last executing test programs: 4.202359415s ago: executing program 2 (id=3925): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff1566", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.995459167s ago: executing program 2 (id=3917): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.80124728s ago: executing program 1 (id=3918): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.79902211s ago: executing program 4 (id=3930): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xca}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x5dfa, 0x2}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) close(r1) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2c42, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, 0x0, 0x0) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x60}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 3.488378124s ago: executing program 0 (id=3920): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 3.175702118s ago: executing program 1 (id=3921): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3.175157698s ago: executing program 2 (id=3922): r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x114905, 0x4, 0xfffffbff, 0x3, 0x82, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xffdffbff, 0x1, 0xfffffffffffffffe, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={&(0x7f00000002c0), 0xa}, 0x2980, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffdfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8924, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002880)='{', 0x1}], 0x1}, 0x4040) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x20, 0x0, 0x0, 0x10000000}, 0x12cd) 3.03920046s ago: executing program 3 (id=3924): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450", 0x81}], 0x1, 0x0, 0x0, 0x7}, 0x0) 2.813863673s ago: executing program 3 (id=3926): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.691785984s ago: executing program 0 (id=3927): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.691278574s ago: executing program 3 (id=3928): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.672089935s ago: executing program 4 (id=3929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff1566", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.372342088s ago: executing program 4 (id=3931): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100004000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffff800, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 2.371410898s ago: executing program 1 (id=3932): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.371153118s ago: executing program 2 (id=3933): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 2.238256151s ago: executing program 0 (id=3934): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{}, {}, {}, [@ringbuf_output, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 2.109020292s ago: executing program 4 (id=3935): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.888208945s ago: executing program 3 (id=3936): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r4) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 1.721286227s ago: executing program 1 (id=3937): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1, 0x21, &(0x7f0000000a40)=@ringbuf={{}, {}, {}, [@ringbuf_output, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0x3, &(0x7f0000000680)=@framed={{0x18, 0x8}}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.414130371s ago: executing program 0 (id=3938): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) 1.259998743s ago: executing program 4 (id=3939): r0 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00010004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450", 0x81}], 0x1, 0x0, 0x0, 0x7}, 0x0) 1.258631023s ago: executing program 2 (id=3940): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.113458605s ago: executing program 4 (id=3941): r0 = getpid() r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x40000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x114905, 0x4, 0xfffffbff, 0x3, 0x82, 0x2, 0x0, 0x0, 0x10000000, 0x0, 0xa9e6}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socket$kcm(0x10, 0x100000000002, 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xffdffbff, 0x1, 0xfffffffffffffffe, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x7, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffc01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14125, 0x2e, 0xfffffbff, 0x3, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x18002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={&(0x7f00000002c0), 0xa}, 0x2980, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xaffffff7ffdfffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x20, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'batadv_slave_0\x00', 0x1}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8924, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f0000000100)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000002880)='{', 0x1}], 0x1}, 0x4040) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x20, 0x0, 0x0, 0x10000000}, 0x12cd) 1.091336135s ago: executing program 3 (id=3942): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff1566", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 893.351678ms ago: executing program 0 (id=3943): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 878.093868ms ago: executing program 3 (id=3944): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 877.335698ms ago: executing program 1 (id=3954): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x13, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff1566", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 876.743288ms ago: executing program 2 (id=3945): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x0, 0xc8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbfd, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x8002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unlink(0x0) socket$kcm(0x10, 0x2, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200052f008b59010000000000875a65059ff57b00000000000000000000000000ac1414aa000088be"], 0xcfa4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xac7e, 0x0, @perf_bp={&(0x7f0000000000), 0x4}, 0x4000, 0x3ff, 0x0, 0x1, 0x0, 0x0, 0x90ba, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x2, 0x5, 0x84) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r2) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000000) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000002000000000000000100000d0000000000000000030000000000000000000001ff000000400000000000000000000003000000000200000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c0006000000d6499500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 707.54µs ago: executing program 0 (id=3946): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=@framed={{}, [@printk={@lx, {0x3, 0x3, 0x3, 0xa, 0x0}}, @printk={@s}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="dc0100004000000018000000000000000000000000000000950000000000000038720a013653e84c584fdd38a199f6b2df9e19f1574da4512902e83640d72226cbc0c89b926a"], &(0x7f00000000c0)='GPL\x00', 0x5, 0xdd, &(0x7f0000000000)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0xfffff800, '\x00', 0x0, r0, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)={'a', ' *:* ', 'w\x00'}, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9, 0x84, 0x144, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 0s ago: executing program 1 (id=3957): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x3, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x44, 0x0, 0x0, 0x800, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): eemptirq_template+0x287/0x330 [ 678.527347][T11304] ? __x64_sys_sendmsg+0x80/0x80 [ 678.532413][T11304] ? lockdep_hardirqs_on+0x94/0x140 [ 678.537809][T11304] do_syscall_64+0x4c/0xa0 [ 678.542441][T11304] ? clear_bhb_loop+0x45/0xa0 [ 678.547135][T11304] ? clear_bhb_loop+0x45/0xa0 [ 678.551840][T11304] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 678.557755][T11304] RIP: 0033:0x7f2e4838e969 [ 678.562272][T11304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 678.582070][T11304] RSP: 002b:00007f2e4922a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 678.590503][T11304] RAX: ffffffffffffffda RBX: 00007f2e485b5fa0 RCX: 00007f2e4838e969 [ 678.598491][T11304] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 678.606573][T11304] RBP: 00007f2e48410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 678.614554][T11304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.622534][T11304] R13: 0000000000000000 R14: 00007f2e485b5fa0 R15: 00007ffe5cd50e98 [ 678.630531][T11304] [ 678.747634][T11316] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.2871'. [ 678.788904][T11310] netlink: 'syz.0.2871': attribute type 10 has an invalid length. [ 678.847029][T11217] device hsr_slave_0 entered promiscuous mode [ 678.868804][T11217] device hsr_slave_1 entered promiscuous mode [ 678.934274][T11217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 678.950541][T11217] Cannot create hsr debugfs directory [ 679.043781][ T4296] Bluetooth: hci2: command 0x041b tx timeout [ 679.363309][ T4341] team0: Port device wlan1 removed [ 679.750874][ T4341] device hsr_slave_0 left promiscuous mode [ 679.762648][ T4341] device hsr_slave_1 left promiscuous mode [ 679.811104][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 679.828975][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 679.842990][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 679.858546][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 679.915431][ T4341] device veth1_macvtap left promiscuous mode [ 679.936160][ T4341] device veth0_macvtap left promiscuous mode [ 679.957314][ T4341] device veth1_vlan left promiscuous mode [ 679.974424][ T4341] device veth0_vlan left promiscuous mode [ 680.232553][T11356] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.2886'. [ 681.125012][ T4296] Bluetooth: hci2: command 0x040f tx timeout [ 681.281411][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 681.362616][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 681.426546][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 681.475610][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.092136][ T4341] bond0 (unregistering): (slave team0): Releasing backup interface [ 682.309705][ T4341] bond0 (unregistering): Released all slaves [ 682.371083][T11356] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 682.379534][T11356] CPU: 0 PID: 11356 Comm: syz.1.2886 Not tainted 6.1.136-syzkaller #0 [ 682.387935][T11356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 682.398121][T11356] Call Trace: [ 682.401530][T11356] [ 682.404476][T11356] dump_stack_lvl+0x168/0x22e [ 682.409269][T11356] ? show_regs_print_info+0x12/0x12 [ 682.414633][T11356] ? load_image+0x3b0/0x3b0 [ 682.419199][T11356] sysfs_warn_dup+0x8a/0xa0 [ 682.423734][T11356] sysfs_do_create_link_sd+0xc0/0x110 [ 682.429150][T11356] device_add+0x7ed/0xfb0 [ 682.433502][T11356] wiphy_register+0x1e68/0x2bd0 [ 682.438406][T11356] ? cfg80211_event_work+0x40/0x40 [ 682.443569][T11356] ? minstrel_ht_alloc+0x894/0xa20 [ 682.448750][T11356] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 682.455926][T11356] ieee80211_register_hw+0x2c29/0x38c0 [ 682.461438][T11356] ? ieee80211_register_hw+0xec1/0x38c0 [ 682.467058][T11356] ? ieee80211_register_hw+0xec1/0x38c0 [ 682.472640][T11356] ? ieee80211_tasklet_handler+0x20/0x20 [ 682.478303][T11356] ? rcu_is_watching+0x11/0xa0 [ 682.483090][T11356] ? memset+0x1e/0x40 [ 682.487091][T11356] ? hrtimer_init+0x10c/0x220 [ 682.491782][T11356] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 682.497543][T11356] hwsim_new_radio_nl+0xafa/0xce0 [ 682.502589][T11356] genl_family_rcv_msg_doit+0x22e/0x320 [ 682.508151][T11356] ? end_current_label_crit_section+0x170/0x170 [ 682.514407][T11356] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 682.520325][T11356] ? bpf_lsm_capable+0x5/0x10 [ 682.525036][T11356] ? security_capable+0x85/0xb0 [ 682.529908][T11356] genl_rcv_msg+0x5f2/0x780 [ 682.534449][T11356] ? perf_trace_preemptirq_template+0x287/0x330 [ 682.540744][T11356] ? genl_bind+0x350/0x350 [ 682.545173][T11356] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 682.551171][T11356] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 682.557597][T11356] ? lock_chain_count+0x20/0x20 [ 682.562478][T11356] netlink_rcv_skb+0x1de/0x420 [ 682.567271][T11356] ? genl_bind+0x350/0x350 [ 682.571876][T11356] ? netlink_ack+0x1100/0x1100 [ 682.576759][T11356] ? preempt_count_add+0x9a/0x190 [ 682.581801][T11356] ? down_read+0x1a8/0x2d0 [ 682.586237][T11356] genl_rcv+0x24/0x40 [ 682.590228][T11356] netlink_unicast+0x74c/0x8c0 [ 682.595215][T11356] netlink_sendmsg+0x89e/0xbc0 [ 682.600036][T11356] ? netlink_getsockopt+0x540/0x540 [ 682.605269][T11356] ? aa_sock_msg_perm+0x94/0x150 [ 682.610230][T11356] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 682.615626][T11356] ? security_socket_sendmsg+0x7c/0xa0 [ 682.621164][T11356] ? netlink_getsockopt+0x540/0x540 [ 682.626403][T11356] ____sys_sendmsg+0x59b/0x970 [ 682.631228][T11356] ? __sys_sendmsg_sock+0x30/0x30 [ 682.636291][T11356] ? __import_iovec+0x315/0x500 [ 682.641172][T11356] ? import_iovec+0x6f/0xa0 [ 682.645693][T11356] ___sys_sendmsg+0x21c/0x290 [ 682.650402][T11356] ? __sys_sendmsg+0x270/0x270 [ 682.655203][T11356] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 682.661476][T11356] ? __fdget+0x17c/0x200 [ 682.665753][T11356] __se_sys_sendmsg+0x19e/0x270 [ 682.670633][T11356] ? __x64_sys_sendmsg+0x80/0x80 [ 682.675617][T11356] ? lockdep_hardirqs_on+0x94/0x140 [ 682.681019][T11356] do_syscall_64+0x4c/0xa0 [ 682.685483][T11356] ? clear_bhb_loop+0x45/0xa0 [ 682.690545][T11356] ? clear_bhb_loop+0x45/0xa0 [ 682.695259][T11356] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 682.701179][T11356] RIP: 0033:0x7f9cb798e969 [ 682.705616][T11356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.725597][T11356] RSP: 002b:00007f9cb87ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 682.734128][T11356] RAX: ffffffffffffffda RBX: 00007f9cb7bb5fa0 RCX: 00007f9cb798e969 [ 682.742116][T11356] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 682.750360][T11356] RBP: 00007f9cb7a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 682.758433][T11356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.766507][T11356] R13: 0000000000000000 R14: 00007f9cb7bb5fa0 R15: 00007ffdb0334b28 [ 682.774597][T11356] [ 682.803441][T11399] netlink: 'syz.0.2905': attribute type 10 has an invalid length. [ 682.831813][T11400] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.2905'. [ 683.216763][ T4296] Bluetooth: hci2: command 0x0419 tx timeout [ 683.530340][T11415] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.2910'. [ 683.585268][T11417] netlink: 'syz.4.2910': attribute type 10 has an invalid length. [ 683.741036][T11217] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 683.791327][T11217] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 683.838200][T11217] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 683.880818][T11217] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 684.170637][T11439] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2916'. [ 684.215759][T11439] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 684.254886][T11439] CPU: 1 PID: 11439 Comm: syz.4.2916 Not tainted 6.1.136-syzkaller #0 [ 684.263129][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 684.273398][T11439] Call Trace: [ 684.276719][T11439] [ 684.279688][T11439] dump_stack_lvl+0x168/0x22e [ 684.284435][T11439] ? show_regs_print_info+0x12/0x12 [ 684.289690][T11439] ? load_image+0x3b0/0x3b0 [ 684.294366][T11439] sysfs_warn_dup+0x8a/0xa0 [ 684.298923][T11439] sysfs_do_create_link_sd+0xc0/0x110 [ 684.304352][T11439] device_add+0x7ed/0xfb0 [ 684.308748][T11439] wiphy_register+0x1e68/0x2bd0 [ 684.313698][T11439] ? cfg80211_event_work+0x40/0x40 [ 684.318864][T11439] ? minstrel_ht_alloc+0x894/0xa20 [ 