last executing test programs: 4.997442215s ago: executing program 4 (id=4656): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020b600000000000000008500000053000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782762f0866", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.94361978s ago: executing program 1 (id=4657): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.745039137s ago: executing program 4 (id=4658): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x25}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x8100, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffee, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x600a03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x28, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18220000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRES64=r2], &(0x7f0000001140)='syzkaller\x00', 0x80, 0xc0, &(0x7f0000001180)=""/192, 0x40f00, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) gettid() r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 4.585656451s ago: executing program 2 (id=4659): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) 4.583102451s ago: executing program 0 (id=4669): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.331281172s ago: executing program 2 (id=4661): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100003, 0x500001c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, &(0x7f0000000200), 0x10) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x8, 0x1, 0x5, 0x220, r1, 0xff, '\x00', 0x0, r5, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, 0x0) close(r0) 4.106362842s ago: executing program 1 (id=4662): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.068740485s ago: executing program 2 (id=4663): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x25}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x8100, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffee, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x600a03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x28, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18220000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRES64=r2], &(0x7f0000001140)='syzkaller\x00', 0x80, 0xc0, &(0x7f0000001180)=""/192, 0x40f00, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) gettid() r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 4.000310131s ago: executing program 3 (id=4664): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000700)=ANY=[@ANYRES32], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x20000015) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000080)="19e10da2de07c3bbc84d917963f2d20f366ca777b9d84ddb3205394577b32388", &(0x7f0000000580)=""/170}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001240)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.730915293s ago: executing program 0 (id=4665): r0 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x1) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000007871105c000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001300911fdabcf8b3077fa54a07"], 0xfe33) 3.428697639s ago: executing program 0 (id=4666): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x20, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@generic, @kfunc, @map_fd, @snprintf], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000580081044e81f782fb44b904021d080009000200e8fe55b1b305", 0x1e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 3.428169719s ago: executing program 4 (id=4667): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.388267812s ago: executing program 1 (id=4668): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x9, 0x0, 0x7ff, 0x802, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000700)=ANY=[@ANYRES32], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x20000015) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000080)="19e10da2de07c3bbc84d917963f2d20f366ca777b9d84ddb3205394577b32388", &(0x7f0000000580)=""/170}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001240)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 3.238908005s ago: executing program 0 (id=4670): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x29, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000080), 0x20000000}, 0x20) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x8043) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) 2.94645118s ago: executing program 0 (id=4671): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000020b600000000000000008500000053000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e02742e8680d85ff9782762f0866", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.890472505s ago: executing program 2 (id=4672): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x25}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x8100, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffee, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x600a03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x28, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18220000", @ANYRES32=r5, @ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRES64=r2], &(0x7f0000001140)='syzkaller\x00', 0x80, 0xc0, &(0x7f0000001180)=""/192, 0x40f00, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) gettid() r7 = openat$cgroup_procs(r6, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000c40), 0x12) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2.610240549s ago: executing program 3 (id=4673): perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close(0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b0, &(0x7f0000000080)) 2.59227134s ago: executing program 0 (id=4683): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x25}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x8100, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffee, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x600a03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x28, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18220000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRES64=r2], &(0x7f0000001140)='syzkaller\x00', 0x80, 0xc0, &(0x7f0000001180)=""/192, 0x40f00, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) gettid() r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 2.402698697s ago: executing program 4 (id=4674): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.077901774s ago: executing program 1 (id=4675): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100003, 0x500001c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, &(0x7f0000000200), 0x10) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x8, 0x1, 0x5, 0x220, r1, 0xff, '\x00', 0x0, r5, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, 0x0) close(r0) 1.986117892s ago: executing program 3 (id=4676): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events\x00', 0x2da8020000100003, 0x500001c) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000080000000000000000000018110000", @ANYRESOCT=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x6, 0x21, &(0x7f0000000200), 0x10) close(r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r2, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x7, 0x8, 0x1, 0x5, 0x220, r1, 0xff, '\x00', 0x0, r5, 0x0, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='io.stat\x00', 0x26e1, 0x0) close(r6) socket$kcm(0x10, 0x400000002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001a40)) ioctl$SIOCSIFHWADDR(r6, 0x8b1a, 0x0) close(r0) 1.517351912s ago: executing program 1 (id=4677): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.436068488s ago: executing program 4 (id=4678): r0 = socket$kcm(0x10, 0x400000002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000080008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r5, 0x6, 0xd, &(0x7f0000000000), 0x1) sendmsg$inet(r5, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000014) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000200)={r0}) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000007871105c000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.controllers\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0xc028660f, &(0x7f00000005c0)=0x3fffffffe) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="180000001300911fdabcf8b3077fa54a07"], 0xfe33) 1.048169102s ago: executing program 3 (id=4679): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000008000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 908.165024ms ago: executing program 4 (id=4680): r0 = perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='7'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'ipvlan0\x00', @link_local={0x1, 0x80, 0xc2, 0x25}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'batadv_slave_1\x00', @random='\x00\x00\x00 \x00'}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r5) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0xc028660f, 0x0) r6 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x800}, 0x8100, 0x0, 0x1000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000}, 0x0, 0xffffffffffffffee, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) socket$kcm(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x600a03, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x28, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="18220000", @ANYRES32=r6, @ANYRES32=r0, @ANYRES32, @ANYRES8=r1, @ANYRESHEX=r3, @ANYRES64=r2], &(0x7f0000001140)='syzkaller\x00', 0x80, 0xc0, &(0x7f0000001180)=""/192, 0x40f00, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) gettid() r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000c40), 0x12) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x24084200, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001a40)) syz_clone(0x40020000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 570.390942ms ago: executing program 3 (id=4681): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0x2000000c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r1, 0xffffffffffffffff, 0x2, 0x0, 0x4000, @void, @value}, 0x10) 569.023522ms ago: executing program 1 (id=4692): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 483.461799ms ago: executing program 2 (id=4682): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x0, 0x0, 0x0, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000500)={0x8}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @void, @value, @void, @value}, 0x48) socket$kcm(0x2, 0x922000000001, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x29, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000080), 0x20000000}, 0x20) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/4096, 0x1000}], 0x1}, 0x8043) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x20000811) r4 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000811) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r4) 223.320432ms ago: executing program 3 (id=4684): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x9, 0x0, 0x7ff, 0x802, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='ext4_request_blocks\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x3, &(0x7f0000000700)=ANY=[@ANYRES32], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x2000000a) ioctl$TUNSETOFFLOAD(r1, 0x40047451, 0x20000015) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r0, &(0x7f0000000080)="19e10da2de07c3bbc84d917963f2d20f366ca777b9d84ddb3205394577b32388", &(0x7f0000000580)=""/170}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000001240)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000001280), 0x4) r4 = socket$kcm(0x2, 0x3, 0x84) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r5, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$inet(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x34}, @remote}}}], 0x20}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @random="0106002010ff"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 0s ago: executing program 2 (id=4685): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x0, 0x84) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800260007000200060001c01164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x0, 0xcc0, 0x6414, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x72cb15e1e81aa7f5) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f80)=""/212, 0x1a, 0xd4, 0x1, 0x67, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095000000000000007ab9e683b171b4b09980af6c1ebeda4ac0d3e3aa71a9ab17e14e1b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000080000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffedc, &(0x7f0000000080)=[{&(0x7f00000000c0)="c018030020000b12d25a80648c2594f90224fc60100c074002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) kernel console output (not intermixed with test programs): erface: batadv_slave_0 [ 1057.598257][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.627149][T18445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.650580][T18460] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.668509][T18460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.690161][T18460] device bridge_slave_0 entered promiscuous mode [ 1057.723347][ T3656] Bluetooth: hci2: command tx timeout [ 1057.759719][T18454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.781882][T18445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.796448][T18445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1057.837092][T18519] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3834'. [ 1057.851828][T18445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.875180][T18460] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.882298][T18460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.889817][T18448] Bluetooth: hci3: command tx timeout [ 1057.903674][T18460] device bridge_slave_1 entered promiscuous mode [ 1057.922732][ T9] device hsr_slave_0 left promiscuous mode [ 1057.933267][ T9] device hsr_slave_1 left promiscuous mode [ 1057.939920][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1057.952258][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1057.960422][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1057.968584][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1057.991531][ T9] device veth1_vlan left promiscuous mode [ 1057.997631][ T9] device veth0_vlan left promiscuous mode [ 1058.396098][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1058.436897][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1058.476165][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1058.783583][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 1058.911647][ T9] bond0 (unregistering): Released all slaves [ 1058.946350][T18454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.084247][T18454] team0: Port device team_slave_0 added [ 1059.109513][T18460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.122818][T18454] team0: Port device team_slave_1 added [ 1059.165955][T18460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1059.200565][T18445] device hsr_slave_0 entered promiscuous mode [ 1059.208044][T18445] device hsr_slave_1 entered promiscuous mode [ 1059.214946][T18445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1059.222582][T18445] Cannot create hsr debugfs directory [ 1059.228680][T18465] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.236760][T18465] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.243091][T18448] Bluetooth: hci0: command tx timeout [ 1059.245324][T18465] device bridge_slave_0 entered promiscuous mode [ 1059.316792][T18465] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.335659][T18465] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.348146][T18465] device bridge_slave_1 entered promiscuous mode [ 1059.395757][T18460] team0: Port device team_slave_0 added [ 1059.402378][T18454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.422884][T18454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.493088][ T3656] Bluetooth: hci1: command tx timeout [ 1059.509856][T18454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1059.575303][T18454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1059.582417][T18454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.620825][T18454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1059.659859][T18460] team0: Port device team_slave_1 added [ 1059.803053][ T3656] Bluetooth: hci2: command tx timeout [ 1059.900440][T18465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1059.936937][T18460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1059.953071][T18460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1059.979202][ T3656] Bluetooth: hci3: command tx timeout [ 1059.990345][T18550] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3837'. [ 1060.038848][T18460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.104938][T18465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1060.196960][T18460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.210207][T18460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.241019][T18460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.261534][T18454] device hsr_slave_0 entered promiscuous mode [ 1060.268905][T18454] device hsr_slave_1 entered