170/0x170 [ 1487.349575][T24013] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1487.355532][T24013] ? bpf_lsm_capable+0x5/0x10 [ 1487.360232][T24013] ? security_capable+0x85/0xb0 [ 1487.365111][T24013] genl_rcv_msg+0x604/0x790 [ 1487.369637][T24013] ? genl_bind+0x360/0x360 [ 1487.374066][T24013] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1487.380421][T24013] netlink_rcv_skb+0x1fb/0x450 [ 1487.385219][T24013] ? genl_bind+0x360/0x360 [ 1487.389650][T24013] ? netlink_ack+0x1170/0x1170 [ 1487.394440][T24013] ? down_read+0x1a8/0x2d0 [ 1487.398882][T24013] genl_rcv+0x24/0x40 [ 1487.402877][T24013] netlink_unicast+0x74d/0x8d0 [ 1487.407662][T24013] netlink_sendmsg+0x8ad/0xbd0 [ 1487.412450][T24013] ? netlink_getsockopt+0x550/0x550 [ 1487.417662][T24013] ? aa_sock_msg_perm+0x94/0x150 [ 1487.422617][T24013] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1487.427916][T24013] ? security_socket_sendmsg+0x7c/0xa0 [ 1487.433385][T24013] ? netlink_getsockopt+0x550/0x550 [ 1487.438602][T24013] ____sys_sendmsg+0x5be/0x970 [ 1487.443385][T24013] ? __sys_sendmsg_sock+0x30/0x30 [ 1487.448418][T24013] ? __import_iovec+0x315/0x500 [ 1487.453320][T24013] ? import_iovec+0x6f/0xa0 [ 1487.457842][T24013] ___sys_sendmsg+0x2a2/0x360 [ 1487.462537][T24013] ? try_to_wake_up+0x67c/0x1080 [ 1487.467497][T24013] ? __sys_sendmsg+0x290/0x290 [ 1487.472322][T24013] __se_sys_sendmsg+0x1bb/0x2a0 [ 1487.477187][T24013] ? ct_nmi_exit+0x145/0x1c0 [ 1487.481793][T24013] ? __x64_sys_sendmsg+0x80/0x80 [ 1487.486760][T24013] ? lockdep_hardirqs_on+0x94/0x140 [ 1487.491975][T24013] do_syscall_64+0x4c/0xa0 [ 1487.496401][T24013] ? clear_bhb_loop+0x60/0xb0 [ 1487.501095][T24013] ? clear_bhb_loop+0x60/0xb0 [ 1487.505791][T24013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1487.511699][T24013] RIP: 0033:0x7f884879ce59 [ 1487.516123][T24013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.535738][T24013] RSP: 002b:00007f88495bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.544168][T24013] RAX: ffffffffffffffda RBX: 00007f8848a15fa0 RCX: 00007f884879ce59 [ 1487.552152][T24013] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1487.560130][T24013] RBP: 00007f8848832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1487.568111][T24013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1487.576102][T24013] R13: 00007f8848a16038 R14: 00007f8848a15fa0 R15: 00007ffce60f7348 [ 1487.584101][T24013] [ 1489.755677][T24032] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6087'. [ 1489.879396][T24036] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6089'. [ 1489.910357][T24035] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6088'. [ 1493.659610][T24079] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6100'. [ 1494.206254][T24079] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1494.414926][T24079] CPU: 1 PID: 24079 Comm: syz.1.6100 Not tainted syzkaller #0 [ 1494.422483][T24079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1494.432595][T24079] Call Trace: [ 1494.435922][T24079] [ 1494.438903][T24079] dump_stack_lvl+0x188/0x24e [ 1494.443658][T24079] ? show_regs_print_info+0x12/0x12 [ 1494.448914][T24079] ? load_image+0x400/0x400 [ 1494.453545][T24079] sysfs_warn_dup+0x8a/0xa0 [ 1494.458126][T24079] sysfs_do_create_link_sd+0xc0/0x110 [ 1494.463573][T24079] device_add+0x7f6/0x1000 [ 1494.468103][T24079] wiphy_register+0x1d9f/0x2ac0 [ 1494.473096][T24079] ? cfg80211_event_work+0x40/0x40 [ 1494.478263][T24079] ? minstrel_ht_alloc+0x894/0xa20 [ 1494.483471][T24079] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1494.489619][T24079] ieee80211_register_hw+0x2d00/0x39f0 [ 1494.495189][T24079] ? ieee80211_register_hw+0xec1/0x39f0 [ 1494.500791][T24079] ? ieee80211_register_hw+0xec1/0x39f0 [ 1494.506435][T24079] ? ieee80211_tasklet_handler+0x20/0x20 [ 1494.512180][T24079] ? memset+0x1e/0x40 [ 1494.516245][T24079] ? __hrtimer_init+0x186/0x270 [ 1494.521174][T24079] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1494.527033][T24079] hwsim_new_radio_nl+0xafa/0xce0 [ 1494.532174][T24079] genl_family_rcv_msg_doit+0x22a/0x330 [ 1494.537792][T24079] ? end_current_label_crit_section+0x170/0x170 [ 1494.544127][T24079] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1494.550130][T24079] ? bpf_lsm_capable+0x5/0x10 [ 1494.554872][T24079] ? security_capable+0x85/0xb0 [ 1494.559814][T24079] genl_rcv_msg+0x604/0x790 [ 1494.564432][T24079] ? genl_bind+0x360/0x360 [ 1494.568910][T24079] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1494.575365][T24079] netlink_rcv_skb+0x1fb/0x450 [ 1494.580204][T24079] ? genl_bind+0x360/0x360 [ 1494.584696][T24079] ? netlink_ack+0x1170/0x1170 [ 1494.589548][T24079] ? down_read+0x1a8/0x2d0 [ 1494.594026][T24079] genl_rcv+0x24/0x40 [ 1494.598041][T24079] netlink_unicast+0x74d/0x8d0 [ 1494.602872][T24079] netlink_sendmsg+0x8ad/0xbd0 [ 1494.607692][T24079] ? netlink_getsockopt+0x550/0x550 [ 1494.612929][T24079] ? aa_sock_msg_perm+0x94/0x150 [ 1494.617909][T24079] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1494.623223][T24079] ? security_socket_sendmsg+0x7c/0xa0 [ 1494.628713][T24079] ? netlink_getsockopt+0x550/0x550 [ 1494.633942][T24079] ____sys_sendmsg+0x5be/0x970 [ 1494.638761][T24079] ? __sys_sendmsg_sock+0x30/0x30 [ 1494.643807][T24079] ? __import_iovec+0x315/0x500 [ 1494.648735][T24079] ? import_iovec+0x6f/0xa0 [ 1494.653293][T24079] ___sys_sendmsg+0x2a2/0x360 [ 1494.658029][T24079] ? try_to_wake_up+0x67c/0x1080 [ 1494.663012][T24079] ? __sys_sendmsg+0x290/0x290 [ 1494.667971][T24079] __se_sys_sendmsg+0x1bb/0x2a0 [ 1494.672845][T24079] ? ct_nmi_exit+0x145/0x1c0 [ 1494.677475][T24079] ? __x64_sys_sendmsg+0x80/0x80 [ 1494.682490][T24079] ? lockdep_hardirqs_on+0x94/0x140 [ 1494.687735][T24079] do_syscall_64+0x4c/0xa0 [ 1494.692175][T24079] ? clear_bhb_loop+0x60/0xb0 [ 1494.696882][T24079] ? clear_bhb_loop+0x60/0xb0 [ 1494.701600][T24079] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1494.707536][T24079] RIP: 0033:0x7f067779ce59 [ 1494.712001][T24079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1494.731661][T24079] RSP: 002b:00007f0678671028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1494.740116][T24079] RAX: ffffffffffffffda RBX: 00007f0677a15fa0 RCX: 00007f067779ce59 [ 1494.748115][T24079] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1494.756119][T24079] RBP: 00007f0677832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1494.764119][T24079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1494.772123][T24079] R13: 00007f0677a16038 R14: 00007f0677a15fa0 R15: 00007ffca4f6fb18 [ 1494.780194][T24079] [ 1499.844941][T24105] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6109'. [ 1501.246336][T24112] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6111'. [ 1501.466759][T24115] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6112'. [ 1502.968100][T24124] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6114'. [ 1503.679449][T24129] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6116'. [ 1507.586312][T24157] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6124'. [ 1507.656246][T24163] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6125'. [ 1507.968976][T24167] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6128'. [ 1508.013349][T24167] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1508.051805][T24167] CPU: 1 PID: 24167 Comm: syz.4.6128 Not tainted syzkaller #0 [ 1508.059368][T24167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1508.069515][T24167] Call Trace: [ 1508.072853][T24167] [ 1508.075849][T24167] dump_stack_lvl+0x188/0x24e [ 1508.080602][T24167] ? show_regs_print_info+0x12/0x12 [ 1508.085857][T24167] ? load_image+0x400/0x400 [ 1508.090474][T24167] sysfs_warn_dup+0x8a/0xa0 [ 1508.095039][T24167] sysfs_do_create_link_sd+0xc0/0x110 [ 1508.100478][T24167] device_add+0x7f6/0x1000 [ 1508.104993][T24167] wiphy_register+0x1d9f/0x2ac0 [ 1508.109972][T24167] ? cfg80211_event_work+0x40/0x40 [ 1508.115139][T24167] ? minstrel_ht_alloc+0x894/0xa20 [ 1508.120339][T24167] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1508.126491][T24167] ieee80211_register_hw+0x2d00/0x39f0 [ 1508.132048][T24167] ? ieee80211_register_hw+0xec1/0x39f0 [ 1508.137642][T24167] ? ieee80211_register_hw+0xec1/0x39f0 [ 1508.143286][T24167] ? ieee80211_tasklet_handler+0x20/0x20 [ 1508.149013][T24167] ? memset+0x1e/0x40 [ 1508.153054][T24167] ? __hrtimer_init+0x186/0x270 [ 1508.157981][T24167] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1508.163834][T24167] hwsim_new_radio_nl+0xafa/0xce0 [ 1508.168976][T24167] genl_family_rcv_msg_doit+0x22a/0x330 [ 1508.174587][T24167] ? end_current_label_crit_section+0x170/0x170 [ 1508.180900][T24167] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1508.186888][T24167] ? bpf_lsm_capable+0x5/0x10 [ 1508.191618][T24167] ? security_capable+0x85/0xb0 [ 1508.196557][T24167] genl_rcv_msg+0x604/0x790 [ 1508.201392][T24167] ? genl_bind+0x360/0x360 [ 1508.205853][T24167] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1508.212328][T24167] netlink_rcv_skb+0x1fb/0x450 [ 1508.217147][T24167] ? genl_bind+0x360/0x360 [ 1508.221633][T24167] ? netlink_ack+0x1170/0x1170 [ 1508.226497][T24167] ? down_read+0x1a8/0x2d0 [ 1508.230981][T24167] genl_rcv+0x24/0x40 [ 1508.235021][T24167] netlink_unicast+0x74d/0x8d0 [ 1508.239899][T24167] netlink_sendmsg+0x8ad/0xbd0 [ 1508.244752][T24167] ? netlink_getsockopt+0x550/0x550 [ 1508.250043][T24167] ? aa_sock_msg_perm+0x94/0x150 [ 1508.255079][T24167] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1508.260426][T24167] ? security_socket_sendmsg+0x7c/0xa0 [ 1508.265969][T24167] ? netlink_getsockopt+0x550/0x550 [ 1508.271233][T24167] ____sys_sendmsg+0x5be/0x970 [ 1508.276114][T24167] ? __sys_sendmsg_sock+0x30/0x30 [ 1508.281209][T24167] ? __import_iovec+0x315/0x500 [ 1508.286154][T24167] ? import_iovec+0x6f/0xa0 [ 1508.290828][T24167] ___sys_sendmsg+0x2a2/0x360 [ 1508.295563][T24167] ? try_to_wake_up+0x6ae/0x1080 [ 1508.300574][T24167] ? __sys_sendmsg+0x290/0x290 [ 1508.305589][T24167] __se_sys_sendmsg+0x1bb/0x2a0 [ 1508.310509][T24167] ? __x64_sys_sendmsg+0x80/0x80 [ 1508.315574][T24167] ? lockdep_hardirqs_on+0x94/0x140 [ 1508.320846][T24167] do_syscall_64+0x4c/0xa0 [ 1508.325311][T24167] ? clear_bhb_loop+0x60/0xb0 [ 1508.330044][T24167] ? clear_bhb_loop+0x60/0xb0 [ 1508.334789][T24167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1508.340737][T24167] RIP: 0033:0x7f1c9e59ce59 [ 1508.345205][T24167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1508.364865][T24167] RSP: 002b:00007f1c9f435028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1508.373362][T24167] RAX: ffffffffffffffda RBX: 00007f1c9e815fa0 RCX: 00007f1c9e59ce59 [ 1508.381385][T24167] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1508.389394][T24167] RBP: 00007f1c9e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1508.397447][T24167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1508.405507][T24167] R13: 00007f1c9e816038 R14: 00007f1c9e815fa0 R15: 00007ffec1e31d88 [ 1508.413595][T24167] [ 1511.191092][T24211] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6139'. [ 1511.402830][T24217] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6138'. [ 1516.426287][T24258] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.6151'. [ 1516.486508][T24258] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1516.583060][T24258] CPU: 0 PID: 24258 Comm: syz.1.6151 Not tainted syzkaller #0 [ 1516.590596][T24258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1516.600701][T24258] Call Trace: [ 1516.604001][T24258] [ 1516.606944][T24258] dump_stack_lvl+0x188/0x24e [ 1516.611647][T24258] ? show_regs_print_info+0x12/0x12 [ 1516.616870][T24258] ? load_image+0x400/0x400 [ 1516.621420][T24258] sysfs_warn_dup+0x8a/0xa0 [ 1516.625942][T24258] sysfs_do_create_link_sd+0xc0/0x110 [ 1516.631333][T24258] device_add+0x7f6/0x1000 [ 1516.635801][T24258] wiphy_register+0x1d9f/0x2ac0 [ 1516.640858][T24258] ? cfg80211_event_work+0x40/0x40 [ 1516.646009][T24258] ? minstrel_ht_alloc+0x894/0xa20 [ 1516.651143][T24258] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1516.657234][T24258] ieee80211_register_hw+0x2d00/0x39f0 [ 1516.662721][T24258] ? ieee80211_register_hw+0xec1/0x39f0 [ 1516.668274][T24258] ? ieee80211_register_hw+0xec1/0x39f0 [ 1516.673840][T24258] ? ieee80211_tasklet_handler+0x20/0x20 [ 1516.679492][T24258] ? memset+0x1e/0x40 [ 1516.683487][T24258] ? __hrtimer_init+0x186/0x270 [ 1516.688353][T24258] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1516.694103][T24258] hwsim_new_radio_nl+0xafa/0xce0 [ 1516.699162][T24258] genl_family_rcv_msg_doit+0x22a/0x330 [ 1516.704724][T24258] ? end_current_label_crit_section+0x170/0x170 [ 1516.710980][T24258] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1516.716919][T24258] ? bpf_lsm_capable+0x5/0x10 [ 1516.721611][T24258] ? security_capable+0x85/0xb0 [ 1516.726488][T24258] genl_rcv_msg+0x604/0x790 [ 1516.731034][T24258] ? genl_bind+0x360/0x360 [ 