684.324052][T11439] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 684.330170][T11439] ieee80211_register_hw+0x2c29/0x38c0 [ 684.335701][T11439] ? ieee80211_register_hw+0xec1/0x38c0 [ 684.341311][T11439] ? ieee80211_register_hw+0xec1/0x38c0 [ 684.346930][T11439] ? ieee80211_tasklet_handler+0x20/0x20 [ 684.352797][T11439] ? rcu_is_watching+0x11/0xa0 [ 684.357802][T11439] ? memset+0x1e/0x40 [ 684.361842][T11439] ? hrtimer_init+0x10c/0x220 [ 684.366584][T11439] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 684.372375][T11439] hwsim_new_radio_nl+0xafa/0xce0 [ 684.377465][T11439] genl_family_rcv_msg_doit+0x22e/0x320 [ 684.383056][T11439] ? end_current_label_crit_section+0x170/0x170 [ 684.389346][T11439] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 684.395285][T11439] ? bpf_lsm_capable+0x5/0x10 [ 684.400017][T11439] ? security_capable+0x85/0xb0 [ 684.404925][T11439] genl_rcv_msg+0x5f2/0x780 [ 684.409485][T11439] ? genl_bind+0x350/0x350 [ 684.413941][T11439] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 684.420334][T11439] netlink_rcv_skb+0x1de/0x420 [ 684.425162][T11439] ? genl_bind+0x350/0x350 [ 684.429648][T11439] ? netlink_ack+0x1100/0x1100 [ 684.434489][T11439] ? down_read+0x1a8/0x2d0 [ 684.438971][T11439] genl_rcv+0x24/0x40 [ 684.442998][T11439] netlink_unicast+0x74c/0x8c0 [ 684.447836][T11439] netlink_sendmsg+0x89e/0xbc0 [ 684.452672][T11439] ? netlink_getsockopt+0x540/0x540 [ 684.457931][T11439] ? aa_sock_msg_perm+0x94/0x150 [ 684.462906][T11439] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 684.468221][T11439] ? security_socket_sendmsg+0x7c/0xa0 [ 684.473743][T11439] ? netlink_getsockopt+0x540/0x540 [ 684.478985][T11439] ____sys_sendmsg+0x59b/0x970 [ 684.483795][T11439] ? __sys_sendmsg_sock+0x30/0x30 [ 684.488867][T11439] ? __import_iovec+0x315/0x500 [ 684.493757][T11439] ? import_iovec+0x6f/0xa0 [ 684.498318][T11439] ___sys_sendmsg+0x21c/0x290 [ 684.503054][T11439] ? __sys_sendmsg+0x270/0x270 [ 684.507978][T11439] ? __fdget+0x17c/0x200 [ 684.512396][T11439] __se_sys_sendmsg+0x19e/0x270 [ 684.517303][T11439] ? __x64_sys_sendmsg+0x80/0x80 [ 684.522311][T11439] ? lockdep_hardirqs_on+0x94/0x140 [ 684.527625][T11439] do_syscall_64+0x4c/0xa0 [ 684.532088][T11439] ? clear_bhb_loop+0x45/0xa0 [ 684.536807][T11439] ? clear_bhb_loop+0x45/0xa0 [ 684.541530][T11439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 684.547515][T11439] RIP: 0033:0x7f2e4838e969 [ 684.551987][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 684.571737][T11439] RSP: 002b:00007f2e4922a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 684.580200][T11439] RAX: ffffffffffffffda RBX: 00007f2e485b5fa0 RCX: 00007f2e4838e969 [ 684.588215][T11439] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 684.596218][T11439] RBP: 00007f2e48410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 684.604214][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.612240][T11439] R13: 0000000000000000 R14: 00007f2e485b5fa0 R15: 00007ffe5cd50e98 [ 684.620242][T11439] [ 684.670787][T11217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.722825][T11217] 8021q: adding VLAN 0 to HW filter on device team0 [ 684.749321][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 684.764600][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 684.804162][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 684.826184][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 684.878611][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 684.885909][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.004456][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 685.138959][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 685.168804][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 685.187796][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.195015][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.216211][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 685.269996][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 685.310418][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 685.336186][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 685.383852][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 685.442248][ T4296] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 685.483206][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 685.532519][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 685.590279][T11217] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 685.635448][T11217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 685.659364][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 685.686660][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.693196][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.741636][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 685.789638][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 685.816704][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 685.842503][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 686.355716][T11494] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.2933'. [ 686.406003][T11494] netlink: 'syz.0.2933': attribute type 10 has an invalid length. [ 686.522375][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 686.545687][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 686.561894][ T4296] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 686.579877][T11217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.705215][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 686.733580][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 686.878620][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 686.892929][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 686.924990][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 686.953535][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 686.998214][T11217] device veth0_vlan entered promiscuous mode [ 687.040767][ T4296] Bluetooth: hci1: unexpected event 0x12 length: 15 > 8 [ 687.046443][T11217] device veth1_vlan entered promiscuous mode [ 687.135563][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 687.158814][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 687.189876][T11217] device veth0_macvtap entered promiscuous mode [ 687.218837][T11217] device veth1_macvtap entered promiscuous mode [ 687.309698][T11217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.338006][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 687.352400][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 687.384868][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 687.427268][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 687.482375][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.503772][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.564227][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.613732][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.638596][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.666113][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.693841][T11217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.743153][T11217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.785341][T11217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.801024][T11217] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.841683][T11217] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.871393][T11217] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.901766][T11217] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.938110][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 687.954613][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 688.068094][T11550] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.2952'. [ 688.153364][T11550] netlink: 'syz.1.2952': attribute type 10 has an invalid length. [ 688.190294][ T9270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.231278][ T9270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.268845][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 688.308613][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 688.336013][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.391857][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 689.305167][T11584] netlink: 'syz.1.2965': attribute type 10 has an invalid length. [ 689.480803][ T4290] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 689.512548][ T4290] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 689.521028][ T4290] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 689.529535][ T4290] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 689.541432][ T4290] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 689.550540][ T4290] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 689.800368][ T4307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.898367][ T4307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 689.926306][T11585] chnl_net:caif_netlink_parms(): no params data found [ 690.008484][ T4307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.121654][ T4307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 690.371677][T11585] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.402943][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.439738][T11585] device bridge_slave_0 entered promiscuous mode [ 690.498277][T11585] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.543109][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.555081][T11585] device bridge_slave_1 entered promiscuous mode [ 690.677140][T11585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.781944][T11585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.909608][T11585] team0: Port device team_slave_0 added [ 690.927521][T11585] team0: Port device team_slave_1 added [ 691.101557][T11585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 691.128254][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.184059][T11585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 691.580878][T11585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 691.604252][ T4296] Bluetooth: hci5: command 0x0409 tx timeout [ 691.607591][T11585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 691.735972][T11585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.030335][T11585] device hsr_slave_0 entered promiscuous mode [ 692.085703][T11585] device hsr_slave_1 entered promiscuous mode [ 692.126125][T11585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.175952][T11585] Cannot create hsr debugfs directory [ 692.331486][T11662] netlink: 'syz.1.2991': attribute type 10 has an invalid length. [ 692.758562][ T4307] team0: Port device wlan1 removed [ 693.202506][ T4307] device hsr_slave_0 left promiscuous mode [ 693.219858][ T4307] device hsr_slave_1 left promiscuous mode [ 693.255480][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 693.283556][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 693.329462][ T4307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 693.352812][ T4307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 693.375116][T11693] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3003'. [ 693.421809][ T4307] device veth1_macvtap left promiscuous mode [ 693.441933][ T4307] device veth1_vlan left promiscuous mode [ 693.457717][ T4307] device veth0_vlan left promiscuous mode [ 693.683991][ T4296] Bluetooth: hci5: command 0x041b tx timeout [ 694.458777][ T4307] team0 (unregistering): Port device team_slave_1 removed [ 694.501768][ T4307] team0 (unregistering): Port device team_slave_0 removed [ 694.540488][ T4307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 694.581219][ T4307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 694.889234][ T4307] bond0 (unregistering): (slave team0): Releasing backup interface [ 695.012278][ T4307] bond0 (unregistering): Released all slaves [ 695.044174][T11693] netlink: 'syz.3.3003': attribute type 10 has an invalid length. [ 695.053384][T11693] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.061205][T11693] bridge0: port 1(bridge_slave_0) entered disabled state [ 695.076787][T11693] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.084013][T11693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.091671][T11693] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.098887][T11693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.133623][T11693] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 695.394150][T11730] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3023'. [ 695.648854][T11730] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 695.662546][T11730] CPU: 0 PID: 11730 Comm: syz.2.3023 Not tainted 6.1.136-syzkaller #0 [ 695.670784][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 695.680862][T11730] Call Trace: [ 695.684162][T11730] [ 695.687105][T11730] dump_stack_lvl+0x168/0x22e [ 695.691827][T11730] ? show_regs_print_info+0x12/0x12 [ 695.697042][T11730] ? load_image+0x3b0/0x3b0 [ 695.701567][T11730] sysfs_warn_dup+0x8a/0xa0 [ 695.706183][T11730] sysfs_do_create_link_sd+0xc0/0x110 [ 695.711576][T11730] device_add+0x7ed/0xfb0 [ 695.715928][T11730] wiphy_register+0x1e68/0x2bd0 [ 695.720819][T11730] ? cfg80211_event_work+0x40/0x40 [ 695.725947][T11730] ? minstrel_ht_alloc+0x894/0xa20 [ 695.731082][T11730] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 695.737164][T11730] ieee80211_register_hw+0x2c29/0x38c0 [ 695.742654][T11730] ? ieee80211_register_hw+0xec1/0x38c0 [ 695.748221][T11730] ? ieee80211_register_hw+0xec1/0x38c0 [ 695.753832][T11730] ? ieee80211_tasklet_handler+0x20/0x20 [ 695.759695][T11730] ? rcu_is_watching+0x11/0xa0 [ 695.764516][T11730] ? memset+0x1e/0x40 [ 695.768522][T11730] ? hrtimer_init+0x10c/0x220 [ 695.773216][T11730] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 695.778971][T11730] hwsim_new_radio_nl+0xafa/0xce0 [ 695.784017][T11730] genl_family_rcv_msg_doit+0x22e/0x320 [ 695.789578][T11730] ? end_current_label_crit_section+0x170/0x170 [ 695.795837][T11730] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 695.801842][T11730] ? bpf_lsm_capable+0x5/0x10 [ 695.806537][T11730] ? security_capable+0x85/0xb0 [ 695.811411][T11730] genl_rcv_msg+0x5f2/0x780 [ 695.815935][T11730] ? genl_bind+0x350/0x350 [ 695.820444][T11730] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 695.826795][T11730] netlink_rcv_skb+0x1de/0x420 [ 695.831581][T11730] ? genl_bind+0x350/0x350 [ 695.836009][T11730] ? netlink_ack+0x1100/0x1100 [ 695.840802][T11730] ? down_read+0x1a8/0x2d0 [ 695.845253][T11730] genl_rcv+0x24/0x40 [ 695.849251][T11730] netlink_unicast+0x74c/0x8c0 [ 695.854045][T11730] netlink_sendmsg+0x89e/0xbc0 [ 695.858922][T11730] ? netlink_getsockopt+0x540/0x540 [ 695.864139][T11730] ? aa_sock_msg_perm+0x94/0x150 [ 695.869092][T11730] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 695.874394][T11730] ? security_socket_sendmsg+0x7c/0xa0 [ 695.879876][T11730] ? netlink_getsockopt+0x540/0x540 [ 695.885098][T11730] ____sys_sendmsg+0x59b/0x970 [ 695.889917][T11730] ? __sys_sendmsg_sock+0x30/0x30 [ 695.894960][T11730] ? __import_iovec+0x315/0x500 [ 695.899835][T11730] ? import_iovec+0x6f/0xa0 [ 695.904462][T11730] ___sys_sendmsg+0x21c/0x290 [ 695.909356][T11730] ? __sys_sendmsg+0x270/0x270 [ 695.914198][T11730] ? __fdget+0x17c/0x200 [ 695.918563][T11730] __se_sys_sendmsg+0x19e/0x270 [ 695.923471][T11730] ? __x64_sys_sendmsg+0x80/0x80 [ 695.928469][T11730] ? lockdep_hardirqs_on+0x94/0x140 [ 695.933700][T11730] do_syscall_64+0x4c/0xa0 [ 695.938140][T11730] ? clear_bhb_loop+0x45/0xa0 [ 695.942826][T11730] ? clear_bhb_loop+0x45/0xa0 [ 695.947518][T11730] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 695.953440][T11730] RIP: 0033:0x7f4faf38e969 [ 695.957954][T11730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 695.977669][T11730] RSP: 002b:00007f4fb02c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 695.986121][T11730] RAX: ffffffffffffffda RBX: 00007f4faf5b6080 RCX: 00007f4faf38e969 [ 695.994278][T11730] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 696.002281][T11730] RBP: 00007f4faf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 696.010262][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 696.018246][T11730] R13: 