promiscuous mode [ 1060.280647][T18454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.288596][T18454] Cannot create hsr debugfs directory [ 1060.439101][T18460] device hsr_slave_0 entered promiscuous mode [ 1060.451144][T18460] device hsr_slave_1 entered promiscuous mode [ 1060.458866][T18460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1060.477288][T18460] Cannot create hsr debugfs directory [ 1060.502309][T18465] team0: Port device team_slave_0 added [ 1060.550652][T18465] team0: Port device team_slave_1 added [ 1060.685870][T18465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1060.697189][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.726925][T18465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1060.777838][T18465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1060.798182][T18465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1060.853045][T18465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1060.996967][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.255716][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.328934][T18448] Bluetooth: hci0: command tx timeout [ 1061.362015][T18465] device hsr_slave_0 entered promiscuous mode [ 1061.389263][T18465] device hsr_slave_1 entered promiscuous mode [ 1061.399117][T18465] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1061.414789][T18465] Cannot create hsr debugfs directory [ 1061.506140][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.553243][T18576] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3841'. [ 1061.564158][T18448] Bluetooth: hci1: command tx timeout [ 1061.621691][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.691064][T18454] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.827029][T18454] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.893046][T18448] Bluetooth: hci2: command tx timeout [ 1062.053423][ T3656] Bluetooth: hci3: command tx timeout [ 1062.673563][T18454] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.753156][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.838009][T18454] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.880165][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1062.991407][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.070715][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1063.403720][ T3656] Bluetooth: hci0: command tx timeout [ 1063.643271][T18448] Bluetooth: hci1: command tx timeout [ 1063.967584][ T3656] Bluetooth: hci2: command tx timeout [ 1064.123058][T18448] Bluetooth: hci3: command tx timeout [ 1064.337146][T18445] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1064.355781][T18445] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1064.421862][T18445] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1064.432091][T18445] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1064.707473][T18445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1064.736198][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1064.758411][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1064.776184][T18445] 8021q: adding VLAN 0 to HW filter on device team0 [ 1064.808403][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1064.819394][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1064.829801][ T96] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.836994][ T96] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.845359][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1064.866794][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1064.876586][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1064.886403][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.893659][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.991501][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1065.005880][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1065.016128][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1065.026900][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1065.036443][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1065.073983][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1065.082818][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1065.094998][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1065.104253][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1065.150397][T18445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1065.165252][T18445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1065.175170][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1065.186128][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1065.335735][T18465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1065.351936][T18465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1065.363893][T18465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1065.428011][T18465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1065.527068][T18454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1065.546660][T18454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1065.556256][T18454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1065.589477][T18454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1065.675937][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1065.685900][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1065.717244][T18445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1065.780216][T18460] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1065.820104][T18460] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1065.848188][T18465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1065.856527][T18460] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1065.866510][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1065.879197][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1065.899055][ T9] device hsr_slave_0 left promiscuous mode [ 1065.908391][ T9] device hsr_slave_1 left promiscuous mode [ 1065.920549][ T9] device hsr_slave_0 left promiscuous mode [ 1065.930365][ T9] device hsr_slave_1 left promiscuous mode [ 1065.938639][ T9] device hsr_slave_0 left promiscuous mode [ 1065.949213][ T9] device hsr_slave_1 left promiscuous mode [ 1065.983366][ T9] device veth1_vlan left promiscuous mode [ 1065.989280][ T9] device veth0_vlan left promiscuous mode [ 1065.997036][ T9] device veth0_vlan left promiscuous mode [ 1066.004126][ T9] device veth1_vlan left promiscuous mode [ 1066.009911][ T9] device veth0_vlan left promiscuous mode [ 1066.475980][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1066.515385][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1066.550858][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.830314][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 1066.951885][ T9] bond0 (unregistering): Released all slaves [ 1067.267670][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1067.306286][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1067.343611][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1067.620214][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 1067.744244][ T9] bond0 (unregistering): Released all slaves [ 1068.028967][ T9] team0 (unregistering): Port device team_slave_1 removed [ 1068.066386][ T9] team0 (unregistering): Port device team_slave_0 removed [ 1068.102645][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1068.378016][ T9] bond0 (unregistering): (slave team0): Releasing backup interface [ 1068.493253][ T9] bond0 (unregistering): Released all slaves [ 1068.521186][T18460] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1068.579496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1068.592619][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1068.620994][T18465] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.638816][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1068.650714][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1068.680918][T18445] device veth0_vlan entered promiscuous mode [ 1068.691566][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1068.702327][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1068.711771][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1068.720492][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1068.729235][T18225] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.736422][T18225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.755511][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1068.764268][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1068.773054][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1068.781494][T18225] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.788637][T18225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.799390][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1068.813990][T18445] device veth1_vlan entered promiscuous mode [ 1068.857174][T18460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.870619][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1068.885520][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1068.894211][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1068.902799][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1068.912751][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1068.949068][T18445] device veth0_macvtap entered promiscuous mode [ 1068.957329][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1068.968125][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1068.977503][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1068.989052][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1069.005473][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1069.014358][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1069.022696][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1069.032791][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1069.063647][T18460] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.077616][T18445] device veth1_macvtap entered promiscuous mode [ 1069.086486][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1069.098378][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1069.106999][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1069.115711][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1069.123858][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1069.138260][T18454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1069.149627][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1069.159037][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1069.168418][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.175541][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.184843][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1069.219969][T18465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1069.234511][T18445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.264813][T18445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.272187][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1069.293864][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1069.302755][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1069.316229][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1069.328759][ T40] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.335997][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.348661][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1069.358461][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1069.367761][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1069.376757][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1069.386048][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1069.394983][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1069.403693][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1069.412288][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1069.421607][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1069.439024][T18454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1069.458205][T18445] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.471436][T18445] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.484742][T18445] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.497294][T18445] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.514375][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1069.522575][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1069.547211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1069.557370][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1069.621528][T18460] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1069.634352][T18460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1069.642772][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1069.658259][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1069.667393][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1069.676408][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1069.685736][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 1069.692812][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1069.701435][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1069.710651][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1069.719556][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 1069.726676][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.736016][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1069.745222][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1069.799298][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1069.810791][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1069.823150][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1069.837061][T18465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.890940][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1069.920655][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1069.932377][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1069.956651][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1069.969733][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1070.003841][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1070.021653][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1070.071830][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1070.087378][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1070.110354][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1070.120433][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1070.133592][T18454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1070.178506][T18465] device veth0_vlan entered promiscuous mode [ 1070.195045][T18225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.208387][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1070.218602][T18225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.227191][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1070.238532][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1070.246783][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1070.256001][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1070.283529][T12440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.285644][T18465] device veth1_vlan entered promiscuous mode [ 1070.291624][T12440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.343228][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1070.363885][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1070.386264][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1070.394680][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1070.407146][T18460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1070.493530][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1070.517907][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1070.548443][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1070.571207][T18465] device veth0_macvtap entered promiscuous mode [ 1070.602462][T18465] device veth1_macvtap entered promiscuous mode [ 1070.652201][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1070.733864][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1070.741894][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1070.765339][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1070.810386][T18465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1070.828352][T18465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1070.857768][T18465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.882430][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1070.914328][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1070.959253][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1071.000676][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1071.048582][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1071.080747][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1071.095104][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1071.106012][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1071.120485][T18460] device veth0_vlan entered promiscuous mode [ 1071.152092][T18454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1071.183966][T18465] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1071.205748][T18465] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.283128][T18465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.299852][T18460] device