last executing test programs: 5.128717225s ago: executing program 1 (id=3367): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x4, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdff, 0x0, 0x0, 0x0, 0xfffffffe}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond0\x00', 0x200}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe57, 0x9}, 0x110, 0x400000, 0x6, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) (async) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000040)=0x3) (async, rerun: 64) socketpair(0x22, 0x3, 0x10, &(0x7f0000000280)) (async, rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async, rerun: 64) r3 = perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (rerun: 64) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC=r3, @ANYRESDEC=r3], 0x31) (async, rerun: 64) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x10000000000000) (async, rerun: 64) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (rerun: 64) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000000)="14000000320081024e81f782db44b904021d0800", 0x14}], 0x1}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000a8c5000000a50000001801000020206405000000000004000f7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70400000000000085000000a700000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$TUNSETLINK(r7, 0x400454cd, 0x30a) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$kcm(0x10, 0x2, 0x0) (async, rerun: 32) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (rerun: 32) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89fd, &(0x7f0000000080)) 5.072731407s ago: executing program 3 (id=3368): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={r0, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @sk_reuseport=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x2}, 0x10}, 0x94) (async) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 4.947492871s ago: executing program 1 (id=3369): perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80010, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x0, 0xca, 0x99, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x9, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x32200, 0x0) ioctl$TUNGETVNETBE(r3, 0x800454df, &(0x7f0000000600)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1200000004000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ccff00ff00000000000000000000f8ffffff010000000000000000998fc201"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r5}, 0x20) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000050e8850000007000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r9}, 0xc) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r10, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000101000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r12 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000006000000000000000000020000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000200000000000b7080000000000007b1d5eff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095000000000000001a93cf0e5b31044b9e4131dbfe9e8672fb0000000099f8b5ba8d15aebb00637dff0613d41c146a668ef27631d02c192e1033662f4597789dc47b2510cc82a8bb1433c80f2ea126a361b65e4b30dd715abddaa8187bed4cd113c7f8e0277618cef2d9db3ab2775b0100000000000000ab280609f0c142fedfc5bdbd32870b3bfd2a00"/211], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r13}, 0x38) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x13, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r11, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r12], 0x12) 4.849965784s ago: executing program 3 (id=3371): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xcc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x4, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=ANY=[], 0x10}, 0x2004fc10) socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r2, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB='&\x00\x00\x00\x00\x00\x00\x00', @ANYRES32], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) recvmsg$unix(r7, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[], 0xfdef) (async) write$cgroup_subtree(r8, &(0x7f00000002c0)=ANY=[], 0xfdef) write$cgroup_devices(r8, 0x0, 0x10026) write$cgroup_subtree(r8, &(0x7f0000000040)={[{0x2d, 'perf_event'}, {0x2d, 'cpu'}]}, 0x11) 4.590489852s ago: executing program 1 (id=3374): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0xa, 0x6, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r1, 0x1, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3e, 0x3e, 0x3, [@ptr={0x0, 0x0, 0x0, 0x2, 0x5}, @fwd={0x2}, @ptr={0x2, 0x0, 0x0, 0x2, 0x4}, @datasec={0xe, 0x1, 0x0, 0xf, 0x2, [{0x4, 0x7, 0x9}], "8a45"}]}, {0x0, [0x0]}}, &(0x7f0000000680)=""/211, 0x5b, 0xd3, 0x1, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r2, 0x0, '\x00', 0x0, r1, 0x0, 0x5}, 0x50) close(0x3) r3 = socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x1}], 0x1}, 0x0) recvmsg$kcm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000180)=""/179, 0xb3}], 0x1}, 0x0) close(r0) 4.527560825s ago: executing program 3 (id=3375): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0000008400000000010000010000", @ANYRES32, @ANYRESHEX], 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000200)={0x2, 0x80, 0x40, 0x4, 0x1, 0x2, 0x0, 0x8, 0x440, 0xe, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x3, 0x4, @perf_config_ext={0x8, 0x800}, 0x420, 0x0, 0x7, 0x8, 0x0, 0x8, 0xfffe, 0x0, 0x6, 0x0, 0x8}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r4 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) r5 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = syz_clone(0x2002000, &(0x7f0000000300)="57ec3b24fa2caed497d1c634d390be4d7e22c8556de19d3fd44cbce14dac557e8534557f09bff9d43ec30d56c284e37f2ecec7b812c104a083a1774de59deabe26", 0x41, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000500)="08ede608c30fe101cb10b74d19af327bfecbaaa7e19422ab59a5237601200a65b61eaf4c98b15ffb9a24fa101fe91c5d967a645375ff83fb7c962654f80d9f11356aa27b636e388729125670904a5cf75bfb5758a5d1a8aecced8aec01568e626d06f30c30752c5d62a79fbbadcd87f8b278415bde66cdf987b24cbef6dc7161765f942b4246b5111da71ca9f0eacd1035ba6a686ef6ee2d7dd5") write$cgroup_pid(r5, &(0x7f00000005c0)=r6, 0x12) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2b, 'memory'}, {0x2d, 'net_prio'}, {0x6, 'hugetlb'}]}, 0x1b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000700)=ANY=[@ANYRES32=r9, @ANYRESDEC=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) r11 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r8}, &(0x7f0000000380), &(0x7f00000003c0)='%+9llu \x00'}, 0x20) sendmsg$kcm(r11, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000000440)='.', 0x1}], 0x1}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES16=r3, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008230000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r12}, 0xc) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="050000007f000000020000000900000000000000", @ANYRES32, @ANYBLOB="0000f6da2aa034755d6ca12201e930d30d81e9a7f11480010000000062266baa10c04848422edd80330087a40000c55b012c27ac331121e5f9e148422e6247a1ab075e6c236bc4b85f994a638c1e614815e97a1981c0399276eb820a6be38f8f50f932315b5114f67d48a1290da8c64dfa288ba8544b8e1769d95a5db0a70e9294ec358b5827d580a964c81d5b657d", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r13}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0xd3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00'}, 0x94) 4.320071471s ago: executing program 2 (id=3377): socket$kcm(0x10, 0x2, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000140)="d8000000140081054e81f782db44b9040a1d08020a000000040000a1180002003f00000000000e1208000f0100810401a80016ea1f0006400303000803600c06fb4dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db7010000005e00000080bbed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a000000000000000000190000000000000000000000dc2b81684d7cbe9d", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x44) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={0xffffffffffffffff, 0x0, 0x9, 0x1000, &(0x7f0000000040)="8d1eed4a90d99e9ed0", &(0x7f0000000480)=""/4096, 0x8, 0x0, 0x77, 0xfb, &(0x7f0000001480)="8aa0e5f9f7772fe9168cc27dd974bc679a76b4e01d12b63d013506101a2b34c31cb616fe9826974b05264a9ce52200c6b19cf0866a50ad91d7ec5505aa0a2a78075ab9d0d823408ddf88cd2c72fb81358a00246e7eeb50856e95804c940400e97c6963abb730fd4626d329f052e127ec1743b071402e9d", &(0x7f0000001500)="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", 0x9, 0x0, 0x3686}, 0x50) 3.891395915s ago: executing program 2 (id=3378): r0 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7, 0x1, 0x0, 0x0, 0x0, 0x2000000000000, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1947}, 0x0, 0x9, 0x0, 0x8, 0x402, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r1}, 0x8) write$cgroup_int(r2, &(0x7f00000001c0), 0xfffffdef) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0x23, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x5452, &(0x7f0000000a00)={'dvmrp0\x00', @random='c\b\x00'}) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000000), 0x4) socket$kcm(0x23, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000980)=""/144, 0x1a, 0x90, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r5 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x9, 0x1, 0x3e, 0x4, 0x0, 0x7, 0x80000, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0xfffffffffffffffa, 0x21d1b367}, 0x10000, 0x9, 0x7fff, 0x7, 0x4, 0x1, 0x1000, 0x0, 0x36, 0x0, 0xffffffffffff3acc}, 0x0, 0x2, r0, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402000000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff, 0xfffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x3}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1b, 0x2, 0x8, 0x4, 0x40000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeaec, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@exit, @jmp={0x5, 0x1, 0x8, 0x4, 0x3, 0xfffffffffffffffe, 0xfffffffffffffff0}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7f}, @alu={0x4, 0x1, 0x1, 0x1, 0x0, 0xffffffffffffffc0, 0x1c}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x40}, 0x94) 3.679644742s ago: executing program 3 (id=3379): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) (async, rerun: 64) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000002940)=@hci={0x1f, 0xdd86, 0x2}, 0x80, &(0x7f00000000c0)=[{0x0}, {&(0x7f00000014c0)="294f28dfe56d898ba23606", 0xb}], 0x2}, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) perf_event_open$cgroup(&(0x7f00000000c0)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3832, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x93b7, 0x0, @perf_config_ext={0x2}, 0x10048, 0x2, 0x0, 0x2, 0x200000000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async, rerun: 32) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001ec0)=[{&(0x7f0000000140)="f177b6", 0x3}], 0x1}, 0x20000000) (async) sendmsg$kcm(r2, &(0x7f0000005d00)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000004a80)="8b", 0x1}], 0x1}, 0x0) close(r2) (async, rerun: 32) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000007c0)={r1}) (async, rerun: 32) r3 = socket$kcm(0x2, 0x5, 0x84) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) setsockopt$sock_attach_bpf(r3, 0x84, 0x64, &(0x7f0000000000)=r6, 0x10) (async) sendmsg$inet(r3, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x34000}], 0x1}, 0x80d1) 3.678187772s ago: executing program 1 (id=3380): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.net/syz0\x00', 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='vetm0_virt_wifi20'], 0x12) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) r6 = socket$kcm(0x22, 0x2, 0x21) write$cgroup_subtree(r6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000000000000000000000002e52a52ecfc584ae2bb50e801aa88d19a248ceb14b3dacf919"]) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x7a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}, 0x40dd, 0x0, 0x4, 0x8, 0xa, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = socket$kcm(0x10, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e9701004bf746d6bf1ff649e71400", 0xd8}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10e, 0xa, 0x0, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYRES64=r8], 0x0, 0x2d, 0x0, 0x1, 0x4}, 0x28) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="7102000d00"/16], &(0x7f00000000c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41000}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) 3.368342112s ago: executing program 0 (id=3381): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040), 0x2}, 0x1088c, 0x0, 0x8000, 0x0, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x7) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40042409, 0x1) recvmsg(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB], &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 2.690966124s ago: executing program 3 (id=3382): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'wg0\x00'}) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[], 0x0, 0x2d, 0x0, 0x1, 0xf14}, 0x28) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180), 0xf}, 0x0, 0x3, 0x7fff, 0x6, 0x0, 0x10000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x9, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @multicast}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, 0x0}, 0x22000001) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f0000000500)=""/151, 0x97}, {&(0x7f0000001bc0)=""/4096, 0x1000}], 0x2}, 0x40) 2.4875063s ago: executing program 2 (id=3383): r0 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f00000000c0)=r0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}, 0x2, 0x14, 0xffff, 0x1}}, 0x80, 0x0, 0x44}, 0x4048850) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) sendmsg$inet(r1, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x5, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'team0\x00'}) socketpair(0x25, 0x1, 0xfffffffc, &(0x7f0000000200)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000002b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x0, 0x4, 0x98, 0x4, 0x4e53, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x100, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0xa, 0x3, 0x73) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000001140)={r7}) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000640)={0x2, 0x3a, 0xeb, 0x2, 0x0, 0x0, 0x0, 0x480000000000000b, 0x9549, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x200, 0x4, 0x0, 0x3, 0xfffffffffffffffe, 0xfffff271, 0xfffc, 0x0, 0x1000000, 0x0, 0x23}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000080)={'wlan1\x00', @multicast}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0xfd, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.391879514s ago: executing program 0 (id=3384): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$sock(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)}, 0x8004) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0002000000000000000000000000000000000000a3935b006171a7a6d945f18d366626a040b9ad44097534785609e6d44b6a73537f04df17238f25a217d77d23b22e09753ca6b52e1337e9bf9cb64fbd38f7bfb6c3e91645", @ANYBLOB="4e7dd0fecbcecd1c2a2fc8005c1b2094b8f3067bcabd2b35c29f8fbfbd5cf06014a87be023fad6f9eafd7bbe5474ec773540c57d4b4682b619c82a17f9e58a281f6b6ab885b916e7d6a627bc449b82d02daec8a80b13055cd8fcb46f5f48127232fa0e6a3a28ad11ec440b15efa35d5764d7dc19975e89649e21e8ec93112a70593ceb6dd505fb5bec6900ec14873f732fe6e206", @ANYRES16=r0, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r4}, 0xc) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000480)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x1c, &(0x7f0000000740)={0x13, 0x0, 0x0, 0x0, 0xfffffd7d, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0xfffffffffffffe1c) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37200c188006ac0f000300", 0x33fe0}], 0x0, 0x0, 0x0, 0x8100000}, 0x48940) 1.934574938s ago: executing program 0 (id=3385): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10021}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000940)=r0}, 0x20) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000009c0)={&(0x7f0000000340)="38d780c77733049aebc857b210754161268c3255d3dca868bf55aee879d1744e50aa03a8ee22bb23af3765762842ab7ebd695b0a41f86c89f5fa81f34183765711ff92b8c70b59638cb10ab84393aead6b26dc474e59fcd1dd2f89d98278c2bf1a9323786f79c7d2555c90cb1a8af5b4aaea34580f7831d9d6105fb53637df8a8d82da9b20bae852b07f9850948928e5fcda384656", &(0x7f0000000400)=""/207, &(0x7f0000000680)="da146a25e788f48f163bffa48de2c93b929c3e4e51d810ad5354012c549da200579f3a433149125050c994719be59995981e15290f5167df06c84d4c2bd984ecec99a1790b432e6ace223b91ffebc68b7cab80779f441fc3bcfd60f38796c50ba38fe597dd2518767b0a4fff9fc8594292470183a7813dab1557feceafe48d3c4234e114191f4412a2eec2e99a3cca5cbe59dca1e1c2f7ce207e2c19e1ac91da5a4f46a58c6831650b1c29d85cf49635bd69784ac629830ed7e63bd25c4ff0d74d8e595e1f3f7e50c088d3f2eff78975433806769cac9d2f5352de7c00834c02f1b1cf901604631b611320d161f7bb2eb5a2", &(0x7f0000000780)="9fa7905483e0eeaf71cc4d3d9d965bdd732fc87006e5ea5a36a692c4a260d08342a1a24f07e8437a3ce8a46362cebe4179ca3a6d3f77c01a2698b965665b83756a8442ac0b927f0f5f254981f1dbb255e20b5a4fe2b87de6dee963614538a18030c7baeaaeb27de73b25eb65cb41059803f49ece9bab967194cb", 0x3, r1}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x3a, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r0, 0x0, 0x70, 0xa1, &(0x7f00000000c0)="c26ad4eb02cb3549ff4e0cb87757cbd4021515fa41e8e1ba822f24b661ccdfb31026ec733203952a4dd33908dcb911e8806715ffd8ef3365fbc9255a501bc0ed40c0bbbc5447472e601ca031c937acd9f0049c881480c93b39f8eed2750ec13b968cb797156990d709a37db02493fc4d", &(0x7f00000001c0)=""/161, 0xe581, 0x0, 0x10, 0x26, &(0x7f00000002c0)="2c32e2a7531522802139817cd87b6f9d", &(0x7f0000000500)="0f9c006ee391c3d9b902a24f038d41df1ec246db1dcf29105ad82c2065c3aad8d8ff688f3537", 0x0, 0x0, 0xeb}, 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000003540)="1400000037000b0fd25a806c8c7394f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002980)={&(0x7f0000000580)="97551263e8c9b8660020a6e55bfb63113edebf8e972d8ce5209bc9fd8b86fa42b9f11fec11a7cf", &(0x7f0000000a00)=""/214, &(0x7f0000000b00)="3f191f", &(0x7f0000001980)="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", 0x7fff, r1, 0x4}, 0x38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x891d, &(0x7f0000000900)={'sit0\x00', @random="1e40002000"}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbca313a181002c000000000400000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) 1.57539479s ago: executing program 2 (id=3386): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x200009, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) gettid() sendmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x895}, 0x8044) r2 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) sendmsg$inet(r2, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900) sendmsg(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)="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", 0x1073}], 0x3}, 0x40e4804) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000001340)=@caif=@dgm={0x25, 0x7, 0xe6}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x1}], 0x1}, 0x24004054) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) 1.419792975s ago: executing program 1 (id=3387): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64039, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="260a000000000000611148000000000018000000000000000000000000000000950000008021541e"], &(0x7f0000000000)='GPL\x00'}, 0x80) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x34}, 0x28) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async, rerun: 64) r2 = socket$kcm(0x10, 0x3, 0x10) (rerun: 64) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f90924fc60", 0x14}], 0x1, 0x0, 0x0, 0x600}, 0x200000000000000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) (async, rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 32) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000700)=ANY=[@ANYBLOB="b702000000000000bfa300"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) write$cgroup_int(r4, &(0x7f00000000c0)=0x100000000, 0x12) (async) r5 = socket$kcm(0xa, 0x5, 0x0) (async) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x649) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r6, 0x0, 0x0}, 0x10) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x2, 0x0, 0xfffffffffffffcfb}, 0x30040805) (async) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x890b, &(0x7f0000000000)) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x2, 0x0, 0x0, 0x0, 0x44142, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x300, 0xfffe, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffff7fffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0xa, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x52, &(0x7f0000000580)=[{}, {}], 0x10, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) (async, rerun: 32) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r8, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.178976912s ago: executing program 3 (id=3388): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x40000000000001, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x200002, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 64) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="180800002d98afeb000000000000000018280000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090000000000007baaf0ff00000000bf9700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007d9800000000000056080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.011582618s ago: executing program 0 (id=3389): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)=@in6={0xa, 0x41, 0x0, @loopback, 0x2}, 0x80, 0x0}, 0xe07e872424dfefca) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x0, 0x10000, 0x0, 0x5, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc786b409ac930c90ff90f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d85893f229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09e3187a10d905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5de0900000000000000cf442d488afdc0e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367638cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e1217c1342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c67df4c6505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50aac841cb7d48a1768a7640a9820631ba775a2d4f12e8e717eaaa2a6d14fee0c15f36c203dbc7c06128bec84231d43e152ef19ce027436fb4ebb9fce431b913f4817597a6f53d1626f9d1cb7b36fb18ac19547a9b20ede70c81a75686cea85dcd34408128da7cab045541bc6b9a0a79f63f2e7646356e04b977c9f47467537015240b974184be9c54b7c628ae4d97ebdb06070344468994afbaac71e5ffac2c61d9af66f9de2760a38e968a781528531c1c936a02065be48f"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640), 0x4) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xdc, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632f77fbacf01416ac141416440c05114d2f87e5940c05ab940c13f2325f1a39010702038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a22", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0x2}, 0x884, 0x0, 0x0, 0x0, 0x800000010000, 0x800000, 0x9, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0xa1, &(0x7f0000001240)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 454.592866ms ago: executing program 0 (id=3390): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000d03000000000000000000000110000000800000000000000000000003000000000200000002"], 0x0, 0x4e}, 0x20) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd}, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffe11}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000300)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x92, &(0x7f0000000540)=""/146, 0x41000}, 0x94) 330.04254ms ago: executing program 2 (id=3391): bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000000000000000000000000007919b800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x16}, 0x94) 127.639396ms ago: executing program 1 (id=3392): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x400, 0x35, 0x43a1bd76, 0xe, 0x9, 0x80000001, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000800)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8937, &(0x7f0000000000)={'bridge_slave_1\x00', @random="010000201000"}) 2.62211ms ago: executing program 0 (id=3393): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x8, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000940)="657573a2aaa76a045d877c1f6455a4bb7edaedaf2406cf034c55272afe4a39f80fec79674992739b3f1d46ab6fc6b89bc95d81d84d8c293613c9f90375e9112c7b5f65f27e0e214389e9034316b5f9b75aaba5bc0d8f2290bd36c6624c127b3433e77de62a43eb8eeecd139da8a083185e6bef3c0866b648a4f6432a60e58c664a7a3dcb4a1776e6fdb08687841d75cdf12f0d7578930caa6a450381441bd9023d757be41434aaa87208e070bae470b8ebe5b100c3d6ed01dbff6a6e13320627043926cb30d2233291a5d9a15bfb760df9fabaa9f450747ff1cf93258dfbd2132d00516d8edfcb6b6352eb385866585cb371846f31532e653ccf7bc842c81206c8e80530a748501b2da5fedb1bcd0e53d09826aeb25c7ed8f3e1b219649baf3fc9ccb0da4aa1bdefca77ca97aa0c50d0485413936b83a20158cc3795456df09a917751c6e9555988b80b26f36bc8294fa37aca1b0c570e93588c9c25f4d72f01ba4bb874685628f0b64d71eaa9d17b489826ada40cede73bad175b9e956942b581fb7c52added185ce2f24422c0bf33ff32bb0e9e50b697f3257eb76134076bcf59767d12dc2cfa9c6e4544b55adc09a330a873c3a5ac8e28dda7fe398be13b3949ddaa7e25fc9652b783a95db047a3477a64dee6c4eadccbb48e9a525539c51603f8fdf1a8af0b9968ea399b7d787ead48a43bb8f83ced7de9dbe9d29a04438103179d2cc91cc15a5f3b5c589594d5232f8e956776547946bd38ea993b2cd1b1290ba255ef4a1a97055ad51cff35b804ef472a9f60bfedf3af92fc51e9b9e5580d4b12ac5fae4d8a4b9761b1c72a7282fe1cbc90767ec3266aef7ccf306ba8fc5161c74c3765b6b1ad5ab007b9892aedca8fadc7b37597546de787034e2c98a34118ef63680882759f4c3cb654e050b1303d3c9ded614e54fc833992b3d376e9f581d2ef7064ff268359a022b0df7d0679a54746150528ce08d47a05dd0e1f481b0f0b27f25e8b7b0a17827841cd7711e84dae20d98a76e5c6ea29b7a676bc4afb5729705e235ab7d41cf6dc39a208e806db5077326345bff9910e8b591d9c45f506f57f0392c41dfbe0e788299582f1dc2323da8ba93a7141061c8f78f81518c59c41a289b98d83a4575e9a509c0c615cd39ae76d2749378047a3b4ca1078880a0620088c17661322632882c77f751c60443e27df36020a72081b8e32f796f103412721158831ad7658a1299015a8a28ebc4cfd1414f4f4dcdef109c2bd75b7a8d83447e382724ec1076237c85b311df47a4fa7ad981e0f3918a093855e9968364c9bd1f385fccf076bc9e61558ddbe969742a860599a87e045b8fd95b0eb11b1f0fbdcb8a4008da5277f071d819791a2f54fc9f676196cf0b3f0e91c6d1586d9bd687c1df1e759e80b0cea66ea75eef5f9e57a36f61670268b8e2ad39561525e73fe2c942d0fb3f53e46695762c0dcee78ca9b2b81cba1c5fa2a736954dedcdf869149c7220be1f4ea53ccd72c3f8f7d9483068d668542023ea9a3d415a2006a5ac5439668c0a211c9d3212d38cdc13c35bf184579955fff0c35b2870af088340d60f744a0806135ce50a123182ab68fa8a89d858eceeed660f1ec5671d6d1be21022c372eabfa4fb1ebe03f7ab2650ec3679507d17611d1cd694be1adb33e591716af45eb1269969aca77be07d18784e2dd1240b6ac67be842afa51ce452f106de37a1e271b37e2904d6276c09eb5915fc8af524ff86e652c2acd33b634d8ba9268b7c278ebb8a92d7a45d97d2e45b4064b55ed5c56d3ed11adc0c", 0x4fd}], 0x1}, 0x88c0) r1 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700020000000000ef000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0x1a, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000680)='syzkaller\x00', 0x5391, 0xe5, &(0x7f0000000740)=""/229, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x4, 0x4, 0x8, 0x8}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000e40)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000e80)=[{0x3, 0x4, 0x2, 0xc}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001140)={r4, 0x0, 0xd3, 0x0, &(0x7f0000000f80)="cf6cbe8a34229f160a124d31e40226be61650949a965356b211fda6f841f05ecb863e7e233240d56d3048fb590de4bb00350e1ce1aa11f4e70d868079e4f4b964cc90f61ac530f6e3462865f043eabe87ce1e44ec60010ad91337eb59e0ce31df49e1b6ab3323d8b595be6c42d09f1cdab2310272036c4d2c1556fd83248b8cd801e510ee3849c2f8e1d17dbd8e08bb94f1aaee56541be4a4cb14dfa5a7381b1f6f1a0275a227e30f3575c87b9b41b65f69c58b231ce2e5ff64a9b722d75583153884c0b6dda6736dab9024485671f097ccae0", 0x0, 0x5, 0x0, 0xa0, 0x0, &(0x7f0000001080)="e5ba2fac8e94729a2bc35f2169dc42dd7e644432fe426558bb37ab1e4e928f80245cbbb317803c5abb120c4b7b62fef020fa9e9f9d6da1ee2547742556e7cd0f7cba77ac00fff903bbfe6026d01e3ea3d7c7fef46f49964165eb98f1332975766f23f899952d08fbfb1d0aedd420fa13d853a3e3dcdc62739587d992566cb948b38b7527e7b1023179d113ebe60bdcd14601fe5ddf24ead4f3965b65e9399ced", 0x0, 0x2, 0x0, 0xe5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2566e506bce1e8", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0xfa, 0x4, 0x0, 0x0, 0x10001, 0x10202, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0xa}, 0x8000, 0x0, 0x80000, 0x1, 0x4, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r5, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x30}, 0x0) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8916, &(0x7f0000000040)={'ipvlan1\x00', @random="0200ac7f7e00"}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x1, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x0, 0x8, 0x0, 0x80, 0x0, 0x0, 0x24400, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x6, @perf_bp={0x0, 0x8}, 0x482, 0x81, 0x7ff, 0x8, 0x0, 0x7, 0x7fff, 0x0, 0x2, 0x0, 0x6}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000095000000a6c285c839fabc865c7890923c129900000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r8, 0x18000000000002a0, 0x12, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 2 (id=3394): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x8, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x20}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)="c6d3ddca886199f5af98723127d2", &(0x7f0000000340), 0xffffffff, r0}, 0x38) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4044}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x40f00}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000007c0)={r1, 0x58, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_ext={0x1c, 0x1a, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1d}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x24}, @exit, @btf_id={0x18, 0xb, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x1}, @alu={0x7, 0x1, 0x6, 0x5, 0x4, 0x1, 0x8}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x83, &(0x7f0000000680)=""/131, 0x41000, 0x8, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x2, 0x7, 0x3, 0x1}, 0x10, 0x1cf2c, r3, 0x6, 0x0, &(0x7f0000000840)=[{0x1, 0x4, 0x6, 0x8}, {0x1, 0x5, 0xd, 0x4}, {0x1, 0x4, 0x9, 0xc}, {0x1, 0x5, 0x10}, {0x0, 0x2, 0x8, 0x6}, {0x0, 0x1, 0x9, 0x1}], 0x10, 0xe}, 0x94) kernel console output (not intermixed with test programs): atadv_slave_1 (while UP) [ 362.044328][T12083] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1750'. [ 362.137828][T12083] netlink: 22856 bytes leftover after parsing attributes in process `syz.0.1750'. [ 362.813839][T12093] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1753'. [ 363.178508][T12108] tun0: tun_chr_ioctl cmd 1074025677 [ 363.183956][T12108] tun0: linktype set to 1 [ 363.215396][T12103] netlink: 'syz.0.1753': attribute type 9 has an invalid length. [ 363.277474][T12105] tun0: tun_chr_ioctl cmd 1074025681 [ 364.052739][T12118] netlink: 'syz.2.1761': attribute type 10 has an invalid length. [ 364.094717][T12118] netlink: 'syz.2.1761': attribute type 7 has an invalid length. [ 364.144483][T12118] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 364.330878][T12118] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 364.355443][T12119] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 364.385382][T12120] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 364.396924][T12121] netlink: 'syz.2.1761': attribute type 29 has an invalid length. [ 364.476084][T12118] netlink: 'syz.2.1761': attribute type 9 has an invalid length. [ 364.516052][T12118] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1761'. [ 365.166469][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 365.173940][T12126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 365.236697][T12126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 365.244163][T12126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.289974][T12126] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 365.298985][T12126] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 366.277462][T12161] netlink: 'syz.3.1772': attribute type 39 has an invalid length. [ 366.376169][T12164] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 366.405394][T12164] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1774'. [ 366.733910][T12165] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1775'. [ 366.756048][T12172] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1775'. [ 367.146430][T12183] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1778'. [ 367.172444][T12183] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1778'. [ 367.222707][T12183] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1778'. [ 367.689714][T12201] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1785'. [ 367.990401][T12200] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 368.273266][T12221] netdevsim netdevsim3 : entered promiscuous mode [ 368.301573][T12221] bond0: (slave ): Enslaving as an active interface with an up link [ 369.222967][T12242] validate_nla: 4 callbacks suppressed [ 369.222984][T12242] netlink: 'syz.0.1797': attribute type 4 has an invalid length. [ 369.265317][T12242] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1797'. [ 370.627867][T12299] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1812'. [ 371.068192][T12323] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.1817'. [ 371.129390][T12324] netlink: 'syz.3.1818': attribute type 4 has an invalid length. [ 371.146326][T12324] netlink: 185612 bytes leftover after parsing attributes in process `syz.3.1818'. [ 371.280412][T12328] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1820'. [ 371.310439][T12328] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.1820'. [ 371.330607][T12328] tipc: Started in network mode [ 371.342357][T12328] tipc: Node identity b, cluster identity 73 [ 371.354197][T12328] tipc: Node number set to 11 [ 371.942860][T12343] netlink: 'syz.0.1824': attribute type 9 has an invalid length. [ 371.987106][T12343] netlink: 179328 bytes leftover after parsing attributes in process `syz.0.1824'. [ 372.288534][T12347] netlink: 'syz.3.1826': attribute type 10 has an invalid length. [ 373.008711][T12369] netlink: 'syz.3.1832': attribute type 10 has an invalid length. [ 373.049014][T12369] macvlan0: entered promiscuous mode [ 373.067473][T12369] macvlan0: entered allmulticast mode [ 373.102618][T12369] veth1_vlan: entered allmulticast mode [ 373.136958][T12369] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 373.370202][T12388] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1837'. [ 373.820421][T12403] netlink: 'syz.1.1841': attribute type 29 has an invalid length. [ 373.856661][T12403] netlink: 'syz.1.1841': attribute type 29 has an invalid length. [ 373.896056][T12406] netlink: 'syz.1.1841': attribute type 29 has an invalid length. [ 373.957258][T12408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1843'. [ 373.979846][T12403] netlink: 'syz.1.1841': attribute type 29 has an invalid length. [ 374.198819][T12403] netlink: 'syz.1.1841': attribute type 29 has an invalid length. [ 376.650023][T12431] netlink: 'syz.3.1849': attribute type 10 has an invalid length. [ 376.677871][T12434] netlink: 'syz.3.1849': attribute type 39 has an invalid length. [ 377.250482][T12450] netlink: 'syz.0.1853': attribute type 10 has an invalid length. [ 377.277692][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.292973][T12450] bridge_slave_1: left allmulticast mode [ 377.299480][T12450] bridge_slave_1: left promiscuous mode [ 377.306471][T12450] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.341594][T12450] bridge_slave_1: entered promiscuous mode [ 377.350010][T12450] bridge_slave_1: entered allmulticast mode [ 377.368797][T12450] .