0000000000000000 R14: 00007f4faf5b6080 R15: 00007fff07e01058 [ 696.026333][T11730] [ 696.030251][ T4296] Bluetooth: hci5: command 0x040f tx timeout [ 696.888099][T11585] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 696.962339][T11585] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 697.035295][T11585] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 697.081173][T11585] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 697.265232][T11767] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3027'. [ 697.295429][T11768] netlink: 'syz.4.3027': attribute type 10 has an invalid length. [ 697.445863][T11585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.500236][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 697.518220][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 697.562552][T11585] 8021q: adding VLAN 0 to HW filter on device team0 [ 697.598585][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 697.615870][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 697.649924][ T9270] bridge0: port 1(bridge_slave_0) entered blocking state [ 697.657134][ T9270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.720772][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.752632][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.773580][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.885354][ T9270] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.892551][ T9270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.960635][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 698.040626][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 698.084378][ T4296] Bluetooth: hci5: command 0x0419 tx timeout [ 698.093502][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 698.120473][T11792] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3033'. [ 698.156460][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 698.174392][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 698.182895][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 698.208922][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 698.228336][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 698.239619][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 698.256845][T11585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 698.271945][T11585] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 698.288427][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 698.302430][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 698.316832][T11792] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 698.346361][T11792] CPU: 0 PID: 11792 Comm: syz.2.3033 Not tainted 6.1.136-syzkaller #0 [ 698.354602][T11792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 698.364693][T11792] Call Trace: [ 698.368015][T11792] [ 698.370978][T11792] dump_stack_lvl+0x168/0x22e [ 698.375711][T11792] ? show_regs_print_info+0x12/0x12 [ 698.380964][T11792] ? load_image+0x3b0/0x3b0 [ 698.385531][T11792] sysfs_warn_dup+0x8a/0xa0 [ 698.390093][T11792] sysfs_do_create_link_sd+0xc0/0x110 [ 698.395520][T11792] device_add+0x7ed/0xfb0 [ 698.399909][T11792] wiphy_register+0x1e68/0x2bd0 [ 698.404859][T11792] ? cfg80211_event_work+0x40/0x40 [ 698.410022][T11792] ? minstrel_ht_alloc+0x894/0xa20 [ 698.415197][T11792] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 698.421311][T11792] ieee80211_register_hw+0x2c29/0x38c0 [ 698.426836][T11792] ? ieee80211_register_hw+0xec1/0x38c0 [ 698.432439][T11792] ? ieee80211_register_hw+0xec1/0x38c0 [ 698.438226][T11792] ? ieee80211_tasklet_handler+0x20/0x20 [ 698.444091][T11792] ? rcu_is_watching+0x11/0xa0 [ 698.448904][T11792] ? memset+0x1e/0x40 [ 698.452924][T11792] ? hrtimer_init+0x10c/0x220 [ 698.457638][T11792] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 698.463419][T11792] hwsim_new_radio_nl+0xafa/0xce0 [ 698.468509][T11792] genl_family_rcv_msg_doit+0x22e/0x320 [ 698.474100][T11792] ? end_current_label_crit_section+0x170/0x170 [ 698.480392][T11792] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 698.486348][T11792] ? bpf_lsm_capable+0x5/0x10 [ 698.491074][T11792] ? security_capable+0x85/0xb0 [ 698.495987][T11792] genl_rcv_msg+0x5f2/0x780 [ 698.500545][T11792] ? genl_bind+0x350/0x350 [ 698.504996][T11792] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 698.511485][T11792] netlink_rcv_skb+0x1de/0x420 [ 698.516304][T11792] ? genl_bind+0x350/0x350 [ 698.520763][T11792] ? netlink_ack+0x1100/0x1100 [ 698.525595][T11792] ? down_read+0x1a8/0x2d0 [ 698.530063][T11792] genl_rcv+0x24/0x40 [ 698.534086][T11792] netlink_unicast+0x74c/0x8c0 [ 698.538910][T11792] netlink_sendmsg+0x89e/0xbc0 [ 698.543728][T11792] ? netlink_getsockopt+0x540/0x540 [ 698.548980][T11792] ? aa_sock_msg_perm+0x94/0x150 [ 698.553957][T11792] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 698.559273][T11792] ? security_socket_sendmsg+0x7c/0xa0 [ 698.564860][T11792] ? netlink_getsockopt+0x540/0x540 [ 698.570106][T11792] ____sys_sendmsg+0x59b/0x970 [ 698.574916][T11792] ? __sys_sendmsg_sock+0x30/0x30 [ 698.580007][T11792] ? __import_iovec+0x315/0x500 [ 698.584886][T11792] ? import_iovec+0x6f/0xa0 [ 698.589411][T11792] ___sys_sendmsg+0x21c/0x290 [ 698.594159][T11792] ? __sys_sendmsg+0x270/0x270 [ 698.598978][T11792] ? __fdget+0x17c/0x200 [ 698.603245][T11792] __se_sys_sendmsg+0x19e/0x270 [ 698.608120][T11792] ? __x64_sys_sendmsg+0x80/0x80 [ 698.613086][T11792] ? lockdep_hardirqs_on+0x94/0x140 [ 698.618326][T11792] do_syscall_64+0x4c/0xa0 [ 698.622788][T11792] ? clear_bhb_loop+0x45/0xa0 [ 698.627488][T11792] ? clear_bhb_loop+0x45/0xa0 [ 698.632201][T11792] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 698.638123][T11792] RIP: 0033:0x7f4faf38e969 [ 698.642636][T11792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 698.662268][T11792] RSP: 002b:00007f4fb02c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 698.670791][T11792] RAX: ffffffffffffffda RBX: 00007f4faf5b6080 RCX: 00007f4faf38e969 [ 698.678784][T11792] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 698.686765][T11792] RBP: 00007f4faf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 698.694830][T11792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.702807][T11792] R13: 0000000000000000 R14: 00007f4faf5b6080 R15: 00007fff07e01058 [ 698.710805][T11792] [ 699.411799][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.432288][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.460636][T11585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.511319][T11828] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3047'. [ 699.549624][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.577276][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.601928][T11828] netlink: 'syz.1.3047': attribute type 10 has an invalid length. [ 699.633590][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.643569][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.660987][T11585] device veth0_vlan entered promiscuous mode [ 699.671883][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 699.689038][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 699.714028][T11585] device veth1_vlan entered promiscuous mode [ 699.759976][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 699.790564][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 699.869721][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 699.889955][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 699.905346][T11585] device veth0_macvtap entered promiscuous mode [ 699.939855][T11585] device veth1_macvtap entered promiscuous mode [ 699.981185][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.010716][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.049402][T11585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.080685][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 700.100297][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 700.127901][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 700.169607][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 700.212611][T11843] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 700.258054][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.290655][T11843] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 700.323459][T11843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.355020][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.383310][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.413334][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.448691][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.495498][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.540691][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.568369][T11857] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3055'. [ 700.568771][T11585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.599065][T11585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.652926][T11585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.703933][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 700.733494][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 700.826157][T11857] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 700.854999][T11857] CPU: 0 PID: 11857 Comm: syz.1.3055 Not tainted 6.1.136-syzkaller #0 [ 700.863242][T11857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 700.873422][T11857] Call Trace: [ 700.876742][T11857] [ 700.879710][T11857] dump_stack_lvl+0x168/0x22e [ 700.884454][T11857] ? show_regs_print_info+0x12/0x12 [ 700.889722][T11857] ? load_image+0x3b0/0x3b0 [ 700.894299][T11857] sysfs_warn_dup+0x8a/0xa0 [ 700.898869][T11857] sysfs_do_create_link_sd+0xc0/0x110 [ 700.904305][T11857] device_add+0x7ed/0xfb0 [ 700.908706][T11857] wiphy_register+0x1e68/0x2bd0 [ 700.913643][T11857] ? cfg80211_event_work+0x40/0x40 [ 700.918807][T11857] ? minstrel_ht_alloc+0x894/0xa20 [ 700.924014][T11857] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 700.930132][T11857] ieee80211_register_hw+0x2c29/0x38c0 [ 700.935745][T11857] ? ieee80211_register_hw+0xec1/0x38c0 [ 700.941344][T11857] ? ieee80211_register_hw+0xec1/0x38c0 [ 700.947037][T11857] ? ieee80211_tasklet_handler+0x20/0x20 [ 700.952732][T11857] ? rcu_is_watching+0x11/0xa0 [ 700.957559][T11857] ? memset+0x1e/0x40 [ 700.961596][T11857] ? hrtimer_init+0x10c/0x220 [ 700.966412][T11857] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 700.972196][T11857] hwsim_new_radio_nl+0xafa/0xce0 [ 700.977287][T11857] genl_family_rcv_msg_doit+0x22e/0x320 [ 700.982965][T11857] ? end_current_label_crit_section+0x170/0x170 [ 700.989267][T11857] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 700.995220][T11857] ? bpf_lsm_capable+0x5/0x10 [ 700.999950][T11857] ? security_capable+0x85/0xb0 [ 701.004864][T11857] genl_rcv_msg+0x5f2/0x780 [ 701.009425][T11857] ? genl_bind+0x350/0x350 [ 701.013932][T11857] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 701.020744][T11857] netlink_rcv_skb+0x1de/0x420 [ 701.025569][T11857] ? genl_bind+0x350/0x350 [ 701.030045][T11857] ? netlink_ack+0x1100/0x1100 [ 701.034885][T11857] ? down_read+0x1a8/0x2d0 [ 701.039352][T11857] genl_rcv+0x24/0x40 [ 701.043377][T11857] netlink_unicast+0x74c/0x8c0 [ 701.048212][T11857] netlink_sendmsg+0x89e/0xbc0 [ 701.053046][T11857] ? netlink_getsockopt+0x540/0x540 [ 701.058317][T11857] ? aa_sock_msg_perm+0x94/0x150 [ 701.063309][T11857] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 701.068645][T11857] ? security_socket_sendmsg+0x7c/0xa0 [ 701.074171][T11857] ? netlink_getsockopt+0x540/0x540 [ 701.079426][T11857] ____sys_sendmsg+0x59b/0x970 [ 701.084260][T11857] ? __sys_sendmsg_sock+0x30/0x30 [ 701.089346][T11857] ? __import_iovec+0x315/0x500 [ 701.094264][T11857] ? import_iovec+0x6f/0xa0 [ 701.098827][T11857] ___sys_sendmsg+0x21c/0x290 [ 701.103573][T11857] ? __sys_sendmsg+0x270/0x270 [ 701.108445][T11857] ? __fdget+0x17c/0x200 [ 701.112766][T11857] __se_sys_sendmsg+0x19e/0x270 [ 701.117686][T11857] ? __x64_sys_sendmsg+0x80/0x80 [ 701.122688][T11857] ? lockdep_hardirqs_on+0x94/0x140 [ 701.127947][T11857] do_syscall_64+0x4c/0xa0 [ 701.132416][T11857] ? clear_bhb_loop+0x45/0xa0 [ 701.137141][T11857] ? clear_bhb_loop+0x45/0xa0 [ 701.141869][T11857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 701.147830][T11857] RIP: 0033:0x7f9cb798e969 [ 701.152298][T11857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 701.172043][T11857] RSP: 002b:00007f9cb87de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 701.180508][T11857] RAX: ffffffffffffffda RBX: 00007f9cb7bb6080 RCX: 00007f9cb798e969 [ 701.188524][T11857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 701.196552][T11857] RBP: 00007f9cb7a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 701.204564][T11857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.212578][T11857] R13: 0000000000000000 R14: 00007f9cb7bb6080 R15: 00007ffdb0334b28 [ 701.220620][T11857] [ 701.244986][T11585] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.280525][T11585] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.329351][T11585] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.345841][T11585] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.610360][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.639330][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.664380][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 701.687845][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.720659][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.761719][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 702.228570][T11907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 702.262760][T11907] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 702.297681][T11904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 702.396211][T11908] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3067'. [ 702.772947][T11918] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 702.809396][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.856222][T11918] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 702.873335][ T4290] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 702.883057][ T4290] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 702.893530][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 702.893924][ T4290] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 702.940545][ T4294] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 702.948917][ T4294] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 702.968881][T11918] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 702.980549][ T4294] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 703.021020][T11918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 703.592676][ T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.781686][ T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.928003][ T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 703.941526][T11963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3080'. [ 703.987250][T11963] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3080'. [ 704.044014][T11960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3080'. [ 704.076763][ T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 704.097061][T11965] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3080'. [ 704.118648][T11923] chnl_net:caif_netlink_parms(): no params data found [ 704.478186][T11923] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.522684][T11923] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.569006][T11923] device bridge_slave_0 entered promiscuous mode [ 704.601677][T11923] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.626534][T11923] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.651464][T11923] device bridge_slave_1 entered promiscuous mode [ 704.926670][T11923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 705.025988][T11923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 705.043998][ T4296] Bluetooth: hci4: command 0x0409 tx timeout [ 705.198558][T11923] team0: Port device team_slave_0 added [ 705.306807][T11923] team0: Port device team_slave_1 added [ 