1516.735461][T24258] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1516.741819][T24258] netlink_rcv_skb+0x1fb/0x450 [ 1516.746597][T24258] ? genl_bind+0x360/0x360 [ 1516.751025][T24258] ? netlink_ack+0x1170/0x1170 [ 1516.755812][T24258] ? down_read+0x1a8/0x2d0 [ 1516.760242][T24258] genl_rcv+0x24/0x40 [ 1516.764247][T24258] netlink_unicast+0x74d/0x8d0 [ 1516.769032][T24258] netlink_sendmsg+0x8ad/0xbd0 [ 1516.773820][T24258] ? netlink_getsockopt+0x550/0x550 [ 1516.779032][T24258] ? aa_sock_msg_perm+0x94/0x150 [ 1516.783983][T24258] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1516.789281][T24258] ? security_socket_sendmsg+0x7c/0xa0 [ 1516.794755][T24258] ? netlink_getsockopt+0x550/0x550 [ 1516.799980][T24258] ____sys_sendmsg+0x5be/0x970 [ 1516.804766][T24258] ? __sys_sendmsg_sock+0x30/0x30 [ 1516.809799][T24258] ? __import_iovec+0x315/0x500 [ 1516.814676][T24258] ? import_iovec+0x6f/0xa0 [ 1516.819199][T24258] ___sys_sendmsg+0x2a2/0x360 [ 1516.823886][T24258] ? try_to_wake_up+0x67c/0x1080 [ 1516.828841][T24258] ? __sys_sendmsg+0x290/0x290 [ 1516.833672][T24258] __se_sys_sendmsg+0x1bb/0x2a0 [ 1516.838559][T24258] ? __x64_sys_sendmsg+0x80/0x80 [ 1516.843521][T24258] ? lockdep_hardirqs_on+0x94/0x140 [ 1516.848737][T24258] do_syscall_64+0x4c/0xa0 [ 1516.853168][T24258] ? clear_bhb_loop+0x60/0xb0 [ 1516.857860][T24258] ? clear_bhb_loop+0x60/0xb0 [ 1516.862557][T24258] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1516.868470][T24258] RIP: 0033:0x7f067779ce59 [ 1516.872901][T24258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1516.892545][T24258] RSP: 002b:00007f0678671028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.900992][T24258] RAX: ffffffffffffffda RBX: 00007f0677a15fa0 RCX: 00007f067779ce59 [ 1516.908979][T24258] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1516.916989][T24258] RBP: 00007f0677832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1516.924993][T24258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1516.932986][T24258] R13: 00007f0677a16038 R14: 00007f0677a15fa0 R15: 00007ffca4f6fb18 [ 1516.941019][T24258] [ 1517.071568][T24269] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6152'. [ 1517.110410][T24266] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6153'. [ 1517.625755][T24275] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6158'. [ 1520.236413][T24308] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6166'. [ 1520.420610][T24318] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6170'. [ 1520.804623][T24318] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1520.824525][T24318] CPU: 0 PID: 24318 Comm: syz.0.6170 Not tainted syzkaller #0 [ 1520.832066][T24318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1520.842166][T24318] Call Trace: [ 1520.845484][T24318] [ 1520.848444][T24318] dump_stack_lvl+0x188/0x24e [ 1520.853258][T24318] ? show_regs_print_info+0x12/0x12 [ 1520.858500][T24318] ? load_image+0x400/0x400 [ 1520.863079][T24318] sysfs_warn_dup+0x8a/0xa0 [ 1520.867637][T24318] sysfs_do_create_link_sd+0xc0/0x110 [ 1520.873063][T24318] device_add+0x7f6/0x1000 [ 1520.877536][T24318] wiphy_register+0x1d9f/0x2ac0 [ 1520.882451][T24318] ? cfg80211_event_work+0x40/0x40 [ 1520.887596][T24318] ? minstrel_ht_alloc+0x894/0xa20 [ 1520.892756][T24318] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1520.898875][T24318] ieee80211_register_hw+0x2d00/0x39f0 [ 1520.904395][T24318] ? ieee80211_register_hw+0xec1/0x39f0 [ 1520.909987][T24318] ? ieee80211_register_hw+0xec1/0x39f0 [ 1520.915658][T24318] ? ieee80211_tasklet_handler+0x20/0x20 [ 1520.921319][T24318] ? memset+0x1e/0x40 [ 1520.925316][T24318] ? __hrtimer_init+0x186/0x270 [ 1520.930184][T24318] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1520.935935][T24318] hwsim_new_radio_nl+0xafa/0xce0 [ 1520.941021][T24318] genl_family_rcv_msg_doit+0x22a/0x330 [ 1520.946589][T24318] ? end_current_label_crit_section+0x170/0x170 [ 1520.952850][T24318] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1520.958769][T24318] ? bpf_lsm_capable+0x5/0x10 [ 1520.963461][T24318] ? security_capable+0x85/0xb0 [ 1520.968335][T24318] genl_rcv_msg+0x604/0x790 [ 1520.972862][T24318] ? genl_bind+0x360/0x360 [ 1520.977290][T24318] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1520.983646][T24318] netlink_rcv_skb+0x1fb/0x450 [ 1520.988421][T24318] ? genl_bind+0x360/0x360 [ 1520.992854][T24318] ? netlink_ack+0x1170/0x1170 [ 1520.997637][T24318] ? down_read+0x1a8/0x2d0 [ 1521.002069][T24318] genl_rcv+0x24/0x40 [ 1521.006063][T24318] netlink_unicast+0x74d/0x8d0 [ 1521.010846][T24318] netlink_sendmsg+0x8ad/0xbd0 [ 1521.015630][T24318] ? netlink_getsockopt+0x550/0x550 [ 1521.020842][T24318] ? aa_sock_msg_perm+0x94/0x150 [ 1521.025794][T24318] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1521.031091][T24318] ? security_socket_sendmsg+0x7c/0xa0 [ 1521.036591][T24318] ? netlink_getsockopt+0x550/0x550 [ 1521.041828][T24318] ____sys_sendmsg+0x5be/0x970 [ 1521.046613][T24318] ? __sys_sendmsg_sock+0x30/0x30 [ 1521.051645][T24318] ? __import_iovec+0x315/0x500 [ 1521.056516][T24318] ? import_iovec+0x6f/0xa0 [ 1521.061033][T24318] ___sys_sendmsg+0x2a2/0x360 [ 1521.065721][T24318] ? try_to_wake_up+0x67c/0x1080 [ 1521.070676][T24318] ? __sys_sendmsg+0x290/0x290 [ 1521.075500][T24318] __se_sys_sendmsg+0x1bb/0x2a0 [ 1521.080359][T24318] ? ct_nmi_exit+0x145/0x1c0 [ 1521.084966][T24318] ? __x64_sys_sendmsg+0x80/0x80 [ 1521.089936][T24318] ? lockdep_hardirqs_on+0x94/0x140 [ 1521.095156][T24318] do_syscall_64+0x4c/0xa0 [ 1521.099582][T24318] ? clear_bhb_loop+0x60/0xb0 [ 1521.104282][T24318] ? clear_bhb_loop+0x60/0xb0 [ 1521.108982][T24318] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1521.114892][T24318] RIP: 0033:0x7f25cd19ce59 [ 1521.119322][T24318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.138940][T24318] RSP: 002b:00007f25cdfe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1521.147394][T24318] RAX: ffffffffffffffda RBX: 00007f25cd415fa0 RCX: 00007f25cd19ce59 [ 1521.155396][T24318] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1521.163397][T24318] RBP: 00007f25cd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1521.171381][T24318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.179365][T24318] R13: 00007f25cd416038 R14: 00007f25cd415fa0 R15: 00007fff2981b3d8 [ 1521.187365][T24318] [ 1521.350868][T24323] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1522.745218][T24337] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6174'. [ 1523.106154][T24349] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6179'. [ 1523.416722][T24359] netlink: 'syz.3.6183': attribute type 25 has an invalid length. [ 1529.380171][T24415] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6196'. [ 1529.407792][T24417] netlink: 'syz.4.6197': attribute type 25 has an invalid length. [ 1530.538609][T24435] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6214'. [ 1535.015143][T24481] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6213'. [ 1535.199284][T24485] netlink: 'syz.0.6215': attribute type 25 has an invalid length. [ 1535.929225][T24489] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.6217'. [ 1536.165921][T24489] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1536.384059][T24489] CPU: 0 PID: 24489 Comm: syz.2.6217 Not tainted syzkaller #0 [ 1536.391604][T24489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1536.401690][T24489] Call Trace: [ 1536.405019][T24489] [ 1536.407983][T24489] dump_stack_lvl+0x188/0x24e [ 1536.412713][T24489] ? show_regs_print_info+0x12/0x12 [ 1536.417958][T24489] ? load_image+0x400/0x400 [ 1536.422534][T24489] sysfs_warn_dup+0x8a/0xa0 [ 1536.427067][T24489] sysfs_do_create_link_sd+0xc0/0x110 [ 1536.432466][T24489] device_add+0x7f6/0x1000 [ 1536.437697][T24489] wiphy_register+0x1d9f/0x2ac0 [ 1536.442581][T24489] ? cfg80211_event_work+0x40/0x40 [ 1536.447722][T24489] ? minstrel_ht_alloc+0x894/0xa20 [ 1536.452851][T24489] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1536.458943][T24489] ieee80211_register_hw+0x2d00/0x39f0 [ 1536.464433][T24489] ? ieee80211_register_hw+0xec1/0x39f0 [ 1536.469996][T24489] ? ieee80211_register_hw+0xec1/0x39f0 [ 1536.475562][T24489] ? ieee80211_tasklet_handler+0x20/0x20 [ 1536.481230][T24489] ? memset+0x1e/0x40 [ 1536.485233][T24489] ? __hrtimer_init+0x186/0x270 [ 1536.490098][T24489] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1536.495866][T24489] hwsim_new_radio_nl+0xafa/0xce0 [ 1536.500915][T24489] genl_family_rcv_msg_doit+0x22a/0x330 [ 1536.506483][T24489] ? end_current_label_crit_section+0x170/0x170 [ 1536.512739][T24489] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1536.518676][T24489] ? bpf_lsm_capable+0x5/0x10 [ 1536.523374][T24489] ? security_capable+0x85/0xb0 [ 1536.528276][T24489] genl_rcv_msg+0x604/0x790 [ 1536.532803][T24489] ? genl_bind+0x360/0x360 [ 1536.537233][T24489] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1536.543587][T24489] netlink_rcv_skb+0x1fb/0x450 [ 1536.548363][T24489] ? genl_bind+0x360/0x360 [ 1536.552822][T24489] ? netlink_ack+0x1170/0x1170 [ 1536.557607][T24489] ? down_read+0x1a8/0x2d0 [ 1536.562045][T24489] genl_rcv+0x24/0x40 [ 1536.566047][T24489] netlink_unicast+0x74d/0x8d0 [ 1536.570831][T24489] netlink_sendmsg+0x8ad/0xbd0 [ 1536.575635][T24489] ? netlink_getsockopt+0x550/0x550 [ 1536.580847][T24489] ? aa_sock_msg_perm+0x94/0x150 [ 1536.585799][T24489] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1536.591096][T24489] ? security_socket_sendmsg+0x7c/0xa0 [ 1536.596760][T24489] ? netlink_getsockopt+0x550/0x550 [ 1536.601974][T24489] ____sys_sendmsg+0x5be/0x970 [ 1536.606778][T24489] ? __sys_sendmsg_sock+0x30/0x30 [ 1536.611817][T24489] ? __import_iovec+0x315/0x500 [ 1536.616710][T24489] ? import_iovec+0x6f/0xa0 [ 1536.621239][T24489] ___sys_sendmsg+0x2a2/0x360 [ 1536.625938][T24489] ? __sys_sendmsg+0x290/0x290 [ 1536.630736][T24489] ? trace_call_bpf+0xbf/0x6b0 [ 1536.635540][T24489] __se_sys_sendmsg+0x1bb/0x2a0 [ 1536.640412][T24489] ? __x64_sys_sendmsg+0x80/0x80 [ 1536.645409][T24489] ? lockdep_hardirqs_on+0x94/0x140 [ 1536.650628][T24489] do_syscall_64+0x4c/0xa0 [ 1536.655057][T24489] ? clear_bhb_loop+0x60/0xb0 [ 1536.659754][T24489] ? clear_bhb_loop+0x60/0xb0 [ 1536.664451][T24489] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1536.670361][T24489] RIP: 0033:0x7faab939ce59 [ 1536.674797][T24489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1536.694771][T24489] RSP: 002b:00007faaba30c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1536.703217][T24489] RAX: ffffffffffffffda RBX: 00007faab9615fa0 RCX: 00007faab939ce59 [ 1536.711224][T24489] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1536.719214][T24489] RBP: 00007faab9432d6f R08: 0000000000000000 R09: 0000000000000000 [ 1536.727199][T24489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1536.735183][T24489] R13: 00007faab9616038 R14: 00007faab9615fa0 R15: 00007ffd61af7888 [ 1536.743207][T24489] [ 1538.138002][T24505] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6221'. [ 1539.163159][T24511] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6222'. [ 1540.791123][T24544] netlink: 'syz.0.6229': attribute type 25 has an invalid length. [ 1541.007758][T24545] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6228'. [ 1541.506963][T24553] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6232'. [ 1541.535009][T24555] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6234'. [ 1541.577948][T24555] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1541.596571][T24555] CPU: 0 PID: 24555 Comm: syz.3.6234 Not tainted syzkaller #0 [ 1541.604103][T24555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1541.614207][T24555] Call Trace: [ 1541.617518][T24555] [ 1541.620473][T24555] dump_stack_lvl+0x188/0x24e [ 1541.625207][T24555] ? show_regs_print_info+0x12/0x12 [ 1541.630456][T24555] ? load_image+0x400/0x400 [ 1541.635022][T24555] sysfs_warn_dup+0x8a/0xa0 [ 1541.639561][T24555] sysfs_do_create_link_sd+0xc0/0x110 [ 1541.644976][T24555] device_add+0x7f6/0x1000 [ 1541.649448][T24555] wiphy_register+0x1d9f/0x2ac0 [ 1541.654359][T24555] ? cfg80211_event_work+0x40/0x40 [ 1541.659501][T24555] ? minstrel_ht_alloc+0x894/0xa20 [ 1541.664651][T24555] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1541.670765][T24555] ieee80211_register_hw+0x2d00/0x39f0 [ 1541.676284][T24555] ? ieee80211_register_hw+0xec1/0x39f0 [ 1541.681865][T24555] ? ieee80211_register_hw+0xec1/0x39f0 [ 1541.687461][T24555] ? ieee80211_tasklet_handler+0x20/0x20 [ 1541.693144][T24555] ? memset+0x1e/0x40 [ 1541.697166][T24555] ? __hrtimer_init+0x186/0x270 [ 1541.702069][T24555] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1541.707847][T24555] hwsim_new_radio_nl+0xafa/0xce0 [ 1541.712921][T24555] genl_family_rcv_msg_doit+0x22a/0x330 [ 1541.718497][T24555] ? end_current_label_crit_section+0x170/0x170 [ 1541.724769][T24555] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1541.730725][T24555] ? bpf_lsm_capable+0x5/0x10 [ 