last executing test programs: 5m36.893651629s ago: executing program 32 (id=16328): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0xe}, 0x400, 0x2000001, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000200)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r4, r2, 0x0, r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8983, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m16.216912513s ago: executing program 4 (id=17611): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0xb7, 0x0, 0x0, 0xfffffffa, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) openat$cgroup_ro(r2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000004000000000000000000000001"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000040), &(0x7f00000001c0)=r5}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x89a1, &(0x7f0000000900)={'bridge0\x00', @broadcast}) 3m15.234020741s ago: executing program 4 (id=17616): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x11c03a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x10002400, &(0x7f00000003c0)="0d9773cc4b02688a0b", 0x9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38417534dec04a5c0daa21702f") syz_open_procfs$namespace(r3, &(0x7f0000000480)='ns/pid\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x10001}}]}}, 0x0, 0x32}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64=r2], &(0x7f0000000380)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m14.694630287s ago: executing program 4 (id=17622): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 3m14.044783049s ago: executing program 4 (id=17628): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)}, 0x1f00) 3m12.79987203s ago: executing program 4 (id=17637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110be00000000009500"], 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x4, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x4, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x7, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000001c0)={&(0x7f0000000500)=@abs={0x1, 0x2f}, 0x6e, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 3m12.324709203s ago: executing program 4 (id=17646): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 3m7.531573537s ago: executing program 3 (id=17680): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89a2, &(0x7f0000000080)={'bridge0\x00', @random="0c0000000988"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a3, &(0x7f0000000080)) 3m7.205735023s ago: executing program 3 (id=17682): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x5110, 0x0, 0x3, 0x5, 0x1, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0xec8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1200000004000000040000000c"], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8148, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x40002, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0), 0x50) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005080000000000008200000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000048000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3m6.669479769s ago: executing program 3 (id=17686): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r0, 0x0, 0xf2ffffffffffffff}, 0x38) 3m6.485587108s ago: executing program 3 (id=17690): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x30001, 0x8, 0x1}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002ac0)={{r0}, 0x0, &(0x7f0000002a80)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1, r0}, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) r2 = perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000580), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r5}, 0xc) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x12003) r6 = gettid() write$cgroup_pid(0xffffffffffffffff, &(0x7f00000002c0)=r6, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x10, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.929092506s ago: executing program 3 (id=17694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNDETACHFILTER(r1, 0x401054d6, 0x0) 3m5.63199208s ago: executing program 3 (id=17697): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m56.904838074s ago: executing program 33 (id=17646): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 2m50.035666106s ago: executing program 34 (id=17697): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(r4) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) syz_clone(0x20083500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m29.32925827s ago: executing program 2 (id=17790): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x7, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}]}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x67, &(0x7f0000000880)=""/103, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fafa, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000940)=[{0x2, 0x3, 0x9, 0x7}], 0x10, 0x41e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x11c03a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x10002400, &(0x7f00000003c0)="0d9773cc4b02688a0b", 0x9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38417534dec04a5c0daa21702f") syz_open_procfs$namespace(r4, &(0x7f0000000480)='ns/pid\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x10001}}]}}, 0x0, 0x32}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64=r3], &(0x7f0000000380)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m28.266941382s ago: executing program 2 (id=17795): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001400600000003007134cf6ee08000a0e408e8d8ef52a99fbcd7c36cc51b8c09847396e23fbb4c7a44a0bdf82637199223337488920cf280706540194791a87271ca0a97220b", 0x7c}, {&(0x7f0000000140)="a954c3c320a585dd5e19c75dd5a97935ce90a4486a6fd3", 0x17}, {&(0x7f0000000f00)="97dad187f115f9902303b8802fab035fc9f309b430bd7448313265d3f9e0244c5ce8af6a6b44ed0e96048009bf4bdf91b120126c176a7ab279049e0aa5a1c2e337", 0x41}], 0x3}, 0x8000000) 2m28.159669547s ago: executing program 2 (id=17796): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 2m24.710788004s ago: executing program 2 (id=17812): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x1, 0x0, 0x7, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x48400, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) close(0xffffffffffffffff) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m11.537535993s ago: executing program 2 (id=17863): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002", 0x29}], 0x1}, 0x8000) 2m11.374942171s ago: executing program 2 (id=17855): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x14241, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x400000000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000280)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) 2m8.218766044s ago: executing program 7 (id=17867): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x13bb711e) 2m7.117375927s ago: executing program 7 (id=17870): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2m5.328519434s ago: executing program 7 (id=17874): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d0000000401a80016000a0001400600000003007134cf6ee08000a0e408e8d8ef52a99fbcd7c36cc51b8c09847396e23fbb4c7a44a0bdf82637199223337488920cf280706540194791a87271ca0a97220b", 0x7c}, {&(0x7f0000000140)="a954c3c320a585dd5e19c75dd5a97935ce90a4486a6fd3", 0x17}, {&(0x7f0000000f00)="97dad187f115f9902303b8802fab035fc9f309b430bd7448313265d3f9e0244c5ce8af6a6b44ed0e96048009bf4bdf91b120126c176a7ab279049e0aa5a1c2e3378cdc1e", 0x44}], 0x3}, 0x8000000) 2m5.200013591s ago: executing program 7 (id=17875): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000016c0)={r0, 0x0, 0xfffffffffffffee9, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, &(0x7f0000000240)="c3e88200d317697e00", 0x0, 0x2, 0x0, 0x4}, 0x50) 2m5.085835766s ago: executing program 7 (id=17876): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000050e000a000f00000002800000", 0x2c}], 0x1}, 0x8000) 2m4.725808773s ago: executing program 7 (id=17878): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m56.033890455s ago: executing program 35 (id=17855): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) syz_clone(0x60002080, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x14241, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0x9}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x400000000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, &(0x7f0000000280)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xb3}}, &(0x7f0000000480)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmsg(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/208, 0xd0}], 0x1}, 0x10100) 1m49.52281792s ago: executing program 36 (id=17878): socketpair$nbd(0x1, 0x1, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e85000000070000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) 1m14.184632784s ago: executing program 5 (id=17998): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m13.468686319s ago: executing program 5 (id=18000): ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, 0x0, 0x0) 1m12.726064394s ago: executing program 5 (id=18002): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003f9010001"], 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x118}, 0x2160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, 0x0) 1m11.930742653s ago: executing program 5 (id=18005): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @ldst={0x1, 0x0, 0x2, 0x0, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}]}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x67, &(0x7f0000000880)=""/103, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fafa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x41e}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x11c03a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r4 = syz_clone(0x10002400, &(0x7f00000003c0)="0d9773cc4b02688a0b", 0x9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38417534dec04a5c0daa21702f") syz_open_procfs$namespace(r4, &(0x7f0000000480)='ns/pid\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x10001}}]}}, 0x0, 0x32}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) sendmsg$inet(r3, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64=r3], &(0x7f0000000380)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m11.380119299s ago: executing program 5 (id=18009): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 1m10.621015196s ago: executing program 5 (id=18013): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x6f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x39e5195f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0xed6, 0x437f}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x31) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair(0x20, 0x1, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f100"/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000bc0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000003085000000bb000000bca90000000000003509010000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0xf101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(r5) 55.199186354s ago: executing program 37 (id=18013): r0 = perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x3, 0xc, &(0x7f0000000a80)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x6f}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xb, 0x0, 0x0, 0x0, 0x39e5195f, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x86, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x85, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @perf_config_ext={0xed6, 0x437f}, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0xd, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x31) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair(0x20, 0x1, 0x0, &(0x7f0000000280)) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000f100"/25], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000bc0)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b70300000000003085000000bb000000bca90000000000003509010000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'ip6gretap0\x00', 0xf101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) close(r5) 24.13484619s ago: executing program 0 (id=18152): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[], 0xffdd) 20.336663984s ago: executing program 6 (id=18160): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0xfd, 0x0, 0x6, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x4, 0x9, 0x800000, 0xffff, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000000)=ANY=[@ANYBLOB]) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000030000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000900000000000000251f0000c50000000e800000850000000eb774412a37adebd9bfb269851aa5e495bc972b47d2c8f25cb6688cda86e7197c77d4"], &(0x7f0000000200)='GPL\x00', 0xffff6e29, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000340)='GPL\x00', 0x3, 0x87, &(0x7f0000000140)=""/135}, 0x80) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000006c0)='\xfe,){{$\x00') unlink(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00') bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) r4 = syz_clone(0x880, &(0x7f00000003c0)="7280d3b8bbfc74bb0729dfa10e14c7a432a05336bf8fc591b8e5bb101236b4274da4b67ca79bb90ccc02bb9c8300267fcf61bb22eaa3845ac4e4d0928de681c34c9e205206c7c76f3380917b35c859d9c07352a4e684cd11c431", 0x5a, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000480)="1086e9c2b42f7101dffec41273338fe8d912b4ff16c4f1d33f08b20f44e2d936b6934d8df8baf7d1e8648b7df868bd6d5248") write$cgroup_pid(r3, &(0x7f0000000580)=r4, 0x12) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe95, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) 19.687007156s ago: executing program 6 (id=18162): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 13.512534945s ago: executing program 6 (id=18165): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000780)={'pim6reg0\x00', 0x400}) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 13.093917375s ago: executing program 6 (id=18168): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa1000000000000070100"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000e300850000009e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) 12.821712408s ago: executing program 0 (id=18170): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x1f2f, 0x18, 0x1e8, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x1e8, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0xe8030000}, 0x23) 12.316847973s ago: executing program 1 (id=18173): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffec0", @ANYRESDEC], 0xffdd) 11.877848274s ago: executing program 0 (id=18174): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 5.244308526s ago: executing program 0 (id=18183): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xac, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x3a105, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x8, 0xfffffffffffffffc}, 0x4080, 0x4, 0x10, 0x9, 0x0, 0x1, 0xfffd, 0x0, 0x0, 0x0, 0x64d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0880, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff0000, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) perf_event_open(&(0x7f0000000200)={0x2, 0x88, 0x99, 0x1, 0x0, 0x0, 0x0, 0x40000000000, 0x90000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x8, 0x80, 0x7, 0x8, 0xe, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) 5.139787541s ago: executing program 1 (id=18184): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @ldst={0x1, 0x0, 0x2, 0x0, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}]}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x67, &(0x7f0000000880)=""/103, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fafa, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000940)=[{0x2, 0x3, 0x9, 0x7}], 0x10, 0x41e}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x11c03a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x10002400, &(0x7f00000003c0)="0d9773cc4b02688a0b", 0x9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38417534dec04a5c0daa21702f") syz_open_procfs$namespace(r3, &(0x7f0000000480)='ns/pid\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x10001}}]}}, 0x0, 0x32}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64=r2], &(0x7f0000000380)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.085585313s ago: executing program 9 (id=18185): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x10ff2, 0x5, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 3.061729032s ago: executing program 8 (id=18188): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xca, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="01000000040000000520000007"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1f, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002000000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000009000000850000009400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001380)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000004c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/0\x16\xff\x00\x00\xfd\x03\xaa\xec\xbe\xc2\xd4\xb6\xd7\x00\x00\x00]l\x14\x02M\f\xd6\xca\v'}, 