veth1_vlan entered promiscuous mode [ 1071.314161][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1071.329125][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1071.356474][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1071.389301][T18465] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.406281][T18465] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.415694][T18465] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.425129][T18465] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.521520][T18460] device veth0_macvtap entered promiscuous mode [ 1071.564297][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1071.572629][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1071.652589][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1071.671894][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1071.728909][T18460] device veth1_macvtap entered promiscuous mode [ 1071.751766][T18693] netlink: 'syz.2.3848': attribute type 1 has an invalid length. [ 1071.848543][T18693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3848'. [ 1071.857351][T18460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.860915][T12440] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1071.889548][T18460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.916085][T12440] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.933070][T18460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1071.973025][T18460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1071.987202][T18460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1072.008052][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1072.021933][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1072.056558][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1072.088465][T18460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.099577][T18460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.109726][T18460] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1072.120497][T18460] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1072.132403][T18460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1072.156374][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1072.173561][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1072.195947][T18460] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.213167][T18460] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.221907][T18460] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.231012][T18460] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1072.258898][ T4919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.268605][ T4919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.328649][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1072.342705][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1072.360350][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1072.598577][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1072.616370][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1072.643395][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1072.651562][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1072.678908][T18454] device veth0_vlan entered promiscuous mode [ 1072.709880][T18720] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3860'. [ 1072.761215][T18454] device veth1_vlan entered promiscuous mode [ 1072.768825][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.784478][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1072.850963][T18454] device veth0_macvtap entered promiscuous mode [ 1072.884347][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1072.899041][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1072.909285][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1072.925784][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1073.004966][T18454] device veth1_macvtap entered promiscuous mode [ 1073.069240][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.085290][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.108245][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1073.125079][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1073.139550][T18454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.166261][T18454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.177937][T18454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.206581][T18454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.221891][T18454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1073.238627][T18454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.268565][T18454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.315234][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1073.350272][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1073.404506][T18731] netlink: 'syz.2.3862': attribute type 1 has an invalid length. [ 1073.427885][T18454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.445527][T18454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.469084][T18454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.480081][T18454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.516196][T18454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1073.534811][T18737] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3862'. [ 1073.583358][T18454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1073.615068][T18454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.761145][T18734] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3829'. [ 1073.796581][T18739] netlink: 'syz.1.3829': attribute type 1 has an invalid length. [ 1073.805873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1073.824445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1073.838167][T18454] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.847514][T18454] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.857304][T18454] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.870004][T18454] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1074.508266][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.605160][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.713006][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1074.771498][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.800874][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.878281][T18759] netlink: 'syz.3.3859': attribute type 29 has an invalid length. [ 1075.147259][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1075.156160][T18759] netlink: 'syz.3.3859': attribute type 29 has an invalid length. [ 1075.233749][T18768] netlink: 'syz.1.3864': attribute type 29 has an invalid length. [ 1075.388266][T18765] device veth0_vlan left promiscuous mode [ 1075.396674][T18765] device veth0_vlan entered promiscuous mode [ 1075.488031][T18760] netlink: 'syz.3.3859': attribute type 29 has an invalid length. [ 1075.505456][T18768] netlink: 'syz.1.3864': attribute type 29 has an invalid length. [ 1075.517757][T18769] netlink: 'syz.1.3864': attribute type 29 has an invalid length. [ 1075.530365][T18761] netlink: 'syz.3.3859': attribute type 29 has an invalid length. [ 1075.649123][T18775] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3865'. [ 1075.939665][T18781] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3825'. [ 1076.544941][T18795] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3868'. [ 1076.899374][T18803] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3871'. [ 1076.909432][T18803] IPv6: NLM_F_CREATE should be specified when creating new route [ 1076.933107][T18803] IPv6: Can't replace route, no match found [ 1077.486265][T18814] device veth0_vlan left promiscuous mode [ 1077.497590][T18814] device veth0_vlan entered promiscuous mode [ 1077.709715][T18829] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3885'. [ 1077.742120][T18827] validate_nla: 6 callbacks suppressed [ 1077.742138][T18827] netlink: 'syz.1.3885': attribute type 1 has an invalid length. [ 1077.968189][T18835] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3879'. [ 1078.127030][T18844] netlink: 'syz.4.3881': attribute type 1 has an invalid length. [ 1078.267914][T18847] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1079.710791][T18887] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3894'. [ 1079.775569][T18872] device veth0_vlan left promiscuous mode [ 1079.796205][T18872] device veth0_vlan entered promiscuous mode [ 1079.867298][T18882] Â: renamed from pim6reg1 [ 1080.498853][T18909] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3901'. [ 1080.554822][T18908] netlink: 'syz.4.3901': attribute type 1 has an invalid length. [ 1080.669717][T18913] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3902'. [ 1080.800336][T18918] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1081.480476][T18927] device veth0_vlan left promiscuous mode [ 1081.535529][T18927] device veth0_vlan entered promiscuous mode [ 1081.647833][T18942] netlink: 'syz.2.3910': attribute type 1 has an invalid length. [ 1081.701849][T18941] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3910'. [ 1081.975286][T18951] netlink: 'syz.0.3913': attribute type 3 has an invalid length. [ 1082.003866][T18951] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3913'. [ 1082.159924][T18960] netlink: 'syz.2.3916': attribute type 1 has an invalid length. [ 1082.284166][T18966] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3916'. [ 1082.537319][T18972] netlink: 'syz.4.3919': attribute type 1 has an invalid length. [ 1083.592285][T18970] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3919'. [ 1084.211531][T18987] device veth0_vlan left promiscuous mode [ 1084.225359][T18987] device veth0_vlan entered promiscuous mode [ 1084.252706][T18992] syzkaller0: tun_chr_ioctl cmd 21731 [ 1084.406870][T18998] netlink: 'syz.0.3927': attribute type 1 has an invalid length. [ 1084.426505][T18998] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3927'. [ 1085.466981][T19022] netlink: 'syz.0.3934': attribute type 1 has an invalid length. [ 1085.485319][T19020] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3934'. [ 1085.610644][T19027] device syzkaller0 entered promiscuous mode [ 1087.470280][T19031] device syzkaller0 entered promiscuous mode [ 1089.534014][T19049] netlink: 'syz.1.3940': attribute type 1 has an invalid length. [ 1089.575009][T19049] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3940'. [ 1090.529446][T19074] netlink: 'syz.1.3947': attribute type 1 has an invalid length. [ 1090.551502][T19071] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3947'. [ 1090.598419][T19072] device syzkaller0 entered promiscuous mode [ 1092.632397][T19082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.645957][T19082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.658216][T19082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.668960][T19082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.679152][T19082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1092.690188][T19082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1092.998032][T19097] netlink: 'syz.0.3955': attribute type 1 has an invalid length. [ 1093.026304][T19097] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3955'. [ 1093.201152][T18448] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1093.222012][T18448] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1093.231256][T18448] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1093.258352][T18448] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1093.267229][T18448] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1093.275779][T18448] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1093.490522][T19111] netlink: 'syz.0.3960': attribute type 1 has an invalid length. [ 1093.558872][T19111] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3960'. [ 1093.715911][T19101] chnl_net:caif_netlink_parms(): no params data found [ 1094.079631][T18448] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1094.090845][T18448] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1094.099052][T18448] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1094.108026][T18448] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1094.122717][T18448] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1094.131334][T18448] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1094.166020][T19127] netlink: 'syz.0.3963': attribute type 1 has an invalid length. [ 1094.188884][T19122] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3963'. [ 1094.298108][T19101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1094.311373][T19101] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.344198][T19101] device bridge_slave_0 entered promiscuous mode [ 1094.390781][T19101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1094.401086][T19101] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.415865][T19101] device bridge_slave_1 entered promiscuous mode [ 1094.502114][T19101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1094.574067][T19101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1094.689296][T19101] team0: Port device team_slave_0 added [ 1094.730051][T19101] team0: Port device team_slave_1 added [ 1094.848988][T19101] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1094.867248][T19101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1094.921758][T19101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1094.958596][T19153] netlink: 'syz.0.3968': attribute type 1 has an invalid length. [ 1094.980629][T19101] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1094.994513][T19101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1095.031246][T19149] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3968'. [ 1095.048339][T19101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1095.200496][T19101] device hsr_slave_0 entered promiscuous mode [ 1095.235929][T19101] device hsr_slave_1 entered promiscuous mode [ 1095.249396][T19101] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1095.285800][T19101] Cannot create hsr debugfs directory [ 1095.307024][T19128] chnl_net:caif_netlink_parms(): no params data found [ 1095.324943][ T3656] Bluetooth: hci5: command tx timeout [ 1096.203133][ T3656] Bluetooth: hci6: command tx timeout [ 1096.524395][T19128] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.531628][T19128] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.570650][T19128] device bridge_slave_0 entered promiscuous mode [ 1096.592375][T19171] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3972'. [ 1096.614574][T19128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.621697][T19128] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.654436][T19128] device bridge_slave_1 entered promiscuous mode [ 1096.751448][T19128] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1096.813271][T19128] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1097.421951][ T3656] Bluetooth: hci5: command tx timeout [ 1097.452970][T19128] team0: Port device team_slave_0 added [ 1097.505688][T19101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.560369][T19128] team0: Port device team_slave_1 added [ 1097.656407][T19101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.786685][T19181] netlink: 'syz.1.3975': attribute type 1 has an invalid length. [ 1097.855351][T19101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.863393][T19183] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3975'. [ 1097.902215][T19128] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1097.912994][T19128] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1097.942963][T19128] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1097.990465][T19128] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1097.998091][T19128] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.041333][T19128] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.123641][T19101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1098.261257][T19128] device hsr_slave_0 entered promiscuous mode [ 1098.283156][ T3656] Bluetooth: hci6: command tx timeout [ 1098.293321][T19128] device hsr_slave_1 entered promiscuous mode [ 1098.337355][T19128] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1098.373806][T19128] Cannot create hsr debugfs directory [ 1098.402050][T19200] netlink: 'syz.1.3979': attribute type 1 has an invalid length. [ 1098.445597][T19194] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3979'. [ 1098.650366][T19101] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1098.713011][T19101] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1098.753635][T19101] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1098.823558][T19101] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1099.133580][T19128] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.231232][T19213] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3982'. [ 1099.240716][T19214] netlink: 'syz.1.3982': attribute type 1 has an invalid length. [ 1099.479667][T19128] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.483286][ T3656] Bluetooth: hci5: command tx timeout [ 