`: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 377.546448][T12461] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 377.892572][T12465] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1856'. [ 378.707818][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.714203][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.226406][T12473] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.1859'. [ 379.409751][T12477] sctp: [Deprecated]: syz.0.1860 (pid 12477) Use of struct sctp_assoc_value in delayed_ack socket option. [ 379.409751][T12477] Use struct sctp_sack_info instead [ 379.431066][T12477] netlink: 'syz.0.1860': attribute type 17 has an invalid length. [ 379.440011][T12477] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1860'. [ 379.457870][T12477] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 380.081486][T12500] netlink: 'syz.2.1867': attribute type 27 has an invalid length. [ 380.107477][T12500] netlink: 'syz.2.1867': attribute type 4 has an invalid length. [ 380.122755][T12500] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1867'. [ 380.399450][T12509] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1868'. [ 380.414169][T12514] netlink: 'syz.3.1871': attribute type 10 has an invalid length. [ 380.416252][T12509] netlink: zone id is out of range [ 380.428395][T12509] netlink: zone id is out of range [ 380.434049][T12509] netlink: zone id is out of range [ 380.438386][T12514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1871'. [ 380.440380][T12509] netlink: zone id is out of range [ 380.457080][T12509] netlink: zone id is out of range [ 380.464326][T12509] netlink: zone id is out of range [ 380.474825][T12514] batadv0: entered promiscuous mode [ 380.480903][T12509] netlink: zone id is out of range [ 380.488163][T12514] batadv0: entered allmulticast mode [ 380.495558][T12509] netlink: zone id is out of range [ 380.501076][T12509] netlink: zone id is out of range [ 380.899317][T12521] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1873'. [ 381.005509][T12521] hsr_slave_0: left promiscuous mode [ 381.159400][T12502] syz.0.1868 (12502) used greatest stack depth: 18024 bytes left [ 381.206391][T12521] hsr_slave_1: left promiscuous mode [ 381.352495][ T5771] Bluetooth: hci0: ISO packet for unknown connection handle 57 [ 381.571045][T12524] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1874'. [ 381.833468][T12539] netlink: 'syz.0.1879': attribute type 19 has an invalid length. [ 381.860543][T12539] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1879'. [ 382.480473][T12566] netlink: 206164 bytes leftover after parsing attributes in process `syz.0.1889'. [ 383.122841][T12587] netlink: 'syz.3.1893': attribute type 39 has an invalid length. [ 383.193120][T12587] netlink: 36747 bytes leftover after parsing attributes in process `syz.3.1893'. [ 385.001914][T12625] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 385.231259][T12625] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 385.313290][T12626] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 385.512967][T12627] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 385.536284][T12628] netlink: 'syz.3.1903': attribute type 29 has an invalid length. [ 385.770308][T12632] netlink: 'syz.1.1906': attribute type 10 has an invalid length. [ 386.016425][T12638] net_ratelimit: 185 callbacks suppressed [ 386.016443][T12638] netlink: set zone limit has 8 unknown bytes [ 387.158867][T12661] netlink: 'syz.2.1913': attribute type 2 has an invalid length. [ 387.184339][T12662] netlink: 'syz.2.1913': attribute type 2 has an invalid length. [ 387.195264][T12666] netlink: 'syz.1.1916': attribute type 2 has an invalid length. [ 387.243002][T12666] netlink: 'syz.1.1916': attribute type 3 has an invalid length. [ 387.265617][T12666] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1916'. [ 387.754793][T12686] syzkaller0: left promiscuous mode [ 387.765098][T12686] syzkaller0: left allmulticast mode [ 387.855379][T12679] sctp: [Deprecated]: syz.1.1920 (pid 12679) Use of int in maxseg socket option. [ 387.855379][T12679] Use struct sctp_assoc_value instead [ 388.114384][T12694] : renamed from bond_slave_1 [ 388.482802][T12716] netlink: 'syz.3.1927': attribute type 17 has an invalid length. [ 389.446625][T12742] netlink: 'syz.3.1934': attribute type 10 has an invalid length. [ 389.518052][T12744] netlink: 'syz.3.1934': attribute type 7 has an invalid length. [ 389.637360][T12742] netlink: 'syz.3.1934': attribute type 29 has an invalid length. [ 389.686023][T12742] netlink: 'syz.3.1934': attribute type 29 has an invalid length. [ 389.746626][T12742] netlink: 'syz.3.1934': attribute type 29 has an invalid length. [ 389.778310][T12745] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1932'. [ 389.812439][T12745] bridge_slave_1: default FDB implementation only supports local addresses [ 390.062083][T12748] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1935'. [ 390.118074][T12748] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 390.489477][T12763] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1939'. [ 390.535584][T12763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.933950][T12783] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.1945'. [ 391.476699][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 391.539306][T12800] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 391.553777][T12802] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1950'. [ 391.661344][T12806] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1947'. [ 391.705231][T12806] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1947'. [ 391.757523][T12790] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1947'. [ 391.878238][T12806] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 392.201678][T12825] validate_nla: 4 callbacks suppressed [ 392.201692][T12825] netlink: 'syz.3.1956': attribute type 21 has an invalid length. [ 392.228050][T12825] IPv6: NLM_F_CREATE should be specified when creating new route [ 392.353098][T12831] netlink: 'syz.3.1956': attribute type 21 has an invalid length. [ 393.000030][T12860] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 393.013504][T12860] mac80211_hwsim hwsim15 wlan1: entered allmulticast mode [ 394.419358][T12902] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 394.948373][T12902] team0: Device wg1 is of different type [ 395.026302][T12907] __nla_validate_parse: 4 callbacks suppressed [ 395.026318][T12907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1981'. [ 395.135730][T12909] netlink: 'syz.0.1982': attribute type 10 has an invalid length. [ 395.146637][T12909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1982'. [ 395.159217][T12909] vcan0: entered promiscuous mode [ 395.175459][T12909] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check. [ 395.236515][T12911] netlink: 'syz.2.1981': attribute type 22 has an invalid length. [ 395.244794][T12913] syzkaller0: entered promiscuous mode [ 395.255357][T12913] syzkaller0: entered allmulticast mode [ 395.689743][T12923] netlink: 'syz.3.1986': attribute type 10 has an invalid length. [ 396.026504][T12936] bridge0: port 2(ip6gretap0) entered blocking state [ 396.041071][T12936] bridge0: port 2(ip6gretap0) entered disabled state [ 396.071617][T12936] ip6gretap0: entered allmulticast mode [ 396.087613][T12934] netlink: 'syz.3.1989': attribute type 1 has an invalid length. [ 396.097539][T12936] ip6gretap0: entered promiscuous mode [ 396.112042][T12934] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.1989'. [ 396.125937][T12936] bridge0: port 2(ip6gretap0) entered blocking state [ 396.132810][T12936] bridge0: port 2(ip6gretap0) entered forwarding state [ 397.153904][T12962] netlink: 'syz.0.1997': attribute type 1 has an invalid length. [ 397.161850][T12962] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1997'. [ 397.285958][T12965] netlink: 'syz.2.2001': attribute type 21 has an invalid length. [ 397.313306][T12965] netlink: 'syz.2.2001': attribute type 4 has an invalid length. [ 397.335597][T12965] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2001'. [ 397.471015][T12965] netlink: 56863 bytes leftover after parsing attributes in process `syz.2.2001'. [ 397.717097][T12972] netlink: 'syz.2.2003': attribute type 1 has an invalid length. [ 397.724888][T12972] netlink: 157116 bytes leftover after parsing attributes in process `syz.2.2003'. [ 397.865916][T12978] netlink: 'syz.0.2005': attribute type 10 has an invalid length. [ 397.873780][T12978] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2005'. [ 397.926706][T12978] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 398.544994][T13002] Q6`Ҙ: renamed from lo (while UP) [ 398.640772][T13010] netlink: 'syz.0.2016': attribute type 4 has an invalid length. [ 398.665661][T13010] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.2016'. [ 398.959888][T13020] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.2021'. [ 399.790729][T13047] sctp: [Deprecated]: syz.2.2028 (pid 13047) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.790729][T13047] Use struct sctp_sack_info instead [ 400.027921][T13054] netlink: 'syz.3.2031': attribute type 10 has an invalid length. [ 400.164495][T13063] netlink: 'syz.2.2035': attribute type 33 has an invalid length. [ 400.185982][T13063] __nla_validate_parse: 1 callbacks suppressed [ 400.186030][T13063] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2035'. [ 400.223516][T13066] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2036'. [ 401.256173][T13106] netlink: 'syz.2.2046': attribute type 153 has an invalid length. [ 401.266991][T13106] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.2046'. [ 401.520602][T13114] netlink: 'syz.2.2049': attribute type 3 has an invalid length. [ 401.528668][T13114] netlink: 'syz.2.2049': attribute type 6 has an invalid length. [ 401.537923][T13114] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.2049'. [ 402.196076][ T5771] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 402.204197][ T5771] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 402.226070][T13131] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2054'. [ 402.993503][T13161] validate_nla: 2 callbacks suppressed [ 402.993521][T13161] netlink: 'syz.1.2061': attribute type 21 has an invalid length. [ 403.944756][T13161] sit0: entered allmulticast mode [ 403.990623][T13172] sit0: entered promiscuous mode [ 404.552031][T13135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.644904][T13195] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2070'. [ 404.719891][T13195] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 404.763202][T13195] CPU: 0 PID: 13195 Comm: syz.1.2070 Not tainted syzkaller #0 [ 404.770723][T13195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.780816][T13195] Call Trace: [ 404.784119][T13195] [ 404.787067][T13195] dump_stack_lvl+0x18c/0x250 [ 404.791941][T13195] ? show_regs_print_info+0x20/0x20 [ 404.797161][T13195] ? load_image+0x420/0x420 [ 404.801726][T13195] sysfs_warn_dup+0x8e/0xa0 [ 404.806295][T13195] sysfs_do_create_link_sd+0xc0/0x110 [ 404.811692][T13195] device_add_class_symlinks+0x1cf/0x240 [ 404.817401][T13195] device_add+0x507/0xc50 [ 404.821769][T13195] wiphy_register+0x1dad/0x2ae0 [ 404.826756][T13195] ? cfg80211_event_work+0x40/0x40 [ 404.831887][T13195] ? minstrel_ht_alloc+0x88a/0x990 [ 404.837107][T13195] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 404.843271][T13195] ieee80211_register_hw+0x3464/0x4250 [ 404.848820][T13195] ? ieee80211_tasklet_handler+0x20/0x20 [ 404.854473][T13195] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 404.860477][T13195] ? __debug_object_init+0xec/0x450 [ 404.865743][T13195] ? __asan_memset+0x22/0x40 [ 404.870377][T13195] ? __hrtimer_init+0x186/0x270 [ 404.875278][T13195] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 404.881073][T13195] ? mac80211_hwsim_free+0x220/0x220 [ 404.886377][T13195] ? rcu_is_watching+0x15/0xb0 [ 404.891162][T13195] ? kstrndup+0xbd/0x140 [ 404.895459][T13195] hwsim_new_radio_nl+0xdc9/0x1a90 [ 404.900603][T13195] ? __nla_validate+0x50/0x50 [ 404.905321][T13195] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 404.911686][T13195] ? __nla_parse+0x40/0x50 [ 404.916123][T13195] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 404.922575][T13195] genl_family_rcv_msg_doit+0x211/0x310 [ 404.928144][T13195] ? end_current_label_crit_section+0x170/0x170 [ 404.934449][T13195] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 404.940376][T13195] ? bpf_lsm_capable+0x9/0x10 [ 404.945087][T13195] ? security_capable+0x89/0xb0 [ 404.949968][T13195] genl_rcv_msg+0x619/0x7a0 [ 404.954502][T13195] ? genl_bind+0x360/0x360 [ 404.958938][T13195] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 404.965290][T13195] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 404.971899][T13195] ? ref_tracker_free+0x690/0x840 [ 404.976959][T13195] netlink_rcv_skb+0x241/0x4d0 [ 404.981747][T13195] ? genl_bind+0x360/0x360 [ 404.986185][T13195] ? netlink_ack+0x1180/0x1180 [ 404.990985][T13195] ? __lock_acquire+0x7d40/0x7d40 [ 404.996044][T13195] ? down_read+0x1ac/0x2e0 [ 405.000486][T13195] genl_rcv+0x28/0x40 [ 405.004486][T13195] netlink_unicast+0x751/0x8d0 [ 405.009279][T13195] netlink_sendmsg+0x8d0/0xbf0 [ 405.014071][T13195] ? netlink_getsockopt+0x590/0x590 [ 405.019287][T13195] ? aa_sock_msg_perm+0x94/0x150 [ 405.024248][T13195] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 405.029552][T13195] ? security_socket_sendmsg+0x80/0xa0 [ 405.035029][T13195] ? netlink_getsockopt+0x590/0x590 [ 405.040259][T13195] ____sys_sendmsg+0x5ba/0x960 [ 405.045164][T13195] ? __asan_memset+0x22/0x40 [ 405.049788][T13195] ? __sys_sendmsg_sock+0x30/0x30 [ 405.054832][T13195] ? __import_iovec+0x5f2/0x850 [ 405.059745][T13195] ? import_iovec+0x73/0xa0 [ 405.064274][T13195] ___sys_sendmsg+0x2a6/0x360 [ 405.068985][T13195] ? __sys_sendmsg+0x2a0/0x2a0 [ 405.073834][T13195] __se_sys_sendmsg+0x1c2/0x2b0 [ 405.078709][T13195] ? __x64_sys_sendmsg+0x80/0x80 [ 405.083689][T13195] ? lockdep_hardirqs_on+0x98/0x150 [ 405.088917][T13195] do_syscall_64+0x55/0xb0 [ 405.093352][T13195] ? clear_bhb_loop+0x40/0x90 [ 405.098162][T13195] ? clear_bhb_loop+0x40/0x90 [ 405.102880][T13195] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.108838][T13195] RIP: 0033:0x7f187899ce59 [ 405.113279][T13195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.132914][T13195] RSP: 002b:00007f18798a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.141361][T13195] RAX: ffffffffffffffda RBX: 00007f1878c15fa0 RCX: 00007f187899ce59 [ 405.149357][T13195] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 405.157349][T13195] RBP: 00007f1878a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 405.165347][T13195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.173338][T13195] R13: 00007f1878c16038 R14: 00007f1878c15fa0 R15: 00007ffeeee63568 [ 405.181351][T13195] [ 405.285247][T13196] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2070'. [ 405.319614][T13196] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 405.333616][T13196] CPU: 0 PID: 13196 Comm: syz.1.2070 Not tainted syzkaller #0 [ 405.341127][T13196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 405.351201][T13196] Call Trace: [ 405.354490][T13196] [ 405.357431][T13196] dump_stack_lvl+0x18c/0x250 [ 405.362122][T13196] ? show_regs_print_info+0x20/0x20 [ 405.367327][T13196] ? load_image+0x420/0x420 [ 405.371838][T13196] sysfs_warn_dup+0x8e/0xa0 [ 405.376339][T13196] sysfs_do_create_link_sd+0xc0/0x110 [ 405.381712][T13196] device_add_class_symlinks+0x1cf/0x240 [ 405.387350][T13196] device_add+0x507/0xc50 [ 405.391684][T13196] wiphy_register+0x1dad/0x2ae0 [ 405.396552][T13196] ? cfg80211_event_work+0x40/0x40 [ 405.401664][T13196] ? minstrel_ht_alloc+0x88a/0x990 [ 405.406781][T13196] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 405.412858][T13196] ieee80211_register_hw+0x3464/0x4250 [ 405.418337][T13196] ? ieee80211_tasklet_handler+0x20/0x20 [ 405.423963][T13196] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 405.429860][T13196] ? __debug_object_init+0xec/0x450 [ 405.435071][T13196] ? __asan_memset+0x22/0x40 [ 405.439670][T13196] ? __hrtimer_init+0x186/0x270 [ 405.444523][T13196] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 405.450267][T13196] ? mac80211_hwsim_free+0x220/0x220 [ 405.455551][T13196] ? rcu_is_watching+0x15/0xb0 [ 405.460323][T13196] ? kstrndup+0xbd/0x140 [ 405.464578][T13196] hwsim_new_radio_nl+0xdc9/0x1a90 [ 405.469695][T13196] ? __nla_validate+0x50/0x50 [ 405.474382][T13196] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 405.480718][T13196] ? __nla_parse+0x40/0x50 [ 405.485134][T13196] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 405.491467][T13196] genl_family_rcv_msg_doit+0x211/0x310 [ 405.497016][T13196] ? end_current_label_crit_section+0x170/0x170 [ 405.503262][T13196] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 405.509166][T13196] ? bpf_lsm_capable+0x9/0x10 [ 405.513846][T13196] ? security_capable+0x89/0xb0 [ 405.518705][T13196] genl_rcv_msg+0x619/0x7a0 [ 405.523212][T13196] ? genl_bind+0x360/0x360 [ 405.527626][T13196] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 405.533956][T13196] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 405.540547][T13196] ? ref_tracker_free+0x690/0x840 [ 405.545587][T13196] netlink_rcv_skb+0x241/0x4d0 [ 405.550349][T13196] ? genl_bind+0x360/0x360 [ 405.554765][T13196] ? netlink_ack+0x1180/0x1180 [ 405.559545][T13196] ? __lock_acquire+0x7d40/0x7d40 [ 405.564585][T13196] ? down_read+0x1ac/0x2e0 [ 405.569005][T13196] genl_rcv+0x28/0x40 [ 405.572984][T13196] netlink_unicast+0x751/0x8d0 [ 405.577755][T13196] netlink_sendmsg+0x8d0/0xbf0 [ 405.582526][T13196] ? netlink_getsockopt+0x590/0x590 [ 405.587728][T13196] ? aa_sock_msg_perm+0x94/0x150 [ 405.592665][T13196] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 405.597946][T13196] ? security_socket_sendmsg+0x80/0xa0 [ 405.603402][T13196] ? netlink_getsockopt+0x590/0x590 [ 405.608600][T13196] ____sys_sendmsg+0x5ba/0x960 [ 405.613372][T13196] ? __asan_memset+0x22/0x40 [ 405.617963][T13196] ? __sys_sendmsg_sock+0x30/0x30 [ 405.622987][T13196] ? __import_iovec+0x5f2/0x850 [ 405.627844][T13196] ? import_iovec+0x73/0xa0 [ 405.632347][T13196] ___sys_sendmsg+0x2a6/0x360 [ 405.637039][T13196] ? __sys_sendmsg+0x2a0/0x2a0 [ 405.641867][T13196] __se_sys_sendmsg+0x1c2/0x2b0 [ 405.646740][T13196] ? __x64_sys_sendmsg+0x80/0x80 [ 405.651705][T13196] ? lockdep_hardirqs_on+0x98/0x150 [ 405.656929][T13196] do_syscall_64+0x55/0xb0 [ 405.661348][T13196] ? clear_bhb_loop+0x40/0x90 [ 405.666044][T13196] ? clear_bhb_loop+0x40/0x90 [ 405.670733][T13196] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 405.676632][T13196] RIP: 0033:0x7f187899ce59 [ 405.681045][T13196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.700654][T13196] RSP: 002b:00007f1879880028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 405.709075][T13196] RAX: ffffffffffffffda RBX: 00007f1878c16090 RCX: 00007f187899ce59 [ 405.717044][T13196] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 405.725014][T13196] RBP: 00007f1878a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 405.732990][T13196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.740958][T13196] R13: 00007f1878c16128 R14: 00007f1878c16090 R15: 00007ffeeee63568 [ 405.748950][T13196] [ 405.882466][T13200] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2071'. [ 406.208315][T13221] netlink: 'syz.0.2077': attribute type 9 has an invalid length. [ 406.242526][T13223] mac80211_hwsim hwsim15 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 406.256132][T13221] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2077'. [ 406.569180][T13228] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2079'. [ 406.579544][T13228] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 406.838784][T13224] netlink: 'syz.0.2077': attribute type 9 has an invalid length. [ 406.885348][T13224] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2077'. [ 