705.435260][T11923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.442300][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.541808][T11923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.603224][T11923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.610788][T11923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 705.642207][T11923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.660447][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3094'. [ 705.694513][T12017] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3094'. [ 705.730618][T12016] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3094'. [ 705.845762][T11923] device hsr_slave_0 entered promiscuous mode [ 705.861488][T11923] device hsr_slave_1 entered promiscuous mode [ 705.897161][T11923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 705.920480][T11923] Cannot create hsr debugfs directory [ 705.935703][T12019] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3094'. [ 706.382267][ T46] team0: Port device wlan1 removed [ 706.437952][T12035] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3099'. [ 706.720229][T12037] netlink: 'syz.2.3099': attribute type 10 has an invalid length. [ 706.798179][ T46] device hsr_slave_0 left promiscuous mode [ 706.821476][ T46] device hsr_slave_1 left promiscuous mode [ 706.842319][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 706.892189][ T46] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 706.930197][ T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 706.961823][ T46] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 707.096098][ T46] device veth1_macvtap left promiscuous mode [ 707.124633][ T46] device veth1_vlan left promiscuous mode [ 707.128079][ T4296] Bluetooth: hci4: command 0x041b tx timeout [ 707.144401][ T46] device veth0_vlan left promiscuous mode [ 707.403490][T12056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3104'. [ 707.703306][T12065] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3118'. [ 708.605830][ T46] team0 (unregistering): Port device team_slave_1 removed [ 708.647296][ T46] team0 (unregistering): Port device team_slave_0 removed [ 708.685366][ T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 708.732558][ T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 709.032578][ T46] bond0 (unregistering): (slave team0): Releasing backup interface [ 709.164810][ T46] bond0 (unregistering): Released all slaves [ 709.201133][T12056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3104'. [ 709.210337][ T4296] Bluetooth: hci4: command 0x040f tx timeout [ 709.216972][T12069] netlink: 'syz.1.3118': attribute type 10 has an invalid length. [ 709.513246][T12082] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3112'. [ 709.532336][T12082] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 709.540491][T12082] CPU: 1 PID: 12082 Comm: syz.2.3112 Not tainted 6.1.136-syzkaller #0 [ 709.548686][T12082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 709.558779][T12082] Call Trace: [ 709.562085][T12082] [ 709.565049][T12082] dump_stack_lvl+0x168/0x22e [ 709.569769][T12082] ? show_regs_print_info+0x12/0x12 [ 709.575015][T12082] ? load_image+0x3b0/0x3b0 [ 709.579601][T12082] sysfs_warn_dup+0x8a/0xa0 [ 709.584165][T12082] sysfs_do_create_link_sd+0xc0/0x110 [ 709.589600][T12082] device_add+0x7ed/0xfb0 [ 709.593992][T12082] wiphy_register+0x1e68/0x2bd0 [ 709.598915][T12082] ? cfg80211_event_work+0x40/0x40 [ 709.604075][T12082] ? minstrel_ht_alloc+0x894/0xa20 [ 709.609332][T12082] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 709.615444][T12082] ieee80211_register_hw+0x2c29/0x38c0 [ 709.620944][T12082] ? ieee80211_register_hw+0xec1/0x38c0 [ 709.626522][T12082] ? ieee80211_register_hw+0xec1/0x38c0 [ 709.632101][T12082] ? ieee80211_tasklet_handler+0x20/0x20 [ 709.637774][T12082] ? rcu_is_watching+0x11/0xa0 [ 709.642572][T12082] ? memset+0x1e/0x40 [ 709.646587][T12082] ? hrtimer_init+0x10c/0x220 [ 709.651291][T12082] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 709.657053][T12082] hwsim_new_radio_nl+0xafa/0xce0 [ 709.662201][T12082] genl_family_rcv_msg_doit+0x22e/0x320 [ 709.667767][T12082] ? end_current_label_crit_section+0x170/0x170 [ 709.674030][T12082] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 709.679946][T12082] ? bpf_lsm_capable+0x5/0x10 [ 709.684642][T12082] ? security_capable+0x85/0xb0 [ 709.689517][T12082] genl_rcv_msg+0x5f2/0x780 [ 709.694039][T12082] ? genl_bind+0x350/0x350 [ 709.698466][T12082] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 709.704822][T12082] netlink_rcv_skb+0x1de/0x420 [ 709.709696][T12082] ? genl_bind+0x350/0x350 [ 709.714122][T12082] ? netlink_ack+0x1100/0x1100 [ 709.718911][T12082] ? down_read+0x1a8/0x2d0 [ 709.723516][T12082] genl_rcv+0x24/0x40 [ 709.727527][T12082] netlink_unicast+0x74c/0x8c0 [ 709.732318][T12082] netlink_sendmsg+0x89e/0xbc0 [ 709.737110][T12082] ? netlink_getsockopt+0x540/0x540 [ 709.742437][T12082] ? aa_sock_msg_perm+0x94/0x150 [ 709.747390][T12082] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 709.752688][T12082] ? security_socket_sendmsg+0x7c/0xa0 [ 709.758172][T12082] ? netlink_getsockopt+0x540/0x540 [ 709.763395][T12082] ____sys_sendmsg+0x59b/0x970 [ 709.768196][T12082] ? __sys_sendmsg_sock+0x30/0x30 [ 709.773241][T12082] ? __import_iovec+0x315/0x500 [ 709.778117][T12082] ? import_iovec+0x6f/0xa0 [ 709.782635][T12082] ___sys_sendmsg+0x21c/0x290 [ 709.787341][T12082] ? __sys_sendmsg+0x270/0x270 [ 709.792160][T12082] ? __fdget+0x17c/0x200 [ 709.796443][T12082] __se_sys_sendmsg+0x19e/0x270 [ 709.801333][T12082] ? __x64_sys_sendmsg+0x80/0x80 [ 709.806323][T12082] ? lockdep_hardirqs_on+0x94/0x140 [ 709.811550][T12082] do_syscall_64+0x4c/0xa0 [ 709.815987][T12082] ? clear_bhb_loop+0x45/0xa0 [ 709.820675][T12082] ? clear_bhb_loop+0x45/0xa0 [ 709.825365][T12082] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 709.831298][T12082] RIP: 0033:0x7f4faf38e969 [ 709.835746][T12082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 709.855471][T12082] RSP: 002b:00007f4fb02c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 709.863905][T12082] RAX: ffffffffffffffda RBX: 00007f4faf5b6080 RCX: 00007f4faf38e969 [ 709.872034][T12082] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 709.880021][T12082] RBP: 00007f4faf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 709.888009][T12082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 709.896011][T12082] R13: 0000000000000000 R14: 00007f4faf5b6080 R15: 00007fff07e01058 [ 709.904030][T12082] [ 710.560903][T11923] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 710.605726][T11923] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 710.624495][T11923] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 710.651909][T11923] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 710.922762][T11923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.949282][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 710.963317][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 710.984865][T11923] 8021q: adding VLAN 0 to HW filter on device team0 [ 711.003220][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 711.027940][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 711.042851][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.050139][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.082523][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 711.255063][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 711.281608][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 711.284288][ T4294] Bluetooth: hci4: command 0x0419 tx timeout [ 711.299935][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.307138][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.344287][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 711.367428][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 711.378396][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 711.394552][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 711.413470][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 711.432542][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 711.462459][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 711.500155][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 711.530844][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 711.577628][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 711.594125][T12124] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.3123'. [ 711.622613][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 711.674510][T11923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 711.727495][T12130] netlink: 'syz.0.3123': attribute type 10 has an invalid length. [ 711.742953][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 711.750536][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 711.843187][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 711.850420][T12130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 711.857942][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 711.865217][T12130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 711.969817][T12130] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 712.502289][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 712.511285][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 712.529879][T11923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.738656][T12159] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3131'. [ 712.833319][T12159] netlink: 'syz.2.3131': attribute type 10 has an invalid length. [ 713.317643][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 713.333416][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 713.364591][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 713.377058][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 713.389341][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 713.399453][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 713.414557][T11923] device veth0_vlan entered promiscuous mode [ 713.440252][T11923] device veth1_vlan entered promiscuous mode [ 713.479011][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 713.496264][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 713.526453][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 713.545301][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 713.572495][T11923] device veth0_macvtap entered promiscuous mode [ 713.612745][T11923] device veth1_macvtap entered promiscuous mode [ 713.734701][T11923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 713.788648][T11923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.831406][T11923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 713.860497][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 713.870980][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 713.880356][T12186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3138'. [ 713.898185][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 713.911518][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 713.930541][T11923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.946059][T11923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.956592][T11923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 713.968211][T11923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 713.979242][T11923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.000968][T12189] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3139'. [ 714.041702][T11923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.060339][T11923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 714.081131][T11923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 714.100908][T11923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 714.110326][T12186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3138'. [ 714.136031][T12189] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 714.164448][T12189] CPU: 1 PID: 12189 Comm: syz.2.3139 Not tainted 6.1.136-syzkaller #0 [ 714.172677][T12189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 714.182791][T12189] Call Trace: [ 714.186089][T12189] [ 714.189037][T12189] dump_stack_lvl+0x168/0x22e [ 714.193746][T12189] ? show_regs_print_info+0x12/0x12 [ 714.198961][T12189] ? load_image+0x3b0/0x3b0 [ 714.203485][T12189] sysfs_warn_dup+0x8a/0xa0 [ 714.208008][T12189] sysfs_do_create_link_sd+0xc0/0x110 [ 714.213403][T12189] device_add+0x7ed/0xfb0 [ 714.217761][T12189] wiphy_register+0x1e68/0x2bd0 [ 714.222652][T12189] ? cfg80211_event_work+0x40/0x40 [ 714.227783][T12189] ? minstrel_ht_alloc+0x894/0xa20 [ 714.232941][T12189] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 714.239063][T12189] ieee80211_register_hw+0x2c29/0x38c0 [ 714.244562][T12189] ? ieee80211_register_hw+0xec1/0x38c0 [ 714.250170][T12189] ? ieee80211_register_hw+0xec1/0x38c0 [ 714.255762][T12189] ? ieee80211_tasklet_handler+0x20/0x20 [ 714.261517][T12189] ? rcu_is_watching+0x11/0xa0 [ 714.266309][T12189] ? memset+0x1e/0x40 [ 714.270310][T12189] ? hrtimer_init+0x10c/0x220 [ 714.275007][T12189] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 714.280771][T12189] hwsim_new_radio_nl+0xafa/0xce0 [ 714.285821][T12189] genl_family_rcv_msg_doit+0x22e/0x320 [ 714.291381][T12189] ? end_current_label_crit_section+0x170/0x170 [ 714.297642][T12189] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 714.303552][T12189] ? bpf_lsm_capable+0x5/0x10 [ 714.308248][T12189] ? security_capable+0x85/0xb0 [ 714.313125][T12189] genl_rcv_msg+0x5f2/0x780 [ 714.317653][T12189] ? genl_bind+0x350/0x350 [ 714.322072][T12189] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 714.328426][T12189] netlink_rcv_skb+0x1de/0x420 [ 714.333205][T12189] ? genl_bind+0x350/0x350 [ 714.337630][T12189] ? netlink_ack+0x1100/0x1100 [ 714.342469][T12189] ? down_read+0x1a8/0x2d0 [ 714.346905][T12189] genl_rcv+0x24/0x40 [ 714.350897][T12189] netlink_unicast+0x74c/0x8c0 [ 714.355716][T12189] netlink_sendmsg+0x89e/0xbc0 [ 714.360517][T12189] ? netlink_getsockopt+0x540/0x540 [ 714.365912][T12189] ? aa_sock_msg_perm+0x94/0x150 [ 714.370863][T12189] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 714.376160][T12189] ? security_socket_sendmsg+0x7c/0xa0 [ 714.381736][T12189] ? netlink_getsockopt+0x540/0x540 [ 714.386978][T12189] ____sys_sendmsg+0x59b/0x970 [ 714.391767][T12189] ? __sys_sendmsg_sock+0x30/0x30 [ 714.396806][T12189] ? __import_iovec+0x315/0x500 [ 714.401678][T12189] ? import_iovec+0x6f/0xa0 [ 714.406200][T12189] ___sys_sendmsg+0x21c/0x290 [ 714.410900][T12189] ? __sys_sendmsg+0x270/0x270 [ 714.415718][T12189] ? __fdget+0x17c/0x200 [ 714.419983][T12189] __se_sys_sendmsg+0x19e/0x270 [ 714.424853][T12189] ? __x64_sys_sendmsg+0x80/0x80 [ 714.429823][T12189] ? lockdep_hardirqs_on+0x94/0x140 [ 714.435047][T12189] do_syscall_64+0x4c/0xa0 [ 714.439478][T12189] ? clear_bhb_loop+0x45/0xa0 [ 714.444193][T12189] ? clear_bhb_loop+0x45/0xa0 [ 714.448933][T12189] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 714.454856][T12189] RIP: 0033:0x7f4faf38e969 [ 714.459289][T12189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 714.478918][T12189] RSP: 002b:00007f4fb02c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 714.487378][T12189] RAX: ffffffffffffffda RBX: 00007f4faf5b6080 RCX: 00007f4faf38e969 [ 714.495360][T12189] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 714.503342][T12189] RBP: 00007f4faf410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 714.511325][T12189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 714.519311][T12189] R13: 0000000000000000 R14: 00007f4faf5b6080 R15: 00007fff07e01058 [ 714.527312][T12189] [ 714.598166][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 714.612981][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 714.634226][T11923] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.642976][T11923] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.672568][T11923] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.682522][T11923] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 714.699272][T12182] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3138'. [ 714.721021][T12188] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3138'. [ 