1099.632754][T19128] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.907538][T19128] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1099.972581][T19101] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1100.032747][T19236] netlink: 'syz.0.3988': attribute type 1 has an invalid length. [ 1100.068363][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1100.082187][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1100.128325][T19101] 8021q: adding VLAN 0 to HW filter on device team0 [ 1100.138878][T19233] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3988'. [ 1100.178454][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1100.188248][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1100.219601][T12440] bridge0: port 1(bridge_slave_0) entered blocking state [ 1100.226818][T12440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1100.300408][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1100.319324][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1100.344544][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1100.372932][ T3656] Bluetooth: hci6: command tx timeout [ 1100.414485][T12440] bridge0: port 2(bridge_slave_1) entered blocking state [ 1100.421667][T12440] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1100.522425][T19246] netlink: 'syz.1.3990': attribute type 1 has an invalid length. [ 1100.544666][T19243] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3990'. [ 1100.563382][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1100.582103][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1100.620607][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1100.693184][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1100.738424][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1100.797274][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1100.806520][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1100.829090][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1100.851684][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1100.901511][T19101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1100.968479][T19101] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1100.986590][T19128] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1101.004537][ T3656] Bluetooth: hci4: Malformed LE Event: 0x1d [ 1101.118305][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1101.127052][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1101.168688][T19128] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1101.204009][T19128] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1101.263995][T19128] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1101.271593][T19265] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3995'. [ 1101.565816][ T3656] Bluetooth: hci5: command tx timeout [ 1101.816362][T19128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1101.836050][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1101.852756][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1101.982927][T19286] netlink: 'syz.0.4000': attribute type 1 has an invalid length. [ 1102.443788][ T3656] Bluetooth: hci6: command tx timeout [ 1103.795959][T19101] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1103.810075][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1103.823219][T19283] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4000'. [ 1103.853766][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1103.864977][T19128] 8021q: adding VLAN 0 to HW filter on device team0 [ 1103.896094][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1103.923746][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1103.952953][ T2528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1103.960110][ T2528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1103.981126][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1104.001434][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1104.012038][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1104.039123][ T2528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.046445][ T2528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1104.174174][T19304] netlink: 'syz.1.4002': attribute type 1 has an invalid length. [ 1104.185117][T18225] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1104.197864][T19296] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4002'. [ 1104.239706][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1104.275130][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1104.322150][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1104.365047][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1104.397273][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1104.413872][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1104.445707][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1104.470685][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1104.613314][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1104.670151][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1105.827537][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1105.846014][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1105.874687][T19328] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 1105.916481][T19328] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4008'. [ 1105.990874][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1106.008909][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1106.038125][T19101] device veth0_vlan entered promiscuous mode [ 1106.057433][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1106.078007][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1106.880563][T19101] device veth1_vlan entered promiscuous mode [ 1106.930795][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1106.943339][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1106.989063][T19128] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1107.124206][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1107.143809][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1107.205702][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1107.233603][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1107.262712][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1107.315648][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1107.347054][T19101] device veth0_macvtap entered promiscuous mode [ 1107.382546][T19351] netlink: 'syz.1.4013': attribute type 1 has an invalid length. [ 1107.401543][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1107.427305][T19347] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4013'. [ 1107.435588][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1107.454250][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1107.478154][T19128] device veth0_vlan entered promiscuous mode [ 1107.549464][T19101] device veth1_macvtap entered promiscuous mode [ 1107.566091][T19128] device veth1_vlan entered promiscuous mode [ 1107.584554][T19353] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4014'. [ 1107.615397][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.641330][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.651890][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.662628][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.672759][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.685968][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.696256][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1107.715327][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.731029][T19101] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1107.768427][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1107.777489][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1107.786626][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1107.798592][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1107.808249][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1107.878819][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.890272][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.900941][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.914835][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.926957][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.937951][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.947891][T19101] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1107.959008][T19101] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1107.984640][T19101] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1108.006630][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1108.073521][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1108.090080][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1108.109669][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1108.124821][T19128] device veth0_macvtap entered promiscuous mode [ 1108.152063][T19101] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.173422][T19101] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.188737][T19101] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.198642][T19101] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1108.219956][T19128] device veth1_macvtap entered promiscuous mode [ 1108.416709][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.434493][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.458759][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.476508][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.496973][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.518166][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.542562][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.581410][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.591853][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1108.621147][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.645789][T19128] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1108.687557][T19379] netlink: 'syz.1.4021': attribute type 1 has an invalid length. [ 1108.709913][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1108.729035][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1108.757869][T19379] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4021'. [ 1108.813864][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1108.825155][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1108.857285][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.885716][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.898188][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.911928][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.922193][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.939928][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.950127][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.960822][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.972199][T19128] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1108.983160][T19128] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1108.998577][T19128] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1109.039309][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1109.061166][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1109.124326][T19128] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.160227][T19128] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.178984][T19128] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.188096][T19128] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1109.207691][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1109.223284][T19390] syz.1.4023[19390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1109.223403][T19390] syz.1.4023[19390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1109.238288][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1109.283814][T19386] device syzkaller0 entered promiscuous mode [ 1109.332605][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1109.648710][T19398] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4024'. [ 1111.335766][T19393] netlink: 'syz.1.4024': attribute type 1 has an invalid length. [ 1111.385893][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.435465][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.527126][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1111.608185][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.645386][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.692718][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1111.719253][T12440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1111.780056][T12440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1111.813825][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1111.994263][T19413] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4027'. [ 1112.415410][T19421] device veth0_vlan left promiscuous mode [ 1112.472651][T19421] device veth0_vlan entered promiscuous mode [ 1112.633914][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1112.650562][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1112.659246][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1112.682401][T19428] netlink: 'syz.0.4031': attribute type 10 has an invalid length. [ 1112.691784][T19428] bridge0: port 2(bridge_slave_1) entered disabled state [ 1112.699461][T19428] bridge0: port 1(bridge_slave_0) entered disabled state [ 1112.736214][T19428] bridge0: port 2(bridge_slave_1) entered blocking state [ 1112.743579][T19428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1112.752244][T19428] bridge0: port 1(bridge_slave_0) entered blocking state [ 1112.759454][T19428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1112.842005][T19428] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1112.857018][T19431] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4032'. [ 1113.002236][T19438] device syzkaller0 entered promiscuous mode [ 1113.889010][T19453] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4035'. [ 1115.706572][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.712956][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.355270][T19449] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 1116.626950][T19476] netlink: 'syz.3.4044': attribute type 10 has an invalid length. [ 1117.678225][T19489] device veth0_vlan left promiscuous mode [ 1117.685144][T19489] device veth0_vlan entered promiscuous mode [ 1117.709151][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1117.721914][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1117.745558][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1118.401279][T19506] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4052'. [ 1118.458533][T19505] netlink: 'syz.4.4052': attribute type 1 has an invalid length. [ 1119.432004][ T4919] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.482439][T18448] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1119.498778][ T3659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1119.512624][ T3659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1119.523221][ T3659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1119.531664][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1119.554034][ T3659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1119.631592][ T4919] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.921614][ T4919] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.184716][ T4919] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1120.332563][ T3659] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1120.357117][ T3659] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1120.366085][ T3659] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1120.374979][ T3659] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1120.383207][ T3659] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1120.393359][ T3659] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1120.886361][ T4919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.141365][ T4919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.368900][ T4919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.510821][T19517] chnl_net:caif_netlink_parms(): no params data found [ 1121.643632][ T3656] Bluetooth: hci3: command tx timeout [ 1121.700520][ T4919] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.454794][T19517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1122.490424][T19517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1122.533451][ T3656] Bluetooth: hci6: command tx timeout [ 1122.563522][T19517] device bridge_slave_0 entered promiscuous mode [ 1122.622428][T19517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1122.633133][T19517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1122.685497][T19517] device bridge_slave_1 entered promiscuous mode [ 1122.719371][T19576] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4064'. [ 1122.789845][T19532] chnl_net:caif_netlink_parms(): no params data found [ 1122.829496][T19517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1123.015759][T19517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1123.050222][T19580] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4065'. [ 1123.108072][T19517] team0: Port device team_slave_0 added [ 1123.336446][T19517] team0: Port device team_slave_1 added [ 