1541.735454][T24555] ? security_capable+0x85/0xb0 [ 1541.740359][T24555] genl_rcv_msg+0x604/0x790 [ 1541.744932][T24555] ? genl_bind+0x360/0x360 [ 1541.749402][T24555] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1541.755796][T24555] netlink_rcv_skb+0x1fb/0x450 [ 1541.760578][T24555] ? genl_bind+0x360/0x360 [ 1541.765019][T24555] ? netlink_ack+0x1170/0x1170 [ 1541.769807][T24555] ? down_read+0x1a8/0x2d0 [ 1541.774243][T24555] genl_rcv+0x24/0x40 [ 1541.778531][T24555] netlink_unicast+0x74d/0x8d0 [ 1541.783320][T24555] netlink_sendmsg+0x8ad/0xbd0 [ 1541.788110][T24555] ? netlink_getsockopt+0x550/0x550 [ 1541.793344][T24555] ? aa_sock_msg_perm+0x94/0x150 [ 1541.798296][T24555] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1541.803594][T24555] ? security_socket_sendmsg+0x7c/0xa0 [ 1541.809076][T24555] ? netlink_getsockopt+0x550/0x550 [ 1541.814285][T24555] ____sys_sendmsg+0x5be/0x970 [ 1541.819071][T24555] ? __sys_sendmsg_sock+0x30/0x30 [ 1541.824110][T24555] ? __import_iovec+0x315/0x500 [ 1541.828992][T24555] ? import_iovec+0x6f/0xa0 [ 1541.833510][T24555] ___sys_sendmsg+0x2a2/0x360 [ 1541.838201][T24555] ? __sys_sendmsg+0x290/0x290 [ 1541.843000][T24555] ? trace_call_bpf+0xbf/0x6b0 [ 1541.847803][T24555] __se_sys_sendmsg+0x1bb/0x2a0 [ 1541.852667][T24555] ? __x64_sys_sendmsg+0x80/0x80 [ 1541.857628][T24555] ? lockdep_hardirqs_on+0x94/0x140 [ 1541.862841][T24555] do_syscall_64+0x4c/0xa0 [ 1541.867267][T24555] ? clear_bhb_loop+0x60/0xb0 [ 1541.871961][T24555] ? clear_bhb_loop+0x60/0xb0 [ 1541.876696][T24555] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1541.882632][T24555] RIP: 0033:0x7f884879ce59 [ 1541.887079][T24555] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.906703][T24555] RSP: 002b:00007f88495bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1541.915132][T24555] RAX: ffffffffffffffda RBX: 00007f8848a15fa0 RCX: 00007f884879ce59 [ 1541.923116][T24555] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1541.931095][T24555] RBP: 00007f8848832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1541.939075][T24555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1541.947057][T24555] R13: 00007f8848a16038 R14: 00007f8848a15fa0 R15: 00007ffce60f7348 [ 1541.955056][T24555] [ 1542.490532][T24563] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6236'. [ 1542.529073][T24568] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6237'. [ 1543.580870][T24594] netlink: 'syz.3.6243': attribute type 25 has an invalid length. [ 1544.682599][T24613] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6250'. [ 1545.843492][T24620] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6253'. [ 1545.909025][T24621] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6252'. [ 1545.920041][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.926560][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.056027][T24640] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.6255'. [ 1547.109350][T24640] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1547.144010][T24640] CPU: 0 PID: 24640 Comm: syz.4.6255 Not tainted syzkaller #0 [ 1547.151558][T24640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1547.161656][T24640] Call Trace: [ 1547.164967][T24640] [ 1547.167934][T24640] dump_stack_lvl+0x188/0x24e [ 1547.172664][T24640] ? show_regs_print_info+0x12/0x12 [ 1547.177981][T24640] ? load_image+0x400/0x400 [ 1547.182509][T24640] sysfs_warn_dup+0x8a/0xa0 [ 1547.187027][T24640] sysfs_do_create_link_sd+0xc0/0x110 [ 1547.192418][T24640] device_add+0x7f6/0x1000 [ 1547.196842][T24640] wiphy_register+0x1d9f/0x2ac0 [ 1547.201705][T24640] ? cfg80211_event_work+0x40/0x40 [ 1547.206816][T24640] ? minstrel_ht_alloc+0x894/0xa20 [ 1547.211934][T24640] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1547.218030][T24640] ieee80211_register_hw+0x2d00/0x39f0 [ 1547.223513][T24640] ? ieee80211_register_hw+0xec1/0x39f0 [ 1547.229069][T24640] ? ieee80211_register_hw+0xec1/0x39f0 [ 1547.234645][T24640] ? ieee80211_tasklet_handler+0x20/0x20 [ 1547.240287][T24640] ? memset+0x1e/0x40 [ 1547.244292][T24640] ? __hrtimer_init+0x186/0x270 [ 1547.249165][T24640] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1547.254907][T24640] hwsim_new_radio_nl+0xafa/0xce0 [ 1547.259959][T24640] genl_family_rcv_msg_doit+0x22a/0x330 [ 1547.265525][T24640] ? end_current_label_crit_section+0x170/0x170 [ 1547.271769][T24640] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1547.277668][T24640] ? bpf_lsm_capable+0x5/0x10 [ 1547.282395][T24640] ? security_capable+0x85/0xb0 [ 1547.287285][T24640] genl_rcv_msg+0x604/0x790 [ 1547.291820][T24640] ? genl_bind+0x360/0x360 [ 1547.296252][T24640] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1547.302614][T24640] netlink_rcv_skb+0x1fb/0x450 [ 1547.307410][T24640] ? genl_bind+0x360/0x360 [ 1547.311852][T24640] ? netlink_ack+0x1170/0x1170 [ 1547.316660][T24640] ? down_read+0x1a8/0x2d0 [ 1547.321106][T24640] genl_rcv+0x24/0x40 [ 1547.325104][T24640] netlink_unicast+0x74d/0x8d0 [ 1547.329876][T24640] netlink_sendmsg+0x8ad/0xbd0 [ 1547.334669][T24640] ? netlink_getsockopt+0x550/0x550 [ 1547.339871][T24640] ? aa_sock_msg_perm+0x94/0x150 [ 1547.344813][T24640] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1547.350100][T24640] ? security_socket_sendmsg+0x7c/0xa0 [ 1547.355560][T24640] ? netlink_getsockopt+0x550/0x550 [ 1547.360779][T24640] ____sys_sendmsg+0x5be/0x970 [ 1547.365567][T24640] ? __sys_sendmsg_sock+0x30/0x30 [ 1547.370603][T24640] ? __import_iovec+0x315/0x500 [ 1547.375471][T24640] ? import_iovec+0x6f/0xa0 [ 1547.380063][T24640] ___sys_sendmsg+0x2a2/0x360 [ 1547.384744][T24640] ? __sys_sendmsg+0x290/0x290 [ 1547.389517][T24640] ? trace_call_bpf+0xbf/0x6b0 [ 1547.394313][T24640] __se_sys_sendmsg+0x1bb/0x2a0 [ 1547.399160][T24640] ? ct_nmi_exit+0x145/0x1c0 [ 1547.403767][T24640] ? __x64_sys_sendmsg+0x80/0x80 [ 1547.408728][T24640] ? lockdep_hardirqs_on+0x94/0x140 [ 1547.413979][T24640] do_syscall_64+0x4c/0xa0 [ 1547.418400][T24640] ? clear_bhb_loop+0x60/0xb0 [ 1547.423176][T24640] ? clear_bhb_loop+0x60/0xb0 [ 1547.427882][T24640] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1547.433790][T24640] RIP: 0033:0x7f1c9e59ce59 [ 1547.438279][T24640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1547.457902][T24640] RSP: 002b:00007f1c9f435028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1547.466332][T24640] RAX: ffffffffffffffda RBX: 00007f1c9e815fa0 RCX: 00007f1c9e59ce59 [ 1547.474318][T24640] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1547.482302][T24640] RBP: 00007f1c9e632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1547.490289][T24640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1547.498271][T24640] R13: 00007f1c9e816038 R14: 00007f1c9e815fa0 R15: 00007ffec1e31d88 [ 1547.506273][T24640] [ 1547.847187][T24653] netlink: 'syz.1.6259': attribute type 25 has an invalid length. [ 1550.391292][T24686] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1553.222750][T24711] netlink: 'syz.3.6273': attribute type 25 has an invalid length. [ 1553.351799][T24718] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6275'. [ 1554.114709][T24722] netlink: 'syz.1.6287': attribute type 25 has an invalid length. [ 1558.550885][T24783] netlink: 'syz.0.6292': attribute type 25 has an invalid length. [ 1559.034535][T24794] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1559.204338][T24794] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1559.498769][T24794] CPU: 1 PID: 24794 Comm: syz.0.6295 Not tainted syzkaller #0 [ 1559.506325][T24794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1559.516434][T24794] Call Trace: [ 1559.519762][T24794] [ 1559.522744][T24794] dump_stack_lvl+0x188/0x24e [ 1559.527494][T24794] ? show_regs_print_info+0x12/0x12 [ 1559.532755][T24794] ? load_image+0x400/0x400 [ 1559.537374][T24794] sysfs_warn_dup+0x8a/0xa0 [ 1559.541944][T24794] sysfs_do_create_link_sd+0xc0/0x110 [ 1559.547384][T24794] device_add+0x7f6/0x1000 [ 1559.551904][T24794] wiphy_register+0x1d9f/0x2ac0 [ 1559.556882][T24794] ? cfg80211_event_work+0x40/0x40 [ 1559.562036][T24794] ? minstrel_ht_alloc+0x894/0xa20 [ 1559.567205][T24794] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1559.573316][T24794] ieee80211_register_hw+0x2d00/0x39f0 [ 1559.578836][T24794] ? ieee80211_register_hw+0xec1/0x39f0 [ 1559.584408][T24794] ? ieee80211_register_hw+0xec1/0x39f0 [ 1559.590000][T24794] ? ieee80211_tasklet_handler+0x20/0x20 [ 1559.595706][T24794] ? memset+0x1e/0x40 [ 1559.599719][T24794] ? __hrtimer_init+0x186/0x270 [ 1559.604618][T24794] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1559.610506][T24794] hwsim_new_radio_nl+0xafa/0xce0 [ 1559.615597][T24794] genl_family_rcv_msg_doit+0x22a/0x330 [ 1559.621209][T24794] ? end_current_label_crit_section+0x170/0x170 [ 1559.627492][T24794] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1559.633440][T24794] ? bpf_lsm_capable+0x5/0x10 [ 1559.638141][T24794] ? security_capable+0x85/0xb0 [ 1559.643046][T24794] genl_rcv_msg+0x604/0x790 [ 1559.647603][T24794] ? genl_bind+0x360/0x360 [ 1559.652046][T24794] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1559.658462][T24794] netlink_rcv_skb+0x1fb/0x450 [ 1559.663258][T24794] ? genl_bind+0x360/0x360 [ 1559.667711][T24794] ? netlink_ack+0x1170/0x1170 [ 1559.672531][T24794] ? down_read+0x1a8/0x2d0 [ 1559.676983][T24794] genl_rcv+0x24/0x40 [ 1559.680989][T24794] netlink_unicast+0x74d/0x8d0 [ 1559.685896][T24794] netlink_sendmsg+0x8ad/0xbd0 [ 1559.690709][T24794] ? netlink_getsockopt+0x550/0x550 [ 1559.695945][T24794] ? aa_sock_msg_perm+0x94/0x150 [ 1559.700912][T24794] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1559.706223][T24794] ? security_socket_sendmsg+0x7c/0xa0 [ 1559.711739][T24794] ? netlink_getsockopt+0x550/0x550 [ 1559.716959][T24794] ____sys_sendmsg+0x5be/0x970 [ 1559.721779][T24794] ? __sys_sendmsg_sock+0x30/0x30 [ 1559.726834][T24794] ? __import_iovec+0x315/0x500 [ 1559.731738][T24794] ? import_iovec+0x6f/0xa0 [ 1559.736303][T24794] ___sys_sendmsg+0x2a2/0x360 [ 1559.741028][T24794] ? try_to_wake_up+0x67c/0x1080 [ 1559.746016][T24794] ? __sys_sendmsg+0x290/0x290 [ 1559.750998][T24794] __se_sys_sendmsg+0x1bb/0x2a0 [ 1559.755905][T24794] ? __x64_sys_sendmsg+0x80/0x80 [ 1559.760929][T24794] ? lockdep_hardirqs_on+0x94/0x140 [ 1559.766172][T24794] do_syscall_64+0x4c/0xa0 [ 1559.770641][T24794] ? clear_bhb_loop+0x60/0xb0 [ 1559.775373][T24794] ? clear_bhb_loop+0x60/0xb0 [ 1559.780088][T24794] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1559.786012][T24794] RIP: 0033:0x7f25cd19ce59 [ 1559.790458][T24794] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1559.810094][T24794] RSP: 002b:00007f25cdfe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1559.818541][T24794] RAX: ffffffffffffffda RBX: 00007f25cd415fa0 RCX: 00007f25cd19ce59 [ 1559.826545][T24794] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1559.834563][T24794] RBP: 00007f25cd232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1559.842559][T24794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1559.850571][T24794] R13: 00007f25cd416038 R14: 00007f25cd415fa0 R15: 00007fff2981b3d8 [ 1559.858617][T24794] [ 1564.706548][T24817] netlink: 'syz.0.6305': attribute type 25 has an invalid length. [ 1568.083516][T24840] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.6309'. [ 1568.198950][T24840] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 1568.332164][T24840] CPU: 1 PID: 24840 Comm: syz.3.6309 Not tainted syzkaller #0 [ 1568.339702][T24840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1568.349793][T24840] Call Trace: [ 1568.353110][T24840] [ 1568.356111][T24840] dump_stack_lvl+0x188/0x24e [ 1568.360835][T24840] ? show_regs_print_info+0x12/0x12 [ 1568.366088][T24840] ? load_image+0x400/0x400 [ 1568.370659][T24840] sysfs_warn_dup+0x8a/0xa0 [ 1568.375225][T24840] sysfs_do_create_link_sd+0xc0/0x110 [ 1568.380636][T24840] device_add+0x7f6/0x1000 [ 1568.385098][T24840] wiphy_register+0x1d9f/0x2ac0 [ 1568.390011][T24840] ? cfg80211_event_work+0x40/0x40 [ 1568.395168][T24840] ? minstrel_ht_alloc+0x894/0xa20 [ 1568.400322][T24840] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1568.406462][T24840] ieee80211_register_hw+0x2d00/0x39f0 [ 1568.412041][T24840] ? ieee80211_register_hw+0xec1/0x39f0 [ 1568.417602][T24840] ? ieee80211_register_hw+0xec1/0x39f0 [ 1568.423180][T24840] ? ieee80211_tasklet_handler+0x20/0x20 [ 1568.428839][T24840] ? memset+0x1e/0x40 [ 1568.432835][T24840] ? __hrtimer_init+0x186/0x270 [ 1568.437710][T24840] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 1568.443470][T24840] hwsim_new_radio_nl+0xafa/0xce0 [ 1568.448524][T24840] genl_family_rcv_msg_doit+0x22a/0x330 [ 1568.454092][T24840] ? end_current_label_crit_section+0x170/0x170 [ 1568.460379][T24840] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1568.466292][T24840] ? bpf_lsm_capable+0x5/0x10 [ 1568.470991][T24840] ? security_capable+0x85/0xb0 [ 1568.475948][T24840] genl_rcv_msg+0x604/0x790 [ 