0x30) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x60}, 0xa039d5e97778457e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team_slave_0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 2.571164386s ago: executing program 9 (id=18189): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51]}}, 0x0, 0x3b, 0x0, 0x1}, 0x28) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x20001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x5}, 0x0, 0x3, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) 2.524720978s ago: executing program 1 (id=18190): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x81) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b708000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 2.453748311s ago: executing program 0 (id=18191): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000000ce2f636252035917ef97c7820db4c9874e64421c62574e45a569942e2559314d2550acacae8d3eb94842f1b41c8"], 0x48) unlink(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.453549791s ago: executing program 8 (id=18192): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000540)="fb6bba8839fe8bc048c0cdafd1b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c279617386400"/61, 0x3d}], 0x1, 0x0, 0x0, 0x4000000}, 0x40040) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x40fd) close(r0) 2.335293656s ago: executing program 9 (id=18193): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000500)={r0, 0x0, &(0x7f0000000400)=""/236}, 0x20) 2.288209279s ago: executing program 1 (id=18194): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x308) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r3) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\a\x00'}) 2.235873011s ago: executing program 0 (id=18195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, 0x0, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8000000000000000, 0x8000}, 0x4105, 0x0, 0x3}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r3, &(0x7f0000000d40), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup(r2, &(0x7f0000000b80)='syz0\x00', 0x1ff) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r0}, 0x8) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x23a08000, 0x0, 0xfffffffffffffedb, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000400)='GPL\x00') r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[], 0x0, 0x63, 0x0, 0xfffffffe, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x806, 0x3, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x0, 0x3}, 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="008f141300000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r6, 0x58, &(0x7f0000000740)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840), 0x4) 2.173773374s ago: executing program 8 (id=18196): r0 = perf_event_open(0x0, 0x0, 0x40000000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0xff, 0x5, 0x0, 0x2, 0x44c04, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xfffffffffffffff8, 0x8}, 0x0, 0xc8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xd, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x17d6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.087167209s ago: executing program 9 (id=18197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110be00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x4, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) r0 = perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x4, 0xfe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000, 0x7, 0x0, 0x0, 0x0, 0xfff8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000cc0)={0x0, 0x0, 0x0}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000001c0)={&(0x7f0000000500)=@abs={0x1, 0x2f}, 0x6e, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010000201000"}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 1.786956524s ago: executing program 8 (id=18198): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000340)}, {&(0x7f0000000140)="a954c3c320a585dd5e19c75dd5a97935ce90a4486a6fd3", 0x17}, {&(0x7f0000000f00)="97dad187f115f9902303b8802fab035fc9f309b430bd7448313265d3f9e0244c5ce8af6a6b44ed0e96048009bf4bdf91b120126c176a7ab279049e0aa5a1c2e3378cdc1ec0", 0x45}], 0x3}, 0x8000000) 1.280837258s ago: executing program 6 (id=18199): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x2, @perf_config_ext={0x76, 0x1ef7}, 0x10ff2, 0x5, 0x98, 0x6, 0x2, 0x1, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r5) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x10}}], 0x10}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xfede, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848420000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 1.167702223s ago: executing program 9 (id=18200): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000980)=@bpf_tracing={0x1a, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x7}, @ldst={0x1, 0x0, 0x2, 0x0, 0xa, 0xfffffffffffffff4, 0xfffffffffffffff0}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x7}]}, &(0x7f0000000840)='syzkaller\x00', 0x6, 0x67, &(0x7f0000000880)=""/103, 0x40f00, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x2fafa, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000940)=[{0x2, 0x3, 0x9, 0x7}], 0x10, 0x41e}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000300), 0x4}, 0x11c03a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001ac0)={0x0, 0x0, 0x0}, 0x0) r3 = syz_clone(0x10002400, &(0x7f00000003c0)="0d9773cc4b02688a0b", 0x9, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000740)="b9a66e6c0fcb9fa99bf7036a555262eece78a5de5b5335b2831cf71bb08418af346c6fe659ae0a3d2666e8d65e861b244e8a283cc430f1dda60b9651626ffa474b17f5c3f6871e07324948436818a63c93af7e40a4cd86d6d47fda08682a826f4b7c24b0aa0851c28a5627ffc26288b40f927c7f1c8a38417534dec04a5c0daa21702f") syz_open_procfs$namespace(r3, &(0x7f0000000480)='ns/pid\x00') bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x10001}}]}}, 0x0, 0x32}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC], &(0x7f0000000640)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7}, 0x94) sendmsg$inet(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/mnt\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nr0\x00', 0x31}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a2, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071182b000000000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x0, 0x4, &(0x7f0000000a40)=ANY=[@ANYRES64=r2], &(0x7f0000000380)='GPL\x00', 0x4, 0x8f, &(0x7f00000002c0)=""/143, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.116606706s ago: executing program 8 (id=18201): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x5, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x8100, 0xc8, 0x8, 0x0, 0xfffffffffffffffe, 0x341}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x1f2f, 0x0, 0x0, 0x0, 0x0, 0x1e8, 0x0, 0xb, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b", 0x0, 0x0, 0xe8030000}, 0x50) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2212102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa200088be"], 0xcfa4) 1.072796208s ago: executing program 1 (id=18202): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x1000, 0x80, 0x4, 0x2e}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 897.735086ms ago: executing program 8 (id=18203): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 374.332742ms ago: executing program 1 (id=18204): bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) 98.890235ms ago: executing program 6 (id=18205): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 0s ago: executing program 9 (id=18206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x6, 0x4, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) kernel console output (not intermixed with test programs): 852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3298.618842][T28080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3302.020324][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3302.054681][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3302.164758][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3302.173430][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3302.249753][T28080] device veth0_vlan entered promiscuous mode [ 3302.263813][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3302.304768][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3302.399239][T28080] device veth1_vlan entered promiscuous mode [ 3302.760782][T28080] device veth0_macvtap entered promiscuous mode [ 3302.882641][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3302.975800][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3303.116370][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3303.198200][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3303.246127][T28080] device veth1_macvtap entered promiscuous mode [ 3303.300386][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3303.320802][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3303.402011][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.472803][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.499617][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.511212][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.522194][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.532849][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.549644][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3303.563960][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.575717][T28080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3303.593337][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3303.619250][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3303.703562][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.786159][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.811142][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3303.833117][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3303.995227][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3304.060519][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3304.070731][T28080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3304.081322][T28080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3304.095356][T28080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3304.117146][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3304.153435][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3304.153807][T23573] Bluetooth: hci3: command 0x0406 tx timeout [ 3304.184356][T28080] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.193823][T28080] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.202562][T28080] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.236116][T28080] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3304.345554][T28446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16468'. [ 3304.400290][T28446] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16468'. [ 3304.432715][T28448] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16468'. [ 3304.496030][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3304.510081][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3304.542771][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3304.563487][ T4851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3304.571368][ T4851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3304.618777][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3310.394863][T28627] netlink: 'syz.3.16519': attribute type 10 has an invalid length. [ 3310.402826][T28627] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16519'. [ 3310.478080][T28627] device bond0 entered promiscuous mode [ 3310.504477][T28627] device bond_slave_0 entered promiscuous mode [ 3310.532305][T28627] device bond_slave_1 entered promiscuous mode [ 3310.569420][T28627] bridge0: port 3(bond0) entered blocking state [ 3310.582698][T28627] bridge0: port 3(bond0) entered disabled state [ 3310.620996][T28627] bridge0: port 3(bond0) entered blocking state [ 3310.627705][T28627] bridge0: port 3(bond0) entered forwarding state [ 3312.004907][T28676] netlink: 'syz.0.16535': attribute type 10 has an invalid length. [ 3312.030639][T28676] device geneve0 entered promiscuous mode [ 3312.110498][T28676] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3312.163535][T28686] netlink: 'syz.5.16537': attribute type 10 has an invalid length. [ 3312.181749][T28686] netlink: 2 bytes leftover after parsing attributes in process `syz.5.16537'. [ 3312.201994][T28686] device bond0 entered promiscuous mode [ 3312.212132][T28686] device bond_slave_0 entered promiscuous mode [ 3312.221135][T28686] device bond_slave_1 entered promiscuous mode [ 3312.228185][T28686] bridge0: port 3(bond0) entered blocking state [ 3312.235381][T28686] bridge0: port 3(bond0) entered disabled state [ 3312.243961][T28686] bridge0: port 3(bond0) entered blocking state [ 3312.250370][T28686] bridge0: port 3(bond0) entered forwarding state [ 3315.222393][T28777] netlink: 'syz.4.16563': attribute type 10 has an invalid length. [ 3315.242162][T28777] device geneve0 entered promiscuous mode [ 3315.322484][T28777] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3315.480232][T28798] netlink: 'syz.2.16573': attribute type 4 has an invalid length. [ 3317.557261][T28872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16602'. [ 3317.625052][T28872] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16602'. [ 3318.232181][T28899] netlink: 'syz.0.16611': attribute type 10 has an invalid length. [ 3318.699356][T28913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16616'. [ 3318.722956][T28913] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16616'. [ 3318.896031][T28918] netlink: 'syz.4.16618': attribute type 10 has an invalid length. [ 3318.961485][T28918] device batadv0 left promiscuous mode [ 3318.967162][T28922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16620'. [ 3319.000029][T28918] ¤: port 1(batadv0) entered disabled state [ 3319.048861][T28918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3319.092187][T28918] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3319.141602][T28922] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16620'. [ 3319.171867][T28924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16620'. [ 3319.204114][T28927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16620'. [ 3319.893255][T28950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16629'. [ 3319.934118][T28950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16629'. [ 3321.063206][T28976] netlink: 'syz.3.16636': attribute type 10 has an invalid length. [ 3321.398972][T28976] device batadv0 left promiscuous mode [ 3321.423019][T28976] ¤: port 1(batadv0) entered disabled state [ 3321.463653][T28976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3321.494516][T28976] device batadv0 entered promiscuous mode [ 3321.500840][T28976] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3321.888678][T29002] bridge0: port 1(bridge_slave_0) entered disabled state [ 3322.151737][T29002] device bridge_slave_0 left promiscuous mode [ 3322.159454][T29002] bridge0: port 1(bridge_slave_0) entered disabled state [ 3323.335439][T29038] __nla_validate_parse: 11 callbacks suppressed [ 3323.335467][T29038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16656'. [ 3323.479719][T29038] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16656'. [ 3323.521038][T29036] netlink: 'syz.5.16655': attribute type 10 has an invalid length. [ 3323.563732][T29036] device geneve0 entered promiscuous mode [ 3323.609482][T29036] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3323.645693][T29040] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16656'. [ 3323.671056][T29049] netlink: 'syz.2.16657': attribute type 10 has an invalid length. [ 3323.750996][T29049] device batadv0 left promiscuous mode [ 3323.770821][T29049] ¤: port 1(batadv0) entered disabled state [ 3323.819475][T29049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3323.872120][T29049] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3324.828484][T29077] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16667'. [ 3324.877945][T29077] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16667'. [ 3324.890331][T29081] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16667'. [ 3324.920331][T29077] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16667'. [ 3325.207195][T29087] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16679'. [ 3325.234574][T29087] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16679'. [ 3325.276838][T29090] netlink: 60 bytes leftover after parsing attributes in process `syz.5.16679'. [ 3325.800375][T29103] netlink: 'syz.5.16674': attribute type 10 has an invalid length. [ 3325.959130][T29114] netlink: 'syz.2.16681': attribute type 10 has an invalid length. [ 3326.609682][T29144] netlink: 'syz.2.16695': attribute type 10 has an invalid length. [ 3326.629008][T29144] device geneve0 entered promiscuous