1123.513837][T19591] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4067'. [ 1123.552787][T19594] netlink: 'syz.1.4067': attribute type 1 has an invalid length. [ 1123.595634][T19517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1123.607268][T19517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.672944][T19517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1123.714278][T19597] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4068'. [ 1123.723979][ T3656] Bluetooth: hci3: command tx timeout [ 1123.829879][T19517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1123.842055][T19517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1123.922402][T19517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1123.957787][T19532] bridge0: port 1(bridge_slave_0) entered blocking state [ 1123.978644][T19532] bridge0: port 1(bridge_slave_0) entered disabled state [ 1123.993595][T19532] device bridge_slave_0 entered promiscuous mode [ 1124.050151][T19532] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.072721][T19532] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.148204][T19532] device bridge_slave_1 entered promiscuous mode [ 1124.609728][ T3659] Bluetooth: hci6: command tx timeout [ 1124.801431][T19532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1124.965412][T19517] device hsr_slave_0 entered promiscuous mode [ 1124.983499][T19517] device hsr_slave_1 entered promiscuous mode [ 1124.990102][T19517] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1125.010739][T19517] Cannot create hsr debugfs directory [ 1125.040994][T19532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1125.275716][T19634] device veth0_vlan left promiscuous mode [ 1125.284816][T19634] device veth0_vlan entered promiscuous mode [ 1125.661989][T19532] team0: Port device team_slave_0 added [ 1125.802661][T19532] team0: Port device team_slave_1 added [ 1125.814103][ T3656] Bluetooth: hci3: command tx timeout [ 1125.831395][T19647] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4075'. [ 1125.970990][T19532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1125.978349][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.007540][T19532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1126.102538][T19532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1126.111233][T19532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1126.140724][T19532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1126.506086][T19665] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4076'. [ 1126.683646][ T3656] Bluetooth: hci6: command tx timeout [ 1126.741535][T19532] device hsr_slave_0 entered promiscuous mode [ 1126.790919][T19532] device hsr_slave_1 entered promiscuous mode [ 1126.804570][T19532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1126.842740][T19532] Cannot create hsr debugfs directory [ 1127.300666][ T4919] device hsr_slave_0 left promiscuous mode [ 1127.311254][ T4919] device hsr_slave_1 left promiscuous mode [ 1127.318688][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.326633][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.336404][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.344740][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.352778][ T4919] device bridge_slave_1 left promiscuous mode [ 1127.359703][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.372086][ T4919] device bridge_slave_0 left promiscuous mode [ 1127.386893][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.424661][ T4919] device hsr_slave_0 left promiscuous mode [ 1127.438387][ T4919] device hsr_slave_1 left promiscuous mode [ 1127.452769][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1127.469772][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1127.491072][ T4919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1127.501756][ T4919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1127.522306][ T4919] device bridge_slave_1 left promiscuous mode [ 1127.529871][ T4919] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.551281][ T4919] device bridge_slave_0 left promiscuous mode [ 1127.557728][ T4919] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.605800][ T4919] device veth1_macvtap left promiscuous mode [ 1127.611858][ T4919] device veth0_macvtap left promiscuous mode [ 1127.618171][ T4919] device veth1_vlan left promiscuous mode [ 1127.624447][ T4919] device veth0_vlan left promiscuous mode [ 1127.632655][ T4919] device veth1_macvtap left promiscuous mode [ 1127.638824][ T4919] device veth0_macvtap left promiscuous mode [ 1127.645457][ T4919] device veth1_vlan left promiscuous mode [ 1127.651270][ T4919] device veth0_vlan left promiscuous mode [ 1127.893100][ T3659] Bluetooth: hci3: command tx timeout [ 1128.330655][ T4919] team0 (unregistering): Port device team_slave_1 removed [ 1128.383015][ T4919] team0 (unregistering): Port device team_slave_0 removed [ 1128.427016][ T4919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1128.473886][ T4919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1128.767244][ T3656] Bluetooth: hci6: command tx timeout [ 1128.944179][ T4919] bond0 (unregistering): Released all slaves [ 1129.418046][ T4919] team0 (unregistering): Port device team_slave_1 removed [ 1129.459396][ T4919] team0 (unregistering): Port device team_slave_0 removed [ 1129.502118][ T4919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1129.546025][ T4919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1129.993355][ T4919] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1130.002144][ T4919] bond0 (unregistering): Released all slaves [ 1130.669679][T19687] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4079'. [ 1131.414860][T19701] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4080'. [ 1131.751708][T19517] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1131.865125][T19517] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1131.924550][T19517] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1132.005119][T19517] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1132.146695][T19532] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1132.244805][T19532] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1132.286567][T19532] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1132.350988][T19532] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1132.672322][T19517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.744402][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1132.763819][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1132.796916][T19517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.855999][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1132.879346][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1132.907813][T18906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.914984][T18906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.939846][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1133.039692][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1133.050575][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1133.059610][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1133.066878][T18906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1133.152601][T19726] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4085'. [ 1133.435210][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1133.470391][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1133.480088][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1133.491705][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1133.504700][T19532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1133.521467][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1133.553942][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1133.584100][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1133.644155][T19532] 8021q: adding VLAN 0 to HW filter on device team0 [ 1133.666173][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1133.682171][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1133.713599][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1133.742070][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1133.771904][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1133.810499][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1133.839805][T18906] bridge0: port 1(bridge_slave_0) entered blocking state [ 1133.847005][T18906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1133.887805][T19747] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4086'. [ 1134.084770][T19517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.115941][T19517] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1134.125431][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1134.145566][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1134.163505][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1134.183893][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1134.234396][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1134.243583][T18906] bridge0: port 2(bridge_slave_1) entered blocking state [ 1134.250721][T18906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1134.258816][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1134.306286][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1134.348920][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1134.380323][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1134.425942][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1134.468063][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1134.592233][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1134.610454][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1134.643657][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1134.643833][T19757] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4089'. [ 1134.670933][T19756] netlink: 'syz.4.4089': attribute type 1 has an invalid length. [ 1134.890271][T19760] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4090'. [ 1134.938879][T19532] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1134.964838][T19532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1134.987633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1135.004191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1135.115741][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1135.143217][T12440] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1135.314576][T19517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1135.557886][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1135.587045][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1135.706755][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1135.720892][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1135.822215][T19517] device veth0_vlan entered promiscuous mode [ 1135.834277][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1135.848566][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1135.911602][T19517] device veth1_vlan entered promiscuous mode [ 1136.037511][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1136.046465][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1136.055024][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1136.062568][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1136.091026][T19532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1136.154937][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1136.192230][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1136.217486][T19517] device veth0_macvtap entered promiscuous mode [ 1136.259141][T19517] device veth1_macvtap entered promiscuous mode [ 1136.286017][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1136.305494][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1136.332146][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1136.365726][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1136.415178][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1136.434314][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1136.459547][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1136.469771][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1136.509797][T19532] device veth0_vlan entered promiscuous mode [ 1136.520957][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.556675][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.571770][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.585979][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.596432][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.607643][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.617980][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1136.628997][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.641543][T19517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1136.663347][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1136.685803][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1136.716706][T19532] device veth1_vlan entered promiscuous mode [ 1136.737109][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.757433][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.778887][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.799612][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.810829][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.831509][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.851307][T19517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1136.862053][T19517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1136.882226][T19517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1136.918441][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1136.939053][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1136.972462][T19532] device veth0_macvtap entered promiscuous mode [ 1137.038655][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1137.054138][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1137.083087][T19517] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.091825][T19517] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.107304][T19517] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.116627][T19517] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.145228][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1137.183828][T19532] device veth1_macvtap entered promiscuous mode [ 1137.310656][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.324708][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.334696][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.345263][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.355270][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.371102][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.383265][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.398695][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.419960][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1137.450954][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.484067][T19532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1137.538923][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1137.584087][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1137.604146][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1137.656229][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.711520][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.766810][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.818307][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.860779][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.881918][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.892623][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.910494][T19825] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4095'. [ 1137.921355][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.941490][T19532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1137.958697][T19532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1137.982206][T19532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1138.015239][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1138.027116][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1138.046289][T18906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.050015][T19532] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.074957][T18906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.096251][T19532] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.107786][T19532] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.121312][T19532] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1138.158208][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1138.343901][ T4919] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.355516][ T4919] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.386329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1138.462138][ T4919] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.492422][ T4919] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.628123][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1139.207001][T19835] device veth0_vlan left promiscuous mode [ 1139.217648][T19835] device veth0_vlan entered promiscuous mode [ 1139.275130][T19854] netlink: 'syz.1.4098': attribute