1568.480472][T24840] ? genl_bind+0x360/0x360 [ 1568.484896][T24840] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 1568.491261][T24840] netlink_rcv_skb+0x1fb/0x450 [ 1568.496037][T24840] ? genl_bind+0x360/0x360 [ 1568.500467][T24840] ? netlink_ack+0x1170/0x1170 [ 1568.505253][T24840] ? down_read+0x1a8/0x2d0 [ 1568.509684][T24840] genl_rcv+0x24/0x40 [ 1568.513677][T24840] netlink_unicast+0x74d/0x8d0 [ 1568.518470][T24840] netlink_sendmsg+0x8ad/0xbd0 [ 1568.523264][T24840] ? netlink_getsockopt+0x550/0x550 [ 1568.528478][T24840] ? aa_sock_msg_perm+0x94/0x150 [ 1568.533429][T24840] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1568.538724][T24840] ? security_socket_sendmsg+0x7c/0xa0 [ 1568.544194][T24840] ? netlink_getsockopt+0x550/0x550 [ 1568.549406][T24840] ____sys_sendmsg+0x5be/0x970 [ 1568.554212][T24840] ? __sys_sendmsg_sock+0x30/0x30 [ 1568.559261][T24840] ? __import_iovec+0x315/0x500 [ 1568.564156][T24840] ? import_iovec+0x6f/0xa0 [ 1568.568708][T24840] ___sys_sendmsg+0x2a2/0x360 [ 1568.573418][T24840] ? try_to_wake_up+0x6ae/0x1080 [ 1568.578384][T24840] ? __sys_sendmsg+0x290/0x290 [ 1568.583217][T24840] __se_sys_sendmsg+0x1bb/0x2a0 [ 1568.588111][T24840] ? __x64_sys_sendmsg+0x80/0x80 [ 1568.593107][T24840] ? lockdep_hardirqs_on+0x94/0x140 [ 1568.598327][T24840] do_syscall_64+0x4c/0xa0 [ 1568.602754][T24840] ? clear_bhb_loop+0x60/0xb0 [ 1568.607444][T24840] ? clear_bhb_loop+0x60/0xb0 [ 1568.612138][T24840] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1568.618134][T24840] RIP: 0033:0x7f884879ce59 [ 1568.622561][T24840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1568.642188][T24840] RSP: 002b:00007f88495bd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1568.650616][T24840] RAX: ffffffffffffffda RBX: 00007f8848a15fa0 RCX: 00007f884879ce59 [ 1568.658618][T24840] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1568.666601][T24840] RBP: 00007f8848832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1568.674581][T24840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1568.682562][T24840] R13: 00007f8848a16038 R14: 00007f8848a15fa0 R15: 00007ffce60f7348 [ 1568.690560][T24840] [ 1572.075838][T24872] netlink: 'syz.0.6317': attribute type 25 has an invalid length. [ 1580.061145][T24949] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6336'. [ 1580.625633][T24962] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6341'. [ 1581.615947][T24970] netlink: 'syz.2.6343': attribute type 25 has an invalid length. [ 1587.114649][T25007] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6352'. [ 1588.141454][T25018] netlink: 'syz.0.6355': attribute type 25 has an invalid length. [ 1590.653200][T25046] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.6362'. [ 1592.596851][T25060] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6365'. [ 1593.786198][T25080] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.6373'. [ 1597.487226][T25110] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1600.676490][T25132] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.6387'. [ 1603.658981][T25154] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6393'. [ 1606.040230][T25163] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6395'. [ 1607.496573][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.503008][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.329051][T25168] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6396'. [ 1609.433557][T25175] netlink: 'syz.1.6398': attribute type 25 has an invalid length. [ 1610.673614][T25200] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6405'. [ 1616.246428][T25264] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6420'. [ 1620.807747][T25294] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6428'. [ 1628.139651][T25346] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6441'. [ 1634.310497][T25392] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6453'. [ 1635.094031][T25406] netlink: 'syz.2.6459': attribute type 25 has an invalid length. [ 1638.140204][T25440] netlink: 64859 bytes leftover after parsing attributes in process `syz.4.6467'. [ 1639.355248][T25449] netlink: 'syz.4.6470': attribute type 25 has an invalid length. [ 1642.695658][ T40] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1642.915557][ T4285] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1642.926492][T25483] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1642.936696][T25483] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1643.055507][T25483] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1643.065599][T25483] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1643.088361][T25483] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1643.216005][ T40] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.587511][ T40] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.808297][ T40] batman_adv: batadv0: Removing interface: netdevsim0 [ 1644.203952][T25498] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6482'. [ 1644.287073][T25480] chnl_net:caif_netlink_parms(): no params data found [ 1644.580176][ T40] device 0 left promiscuous mode [ 1644.890514][T25480] bridge0: port 1(bridge_slave_0) entered blocking state [ 1644.897885][T25480] bridge0: port 1(bridge_slave_0) entered disabled state [ 1644.906489][T25480] device bridge_slave_0 entered promiscuous mode [ 1644.916282][T25480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1644.924041][T25480] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.934802][T25480] device bridge_slave_1 entered promiscuous mode [ 1644.949122][ T40] tipc: Left network mode [ 1645.141354][T25483] Bluetooth: hci1: command 0x0409 tx timeout [ 1646.162286][T25480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1646.484810][T25480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1647.048886][T25480] team0: Port device team_slave_0 added [ 1647.096277][T25480] team0: Port device team_slave_1 added [ 1647.223855][T25483] Bluetooth: hci1: command 0x041b tx timeout [ 1647.487793][T25480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1647.509987][T25480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.585264][T25480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1647.706877][T25480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1647.716215][T25480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1647.989257][T25480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1648.567372][T25480] device hsr_slave_0 entered promiscuous mode [ 1648.623304][T25480] device hsr_slave_1 entered promiscuous mode [ 1649.301956][ T4289] Bluetooth: hci1: command 0x040f tx timeout [ 1649.576515][ T40] team0: Port device wlan1 removed [ 1649.974858][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1650.010993][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1650.038497][T25580] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6495'. [ 1650.051718][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1650.059182][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1650.095304][ T40] bridge0: port 4(dummy0) entered disabled state [ 1650.108628][ T40] device batadv0 left promiscuous mode [ 1650.116157][ T40] bridge0: port 3(batadv0) entered disabled state [ 1650.126653][ T40] device bridge_slave_1 left promiscuous mode [ 1650.136083][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1650.147951][ T40] device bridge_slave_0 left promiscuous mode [ 1650.156101][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1650.214538][ T40] device veth1_macvtap left promiscuous mode [ 1650.221071][ T40] device veth0_macvtap left promiscuous mode [ 1650.227709][ T40] device veth1_vlan left promiscuous mode [ 1650.233901][ T40] device veth0_vlan left promiscuous mode [ 1651.381879][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 1651.926897][ T40] team0 (unregistering): Port device hsr_slave_0 removed [ 1652.088357][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1652.135038][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1652.427775][ T40] bond0 (unregistering): (slave team0): Releasing backup interface [ 1652.463727][ T40] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1652.473742][ T40] bond0 (unregistering): Released all slaves [ 1653.306540][T25480] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1653.349761][T25480] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1653.373644][T25480] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1653.433755][T25480] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1654.307775][T25480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1654.495410][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1654.548152][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1654.654362][T25480] 8021q: adding VLAN 0 to HW filter on device team0 [ 1654.703053][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1654.785518][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1654.892163][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 1654.899329][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1655.112435][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1655.192823][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1655.249884][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1655.414973][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1655.422203][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1655.483247][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1655.565700][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1655.582956][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1655.605560][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1655.681878][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1655.738651][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1655.812680][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1655.836927][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1655.884519][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1655.924100][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1655.963506][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1655.995484][T25480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1656.820944][T25649] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.6510'. [ 1657.473367][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1657.480953][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1657.528438][T25480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1658.441016][T25692] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1660.044321][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1660.112174][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1660.255024][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1660.285995][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1660.415411][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1660.522035][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1660.616109][T25480] device veth0_vlan entered promiscuous mode [ 1660.712931][T25480] device veth1_vlan entered promiscuous mode [ 1660.923810][T25730] device syzkaller0 entered promiscuous mode [ 1660.994651][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1661.004452][T25730] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 1661.024893][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1661.047724][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1661.090557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1661.135795][T25480] device veth0_macvtap entered promiscuous mode [ 1661.206773][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1661.228516][T25480] device veth1_macvtap entered promiscuous mode [ 1661.326620][T25480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1661.391462][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1661.421962][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1661.465711][T25480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1661.491921][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1661.511853][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1661.544020][T25480] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.580580][T25480] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.608612][T25480] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.639104][T25480] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1661.661528][T25744] netlink: 168 bytes leftover after parsing attributes in process `syz.0.6530'. [ 1661.683999][ T56] bridge0: port 5(team0) entered disabled state [ 1661.873325][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.910626][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1661.960691][T25751] netlink: 'syz.1.6533': attribute type 10 has an invalid length. [ 1661.978934][T25751] device dummy0 left promiscuous mode [ 1661.984911][T25751] bridge0: port 3(dummy0) entered disabled state [ 1662.008825][T25751] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1662.031890][ T5737] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1662.052007][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.060455][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.084976][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1662.444648][T25773] device syzkaller0 entered promiscuous mode [ 1663.122301][T25789] bridge0: port 4(team0) entered disabled state [ 1663.128854][T25789] bridge0: port 3(dummy0) entered disabled state [ 1663.135488][T25789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.142735][T25789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.313458][T25792] bridge0: port 4(team0) entered disabled state [ 1663.346548][T25792] bridge0: port 3(dummy0) entered disabled state [ 1663.395676][T25792] device bridge_slave_1 left promiscuous mode [ 1663.416047][T25483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1663.425585][T25483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1663.435701][T25792] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.446455][T25483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1663.456223][T25483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1663.464522][T25483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1663.473134][T25483] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1663.481771][T25792] device bridge_slave_0 left promiscuous mode [ 1663.499056][T25792] bridge0: port 1(bridge_slave_0) entered disabled state [ 1663.546811][T25792] bond0: (slave bridge0): Releasing backup interface [ 1663.726449][T25809] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6551'. [ 1664.005839][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1664.068093][ T40] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.308863][ T40] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.663180][ T40] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1665.216403][T25799] chnl_net:caif_netlink_parms(): no params data found [ 1665.288889][ T40] tipc: Left network mode [ 1665.541895][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1665.613922][T25853] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1665.728795][T25855] netlink: 'syz.0.6565': attribute type 10 has an invalid length. [ 1665.761810][T25855] device dummy0 left promiscuous mode [ 1665.767513][T25855] bridge0: port 4(dummy0) entered disabled state [ 1665.832930][T25855] team0: Device dummy0 is up. Set it down before adding it as a team port [ 1666.175389][T25799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.241406][T25799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.249653][T25799] device bridge_slave_0 entered promiscuous mode [ 1666.564012][T25799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.573672][T25799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.594042][T25799] device bridge_slave_1 entered promiscuous mode [ 1667.554820][T25799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1667.614012][T25876] device veth0_vlan left promiscuous mode [ 1667.620502][T25876] device veth0_vlan entered promiscuous mode [ 1667.626977][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 1667.646153][T25799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1667.686318][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1667.702791][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1667.721314][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1667.801376][T25799] team0: Port device team_slave_0 added [ 1667.811007][T25799] team0: Port device team_slave_1 added [ 1667.869412][T25799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1667.876784][T25799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.905833][T25799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1667.920078][T25799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1667.929710][T25799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1667.959511][T25799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1668.036646][T25799] device hsr_slave_0 entered promiscuous mode [ 1668.044518][T25799] device hsr_slave_1 entered promiscuous mode [ 1668.054471][T25799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1668.063267][T25799] Cannot create hsr debugfs directory [ 1668.480703][ T40] device wlan1 left promiscuous mode [ 1668.551396][ T40] team0: Port device wlan1 removed [ 1668.607606][T25899] syz.3.6576[25899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.607785][T25899] syz.3.6576[25899] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.821035][T25907] syz.0.6586[25907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.833071][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.861449][T25907] syz.0.6586[25907] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1668.874944][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.119130][ T40] bridge0: port 4(team0) entered disabled state [ 1669.141649][ T40] device bridge_slave_1 left promiscuous mode [ 1669.148423][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 1669.158000][ T40] device bridge_slave_0 left promiscuous mode [ 1669.164371][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 1669.183144][ T40] device veth1_macvtap left promiscuous mode [ 1669.189269][ T40] device veth0_macvtap left promiscuous mode [ 1669.195704][ T40] device veth1_vlan left promiscuous mode [ 1669.201757][ T40] device veth0_vlan left promiscuous mode [ 1669.613972][ T40] device hsr_slave_0 left promiscuous mode [ 1669.620597][ T40] team0 (unregistering): Port device hsr_slave_0 removed [ 1669.706235][T25483] Bluetooth: hci0: command 0x040f tx timeout [ 1669.738000][ T40] device team_slave_1 left promiscuous mode [ 1669.744664][ T40] team0 (unregistering): Port device team_slave_1 removed [ 1669.788888][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1670.064508][ T40] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1670.074166][ T40] bond0 (unregistering): Released all slaves [ 1670.178001][T25914] netlink: 168 bytes leftover after parsing attributes in process `syz.3.6579'. [ 1670.761053][T25799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1670.829470][T25929] bridge0: port 3(dummy0) entered disabled state [ 1670.836071][T25929] bridge0: port 2(bridge_slave_1) entered disabled state [ 1670.843274][T25929] bridge0: port 1(bridge_slave_0) entered disabled state [ 1670.936034][T25931] bridge0: port 4(team0) entered disabled state [ 1670.987835][T25931] bridge0: port 3(dummy0) entered disabled state [ 1671.008881][T25931] device bridge_slave_1 left promiscuous mode [ 1671.025579][T25931] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.053900][T25931] device bridge_slave_0 left promiscuous mode [ 1671.075070][T25931] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.150680][T25931] bond0: (slave bridge0): Releasing backup interface [ 1671.232063][T25799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1671.292500][T25799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1671.325908][T25799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1671.781501][T25483] Bluetooth: hci0: command 0x0419 tx timeout [ 1671.864169][T25946] device veth0_vlan left promiscuous mode [ 1671.871010][T25946] device veth0_vlan entered promiscuous mode [ 1672.064979][T25799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.274225][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1672.283852][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1672.315990][T25799] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.511683][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1672.537879][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1672.630146][T23607] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.637352][T23607] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.684805][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1672.754935][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1672.802653][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1672.827374][T23607] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.834612][T23607] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1673.039367][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1673.185994][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1673.700155][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1673.772426][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1674.052210][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1674.266503][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1674.516883][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1674.692815][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1674.771817][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1675.062871][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1675.244710][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1675.744228][T25799] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1679.565450][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1679.582018][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1679.616432][T25799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1679.696106][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1679.713913][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1679.981823][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1679.996557][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1680.115597][T25977] À: port 1(vlan0) entered disabled state [ 1680.282665][T25799] device veth0_vlan entered promiscuous mode [ 1680.290157][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1680.299260][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1680.397150][T25799] device veth1_vlan entered promiscuous mode [ 1680.612370][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1680.650674][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1680.761950][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1680.774146][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1680.803956][T25799] device veth0_macvtap entered promiscuous mode [ 1680.830163][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1680.876867][T25799] device veth1_macvtap entered promiscuous mode [ 1680.968499][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1681.009639][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.044313][T25799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1681.069153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1681.084535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1681.122040][T25799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1681.192139][T25799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1681.250652][T25799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1681.340618][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1681.353496][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1681.401622][T25799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.436176][T25799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.481207][T25799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.516782][T25799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1681.606334][T25997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.613771][T25997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1681.717297][T25997] device bridge_slave_1 left promiscuous mode [ 1681.729549][T25997] bridge0: port 2(bridge_slave_1) entered disabled state [ 1681.855235][T25997] device bridge_slave_0 left promiscuous mode [ 1681.936897][T25997] bridge0: port 1(bridge_slave_0) entered disabled state [ 1682.239045][T25477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.267624][T25477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.333451][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1682.360633][T25983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1682.370494][T25983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1682.383859][T25477] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1683.361011][T25483] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1683.377036][T25483] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1683.378777][T23607] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.406965][T25483] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1683.418086][T25483] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1683.453477][T25483] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1683.463214][T25483] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1683.526640][T23607] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.624683][T23607] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1683.738596][T23607] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1684.465704][T26013] chnl_net:caif_netlink_parms(): no params data found [ 1684.649393][T23607] device 0 left promiscuous mode [ 1684.846032][T23607] tipc: Left network mode [ 1685.178909][T26013] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.186400][T26013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.196411][T26013] device