mode [ 3326.671689][T29144] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3326.684146][T29151] netlink: 'syz.5.16697': attribute type 10 has an invalid length. [ 3326.710785][T29151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3326.739334][T29151] device batadv0 entered promiscuous mode [ 3326.756203][T29151] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3327.215665][ T4320] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 3327.225274][ T4320] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 3327.400175][T29179] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 3327.675677][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.682101][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3327.887807][T29191] netlink: 'syz.5.16710': attribute type 10 has an invalid length. [ 3328.926995][T29236] __nla_validate_parse: 9 callbacks suppressed [ 3328.927021][T29236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16727'. [ 3329.009542][T29236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16727'. [ 3329.054375][T29241] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16727'. [ 3329.165228][T29246] netlink: 'syz.2.16731': attribute type 10 has an invalid length. [ 3330.717346][T29298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3330.740845][T29300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16743'. [ 3330.772882][T29300] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16743'. [ 3330.803014][T29304] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16743'. [ 3330.994669][T29308] netlink: 'syz.0.16746': attribute type 10 has an invalid length. [ 3332.148385][T29362] netlink: 32 bytes leftover after parsing attributes in process `syz.5.16756'. [ 3332.208287][T29358] netlink: 'syz.3.16757': attribute type 10 has an invalid length. [ 3332.521697][T29369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16760'. [ 3332.659593][T29369] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16760'. [ 3332.691158][T29372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16760'. [ 3334.391765][T29417] netlink: 'syz.2.16770': attribute type 10 has an invalid length. [ 3334.934214][T29427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16773'. [ 3334.979755][T29427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16773'. [ 3335.038748][T29430] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16773'. [ 3335.622732][T29461] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.16787'. [ 3335.632730][T29461] bridge_slave_1: default FDB implementation only supports local addresses [ 3335.710789][T29465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16789'. [ 3335.720423][T29465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16789'. [ 3335.749973][T29465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16789'. [ 3335.776224][T29465] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16789'. [ 3336.046429][T29477] netlink: 'syz.5.16795': attribute type 10 has an invalid length. [ 3337.031655][T29510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16806'. [ 3337.240297][T29510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16806'. [ 3337.481298][T29524] netlink: 'syz.4.16811': attribute type 10 has an invalid length. [ 3337.538513][T29526] netlink: 'syz.0.16812': attribute type 10 has an invalid length. [ 3337.584710][T29526] device batadv0 left promiscuous mode [ 3337.601055][T29526] ¤: port 1(batadv0) entered disabled state [ 3337.612199][T29526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3337.621156][T29526] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 3339.235583][T29582] netlink: 'syz.4.16836': attribute type 10 has an invalid length. [ 3340.200617][T29621] netlink: 'syz.3.16851': attribute type 10 has an invalid length. [ 3340.495680][T29637] __nla_validate_parse: 4 callbacks suppressed [ 3340.495698][T29637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16858'. [ 3340.495720][T29631] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 3340.550942][T29637] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16858'. [ 3340.572424][T29638] nr0: port 1(hsr0) entered blocking state [ 3340.654661][T29638] nr0: port 1(hsr0) entered disabled state [ 3340.775103][T29638] device hsr0 entered promiscuous mode [ 3340.787566][T29639] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16858'. [ 3341.820437][T29679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16876'. [ 3341.841529][T29679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16876'. [ 3341.874340][T29679] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16876'. [ 3342.077179][T29695] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.16881'. [ 3342.097942][T29695] bridge_slave_1: default FDB implementation only supports local addresses [ 3342.364599][T29706] netlink: 'syz.4.16888': attribute type 10 has an invalid length. [ 3342.765519][T29724] netlink: 'syz.5.16897': attribute type 33 has an invalid length. [ 3342.780598][T29724] netlink: 152 bytes leftover after parsing attributes in process `syz.5.16897'. [ 3343.286224][T29743] netlink: 'syz.3.16903': attribute type 10 has an invalid length. [ 3343.771815][T29759] netlink: 'syz.5.16910': attribute type 10 has an invalid length. [ 3343.780254][T29764] netlink: 'syz.3.16912': attribute type 10 has an invalid length. [ 3343.834256][T29764] device dummy0 entered promiscuous mode [ 3343.858244][T29764] team0: Port device dummy0 added [ 3343.914030][T29765] netlink: 'syz.3.16912': attribute type 10 has an invalid length. [ 3343.922305][T29765] device dummy0 left promiscuous mode [ 3344.156466][T29765] team0: Port device dummy0 removed [ 3344.178904][T29765] device dummy0 entered promiscuous mode [ 3344.187034][T29765] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3344.204098][T29776] netlink: 'syz.0.16917': attribute type 10 has an invalid length. [ 3344.700810][T29795] netlink: 'syz.4.16925': attribute type 10 has an invalid length. [ 3345.575444][T29811] netlink: 'syz.0.16931': attribute type 10 has an invalid length. [ 3345.677083][T29811] team0: Port device dummy0 added [ 3345.683404][T29815] netlink: 'syz.4.16933': attribute type 10 has an invalid length. [ 3345.718397][T29811] netlink: 'syz.0.16931': attribute type 10 has an invalid length. [ 3345.805166][T29811] team0: Port device dummy0 removed [ 3345.814876][T29811] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3346.369832][T29845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16945'. [ 3346.382699][T29845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16945'. [ 3346.405370][T29845] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16945'. [ 3346.460640][T29848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16945'. [ 3346.823168][T29866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16955'. [ 3346.877342][T29866] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16955'. [ 3346.942303][T29867] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16955'. [ 3347.183367][T29883] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16961'. [ 3347.213699][T29883] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16961'. [ 3347.275878][T29887] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16961'. [ 3349.222018][T29952] validate_nla: 4 callbacks suppressed [ 3349.222038][T29952] netlink: 'syz.4.16987': attribute type 10 has an invalid length. [ 3349.268377][T29952] team0: Port device dummy0 added [ 3349.339802][T29952] netlink: 'syz.4.16987': attribute type 10 has an invalid length. [ 3349.431775][T29952] team0: Port device dummy0 removed [ 3349.452058][T29952] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 3351.953635][T30035] netlink: 'syz.4.17021': attribute type 10 has an invalid length. [ 3352.069365][T30039] __nla_validate_parse: 17 callbacks suppressed [ 3352.069382][T30039] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17023'. [ 3352.187776][T30041] netlink: 'syz.5.17024': attribute type 10 has an invalid length. [ 3352.267010][T30052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17028'. [ 3352.318796][T30052] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17028'. [ 3352.341689][T30055] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17028'. [ 3352.374917][T30056] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17028'. [ 3353.411693][T30083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17039'. [ 3353.423247][T30084] netlink: 'syz.0.17041': attribute type 10 has an invalid length. [ 3353.440022][T30083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17039'. [ 3353.450579][T30083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17039'. [ 3353.550638][T30093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17043'. [ 3353.560172][T30093] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17043'. [ 3353.590153][T30087] netlink: 'syz.4.17040': attribute type 10 has an invalid length. [ 3354.452653][T30125] netlink: 'syz.5.17056': attribute type 10 has an invalid length. [ 3355.327962][T30162] netlink: 'syz.3.17072': attribute type 10 has an invalid length. [ 3356.743396][T30199] netlink: 'syz.2.17087': attribute type 10 has an invalid length. [ 3357.005815][T30209] netlink: 'syz.3.17092': attribute type 10 has an invalid length. [ 3357.399280][T30229] __nla_validate_parse: 13 callbacks suppressed [ 3357.399307][T30229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17098'. [ 3357.455589][T30229] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17098'. [ 3357.476357][T30232] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17098'. [ 3357.660851][T30237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17099'. [ 3357.682040][T30240] netlink: 'syz.4.17101': attribute type 29 has an invalid length. [ 3357.699552][T30240] netlink: 'syz.4.17101': attribute type 29 has an invalid length. [ 3357.731787][T30240] netlink: 'syz.4.17101': attribute type 29 has an invalid length. [ 3357.751852][T30237] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17099'. [ 3357.864608][T30241] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17099'. [ 3357.908793][T30244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17099'. [ 3357.953176][T30246] netlink: 'syz.5.17103': attribute type 10 has an invalid length. [ 3358.478591][T30264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17110'. [ 3358.488266][T30264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17110'. [ 3358.499802][T30264] netlink: 60 bytes leftover after parsing attributes in process `syz.0.17110'. [ 3360.154772][T30305] netlink: 'syz.3.17126': attribute type 29 has an invalid length. [ 3360.181592][T30290] netlink: 'syz.4.17121': attribute type 10 has an invalid length. [ 3360.190255][T30305] netlink: 'syz.3.17126': attribute type 29 has an invalid length. [ 3360.240628][T30305] netlink: 'syz.3.17126': attribute type 29 has an invalid length. [ 3360.516204][T30312] netlink: 'syz.4.17129': attribute type 10 has an invalid length. [ 3360.554802][T30318] netlink: 'syz.0.17134': attribute type 10 has an invalid length. [ 3360.965076][T30340] netlink: 'syz.4.17140': attribute type 10 has an invalid length. [ 3361.148981][T30347] netlink: 'syz.2.17142': attribute type 29 has an invalid length. [ 3361.163905][T30347] netlink: 'syz.2.17142': attribute type 29 has an invalid length. [ 3361.177993][T30347] netlink: 'syz.2.17142': attribute type 29 has an invalid length. [ 3362.712521][T30393] device geneve0 entered promiscuous mode [ 3362.769085][T30393] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 3363.168042][T30416] __nla_validate_parse: 19 callbacks suppressed [ 3363.168063][T30416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17172'. [ 3363.241042][T30416] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17172'. [ 3363.308825][T30420] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17172'. [ 3364.136632][T30448] netlink: 132 bytes leftover after parsing attributes in process `syz.5.17185'. [ 3364.191452][T30453] netlink: 14585 bytes leftover after parsing attributes in process `syz.0.17186'. [ 3365.700463][T30490] validate_nla: 4 callbacks suppressed [ 3365.700483][T30490] netlink: 'syz.5.17199': attribute type 10 has an invalid length. [ 3366.086956][T30506] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17205'. [ 3366.106699][T30506] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17205'. [ 3366.129549][T30506] netlink: 60 bytes leftover after parsing attributes in process `syz.5.17205'. [ 3366.268094][T30514] netlink: 'syz.3.17208': attribute type 10 has an invalid length. [ 3367.035981][T30527] netlink: 'syz.2.17215': attribute type 10 has an invalid length. [ 3367.222137][T30542] netlink: 'syz.2.17222': attribute type 10 has an invalid length. [ 3367.233572][T30541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17221'. [ 3367.272045][T30541] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17221'. [ 3368.439981][T30585] netlink: 'syz.2.17237': attribute type 10 has an invalid length. [ 3369.052142][T30596] device syzkaller0 entered promiscuous mode [ 3374.658221][T30677] netlink: 'syz.2.17272': attribute type 10 has an invalid length. [ 3375.680559][T30716] netlink: 'syz.4.17285': attribute type 29 has an invalid length. [ 3375.694984][T30715] netlink: 'syz.2.17286': attribute type 10 has an invalid length. [ 3375.705158][T30716] netlink: 'syz.4.17285': attribute type 29 has an invalid length. [ 3375.714777][T30712] netlink: 'syz.4.17285': attribute type 29 has an invalid length. [ 3375.730403][T30712] netlink: 'syz.4.17285': attribute type 29 has an invalid length. [ 3376.528871][T30736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3376.791375][T30744] netlink: 'syz.2.17297': attribute type 10 has an invalid length. [ 3377.556588][T30771] device syzkaller0 entered promiscuous mode [ 3377.756386][T30778] netlink: 'syz.4.17309': attribute type 10 has an invalid length. [ 3380.670747][T30782] netlink: 'syz.2.17311': attribute type 10 has an invalid length. [ 3380.897712][T30810] netlink: 'syz.4.17322': attribute type 10 has an invalid length. [ 3381.472698][T30831] netlink: 'syz.0.17330': attribute type 10 has an invalid length. [ 3381.821612][T30847] __nla_validate_parse: 1 callbacks suppressed [ 3381.821632][T30847] netlink: 10 bytes leftover after parsing attributes in process `syz.3.17334'. [ 3382.340035][T30858] device syzkaller0 entered promiscuous mode [ 3382.838660][T30879] netlink: 'syz.0.17345': attribute type 4 has an invalid length. [ 3385.891423][T30882] netlink: 'syz.4.17346': attribute type 10 has an invalid length. [ 3387.104543][T30939] netlink: 'syz.4.17367': attribute type 10 has an invalid length. [ 3387.146339][T30939] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3387.179877][T30939] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3387.222952][T30939] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3387.289918][T30939] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3387.361162][T30939] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.411072][T30939] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.442607][T30939] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.481583][T30939] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3387.529719][T30939] team0: Port device geneve1 added [ 3389.115724][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.122232][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3390.539845][T31025] netlink: 'syz.0.17398': attribute type 10 has an invalid length. [ 3390.560502][T31025] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.572029][T31025] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.581354][T31025] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.590672][T31025] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3390.631919][T31025] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3390.671869][T31025] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3390.681635][T31025] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3390.691016][T31025] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3390.719289][T31025] team0: Port device geneve1 added [ 3390.730313][T31033] netlink: 'syz.4.17401': attribute type 10 has an invalid length. [ 3391.758106][T31059] netlink: 'syz.3.17412': attribute type 13 has an invalid length. [ 3391.766565][T31059] netlink: 152 bytes leftover after parsing attributes in process `syz.3.17412'. [ 3391.778602][T31059] syz_tun: refused to change device tx_queue_len [ 3391.788363][T31059] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3391.893003][T31064] netlink: 'syz.0.17414': attribute type 10 has an invalid length. [ 3392.121068][T31070] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.17416'. [ 3392.901122][T31095] netlink: 'syz.3.17428': attribute type 10 has an invalid length. [ 3393.224730][T31106] mac80211_hwsim hwsim695 ..