type 1 has an invalid length. [ 1139.295375][T19851] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4098'. [ 1139.299423][ T96] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1139.356457][ T96] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1139.409353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1139.760519][T19868] netlink: 'syz.4.4100': attribute type 1 has an invalid length. [ 1139.793172][T19866] netlink: 'syz.2.4057': attribute type 10 has an invalid length. [ 1139.844564][T19868] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4100'. [ 1140.102360][T19881] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4101'. [ 1140.550288][T19875] netlink: 'syz.1.4101': attribute type 1 has an invalid length. [ 1140.761504][T19887] device veth0_vlan left promiscuous mode [ 1140.781123][T19887] device veth0_vlan entered promiscuous mode [ 1141.106403][T19906] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4105'. [ 1142.046399][T19927] device veth0_vlan left promiscuous mode [ 1142.085539][T19927] device veth0_vlan entered promiscuous mode [ 1142.259779][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1142.305024][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1142.331905][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1142.620617][T19949] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4111'. [ 1143.006862][T19956] netlink: 'syz.4.4115': attribute type 10 has an invalid length. [ 1143.160277][T19970] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4114'. [ 1143.352435][T19973] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4116'. [ 1143.683606][T19961] netlink: 'syz.1.4114': attribute type 1 has an invalid length. [ 1143.750074][T19969] netlink: 'syz.0.4116': attribute type 1 has an invalid length. [ 1144.315200][T19987] device syzkaller0 entered promiscuous mode [ 1144.399758][T20006] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4120'. [ 1148.082990][T20026] device veth0_vlan left promiscuous mode [ 1148.114950][T20026] device veth0_vlan entered promiscuous mode [ 1148.306862][T20035] netlink: 'syz.3.4127': attribute type 10 has an invalid length. [ 1148.494797][T20039] netlink: 'syz.1.4128': attribute type 1 has an invalid length. [ 1148.590665][T20039] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1149.113650][T20048] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4130'. [ 1149.225941][T20051] netlink: 'syz.1.4131': attribute type 1 has an invalid length. [ 1149.368951][T20051] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4131'. [ 1149.967968][T20071] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4135'. [ 1150.364279][T20084] device veth0_vlan left promiscuous mode [ 1150.375611][T20084] device veth0_vlan entered promiscuous mode [ 1150.429775][T20088] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 1150.446366][T20086] netlink: 'syz.2.4139': attribute type 10 has an invalid length. [ 1150.461430][T20088] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 1150.474283][T20088] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 1150.491795][T20088] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 1150.502767][T20088] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 1150.531204][T20088] netlink: 'syz.0.4140': attribute type 29 has an invalid length. [ 1150.759405][T20096] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4141'. [ 1151.083639][T20106] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4145'. [ 1151.725769][T20129] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4149'. [ 1152.079188][T20139] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4152'. [ 1152.639423][T20166] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4156'. [ 1152.990399][T20174] device veth0_vlan left promiscuous mode [ 1153.000760][T20174] device veth0_vlan entered promiscuous mode [ 1153.823972][T20195] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4161'. [ 1155.109625][T20218] validate_nla: 6 callbacks suppressed [ 1155.109646][T20218] netlink: 'syz.4.4167': attribute type 1 has an invalid length. [ 1155.149955][T20216] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4167'. [ 1155.262459][T20222] netlink: 'syz.2.4168': attribute type 10 has an invalid length. [ 1155.601656][T20228] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4170'. [ 1155.670257][T20235] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 1155.774965][T20235] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4171'. [ 1156.432871][T20258] netlink: 'syz.4.4175': attribute type 1 has an invalid length. [ 1156.494416][T20257] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4175'. [ 1157.366928][T20280] netlink: 'syz.0.4181': attribute type 1 has an invalid length. [ 1157.434457][T20280] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4181'. [ 1157.466884][T20283] netlink: 'syz.3.4182': attribute type 10 has an invalid length. [ 1158.044015][T20293] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4184'. [ 1158.196998][T20299] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4185'. [ 1159.247364][T20310] device veth0_vlan left promiscuous mode [ 1159.328906][T20315] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4191'. [ 1159.357323][T20310] device veth0_vlan entered promiscuous mode [ 1160.013142][T20342] netlink: 'syz.1.4196': attribute type 1 has an invalid length. [ 1160.076835][T20342] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4196'. [ 1160.194320][T20347] netlink: 'syz.3.4197': attribute type 10 has an invalid length. [ 1160.427038][T20352] device syzkaller0 entered promiscuous mode [ 1160.721767][T20366] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4200'. [ 1160.989748][T20364] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4201'. [ 1162.768884][T20371] netlink: 'syz.0.4201': attribute type 1 has an invalid length. [ 1163.159024][T20393] netlink: 'syz.0.4207': attribute type 1 has an invalid length. [ 1163.328409][T20397] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4207'. [ 1163.556997][T20405] device veth0_vlan left promiscuous mode [ 1163.586223][T20405] device veth0_vlan entered promiscuous mode [ 1163.837756][T20409] netlink: 'syz.2.4210': attribute type 10 has an invalid length. [ 1164.412277][T20425] netlink: 'syz.0.4213': attribute type 1 has an invalid length. [ 1164.544637][T20425] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4213'. [ 1165.010356][T20441] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4216'. [ 1165.182074][T20439] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4217'. [ 1166.853329][T20447] netlink: 'syz.1.4217': attribute type 1 has an invalid length. [ 1166.867701][T20451] device veth0_vlan left promiscuous mode [ 1166.884451][T20451] device veth0_vlan entered promiscuous mode [ 1166.911122][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1166.920753][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1166.937704][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1167.327664][T20460] netlink: 'syz.0.4222': attribute type 10 has an invalid length. [ 1167.462402][T20454] device veth0_vlan left promiscuous mode [ 1167.507718][T20454] device veth0_vlan entered promiscuous mode [ 1167.828072][T20475] netlink: 'syz.0.4224': attribute type 1 has an invalid length. [ 1167.882722][T20475] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4224'. [ 1167.902059][T20477] : renamed from ipvlan1 [ 1168.471497][T20494] netlink: 'syz.4.4230': attribute type 1 has an invalid length. [ 1168.499156][T20494] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4230'. [ 1168.609132][T20497] netlink: 'syz.0.4229': attribute type 1 has an invalid length. [ 1168.761520][T20497] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4229'. [ 1168.995252][T20505] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4231'. [ 1169.602763][T20514] device veth0_vlan left promiscuous mode [ 1169.615852][T20514] device veth0_vlan entered promiscuous mode [ 1169.687765][T20525] device veth0_vlan left promiscuous mode [ 1169.695394][T20525] device veth0_vlan entered promiscuous mode [ 1169.773276][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1169.792659][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1169.804597][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1169.970483][T20539] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4240'. [ 1170.185048][T20542] netlink: 'syz.4.4242': attribute type 1 has an invalid length. [ 1170.247570][T20542] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4242'. [ 1170.806811][T20568] netlink: 'syz.4.4246': attribute type 1 has an invalid length. [ 1170.832560][T20567] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4247'. [ 1170.962435][T20568] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4246'. [ 1171.562544][T20584] device syzkaller0 entered promiscuous mode [ 1172.018658][T20603] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4256'. [ 1173.902334][T20595] device veth0_vlan left promiscuous mode [ 1173.914064][T20595] device veth0_vlan entered promiscuous mode [ 1173.933409][T20607] netlink: 'syz.0.4256': attribute type 1 has an invalid length. [ 1174.109597][T20616] netlink: 'syz.4.4257': attribute type 1 has an invalid length. [ 1174.120903][T20612] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4257'. [ 1174.798816][T20644] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4262'. [ 1174.864783][T20646] netlink: 'syz.4.4263': attribute type 1 has an invalid length. [ 1174.927065][T20646] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4263'. [ 1175.719494][T20666] device veth0_vlan left promiscuous mode [ 1175.729234][T20666] device veth0_vlan entered promiscuous mode [ 1175.861605][T20680] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4271'. [ 1176.499107][T20693] netlink: 'syz.1.4274': attribute type 1 has an invalid length. [ 1176.504680][T20691] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4274'. [ 1176.767448][T20702] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4277'. [ 1177.085261][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.092143][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.445833][T20730] netlink: 'syz.0.4281': attribute type 1 has an invalid length. [ 1177.467040][T20728] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4281'. [ 1177.792627][T20743] netlink: 'syz.2.4284': attribute type 29 has an invalid length. [ 1177.882541][T20740] device veth0_vlan left promiscuous mode [ 1177.913753][T20740] device veth0_vlan entered promiscuous mode [ 1177.950206][T20743] netlink: 'syz.2.4284': attribute type 29 has an invalid length. [ 1177.999083][T20744] netlink: 'syz.2.4284': attribute type 29 has an invalid length. [ 1178.007590][T20747] netlink: 'syz.2.4284': attribute type 29 has an invalid length. [ 1178.028271][T20751] netlink: 'syz.2.4284': attribute type 29 has an invalid length. [ 1178.475664][T20764] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4289'. [ 1178.597677][T20770] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4291'. [ 1178.682861][T20779] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4292'. [ 1179.163226][T20723] Bluetooth: hci0: command 0x0406 tx timeout [ 1179.163852][ T3659] Bluetooth: hci1: command 0x0406 tx timeout [ 1179.173022][ T3656] Bluetooth: hci2: command 0x0406 tx timeout [ 1180.015377][T20812] device veth0_vlan left promiscuous mode [ 1180.033520][T20812] device veth0_vlan entered promiscuous mode [ 1180.064438][T20824] validate_nla: 4 callbacks suppressed [ 1180.064453][T20824] netlink: 'syz.1.4300': attribute type 1 has an invalid length. [ 1180.121146][T20820] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4300'. [ 1180.515195][T20837] netlink: 'syz.4.4306': attribute type 1 has an invalid length. [ 1180.580107][T20837] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4306'. [ 1180.593721][T20843] netlink: 'syz.0.4307': attribute type 1 has an invalid length. [ 1180.769142][T20843] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4307'. [ 1181.017642][T20857] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4308'. [ 1181.317448][T20867] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 1182.533647][T20893] device syzkaller0 entered promiscuous mode [ 1182.632273][T20900] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4321'. [ 1182.927742][T20903] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4322'. [ 1184.866055][T20906] netlink: 'syz.4.4322': attribute type 1 has an invalid length. [ 1185.334790][T20920] netlink: 'syz.4.4325': attribute type 1 has an invalid length. [ 1185.449429][T20920] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4325'. [ 1185.549490][T20925] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4326'. [ 1186.342933][T20939] device veth0_vlan left promiscuous mode [ 1186.361554][T20939] device veth0_vlan entered promiscuous mode [ 1186.877018][T20961] netlink: 'syz.1.4336': attribute type 1 has an invalid length. [ 1186.893973][T20960] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4335'. [ 1187.124378][T20961] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4336'. [ 1187.547850][T20986] netlink: 'syz.4.4340': attribute type 1 has an invalid length. [ 1187.649545][T20994] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4341'. [ 1187.868847][T20986] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4340'. [ 1187.902433][T20989] device veth0_vlan left promiscuous mode [ 1187.914381][T20989] device veth0_vlan entered promiscuous mode [ 1188.800577][T21022] device veth1_macvtap left promiscuous mode [ 1188.807151][T21022] device macsec0 entered promiscuous mode [ 1188.879344][T21022] device veth1_macvtap entered promiscuous mode [ 1189.283734][T21040] netlink: 'syz.0.4354': attribute type 1 has an invalid length. [ 1189.284638][T21039] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4353'. [ 1189.444133][T21040] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4354'. [ 1189.649856][T21049] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4356'. [ 1189.747201][T21053] device veth0_vlan left promiscuous mode [ 1189.778020][T21053] device veth0_vlan entered promiscuous mode [ 1189.981087][T21058] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4358'. [ 1191.030483][T21078] device veth0_vlan left promiscuous mode [ 1191.095705][T21078] device veth0_vlan entered promiscuous mode [ 1191.632632][T21103] netlink: 'syz.1.4369': attribute type 1 has an invalid length. [ 1191.682918][T21103] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4369'. [ 1191.708568][T21110] netlink: 'syz.4.4370': attribute type 1 has an invalid length. [ 1191.863220][T21110] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4370'. [ 1192.059572][T21113] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1192.383966][T21128] netlink: 'syz.4.4374': attribute type 1 has an invalid length. [ 1192.586979][T21131] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4374'. [ 1195.139385][T21169] netlink: 'syz.0.4384': attribute type 1 has an invalid length. [ 1195.237617][T21169] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4384'. [ 1195.401738][T21179] netlink: 'syz.4.4385': attribute type 1 has an invalid length. [ 1195.419132][T21180] device veth0_vlan left promiscuous mode [ 1195.433605][T21181] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4387'. [ 1195.446722][T21180] device veth0_vlan entered promiscuous mode [ 1195.563813][T21179] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4385'. [ 1195.937735][T21198] netlink: 'syz.0.4390': attribute type 1 has an invalid length. [ 1195.966999][T21196] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4390'. [ 1197.449138][T21226] device veth0_vlan left promiscuous mode [ 1197.502635][T21226] device veth0_vlan entered promiscuous mode [ 1197.754317][T21244] netlink: 'syz.2.4401': attribute type 1 has an invalid length. [ 1197.783351][T21242] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1198.048194][T21253] netlink: 'syz.0.4402': attribute type 1 has an invalid length. [ 1198.152375][T21251] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4402'. [ 1198.250178][T21258] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4403'. [ 1198.821023][T21270] netlink: 'syz.0.4406': attribute type 1 has an invalid length. [ 1198.901633][T21270] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4406'. [ 1199.258202][T21279] device syzkaller0 entered promiscuous mode [ 1202.054348][T21306] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4414'. [ 1202.070158][T21301] netlink: 'syz.4.4414': attribute type 1 has an invalid length. [ 1202.114538][T21302] device veth0_vlan left promiscuous mode [ 1202.128971][T21302] device veth0_vlan entered promiscuous mode [ 1202.430618][T21309] device veth0_vlan left promiscuous mode [ 1202.438215][T21309] device veth0_vlan entered promiscuous mode [ 1202.471658][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1202.493334][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1202.510263][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1202.572973][T21317] netlink: 'syz.1.4417': attribute type 1 has an invalid length. [ 1202.625311][T21317] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4417'. [ 