714.909702][ T4341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 714.949306][ T4341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.077147][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 715.154178][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 715.171082][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 715.210368][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 716.255951][T12226] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3154'. [ 716.349280][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 716.382894][ T4296] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 716.406660][ T4296] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 716.415736][ T4290] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 716.425752][ T4290] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 716.433161][ T4290] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 716.458016][T12233] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 716.499658][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.510113][T12233] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 716.532338][T12233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.625459][T12239] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3157'. [ 716.627593][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.664175][T12239] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3157'. [ 716.688973][T12238] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3157'. [ 716.698508][T12241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3157'. [ 716.784341][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 716.918027][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.031782][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 717.362930][T12230] chnl_net:caif_netlink_parms(): no params data found [ 717.534689][T12262] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3163'. [ 717.665648][T12262] netlink: 'syz.1.3163': attribute type 10 has an invalid length. [ 717.674630][T12230] bridge0: port 1(bridge_slave_0) entered blocking state [ 717.681853][T12230] bridge0: port 1(bridge_slave_0) entered disabled state [ 717.695194][T12230] device bridge_slave_0 entered promiscuous mode [ 717.741022][T12230] bridge0: port 2(bridge_slave_1) entered blocking state [ 717.756885][T12230] bridge0: port 2(bridge_slave_1) entered disabled state [ 717.778586][T12230] device bridge_slave_1 entered promiscuous mode [ 717.924271][T12230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 717.950290][T12230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.069993][T12230] team0: Port device team_slave_0 added [ 718.090237][T12230] team0: Port device team_slave_1 added [ 718.185155][T12230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.207744][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.309462][T12230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.449551][T12230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.477574][T12230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 718.504430][ T4290] Bluetooth: hci0: command 0x0409 tx timeout [ 718.693770][T12230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 718.717887][T12291] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3169'. [ 718.930675][T12300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3172'. [ 719.023598][T12300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3172'. [ 719.059450][T12291] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 719.097355][T12291] CPU: 0 PID: 12291 Comm: syz.4.3169 Not tainted 6.1.136-syzkaller #0 [ 719.105609][T12291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 719.115705][T12291] Call Trace: [ 719.119016][T12291] [ 719.121984][T12291] dump_stack_lvl+0x168/0x22e [ 719.126722][T12291] ? show_regs_print_info+0x12/0x12 [ 719.131975][T12291] ? load_image+0x3b0/0x3b0 [ 719.136534][T12291] sysfs_warn_dup+0x8a/0xa0 [ 719.141097][T12291] sysfs_do_create_link_sd+0xc0/0x110 [ 719.146526][T12291] device_add+0x7ed/0xfb0 [ 719.150908][T12291] wiphy_register+0x1e68/0x2bd0 [ 719.155832][T12291] ? cfg80211_event_work+0x40/0x40 [ 719.160987][T12291] ? minstrel_ht_alloc+0x894/0xa20 [ 719.166163][T12291] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 719.172273][T12291] ieee80211_register_hw+0x2c29/0x38c0 [ 719.177795][T12291] ? ieee80211_register_hw+0xec1/0x38c0 [ 719.183387][T12291] ? ieee80211_register_hw+0xec1/0x38c0 [ 719.188996][T12291] ? ieee80211_tasklet_handler+0x20/0x20 [ 719.194780][T12291] ? rcu_is_watching+0x11/0xa0 [ 719.199609][T12291] ? memset+0x1e/0x40 [ 719.203634][T12291] ? hrtimer_init+0x10c/0x220 [ 719.208349][T12291] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 719.214129][T12291] hwsim_new_radio_nl+0xafa/0xce0 [ 719.219201][T12291] genl_family_rcv_msg_doit+0x22e/0x320 [ 719.224768][T12291] ? end_current_label_crit_section+0x170/0x170 [ 719.231120][T12291] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 719.237044][T12291] ? bpf_lsm_capable+0x5/0x10 [ 719.241739][T12291] ? security_capable+0x85/0xb0 [ 719.246626][T12291] genl_rcv_msg+0x5f2/0x780 [ 719.251154][T12291] ? genl_bind+0x350/0x350 [ 719.255579][T12291] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 719.261933][T12291] netlink_rcv_skb+0x1de/0x420 [ 719.266721][T12291] ? genl_bind+0x350/0x350 [ 719.271155][T12291] ? netlink_ack+0x1100/0x1100 [ 719.275947][T12291] ? down_read+0x1a8/0x2d0 [ 719.280380][T12291] genl_rcv+0x24/0x40 [ 719.284372][T12291] netlink_unicast+0x74c/0x8c0 [ 719.289167][T12291] netlink_sendmsg+0x89e/0xbc0 [ 719.293958][T12291] ? netlink_getsockopt+0x540/0x540 [ 719.299182][T12291] ? aa_sock_msg_perm+0x94/0x150 [ 719.304134][T12291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 719.309455][T12291] ? security_socket_sendmsg+0x7c/0xa0 [ 719.314979][T12291] ? netlink_getsockopt+0x540/0x540 [ 719.320203][T12291] ____sys_sendmsg+0x59b/0x970 [ 719.324998][T12291] ? __sys_sendmsg_sock+0x30/0x30 [ 719.330040][T12291] ? __import_iovec+0x315/0x500 [ 719.334917][T12291] ? import_iovec+0x6f/0xa0 [ 719.339432][T12291] ___sys_sendmsg+0x21c/0x290 [ 719.344139][T12291] ? __sys_sendmsg+0x270/0x270 [ 719.348978][T12291] ? __fdget+0x17c/0x200 [ 719.353244][T12291] __se_sys_sendmsg+0x19e/0x270 [ 719.358121][T12291] ? __x64_sys_sendmsg+0x80/0x80 [ 719.363092][T12291] ? lockdep_hardirqs_on+0x94/0x140 [ 719.368442][T12291] do_syscall_64+0x4c/0xa0 [ 719.372886][T12291] ? clear_bhb_loop+0x45/0xa0 [ 719.377575][T12291] ? clear_bhb_loop+0x45/0xa0 [ 719.382288][T12291] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 719.388316][T12291] RIP: 0033:0x7f380738e969 [ 719.392752][T12291] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 719.412385][T12291] RSP: 002b:00007f38081f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 719.420821][T12291] RAX: ffffffffffffffda RBX: 00007f38075b6080 RCX: 00007f380738e969 [ 719.428804][T12291] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 719.436803][T12291] RBP: 00007f3807410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 719.444800][T12291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.452784][T12291] R13: 0000000000000000 R14: 00007f38075b6080 R15: 00007fff26129a98 [ 719.460787][T12291] [ 719.557950][T12299] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3172'. [ 719.594864][T12230] device hsr_slave_0 entered promiscuous mode [ 719.602212][T12230] device hsr_slave_1 entered promiscuous mode [ 719.616163][T12230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 719.632269][T12230] Cannot create hsr debugfs directory [ 719.640434][T12302] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3172'. [ 719.916716][ T53] team0: Port device wlan1 removed [ 719.970252][T12306] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 720.006231][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.021957][T12306] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 720.056136][T12306] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 720.481292][ T53] device hsr_slave_0 left promiscuous mode [ 720.504894][ T53] device hsr_slave_1 left promiscuous mode [ 720.543460][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.574475][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.574697][ T4290] Bluetooth: hci0: command 0x041b tx timeout [ 720.591663][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 720.650964][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 720.745933][ T53] device veth1_macvtap left promiscuous mode [ 720.752107][ T53] device veth1_vlan left promiscuous mode [ 720.784764][ T53] device veth0_vlan left promiscuous mode [ 721.889634][T12359] __nla_validate_parse: 5 callbacks suppressed [ 721.889654][T12359] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3186'. [ 722.139468][ T53] team0 (unregistering): Port device team_slave_1 removed [ 722.184819][ T53] team0 (unregistering): Port device team_slave_0 removed [ 722.226020][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.272600][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.611681][ T53] bond0 (unregistering): (slave team0): Releasing backup interface [ 722.654279][ T4290] Bluetooth: hci0: command 0x040f tx timeout [ 722.746907][ T53] bond0 (unregistering): Released all slaves [ 722.786396][T12334] netlink: 'syz.3.3183': attribute type 10 has an invalid length. [ 722.794778][T12334] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.802145][T12334] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.824120][T12347] netlink: 'syz.4.3184': attribute type 10 has an invalid length. [ 722.835837][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 722.843329][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 722.907012][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 722.914270][T12347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 722.921714][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 722.928935][T12347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 722.947087][T12347] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 723.026591][T12359] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 723.811957][T12381] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 723.855472][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 723.872728][T12381] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 723.895890][T12381] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 724.377173][T12230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 724.412706][T12230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 724.478640][T12230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 724.517390][T12406] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3201'. [ 724.527554][T12230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 724.676967][T12413] netlink: 'syz.1.3201': attribute type 10 has an invalid length. [ 724.691130][T12412] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3202'. [ 724.724307][ T4290] Bluetooth: hci0: command 0x0419 tx timeout [ 724.833490][T12412] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 724.906534][T12230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 724.949154][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 724.991588][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 725.020096][T12230] 8021q: adding VLAN 0 to HW filter on device team0 [ 725.050472][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 725.062269][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 725.071853][ T4341] bridge0: port 1(bridge_slave_0) entered blocking state [ 725.079060][ T4341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 725.108440][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 725.120016][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 725.133559][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 725.144435][ T4341] bridge0: port 2(bridge_slave_1) entered blocking state [ 725.151612][ T4341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 725.162109][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 725.191394][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 725.215755][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 725.238163][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 725.290033][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 725.326110][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 725.360367][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 725.428596][T12424] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3204'. [ 725.447074][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 725.474165][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 725.502526][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 725.537469][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 725.549818][T12427] netlink: 'syz.3.3204': attribute type 10 has an invalid length. [ 725.593668][T12230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 726.324851][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 726.332449][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 726.381414][T12230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 726.450045][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 726.490514][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 726.542436][T12456] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 726.576159][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.628249][T12456] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 726.669184][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.703862][T12456] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 726.745829][T12456] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 726.793046][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 726.821162][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 726.859666][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 726.894628][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 726.934516][T12230] device veth0_vlan entered promiscuous mode [ 726.976178][T12230] device veth1_vlan entered promiscuous mode [ 727.088962][T12230] device veth0_macvtap entered promiscuous mode [ 727.163476][T12230] device veth1_macvtap entered promiscuous mode [ 727.224569][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 727.233536][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 727.242741][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 727.260949][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 727.320785][T12230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 727.346031][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 727.376328][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 727.400848][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.421629][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.433151][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.449259][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.459595][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.480561][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.511032][T12230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 727.530071][T12230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 727.580930][T12230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 727.612929][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 727.663027][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 727.711936][T12230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.745789][T12230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.770438][T12230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 727.797282][T12230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 728.127231][T12499] netlink: 'syz.0.3223': attribute type 10 has an invalid length. [ 728.144111][T12499] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.151441][T12499] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.184275][T12493] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.3223'. [ 728.266720][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.326306][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.388844][ T4341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 728.415585][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 728.440996][ T4341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 728.512317][ T9270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 728.665638][T12511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 728.731670][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.789882][T12511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 728.833117][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 728.879444][T12511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 728.932617][T12511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 730.595077][ T4294] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 730.605582][ T4294] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 730.618463][ T4294] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 730.640397][ T4294] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 730.648870][ T4294] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 730.657660][ T4294] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 730.876356][ T4341] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.080468][ T4341] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.259351][T12583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3250'. [ 731.277950][ T4341] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.347461][T12583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3250'. [ 731.386884][T12587] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3250'. [ 731.515569][ T4341] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 732.292590][T12564] chnl_net:caif_netlink_parms(): no params data found [ 732.754823][ T4290] Bluetooth: hci1: command 0x0409 tx timeout [ 732.891747][T12564] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.914528][T12564] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.941504][T12564] device bridge_slave_0 entered promiscuous mode [ 733.002213][T12635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3261'. [ 733.028689][T12564] bridge0: port 2(bridge_slave_1) entered blocking state [ 733.039502][T12564] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.068500][T12564] device bridge_slave_1 entered promiscuous mode [ 733.088757][T12635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3261'. [ 733.174639][T12633] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3261'. [ 733.234376][T12636] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3261'. [ 733.315577][T12564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 733.450628][T12564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 733.663305][T12564] team0: Port device team_slave_0 added [ 733.712434][T12564] team0: Port device team_slave_1 added [ 734.142429][ T4341] team0: Port device wlan1 removed [ 734.326504][T12564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 734.333549][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.462301][T12564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 734.580683][T12564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 734.619369][T12564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 734.788440][T12564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 734.804029][ T4290] Bluetooth: hci1: command 0x041b tx timeout [ 735.204257][ T4341] device hsr_slave_0 left promiscuous mode [ 735.243824][ T4341] device hsr_slave_1 left promiscuous mode [ 735.254387][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 735.276472][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 735.305480][ T4341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 735.328468][T12683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3273'. [ 735.345027][ T4341] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 735.408834][T12686] netlink: 212884 bytes leftover after parsing attributes in process `syz.0.3274'. [ 735.427450][ T4341] device veth1_macvtap left promiscuous mode [ 735.467937][ T4341] device veth0_macvtap left promiscuous mode [ 735.497064][ T4341] device veth1_vlan left promiscuous mode [ 735.517202][ T4341] device veth0_vlan left promiscuous mode [ 736.540094][ T4341] team0 (unregistering): Port device team_slave_1 removed [ 736.612000][ T4341] team0 (unregistering): Port device team_slave_0 removed [ 736.684292][ T4341] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.730146][ T4341] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.884583][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 737.047424][ T4341] bond0 (unregistering): (slave team0): Releasing backup interface [ 737.173429][ T4341] bond0 (unregistering): Released all slaves [ 737.210260][T12564] device hsr_slave_0 entered promiscuous mode [ 737.217823][T12564] device hsr_slave_1 entered promiscuous mode [ 737.226631][T12683] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3273'. [ 737.236205][T12689] netlink: 'syz.0.3274': attribute type 10 has an invalid length. [ 737.483434][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3290'. [ 737.550404][T12710] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3290'. [ 737.612300][T12705] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3290'. [ 737.637876][T12713] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3290'. [ 738.370318][ T4290] Bluetooth: hci2: unknown advertising packet type: 0x4d [ 738.370400][ T4290] Bluetooth: hci2: Malformed LE Event: 0x02 [ 738.445062][T12564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 738.542518][T12564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 738.581413][T12564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 738.625634][T12564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 738.646199][T12741] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3291'. [ 738.787224][T12748] netlink: 'syz.3.3291': attribute type 10 has an invalid length. [ 738.853221][T12744] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3292'. [ 738.919341][T12747] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3293'. [ 738.922170][T12750] netlink: 'syz.4.3292': attribute type 10 has an invalid length. [ 738.963954][ T4290] Bluetooth: hci1: command 0x0419 tx timeout [ 738.973232][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.980646][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.057829][T12755] netlink: 'syz.2.3293': attribute type 10 has an invalid length. [ 739.078796][T12755] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.086411][T12755] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.224299][T12755] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.231531][T12755] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.239071][T12755] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.246277][T12755] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.341833][T12755] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 739.404742][T12564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 739.419294][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3296'. [ 739.435728][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3296'. [ 739.482676][T12759] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3296'. [ 739.550597][T12761] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3296'. [ 739.649603][T12564] 8021q: adding VLAN 0 to HW filter on device team0 [ 739.679316][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 739.691351][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 739.735037][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 739.759156][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 739.792196][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.799447][ T4305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 739.835069][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 739.854838][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 739.884423][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.891584][ T4305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 739.909708][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 739.934288][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 739.971841][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 740.038262][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 740.089882][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 740.110304][ T4290] Bluetooth: hci4: unknown advertising packet type: 0x4d [ 740.110377][ T4290] Bluetooth: hci4: Malformed LE Event: 0x02 [ 740.135080][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 740.199305][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 740.244331][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 740.278904][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 740.311676][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 740.368117][T12564] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 740.442418][T12564] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 740.489877][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 740.512884][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 740.901276][T12802] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'. [ 740.921427][T12802] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'. [ 740.992934][T12796] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3307'. [ 741.089976][T12807] netlink: 'syz.0.3306': attribute type 10 has an invalid length. [ 741.307213][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 741.337431][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 741.434761][T12564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 741.500781][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 741.521360][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 741.628386][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 741.649249][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 741.693441][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 741.738269][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 741.847731][T12564] device veth0_vlan entered promiscuous mode [ 741.872956][T12564] device veth1_vlan entered promiscuous mode [ 741.992945][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 742.024151][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 742.039550][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 742.106491][ T4341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 742.137590][T12564] device veth0_macvtap entered promiscuous mode [ 742.172079][T12564] device veth1_macvtap entered promiscuous mode [ 742.213024][ T4290] Bluetooth: hci5: unknown advertising packet type: 0x4d [ 742.213087][ T4290] Bluetooth: hci5: Malformed LE Event: 0x02 [ 742.290337][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 742.317512][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.330975][T12564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 742.340653][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 742.378084][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 742.402458][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 742.463561][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 742.496082][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.514743][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.525521][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.537424][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.548150][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.567671][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.596895][T12564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 742.691562][T12564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 742.724583][T12564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 742.755610][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 742.776956][ T53] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 742.812286][T12564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.841372][T12564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.888427][T12564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 742.949785][T12564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 743.236292][T12851] netlink: 'syz.3.3322': attribute type 10 has an invalid length. [ 743.417409][ T1118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.431924][ T1118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.471215][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 743.549785][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 743.573807][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 743.599389][ T1118] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 743.707499][T12857] bridge0: port 3(bond0) entered blocking state [ 743.719726][T12857] bridge0: port 3(bond0) entered disabled state [ 744.275815][T12875] __nla_validate_parse: 7 callbacks suppressed [ 744.275834][T12875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3332'. [ 744.323856][T12875] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3332'. [ 744.367738][T12874] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3332'. [ 744.426957][T12879] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 744.460995][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.498889][T12879] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 744.536883][T12879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 744.603415][T12881] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3332'. [ 744.944234][T12889] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 744.982553][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.004035][T12889] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 745.031658][T12889] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 745.195857][T12900] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3341'. [ 745.319296][T12900] netlink: 'syz.3.3341': attribute type 10 has an invalid length. [ 746.123412][T12920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3349'. [ 746.154042][T12920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3349'. [ 746.165252][T12917] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3349'. [ 746.184593][T12920] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3349'. [ 746.440220][T12928] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3354'. [ 746.576450][T12929] netlink: 'syz.2.3354': attribute type 10 has an invalid length. [ 746.616332][T12929] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.625414][T12929] bridge0: port 1(bridge_slave_0) entered disabled state [ 747.126113][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.132475][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.929776][T12976] netlink: 'syz.3.3371': attribute type 10 has an invalid length. [ 749.173295][T13025] netlink: 'syz.1.3387': attribute type 10 has an invalid length. [ 749.209377][T13025] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.219111][T13025] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.331670][T13025] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.339776][T13025] bridge0: port 2(bridge_slave_1) entered forwarding state [ 749.348551][T13025] bridge0: port 1(bridge_slave_0) entered blocking state [ 749.356021][T13025] bridge0: port 1(bridge_slave_0) entered forwarding state [ 749.441303][T13025] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 751.781971][ T4290] Bluetooth: hci4: unexpected event 0x10 length: 15 > 1 [ 751.782194][ T4290] Bluetooth: hci4: hardware error 0x00 [ 751.970221][T13116] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 752.043703][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.085901][T13116] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 752.121985][T13116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 752.957448][T13146] __nla_validate_parse: 10 callbacks suppressed [ 752.957545][T13146] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3434'. [ 752.990059][ T4294] Bluetooth: hci5: unexpected event 0x10 length: 15 > 1 [ 752.990315][ T4294] Bluetooth: hci5: hardware error 0x00 [ 