ãc¤±: renamed from wlan1 [ 3394.001455][T31118] delete_channel: no stack [ 3394.321252][T17656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3394.329429][T31136] netlink: 'syz.0.17443': attribute type 10 has an invalid length. [ 3394.338345][T17656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3394.348401][T17656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3394.358109][T17656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3394.371922][T17656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3394.379632][T17656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3394.621774][T31134] chnl_net:caif_netlink_parms(): no params data found [ 3394.832459][T31134] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.841422][T31134] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.855919][T31134] device bridge_slave_0 entered promiscuous mode [ 3394.864477][T31147] netlink: 'syz.4.17445': attribute type 13 has an invalid length. [ 3394.873774][T31147] netlink: 152 bytes leftover after parsing attributes in process `syz.4.17445'. [ 3394.885431][T31147] syz_tun: refused to change device tx_queue_len [ 3394.892057][T31147] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 3394.923681][T31134] bridge0: port 2(bridge_slave_1) entered blocking state [ 3394.930841][T31134] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.958594][T31134] device bridge_slave_1 entered promiscuous mode [ 3395.102678][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.717339][T31134] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3395.815486][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3395.837319][T31134] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3395.938301][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.032599][T31134] team0: Port device team_slave_0 added [ 3396.108624][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3396.129880][T31134] team0: Port device team_slave_1 added [ 3396.212235][T31134] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3396.226414][T31134] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3396.262460][T31134] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3396.302204][T31134] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3396.309384][T31134] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3396.336795][T31134] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3396.469770][T31134] device hsr_slave_0 entered promiscuous mode [ 3396.483692][T23573] Bluetooth: hci0: command 0x0409 tx timeout [ 3396.496918][T31134] device hsr_slave_1 entered promiscuous mode [ 3396.713308][T31134] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3396.729850][T31134] Cannot create hsr debugfs directory [ 3397.139381][T31185] netlink: 'syz.5.17459': attribute type 10 has an invalid length. [ 3397.158960][T31185] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.189067][T31185] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.223550][T31185] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.273509][T31185] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3397.360551][T31185] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3397.404479][T31185] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3397.423643][T31185] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3397.439364][T31185] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3397.508233][T31185] team0: Port device geneve1 added [ 3398.553543][T23573] Bluetooth: hci0: command 0x041b tx timeout [ 3399.009943][T31134] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3399.074623][T31134] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3399.274088][T31134] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3399.324342][ T69] device hsr0 left promiscuous mode [ 3399.329742][ T69] nr0: port 1(hsr0) entered disabled state [ 3399.368226][ T69] device macsec0 left promiscuous mode [ 3399.374499][ T69] : port 1(macsec0) entered disabled state [ 3399.391279][ T69] device hsr_slave_0 left promiscuous mode [ 3399.410004][ T69] device hsr_slave_1 left promiscuous mode [ 3399.429129][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3399.437054][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3399.448401][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3399.457337][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3399.473071][ T69] bridge0: port 3(bond0) entered disabled state [ 3399.511518][ T69] bridge0: port 1(team0) entered disabled state [ 3399.540262][ T69] device bridge_slave_1 left promiscuous mode [ 3399.566184][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 3399.636795][ T69] device veth1_macvtap left promiscuous mode [ 3399.642889][ T69] device veth0_macvtap left promiscuous mode [ 3399.661644][ T69] device veth1_vlan left promiscuous mode [ 3399.677349][ T69] device veth0_vlan left promiscuous mode [ 3400.149658][ T69] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3400.638864][T23573] Bluetooth: hci0: command 0x040f tx timeout [ 3400.838076][ T69] device team_slave_1 left promiscuous mode [ 3400.851970][ T69] team0 (unregistering): Port device team_slave_1 removed [ 3400.962833][ T69] device team_slave_0 left promiscuous mode [ 3400.989142][ T69] team0 (unregistering): Port device team_slave_0 removed [ 3401.110177][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3401.124095][ T69] device bond_slave_1 left promiscuous mode [ 3401.192164][T31273] delete_channel: no stack [ 3401.220491][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3401.229593][ T69] device bond_slave_0 left promiscuous mode [ 3401.609481][ T69] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3401.618319][ T69] device batadv0 left promiscuous mode [ 3401.712696][ T69] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3401.722470][ T69] device dummy0 left promiscuous mode [ 3401.803067][ T69] bond0 (unregistering): Released all slaves [ 3401.954059][T31134] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3402.127313][T31282] netlink: 'syz.2.17483': attribute type 10 has an invalid length. [ 3402.149784][T31282] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3402.160295][T31282] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3402.170622][T31282] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3402.179719][T31282] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3402.237189][T31282] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.268484][T31282] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.277755][T31282] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.286790][T31282] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3402.325077][T31282] team0: Port device geneve1 added [ 3402.459833][T31294] netlink: 'syz.4.17487': attribute type 10 has an invalid length. [ 3402.484161][T31294] bond0: (slave dummy0): Releasing backup interface [ 3402.513454][T31294] team0: Port device dummy0 added [ 3402.712019][T31134] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3402.724973][T23573] Bluetooth: hci0: command 0x0419 tx timeout [ 3402.923313][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3402.968817][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3403.014533][T31134] 8021q: adding VLAN 0 to HW filter on device team0 [ 3403.067451][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3403.119018][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3403.180036][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 3403.187263][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3403.333782][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3403.344770][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3403.355353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3403.366007][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 3403.373261][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3403.381448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3403.396349][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3403.480990][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3403.517907][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3403.562118][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3403.601890][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3403.623340][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3403.695044][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3403.734037][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3403.792877][T31134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3403.814569][T31134] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3403.871608][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3403.883078][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3403.907944][T31326] netlink: 'syz.4.17500': attribute type 10 has an invalid length. [ 3403.947544][T31326] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.979609][T31326] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3403.988814][T31326] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3404.012952][T31326] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3404.433271][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3404.442326][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3404.621848][T31134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3404.710302][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3404.720586][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3404.784521][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3404.800001][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3404.829696][T31134] device veth0_vlan entered promiscuous mode [ 3404.847990][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3404.861883][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3404.894941][T31134] device veth1_vlan entered promiscuous mode [ 3404.971726][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3405.002463][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3405.016692][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3405.026602][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3405.422717][T31134] device veth0_macvtap entered promiscuous mode [ 3405.434592][T31134] device veth1_macvtap entered promiscuous mode [ 3405.516009][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3405.542864][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3405.579194][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3405.616469][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3405.719041][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3405.751567][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3405.808558][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3405.845283][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3405.893351][T31134] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3406.004614][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3406.116244][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3406.140796][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3406.154464][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3406.173486][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3406.193500][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3406.209722][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3406.234235][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3406.251995][T31134] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3406.263387][T31134] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3406.282497][T31134] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3406.298605][T30616] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3406.309661][T30616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3406.355858][T31134] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.377677][T31134] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.387369][T31134] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.397701][T31134] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3406.563603][T23573] Bluetooth: hci4: command 0x0406 tx timeout [ 3408.841199][T30123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3408.860799][T30123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3408.897069][T30616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3408.966700][T30616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3408.996066][T30616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3409.027240][T30616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3409.323828][T31430] netlink: 'syz.5.17538': attribute type 10 has an invalid length. [ 3409.360183][T31430] team0: Port device dummy0 added [ 3410.220789][T31456] nr0: port 1(hsr0) entered blocking state [ 3410.227055][T31456] nr0: port 1(hsr0) entered disabled state [ 3410.258296][T31456] device hsr0 entered promiscuous mode [ 3410.671524][T31472] netlink: 'syz.3.17554': attribute type 10 has an invalid length. [ 3410.806136][T31472] team0: Port device dummy0 added [ 3411.941355][T31510] netlink: 'syz.2.17568': attribute type 10 has an invalid length. [ 3411.998964][T31510] team0: Port device dummy0 added [ 3412.865818][T31537] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 3412.891791][T31537] device syzkaller0 entered promiscuous mode [ 3416.480936][T31548] netlink: 'syz.2.17583': attribute type 10 has an invalid length. [ 3416.541495][T31558] device syzkaller0 entered promiscuous mode [ 3416.556759][T31558] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3417.953721][T31602] netlink: 'syz.4.17597': attribute type 10 has an invalid length. [ 3418.510572][T31616] device syzkaller0 entered promiscuous mode [ 3418.527370][T31616] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3419.056712][T31633] netlink: 'syz.3.17610': attribute type 10 has an invalid length. [ 3419.201254][T31634] bridge0: port 2(bridge_slave_1) entered disabled state [ 3419.420549][T31642] device bridge_slave_1 left promiscuous mode [ 3419.474550][T31642] bridge0: port 2(bridge_slave_1) entered disabled state [ 3420.609143][T31663] device syzkaller0 entered promiscuous mode [ 3420.654242][T31663] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3421.008731][T31672] netlink: 'syz.3.17623': attribute type 10 has an invalid length. [ 3421.705326][T31691] bridge0: port 2(bridge_slave_1) entered disabled state [ 3421.720062][T31691] bridge0: port 1(bridge_slave_0) entered disabled state [ 3421.931373][T31699] device bridge_slave_1 left promiscuous mode [ 3421.972550][T31699] bridge0: port 2(bridge_slave_1) entered disabled state [ 3422.021160][T31699] device bridge_slave_0 left promiscuous mode [ 3422.037608][T31699] bridge0: port 1(bridge_slave_0) entered disabled state [ 3422.477074][T31710] netlink: 'syz.2.17639': attribute type 10 has an invalid length. [ 3426.407312][T31795] netlink: 'syz.5.17668': attribute type 10 has an invalid length. [ 3426.440309][T31795] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.464826][T31795] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.474820][T31795] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.484290][T31795] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3426.926820][T31807] batman_adv: The newly added mac address (38:39:35:33:34:37) already exists on: batadv_slave_0 [ 3426.948473][T31807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3428.330155][T31841] netlink: 'syz.5.17684': attribute type 10 has an invalid length. [ 3430.414389][T31890] netlink: 'syz.5.17700': attribute type 10 has an invalid length. [ 3432.352244][T31905] device syzkaller0 entered promiscuous mode [ 3436.192546][T31942] netlink: 'syz.5.17716': attribute type 10 has an invalid length. [ 3436.967547][T31952] netlink: 'syz.5.17722': attribute type 10 has an invalid length. [ 3439.525031][T17656] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3439.540821][T17656] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3439.551016][T17656] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3439.571219][T17656] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3439.580903][T17656] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3439.588941][T17656] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3440.099105][T31988] chnl_net:caif_netlink_parms(): no params data found [ 3440.419547][T31988] bridge0: port 1(bridge_slave_0) entered blocking state [ 3440.448056][T31988] bridge0: port 1(bridge_slave_0) entered disabled state [ 3440.479427][T31988] device bridge_slave_0 entered promiscuous mode [ 3440.500824][T32000] netlink: 'syz.5.17735': attribute type 10 has an invalid length. [ 3440.603753][T31988] bridge0: port 2(bridge_slave_1) entered blocking state [ 3440.610954][T31988] bridge0: port 2(bridge_slave_1) entered disabled state [ 3440.649444][T31988] device bridge_slave_1 entered promiscuous mode [ 3441.287272][T31988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3441.683771][T17656] Bluetooth: hci5: command 0x0409 tx timeout [ 3442.287429][T31988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3443.753547][T17656] Bluetooth: hci5: command 0x041b tx timeout [ 3444.015012][T31988] team0: Port device team_slave_0 added [ 3444.049934][T31988] team0: Port device team_slave_1 added [ 