1202.800248][T21318] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4418'. [ 1203.228689][T21332] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4422'. [ 1204.212053][T21365] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4431'. [ 1204.284558][T21358] netlink: 'syz.1.4431': attribute type 1 has an invalid length. [ 1204.323659][T21350] device veth0_vlan left promiscuous mode [ 1204.345075][T21350] device veth0_vlan entered promiscuous mode [ 1204.412920][T21366] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4429'. [ 1204.532447][T21368] device veth0_vlan left promiscuous mode [ 1204.597794][T21368] device veth0_vlan entered promiscuous mode [ 1204.746685][T21378] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4433'. [ 1205.687066][T21402] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4440'. [ 1206.484819][T21419] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4444'. [ 1206.743321][T21421] device veth0_vlan left promiscuous mode [ 1206.753928][T21421] device veth0_vlan entered promiscuous mode [ 1206.798764][T21432] netlink: 'syz.4.4446': attribute type 1 has an invalid length. [ 1206.811087][T21424] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4446'. [ 1207.037381][T21431] device veth0_vlan left promiscuous mode [ 1207.079466][T21431] device veth0_vlan entered promiscuous mode [ 1207.375828][T21453] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1208.236453][T21476] netlink: 'syz.4.4457': attribute type 1 has an invalid length. [ 1208.304999][T21476] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4457'. [ 1208.526232][T21484] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4458'. [ 1208.760277][T21486] device veth0_vlan left promiscuous mode [ 1208.802487][T21486] device veth0_vlan entered promiscuous mode [ 1208.870672][T21493] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4461'. [ 1208.886601][T21495] netlink: 'syz.0.4461': attribute type 1 has an invalid length. [ 1209.522066][T21505] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4464'. [ 1209.991452][T21500] device veth0_vlan left promiscuous mode [ 1210.020736][T21500] device veth0_vlan entered promiscuous mode [ 1211.187097][T21548] netlink: 'syz.2.4474': attribute type 1 has an invalid length. [ 1211.230425][T21547] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4473'. [ 1211.430144][T21548] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4474'. [ 1212.039895][T21577] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4478'. [ 1212.066304][T21565] device veth0_vlan left promiscuous mode [ 1212.080807][T21565] device veth0_vlan entered promiscuous mode [ 1212.133873][T21569] netlink: 'syz.4.4478': attribute type 1 has an invalid length. [ 1212.175626][T21575] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4479'. [ 1212.777880][T21604] netlink: 'syz.1.4487': attribute type 1 has an invalid length. [ 1212.849404][T21604] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1213.163986][T21617] netlink: 'syz.0.4489': attribute type 1 has an invalid length. [ 1213.194578][T21611] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4489'. [ 1214.453467][T21646] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4495'. [ 1214.464573][T21637] device veth0_vlan left promiscuous mode [ 1214.474299][T21637] device veth0_vlan entered promiscuous mode [ 1214.528036][T21644] netlink: 'syz.4.4495': attribute type 1 has an invalid length. [ 1214.553598][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1214.578213][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1214.611587][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1214.782194][T21655] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4497'. [ 1215.484098][T21665] device veth0_vlan left promiscuous mode [ 1215.490541][T21665] device veth0_vlan entered promiscuous mode [ 1215.491051][T21672] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4501'. [ 1215.516615][T21674] netlink: 'syz.0.4501': attribute type 1 has an invalid length. [ 1215.528213][T21671] netlink: 'syz.4.4502': attribute type 15 has an invalid length. [ 1215.542639][T21671] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.4502'. [ 1215.630325][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1215.651156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1215.664265][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1215.793853][T21682] netlink: 'syz.4.4504': attribute type 1 has an invalid length. [ 1215.839096][T21682] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4504'. [ 1216.451553][T21690] device syzkaller0 entered promiscuous mode [ 1216.610865][T21698] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4509'. [ 1216.696685][T21702] device veth0_vlan left promiscuous mode [ 1216.704130][T21702] device veth0_vlan entered promiscuous mode [ 1216.714228][T21705] netlink: 'syz.4.4509': attribute type 1 has an invalid length. [ 1216.961568][T21714] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4511'. [ 1219.289867][T21737] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4516'. [ 1219.332311][T21728] device veth0_vlan left promiscuous mode [ 1219.340967][T21728] device veth0_vlan entered promiscuous mode [ 1219.633661][T21745] netlink: 'syz.0.4519': attribute type 1 has an invalid length. [ 1219.711900][T21745] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4519'. [ 1220.123181][ T3659] Bluetooth: hci5: command 0x0406 tx timeout [ 1220.186475][T21761] netlink: 'syz.4.4523': attribute type 1 has an invalid length. [ 1220.215370][T21760] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4523'. [ 1220.639057][T21771] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4526'. [ 1220.748880][T21775] device veth0_vlan left promiscuous mode [ 1220.768724][T21775] device veth0_vlan entered promiscuous mode [ 1223.463343][T21799] device veth0_vlan left promiscuous mode [ 1223.488972][T21814] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4533'. [ 1223.499048][T21799] device veth0_vlan entered promiscuous mode [ 1223.552495][T21807] netlink: 'syz.4.4533': attribute type 1 has an invalid length. [ 1223.674469][T21813] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4534'. [ 1224.231656][T21832] netlink: 'syz.4.4538': attribute type 1 has an invalid length. [ 1224.300795][T21828] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4538'. [ 1224.523901][T21841] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4541'. [ 1225.723959][T21867] device veth0_vlan left promiscuous mode [ 1225.741286][T21867] device veth0_vlan entered promiscuous mode [ 1226.195477][T21884] netlink: 'syz.2.4549': attribute type 1 has an invalid length. [ 1226.360505][T21886] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4549'. [ 1226.541371][T21895] netlink: 'syz.1.4554': attribute type 1 has an invalid length. [ 1226.543059][T21887] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4550'. [ 1226.669932][T21895] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4554'. [ 1226.996829][T21900] device veth0_vlan left promiscuous mode [ 1227.005592][T21900] device veth0_vlan entered promiscuous mode [ 1227.042704][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1227.067468][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1227.086044][ T4919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1227.233883][T21904] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4557'. [ 1228.068296][T21933] device veth0_vlan left promiscuous mode [ 1228.109481][T21933] device veth0_vlan entered promiscuous mode [ 1228.405400][T21952] netlink: 'syz.1.4567': attribute type 1 has an invalid length. [ 1228.475205][T21952] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4567'. [ 1228.631647][T21955] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1229.061441][T21974] netlink: 'syz.0.4571': attribute type 1 has an invalid length. [ 1229.135945][T21963] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4571'. [ 1229.233070][T21971] device veth0_vlan left promiscuous mode [ 1229.247808][T21971] device veth0_vlan entered promiscuous mode [ 1229.284086][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1229.314247][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1229.370539][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1229.404873][T21979] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4574'. [ 1230.238638][T21999] device veth0_vlan left promiscuous mode [ 1230.256177][T21999] device veth0_vlan entered promiscuous mode [ 1230.299621][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1230.324341][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1230.396255][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1230.539231][T22018] netlink: 'syz.0.4584': attribute type 1 has an invalid length. [ 1230.571473][T22017] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4583'. [ 1230.717429][T22018] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4584'. [ 1231.238277][T22040] device veth0_vlan left promiscuous mode [ 1231.252754][T22040] device veth0_vlan entered promiscuous mode [ 1232.329771][T22067] device veth0_vlan left promiscuous mode [ 1232.345604][T22067] device veth0_vlan entered promiscuous mode [ 1233.715372][T22083] netlink: 'syz.4.4598': attribute type 1 has an invalid length. [ 1233.751197][T22083] __nla_validate_parse: 2 callbacks suppressed [ 1233.751216][T22083] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4598'. [ 1233.991263][T22084] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4599'. [ 1234.079014][ T96] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 1234.093951][T22098] device syzkaller0 entered promiscuous mode [ 1234.451633][T22105] device veth0_vlan left promiscuous mode [ 1234.465598][T22105] device veth0_vlan entered promiscuous mode [ 1234.486441][T22108] netlink: 'syz.4.4604': attribute type 1 has an invalid length. [ 1234.489686][T22101] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4604'. [ 1234.688565][T22117] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4606'. [ 1235.459771][T22129] device veth0_vlan left promiscuous mode [ 1235.499535][T22129] device veth0_vlan entered promiscuous mode [ 1235.668058][T22148] netlink: 'syz.0.4614': attribute type 1 has an invalid length. [ 1235.688614][T22144] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4614'. [ 1235.760639][T22157] netlink: 'syz.1.4616': attribute type 1 has an invalid length. [ 1235.910953][T22151] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4616'. [ 1236.383193][T22168] device veth0_vlan left promiscuous mode [ 1236.389703][T22168] device veth0_vlan entered promiscuous mode [ 1236.414736][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1236.439464][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1236.469301][ T2528] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1236.713596][T22183] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4623'. [ 1236.946953][T22187] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4622'. [ 1237.405318][T20723] Bluetooth: hci6: ISO packet too small [ 1237.707997][T22220] netlink: 'syz.1.4632': attribute type 1 has an invalid length. [ 1237.802608][T22220] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4632'. [ 1237.807742][T22224] netlink: 'syz.2.4631': attribute type 1 has an invalid length. [ 1237.991288][T22224] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4631'. [ 1238.417755][T22233] device veth0_vlan left promiscuous mode [ 1238.426352][T22233] device veth0_vlan entered promiscuous mode [ 1238.506140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1238.534422][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.540769][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.557172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1238.601515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1239.119362][T22259] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4639'. [ 1239.687577][T22267] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 1239.707499][T22264] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4640'. [ 1239.878069][T22271] mac80211_hwsim hwsim6 wlan1: refused to change device tx_queue_len [ 1240.840062][T22279] device veth0_vlan left promiscuous mode [ 1240.887981][T22288] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4647'. [ 1240.888663][T22279] device veth0_vlan entered promiscuous mode [ 1241.050202][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1241.060364][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1241.072242][T18906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1241.173842][T22301] netlink: 'syz.4.4649': attribute type 1 has an invalid length. [ 1241.307798][T22301] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4649'. [ 1241.593953][T22309] device veth0_vlan left promiscuous mode [ 1241.604621][T22309] device veth0_vlan entered promiscuous mode [ 1241.667991][T22316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4653'. [ 1242.072045][T22336] netlink: 'syz.1.4657': attribute type 1 has an invalid length. [ 1242.155554][T22336] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4657'. [ 1242.472151][T22349] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.4669'. [ 1242.943620][T22360] netlink: 'syz.1.4662': attribute type 1 has an invalid length. [ 1242.998151][T22358] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4662'. [ 1243.439779][T22385] netlink: 'syz.0.4666': attribute type 15 has an invalid length. [ 1243.447870][T22385] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.4666'. [ 1243.707711][T22395] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4667'. [ 1243.771617][T22389] netlink: 'syz.4.4667': attribute type 1 has an invalid length. [ 1244.053690][T22388] device veth0_vlan left promiscuous mode [ 1244.076252][T22388] device veth0_vlan entered promiscuous mode [ 1244.310338][T22154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1244.324430][T22154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1244.332535][T22154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1244.635768][T22417] netlink: 'syz.4.4674': attribute type 1 has an invalid length. [ 1244.713669][T22416] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4674'. [ 1245.617788][T22428] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4677'. [ 1245.723117][T20723] Bluetooth: hci6: command 0x0406 tx timeout [ 1245.723394][ T3656] Bluetooth: hci3: command 0x0406 tx timeout [ 1245.953976][T22441] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4679'. [ 1246.406377][T22453] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4692'. [ 1246.843367][ T28] INFO: task syz.4.3919:18970 blocked for more than 143 seconds. [ 1246.851673][ T28] Not tainted 6.1.112-syzkaller #0 [ 1246.904972][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1246.937347][ T28] task:syz.4.3919 state:D stack:25912 pid:18970 ppid:18454 flags:0x00004002 [ 1246.970328][ T28] Call Trace: [ 1246.979463][ T28] [ 1246.982518][ T28] __schedule+0x143f/0x4570 [ 1246.988068][ T28] ? ct_nmi_exit+0x13f/0x1c0 [ 1246.999586][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1247.012482][ T28] ? print_irqtrace_events+0x210/0x210 [ 1247.032975][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1247.051390][ T28] schedule+0xbf/0x180 [ 1247.083449][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 1247.099909][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 1247.107605][ T28] ? down_write_killable_nested+0x90/0x90 [ 1247.119752][ T28] ? read_lock_is_recursive+0x10/0x10 [ 1247.138681][ T28] ? exit_mmap+0x269/0x9f0 [ 1247.149911][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 1247.177117][ T28] ? rwsem_write_trylock+0x166/0x210 [ 1247.182507][ T28] ? clear_nonspinnable+0x60/0x60 [ 1247.200445][ T28] exit_mmap+0x29a/0x9f0 [ 1247.204841][ T28] ? vm_brk+0x20/0x20 [ 1247.208866][ T28] ? memset+0x1f/0x40 [ 1247.238659][ T28] ? uprobe_clear_state+0x271/0x280 [ 1247.256772][ T28] ? mm_update_next_owner+0x51b/0x640 [ 1247.262251][ T28] __mmput+0x115/0x3c0 [ 1247.271438][ T28] exit_mm+0x226/0x300 [ 1247.277339][ T28] ? do_exit+0x26a0/0x26a0 [ 1247.282348][ T28] ? taskstats_exit+0x399/0x920 [ 1247.287485][ T28] ? tty_audit_exit+0x150/0x1f0 [ 1247.290074][T22464] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4685'. [ 1247.292372][ T28] do_exit+0x9f6/0x26a0 [ 1247.306094][ T28] ? put_task_struct+0x80/0x80 [ 1247.310921][ T28] ? ct_nmi_exit+0x13f/0x1c0 [ 1247.315601][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1247.321706][ T28] ? print_irqtrace_events+0x210/0x210 [ 1247.329531][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1247.342861][ T28] do_group_exit+0x202/0x2b0 [ 1247.354613][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1247.359883][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1247.367317][ T28] get_signal+0x16f7/0x17d0 [ 1247.371901][ T28] ? ptrace_notify+0x370/0x370 [ 1247.376843][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 1247.383268][ T28] ? ____sys_sendmsg+0x8f0/0x8f0 [ 1247.388293][ T28] ? get_sigframe_size+0x10/0x10 [ 