753.038700][T13146] netlink: 'syz.4.3434': attribute type 10 has an invalid length. [ 753.846387][ T4290] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 754.317193][T13187] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3448'. [ 754.342059][T13196] netlink: 'syz.1.3448': attribute type 10 has an invalid length. [ 754.420783][T13196] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.428176][T13196] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.688315][T13203] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3456'. [ 754.734181][T13203] netlink: 'syz.1.3456': attribute type 10 has an invalid length. [ 755.179558][T13218] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3462'. [ 755.205148][T13218] netlink: 'syz.2.3462': attribute type 10 has an invalid length. [ 755.283803][ T4294] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 756.125700][T13255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3485'. [ 756.164145][T13255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3485'. [ 756.216741][T13253] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3475'. [ 756.231340][T13251] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3485'. [ 756.316656][T13253] netlink: 'syz.4.3475': attribute type 10 has an invalid length. [ 756.349310][T13257] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3485'. [ 757.162886][T13289] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3491'. [ 757.197312][T13289] netlink: 'syz.1.3491': attribute type 10 has an invalid length. [ 757.440064][T13296] netlink: 'syz.4.3494': attribute type 10 has an invalid length. [ 758.104903][T13318] netlink: 'syz.4.3501': attribute type 10 has an invalid length. [ 758.132409][T13315] __nla_validate_parse: 1 callbacks suppressed [ 758.132464][T13315] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3501'. [ 758.189330][T13321] netlink: 'syz.1.3502': attribute type 10 has an invalid length. [ 759.359280][T13351] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 759.380519][T13351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.387330][T13354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3516'. [ 759.402501][T13351] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 759.458247][T13351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 759.527194][T13354] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3516'. [ 759.545908][T13350] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3516'. [ 759.585041][T13355] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3516'. [ 759.604574][T13364] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3519'. [ 759.648905][T13362] netlink: 'syz.1.3519': attribute type 10 has an invalid length. [ 759.920314][T13374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3532'. [ 759.951142][T13371] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3522'. [ 759.954571][T13376] netlink: 'syz.2.3522': attribute type 10 has an invalid length. [ 759.987371][T13374] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3532'. [ 760.053792][T13370] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3532'. [ 760.521900][T13397] netlink: 'syz.2.3533': attribute type 10 has an invalid length. [ 760.543148][T13399] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 760.573803][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.609369][T13399] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 760.683850][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.728417][T13399] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 760.790577][T13399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 760.825310][T13411] netlink: 'syz.2.3538': attribute type 10 has an invalid length. [ 760.885964][T13410] netlink: 'syz.3.3539': attribute type 10 has an invalid length. [ 761.008547][T13413] netlink: 'syz.4.3541': attribute type 10 has an invalid length. [ 761.163443][T13419] netlink: 'syz.3.3543': attribute type 10 has an invalid length. [ 761.302111][T13426] netlink: 'syz.1.3544': attribute type 10 has an invalid length. [ 761.882762][T13442] netlink: 'syz.4.3551': attribute type 10 has an invalid length. [ 762.085195][T13445] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 762.121904][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.158430][T13445] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 762.187821][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.239065][T13445] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 762.292627][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.399339][T13445] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 762.447252][T13445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.513793][T13447] netlink: 'syz.0.3554': attribute type 10 has an invalid length. [ 763.846079][T13480] __nla_validate_parse: 15 callbacks suppressed [ 763.846100][T13480] netlink: 65023 bytes leftover after parsing attributes in process `syz.4.3568'. [ 765.378341][T13514] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3582'. [ 765.390807][T13515] validate_nla: 8 callbacks suppressed [ 765.390828][T13515] netlink: 'syz.4.3581': attribute type 10 has an invalid length. [ 765.530134][T13514] netlink: 'syz.3.3582': attribute type 10 has an invalid length. [ 765.917538][T13530] netlink: 'syz.2.3584': attribute type 10 has an invalid length. [ 766.245880][T13537] netlink: 'syz.3.3589': attribute type 10 has an invalid length. [ 766.523404][T13545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3592'. [ 766.539073][T13545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3592'. [ 766.573988][T13543] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3592'. [ 766.606177][T13546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3592'. [ 766.886186][T13550] netlink: 'syz.0.3593': attribute type 10 has an invalid length. [ 766.929660][T13555] netlink: 'syz.4.3595': attribute type 10 has an invalid length. [ 767.793869][T13572] netlink: 'syz.2.3602': attribute type 10 has an invalid length. [ 767.970022][T13580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3606'. [ 768.026584][T13580] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3606'. [ 768.067719][T13575] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3606'. [ 768.090716][T13583] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3606'. [ 768.230793][T13586] netlink: 'syz.4.3609': attribute type 10 has an invalid length. [ 768.645095][ T4294] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 768.645324][ T4294] Bluetooth: hci2: hardware error 0x00 [ 769.098089][ T4290] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 769.554583][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3622'. [ 769.613161][T13618] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3622'. [ 769.682594][T13613] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3622'. [ 769.719677][T13622] netlink: 'syz.3.3621': attribute type 10 has an invalid length. [ 769.743935][T13619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3622'. [ 769.992265][T13629] netlink: 'syz.1.3627': attribute type 10 has an invalid length. [ 770.175731][T13631] netlink: 6 bytes leftover after parsing attributes in process `syz.4.3629'. [ 771.123773][ T4294] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 771.385492][T13660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3638'. [ 771.416554][T13660] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3638'. [ 771.441379][T13656] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3638'. [ 771.460129][T13662] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3638'. [ 771.949000][T13677] netlink: 'syz.4.3643': attribute type 10 has an invalid length. [ 773.311312][T13705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3656'. [ 775.335410][T13705] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3656'. [ 775.345360][T13711] netlink: 'syz.1.3657': attribute type 10 has an invalid length. [ 775.534189][T13720] netlink: 6 bytes leftover after parsing attributes in process `syz.2.3662'. [ 776.190328][T13743] netlink: 'syz.4.3665': attribute type 10 has an invalid length. [ 776.377073][T13746] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3670'. [ 777.201880][T13766] netlink: 'syz.2.3676': attribute type 10 has an invalid length. [ 777.272641][T13773] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3680'. [ 777.482312][T13778] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 777.536849][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.591771][T13778] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 777.638849][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.667624][T13778] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 777.720227][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.733039][T13778] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 777.748003][T13778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 777.783288][T13781] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3682'. [ 779.002220][T13818] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 779.048740][T13818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.077694][T13818] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 779.092562][T13818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.102857][T13818] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 779.114224][T13818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.134500][T13818] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 779.201681][T13818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 779.671611][T13841] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3703'. [ 781.940979][T13873] netlink: 6 bytes leftover after parsing attributes in process `syz.0.3715'. [ 782.417388][T13887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3721'. [ 782.446615][T13887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3721'. [ 782.457194][T13887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3721'. [ 782.473996][T13886] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3721'. [ 782.979652][T13900] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3725'. [ 783.020968][T13900] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3725'. [ 783.055124][T13898] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.3725'. [ 783.564514][T13921] netlink: 6 bytes leftover after parsing attributes in process `syz.1.3732'. [ 784.172305][T13929] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3735'. [ 785.142688][T13957] netlink: 'syz.2.3745': attribute type 10 has an invalid length. [ 786.823518][T13994] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 786.830469][T13994] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 787.275639][T14010] __nla_validate_parse: 15 callbacks suppressed [ 787.275718][T14010] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3767'. [ 787.380407][T14010] netlink: 'syz.3.3767': attribute type 10 has an invalid length. [ 789.561720][T14039] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 789.568269][T14039] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 789.671771][T14044] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3776'. [ 789.754757][T14043] device syzkaller0 entered promiscuous mode [ 789.793753][T14048] netlink: 'syz.3.3776': attribute type 10 has an invalid length. [ 790.722363][T14065] netlink: 212884 bytes leftover after parsing attributes in process `syz.3.3785'. [ 792.792938][T14067] netlink: 'syz.3.3785': attribute type 10 has an invalid length. [ 792.929327][T14072] netlink: 6 bytes leftover after parsing attributes in process `syz.3.3789'. [ 793.072233][T14076] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3800'. [ 793.261852][T14076] netlink: 'syz.1.3800': attribute type 10 has an invalid length. [ 794.049122][T14098] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3795'. [ 794.132228][T14099] netlink: 'syz.4.3795': attribute type 10 has an invalid length. [ 795.193204][T14116] device syzkaller0 entered promiscuous mode [ 796.805596][T14136] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3809'. [ 799.131692][T14129] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 799.142338][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.152324][T14129] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 799.163279][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.173334][T14129] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 799.184065][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.194035][T14129] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 799.204538][T14129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 799.215581][T14139] netlink: 'syz.4.3809': attribute type 10 has an invalid length. [ 799.401191][T14156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3816'. [ 799.418753][T14156] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3816'. [ 799.433464][T14150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3816'. [ 799.449955][T14150] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3816'. [ 799.528356][T14157] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3818'. [ 799.667503][T14164] netlink: 'syz.4.3818': attribute type 10 has an invalid length. [ 799.742326][T14163] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3819'. [ 799.975825][T14171] netlink: 'syz.2.3819': attribute type 10 has an invalid length. [ 800.800952][T14180] device syzkaller0 entered promiscuous mode [ 801.207734][T14184] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 801.242932][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.253177][T14184] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 801.269033][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.282598][T14184] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 801.300227][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.323899][T14184] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 801.370202][T14184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 801.596280][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3832'. [ 803.387429][T14193] device syzkaller0 entered promiscuous mode [ 803.394952][T14200] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3832'. [ 803.629603][T14213] netlink: 212884 bytes leftover after parsing attributes in process `syz.4.3836'. [ 806.082795][T14215] netlink: 'syz.4.3836': attribute type 10 has an invalid length. [ 806.329290][T14228] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 806.359843][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.375867][T14228] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 806.386900][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.402879][T14228] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 806.428160][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.445175][T14239] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3846'. [ 806.451640][T14228] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 806.475625][T14228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.559062][T14234] netlink: 'syz.1.3846': attribute type 10 has an invalid length. [ 807.100534][T14245] device syzkaller0 entered promiscuous mode [ 807.641643][ T4294] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 808.569549][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.606197][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.190365][T14269] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 810.200951][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.211067][T14269] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 810.222482][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.232516][T14269] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 810.243023][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.253959][T14269] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 810.265820][T14269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 810.976296][T14288] device syzkaller0 entered promiscuous mode [ 813.575054][T14316] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 