3444.168609][T31988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3444.182585][T31988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3444.221257][T31988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3444.239280][T31988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3444.253053][T31988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3444.287927][T31988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3444.378239][T31988] device hsr_slave_0 entered promiscuous mode [ 3444.386924][T31988] device hsr_slave_1 entered promiscuous mode [ 3445.700595][T32043] netlink: 'syz.0.17747': attribute type 10 has an invalid length. [ 3445.711815][T32043] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3445.726935][T32043] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3445.737453][T32043] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3445.747855][T32043] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3445.843604][T17656] Bluetooth: hci5: command 0x040f tx timeout [ 3446.494870][T23573] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3446.509864][T23573] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3446.519647][T23573] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3446.535667][T23573] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3446.545323][T23573] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3446.552642][T23573] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3447.915026][T23573] Bluetooth: hci5: command 0x0419 tx timeout [ 3448.560255][T31988] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3448.630354][T31988] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3448.644772][T23573] Bluetooth: hci1: command 0x0409 tx timeout [ 3448.682312][T31988] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3449.046240][T31988] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3449.130479][T32053] chnl_net:caif_netlink_parms(): no params data found [ 3449.650667][T31988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3449.670322][T32053] bridge0: port 1(bridge_slave_0) entered blocking state [ 3449.687730][T32053] bridge0: port 1(bridge_slave_0) entered disabled state [ 3449.710840][T32053] device bridge_slave_0 entered promiscuous mode [ 3449.839722][T31988] 8021q: adding VLAN 0 to HW filter on device team0 [ 3449.848433][T32053] bridge0: port 2(bridge_slave_1) entered blocking state [ 3449.856591][T32053] bridge0: port 2(bridge_slave_1) entered disabled state [ 3449.865051][T32053] device bridge_slave_1 entered promiscuous mode [ 3449.914656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3449.926340][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3449.955296][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3449.995043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3450.004116][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 3450.011245][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3450.068972][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3450.092785][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3450.139962][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 3450.147198][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3450.218877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3450.254786][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3450.274802][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3450.314292][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3450.332894][T31988] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3450.380939][T31988] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3450.494691][T32053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3450.563818][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.570176][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3450.710693][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3450.718776][T23573] Bluetooth: hci1: command 0x041b tx timeout [ 3450.805238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3450.844322][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3450.862149][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3450.891412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3450.900399][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3450.917284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3450.938319][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3450.953267][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3450.977317][T32053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3451.197545][T32053] team0: Port device team_slave_0 added [ 3451.229249][T32053] team0: Port device team_slave_1 added [ 3451.729231][T32053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3451.769525][T32053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3451.805658][T32053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3451.827710][T32053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3451.841093][T32053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3451.881507][T32053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3451.982562][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3452.008457][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3452.162097][T31988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3452.240578][T23622] device hsr0 left promiscuous mode [ 3452.249459][T23622] nr0: port 1(hsr0) entered disabled state [ 3452.273062][T23622] device macsec0 left promiscuous mode [ 3452.284385][T23622] : port 1(macsec0) entered disabled state [ 3452.326647][T23622] device hsr_slave_0 left promiscuous mode [ 3452.353737][T23622] device hsr_slave_1 left promiscuous mode [ 3452.389101][T23622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3452.423887][T23622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3452.453233][T23622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3452.471522][T23622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3452.565301][T23622] device veth1_macvtap left promiscuous mode [ 3452.572977][T23622] device veth0_macvtap left promiscuous mode [ 3452.697522][T23622] device veth1_vlan left promiscuous mode [ 3452.793752][T23573] Bluetooth: hci1: command 0x040f tx timeout [ 3453.074981][T23622] team0 (unregistering): Port device geneve1 removed [ 3453.166251][T23622] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3454.714875][T23622] team0 (unregistering): Port device team_slave_1 removed [ 3454.808168][T23622] team0 (unregistering): Port device team_slave_0 removed [ 3454.871365][T23622] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3454.880481][T23573] Bluetooth: hci1: command 0x0419 tx timeout [ 3454.938300][T23622] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3455.200021][T23622] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3455.259233][T23622] team0 (unregistering): Port device dummy0 removed [ 3455.321931][T23622] bond0 (unregistering): Released all slaves [ 3455.370219][T32053] device hsr_slave_0 entered promiscuous mode [ 3455.380891][T32053] device hsr_slave_1 entered promiscuous mode [ 3455.387809][T32053] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3455.395661][T32053] Cannot create hsr debugfs directory [ 3455.552782][T32159] device syzkaller0 entered promiscuous mode [ 3458.494951][T32172] netlink: 'syz.2.17767': attribute type 10 has an invalid length. [ 3458.541103][T32172] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3458.574921][T32172] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3458.610779][T32172] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3458.621067][T32172] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3458.807422][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3458.888387][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3458.936276][T32180] bridge0: port 3(bond0) entered disabled state [ 3458.953480][T32180] bridge0: port 2(bridge_slave_1) entered disabled state [ 3459.060109][T32182] device veth0_vlan left promiscuous mode [ 3459.085635][T32182] device veth0_vlan entered promiscuous mode [ 3459.115589][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3459.152384][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3459.174570][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3459.251664][T31988] device veth0_vlan entered promiscuous mode [ 3459.273802][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3459.298269][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3459.375753][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3459.400486][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3459.419963][T31988] device veth1_vlan entered promiscuous mode [ 3459.614956][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3459.637475][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3459.687326][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3459.724074][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3459.792490][T31988] device veth0_macvtap entered promiscuous mode [ 3459.825720][T32053] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 3459.994644][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3460.029837][T31988] device veth1_macvtap entered promiscuous mode [ 3460.096729][T32053] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 3460.339084][T32053] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 3460.527184][ T69] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3460.631153][T31988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.683586][T31988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.719536][T31988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3460.748107][T31988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3460.766264][T31988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3460.781682][T32053] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 3460.816402][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3460.844719][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3460.932346][ T69] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3461.013156][T31988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.026363][T31988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.039516][T31988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.050247][T31988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.060528][T31988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.071844][T31988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.088783][T31988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3461.101602][T31988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3461.115883][T31988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3461.132465][T32221] netlink: 'syz.0.17779': attribute type 10 has an invalid length. [ 3461.168933][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3461.189739][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3461.238691][ T69] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3461.303001][T31988] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.349449][T31988] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.358555][T31988] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.379950][T31988] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3461.468247][T32227] device syzkaller0 entered promiscuous mode [ 3461.546839][ T69] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3465.232391][T23622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3465.283740][T23622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3465.319458][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3465.372858][T32053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3465.411228][ T4320] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3465.427177][ T4320] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3465.454957][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3465.463025][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3465.488634][T32053] 8021q: adding VLAN 0 to HW filter on device team0 [ 3465.560642][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3465.572024][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3465.637187][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3465.647321][T23622] bridge0: port 1(bridge_slave_0) entered blocking state [ 3465.654512][T23622] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3465.662844][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3465.760088][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3465.813890][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3465.840984][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 3465.848226][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3465.905459][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3465.954338][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3465.998218][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3466.103607][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3466.131091][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3466.140602][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3466.189094][T32270] netlink: 'syz.5.17789': attribute type 10 has an invalid length. [ 3466.775587][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3466.793063][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3466.804823][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3466.816489][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3466.827365][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3466.846402][T32053] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3466.859925][T32286] netlink: 'syz.6.17730': attribute type 10 has an invalid length. [ 3466.989212][T32286] team0: Port device dummy0 added [ 3467.104797][T32292] bridge0: port 1(gretap0) entered blocking state [ 3467.133792][T32292] bridge0: port 1(gretap0) entered disabled state [ 3467.190385][T32292] device gretap0 entered promiscuous mode [ 3467.210640][T32292] bridge0: port 1(gretap0) entered blocking state [ 3467.217407][T32292] bridge0: port 1(gretap0) entered forwarding state [ 3469.201498][T32323] netlink: 'syz.5.17802': attribute type 10 has an invalid length. [ 3469.943733][T32344] netlink: 'syz.5.17806': attribute type 10 has an invalid length. [ 3469.967827][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3469.999091][T23622] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3470.022754][T32053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3471.194660][ T69] device hsr0 left promiscuous mode [ 3471.261195][ T69] nr0: port 1(hsr0) entered disabled state [ 3471.353057][ T69] device hsr_slave_0 left promiscuous mode [ 3471.408139][ T69] device hsr_slave_1 left promiscuous mode [ 3471.428755][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3471.439139][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3471.482727][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3471.508988][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3471.548976][ T69] device veth1_macvtap left promiscuous mode [ 3471.570830][ T69] device veth0_macvtap left promiscuous mode [ 3471.669425][ T69] device veth1_vlan left promiscuous mode [ 3471.713216][ T69] device veth0_vlan left promiscuous mode [ 3472.812760][ T69] team0 (unregistering): Port device team_slave_1 removed [ 3472.868401][ T69] team0 (unregistering): Port device team_slave_0 removed [ 3472.924533][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3472.980362][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3473.347624][ T69] team0 (unregistering): Port device dummy0 removed [ 3473.419576][ T69] bond0 (unregistering): Released all slaves [ 3473.467794][T32385] netlink: 'syz.0.17815': attribute type 10 has an invalid length. [ 3473.482622][T32396] netlink: 'syz.5.17817': attribute type 10 has an invalid length. [ 3474.126424][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3474.154874][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3474.258456][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3474.323230][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3474.353624][T32417] bridge0: port 3(gretap0) entered blocking state [ 3474.383589][T32417] bridge0: port 3(gretap0) entered disabled state [ 3474.419265][T32417] device gretap0 entered promiscuous mode [ 3474.503944][T32417] bridge0: port 3(gretap0) entered blocking state [ 3474.510523][T32417] bridge0: port 3(gretap0) entered forwarding state [ 3474.555496][T32053] device veth0_vlan entered promiscuous mode [ 3474.578200][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3474.588611][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3475.109257][T32053] device veth1_vlan entered promiscuous mode [ 3475.248906][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3475.290442][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3475.332795][T32053] device veth0_macvtap entered promiscuous mode [ 3475.395136][T32053] device veth1_macvtap entered promiscuous mode [ 