407.161606][T13235] netlink: 'syz.3.2082': attribute type 2 has an invalid length. [ 407.195631][T13235] netlink: 'syz.3.2082': attribute type 8 has an invalid length. [ 407.218061][T13235] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2082'. [ 407.445849][T13251] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2085'. [ 407.489133][T13251] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2085'. [ 407.538002][T13253] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2086'. [ 407.560736][T13251] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2085'. [ 409.458864][T13299] netlink: 'syz.3.2100': attribute type 3 has an invalid length. [ 412.713506][T13377] netlink: 'syz.2.2119': attribute type 3 has an invalid length. [ 412.741986][T13377] __nla_validate_parse: 1 callbacks suppressed [ 412.742002][T13377] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2119'. [ 413.699559][T13383] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2123'. [ 413.799370][T13392] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2125'. [ 413.814770][T13394] netlink: 'syz.1.2126': attribute type 10 has an invalid length. [ 413.835206][T13394] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2126'. [ 413.960929][T13400] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.2128'. [ 414.206380][T13411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2131'. [ 414.566735][T13427] netlink: 'syz.0.2136': attribute type 21 has an invalid length. [ 414.844339][T13451] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2140'. [ 415.243872][T13450] netlink: 'syz.2.2143': attribute type 10 has an invalid length. [ 415.916525][T13475] netlink: 'syz.1.2149': attribute type 10 has an invalid length. [ 415.943237][T13475] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2149'. [ 416.069610][T13484] sctp: [Deprecated]: syz.0.2150 (pid 13484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.069610][T13484] Use struct sctp_sack_info instead [ 416.955226][T13511] netlink: 'syz.0.2158': attribute type 41 has an invalid length. [ 416.977275][T13511] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2158'. [ 417.280105][T13517] netlink: 'syz.2.2160': attribute type 21 has an invalid length. [ 417.289191][T13517] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.2160'. [ 417.571379][T13523] netlink: 'syz.2.2161': attribute type 4 has an invalid length. [ 418.637133][T13554] netlink: 'syz.0.2171': attribute type 9 has an invalid length. [ 418.666470][T13554] __nla_validate_parse: 1 callbacks suppressed [ 418.666488][T13554] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.2171'. [ 418.687251][T13550] netlink: 'syz.0.2171': attribute type 10 has an invalid length. [ 418.715187][T13550] team0: Device hsr_slave_0 failed to register rx_handler [ 418.924559][T13553] netlink: 'syz.1.2172': attribute type 33 has an invalid length. [ 418.933471][T13563] netlink: 'syz.2.2174': attribute type 4 has an invalid length. [ 418.953058][T13553] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2172'. [ 418.968167][T13563] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2174'. [ 419.496950][T13586] netlink: 201336 bytes leftover after parsing attributes in process `syz.1.2180'. [ 419.644446][T13591] validate_nla: 2 callbacks suppressed [ 419.644468][T13591] netlink: 'syz.0.2183': attribute type 3 has an invalid length. [ 419.671128][T13591] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.2183'. [ 419.746105][T13591] netlink: 'syz.0.2183': attribute type 12 has an invalid length. [ 419.754553][T13591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2183'. [ 419.833091][T13596] netdevsim netdevsim2 : renamed from netdevsim0 [ 420.007300][T13603] netlink: 'syz.1.2187': attribute type 10 has an invalid length. [ 420.035102][T13603] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2187'. [ 420.044103][T13603] dummy0: entered promiscuous mode [ 420.095656][T13603] dummy0: entered allmulticast mode [ 420.103058][T13603] bridge0: port 3(dummy0) entered blocking state [ 420.112312][T13603] bridge0: port 3(dummy0) entered disabled state [ 420.381076][T13626] netlink: 'syz.1.2191': attribute type 19 has an invalid length. [ 420.551215][T13628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2194'. [ 420.563031][T13620] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2192'. [ 420.858416][T13645] netlink: 703 bytes leftover after parsing attributes in process `syz.0.2198'. [ 420.903098][T13645] netlink: 'syz.0.2198': attribute type 1 has an invalid length. [ 421.439996][T13658] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 421.644229][T13665] netlink: 'syz.1.2203': attribute type 3 has an invalid length. [ 421.909771][T13681] netlink: 'syz.2.2208': attribute type 27 has an invalid length. [ 421.937852][T13683] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 421.966307][T13683] netlink: 'syz.3.2209': attribute type 10 has an invalid length. [ 424.198680][T13732] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 424.204706][T13732] syzkaller1: linktype set to 786 [ 425.272915][T13777] validate_nla: 5 callbacks suppressed [ 425.272932][T13777] netlink: 'syz.0.2233': attribute type 29 has an invalid length. [ 425.315144][T13777] netlink: 'syz.0.2233': attribute type 29 has an invalid length. [ 425.363558][T13780] netlink: 'syz.0.2233': attribute type 29 has an invalid length. [ 425.407313][T13777] netlink: 'syz.0.2233': attribute type 29 has an invalid length. [ 425.452730][T13777] netlink: 'syz.0.2233': attribute type 29 has an invalid length. [ 428.214134][T13846] syz.0.2253 (13846) used greatest stack depth: 17768 bytes left [ 428.237729][T13875] netlink: 'syz.2.2260': attribute type 2 has an invalid length. [ 428.253349][T13875] netlink: 'syz.2.2260': attribute type 8 has an invalid length. [ 428.270235][T13875] __nla_validate_parse: 7 callbacks suppressed [ 428.270252][T13875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2260'. [ 429.129391][T13888] netlink: 'syz.0.2265': attribute type 9 has an invalid length. [ 429.162187][T13888] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.2265'. [ 430.294707][T13884] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2263'. [ 431.114380][T13935] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 431.370450][T13940] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2280'. [ 431.394286][T13941] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2280'. [ 431.628563][T13945] netlink: 'syz.3.2281': attribute type 10 has an invalid length. [ 431.655353][T13945] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2281'. [ 431.889402][T13955] netlink: 'syz.1.2283': attribute type 10 has an invalid length. [ 432.179511][T13955] veth1_macvtap: left promiscuous mode [ 432.437673][T13959] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.2284'. [ 432.829816][T13983] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2292'. [ 433.321445][T13995] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2295'. [ 433.351686][T13995] netlink: 'syz.1.2295': attribute type 17 has an invalid length. [ 433.378386][T13995] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 433.526556][T13999] netlink: 'syz.1.2296': attribute type 10 has an invalid length. [ 433.534800][T13999] bridge0: port 3(dummy0) entered disabled state [ 433.726786][T13999] team0: Device dummy0 is up. Set it down before adding it as a team port [ 433.741431][T14001] netlink: 'syz.2.2297': attribute type 1 has an invalid length. [ 433.755178][T14001] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2297'. [ 434.965834][T14050] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 434.999753][T14050] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2309'. [ 435.085274][T14050] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2309'. [ 435.700397][T14078] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2316'. [ 435.757001][T14081] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2316'. [ 435.984552][T14083] netlink: 14546 bytes leftover after parsing attributes in process `syz.1.2317'. [ 436.401062][T14090] syz.3.2319: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 436.437284][T14091] netlink: 'syz.3.2319': attribute type 3 has an invalid length. [ 436.471385][T14090] CPU: 1 PID: 14090 Comm: syz.3.2319 Not tainted syzkaller #0 [ 436.478923][T14090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 436.489010][T14090] Call Trace: [ 436.492316][T14090] [ 436.495292][T14090] dump_stack_lvl+0x18c/0x250 [ 436.500000][T14090] ? show_regs_print_info+0x20/0x20 [ 436.505228][T14090] ? load_image+0x420/0x420 [ 436.509774][T14090] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 436.516225][T14090] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 436.520804][T14091] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.2319'. [ 436.522730][T14090] warn_alloc+0x246/0x340 [ 436.536350][T14090] ? stack_trace_save+0xaa/0x100 [ 436.541315][T14090] ? zone_watermark_ok_safe+0x230/0x230 [ 436.546895][T14090] ? kasan_set_track+0x5f/0x70 [ 436.551704][T14090] ? kasan_set_track+0x4e/0x70 [ 436.556482][T14090] ? __kasan_kmalloc+0x8f/0xa0 [ 436.561275][T14090] ? xsk_init_queue+0xad/0x100 [ 436.566156][T14090] ? xsk_setsockopt+0x4e5/0x760 [ 436.571088][T14090] ? do_sock_setsockopt+0x175/0x1a0 [ 436.576310][T14090] ? __x64_sys_setsockopt+0x182/0x200 [ 436.581729][T14090] __vmalloc_node_range+0x126/0x1330 [ 436.587069][T14090] ? free_vm_area+0x50/0x50 [ 436.591607][T14090] vmalloc_user+0x74/0x80 [ 436.595979][T14090] ? xskq_create+0xbf/0x170 [ 436.600502][T14090] xskq_create+0xbf/0x170 [ 436.604856][T14090] xsk_init_queue+0xad/0x100 [ 436.609491][T14090] xsk_setsockopt+0x4e5/0x760 [ 436.614194][T14090] ? xsk_poll+0x680/0x680 [ 436.618548][T14090] ? __fget_files+0x28/0x4b0 [ 436.623195][T14090] ? __fget_files+0x28/0x4b0 [ 436.627801][T14090] ? aa_sock_opt_perm+0x74/0x100 [ 436.632757][T14090] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 436.638333][T14090] ? security_socket_setsockopt+0x7e/0xa0 [ 436.644067][T14090] ? xsk_poll+0x680/0x680 [ 436.648415][T14090] do_sock_setsockopt+0x175/0x1a0 [ 436.653473][T14090] ? __fdget+0x180/0x210 [ 436.657736][T14090] __x64_sys_setsockopt+0x182/0x200 [ 436.662956][T14090] do_syscall_64+0x55/0xb0 [ 436.667406][T14090] ? clear_bhb_loop+0x40/0x90 [ 436.672099][T14090] ? clear_bhb_loop+0x40/0x90 [ 436.676798][T14090] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 436.682728][T14090] RIP: 0033:0x7efe2ed9ce59 [ 436.687155][T14090] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.706780][T14090] RSP: 002b:00007efe2fcd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 436.715233][T14090] RAX: ffffffffffffffda RBX: 00007efe2f015fa0 RCX: 00007efe2ed9ce59 [ 436.723224][T14090] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 436.731229][T14090] RBP: 00007efe2ee32d6f R08: 0000000000000004 R09: 0000000000000000 [ 436.739213][T14090] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 436.747197][T14090] R13: 00007efe2f016038 R14: 00007efe2f015fa0 R15: 00007ffe191efb08 [ 436.755213][T14090] [ 436.831779][T14090] Mem-Info: [ 436.834950][T14090] active_anon:32084 inactive_anon:0 isolated_anon:0 [ 436.834950][T14090] active_file:17393 inactive_file:40097 isolated_file:0 [ 436.834950][T14090] unevictable:768 dirty:29 writeback:0 [ 436.834950][T14090] slab_reclaimable:10844 slab_unreclaimable:96318 [ 436.834950][T14090] mapped:24296 shmem:17794 pagetables:637 [ 436.834950][T14090] sec_pagetables:0 bounce:0 [ 436.834950][T14090] kernel_misc_reclaimable:0 [ 436.834950][T14090] free:1316902 free_pcp:6276 free_cma:0 [ 436.915576][T14090] Node 0 active_anon:124536kB inactive_anon:0kB active_file:69572kB inactive_file:160188kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97484kB dirty:116kB writeback:0kB shmem:66240kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11228kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no [ 436.987641][T14090] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 437.056457][T14090] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.084851][T14112] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2324'. [ 437.094263][T14090] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 437.094361][T14090] Node 0 DMA32 free:1356244kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:119624kB inactive_anon:0kB active_file:69572kB inactive_file:159352kB unevictable:1536kB writepending:116kB present:3129332kB managed:2586932kB mlocked:0kB bounce:0kB free_pcp:16324kB local_pcp:11996kB free_cma:0kB [ 437.094429][T14090] lowmem_reserve[]: 0 0 0 0 0 [ 437.150296][T14090] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 437.181878][T14090] lowmem_reserve[]: 0 0 0 0 0 [ 437.187082][T14090] Node 1 Normal free:3895500kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17828kB local_pcp:8132kB free_cma:0kB [ 437.265547][T14090] lowmem_reserve[]: 0 0 0 0 0 [ 437.270785][T14090] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 437.287333][T14090] Node 0 DMA32: 1*4kB (E) 506*8kB (UME) 436*16kB (UE) 630*32kB (UE) 378*64kB (UE) 257*128kB (UME) 203*256kB (UME) 69*512kB (UME) 37*1024kB (UME) 16*2048kB (UME) 271*4096kB (M) = 1356244kB [ 437.307268][T14090] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 437.326427][T14090] Node 1 Normal: 233*4kB (UME) 51*8kB (UME) 33*16kB (UME) 62*32kB (UME) 15*64kB (UME) 6*128kB (UME) 1*256kB (M) 1*512kB (E) 2*1024kB (UE) 2*2048kB (UE) 948*4096kB (M) = 3895500kB [ 437.352635][T14090] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.363320][T14090] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.373811][T14090] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 437.396297][T14090] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 437.406270][T14090] 70415 total pagecache pages [ 437.410969][T14090] 0 pages in swap cache [ 437.435376][T14090] Free swap = 124996kB [ 437.439582][T14090] Total swap = 124996kB [ 437.443753][T14090] 2097051 pages RAM [ 437.460207][T14090] 0 pages HighMem/MovableOnly [ 437.464938][T14090] 416932 pages reserved [ 437.471927][T14090] 0 pages cma reserved [ 438.647404][T14153] IPv6: Can't replace route, no match found [ 439.270654][T14179] netlink: 'syz.2.2344': attribute type 41 has an invalid length. [ 439.280451][T14179] netlink: 'syz.2.2344': attribute type 41 has an invalid length. [ 439.334141][T14181] netlink: 'syz.0.2343': attribute type 3 has an invalid length. [ 439.352935][T14181] netlink: 'syz.0.2343': attribute type 6 has an invalid length. [ 439.364913][T14181] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2343'. [ 440.142485][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.148916][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.809452][T14222] netlink: 'syz.1.2355': attribute type 3 has an invalid length. [ 440.825424][T14222] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2355'. [ 441.388408][T14239] netlink: 'syz.1.2362': attribute type 58 has an invalid length. [ 441.425196][T14239] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2362'. [ 441.868949][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 441.879334][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 441.888740][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 441.898699][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 441.909842][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 441.919182][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 442.427171][T14251] chnl_net:caif_netlink_parms(): no params data found [ 442.644559][T14251] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.651923][T14251] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.661285][T14251] bridge_slave_0: entered allmulticast mode [ 442.672247][T14251] bridge_slave_0: entered promiscuous mode [ 442.688116][T14251] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.699422][T14251] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.708326][T14251] bridge_slave_1: entered allmulticast mode [ 442.719132][T14251] bridge_slave_1: entered promiscuous mode [ 442.742416][T14286] netlink: 'syz.1.2373': attribute type 10 has an invalid length. [ 442.767636][T14286] team0: Device ipvlan1 failed to register rx_handler [ 442.881213][T14251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.907713][T14251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.016443][T14251] team0: Port device team_slave_0 added [ 443.042958][T14251] team0: Port device team_slave_1 added [ 443.111055][T14251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.135272][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.191714][T14251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.230086][T14251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.249868][T14251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.290352][T14251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.440536][T14251] hsr_slave_0: entered promiscuous mode [ 443.466628][T14251] hsr_slave_1: entered promiscuous mode [ 443.472996][T14251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 443.487391][T14251] Cannot create hsr debugfs directory [ 443.725986][T14318] netlink: 'syz.3.2380': attribute type 25 has an invalid length. [ 443.733852][T14318] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.2380'. [ 443.836653][T14251] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.965232][ T5778] Bluetooth: hci0: command tx timeout [ 443.984810][T14251] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.075691][T14251] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.179860][T14251] netdevsim netdevsim0 (unregistering): left promiscuous mode [ 444.189544][T14251] netdevsim netdevsim0 (unregistering): left allmulticast mode [ 444.203536][T14251] team0: Port device removed [ 444.218027][T14251] netdevsim netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.390801][ T9323] tipc: Left network mode [ 444.414073][T14331] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2388'. [ 444.588018][ T9323] bridge0: port 2(ip6gretap0) entered disabled state [ 444.619241][T14340] netlink: 'syz.2.2389': attribute type 3 has an invalid length. [ 444.637530][T14343] netlink: 'syz.2.2389': attribute type 3 has an invalid length. [ 444.727618][ T9323] ip6gretap0 (unregistering): left allmulticast mode [ 444.734355][ T9323] ip6gretap0 (unregistering): left promiscuous mode [ 444.756148][ T9323] bridge0: port 2(ip6gretap0) entered disabled state [ 444.778548][T14251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.792322][T14251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.819515][T14251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 444.841705][T14350] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2392'. [ 444.859205][T14350] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2392'. [ 444.901879][T14353] netlink: 17331 bytes leftover after parsing attributes in process `syz.1.2392'. [ 444.994745][T14349] netlink: 'syz.1.2392': attribute type 153 has an invalid length. [ 445.015779][T14349] netlink: 63940 bytes leftover after parsing attributes in process `syz.1.2392'. [ 445.076608][T14251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 446.057920][ T5778] Bluetooth: hci0: command tx timeout [ 446.437577][T14251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.589393][T14251] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.766558][ T7311] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.773736][ T7311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.786485][ T7311] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.793736][ T7311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.008349][T14388] macsec0: left promiscuous mode [ 447.013770][T14388] macsec0: left allmulticast mode [ 447.373737][T14251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 447.565862][ T9323] : left allmulticast mode [ 447.570869][ T9323] : left promiscuous mode [ 447.595596][ T9323] : port 1() entered disabled state [ 447.643968][ T9323] hsr_slave_0: left promiscuous mode [ 447.662914][ T9323] team0: left allmulticast mode [ 447.672709][ T9323] C: left allmulticast mode [ 447.685122][ T9323] team_slave_1: left allmulticast mode [ 447.698113][ T9323] .