813.585680][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.596926][T14316] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 813.607810][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.617747][T14316] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 813.628307][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 813.638189][T14316] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 813.648860][T14316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.388189][T14362] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3894'. [ 816.364009][T14370] netlink: 212884 bytes leftover after parsing attributes in process `syz.1.3896'. [ 817.038823][T14382] netlink: 212884 bytes leftover after parsing attributes in process `syz.2.3898'. [ 820.733184][T14461] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 820.770087][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.792136][T14461] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 820.811073][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.831993][T14461] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 820.849612][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 820.877236][T14461] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 820.891017][T14461] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.808120][T14511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 822.826615][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.895962][T14511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 822.926304][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 822.959804][T14511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 823.177243][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 823.712405][T14511] batman_adv: The newly added mac address (00:00:00:20:00:00) already exists on: batadv_slave_0 [ 823.783856][T14511] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 927.833546][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 927.840655][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14511/1:b..l [ 927.849112][ C0] (detected by 0, t=10503 jiffies, g=78985, q=498 ncpus=2) [ 927.856451][ C0] task:syz.4.3941 state:R running task stack:25728 pid:14511 ppid:11923 flags:0x00004004 [ 927.868211][ C0] Call Trace: [ 927.871540][ C0] [ 927.874495][ C0] __schedule+0x10e9/0x40d0 [ 927.879056][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 927.884978][ C0] ? prb_read_valid+0x60/0x60 [ 927.889701][ C0] ? __up_console_sem+0xf2/0x190 [ 927.894671][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 927.899913][ C0] ? preempt_schedule+0xa7/0xb0 [ 927.904796][ C0] preempt_schedule_common+0x82/0xd0 [ 927.910106][ C0] preempt_schedule+0xa7/0xb0 [ 927.914814][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 927.920479][ C0] ? prb_read_valid+0x39/0x60 [ 927.925206][ C0] preempt_schedule_thunk+0x16/0x18 [ 927.930448][ C0] ? vprintk_emit+0x5c4/0x680 [ 927.935167][ C0] vprintk_emit+0x5c9/0x680 [ 927.939706][ C0] ? printk_sprint+0x460/0x460 [ 927.944537][ C0] ? mark_lock+0x94/0x320 [ 927.948900][ C0] ? mark_lock+0x94/0x320 [ 927.953263][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 927.959294][ C0] _printk+0xcc/0x110 [ 927.963318][ C0] ? load_image+0x3b0/0x3b0 [ 927.967864][ C0] batadv_check_known_mac_addr+0x2a7/0x3e0 [ 927.973706][ C0] ? batadv_check_known_mac_addr+0x24/0x3e0 [ 927.979650][ C0] batadv_hard_if_event+0x491/0x1550 [ 927.984979][ C0] ? dcbnl_netdevice_event+0x264/0x2a0 [ 927.990467][ C0] ? lockdep_rtnl_is_held+0x22/0x30 [ 927.995702][ C0] raw_notifier_call_chain+0xcb/0x160 [ 928.001121][ C0] dev_set_mac_address+0x2c4/0x3d0 [ 928.006263][ C0] ? dev_pre_changeaddr_notify+0x100/0x100 [ 928.012099][ C0] ? rwsem_write_trylock+0x12f/0x1b0 [ 928.017412][ C0] ? clear_nonspinnable+0x60/0x60 [ 928.022477][ C0] ? full_name_hash+0x8e/0xe0 [ 928.027188][ C0] dev_set_mac_address_user+0x2d/0x50 [ 928.032596][ C0] dev_ifsioc+0x770/0xe90 [ 928.037215][ C0] ? dev_ioctl+0xea0/0xea0 [ 928.041747][ C0] ? mutex_lock_nested+0x10/0x10 [ 928.046716][ C0] ? strnlen+0x2d/0x80 [ 928.050826][ C0] ? full_name_hash+0x8e/0xe0 [ 928.055532][ C0] ? dev_load+0x1d/0x1e0 [ 928.059803][ C0] ? dev_load+0x1d/0x1e0 [ 928.064073][ C0] dev_ioctl+0x578/0xea0 [ 928.068350][ C0] sock_do_ioctl+0x222/0x2f0 [ 928.072972][ C0] ? sock_show_fdinfo+0xb0/0xb0 [ 928.077868][ C0] sock_ioctl+0x4ed/0x6e0 [ 928.082242][ C0] ? sock_poll+0x3f0/0x3f0 [ 928.086708][ C0] ? bpf_lsm_file_ioctl+0x5/0x10 [ 928.091683][ C0] ? security_file_ioctl+0x7c/0xa0 [ 928.096828][ C0] ? sock_poll+0x3f0/0x3f0 [ 928.101282][ C0] __se_sys_ioctl+0xfa/0x170 [ 928.105934][ C0] do_syscall_64+0x4c/0xa0 [ 928.110480][ C0] ? clear_bhb_loop+0x45/0xa0 [ 928.115192][ C0] ? clear_bhb_loop+0x45/0xa0 [ 928.119897][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.125827][ C0] RIP: 0033:0x7f380738e969 [ 928.130270][ C0] RSP: 002b:00007f3808215038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 928.138711][ C0] RAX: ffffffffffffffda RBX: 00007f38075b5fa0 RCX: 00007f380738e969 [ 928.146883][ C0] RDX: 0000200000000080 RSI: 0000000000008924 RDI: 0000000000000009 [ 928.154879][ C0] RBP: 00007f3807410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 928.162891][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.170892][ C0] R13: 0000000000000000 R14: 00007f38075b5fa0 R15: 00007fff26129a98 [ 928.178906][ C0] [ 928.181946][ C0] rcu: rcu_preempt kthread starved for 10434 jiffies! g78985 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 928.193171][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 928.203157][ C0] rcu: RCU grace-period kthread stack dump: [ 928.209063][ C0] task:rcu_preempt state:R running task stack:27776 pid:16 ppid:2 flags:0x00004000 [ 928.219876][ C0] Call Trace: [ 928.223177][ C0] [ 928.226133][ C0] __schedule+0x10e9/0x40d0 [ 928.230675][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 928.235914][ C0] ? _raw_spin_unlock+0x40/0x40 [ 928.240804][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 928.246758][ C0] schedule+0xb9/0x180 [ 928.250878][ C0] schedule_timeout+0x15c/0x280 [ 928.255770][ C0] ? console_conditional_schedule+0x40/0x40 [ 928.261778][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 928.267734][ C0] ? update_process_times+0x1b0/0x1b0 [ 928.273166][ C0] ? prepare_to_swait_event+0x335/0x350 [ 928.278758][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 928.283645][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 928.289827][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 928.294629][ C0] ? rcu_gp_cleanup+0xb4c/0xca0 [ 928.299525][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 928.304760][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 928.309997][ C0] rcu_gp_kthread+0x95/0x380 [ 928.314613][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 928.319840][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 928.325878][ C0] ? __kthread_parkme+0x162/0x1c0 [ 928.330951][ C0] kthread+0x29d/0x330 [ 928.335050][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 928.340183][ C0] ? kthread_blkcg+0xd0/0xd0 [ 928.344810][ C0] ret_from_fork+0x1f/0x30 [ 928.349309][ C0] [ 928.352347][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 928.358703][ C0] Sending NMI from CPU 0 to CPUs 1: [ 928.363944][ C1] NMI backtrace for cpu 1 [ 928.363956][ C1] CPU: 1 PID: 14518 Comm: syz.3.3944 Not tainted 6.1.136-syzkaller #0 [ 928.363974][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 928.363983][ C1] RIP: 0010:perf_callchain_kernel+0x2d7/0x5c0 [ 928.364015][ C1] Code: 00 4d 8b 6d 00 31 ff 4c 89 ee e8 94 ce 7f 00 4d 85 ed 74 3e e8 aa ca 7f 00 eb 3f 4d 85 ed 49 bf 00 00 00 00 00 fc ff df 74 3f 94 ca 7f 00 4d 8d a5 98 00 00 00 4c 89 e0 48 c1 e8 03 42 80 3c [ 928.364030][ C1] RSP: 0018:ffffc900001dfae0 EFLAGS: 00000086 [ 928.364045][ C1] RAX: ffff88804ab0bb80 RBX: 1ffff9200003bf64 RCX: ffff88804ab0bb80 [ 928.364059][ C1] RDX: 0000000000010100 RSI: 0000000000000002 RDI: 0000000000000000 [ 928.364069][ C1] RBP: ffffc900001dfc10 R08: dffffc0000000000 R09: ffffc900001dfb40 [ 928.364083][ C1] R10: fffff5200003bf74 R11: 1ffff9200003bf68 R12: ffffc900001e0568 [ 928.364096][ C1] R13: ffffc900001e04d8 R14: 1ffff9200003bf8d R15: dffffc0000000000 [ 928.364109][ C1] FS: 00007f1d4c48e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 928.364125][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.364137][ C1] CR2: 0000001b2f712ff8 CR3: 0000000045b2d000 CR4: 00000000003506e0 [ 928.364153][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 928.364164][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 928.364175][ C1] Call Trace: [ 928.364180][ C1] [ 928.364189][ C1] ? arch_perf_update_userpage+0x3b0/0x3b0 [ 928.364224][ C1] ? get_callchain_entry+0x181/0x3b0 [ 928.364251][ C1] get_perf_callchain+0x376/0x480 [ 928.364278][ C1] ? put_callchain_entry+0xb0/0xb0 [ 928.364305][ C1] ? __perf_event_header__init_id+0x425/0x530 [ 928.364334][ C1] perf_prepare_sample+0x375/0x1fd0 [ 928.364365][ C1] ? perf_callchain+0x190/0x190 [ 928.364395][ C1] perf_event_output_forward+0x163/0x2a0 [ 928.364422][ C1] ? perf_event_output_forward+0x96/0x2a0 [ 928.364448][ C1] ? perf_get_page_size+0x420/0x420 [ 928.364483][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 928.364508][ C1] ? sched_clock_cpu+0x6e/0x250 [ 928.364529][ C1] ? __perf_event_account_interrupt+0x167/0x260 [ 928.364547][ C1] __perf_event_overflow+0x448/0x610 [ 928.364567][ C1] perf_swevent_hrtimer+0x3af/0x500 [ 928.364594][ C1] ? cpu_clock_event_read+0x50/0x50 [ 928.364630][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 928.364657][ C1] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 928.364682][ C1] ? _raw_spin_unlock+0x40/0x40 [ 928.364710][ C1] __hrtimer_run_queues+0x4e8/0xc80 [ 928.364732][ C1] ? cpu_clock_event_read+0x50/0x50 [ 928.364760][ C1] ? hrtimer_interrupt+0x8d0/0x8d0 [ 928.364778][ C1] ? ktime_get_update_offsets_now+0x3ce/0x3e0 [ 928.364803][ C1] hrtimer_interrupt+0x3bb/0x8d0 [ 928.364832][ C1] __sysvec_apic_timer_interrupt+0x153/0x5a0 [ 928.364858][ C1] sysvec_apic_timer_interrupt+0x4d/0xc0 [ 928.364886][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 928.364902][ C1] RIP: 0010:ndisc_constructor+0xb1/0x8b0 [ 928.364923][ C1] Code: 7c 24 08 48 89 5c 24 10 4c 8d b8 d8 05 00 00 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 d4 ec f6 f8 4c 89 74 24 20 <4d> 8b 2f 48 8b 44 24 10 48 8d 58 10 49 89 dc 49 c1 ec 03 48 b8 00 [ 928.364938][ C1] RSP: 0018:ffffc900001e0580 EFLAGS: 00000246 [ 928.364951][ C1] RAX: 1ffff1100f1350bb RBX: ffff888054a29800 RCX: ceffa0a0b4599300 [ 928.364964][ C1] RDX: 0000000000000003 RSI: ffffffff8a6c0f80 RDI: ffffffff8abf0da0 [ 928.364976][ C1] RBP: 0000000000000017 R08: dffffc0000000000 R09: fffffbfff1bfd03e [ 928.364987][ C1] R10: fffffbfff1bfd03e R11: 1ffffffff1bfd03d R12: dffffc0000000000 [ 928.365000][ C1] R13: ffff88807af7a000 R14: ffff8880789a8000 R15: ffff8880789a85d8 [ 928.365025][ C1] ___neigh_create+0xcd7/0x24c0 [ 928.365050][ C1] ? ip6_finish_output2+0x14da/0x1590 [ 928.365079][ C1] ip6_finish_output2+0x14f0/0x1590 [ 928.365107][ C1] ? ip6_finish_output2+0x593/0x1590 [ 928.365133][ C1] ? nf_hook+0x370/0x370 [ 928.365163][ C1] ip6_finish_output+0x5d3/0xa60 [ 928.365192][ C1] ndisc_send_skb+0xbfb/0x1510 [ 928.365214][ C1] ? ndisc_send_skb+0x1f2/0x1510 [ 928.365237][ C1] ? ndisc_mc_map+0x810/0x810 [ 928.365258][ C1] ? skb_dst+0xd0/0xd0 [ 928.365275][ C1] ? memset+0x1e/0x40 [ 928.365304][ C1] addrconf_rs_timer+0x2b8/0x600 [ 928.365326][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 928.365352][ C1] call_timer_fn+0x1a0/0x670 [ 928.365366][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 928.365386][ C1] ? call_timer_fn+0xc1/0x670 [ 928.365400][ C1] ? __run_timers+0x7c0/0x7c0 [ 928.365420][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 928.365443][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 928.365477][ C1] ? addrconf_disable_policy_idev+0x4c0/0x4c0 [ 928.365499][ C1] __run_timers+0x525/0x7c0 [ 928.365520][ C1] ? detach_timer+0x350/0x350 [ 928.365538][ C1] ? lock_chain_count+0x20/0x20 [ 928.365558][ C1] ? seqcount_lockdep_reader_access+0x15c/0x1c0 [ 928.365581][ C1] run_timer_softirq+0x63/0xf0 [ 928.365607][ C1] handle_softirqs+0x2a1/0x920 [ 928.365636][ C1] ? __irq_exit_rcu+0x12f/0x220 [ 928.365663][ C1] ? do_softirq+0x200/0x200 [ 928.365690][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 928.365718][ C1] __irq_exit_rcu+0x12f/0x220 [ 928.365743][ C1] ? irq_exit_rcu+0x20/0x20 [ 928.365773][ C1] irq_exit_rcu+0x5/0x20 [ 928.365797][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 928.365823][ C1] [ 928.365828][ C1] [ 928.365834][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 928.365850][ C1] RIP: 0010:preempt_schedule_irq+0xac/0x150 [ 928.365869][ C1] Code: 44 24 20 f6 44 24 21 02 74 0b 0f 0b 48 f7 03 08 00 00 00 74 70 bf 01 00 00 00 e8 5f f3 3f f7 e8 da 79 6f f7 fb bf 01 00 00 00 bf b9 ff ff 48 c7 44 24 40 00 00 00 00 9c 8f 44 24 40 8b 44 24 [ 928.365883][ C1] RSP: 0018:ffffc90012a8f780 EFLAGS: 00000282 [ 928.365896][ C1] RAX: ceffa0a0b4599300 RBX: 0000000000000000 RCX: ceffa0a0b4599300 [ 928.365908][ C1] RDX: dffffc0000000000 RSI: ffffffff8a6bfe00 RDI: 0000000000000001 [ 928.365920][ C1] RBP: ffffc90012a8f830 R08: ffffffff8f7cd048 R09: ffffffff8f7cd058 [ 928.365933][ C1] R10: ffffffff8f7cd050 R11: ffffffff8f7cd043 R12: 0000000000000000 [ 928.365945][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff92002551ef0 [ 928.365965][ C1] ? preempt_schedule_notrace+0x110/0x110 [ 928.365985][ C1] ? rcu_is_watching+0x11/0xa0 [ 928.366011][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 928.366036][ C1] irqentry_exit+0x63/0x70 [ 928.366050][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 928.366067][ C1] RIP: 0010:do_dentry_open+0x2a9/0x10d0 [ 928.366091][ C1] Code: ed 03 42 80 7c 25 00 00 74 08 48 89 df e8 9f cf f2 ff 4c 8b 33 4d 85 f6 0f 84 a1 00 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 <74> 08 4c 89 f7 e8 7d cf f2 ff 49 8b 3e e8 a5 8d 8e ff 84 c0 0f 84 [ 928.366105][ C1] RSP: 0018:ffffc90012a8f8f0 EFLAGS: 00000246 [ 928.366118][ C1] RAX: 1ffffffff14f2f1c RBX: ffff88802597bc28 RCX: 0000000000080000 [ 928.366130][ C1] RDX: ffffc9001bbe9000 RSI: 000000000000014c RDI: 000000000000014d [ 928.366142][ C1] RBP: 1ffff11004b2f785 R08: dffffc0000000000 R09: ffffed1004b2f785 [ 928.366154][ C1] R10: ffffed1004b2f785 R11: 1ffff11004b2f784 R12: dffffc0000000000 [ 928.366167][ C1] R13: ffff88802597ba10 R14: ffffffff8a7978e0 R15: ffff888074fcf680 [ 928.366196][ C1] path_openat+0x25c6/0x2e70 [ 928.366224][ C1] ? do_sys_openat2+0xcf/0x490 [ 928.366247][ C1] ? __x64_sys_openat+0x135/0x160 [ 928.366270][ C1] ? do_syscall_64+0x4c/0xa0 [ 928.366295][ C1] ? do_filp_open+0x3c0/0x3c0 [ 928.366323][ C1] do_filp_open+0x1c1/0x3c0 [ 928.366342][ C1] ? vfs_tmpfile+0x480/0x480 [ 928.366371][ C1] ? _raw_spin_unlock+0x24/0x40 [ 928.366393][ C1] ? alloc_fd+0x58f/0x630 [ 928.366422][ C1] do_sys_openat2+0x142/0x490 [ 928.366446][ C1] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 928.366474][ C1] ? hrtimer_interrupt+0x79a/0x8d0 [ 928.366491][ C1] ? do_sys_open+0xe0/0xe0 [ 928.366514][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 928.366538][ C1] ? lock_chain_count+0x20/0x20 [ 928.366558][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 928.366582][ C1] __x64_sys_openat+0x135/0x160 [ 928.366608][ C1] do_syscall_64+0x4c/0xa0 [ 928.366629][ C1] ? clear_bhb_loop+0x45/0xa0 [ 928.366644][ C1] ? clear_bhb_loop+0x45/0xa0 [ 928.366660][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.366686][ C1] RIP: 0033:0x7f1d4b58e969 [ 928.366700][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.366714][ C1] RSP: 002b:00007f1d4c48e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.366730][ C1] RAX: ffffffffffffffda RBX: 00007f1d4b7b5fa0 RCX: 00007f1d4b58e969 [ 928.366742][ C1] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 928.366754][ C1] RBP: 00007f1d4b610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 928.366765][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.366775][ C1] R13: 0000000000000000 R14: 00007f1d4b7b5fa0 R15: 00007fffe1dc4208 [ 928.366794][ C1]