3475.464305][T32053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3475.508317][T32053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3475.559019][T32053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3475.610384][T32053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3475.628029][T32053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3475.638570][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3475.648662][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3475.659421][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3475.689944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3475.719537][T32441] netlink: 'syz.6.17827': attribute type 10 has an invalid length. [ 3475.784578][T32441] team0: Port device geneve1 added [ 3475.812892][T32053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3475.834925][T32053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3475.851218][T32053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3475.864008][T32053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3475.879143][T32053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3475.890762][T32053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3475.901069][T32053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3475.911881][T32053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3475.933711][T32053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3475.942957][T32446] netlink: 'syz.0.17828': attribute type 10 has an invalid length. [ 3475.970864][T32446] bond0: (slave dummy0): Releasing backup interface [ 3475.990062][T32446] team0: Port device dummy0 added [ 3476.005250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3476.036440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3476.068654][T32053] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3476.094016][T32053] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3476.102899][T32053] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3476.127091][T32053] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3476.271344][T32456] device syzkaller0 entered promiscuous mode [ 3476.651186][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3476.687480][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3480.482363][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3480.574194][T32485] nr0: port 1(hsr0) entered blocking state [ 3480.580124][T32485] nr0: port 1(hsr0) entered disabled state [ 3480.606870][T32485] device hsr0 entered promiscuous mode [ 3480.643662][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3480.668802][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3480.716306][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3480.986508][T32503] netlink: 'syz.5.17839': attribute type 10 has an invalid length. [ 3481.116091][T32499] netlink: 'syz.6.17840': attribute type 10 has an invalid length. [ 3481.369668][T32515] bridge0: port 3(gretap0) entered blocking state [ 3481.407043][T32515] bridge0: port 3(gretap0) entered disabled state [ 3481.422324][T32515] device gretap0 entered promiscuous mode [ 3481.512853][T32515] bridge0: port 3(gretap0) entered blocking state [ 3481.519565][T32515] bridge0: port 3(gretap0) entered forwarding state [ 3482.374007][T17656] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3482.388292][T17656] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3482.402079][T17656] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3482.432554][T17656] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3482.443918][T17656] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3482.451460][T17656] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3482.858217][T32547] nr0: port 1(hsr0) entered blocking state [ 3482.889191][T32547] nr0: port 1(hsr0) entered disabled state [ 3482.903116][T32547] device hsr0 entered promiscuous mode [ 3483.197634][T32553] netlink: 'syz.7.17851': attribute type 10 has an invalid length. [ 3483.281421][T32553] team0: Port device dummy0 added [ 3483.757295][T32570] netlink: 'syz.2.17863': attribute type 10 has an invalid length. [ 3483.937498][T32573] netlink: 'syz.7.17854': attribute type 10 has an invalid length. [ 3484.208841][T32573] team0: Port device geneve1 added [ 3484.266314][T32532] chnl_net:caif_netlink_parms(): no params data found [ 3484.473659][T23573] Bluetooth: hci0: command 0x0409 tx timeout [ 3485.054284][T32532] bridge0: port 1(bridge_slave_0) entered blocking state [ 3485.062242][T32532] bridge0: port 1(bridge_slave_0) entered disabled state [ 3485.106443][T32532] device bridge_slave_0 entered promiscuous mode [ 3485.274192][T32532] bridge0: port 2(bridge_slave_1) entered blocking state [ 3485.281461][T32532] bridge0: port 2(bridge_slave_1) entered disabled state [ 3485.343931][T32532] device bridge_slave_1 entered promiscuous mode [ 3485.596607][T32604] bridge0: port 1(gretap0) entered blocking state [ 3485.690106][T32604] bridge0: port 1(gretap0) entered disabled state [ 3485.731143][T32604] device gretap0 entered promiscuous mode [ 3486.556914][T23573] Bluetooth: hci0: command 0x041b tx timeout [ 3486.850967][T32532] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3486.911277][T32624] netlink: 'syz.7.17866': attribute type 10 has an invalid length. [ 3487.041745][T32532] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3487.579710][T32532] team0: Port device team_slave_0 added [ 3488.213954][ T4851] bridge0: port 1(gretap0) entered disabled state [ 3488.261851][ T4851] device gretap0 left promiscuous mode [ 3488.276444][ T4851] bridge0: port 1(gretap0) entered disabled state [ 3488.306680][T32532] team0: Port device team_slave_1 added [ 3488.312718][T32633] netlink: 'syz.6.17869': attribute type 10 has an invalid length. [ 3488.633652][T23573] Bluetooth: hci0: command 0x040f tx timeout [ 3489.877941][T32659] device syzkaller0 entered promiscuous mode [ 3490.286027][T32683] netlink: 'syz.7.17876': attribute type 10 has an invalid length. [ 3490.529762][T32532] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3490.537026][T32532] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3490.573460][T32532] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3490.719873][T23573] Bluetooth: hci0: command 0x0419 tx timeout [ 3491.195513][T32532] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3491.203623][T32532] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3491.231082][T32532] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3495.807851][T32702] netlink: 'syz.6.17881': attribute type 10 has an invalid length. [ 3496.290663][ T4851] device hsr0 left promiscuous mode [ 3496.313631][ T4851] nr0: port 1(hsr0) entered disabled state [ 3496.417434][ T4851] device macsec0 left promiscuous mode [ 3496.423185][ T4851] : port 1(macsec0) entered disabled state [ 3496.497573][ T4851] device hsr_slave_0 left promiscuous mode [ 3496.544030][ T4851] device hsr_slave_1 left promiscuous mode [ 3496.551555][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3496.573961][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3496.602731][ T4851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3496.627522][ T4851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3496.662876][ T4851] device bridge_slave_1 left promiscuous mode [ 3496.682747][ T4851] bridge0: port 2(bridge_slave_1) entered disabled state [ 3496.831687][ T4851] device veth1_macvtap left promiscuous mode [ 3496.894002][ T4851] device veth0_macvtap left promiscuous mode [ 3496.900217][ T4851] device veth1_vlan left promiscuous mode [ 3497.526207][ T4851] team0 (unregistering): Port device geneve1 removed [ 3497.592850][ T4851] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3498.210913][ T4851] team0 (unregistering): Port device team_slave_1 removed [ 3498.266683][ T4851] team0 (unregistering): Port device team_slave_0 removed [ 3498.321073][ T4851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3498.373071][ T4851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3498.642712][ T4851] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3498.701360][ T4851] team0 (unregistering): Port device dummy0 removed [ 3498.732639][ T4851] bond0 (unregistering): (slave team0): Releasing backup interface [ 3498.773272][ T4851] bond0 (unregistering): Released all slaves [ 3498.898856][T32532] device hsr_slave_0 entered promiscuous mode [ 3498.908107][T32532] device hsr_slave_1 entered promiscuous mode [ 3498.915058][T32532] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3498.930449][T32532] Cannot create hsr debugfs directory [ 3500.188691][T17656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 3500.202511][T17656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 3500.221399][T32745] netlink: 'syz.6.17887': attribute type 10 has an invalid length. [ 3500.223932][T17656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 3500.241983][T17656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 3500.249962][T17656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 3500.266947][T17656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 3501.292652][T32759] netlink: 'syz.6.17891': attribute type 10 has an invalid length. [ 3502.315257][T23573] Bluetooth: hci2: command 0x0409 tx timeout [ 3503.055265][T32749] chnl_net:caif_netlink_parms(): no params data found [ 3503.154968][ T322] netlink: 'syz.6.17897': attribute type 10 has an invalid length. [ 3503.587295][T32749] bridge0: port 1(bridge_slave_0) entered blocking state [ 3503.595237][T32749] bridge0: port 1(bridge_slave_0) entered disabled state [ 3503.614602][T32749] device bridge_slave_0 entered promiscuous mode [ 3503.638002][T32749] bridge0: port 2(bridge_slave_1) entered blocking state [ 3503.678561][T32749] bridge0: port 2(bridge_slave_1) entered disabled state [ 3503.785120][T32749] device bridge_slave_1 entered promiscuous mode [ 3503.931437][ T339] device veth0_vlan left promiscuous mode [ 3503.990088][ T339] device veth0_vlan entered promiscuous mode [ 3504.242723][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3504.373202][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3504.393855][T17656] Bluetooth: hci2: command 0x041b tx timeout [ 3504.459354][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3504.505953][T32749] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3504.708054][ T342] netlink: 'syz.5.17902': attribute type 10 has an invalid length. [ 3504.805586][T32749] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3504.903936][T32532] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3505.028818][T32532] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3505.077042][T32532] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3505.217846][T32532] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3505.313256][T32749] team0: Port device team_slave_0 added [ 3505.420468][T32749] team0: Port device team_slave_1 added [ 3505.532197][T32749] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3505.627029][T32749] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3505.922021][T32749] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3506.157109][T32749] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3506.175328][T32749] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3506.290264][T32749] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3506.481638][T23573] Bluetooth: hci2: command 0x040f tx timeout [ 3506.546706][ T370] netlink: 'syz.6.17908': attribute type 10 has an invalid length. [ 3506.737734][T32749] device hsr_slave_0 entered promiscuous mode [ 3506.821981][T32749] device hsr_slave_1 entered promiscuous mode [ 3506.866408][T32749] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3506.913501][T32749] Cannot create hsr debugfs directory [ 3506.949570][T32532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3507.111139][T32532] 8021q: adding VLAN 0 to HW filter on device team0 [ 3507.367420][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3507.407636][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3507.495894][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3507.534379][T17656] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 3507.550962][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3507.560099][ T4270] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 3507.570931][ T4270] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 3507.580299][ T4270] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 3507.582376][T23621] bridge0: port 1(bridge_slave_0) entered blocking state [ 3507.594528][T23621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3507.614806][ T4270] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 3507.625402][ T4270] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 3507.761636][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3507.802623][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3507.860353][T23621] bridge0: port 2(bridge_slave_1) entered blocking state [ 3507.867605][T23621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3507.969674][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3508.004505][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3508.151499][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3508.200508][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3508.254309][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3508.361585][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3508.378193][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3508.392806][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3508.401775][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3508.425253][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3508.441347][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3508.451101][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3508.473985][T32532] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3508.490115][ T394] netlink: 'syz.5.17912': attribute type 10 has an invalid length. [ 3508.553888][ T4270] Bluetooth: hci2: command 0x0419 tx timeout [ 3508.930584][T32749] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 3509.180021][T32749] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 3509.244187][T32749] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 3509.327688][T32749] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 3509.711878][ T384] chnl_net:caif_netlink_parms(): no params data found [ 3509.753996][ T4270] Bluetooth: hci6: command 0x0409 tx timeout [ 3509.869903][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3509.886047][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3510.237435][T32749] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3510.274427][ T417] netlink: 'syz.6.17917': attribute type 10 has an invalid length. [ 3510.298878][T32532] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3510.629452][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3510.645205][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3510.679746][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3510.705927][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3510.771258][T32749] 8021q: adding VLAN 0 to HW filter on device team0 [ 3510.931095][ T384] bridge0: port 1(bridge_slave_0) entered blocking state [ 3510.948669][ T384] bridge0: port 1(bridge_slave_0) entered disabled state [ 3510.996809][ T384] device bridge_slave_0 entered promiscuous mode [ 3511.044034][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3511.053971][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3511.062999][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3511.089287][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3511.243103][T23621] bridge0: port 1(bridge_slave_0) entered blocking state [ 3511.250401][T23621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3511.289900][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3511.334354][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3511.391681][T23621] bridge0: port 2(bridge_slave_1) entered blocking state [ 3511.398980][T23621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3511.441345][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3511.504769][T32532] device veth0_vlan entered promiscuous mode [ 3511.838685][ T4270] Bluetooth: hci6: command 0x041b tx timeout [ 3511.996653][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3512.003105][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3512.039923][ T384] bridge0: port 2(bridge_slave_1) entered blocking state [ 3512.054062][ T384] bridge0: port 2(bridge_slave_1) entered disabled state [ 3512.070312][ T384] device bridge_slave_1 entered promiscuous mode [ 3512.114103][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3512.157895][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3512.208765][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3512.227710][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3512.257978][T32532] device veth1_vlan entered promiscuous mode [ 3512.513254][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3512.539247][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3512.557640][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3512.578687][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3512.609590][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3512.628893][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3512.679564][ T384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3512.815285][ T384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3512.846884][T32749] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3512.932467][T32749] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3513.002941][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3513.044589][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3513.074548][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3513.160227][T32532] device veth0_macvtap entered promiscuous mode [ 3513.195461][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3513.214549][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3513.250957][ T384] team0: Port device team_slave_0 added [ 3513.298944][T32532] device veth1_macvtap entered promiscuous mode [ 3513.317394][T23621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3513.407544][ T384] team0: Port device team_slave_1 added [ 3513.452571][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3513.499385][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3513.530024][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3513.591493][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3513.652620][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3513.690794][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3513.722839][T32532] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3513.869064][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3513.888285][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3513.914511][ T4270] Bluetooth: hci6: command 0x040f tx timeout [ 3513.930366][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3513.982884][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3514.023524][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3514.083942][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3514.188303][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3514.200619][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3514.215748][T32532] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3514.233877][T32532] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3514.262055][T32532] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3514.307813][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3514.321181][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3514.355406][ T384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3514.362386][ T384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3514.401336][ T384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3514.432906][T32532] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3514.444058][T32532] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3514.467819][T32532] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3514.482200][T32532] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3514.505972][ T384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3514.512964][ T384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3514.542454][ T384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3514.562553][ T473] netlink: 'syz.5.17922': attribute type 10 has an invalid length. [ 3514.647747][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3514.657775][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3514.699498][T32749] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3514.892794][ T384] device hsr_slave_0 entered promiscuous mode [ 3514.908602][ T384] device hsr_slave_1 entered promiscuous mode [ 3514.944155][ T384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3514.970166][ T384] Cannot create hsr debugfs directory [ 3515.069424][ T340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3515.093596][ T340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3515.183268][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3515.269899][T23621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3515.333515][T23621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3515.475614][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3515.993718][ T4270] Bluetooth: hci6: command 0x0419 tx timeout [ 3516.040625][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3516.051977][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3516.071909][ T507] device syzkaller0 entered promiscuous mode [ 3516.235835][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3516.245906][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3516.267433][T32749] device veth0_vlan entered promiscuous mode [ 3516.340313][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3516.354292][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3516.383811][T32749] device veth1_vlan entered promiscuous mode [ 3516.431434][T32749] device veth0_macvtap entered promiscuous mode [ 3516.490487][ T514] device syzkaller0 entered promiscuous mode [ 3516.508606][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3516.522145][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3516.542307][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3516.569967][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3517.099138][ T521] pimreg1: tun_chr_ioctl cmd 1074025692 [ 3517.107637][T32749] device veth1_macvtap entered promiscuous mode [ 3517.243226][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3517.311918][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3517.379361][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3517.419057][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3517.470037][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3517.510801][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3517.544162][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3517.577039][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3517.602289][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3517.646279][T32749] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3517.692741][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3517.722271][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3517.771206][ T523] netlink: 'syz.0.17931': attribute type 10 has an invalid length. [ 3517.877164][ T523] team0: Port device geneve1 added [ 3517.900087][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3517.950988][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3517.980985][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3518.019014][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3518.042456][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3518.120332][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3518.138383][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3518.173495][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3518.193549][T32749] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3518.223444][T32749] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3518.284755][T32749] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3518.744100][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3518.787760][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3518.887933][T32749] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3518.899574][T32749] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3518.912366][T32749] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3518.943705][T32749] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3519.006022][ T384] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 3519.107528][T30616] device hsr0 left promiscuous mode [ 3519.113090][T30616] nr0: port 1(hsr0) entered disabled state [ 3519.205155][T30616] device macsec0 left promiscuous mode [ 3519.310613][T30616] : port 1(macsec0) entered disabled state [ 3519.404125][T30616] device hsr_slave_0 left promiscuous mode [ 3519.442502][T30616] device hsr_slave_1 left promiscuous mode [ 3519.511366][T30616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3519.617268][T30616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3519.640106][T30616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3519.660876][T30616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3519.669488][T30616] device bridge_slave_1 left promiscuous mode [ 3519.687001][T30616] bridge0: port 2(bridge_slave_1) entered disabled state [ 3519.740577][T30616] device bridge_slave_0 left promiscuous mode [ 3519.755934][T30616] bridge0: port 1(bridge_slave_0) entered disabled state [ 3519.781898][T30616] device veth1_macvtap left promiscuous mode [ 3519.788196][T30616] device veth0_macvtap left promiscuous mode [ 3519.794595][T30616] device veth1_vlan left promiscuous mode [ 3520.065234][T30616] team0 (unregistering): Port device geneve1 removed [ 3520.098473][T30616] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3520.630989][T30616] team0 (unregistering): Port device team_slave_1 removed [ 3520.680413][T30616] team0 (unregistering): Port device team_slave_0 removed [ 3520.737851][T30616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3520.789855][T30616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3521.092220][T30616] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3521.149155][T30616] team0 (unregistering): Port device dummy0 removed [ 3521.218726][T30616] bond0 (unregistering): Released all slaves [ 3521.307679][ T384] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 3521.321479][ T384] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 3521.423499][ T384] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 3521.554309][ T562] device syzkaller0 entered promiscuous mode [ 3521.560645][ T562] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3521.608599][T30123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3521.628382][T30123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3521.698223][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3521.886977][ T340] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3521.905900][ T340] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3521.930961][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3522.126149][ T384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3522.283073][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3522.298684][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3522.399979][ T384] 8021q: adding VLAN 0 to HW filter on device team0 [ 3522.479446][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3522.518519][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3522.549590][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 3522.556879][ T4852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3522.720098][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3522.739319][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3522.804807][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3522.843060][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 3522.850371][ T4852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3522.982211][T30616] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3523.013652][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3523.032485][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3523.080187][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3523.143464][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3523.172725][ T590] netlink: 'syz.5.17944': attribute type 10 has an invalid length. [ 3523.222935][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3523.234612][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3523.275613][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3523.375135][T30616] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3523.725756][T30616] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3523.893701][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3523.974024][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3524.072844][ T384] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3524.262577][ T384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3524.521236][T30616] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3524.578793][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3524.618225][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3525.592715][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3525.642462][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3525.809339][ T384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3526.262927][ T648] netlink: 'syz.8.17957': attribute type 10 has an invalid length. [ 3526.337619][ T648] team0: Port device geneve1 added [ 3526.974610][T30616] bridge0: port 3(gretap0) entered disabled state [ 3527.311693][T30616] device gretap0 left promiscuous mode [ 3527.317753][T30616] bridge0: port 3(gretap0) entered disabled state [ 3527.506754][ T681] device syzkaller0 entered promiscuous mode [ 3527.892082][ T688] device syzkaller0 entered promiscuous mode [ 3528.320893][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3528.342246][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3533.073338][ T701] netlink: 'syz.5.17970': attribute type 10 has an invalid length. [ 3533.098905][ T384] device veth0_vlan entered promiscuous mode [ 3533.108756][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3533.140070][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3533.240937][ T717] device syzkaller0 entered promiscuous mode [ 3533.451870][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3533.490022][ T4320] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3533.777990][ T384] device veth1_vlan entered promiscuous mode [ 3537.088311][T30616] device hsr0 left promiscuous mode [ 3537.103184][T30616] nr0: port 1(hsr0) entered disabled state [ 3537.167683][T30616] device hsr_slave_0 left promiscuous mode [ 3537.211469][T30616] device hsr_slave_1 left promiscuous mode [ 3537.235240][T30616] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3537.242894][T30616] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3537.281632][T30616] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3537.303688][T30616] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3537.349864][T30616] device bridge_slave_1 left promiscuous mode [ 3537.368279][T30616] bridge0: port 2(bridge_slave_1) entered disabled state [ 3537.385057][T30616] device bridge_slave_0 left promiscuous mode [ 3537.401762][T30616] bridge0: port 1(bridge_slave_0) entered disabled state [ 3537.466226][T30616] device veth1_macvtap left promiscuous mode [ 3537.486756][T30616] device veth0_macvtap left promiscuous mode [ 3537.500591][T30616] device veth1_vlan left promiscuous mode [ 3537.715984][T30616] team0 (unregistering): Port device geneve1 removed [ 3538.369379][T30616] team0 (unregistering): Port device team_slave_1 removed [ 3538.424012][T30616] team0 (unregistering): Port device team_slave_0 removed [ 3538.473989][T30616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3538.529736][T30616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3538.886260][T30616] team0 (unregistering): Port device dummy0 removed [ 3538.946437][T30616] bond0 (unregistering): Released all slaves [ 3539.088984][ T384] device veth0_macvtap entered promiscuous mode [ 3539.102305][ T777] netlink: 'syz.5.17986': attribute type 10 has an invalid length. [ 3539.135690][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3539.194827][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3539.256889][ T384] device veth1_macvtap entered promiscuous mode [ 3539.286842][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3539.352806][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3539.378375][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3539.421313][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3539.563447][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3539.590310][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3539.619257][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3539.841796][ T384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3539.892635][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3539.931914][T24545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3540.044171][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3540.095058][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3540.224999][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3540.263417][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3540.295508][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3540.340052][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3540.369330][ T384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3540.391609][ T384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3540.435476][ T384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3540.449666][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3540.490299][T30123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3540.532788][ T384] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3540.557253][ T384] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3540.652573][ T384] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3540.719992][ T384] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3541.233785][ T830] device syzkaller0 entered promiscuous mode [ 3541.565964][ T4851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3541.583648][ T4851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3541.615263][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3541.632819][ T833] netlink: 'syz.6.17999': attribute type 10 has an invalid length. [ 3541.671627][T30123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3541.691279][T30123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3541.914460][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3544.025357][ T877] device syzkaller0 entered promiscuous mode [ 3544.301011][ T883] netlink: 'syz.6.18011': attribute type 10 has an invalid length. [ 3546.407845][ T925] device syzkaller0 entered promiscuous mode [ 3551.564263][ T943] nr0: port 1(hsr0) entered blocking state [ 3551.570174][ T943] nr0: port 1(hsr0) entered disabled state [ 3551.577123][ T943] device hsr0 entered promiscuous mode [ 3552.157565][ T992] netlink: 'syz.6.18025': attribute type 10 has an invalid length. [ 3554.509883][ T1035] device syzkaller0 entered promiscuous mode [ 3554.577856][ T1035] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3557.686929][ T1084] netlink: 'syz.0.18039': attribute type 10 has an invalid length. [ 3560.666733][ T1119] netlink: 'syz.6.18052': attribute type 10 has an invalid length. [ 3560.937462][ T4270] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3560.948487][ T4270] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3560.957775][ T4270] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3560.970555][ T4270] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3560.978616][ T4270] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3560.993901][ T4270] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3563.033637][ T4270] Bluetooth: hci1: command 0x0409 tx timeout [ 3563.977809][ T1123] chnl_net:caif_netlink_parms(): no params data found [ 3564.602015][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 3564.643935][ T1123] bridge0: port 1(bridge_slave_0) entered disabled state [ 3564.681687][ T1123] device bridge_slave_0 entered promiscuous mode [ 3564.747528][ T1123] bridge0: port 2(bridge_slave_1) entered blocking state [ 3564.784851][ T1123] bridge0: port 2(bridge_slave_1) entered disabled state [ 3564.853633][ T1123] device bridge_slave_1 entered promiscuous mode [ 3564.879031][ T1175] netlink: 'syz.9.18063': attribute type 10 has an invalid length. [ 3564.941268][ T1175] team0: Port device geneve1 added [ 3565.051902][ T1180] device syzkaller0 entered promiscuous mode [ 3565.072612][ T1123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3565.113799][T23573] Bluetooth: hci1: command 0x041b tx timeout [ 3565.285680][T23573] Bluetooth: hci5: command 0x0406 tx timeout [ 3565.356026][ T1123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3565.881959][ T1123] team0: Port device team_slave_0 added [ 3566.034731][ T1123] team0: Port device team_slave_1 added [ 3566.251400][ T1123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3566.258477][ T1123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3566.360137][ T1123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3566.473691][ T1123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3566.480688][ T1123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3566.915406][ T1123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3567.204516][T23573] Bluetooth: hci1: command 0x040f tx timeout [ 3567.535769][ T1123] device hsr_slave_0 entered promiscuous mode [ 3567.726507][ T1123] device hsr_slave_1 entered promiscuous mode [ 3567.786654][ T1123] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3567.913560][ T1123] Cannot create hsr debugfs directory [ 3568.709796][ T1225] netlink: 'syz.9.18076': attribute type 10 has an invalid length. [ 3569.273849][T23573] Bluetooth: hci1: command 0x0419 tx timeout [ 3569.369549][ T1235] device syzkaller0 entered promiscuous mode [ 3571.461482][ T1284] netlink: 'syz.8.18089': attribute type 10 has an invalid length. [ 3571.867799][ T1293] device syzkaller0 entered promiscuous mode [ 3572.181014][ T1290] device syzkaller0 entered promiscuous mode [ 3572.273060][ T1308] device vlan1 entered promiscuous mode [ 3572.682018][ T1123] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 3572.732258][ T1123] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 3572.948436][ T1123] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 3572.969485][ T1123] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 3573.372226][ T1326] device syzkaller0 entered promiscuous mode [ 3573.449117][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.455604][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 3578.516098][ T1123] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3578.548122][ T1353] bridge0: port 3(gretap0) entered blocking state [ 3578.565397][ T1353] bridge0: port 3(gretap0) entered disabled state [ 3578.578881][ T1353] device gretap0 entered promiscuous mode [ 3578.586514][ T1353] bridge0: port 3(gretap0) entered blocking state [ 3578.593459][ T1353] bridge0: port 3(gretap0) entered forwarding state [ 3578.711415][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3578.736851][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3578.787838][ T1123] 8021q: adding VLAN 0 to HW filter on device team0 [ 3578.974966][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3579.009118][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3579.090126][ T4851] bridge0: port 1(bridge_slave_0) entered blocking state [ 3579.097388][ T4851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3579.184363][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3579.248213][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3579.261073][ T4851] bridge0: port 2(bridge_slave_1) entered blocking state [ 3579.268533][ T4851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3579.288470][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3579.358489][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3579.484915][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3579.520664][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3579.579998][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3579.656116][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3579.705030][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3579.761464][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3579.811640][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3579.837060][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3579.892863][ T1123] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3579.915604][ T1123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3580.078394][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3580.102881][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3580.160570][ T1386] device syzkaller0 entered promiscuous mode [ 3581.025700][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3581.114845][ T4851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3581.260023][ T1123] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3581.781881][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3581.844188][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3582.020055][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3582.064521][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3582.106676][ T1123] device veth0_vlan entered promiscuous mode [ 3582.380456][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3582.423977][ T69] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3582.509784][ T1123] device veth1_vlan entered promiscuous mode [ 3582.736142][T24545] device gretap0 left promiscuous mode [ 3582.760321][T24545] bridge0: port 1(gretap0) entered disabled state [ 3582.929137][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3582.949665][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3582.986527][ T1123] device veth0_macvtap entered promiscuous mode [ 3583.573984][ T1433] device syzkaller0 entered promiscuous mode [ 3583.580450][ T1433] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3584.130798][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3584.164705][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3584.281827][ T1123] device veth1_macvtap entered promiscuous mode [ 3584.834436][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3584.850315][ T1445] netlink: 'syz.9.18138': attribute type 10 has an invalid length. [ 3584.953101][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3584.993698][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3585.066309][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3585.165709][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3585.245947][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3585.336862][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3585.403494][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3585.493697][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3585.670621][ T1123] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3585.849834][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3585.914522][ T340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3586.047728][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3586.139959][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.209575][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3586.403795][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.466995][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3586.514366][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.549228][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3586.591887][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.663449][ T1123] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3586.699266][ T1123] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3586.786139][ T1123] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3588.212423][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3588.443273][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3588.594741][ T1123] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.662188][ T1123] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.676863][ T1123] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.690850][ T1123] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3588.771129][T24545] device hsr0 left promiscuous mode [ 3588.777747][T24545] nr0: port 1(hsr0) entered disabled state [ 3588.836150][T24545] device hsr_slave_0 left promiscuous mode [ 3588.852945][T24545] device hsr_slave_1 left promiscuous mode [ 3588.870813][T24545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3588.889823][T24545] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 3588.908873][T24545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3588.926983][T24545] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 3588.963825][T24545] bridge0: port 3(bond0) entered disabled state [ 3588.991070][T24545] device bridge_slave_1 left promiscuous mode [ 3589.005199][T24545] bridge0: port 2(bridge_slave_1) entered disabled state [ 3589.112914][T24545] device veth1_macvtap left promiscuous mode [ 3589.149058][T24545] device veth0_macvtap left promiscuous mode [ 3589.157578][T24545] device veth1_vlan left promiscuous mode [ 3589.183589][T24545] device veth0_vlan left promiscuous mode [ 3589.530182][T24545] team0 (unregistering): Port device geneve1 removed [ 3589.587547][T24545] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 3590.258095][T24545] team0 (unregistering): Port device team_slave_1 removed [ 3590.323474][T24545] team0 (unregistering): Port device team_slave_0 removed [ 3590.385480][T24545] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3590.395478][T24545] device bond_slave_1 left promiscuous mode [ 3590.451869][T24545] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3590.460769][T24545] device bond_slave_0 left promiscuous mode [ 3590.739262][T24545] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 3590.748833][T24545] device batadv0 left promiscuous mode [ 3590.805479][T24545] team0 (unregistering): Port device dummy0 removed [ 3590.872141][T24545] bond0 (unregistering): Released all slaves [ 3591.008670][ T1482] netlink: 'syz.0.18150': attribute type 10 has an invalid length. [ 3591.062714][ T1496] device syzkaller0 entered promiscuous mode [ 3594.470140][ T1506] device syzkaller0 entered promiscuous mode [ 3594.511491][ T1515] device syzkaller0 entered promiscuous mode [ 3601.466259][ T1542] netlink: 'syz.8.18161': attribute type 10 has an invalid length. [ 3601.544446][ T4851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3601.552418][ T4851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3601.624183][T30616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3601.688402][T30616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3601.705202][T30616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3601.711597][ T1561] device sit0 entered promiscuous mode [ 3601.765892][T30616] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3602.443261][ T1579] nr0: port 1(hsr0) entered blocking state [ 3602.490021][ T1579] nr0: port 1(hsr0) entered disabled state [ 3602.612994][ T1579] device hsr0 entered promiscuous mode [ 3602.969166][ T1589] device syzkaller0 entered promiscuous mode [ 3603.084222][ T1594] netlink: 'syz.9.18172': attribute type 10 has an invalid length. [ 3603.244727][ T1599] device syzkaller0 entered promiscuous mode [ 3606.234399][T23573] Bluetooth: hci0: command 0x0406 tx timeout [ 3612.529166][ T1682] netlink: 'syz.9.18185': attribute type 10 has an invalid length. [ 3614.647389][ T1775] netlink: 'syz.6.18199': attribute type 10 has an invalid length. [ 3615.312067][ T1797] [ 3615.315059][ T1797] ============================= [ 3615.319933][ T1797] WARNING: suspicious RCU usage [ 3615.324911][ T1797] syzkaller #0 Not tainted [ 3615.329335][ T1797] ----------------------------- [ 3615.334248][ T1797] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 3615.342801][ T1797] [ 3615.342801][ T1797] other info that might help us debug this: [ 3615.342801][ T1797] [ 3615.353231][ T1797] [ 3615.353231][ T1797] rcu_scheduler_active = 2, debug_locks = 1 [ 3615.361385][ T1797] 1 lock held by syz.6.18205/1797: [ 3615.366713][ T1797] #0: ffffffff8cb2d7a0 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 3615.377198][ T1797] [ 3615.377198][ T1797] stack backtrace: [ 3615.383131][ T1797] CPU: 1 PID: 1797 Comm: syz.6.18205 Not tainted syzkaller #0 [ 3615.390878][ T1797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 3615.401049][ T1797] Call Trace: [ 3615.404356][ T1797] [ 3615.407448][ T1797] dump_stack_lvl+0x188/0x24e [ 3615.412185][ T1797] ? show_regs_print_info+0x12/0x12 [ 3615.417567][ T1797] ? load_image+0x400/0x400 [ 3615.422136][ T1797] lockdep_rcu_suspicious+0x1dd/0x300 [ 3615.427556][ T1797] get_callchain_entry+0x2a5/0x3b0 [ 3615.432808][ T1797] get_perf_callchain+0xc4/0x490 [ 3615.437798][ T1797] ? put_callchain_entry+0xb0/0xb0 [ 3615.442961][ T1797] ? plist_add+0x3d4/0x480 [ 3615.447406][ T1797] ? verify_lock_unused+0x140/0x140 [ 3615.452650][ T1797] __bpf_get_stack+0x2de/0x520 [ 3615.457566][ T1797] ? stack_map_get_build_id_offset+0x970/0x970 [ 3615.463733][ T1797] ? __cant_sleep+0x220/0x220 [ 3615.468466][ T1797] ? bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 3615.474120][ T1797] bpf_get_stack_raw_tp+0x189/0x1c0 [ 3615.479348][ T1797] bpf_prog_b8a90dd1efcc4ad9+0x3d/0x41 [ 3615.484833][ T1797] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 3615.490213][ T1797] bpf_prog_test_run_syscall+0x313/0x4a0 [ 3615.495934][ T1797] ? sock_gen_cookie+0x60/0x60 [ 3615.500872][ T1797] ? sock_gen_cookie+0x60/0x60 [ 3615.505642][ T1797] bpf_prog_test_run+0x31e/0x390 [ 3615.510580][ T1797] __sys_bpf+0x62b/0x780 [ 3615.514833][ T1797] ? bpf_link_show_fdinfo+0x380/0x380 [ 3615.520306][ T1797] ? lock_chain_count+0x20/0x20 [ 3615.525165][ T1797] __x64_sys_bpf+0x78/0x90 [ 3615.529598][ T1797] do_syscall_64+0x4c/0xa0 [ 3615.534104][ T1797] ? clear_bhb_loop+0x60/0xb0 [ 3615.538778][ T1797] ? clear_bhb_loop+0x60/0xb0 [ 3615.543457][ T1797] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3615.549351][ T1797] RIP: 0033:0x7fb13219c799 [ 3615.553775][ T1797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3615.573476][ T1797] RSP: 002b:00007fb1330e4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3615.581887][ T1797] RAX: ffffffffffffffda RBX: 00007fb132415fa0 RCX: 00007fb13219c799 [ 3615.589904][ T1797] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 3615.598085][ T1797] RBP: 00007fb132232c99 R08: 0000000000000000 R09: 0000000000000000 [ 3615.606082][ T1797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3615.614061][ T1797] R13: 00007fb132416038 R14: 00007fb132415fa0 R15: 00007ffc0c5614c8 [ 3615.622060][ T1797] [ 3615.856774][ T1799] device syzkaller0 entered promiscuous mode