`: left allmulticast mode [ 447.722184][ T9323] bond_slave_0: left allmulticast mode [ 447.728325][ T9323] bond_slave_1: left allmulticast mode [ 447.735260][ T9323] dummy0: left allmulticast mode [ 447.740287][ T9323] bridge_slave_1: left allmulticast mode [ 447.748437][ T9323] team0: left promiscuous mode [ 447.753245][ T9323] C: left promiscuous mode [ 447.761077][ T9323] team_slave_1: left promiscuous mode [ 447.766911][ T9323] .`: left promiscuous mode [ 447.771534][ T9323] bond_slave_0: left promiscuous mode [ 447.780862][ T9323] bond_slave_1: left promiscuous mode [ 447.789912][ T9323] dummy0: left promiscuous mode [ 447.797211][ T9323] bridge_slave_1: left promiscuous mode [ 447.804878][ T9323] bridge0: port 3(team0) entered disabled state [ 447.817628][ T9323] bridge_slave_0: left allmulticast mode [ 447.823290][ T9323] bridge_slave_0: left promiscuous mode [ 447.829427][ T9323] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.848123][ T9323] veth1_macvtap: left promiscuous mode [ 447.853903][ T9323] veth0_macvtap: left promiscuous mode [ 447.868948][ T9323] veth1_vlan: left allmulticast mode [ 447.874396][ T9323] veth1_vlan: left promiscuous mode [ 447.880905][ T9323] veth0_vlan: left promiscuous mode [ 448.125295][ T5778] Bluetooth: hci0: command tx timeout [ 448.291452][ T9323] .` (unregistering): (slave macvlan0): Releasing backup interface [ 448.567492][ T9323] team0 (unregistering): Port device team_slave_1 removed [ 448.621483][ T9323] team0 (unregistering): Port device C removed [ 448.663797][ T9323] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.703153][ T9323] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.742958][ T9323] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 448.912247][ T9323] .` (unregistering): (slave dummy0): Releasing backup interface [ 448.940952][ T9323] team0 (unregistering): Port device .` removed [ 448.972697][ T9323] .` (unregistering): Released all slaves [ 449.059135][T14251] veth0_vlan: entered promiscuous mode [ 449.089980][T14251] veth1_vlan: entered promiscuous mode [ 449.291291][T14428] netlink: 'syz.1.2416': attribute type 3 has an invalid length. [ 449.320033][T14428] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2416'. [ 449.353563][T14425] syzkaller0: entered promiscuous mode [ 449.359334][T14425] syzkaller0: entered allmulticast mode [ 449.405680][T14251] veth0_macvtap: entered promiscuous mode [ 449.436871][T14251] veth1_macvtap: entered promiscuous mode [ 450.205639][ T5778] Bluetooth: hci0: command tx timeout [ 450.534197][T14451] netlink: 'syz.3.2423': attribute type 9 has an invalid length. [ 450.589886][T14451] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2423'. [ 452.312930][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 452.330469][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.347682][T14251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.373369][T14251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 452.384063][T14251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.396875][T14251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 452.414657][T14251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.455809][T14251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.475109][T14251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.494095][T14251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.626701][T14468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2428'. [ 452.655513][T14468] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2428'. [ 452.664748][T14468] tc_dump_action: action bad kind [ 452.787971][ T7310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.822317][ T7310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.896288][ T7310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.904283][ T7310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.958881][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.969470][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.980406][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.992284][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 454.007012][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 454.015861][ T5771] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 454.067357][ T6964] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.087603][T14497] netlink: 'syz.1.2437': attribute type 3 has an invalid length. [ 454.141208][T14497] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2437'. [ 454.297777][ T6964] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.398717][ T6964] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.429922][T14516] netlink: 'syz.1.2442': attribute type 21 has an invalid length. [ 454.532291][ T6964] bond0: (slave ): Releasing backup interface [ 454.546559][ T6964] netdevsim netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.942325][T14494] chnl_net:caif_netlink_parms(): no params data found [ 455.322716][T14494] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.350671][T14494] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.397462][T14494] bridge_slave_0: entered allmulticast mode [ 455.426184][T14546] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2448'. [ 455.428714][T14494] bridge_slave_0: entered promiscuous mode [ 455.598490][T14550] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.2449'. [ 455.615215][T14494] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.622396][T14494] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.665283][T14494] bridge_slave_1: entered allmulticast mode [ 455.672600][T14494] bridge_slave_1: entered promiscuous mode [ 455.968290][T14494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.035715][T14568] syz.2.2453[14568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.039281][T14568] syz.2.2453[14568] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 456.051864][T14563] raw_sendmsg: syz.1.2452 forgot to set AF_INET. Fix it! [ 456.055628][ T5771] Bluetooth: hci2: command tx timeout [ 456.083516][T14494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.266152][T14494] team0: Port device team_slave_0 added [ 456.274801][T14494] team0: Port device team_slave_1 added [ 456.397760][T14494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.404823][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.443737][T14494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.478445][T14584] netlink: 'syz.0.2456': attribute type 3 has an invalid length. [ 456.498430][T14584] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2456'. [ 456.580137][T14494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.593899][T14494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.630902][T14494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.674478][T14592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2457'. [ 456.783179][T14592] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2457'. [ 456.803138][T14494] hsr_slave_0: entered promiscuous mode [ 456.810449][T14494] hsr_slave_1: entered promiscuous mode [ 456.859622][T14595] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2457'. [ 456.871132][T14597] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2457'. [ 457.224099][T14607] netlink: 'syz.0.2460': attribute type 3 has an invalid length. [ 457.253378][T14607] netlink: 'syz.0.2460': attribute type 1 has an invalid length. [ 457.269444][T14607] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2460'. [ 458.125659][ T5771] Bluetooth: hci2: command tx timeout [ 460.205253][ T5771] Bluetooth: hci2: command tx timeout [ 460.830781][T14625] netlink: 'syz.2.2462': attribute type 2 has an invalid length. [ 460.852310][T14625] netlink: 'syz.2.2462': attribute type 8 has an invalid length. [ 460.877029][T14625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2462'. [ 461.059171][ T6964] bond0: (slave wlan1): Releasing backup interface [ 461.113091][T14662] netlink: 'syz.0.2469': attribute type 29 has an invalid length. [ 461.172420][T14662] netlink: 'syz.0.2469': attribute type 29 has an invalid length. [ 461.182741][T14663] netlink: 'syz.0.2469': attribute type 29 has an invalid length. [ 461.435427][T14663] netlink: 'syz.0.2469': attribute type 29 has an invalid length. [ 461.495362][ T6964] hsr_slave_0: left promiscuous mode [ 461.511345][ T6964] hsr_slave_1: left promiscuous mode [ 461.524115][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.534972][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.554150][ T6964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.587832][ T6964] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.600870][ T6964] batman_adv: batadv0: Interface deactivated: macvlan1 [ 461.610919][ T6964] batman_adv: batadv0: Removing interface: macvlan1 [ 461.638010][T14675] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2472'. [ 461.649679][ T6964] veth1_vlan: left allmulticast mode [ 461.660177][T14675] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 462.022763][ T6964] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 462.295313][ T5771] Bluetooth: hci2: command tx timeout [ 462.342593][ T6964] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.353150][ T6964] bond_slave_1 (unregistering): left promiscuous mode [ 462.575584][ T6964] bond0 (unregistering): Released all slaves [ 462.610554][T14662] netlink: 'syz.0.2469': attribute type 29 has an invalid length. [ 462.619260][T14665] netlink: 'syz.0.2469': attribute type 29 has an invalid length. [ 462.636699][T14671] netlink: 'syz.2.2471': attribute type 4 has an invalid length. [ 462.644702][T14675] netlink: 'syz.1.2472': attribute type 29 has an invalid length. [ 462.911215][T14697] netlink: 'syz.0.2474': attribute type 21 has an invalid length. [ 462.924908][T14697] IPv6: NLM_F_CREATE should be specified when creating new route [ 463.125845][T14702] netlink: 'syz.0.2474': attribute type 21 has an invalid length. [ 463.140788][T14702] netlink: 13012 bytes leftover after parsing attributes in process `syz.0.2474'. [ 463.202759][T14494] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 463.237077][T14494] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 463.259573][T14494] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 463.310918][T14494] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 463.720586][T14713] netlink: 'syz.2.2478': attribute type 13 has an invalid length. [ 463.736392][T14713] netlink: 'syz.2.2478': attribute type 58 has an invalid length. [ 463.744279][T14713] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2478'. [ 463.779706][T14494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.861262][T14494] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.897764][ T6964] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.905047][ T6964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.993195][ T6964] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.000464][ T6964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.432700][T14494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.599609][T14738] netlink: 'syz.1.2482': attribute type 29 has an invalid length. [ 465.644887][T14494] veth0_vlan: entered promiscuous mode [ 465.736301][T14494] veth1_vlan: entered promiscuous mode [ 465.903973][T14494] veth0_macvtap: entered promiscuous mode [ 466.020169][T14494] veth1_macvtap: entered promiscuous mode [ 466.392871][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 466.466978][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.526146][T14494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.590804][T14494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 466.621958][T14494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 466.660171][T14494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.727112][T14494] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.755794][T14494] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.764564][T14494] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.825094][T14494] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.839616][ T7310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.928804][ T7310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.181802][ T7310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.242573][ T7310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.733742][T14767] bridge_slave_1: left allmulticast mode [ 468.807390][T14767] bridge_slave_1: left promiscuous mode [ 468.888862][T14767] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.100867][T14767] bridge_slave_0: left allmulticast mode [ 469.174037][T14767] bridge_slave_0: left promiscuous mode [ 469.204116][T14767] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.366692][T14776] validate_nla: 5 callbacks suppressed [ 470.366710][T14776] netlink: 'syz.1.2488': attribute type 13 has an invalid length. [ 470.493840][T14776] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2488'. [ 470.684340][T14776] erspan0: refused to change device tx_queue_len [ 470.756373][T14776] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 470.864740][T14775] netlink: 'syz.3.2433': attribute type 10 has an invalid length. [ 473.366998][T14808] netlink: 'syz.3.2495': attribute type 21 has an invalid length. [ 473.374902][T14808] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2495'. [ 473.406010][T14808] netlink: 'syz.3.2495': attribute type 4 has an invalid length. [ 473.413827][T14808] netlink: 'syz.3.2495': attribute type 3 has an invalid length. [ 473.465485][T14808] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2495'. [ 474.094112][T14817] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 474.179386][T14817] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 474.246074][T14816] netlink: 830 bytes leftover after parsing attributes in process `syz.0.2503'. [ 475.937582][ T5778] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 475.950122][ T5778] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 475.960002][ T5778] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 475.986626][ T5778] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.000080][ T5778] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 476.018658][ T5778] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.125383][ T5771] Bluetooth: hci4: command tx timeout [ 478.599403][T14821] netlink: 'syz.3.2496': attribute type 29 has an invalid length. [ 478.622657][T14849] netlink: 'syz.0.2499': attribute type 22 has an invalid length. [ 478.641896][T14850] netlink: 'syz.0.2499': attribute type 22 has an invalid length. [ 478.663260][T14849] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2499'. [ 478.715713][T14850] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2499'. [ 478.840835][ T7306] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.060971][ T7306] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.261038][ T7306] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.387894][T14858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2500'. [ 479.462344][T14858] netlink: 'syz.1.2500': attribute type 12 has an invalid length. [ 479.519111][T14858] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2500'. [ 479.847314][ T7306] netdevsim netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.210516][ T5771] Bluetooth: hci4: command tx timeout [ 480.215497][T14900] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 480.224333][T14900] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 480.283359][T14837] chnl_net:caif_netlink_parms(): no params data found [ 480.350746][T14900] netlink: 'syz.1.2509': attribute type 29 has an invalid length. [ 481.464028][T14934] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 481.477323][T14934] syzkaller0: linktype set to 768 [ 481.526202][T14934] syzkaller0: create flow: hash 1880852687 index 1 [ 481.549269][T14941] syzkaller0: entered promiscuous mode [ 481.554894][T14941] syzkaller0: entered allmulticast mode [ 481.577362][T14837] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.590101][T14837] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.602421][T14837] bridge_slave_0: entered allmulticast mode [ 481.610723][T14837] bridge_slave_0: entered promiscuous mode [ 481.753596][T14837] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.766632][T14837] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.774069][T14837] bridge_slave_1: entered allmulticast mode [ 481.781849][T14837] bridge_slave_1: entered promiscuous mode [ 481.806060][T14959] : renamed from vlan0 (while UP) [ 481.938451][T14837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 482.087685][T14837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 482.186402][T14933] syzkaller0: delete flow: hash 1880852687 index 1 [ 482.285145][ T5771] Bluetooth: hci4: command tx timeout [ 483.243497][T14985] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2521'. [ 484.367858][ T5771] Bluetooth: hci4: command tx timeout [ 484.765704][T14983] netlink: 'syz.1.2520': attribute type 2 has an invalid length. [ 484.775218][T14983] netlink: 119 bytes leftover after parsing attributes in process `syz.1.2520'. [ 484.794011][T14985] netlink: 3064 bytes leftover after parsing attributes in process `syz.0.2521'. [ 484.833855][T14837] team0: Port device team_slave_0 added [ 484.842552][T14837] team0: Port device team_slave_1 added [ 484.995512][T14837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.002681][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.035744][T14837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.221780][T14993] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.2524'. [ 486.236961][T14837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.243942][T14837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 486.312462][T14837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.493154][T14837] hsr_slave_0: entered promiscuous mode [ 486.500033][T14837] hsr_slave_1: entered promiscuous mode [ 486.512301][T14837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 486.520257][T14837] Cannot create hsr debugfs directory [ 487.928369][T15059] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 487.988073][T15059] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 488.109620][T15060] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 488.121791][T15063] netlink: 'syz.3.2535': attribute type 10 has an invalid length. [ 488.131119][T15063] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2535'. [ 488.145171][T15063] bond0: entered promiscuous mode [ 488.153535][T15063] bond_slave_0: entered promiscuous mode [ 488.163228][T15063] bond_slave_1: entered promiscuous mode [ 488.175678][T15063] bridge0: port 3(bond0) entered blocking state [ 488.182059][T15063] bridge0: port 3(bond0) entered disabled state [ 488.194224][T15063] bond0: entered allmulticast mode [ 488.209151][T15063] bond_slave_0: entered allmulticast mode [ 488.215166][T15063] bond_slave_1: entered allmulticast mode [ 488.223484][T15063] bridge0: port 3(bond0) entered blocking state [ 488.229933][T15063] bridge0: port 3(bond0) entered forwarding state [ 488.249175][T15059] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 488.409533][T15069] netlink: 'syz.0.2533': attribute type 10 has an invalid length. [ 488.423030][T15069] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2533'. [ 488.433459][T15069] team0: entered promiscuous mode [ 488.444650][T15069] team_slave_0: entered promiscuous mode [ 488.453300][T15069] team_slave_1: entered promiscuous mode [ 488.465921][T15069] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 488.491284][T15060] netlink: 'syz.0.2533': attribute type 29 has an invalid length. [ 488.500785][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2537'. [ 488.853712][T15092] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2541'. [ 489.214161][T14837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 489.240766][T14837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 489.290033][T15112] delete_channel: no stack [ 489.294623][T15112] delete_channel: no stack [ 489.295250][T14837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 489.323201][T14837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 489.588671][T14837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.781621][ T7306] hsr_slave_0: left promiscuous mode [ 489.842768][ T7306] hsr_slave_1: left promiscuous mode [ 489.889567][ T7306] veth1_vlan: left promiscuous mode [ 489.902099][ T7306] veth0_vlan: left promiscuous mode [ 491.073593][T15131] netlink: 176 bytes leftover after parsing attributes in process `syz.1.2554'. [ 491.087142][T15151] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2557'. [ 491.117200][T14837] 8021q: adding VLAN 0 to HW filter on device team0 [ 491.152696][ T6369] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.159893][ T6369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.253330][ T6369] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.260503][ T6369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.397304][T15164] netlink: 'syz.0.2560': attribute type 1 has an invalid length. [ 491.640392][T15172] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2561'. [ 492.022851][T15191] netlink: 'syz.0.2563': attribute type 2 has an invalid length. [ 492.040331][T15191] netlink: 'syz.0.2563': attribute type 8 has an invalid length. [ 492.115135][T15191] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2563'. [ 492.278888][T14837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 492.427966][T14837] veth0_vlan: entered promiscuous mode [ 492.450134][T14837] veth1_vlan: entered promiscuous mode [ 492.531951][T14837] veth0_macvtap: entered promiscuous mode [ 492.582554][T14837] veth1_macvtap: entered promiscuous mode [ 492.638888][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.750936][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.785257][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 492.824341][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.859253][T14837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.923963][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.973756][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.037826][T14837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 493.091562][T14837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.151289][T14837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 493.174472][T14837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.193147][T14837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.212651][T14837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.235328][T14837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.532922][ T7311] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.552090][ T7311] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.598247][T15230] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2571'. [ 493.614121][ T7310] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.670734][ T7310] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.766136][T15234] netlink: 'syz.0.2572': attribute type 10 has an invalid length. [ 493.776431][T15234] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2572'. [ 493.796420][T15234] hsr0: entered promiscuous mode [ 494.145875][T15248] netlink: 'syz.0.2575': attribute type 29 has an invalid length. [ 494.208105][T15248] netlink: 'syz.0.2575': attribute type 29 has an invalid length. [ 494.208387][T15250] netlink: 'syz.0.2575': attribute type 29 has an invalid length. [ 494.783998][T15266] netlink: 'syz.3.2580': attribute type 10 has an invalid length. [ 494.851225][T15266] team0: Device wg1 is of different type [ 494.873118][T15269] netlink: 'syz.2.2581': attribute type 21 has an invalid length. [ 494.881409][T15269] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'. [ 494.890925][T15268] netlink: 'syz.2.2581': attribute type 21 has an invalid length. [ 494.899564][T15268] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2581'. [ 494.916800][T15271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.612277][T15265] delete_channel: no stack [ 496.115125][T15303] delete_channel: no stack [ 496.128011][T15282] team0: Port device wlan1 added [ 496.140865][T15298] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2589'. [ 496.346704][T15307] tap0: tun_chr_ioctl cmd 1074025692 [ 496.511940][T15313] pim6reg1: entered promiscuous mode [ 496.517853][T15313] pim6reg1: entered allmulticast mode [ 496.716502][T15327] validate_nla: 4 callbacks suppressed [ 496.716520][T15327] netlink: 'syz.0.2598': attribute type 10 has an invalid length. [ 496.750115][T15327] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 496.756745][T15323] delete_channel: no stack [ 496.778685][T15327] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 496.780722][T15329] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2598'. [ 496.791951][T15327] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 496.798389][T15329] openvswitch: netlink: Message has 20476 unknown bytes. [ 496.820359][T15327] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 497.024602][T15335] syzkaller0: entered promiscuous mode [ 497.030214][T15335] syzkaller0: entered allmulticast mode [ 497.039361][T15331] netlink: 'syz.3.2599': attribute type 10 has an invalid length. [ 497.048286][T15331] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2599'. [ 497.063333][T15331] ipvlan1: entered promiscuous mode [ 497.070826][T15331] ipvlan1: entered allmulticast mode [ 497.076849][T15331] veth0_vlan: entered allmulticast mode [ 497.093397][T15331] bridge0: port 4(ipvlan1) entered blocking state [ 497.101930][T15331] bridge0: port 4(ipvlan1) entered disabled state [ 497.128150][T15331] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 498.013827][T15354] delete_channel: no stack [ 498.018675][T15354] delete_channel: no stack [ 498.981840][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2605'. [ 499.481736][T15372] netlink: 'syz.1.2611': attribute type 3 has an invalid length. [ 499.506459][T15372] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2611'. [ 499.522448][T15375] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2612'. [ 499.551171][T15377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2612'. [ 499.742668][T15384] netlink: 'syz.1.2615': attribute type 1 has an invalid length. [ 499.755778][T15384] netlink: 'syz.1.2615': attribute type 2 has an invalid length. [ 499.763968][T15384] netlink: 'syz.1.2615': attribute type 2 has an invalid length. [ 499.774490][T15384] netlink: 'syz.1.2615': attribute type 3 has an invalid length. [ 499.783258][T15384] netlink: 'syz.1.2615': attribute type 4 has an invalid length. [ 499.792811][T15384] netlink: 'syz.1.2615': attribute type 5 has an invalid length. [ 499.803359][T15384] netlink: 'syz.1.2615': attribute type 6 has an invalid length. [ 499.811877][T15384] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2615'. [ 499.869051][ T5771] Bluetooth: hci1: ISO packet for unknown connection handle 3842 [ 500.002331][T15392] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2617'. [ 500.271665][T15394] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2617'. [ 500.480575][T15405] team0: Port device macvlan0 added [ 500.800600][T15420] team0: entered promiscuous mode [ 500.819016][T15420] team_slave_0: entered promiscuous mode [ 500.829420][T15420] team_slave_1: entered promiscuous mode [ 500.839924][T15420] bridge0: port 4(team0) entered blocking state [ 500.856086][T15420] bridge0: port 4(team0) entered disabled state [ 500.863062][T15420] team0: entered allmulticast mode [ 500.883744][T15420] team_slave_0: entered allmulticast mode [ 500.899853][T15420] team_slave_1: entered allmulticast mode [ 500.919660][T15420] bridge0: port 4(team0) entered blocking state [ 500.926107][T15420] bridge0: port 4(team0) entered forwarding state [ 501.443707][T15453] __nla_validate_parse: 3 callbacks suppressed [ 501.443723][T15453] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2635'. [ 501.569122][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.575645][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.853525][T15464] validate_nla: 10 callbacks suppressed [ 501.853545][T15464] netlink: 'syz.1.2638': attribute type 27 has an invalid length. [ 502.650035][T15481] netlink: 'syz.1.2643': attribute type 21 has an invalid length. [ 502.787046][T15487] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.2645'. [ 503.046894][T15496] netlink: 'syz.1.2648': attribute type 4 has an invalid length. [ 503.095667][T15498] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2650'. [ 503.702218][T15511] netlink: 'syz.1.2653': attribute type 29 has an invalid length. [ 503.740425][T15511] netlink: 'syz.1.2653': attribute type 29 has an invalid length. [ 503.787718][T15514] netlink: 'syz.1.2653': attribute type 29 has an invalid length. [ 503.818015][T15515] netlink: 'syz.1.2653': attribute type 29 has an invalid length. [ 503.843356][T15511] netlink: 'syz.1.2653': attribute type 29 has an invalid length. [ 504.387932][T15515] netlink: 'syz.1.2653': attribute type 29 has an invalid length. [ 505.027563][T15536] netlink: 'syz.3.2659': attribute type 3 has an invalid length. [ 505.065785][T15536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2659'. [ 505.206642][T15540] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2657'. [ 505.245073][T15540] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2657'. [ 505.280417][T15529] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2657'. [ 505.313985][T15543] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2657'. [ 505.531411][T15527] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2657'. [ 505.581543][T15527] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 505.599849][T15527] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.659202][T15527] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 505.882075][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2664'. [ 507.657140][T15626] validate_nla: 1 callbacks suppressed [ 507.657165][T15626] netlink: 'syz.3.2682': attribute type 10 has an invalid length. [ 507.674260][T15626] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2682'. [ 507.793599][T15634] netlink: 'syz.2.2686': attribute type 10 has an invalid length. [ 507.826016][T15634] team0: Device vxcan0 is of different type [ 508.225564][T15644] netlink: 'syz.2.2688': attribute type 21 has an invalid length. [ 508.234131][T15644] IPv6: NLM_F_CREATE should be specified when creating new route [ 508.244951][T15644] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.252821][T15644] IPv6: NLM_F_CREATE should be set when creating new route [ 508.261274][T15644] IPv6: NLM_F_CREATE should be set when creating new route [ 508.269400][T15644] IPv6: NLM_F_CREATE should be set when creating new route [ 508.804334][T15671] netlink: 'syz.2.2698': attribute type 27 has an invalid length. [ 508.812709][T15671] netlink: 'syz.2.2698': attribute type 4 has an invalid length. [ 508.822674][T15671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2698'. [ 509.076680][T15686] netlink: 'syz.0.2702': attribute type 29 has an invalid length. [ 509.087269][T15686] netlink: 'syz.0.2702': attribute type 29 has an invalid length. [ 509.301566][T15697] netlink: 'syz.0.2708': attribute type 1 has an invalid length. [ 509.315424][T15697] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.2708'. [ 509.451738][T15703] netlink: 'syz.0.2710': attribute type 16 has an invalid length. [ 509.460114][T15703] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2710'. [ 509.681647][T15714] delete_channel: no stack [ 509.705230][T15714] delete_channel: no stack [ 510.179851][T15734] netlink: 'syz.0.2717': attribute type 3 has an invalid length. [ 510.199002][T15736] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2717'. [ 510.215144][T15734] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.2717'. [ 510.807119][T15755] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2722'. [ 511.056523][T15767] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.2727'. [ 511.255762][T15773] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2728'. [ 512.098930][T15806] team0: left allmulticast mode [ 512.104060][T15806] team_slave_0: left allmulticast mode [ 512.133027][T15806] team_slave_1: left allmulticast mode [ 512.141013][T15806] bridge0: port 4(team0) entered disabled state [ 512.225664][T15806] bond0: left allmulticast mode [ 512.236203][T15806] bond_slave_0: left allmulticast mode [ 512.242000][T15806] bond_slave_1: left allmulticast mode [ 512.259414][T15806] bridge0: port 3(bond0) entered disabled state [ 512.476499][T15806] bridge_slave_1: left allmulticast mode [ 512.483680][T15806] bridge_slave_1: left promiscuous mode [ 512.541970][T15806] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.848110][T15806] bridge_slave_0: left allmulticast mode [ 512.862443][T15806] bridge_slave_0: left promiscuous mode [ 512.868895][T15806] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.151675][T15810] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2737'. [ 513.166112][T15820] validate_nla: 5 callbacks suppressed [ 513.166126][T15820] netlink: 'syz.2.2739': attribute type 46 has an invalid length. [ 513.645993][T15832] netlink: 'syz.3.2743': attribute type 10 has an invalid length. [ 514.459517][T15865] netlink: 'syz.1.2752': attribute type 1 has an invalid length. [ 514.495110][T15865] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2752'. [ 514.504452][T15865] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2752'. [ 514.930132][T15882] bridge_slave_1: left allmulticast mode [ 514.945142][T15882] bridge_slave_1: left promiscuous mode [ 514.951063][T15882] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.976263][T15882] bridge_slave_0: left allmulticast mode [ 514.981966][T15882] bridge_slave_0: left promiscuous mode [ 515.009078][T15882] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.035390][T15889] sctp: [Deprecated]: syz.3.2759 (pid 15889) Use of int in max_burst socket option deprecated. [ 515.035390][T15889] Use struct sctp_assoc_value instead [ 515.103018][T15887] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.2758'. [ 515.288263][T15893] netlink: 'syz.1.2760': attribute type 9 has an invalid length. [ 515.315731][T15893] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2760'. [ 515.345832][T15896] netlink: 'syz.0.2761': attribute type 3 has an invalid length. [ 515.361083][T15896] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2761'. [ 515.855418][T15909] mac80211_hwsim hwsim23 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 515.989351][T15920] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2769'. [ 516.029484][T15920] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 516.105864][T15929] netlink: 'syz.1.2772': attribute type 2 has an invalid length. [ 516.222623][T15933] sock: sock_set_timeout: `syz.0.2773' (pid 15933) tries to set negative timeout [ 516.855601][T15962] netlink: 'syz.2.2782': attribute type 10 has an invalid length. [ 516.876913][T15962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 516.966205][T15962] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.085887][T15962] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 518.698863][T15988] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2787'. [ 518.721383][T15991] netlink: 'syz.3.2787': attribute type 2 has an invalid length. [ 518.730879][T15991] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2787'. [ 518.996745][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.005980][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.015167][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.024315][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.033478][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.042637][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.051819][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.060995][T16006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 