bridge_slave_0 entered promiscuous mode [ 1685.242422][T26013] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.250203][T26013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.259103][T26013] device bridge_slave_1 entered promiscuous mode [ 1685.302061][T26013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.329395][T26013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1685.554085][T25483] Bluetooth: hci3: command 0x0409 tx timeout [ 1685.590641][T26013] team0: Port device team_slave_0 added [ 1685.599303][T26013] team0: Port device team_slave_1 added [ 1685.636183][T26013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1685.810638][T26013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1686.184376][T26013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.341737][T26013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.354637][T26013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1686.394736][T26013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.488033][T26013] device hsr_slave_0 entered promiscuous mode [ 1686.497120][T26013] device hsr_slave_1 entered promiscuous mode [ 1686.504545][T26013] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1686.513052][T26013] Cannot create hsr debugfs directory [ 1687.627891][T25483] Bluetooth: hci3: command 0x041b tx timeout [ 1688.245835][T23607] device wlan1 left promiscuous mode [ 1688.266156][T23607] team0: Port device wlan1 removed [ 1688.371877][T26080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.379245][T26080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1689.701476][T25483] Bluetooth: hci3: command 0x040f tx timeout [ 1690.314506][T23607] device veth1_macvtap left promiscuous mode [ 1690.320663][T23607] device veth0_macvtap left promiscuous mode [ 1690.497705][T23607] device veth1_vlan left promiscuous mode [ 1690.690140][T23607] device veth0_vlan left promiscuous mode [ 1691.851732][T25483] Bluetooth: hci3: command 0x0419 tx timeout [ 1693.189266][T23607] device hsr_slave_0 left promiscuous mode [ 1693.198691][T23607] team0 (unregistering): Port device hsr_slave_0 removed [ 1693.378928][T23607] device team_slave_1 left promiscuous mode [ 1693.389113][T23607] team0 (unregistering): Port device team_slave_1 removed [ 1693.455518][T23607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1693.873096][T23607] bond0 (unregistering): Released all slaves [ 1693.967447][T26013] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1693.994864][T26013] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1694.105365][T26013] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1694.124856][T26013] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1695.664329][T26013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.931343][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1695.939267][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1696.233303][T26013] 8021q: adding VLAN 0 to HW filter on device team0 [ 1700.900126][ T4289] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1700.910111][ T4289] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1700.934246][ T4289] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1700.943064][ T4289] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1700.952968][ T4289] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1700.960264][ T4289] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1702.138347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1702.147464][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1702.156359][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1702.163476][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1702.176154][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1702.186028][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1702.194747][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1702.201903][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1702.209708][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1702.368523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1702.398347][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1702.434809][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1702.472598][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1702.525191][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1702.536167][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1702.549121][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1702.564752][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1702.574735][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1702.978183][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1702.992614][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1703.062602][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 1703.076421][T26013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1703.858213][T26133] chnl_net:caif_netlink_parms(): no params data found [ 1704.997298][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1705.046109][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1705.141274][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 1705.145276][T26133] bridge0: port 1(bridge_slave_0) entered blocking state [ 1705.172162][T26133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1705.196919][T26133] device bridge_slave_0 entered promiscuous mode [ 1705.266765][T26013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1705.307639][T26133] bridge0: port 2(bridge_slave_1) entered blocking state [ 1705.315296][T26133] bridge0: port 2(bridge_slave_1) entered disabled state [ 1705.336186][T26133] device bridge_slave_1 entered promiscuous mode [ 1705.540821][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1705.563098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1705.669748][T26133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1705.730760][T26013] device veth0_vlan entered promiscuous mode [ 1705.764940][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1705.812213][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1705.820969][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1705.837552][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1705.854846][T26133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1705.980646][T26013] device veth1_vlan entered promiscuous mode [ 1706.018737][T26133] team0: Port device team_slave_0 added [ 1706.057800][T26133] team0: Port device team_slave_1 added [ 1706.129307][T26133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1706.144035][T26133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.173344][T26133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1706.205289][T26013] device veth0_macvtap entered promiscuous mode [ 1706.216911][T26013] device veth1_macvtap entered promiscuous mode [ 1706.236074][T26133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1706.256154][T26133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1706.288363][T26133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1706.346163][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1706.372112][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1706.380800][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1706.447069][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1707.026128][T26013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.037567][T26013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.047698][T26013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1707.058467][T26013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.070924][T26013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1707.097540][T26182] device sit0 entered promiscuous mode [ 1707.117920][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1707.131246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1707.152642][T26013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.163514][T26013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.173790][T26013] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1707.185311][T26013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1707.197507][T26013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1707.210446][T26013] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.219662][T26013] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.228793][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 1707.249277][T26013] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.258387][T26013] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1707.298890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1707.309303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1707.339315][T26186] device veth1_macvtap left promiscuous mode [ 1707.381020][T26133] device hsr_slave_0 entered promiscuous mode [ 1707.388190][T26133] device hsr_slave_1 entered promiscuous mode [ 1707.395571][T26133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1707.403264][T26133] Cannot create hsr debugfs directory [ 1707.425042][T26186] device veth1_macvtap entered promiscuous mode [ 1707.435448][T26186] device macsec0 entered promiscuous mode [ 1707.691296][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.699173][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.738447][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1707.812199][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1707.820254][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.859092][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1708.019095][T26133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1708.061850][T26133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1708.099657][T26198] device syzkaller0 entered promiscuous mode [ 1708.192634][T26133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1708.257615][T26133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1708.661768][T23607] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.763670][T26214] device sit0 entered promiscuous mode [ 1708.845850][T23607] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1708.867042][T26133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1708.904258][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1708.916077][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1709.076397][T23607] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.383240][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 1709.599357][T26133] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.623826][T26227] syz.3.6658 (26227) used obsolete PPPIOCDETACH ioctl [ 1709.678706][T23607] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1709.711559][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1709.720355][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1709.816468][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1709.823724][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1709.892272][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1709.917843][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1709.952031][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1709.959226][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1709.968475][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1709.977605][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1710.059248][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1710.092535][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1710.138310][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1710.157425][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1710.202156][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1710.221872][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1710.260912][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1710.297037][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1710.345868][T26133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1710.357948][T26133] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1710.367418][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1710.384054][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1710.733705][T26237] device syzkaller0 entered promiscuous mode [ 1711.248396][T26259] device syzkaller0 entered promiscuous mode [ 1711.564728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1711.627981][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1711.674719][T26133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1716.109650][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1716.125354][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1716.192765][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1716.215138][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1716.237704][T26133] device veth0_vlan entered promiscuous mode [ 1716.416840][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1716.433568][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1716.485644][T26133] device veth1_vlan entered promiscuous mode [ 1716.763197][T23607] device hsr_slave_0 left promiscuous