1247.394909][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1247.400952][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1247.406979][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1247.412530][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 1247.417926][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1247.423572][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1247.429148][ T28] do_syscall_64+0x47/0xb0 [ 1247.434272][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1247.439011][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.445006][ T28] RIP: 0033:0x7f4cc3b7dff9 [ 1247.449451][ T28] RSP: 002b:00007f4cc49c2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1247.457934][ T28] RAX: 0000000000033fe0 RBX: 00007f4cc3d35f80 RCX: 00007f4cc3b7dff9 [ 1247.467745][ T28] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 1247.475798][ T28] RBP: 00007f4cc3bf0296 R08: 0000000000000000 R09: 0000000000000000 [ 1247.484716][ T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1247.492728][ T28] R13: 0000000000000000 R14: 00007f4cc3d35f80 R15: 00007ffd849e56f8 [ 1247.500877][ T28] [ 1247.505364][ T28] INFO: task syz.2.3923:18984 blocked for more than 144 seconds. [ 1247.513194][ T28] Not tainted 6.1.112-syzkaller #0 [ 1247.518846][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1247.527694][ T28] task:syz.2.3923 state:D stack:24216 pid:18984 ppid:18445 flags:0x00004000 [ 1247.537065][ T28] Call Trace: [ 1247.540359][ T28] [ 1247.544081][ T28] __schedule+0x143f/0x4570 [ 1247.548658][ T28] ? ct_nmi_exit+0x13f/0x1c0 [ 1247.553394][ T28] ? release_firmware_map_entry+0x186/0x186 [ 1247.559330][ T28] ? print_irqtrace_events+0x210/0x210 [ 1247.564893][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1247.570174][ T28] schedule+0xbf/0x180 [ 1247.579239][ T28] rwsem_down_write_slowpath+0xea1/0x14b0 [ 1247.585971][ T28] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 1247.592068][ T28] ? down_write_killable_nested+0x90/0x90 [ 1247.602630][ T28] ? read_lock_is_recursive+0x10/0x10 [ 1247.609210][ T28] ? exit_mmap+0x269/0x9f0 [ 1247.619254][ T28] ? __lock_acquire+0x1f80/0x1f80 [ 1247.625406][ T28] ? rwsem_write_trylock+0x166/0x210 [ 1247.630832][ T28] ? clear_nonspinnable+0x60/0x60 [ 1247.640614][ T28] exit_mmap+0x29a/0x9f0 [ 1247.646118][ T28] ? vm_brk+0x20/0x20 [ 1247.650119][ T28] ? memset+0x1f/0x40 [ 1247.658776][ T28] ? uprobe_clear_state+0x271/0x280 [ 1247.665087][ T28] ? mm_update_next_owner+0x51b/0x640 [ 1247.670584][ T28] __mmput+0x115/0x3c0 [ 1247.679512][ T28] exit_mm+0x226/0x300 [ 1247.685651][ T28] ? do_exit+0x26a0/0x26a0 [ 1247.690629][ T28] ? taskstats_exit+0x399/0x920 [ 1247.700591][ T28] ? tty_audit_exit+0x150/0x1f0 [ 1247.705619][ T28] do_exit+0x9f6/0x26a0 [ 1247.709821][ T28] ? put_task_struct+0x80/0x80 [ 1247.714748][ T28] ? ct_nmi_exit+0x13f/0x1c0 [ 1247.719388][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1247.726964][ T28] ? print_irqtrace_events+0x210/0x210 [ 1247.732457][ T28] ? _raw_spin_lock_irq+0xdb/0x110 [ 1247.737656][ T28] do_group_exit+0x202/0x2b0 [ 1247.742276][ T28] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1247.747538][ T28] ? lockdep_hardirqs_on+0x94/0x130 [ 1247.752813][ T28] get_signal+0x16f7/0x17d0 [ 1247.757386][ T28] ? ptrace_notify+0x370/0x370 [ 1247.762187][ T28] ? futex_wake+0x4ea/0x590 [ 1247.767421][ T28] arch_do_signal_or_restart+0xb0/0x1a10 [ 1247.773174][ T28] ? do_futex+0x375/0x490 [ 1247.777536][ T28] ? bpf_raw_tracepoint_open+0x1aa/0x210 [ 1247.783314][ T28] ? get_sigframe_size+0x10/0x10 [ 1247.788293][ T28] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 1247.796502][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1247.802717][ T28] ? exit_to_user_mode_loop+0x39/0x100 [ 1247.808393][ T28] exit_to_user_mode_loop+0x6a/0x100 [ 1247.813817][ T28] exit_to_user_mode_prepare+0xb1/0x140 [ 1247.819406][ T28] syscall_exit_to_user_mode+0x60/0x270 [ 1247.825034][ T28] do_syscall_64+0x47/0xb0 [ 1247.829484][ T28] ? clear_bhb_loop+0x45/0xa0 [ 1247.836027][ T28] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1247.841953][ T28] RIP: 0033:0x7f160757dff9 [ 1247.846469][ T28] RSP: 002b:00007f160840e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1247.854930][ T28] RAX: 0000000000000001 RBX: 00007f1607735f88 RCX: 00007f160757dff9 [ 1247.863175][ T28] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1607735f8c [ 1247.871169][ T28] RBP: 00007f1607735f80 R08: 0000000000000010 R09: 0000000000000000 [ 1247.879764][ T28] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f1607735f8c [ 1247.887883][ T28] R13: 0000000000000000 R14: 00007ffdc7f1aff0 R15: 00007ffdc7f1b0d8 [ 1247.896618][ T28] [ 1247.899725][ T28] [ 1247.899725][ T28] Showing all locks held in the system: [ 1247.909060][ T28] 3 locks held by kworker/u4:0/9: [ 1247.914464][ T28] #0: ffff888017c79138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1247.929800][ T28] #1: ffffc900000e7d20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1247.940254][ T28] #2: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xa/0x50 [ 1247.951170][ T28] 1 lock held by rcu_tasks_kthre/12: [ 1247.956638][ T28] #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1247.967263][ T28] 1 lock held by rcu_tasks_trace/13: [ 1247.972542][ T28] #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 1247.984263][ T28] 1 lock held by khungtaskd/28: [ 1247.989148][ T28] #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 1247.999696][ T28] 4 locks held by kworker/u4:2/40: [ 1248.004855][ T28] #0: ffff888017e1e938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1248.016829][ T28] #1: ffffc90000b17d20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1248.026860][ T28] #2: ffffffff8e4ee490 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 1248.036266][ T28] #3: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x1c/0x90 [ 1248.045852][ T28] 2 locks held by getty/3404: [ 1248.050632][ T28] #0: ffff88802e835098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1248.062037][ T28] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 1248.072441][ T28] 2 locks held by kworker/0:4/18462: [ 1248.077935][ T28] #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1248.088768][ T28] #1: ffffc9000320fd20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 1248.101859][ T28] 5 locks held by kworker/u4:7/18906: [ 1248.107462][ T28] 1 lock held by syz.4.3919/18970: [ 1248.112599][ T28] #0: ffff88807e824c58 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x29a/0x9f0 [ 1248.121766][ T28] 1 lock held by syz.2.3923/18984: [ 1248.128555][ T28] #0: ffff88807e8226d8 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x29a/0x9f0 [ 1248.137739][ T28] 2 locks held by syz.0.4683/22408: [ 1248.142990][ T28] #0: ffffffff8e4ee490 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x378/0x5d0 [ 1248.152453][ T28] #1: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: fib_net_exit_batch+0x1c/0x90 [ 1248.161833][ T28] 2 locks held by syz.1.4692/22449: [ 1248.168730][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3a/0x1b0 [ 1248.177854][ T28] #1: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 1248.188844][ T28] 1 lock held by syz.3.4684/22458: [ 1248.194006][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: ppp_release+0x86/0x1f0 [ 1248.212532][ T28] 1 lock held by syz.3.4684/22459: [ 1248.217810][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x4f5/0xf70 [ 1248.226648][ T28] 1 lock held by syz.3.4684/22460: [ 1248.231782][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x4f5/0xf70 [ 1248.242465][ T28] 1 lock held by syz.2.4685/22467: [ 1248.247861][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x465/0x2430 [ 1248.257320][ T28] 1 lock held by syz.2.4685/22470: [ 1248.262448][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 1248.271936][ T28] 1 lock held by syz.2.4685/22473: [ 1248.278323][ T28] #0: ffffffff8e4fa7e8 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x465/0x2430 [ 1248.288747][ T28] [ 1248.291141][ T28] ============================================= [ 1248.291141][ T28] [ 1248.316453][T22470] netlink: 'syz.2.4685': attribute type 1 has an invalid length. [ 1248.317360][ T28] NMI backtrace for cpu 1 [ 1248.328558][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 1248.336466][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1248.346657][ T28] Call Trace: [ 1248.349948][ T28] [ 1248.352894][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1248.357611][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1248.363089][ T28] ? panic+0x764/0x764 [ 1248.367173][ T28] ? vprintk_emit+0x622/0x740 [ 1248.371874][ T28] ? printk_sprint+0x490/0x490 [ 1248.376738][ T28] ? nmi_cpu_backtrace+0x252/0x560 [ 1248.381857][ T28] nmi_cpu_backtrace+0x4e1/0x560 [ 1248.386804][ T28] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1248.392970][ T28] ? _printk+0xd1/0x111 [ 1248.397137][ T28] ? panic+0x764/0x764 [ 1248.401309][ T28] ? __wake_up_klogd+0xcc/0x100 [ 1248.406172][ T28] ? panic+0x764/0x764 [ 1248.410253][ T28] ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0 [ 1248.416327][ T28] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1248.422419][ T28] nmi_trigger_cpumask_backtrace+0x1ae/0x3f0 [ 1248.428412][ T28] watchdog+0xf88/0xfd0 [ 1248.432606][ T28] ? watchdog+0x1f8/0xfd0 [ 1248.436970][ T28] kthread+0x28d/0x320 [ 1248.441304][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1248.446339][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1248.450952][ T28] ret_from_fork+0x1f/0x30 [ 1248.455392][ T28] [ 1248.459398][ T28] Sending NMI from CPU 1 to CPUs 0: [ 1248.464872][ C0] NMI backtrace for cpu 0 [ 1248.464883][ C0] CPU: 0 PID: 22459 Comm: syz.3.4684 Not tainted 6.1.112-syzkaller #0 [ 1248.464900][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1248.464909][ C0] RIP: 0010:__hrtimer_run_queues+0x493/0xe50 [ 1248.464937][ C0] Code: 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 93 05 00 00 41 21 5d 00 48 8b 04 24 48 8d 58 28 48 89 d8 48 c1 e8 03 42 80 3c 38 00 <74> 08 48 89 df e8 13 53 68 00 4c 8b 23 4c 89 f7 48 8b b4 24 a0 00 [ 1248.464965][ C0] RSP: 0018:ffffc90000007d60 EFLAGS: 00000046 [ 1248.464981][ C0] RAX: 1ffff1100b05fb71 RBX: ffff8880582fdb88 RCX: ffff88802b961dc0 [ 1248.464994][ C0] RDX: 0000000000010000 RSI: ffff8880b8e2a590 RDI: ffff8880582fdb68 [ 1248.465006][ C0] RBP: ffffc90000007eb0 R08: ffffffff8aa0ddf4 R09: fffffbfff1d33f2e [ 1248.465019][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000122acf2e51b [ 1248.465031][ C0] R13: ffff8880b8e2a4c0 R14: ffff8880b8e2a4c0 R15: dffffc0000000000 [ 1248.465044][ C0] FS: 00007faa82be36c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1248.465060][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1248.465072][ C0] CR2: 00005555630735c8 CR3: 00000000674e7000 CR4: 00000000003506f0 [ 1248.465087][ C0] DR0: 0000000020000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 1248.465098][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 1248.465109][ C0] Call Trace: [ 1248.465113][ C0] [ 1248.465119][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 1248.465137][ C0] ? read_lock_is_recursive+0x10/0x10 [ 1248.465165][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 1248.465183][ C0] ? nmi_handle+0x25/0x440 [ 1248.465218][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 1248.465245][ C0] ? nmi_handle+0x12e/0x440 [ 1248.465271][ C0] ? nmi_handle+0x25/0x440 [ 1248.465297][ C0] ? __hrtimer_run_queues+0x493/0xe50 [ 1248.465318][ C0] ? default_do_nmi+0x62/0x150 [ 1248.465336][ C0] ? exc_nmi+0xa8/0x100 [ 1248.465353][ C0] ? end_repeat_nmi+0x16/0x31 [ 1248.465382][ C0] ? timerqueue_del+0x44/0xf0 [ 1248.465405][ C0] ? __hrtimer_run_queues+0x493/0xe50 [ 1248.465426][ C0] ? __hrtimer_run_queues+0x493/0xe50 [ 1248.465449][ C0] ? __hrtimer_run_queues+0x493/0xe50 [ 1248.465470][ C0] [ 1248.465475][ C0] [ 1248.465491][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1248.465511][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 1248.465540][ C0] hrtimer_interrupt+0x392/0x980 [ 1248.465575][ C0] __sysvec_apic_timer_interrupt+0x156/0x580 [ 1248.465600][ C0] sysvec_apic_timer_interrupt+0x8c/0xb0 [ 1248.465620][ C0] [ 1248.465625][ C0] [ 1248.465630][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1248.465655][ C0] RIP: 0010:rcu_is_watching+0x0/0xb0 [ 1248.465672][ C0] Code: 00 f6 44 24 21 02 0f 84 02 ff ff ff e9 6c ff ff ff 48 c7 c7 60 19 33 8d 4c 89 f6 e8 1a 94 f1 02 e9 2b ff ff ff e8 60 42 33 09 <41> 57 41 56 53 65 ff 05 4c 06 8f 7e e8 9f 5a 33 09 89 c3 83 f8 08 [ 1248.465685][ C0] RSP: 0018:ffffc90005297840 EFLAGS: 00000202 [ 1248.465698][ C0] RAX: 0000000000000002 RBX: 0000000000000001 RCX: ffff88802b961dc0 [ 1248.465721][ C0] RDX: ffff88802b961dc0 RSI: 0000000000000001 RDI: 0000000000000000 [ 1248.465731][ C0] RBP: 0000000000000000 R08: ffffffff8197d22f R09: fffffbfff223ba45 [ 1248.465742][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffffffa000095c [ 1248.465753][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 00007faa81d7dff9 [ 1248.465767][ C0] ? 0xffffffffa000095c [ 1248.465780][ C0] ? is_bpf_text_address+0x1ef/0x2a0 [ 1248.465802][ C0] is_bpf_text_address+0x1f8/0x2a0 [ 1248.465819][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 1248.465835][ C0] ? stack_trace_save+0x1c0/0x1c0 [ 1248.465859][ C0] kernel_text_address+0x9f/0xd0 [ 1248.465882][ C0] __kernel_text_address+0x9/0x40 [ 1248.465903][ C0] unwind_get_return_address+0x49/0x80 [ 1248.465922][ C0] arch_stack_walk+0xf3/0x140 [ 1248.465953][ C0] stack_trace_save+0x113/0x1c0 [ 1248.465977][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1248.466007][ C0] ref_tracker_free+0x101/0x7d0 [ 1248.466028][ C0] ? rcu_is_watching+0x11/0xb0 [ 1248.466043][ C0] ? refcount_inc+0x80/0x80 [ 1248.466062][ C0] ? __sk_destruct+0x37b/0x5f0 [ 1248.466081][ C0] ? unix_release_sock+0x8e0/0xcf0 [ 1248.466099][ C0] ? unix_release+0x88/0xc0 [ 1248.466114][ C0] ? sock_close+0xcd/0x230 [ 1248.466129][ C0] ? __fput+0x3f6/0x8d0 [ 1248.466147][ C0] ? task_work_run+0x246/0x300 [ 1248.466167][ C0] ? exit_to_user_mode_loop+0xde/0x100 [ 1248.466182][ C0] ? exit_to_user_mode_prepare+0xb1/0x140 [ 1248.466196][ C0] ? syscall_exit_to_user_mode+0x60/0x270 [ 1248.466216][ C0] ? do_syscall_64+0x47/0xb0 [ 1248.466229][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.466256][ C0] ? __sk_destruct+0x206/0x5f0 [ 1248.466280][ C0] __sk_destruct+0x37b/0x5f0 [ 1248.466302][ C0] unix_release_sock+0x8e0/0xcf0 [ 1248.466323][ C0] ? unix_stream_read_skb+0x350/0x350 [ 1248.466341][ C0] ? clear_nonspinnable+0x60/0x60 [ 1248.466363][ C0] ? __might_sleep+0xb0/0xb0 [ 1248.466382][ C0] unix_release+0x88/0xc0 [ 1248.466399][ C0] sock_close+0xcd/0x230 [ 1248.466415][ C0] ? sock_mmap+0x90/0x90 [ 1248.466432][ C0] __fput+0x3f6/0x8d0 [ 1248.466458][ C0] task_work_run+0x246/0x300 [ 1248.466482][ C0] ? task_work_cancel+0x2e0/0x2e0 [ 1248.466502][ C0] ? __fget_files+0x435/0x4a0 [ 1248.466519][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 1248.466536][ C0] ? exit_to_user_mode_loop+0x39/0x100 [ 1248.466553][ C0] exit_to_user_mode_loop+0xde/0x100 [ 1248.466569][ C0] exit_to_user_mode_prepare+0xb1/0x140 [ 1248.466585][ C0] syscall_exit_to_user_mode+0x60/0x270 [ 1248.466607][ C0] do_syscall_64+0x47/0xb0 [ 1248.466621][ C0] ? clear_bhb_loop+0x45/0xa0 [ 1248.466646][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.466669][ C0] RIP: 0033:0x7faa81d7dff9 [ 1248.466681][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1248.466694][ C0] RSP: 002b:00007faa82be3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1248.466710][ C0] RAX: ffffffffffffffed RBX: 00007faa81f35f80 RCX: 00007faa81d7dff9 [ 1248.466722][ C0] RDX: 0000000020000000 RSI: 0000000000008914 RDI: 0000000000000006 [ 1248.466732][ C0] RBP: 00007faa81df0296 R08: 0000000000000000 R09: 0000000000000000 [ 1248.466742][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1248.466752][ C0] R13: 0000000000000000 R14: 00007faa81f35f80 R15: 00007ffeb5b67978 [ 1248.466791][ C0] [ 1249.136343][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 1249.143246][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 6.1.112-syzkaller #0 [ 1249.151167][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1249.161243][ T28] Call Trace: [ 1249.164527][ T28] [ 1249.167477][ T28] dump_stack_lvl+0x1e3/0x2cb [ 1249.172188][ T28] ? nf_tcp_handle_invalid+0x642/0x642 [ 1249.177764][ T28] ? panic+0x764/0x764 [ 1249.181842][ T28] ? llist_add_batch+0x160/0x1d0 [ 1249.186813][ T28] ? vscnprintf+0x59/0x80 [ 1249.191153][ T28] panic+0x318/0x764 [ 1249.195142][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1249.201304][ T28] ? memcpy_page_flushcache+0xfc/0xfc [ 1249.206687][ T28] ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0 [ 1249.212950][ T28] ? nmi_trigger_cpumask_backtrace+0x338/0x3f0 [ 1249.219211][ T28] ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0 [ 1249.225388][ T28] watchdog+0xfc7/0xfd0 [ 1249.229556][ T28] ? watchdog+0x1f8/0xfd0 [ 1249.233903][ T28] kthread+0x28d/0x320 [ 1249.237988][ T28] ? hungtask_pm_notify+0x50/0x50 [ 1249.243018][ T28] ? kthread_blkcg+0xd0/0xd0 [ 1249.247611][ T28] ret_from_fork+0x1f/0x30 [ 1249.252055][ T28] [ 1249.255393][ T28] Kernel Offset: disabled [ 1249.259722][ T28] Rebooting in 86400 seconds..