519.180838][T16009] netlink: 'syz.1.2792': attribute type 2 has an invalid length. [ 519.189293][T16009] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2792'. [ 519.286474][T16018] IPv6: Can't replace route, no match found [ 519.310490][T16016] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2793'. [ 519.896586][T16050] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.2802'. [ 520.210186][T16057] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.2804'. [ 520.343977][T16060] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.2805'. [ 520.364935][T16064] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2807'. [ 520.408132][T16065] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2807'. [ 521.141374][T16076] netlink: 'syz.3.2809': attribute type 29 has an invalid length. [ 521.246397][T16076] netlink: 'syz.3.2809': attribute type 29 has an invalid length. [ 521.408848][T16080] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2808'. [ 523.817279][T16080] team0: Port device team_slave_0 removed [ 523.823685][T16080] net_ratelimit: 3664 callbacks suppressed [ 523.823701][T16080] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 524.972539][T16110] netlink: 'syz.3.2819': attribute type 9 has an invalid length. [ 524.984378][T16110] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2819'. [ 525.070533][T16117] netlink: 'syz.2.2820': attribute type 3 has an invalid length. [ 525.079228][T16117] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.2820'. [ 525.434230][T16124] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2822'. [ 526.211747][T16160] netlink: 'syz.1.2832': attribute type 10 has an invalid length. [ 526.327153][T16159] netlink: 'syz.1.2832': attribute type 10 has an invalid length. [ 526.426831][T16165] netlink: 'syz.2.2833': attribute type 10 has an invalid length. [ 526.490430][T16165] macvlan0: entered promiscuous mode [ 526.516119][T16165] macvlan0: entered allmulticast mode [ 526.539685][T16165] veth1_vlan: entered allmulticast mode [ 526.568055][T16165] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 526.632913][T16172] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 526.644317][T16165] netlink: 'syz.2.2833': attribute type 4 has an invalid length. [ 526.662567][T16165] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2833'. [ 526.760071][ T5771] Bluetooth: hci2: ISO packet for unknown connection handle 21 [ 526.776933][T16172] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 526.785808][T16176] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 526.811893][T16172] netlink: 'syz.3.2835': attribute type 29 has an invalid length. [ 527.211292][T16207] : renamed from virt_wifi0 [ 527.612857][T16215] : port 1(ip6gretap0) entered blocking state [ 527.639981][T16215] : port 1(ip6gretap0) entered disabled state [ 527.667426][T16215] ip6gretap0: entered allmulticast mode [ 527.690058][T16215] ip6gretap0: entered promiscuous mode [ 527.820154][T16221] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 527.827512][T16221] IPv6: NLM_F_CREATE should be set when creating new route [ 527.834812][T16221] IPv6: NLM_F_CREATE should be set when creating new route [ 527.842132][T16221] IPv6: NLM_F_CREATE should be set when creating new route [ 527.992748][T16224] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2850'. [ 528.413598][T16237] syzkaller0: entered promiscuous mode [ 528.426367][T16237] syzkaller0: entered allmulticast mode [ 531.522379][T16275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2862'. [ 531.531871][T16275] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2862'. [ 531.969763][T16274] delete_channel: no stack [ 532.122302][T16290] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.2865'. [ 532.143451][T16290] netlink: 6332 bytes leftover after parsing attributes in process `syz.1.2865'. [ 533.106633][T16306] validate_nla: 4 callbacks suppressed [ 533.106648][T16306] netlink: 'syz.0.2870': attribute type 10 has an invalid length. [ 533.120169][T16306] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2870'. [ 533.156200][T16306] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 533.443581][T16306] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 534.178584][T16314] syzkaller0: entered promiscuous mode [ 534.184232][T16314] syzkaller0: entered allmulticast mode [ 534.350378][T16342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2878'. [ 534.394378][T16328] syzkaller0: entered promiscuous mode [ 534.400272][T16328] syzkaller0: entered allmulticast mode [ 534.483786][T16349] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2880'. [ 536.043800][T16342] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2878'. [ 536.866779][T16368] syz.0.2886[16368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 536.867536][T16368] syz.0.2886[16368] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.160114][T16357] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 538.178082][T16357] syzkaller0: linktype set to 768 [ 538.187975][T16358] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2882'. [ 538.308383][T16375] C: renamed from team_slave_0 [ 538.317913][T16375] netlink: 'syz.2.2888': attribute type 3 has an invalid length. [ 538.333487][T16375] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2888'. [ 539.353706][T16419] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2902'. [ 539.534357][T16426] sctp: [Deprecated]: syz.2.2906 (pid 16426) Use of struct sctp_assoc_value in delayed_ack socket option. [ 539.534357][T16426] Use struct sctp_sack_info instead [ 539.604846][T16429] netlink: 182276 bytes leftover after parsing attributes in process `syz.3.2907'. [ 539.627893][T16429] openvswitch: netlink: Key type 29 is not supported [ 541.655961][T16458] syzkaller0: entered promiscuous mode [ 541.681841][T16458] syzkaller0: entered allmulticast mode [ 542.320268][T16467] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2918'. [ 542.357054][T16466] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.389878][T16467] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 542.508988][ T5771] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 542.511223][T16471] netlink: 184888 bytes leftover after parsing attributes in process `syz.0.2919'. [ 542.689113][T16473] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.2920'. [ 542.720112][T16473] netlink: 6328 bytes leftover after parsing attributes in process `syz.1.2920'. [ 542.837736][T16483] syz.3.2923[16483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 542.837951][T16483] syz.3.2923[16483] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 543.657460][T16508] IPv6: Can't replace route, no match found [ 543.771602][T16512] netlink: 'syz.0.2932': attribute type 8 has an invalid length. [ 543.888426][T16512] netlink: 'syz.0.2932': attribute type 1 has an invalid length. [ 543.925155][T16512] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.2932'. [ 544.707692][T16533] netlink: 'syz.2.2937': attribute type 10 has an invalid length. [ 544.738662][T16533] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.2937'. [ 545.278602][T16540] netlink: 'syz.0.2939': attribute type 10 has an invalid length. [ 545.362558][T16540] team0: Device ipvlan1 failed to register rx_handler [ 546.794774][ T5778] Bluetooth: hci2: unexpected event 0x07 length: 15 < 255 [ 546.813968][T16566] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2945'. [ 547.286291][T16574] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2948'. [ 547.487920][T16578] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2951'. [ 548.150222][T16591] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2956'. [ 548.360945][T16588] sctp: [Deprecated]: syz.2.2954 (pid 16588) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.360945][T16588] Use struct sctp_sack_info instead [ 548.425366][T16591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.500547][T16591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.563087][T16591] bond0 (unregistering): Released all slaves [ 548.613664][T16596] C: renamed from team_slave_0 (while UP) [ 548.634736][T16596] netlink: 'syz.0.2956': attribute type 3 has an invalid length. [ 548.651016][T16596] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2956'. [ 548.675882][T16581] netlink: 'syz.3.2952': attribute type 33 has an invalid length. [ 548.715250][T16581] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2952'. [ 548.789213][T16600] netlink: 'syz.1.2958': attribute type 1 has an invalid length. [ 548.811413][T16600] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2958'. [ 548.871718][T16605] netlink: 'syz.2.2959': attribute type 1 has an invalid length. [ 548.894840][T16605] netlink: 'syz.2.2959': attribute type 4 has an invalid length. [ 548.940996][T16605] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.2959'. [ 550.058809][T16628] netlink: 'syz.0.2965': attribute type 21 has an invalid length. [ 550.077244][T16628] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2965'. [ 550.407912][T16635] netlink: 'syz.1.2967': attribute type 2 has an invalid length. [ 550.697952][T16635] veth1_to_bond: entered allmulticast mode [ 551.151257][T16649] netlink: 'syz.2.2972': attribute type 1 has an invalid length. [ 551.177653][T16649] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.2972'. [ 551.196334][T16649] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2972'. [ 552.518446][ T5778] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 552.806453][T16697] netlink: 'syz.3.2983': attribute type 1 has an invalid length. [ 552.855007][T16697] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.2983'. [ 554.163736][T16729] netlink: 'syz.1.2992': attribute type 46 has an invalid length. [ 554.189527][T16729] netlink: 'syz.1.2992': attribute type 46 has an invalid length. [ 554.222733][T16729] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2992'. [ 554.730796][T16746] netlink: 'syz.2.2997': attribute type 3 has an invalid length. [ 554.739551][T16746] netlink: 'syz.2.2997': attribute type 1 has an invalid length. [ 555.090614][T16763] netlink: 'syz.1.3004': attribute type 1 has an invalid length. [ 555.106653][T16763] netlink: 'syz.1.3004': attribute type 4 has an invalid length. [ 555.124689][T16763] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.3004'. [ 555.560829][T16780] netlink: 'syz.1.3008': attribute type 21 has an invalid length. [ 555.575087][T16780] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3008'. [ 555.957713][T16794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3013'. [ 556.102216][T16794] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3013'. [ 556.324899][T16802] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.3014'. [ 556.439684][T16806] netlink: 'syz.2.3016': attribute type 3 has an invalid length. [ 556.448658][T16806] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.3016'. [ 556.734327][T16811] netlink: 'syz.2.3019': attribute type 9 has an invalid length. [ 556.774189][T16811] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3019'. [ 556.881448][T16812] netlink: 'syz.3.3018': attribute type 10 has an invalid length. [ 557.141139][T16818] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3019'. [ 557.184444][T16820] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.3020'. [ 557.311419][T16815] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 557.538826][T16825] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 558.218170][T16854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 559.965049][T16902] __nla_validate_parse: 8 callbacks suppressed [ 559.965068][T16902] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3046'. [ 560.675614][T16928] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 560.681600][T16928] syzkaller0: linktype set to 768 [ 561.195602][T16954] sit0: entered allmulticast mode [ 561.573879][T16961] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3058'. [ 561.590215][T16961] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 561.680321][T16969] validate_nla: 6 callbacks suppressed [ 561.680336][T16969] netlink: 'syz.2.3061': attribute type 3 has an invalid length. [ 561.694263][T16969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3061'. [ 561.700429][T16972] netlink: 'syz.3.3060': attribute type 21 has an invalid length. [ 561.715353][T16972] netlink: 'syz.3.3060': attribute type 3 has an invalid length. [ 561.723718][T16972] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3060'. [ 562.518710][T17000] netlink: 41903 bytes leftover after parsing attributes in process `syz.3.3068'. [ 562.656740][T17009] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.3073'. [ 562.997454][T17025] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3075'. [ 563.012078][T17027] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 563.018903][T17027] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 563.067088][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.073431][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.248361][T17025] netlink: 'syz.2.3075': attribute type 10 has an invalid length. [ 563.322374][T17025] netlink: 55 bytes leftover after parsing attributes in process `syz.2.3075'. [ 564.004331][T17059] netlink: 'syz.0.3087': attribute type 21 has an invalid length. [ 564.652795][T17081] netlink: 'syz.1.3095': attribute type 10 has an invalid length. [ 564.754680][T17081] team0: Port device hsr_slave_0 added [ 565.030300][T17089] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 565.045648][T17089] mac80211_hwsim hwsim23 wlan1: entered allmulticast mode [ 565.095171][T17028] Bluetooth: hci0: command 0x0406 tx timeout [ 566.049108][T17116] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3103'. [ 566.124118][T17116] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.681944][T17138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3112'. [ 567.735148][T17138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3112'. [ 567.765848][T17141] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3112'. [ 567.796160][T17138] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3112'. [ 568.925268][ T6970] wlan1: Trigger new scan to find an IBSS to join [ 569.945633][T17174] netlink: 'syz.3.3121': attribute type 10 has an invalid length. [ 573.055780][T17205] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3132'. [ 573.227086][T17213] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3135'. [ 573.258882][T17213] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 573.468934][T17231] netlink: 'syz.2.3137': attribute type 10 has an invalid length. [ 573.789950][T17230] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3138'. [ 573.813859][T17230] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 573.854066][T17230] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 573.984426][ T7306] wlan1: Trigger new scan to find an IBSS to join [ 575.195194][T17231] bond0: (slave macvlan0): Releasing backup interface [ 575.202062][ T12] wlan1: Creating new IBSS network, BSSID 8a:ae:33:7a:cb:ae [ 575.219591][T17231] veth1_vlan: left allmulticast mode [ 575.228743][T17231] veth1_vlan: entered allmulticast mode [ 575.253042][T17231] team0: Port device macvlan0 added [ 575.575317][T17252] netlink: 'syz.1.3144': attribute type 10 has an invalid length. [ 575.840046][T17252] team0 (unregistering): Port device C removed [ 575.911451][T17252] team0 (unregistering): Port device team_slave_1 removed [ 575.972743][T17252] team0 (unregistering): Port device geneve1 removed [ 576.016317][T17252] team0 (unregistering): Port device macvlan0 removed [ 576.061246][T17252] team0 (unregistering): Port device hsr_slave_0 removed [ 576.597495][T17276] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3151'. [ 576.696509][T17276] netlink: 'syz.1.3151': attribute type 3 has an invalid length. [ 576.732203][T17276] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.3151'. [ 576.837417][T17286] netlink: 'syz.0.3154': attribute type 10 has an invalid length. [ 576.887824][T17286] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3154'. [ 577.146018][T17284] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3153'. [ 580.445413][T17028] Bluetooth: hci2: command 0x0406 tx timeout [ 581.792417][T17340] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3169'. [ 582.591797][T17340] sit0: left promiscuous mode [ 582.689576][T17342] sit0: entered promiscuous mode [ 582.770703][T17349] netlink: 'syz.2.3172': attribute type 2 has an invalid length. [ 582.789482][T17349] netlink: 'syz.2.3172': attribute type 8 has an invalid length. [ 582.825670][T17349] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3172'. [ 584.013021][T17382] tc_dump_action: action bad kind [ 584.341511][T17394] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 584.362122][ T5778] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 584.372225][T17394] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 584.482142][T17400] netlink: 'syz.1.3186': attribute type 29 has an invalid length. [ 584.686736][T17410] netlink: 'syz.3.3191': attribute type 3 has an invalid length. [ 585.019207][T17417] netlink: 'syz.0.3194': attribute type 10 has an invalid length. [ 585.537140][T17424] netlink: 'syz.2.3197': attribute type 2 has an invalid length. [ 585.565237][T17424] netlink: 'syz.2.3197': attribute type 1 has an invalid length. [ 585.585472][T17424] netlink: 9 bytes leftover after parsing attributes in process `syz.2.3197'. [ 585.585960][T17428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3196'. [ 585.665129][T17425] netlink: 'syz.3.3196': attribute type 2 has an invalid length. [ 585.695076][T17425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3196'. [ 586.340923][T17439] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.3202'. [ 586.374030][T17439] openvswitch: netlink: Flow key attr not present in new flow. [ 586.606963][T17442] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3203'. [ 586.783749][T17448] N: renamed from bond_slave_0 (while UP) [ 586.832276][T17450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3206'. [ 586.859333][T17450] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 587.101629][T17469] netlink: 209784 bytes leftover after parsing attributes in process `syz.2.3208'. [ 587.123051][T17465] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3210'. [ 587.159808][T17465] batadv_slave_1: entered promiscuous mode [ 587.179951][T17465] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.188221][T17465] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.991576][T17492] validate_nla: 