mode [ 1716.773018][T23607] device hsr_slave_1 left promiscuous mode [ 1716.791726][T23607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1716.799911][T23607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1716.840186][T23607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1716.855757][T23607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1716.881890][T23607] device bridge_slave_1 left promiscuous mode [ 1716.916850][T23607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.950543][T23607] device bridge_slave_0 left promiscuous mode [ 1716.965646][T23607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1717.024471][T23607] device veth1_macvtap left promiscuous mode [ 1717.040824][T23607] device veth0_macvtap left promiscuous mode [ 1717.051966][T23607] device veth1_vlan left promiscuous mode [ 1717.067373][T23607] device veth0_vlan left promiscuous mode [ 1717.715806][T23607] team0 (unregistering): Port device team_slave_1 removed [ 1717.758012][T23607] team0 (unregistering): Port device team_slave_0 removed [ 1717.799110][T23607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1717.841406][T23607] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1718.150200][T23607] bond0 (unregistering): Released all slaves [ 1718.291588][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1718.299848][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1718.326794][T26133] device veth0_macvtap entered promiscuous mode [ 1718.344270][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1718.355360][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1718.364374][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1718.376741][T26133] device veth1_macvtap entered promiscuous mode [ 1718.457854][T26133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.490711][T26133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.500933][T26133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1718.519174][T26133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.537241][T26133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1718.547247][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1718.563175][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1718.577772][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1718.589960][T26133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.601296][T26133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.612284][T26133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1718.628012][T26133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1718.639713][T26133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1718.652647][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1718.679851][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1718.720876][T26133] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.730601][T26133] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.761580][T26133] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1718.787257][T26133] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1719.343230][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.369458][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.384228][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1719.591715][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1719.620150][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1719.652634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1722.217518][T26397] device syzkaller0 entered promiscuous mode [ 1723.376533][T25483] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1723.386785][T25483] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1723.396337][T25483] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1723.406510][T25483] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1723.451697][T25483] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1723.460458][ T4285] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1725.551503][ T4285] Bluetooth: hci0: command 0x0409 tx timeout [ 1725.638602][T26425] device syzkaller0 entered promiscuous mode [ 1727.627087][T25483] Bluetooth: hci0: command 0x041b tx timeout [ 1729.702509][T25483] Bluetooth: hci0: command 0x040f tx timeout [ 1730.201649][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.208028][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1731.781836][ T4285] Bluetooth: hci0: command 0x0419 tx timeout [ 1734.369615][T26422] chnl_net:caif_netlink_parms(): no params data found [ 1734.713929][T26422] bridge0: port 1(bridge_slave_0) entered blocking state [ 1734.740910][T26422] bridge0: port 1(bridge_slave_0) entered disabled state [ 1734.770427][T26422] device bridge_slave_0 entered promiscuous mode [ 1734.816700][T26422] bridge0: port 2(bridge_slave_1) entered blocking state [ 1734.855671][T26422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1734.872819][T26422] device bridge_slave_1 entered promiscuous mode [ 1735.373376][T26422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1735.502951][T26422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1736.056098][T23607] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.185205][T26422] team0: Port device team_slave_0 added [ 1736.226612][T23607] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1736.262996][T26422] team0: Port device team_slave_1 added [ 1736.580912][T26422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1736.606026][T26422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.782760][T26422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1736.795695][T26422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1736.802949][T26422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1736.830064][T26422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1736.874345][T23607] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.015515][T23607] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1737.066630][T26422] device hsr_slave_0 entered promiscuous mode [ 1737.082718][T26422] device hsr_slave_1 entered promiscuous mode [ 1737.089575][T26422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1737.102949][T26422] Cannot create hsr debugfs directory [ 1737.390779][T23607] device 0 left promiscuous mode [ 1737.509899][T23607] device 1 left promiscuous mode [ 1737.623881][T23607] device 2 left promiscuous mode [ 1737.785056][T23607] device 3 left promiscuous mode [ 1738.034534][T23607] tipc: Left network mode [ 1739.965276][T26581] device syzkaller0 entered promiscuous mode [ 1743.142975][T26422] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1743.231779][T26422] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1743.278893][T26422] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1743.349941][T26422] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1743.731710][T26422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1743.816326][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1743.840075][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1743.910889][T26422] 8021q: adding VLAN 0 to HW filter on device team0 [ 1743.948509][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1743.977716][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1744.024941][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1744.032157][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1744.131373][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1744.139564][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1744.169164][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1744.190755][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1744.197986][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1744.239636][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1744.273587][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1744.654868][T23607] device wlan1 left promiscuous mode [ 1744.686252][T23607] team0: Port device wlan1 removed [ 1744.867308][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1744.879859][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1744.890338][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1744.916311][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1744.954556][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1745.132544][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1745.154188][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1745.413047][T26422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1745.450798][T26422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1745.475934][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1745.492096][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1745.584822][T23607] bridge0: port 5(team0) entered disabled state [ 1745.600894][T23607] device bridge_slave_1 left promiscuous mode [ 1745.615580][T23607] bridge0: port 2(bridge_slave_1) entered disabled state [ 1745.666642][T23607] device bridge_slave_0 left promiscuous mode [ 1745.680386][T23607] bridge0: port 1(bridge_slave_0) entered disabled state [ 1745.703894][T23607] device veth1_macvtap left promiscuous mode [ 1745.710326][T23607] device veth0_macvtap left promiscuous mode [ 1745.716931][T23607] device veth1_vlan left promiscuous mode [ 1745.727015][T23607] device veth0_vlan left promiscuous mode [ 1746.409967][T23607] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1746.456854][T23607] device team_slave_1 left promiscuous mode [ 1746.464547][T23607] team0 (unregistering): Port device team_slave_1 removed [ 1746.506930][T23607] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1746.838751][T23607] bond0 (unregistering): Released all slaves [ 1747.001600][T26658] device syzkaller0 entered promiscuous mode [ 1749.776735][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1749.802104][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1749.909688][T26422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1750.055270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1750.107414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1750.234769][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1750.253418][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1750.291981][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1750.340548][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1750.370292][T26422] device veth0_vlan entered promiscuous mode [ 1750.422803][T26422] device veth1_vlan entered promiscuous mode [ 1750.719052][T26422] device veth0_macvtap entered promiscuous mode [ 1750.848249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1750.858987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1750.880549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1750.912441][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1750.964192][T26422] device veth1_macvtap entered promiscuous mode [ 1750.984682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1751.023498][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1751.135754][T26422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.181170][T26422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.191034][T26422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.271946][T26422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.297911][T26422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1751.347101][T26422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.375100][T26422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1751.460489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1751.491966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1751.546682][T26422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.584532][T26422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.604621][T26422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.630968][T26422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.667691][T26422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1751.718080][T26422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1751.768307][T26422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1751.819949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1751.839337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1751.893756][T26422] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.913136][T26422] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.933373][T26422] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1751.945677][T26422] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1752.035072][T26736] device syzkaller0 entered promiscuous mode [ 1757.681309][T23607] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.701910][T23607] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.709517][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1757.848862][T23607] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1757.877081][T23607] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1757.956225][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1759.975760][ T4285] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1759.992830][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1760.001041][ T4285] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1760.020225][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1760.037129][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1760.053870][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1761.987539][T26845] syz.4.6805[26845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1761.987699][T26845] syz.4.6805[26845] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1761.991997][ T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.101730][ T4285] Bluetooth: hci2: command 0x0409 tx timeout [ 1762.187215][ T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.408370][ T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1762.608643][ T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1763.037961][ T9] device 0 left promiscuous mode [ 1763.104096][T26834] chnl_net:caif_netlink_parms(): no params data found [ 1763.198568][ T9] device 1 left promiscuous mode [ 1763.644791][T26834] bridge0: port 1(bridge_slave_0) entered blocking state [ 1763.655739][T26834] bridge0: port 1(bridge_slave_0) entered disabled state [ 1763.674350][T26834] device bridge_slave_0 entered promiscuous mode [ 1763.732335][T26834] bridge0: port 2(bridge_slave_1) entered blocking state [ 1763.740754][T26834] bridge0: port 2(bridge_slave_1) entered disabled state [ 1763.764888][T26834] device bridge_slave_1 entered promiscuous mode [ 1764.004056][T26834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1764.096093][T26834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1764.181533][ T4285] Bluetooth: hci2: command 0x041b tx timeout [ 1764.218084][T26834] team0: Port device team_slave_0 added [ 1764.227532][T26834] team0: Port device team_slave_1 added [ 1764.323865][T26834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1764.341219][T26834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1764.376997][T26834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1766.271405][ T4285] Bluetooth: hci2: command 0x040f tx timeout [ 1766.530076][T26834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1766.537204][T26834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1766.563540][T26834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1766.802161][T26834] device hsr_slave_0 entered promiscuous mode [ 1766.822065][T26834] device hsr_slave_1 entered promiscuous mode [ 1766.841568][T26834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1766.849181][T26834] Cannot create hsr debugfs directory [ 1767.434944][ T9] device wlan1 left promiscuous mode [ 1767.526222][ T9] team0: Port device wlan1 removed [ 1768.038583][ T9] device vlan0 left promiscuous mode [ 1768.106015][ T4285] Bluetooth: hci1: command 0x0406 tx timeout [ 1768.218492][ T9] À: port 1(vlan0) entered disabled state [ 1768.351484][ T4285] Bluetooth: hci2: command 0x0419 tx timeout [ 1768.461816][ T9] device veth1_macvtap left promiscuous mode [ 1768.498799][ T9] device veth0_macvtap left promiscuous mode [ 1768.544154][ T9] device veth1_vlan left promiscuous mode [ 1770.668437][ T9] device team_slave_1 left promiscuous mode [ 1770.684717][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1770.770463][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1771.504829][ T9] bond0 (unregistering): Released all slaves [ 1773.206262][T26834] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1773.412576][T26834] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1773.668730][T26834] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1773.874710][T26834] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1774.605437][T26834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1774.697107][T26834] 8021q: adding VLAN 0 to HW filter on device team0 [ 1774.767108][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1774.785557][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1775.440890][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1775.460698][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1775.482143][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.489291][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1775.511587][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1777.703204][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1777.722078][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1777.739568][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.746770][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.808626][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1777.847748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1777.950944][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1778.023286][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1778.136627][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1778.222468][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1778.251712][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1778.291520][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1778.342997][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1778.385093][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1778.428463][T23607] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1778.579967][T26834] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1779.807752][T27044] device syzkaller0 entered promiscuous mode [ 1784.296801][T27094] device syzkaller0 entered promiscuous mode [ 1784.537205][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1784.578533][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1784.647283][T26834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1784.955469][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1784.970620][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1785.040595][T26834] device veth0_vlan entered promiscuous mode [ 1785.082674][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1785.098312][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1785.194617][T26834] device veth1_vlan entered promiscuous mode [ 1785.270399][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1785.300246][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1785.528914][T26834] device veth0_macvtap entered promiscuous mode [ 1785.544106][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1785.565081][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1785.587324][T26834] device veth1_macvtap entered promiscuous mode [ 1785.656999][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1785.676740][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1785.781373][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1785.924821][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1785.982394][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1786.231263][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.342093][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1786.472808][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.659165][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1786.698506][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.848499][T26834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1786.897584][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1786.912525][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1786.952572][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1786.972739][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1786.990145][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.018487][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.043293][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.059512][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.070220][T26834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1787.081167][T26834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1787.241217][T26834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1787.265910][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1787.341612][T25983] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1787.567853][T27136] device syzkaller0 entered promiscuous mode [ 1787.612105][T26834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.639869][T26834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.693877][T26834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1787.727752][T26834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1791.625270][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.632264][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.516686][T27161] device syzkaller0 entered promiscuous mode [ 1792.650524][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1792.670611][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1792.722737][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1793.283303][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1793.333426][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1793.446370][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1800.948534][T27288] device syzkaller0 entered promiscuous mode [ 1802.267378][T27305] device syzkaller0 entered promiscuous mode [ 1806.180866][T27368] device syzkaller0 entered promiscuous mode [ 1809.062715][T25483] Bluetooth: hci3: command 0x0406 tx timeout [ 1811.178101][T27443] bridge0: port 2(bridge_slave_1) entered disabled state [ 1811.185617][T27443] bridge0: port 1(bridge_slave_0) entered disabled state [ 1812.810722][T27473] device syzkaller0 entered promiscuous mode [ 1812.989270][T27483] syz.0.6950[27483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1812.989486][T27483] syz.0.6950[27483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1814.016097][T27495] [ 1814.030641][T27495] ============================= [ 1814.035557][T27495] WARNING: suspicious RCU usage [ 1814.040427][T27495] syzkaller #0 Not tainted [ 1814.044897][T27495] ----------------------------- [ 1814.049764][T27495] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 1814.058310][T27495] [ 1814.058310][T27495] other info that might help us debug this: [ 1814.058310][T27495] [ 1814.068604][T27495] [ 1814.068604][T27495] rcu_scheduler_active = 2, debug_locks = 1 [ 1814.076732][T27495] 1 lock held by syz.2.6954/27495: [ 1814.081898][T27495] #0: ffffffff8cb2dfe0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 1814.092239][T27495] [ 1814.092239][T27495] stack backtrace: [ 1814.098148][T27495] CPU: 0 PID: 27495 Comm: syz.2.6954 Not tainted syzkaller #0 [ 1814.105633][T27495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1814.115713][T27495] Call Trace: [ 1814.119020][T27495] [ 1814.121981][T27495] dump_stack_lvl+0x188/0x24e [ 1814.126699][T27495] ? show_regs_print_info+0x12/0x12 [ 1814.131930][T27495] ? load_image+0x400/0x400 [ 1814.136481][T27495] lockdep_rcu_suspicious+0x1dd/0x300 [ 1814.141896][T27495] get_callchain_entry+0x2a5/0x3b0 [ 1814.147069][T27495] get_perf_callchain+0xc4/0x490 [ 1814.152050][T27495] ? put_callchain_entry+0xb0/0xb0 [ 1814.157197][T27495] ? preempt_schedule+0xbc/0xd0 [ 1814.162083][T27495] ? preempt_schedule_common+0xa5/0xd0 [ 1814.167577][T27495] ? verify_lock_unused+0x140/0x140 [ 1814.172866][T27495] ? preempt_schedule+0xbc/0xd0 [ 1814.177753][T27495] __bpf_get_stack+0x2de/0x520 [ 1814.182561][T27495] ? stack_map_get_build_id_offset+0x970/0x970 [ 1814.188760][T27495] ? __cant_sleep+0x220/0x220 [ 1814.193535][T27495] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1814.199206][T27495] bpf_get_stack_raw_tp+0x189/0x1c0 [ 1814.204452][T27495] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 1814.209945][T27495] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 1814.215359][T27495] bpf_prog_test_run_syscall+0x313/0x4a0 [ 1814.221031][T27495] ? sock_gen_cookie+0x60/0x60 [ 1814.225837][T27495] ? sock_gen_cookie+0x60/0x60 [ 1814.230636][T27495] bpf_prog_test_run+0x31e/0x390 [ 1814.235681][T27495] __sys_bpf+0x62b/0x780 [ 1814.239961][T27495] ? bpf_link_show_fdinfo+0x380/0x380 [ 1814.245368][T27495] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1814.251331][T27495] ? lock_chain_count+0x20/0x20 [ 1814.256230][T27495] __x64_sys_bpf+0x78/0x90 [ 1814.260684][T27495] do_syscall_64+0x4c/0xa0 [ 1814.265146][T27495] ? clear_bhb_loop+0x60/0xb0 [ 1814.269858][T27495] ? clear_bhb_loop+0x60/0xb0 [ 1814.274571][T27495] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1814.280499][T27495] RIP: 0033:0x7fe4bb79ce59 [ 1814.284946][T27495] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1814.304584][T27495] RSP: 002b:00007fe4bc698028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1814.313149][T27495] RAX: ffffffffffffffda RBX: 00007fe4bba16090 RCX: 00007fe4bb79ce59 [ 1814.321152][T27495] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a [ 1814.329148][T27495] RBP: 00007fe4bb832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1814.337146][T27495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1814.345144][T27495] R13: 00007fe4bba16128 R14: 00007fe4bba16090 R15: 00007ffeddb29308 [ 1814.353160][T27495]