4 callbacks suppressed [ 587.991593][T17492] netlink: 'syz.2.3218': attribute type 21 has an invalid length. [ 588.046384][T17492] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3218'. [ 588.082085][T17492] netlink: 'syz.2.3218': attribute type 4 has an invalid length. [ 588.093394][T17492] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3218'. [ 588.479194][T17513] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3226'. [ 589.551627][T17544] netlink: 'syz.0.3232': attribute type 9 has an invalid length. [ 589.565434][T17544] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3232'. [ 590.377620][T17574] netlink: 'syz.3.3242': attribute type 14 has an invalid length. [ 590.391887][T17572] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3243'. [ 590.395737][T17574] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.3242'. [ 590.430571][T17575] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.3243'. [ 590.755833][T17594] netlink: 'syz.1.3249': attribute type 19 has an invalid length. [ 590.972297][T17602] ref_ctr_offset mismatch. inode: 0x4ca offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 591.377415][ T5778] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 591.501460][T17620] netlink: 'syz.3.3258': attribute type 10 has an invalid length. [ 591.637426][T17626] netlink: 'syz.0.3259': attribute type 10 has an invalid length. [ 592.060361][T17626] macvlan0: entered promiscuous mode [ 592.066262][T17626] macvlan0: entered allmulticast mode [ 592.188785][T17621] syzkaller0: entered promiscuous mode [ 592.204659][T17621] syzkaller0: entered allmulticast mode [ 592.216016][T17632] netlink: 'syz.0.3259': attribute type 4 has an invalid length. [ 592.260092][T17632] __nla_validate_parse: 3 callbacks suppressed [ 592.260109][T17632] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3259'. [ 594.203254][T17649] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3263'. [ 594.360441][T17653] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3265'. [ 594.398879][T17653] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 594.568537][T17665] netlink: 'syz.1.3268': attribute type 4 has an invalid length. [ 594.605114][T17665] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3268'. [ 594.622278][T17667] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.3270'. [ 594.649134][T17667] openvswitch: netlink: IP tunnel dst address not specified [ 595.501490][T17028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 595.513902][T17028] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 595.523896][T17028] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 595.533223][T17028] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 595.541716][T17028] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 595.557045][T17028] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 595.583551][ T6370] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.748342][ T6370] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.937297][ T6370] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.959983][T17689] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 596.096123][ T6370] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.237804][T17703] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3283'. [ 596.280188][T17684] chnl_net:caif_netlink_parms(): no params data found [ 596.544342][T17684] bridge0: port 1(bridge_slave_0) entered blocking state [ 596.558680][T17684] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.570768][T17684] bridge_slave_0: entered allmulticast mode [ 596.578314][T17684] bridge_slave_0: entered promiscuous mode [ 596.641055][T17684] bridge0: port 2(bridge_slave_1) entered blocking state [ 596.679192][T17684] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.699855][T17684] bridge_slave_1: entered allmulticast mode [ 596.719970][T17684] bridge_slave_1: entered promiscuous mode [ 596.863479][T17684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 596.902597][T17684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.007244][T17684] team0: Port device team_slave_0 added [ 597.041345][T17684] team0: Port device team_slave_1 added [ 597.126321][T17684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.155410][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.209442][T17733] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.3287'. [ 597.230793][T17684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.272626][T17684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.282638][T17684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.312094][T17684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.372439][T17733] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 597.645606][ T5778] Bluetooth: hci3: command tx timeout [ 599.735990][T17028] Bluetooth: hci3: command tx timeout [ 600.007404][T17684] hsr_slave_0: entered promiscuous mode [ 600.017807][T17684] hsr_slave_1: entered promiscuous mode [ 600.035118][T17684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 600.042722][T17684] Cannot create hsr debugfs directory [ 600.926831][T17028] Bluetooth: hci4: command 0x0406 tx timeout [ 601.816334][ T5778] Bluetooth: hci3: command tx timeout [ 602.223818][T17684] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 602.263236][T17684] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 602.284857][T17684] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 602.346451][T17684] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 602.874911][T17684] 8021q: adding VLAN 0 to HW filter on device bond0 [ 603.062428][T17684] 8021q: adding VLAN 0 to HW filter on device team0 [ 603.116049][ T6970] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.123277][ T6970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 603.271092][ T6370] veth0_macvtap: left promiscuous mode [ 603.294406][ T6370] veth1_vlan: left promiscuous mode [ 603.301506][ T6370] veth0_vlan: left promiscuous mode [ 603.889114][ T5778] Bluetooth: hci3: command tx timeout [ 604.582006][ T7312] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.589240][ T7312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 604.904166][T17853] netlink: 'syz.3.3305': attribute type 9 has an invalid length. [ 604.943227][T17853] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.3305'. [ 605.156122][T17855] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3306'. [ 605.271869][T17684] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.498396][T17684] veth0_vlan: entered promiscuous mode [ 605.549891][T17684] veth1_vlan: entered promiscuous mode [ 605.600670][T17879] netlink: 'syz.2.3310': attribute type 10 has an invalid length. [ 605.628609][T17879] team0: Device hsr_slave_0 failed to register rx_handler [ 605.751668][T17684] veth0_macvtap: entered promiscuous mode [ 605.790806][T17684] veth1_macvtap: entered promiscuous mode [ 605.861545][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.885630][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.913721][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 605.949187][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 605.977845][T17684] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 605.999724][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.014752][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.112171][T17684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 606.170666][T17684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 606.204037][T17684] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.327108][T17684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.402661][T17684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.463033][T17684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.479430][T17684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.905596][ T7306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 606.913462][ T7306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.117991][ T2119] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.166560][ T2119] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 607.441835][T17918] netlink: 'syz.1.3273': attribute type 64 has an invalid length. [ 607.585424][T17922] netlink: 'syz.2.3316': attribute type 9 has an invalid length. [ 607.603937][T17922] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.3316'. [ 607.761709][T17926] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3317'. [ 608.361775][T17938] netlink: 'syz.3.3321': attribute type 12 has an invalid length. [ 608.378219][T17938] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3321'. [ 608.606239][T17941] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3323'. [ 608.701849][T17941] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3323'. [ 609.229225][T17949] netlink: 'syz.1.3324': attribute type 10 has an invalid length. [ 609.433000][T17955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3327'. [ 609.455159][T17955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3327'. [ 609.484212][T17955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3327'. [ 610.454304][T17989] delete_channel: no stack [ 610.559282][T17997] netlink: 'syz.3.3336': attribute type 10 has an invalid length. [ 610.568405][T17997] __nla_validate_parse: 1 callbacks suppressed [ 610.568418][T17997] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3336'. [ 610.586701][T17997] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 610.994754][T18005] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.3337'. [ 611.043993][T18015] netlink: 'syz.2.3338': attribute type 21 has an invalid length. [ 611.062488][T18015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3338'. [ 611.078492][T18015] netlink: 'syz.2.3338': attribute type 4 has an invalid length. [ 611.089244][T18013] netlink: 'syz.0.3340': attribute type 10 has an invalid length. [ 611.156450][T18013] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3340'. [ 612.115128][T18058] netlink: 'syz.2.3357': attribute type 4 has an invalid length. [ 612.170850][T18058] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3357'. [ 612.323538][T18058] .`: renamed from bond0 (while UP) [ 613.014258][T18070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3351'. [ 613.488541][T18070] netlink: 'syz.0.3351': attribute type 12 has an invalid length. [ 613.561233][T18070] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3351'. [ 614.083756][T18092] netlink: 'syz.2.3356': attribute type 10 has an invalid length. [ 614.098671][T18092] team0: Port device netdevsim0 added [ 615.070175][T18122] netlink: 'syz.3.3366': attribute type 12 has an invalid length. [ 615.078762][T18122] netlink: 197276 bytes leftover after parsing attributes in process `syz.3.3366'. [ 615.233078][T18129] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.3368'. [ 616.162510][T18163] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3377'. [ 616.746659][T18168] netlink: 'syz.2.3378': attribute type 6 has an invalid length. [ 616.765941][T18168] netlink: 164 bytes leftover after parsing attributes in process `syz.2.3378'. [ 617.479151][T18176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3380'. [ 617.532404][T18176] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3380'. [ 618.255673][T18175] delete_channel: no stack [ 618.355503][T18189] mac80211_hwsim hwsim43 wlan1: entered promiscuous mode [ 618.398039][T18189] mac80211_hwsim hwsim43 wlan1: entered allmulticast mode [ 618.500381][T18196] netlink: 'syz.0.3385': attribute type 39 has an invalid length. [ 619.214494][T18198] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.3386'. [ 619.471947][T18203] netlink: 'syz.0.3389': attribute type 10 has an invalid length. [ 620.554387][ C0] [ 620.554396][ C0] ================================ [ 620.554402][ C0] WARNING: inconsistent lock state [ 620.554419][ C0] syzkaller #0 Not tainted [ 620.554427][ C0] -------------------------------- [ 620.554431][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 620.554438][ C0] syz.2.3394/18223 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 620.554455][ C0] ffff88805b702a18 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 620.554504][ C0] {INITIAL USE} state was registered at: [ 620.554510][ C0] lock_acquire+0x19e/0x420 [ 620.554528][ C0] _raw_spin_lock+0x2e/0x40 [ 620.554549][ C0] htab_lock_bucket+0x17d/0x300 [ 620.554563][ C0] htab_map_update_elem+0x229/0x1040 [ 620.554578][ C0] bpf_map_update_value+0x660/0x720 [ 620.554593][ C0] generic_map_update_batch+0x5ec/0x810 [ 620.554606][ C0] bpf_map_do_batch+0x3d7/0x610 [ 620.554622][ C0] __sys_bpf+0x381/0x890 [ 620.554636][ C0] __x64_sys_bpf+0x7c/0x90 [ 620.554649][ C0] do_syscall_64+0x55/0xb0 [ 620.554666][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.554686][ C0] irq event stamp: 1132 [ 620.554691][ C0] hardirqs last enabled at (1131): [] pcpu_memcg_post_alloc_hook+0x282/0x3f0 [ 620.554715][ C0] hardirqs last disabled at (1132): [] exc_debug+0x73/0x140 [ 620.554735][ C0] softirqs last enabled at (1046): [] bpf_map_alloc_id+0x87/0xd0 [ 620.554755][ C0] softirqs last disabled at (1044): [] bpf_map_alloc_id+0x21/0xd0 [ 620.554775][ C0] [ 620.554775][ C0] other info that might help us debug this: [ 620.554779][ C0] Possible unsafe locking scenario: [ 620.554779][ C0] [ 620.554783][ C0] CPU0 [ 620.554786][ C0] ---- [ 620.554789][ C0] lock(&htab->lockdep_key); [ 620.554805][ C0] [ 620.554808][ C0] lock(&htab->lockdep_key); [ 620.554818][ C0] [ 620.554818][ C0] *** DEADLOCK *** [ 620.554818][ C0] [ 620.554821][ C0] no locks held by syz.2.3394/18223. [ 620.554829][ C0] [ 620.554829][ C0] stack backtrace: [ 620.554834][ C0] CPU: 0 PID: 18223 Comm: syz.2.3394 Not tainted syzkaller #0 [ 620.554849][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 620.554858][ C0] Call Trace: [ 620.554864][ C0] <#DB> [ 620.554871][ C0] dump_stack_lvl+0x18c/0x250 [ 620.554893][ C0] ? show_regs_print_info+0x20/0x20 [ 620.554922][ C0] ? print_usage_bug+0x475/0x690 [ 620.554938][ C0] ? verify_lock_unused+0x18/0x140 [ 620.554959][ C0] lock_acquire+0x2c2/0x420 [ 620.554977][ C0] ? check_vma_flags+0x5b0/0x5b0 [ 620.555001][ C0] ? htab_lock_bucket+0x17d/0x300 [ 620.555021][ C0] ? read_lock_is_recursive+0x20/0x20 [ 620.555042][ C0] ? internal_get_user_pages_fast+0x214e/0x2760 [ 620.555070][ C0] _raw_spin_lock+0x2e/0x40 [ 620.555088][ C0] ? htab_lock_bucket+0x17d/0x300 [ 620.555105][ C0] htab_lock_bucket+0x17d/0x300 [ 620.555126][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 620.555144][ C0] ? look_up_lock_class+0x75/0x140 [ 620.555168][ C0] ? verify_lock_unused+0x18/0x140 [ 620.555187][ C0] ? htab_map_hash+0x1d7/0x330 [ 620.555207][ C0] htab_map_delete_elem+0x1a4/0x650 [ 620.555231][ C0] ? htab_map_update_elem+0x1040/0x1040 [ 620.555246][ C0] ? rcu_is_watching+0x15/0xb0 [ 620.555267][ C0] ? perf_callchain+0x220/0x220 [ 620.555282][ C0] ? lock_release+0xb5/0x8c0 [ 620.555308][ C0] bpf_prog_2c29ac5cdc6b1842+0x42/0x46 [ 620.555328][ C0] bpf_overflow_handler+0x1fc/0x510 [ 620.555355][ C0] ? bpf_overflow_handler+0xde/0x510 [ 620.555377][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 620.555406][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 620.555429][ C0] __perf_event_overflow+0x447/0x630 [ 620.555456][ C0] perf_swevent_overflow+0x268/0x340 [ 620.555481][ C0] ? perf_event_switch_output+0x790/0x790 [ 620.555503][ C0] ? __perf_event_overflow+0x4f8/0x630 [ 620.555529][ C0] perf_swevent_event+0x45c/0x570 [ 620.555550][ C0] ? perf_tp_event+0x1520/0x1520 [ 620.555569][ C0] ? perf_trace_lock+0xfc/0x3b0 [ 620.555594][ C0] perf_bp_event+0x319/0x430 [ 620.555611][ C0] ? look_up_lock_class+0x75/0x140 [ 620.555638][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 620.555655][ C0] ? rcu_is_watching+0x15/0xb0 [ 620.555675][ C0] ? lock_release+0xb5/0x8c0 [ 620.555722][ C0] ? lock_acquire+0x2c2/0x420 [ 620.555749][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 620.555816][ C0] notifier_call_chain+0x197/0x380 [ 620.555846][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 620.555868][ C0] atomic_notifier_call_chain+0xda/0x180 [ 620.555890][ C0] notify_die+0x145/0x1a0 [ 620.555914][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 620.555943][ C0] ? rcu_is_watching+0x15/0xb0 [ 620.555965][ C0] notify_debug+0x2e/0x50 [ 620.555998][ C0] exc_debug+0xde/0x140 [ 620.556021][ C0] asm_exc_debug+0x1e/0x40 [ 620.556042][ C0] RIP: 0010:strncpy_from_user+0x103/0x2d0 [ 620.556063][ C0] Code: 53 2e 2a fd 49 83 fd 07 0f 86 a1 00 00 00 4c 89 74 24 08 48 c7 44 24 10 f8 ff ff ff 45 31 e4 4c 89 3c 24 49 89 de 4f 8b 3c 27 <48> b8 ff fe fe fe fe fe fe fe 49 8d 1c 07 4c 89 fd 48 f7 d5 48 b8 [ 620.556076][ C0] RSP: 0018:ffffc9000b8ffb50 EFLAGS: 00040246 [ 620.556090][ C0] RAX: ffffffff845d01dd RBX: ffffc9000b8ffc70 RCX: ffff888021498000 [ 620.556101][ C0] RDX: 0000000000000002 RSI: 000000000000007f RDI: 0000000000000007 [ 620.556111][ C0] RBP: ffffc9000b8ffd70 R08: ffff888021498000 R09: 0000000000000003 [ 620.556122][ C0] R10: 0000000000000002 R11: 0000000000000002 R12: 0000000000000000 [ 620.556131][ C0] R13: 000000000000007f R14: ffffc9000b8ffc70 R15: 00006370004c5047 [ 620.556151][ C0] ? strncpy_from_user+0xdd/0x2d0 [ 620.556176][ C0] [ 620.556181][ C0] [ 620.556193][ C0] bpf_prog_load+0xcea/0x1670 [ 620.556223][ C0] ? map_freeze+0x420/0x420 [ 620.556258][ C0] ? __might_fault+0xaa/0x120 [ 620.556274][ C0] ? __might_fault+0xc6/0x120 [ 620.556288][ C0] ? __might_fault+0xaa/0x120 [ 620.556304][ C0] ? bpf_lsm_bpf+0x9/0x10 [ 620.556324][ C0] ? security_bpf+0x7e/0xa0 [ 620.556347][ C0] __sys_bpf+0x5ba/0x890 [ 620.556367][ C0] ? bpf_link_show_fdinfo+0x390/0x390 [ 620.556401][ C0] ? lock_chain_count+0x20/0x20 [ 620.556429][ C0] __x64_sys_bpf+0x7c/0x90 [ 620.556447][ C0] do_syscall_64+0x55/0xb0 [ 620.556463][ C0] ? clear_bhb_loop+0x40/0x90 [ 620.556483][ C0] ? clear_bhb_loop+0x40/0x90 [ 620.556506][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 620.556526][ C0] RIP: 0033:0x7f13b319ce59 [ 620.556540][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.556552][ C0] RSP: 002b:00007f13b4015028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.556567][ C0] RAX: ffffffffffffffda RBX: 00007f13b3416090 RCX: 00007f13b319ce59 [ 620.556579][ C0] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 620.556589][ C0] RBP: 00007f13b3232d6f R08: 0000000000000000 R09: 0000000000000000 [ 620.556599][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.556608][ C0] R13: 00007f13b3416128 R14: 00007f13b3416090 R15: 00007ffc604baf78 [ 620.556636][ C0] [ 624.448467][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.454783][ T1290] ieee802154 phy1 wpan1: encryption failed: -22