last executing test programs: 19.977604154s ago: executing program 3 (id=2343): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x49, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9f4d4938037e70e4509c5bb5b64f69853362ac3407173ec", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r1, 0x0, 0x2020) recvmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x40010002) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={0x1, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@ifindex=r2, 0xb, 0x1, 0x200, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/10], 0x50) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x8084) r4 = socket$kcm(0x23, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x24008020) sendmsg$sock(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000001c0)=@un=@abs={0x1, 0x0, 0x4e23}, 0x80, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000240)="44ee5ed78fe1ef6cb49c583a76a154cf", 0x10}], 0x2}, 0x40000) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000000)=@phonet, 0x80, 0x0}, 0x0) socketpair(0x22, 0x2, 0x3, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100"], 0x17) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x63, 0x0, 0x0, 0x9, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={&(0x7f0000000300), 0xd}, 0x100202, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x23, 0x0, 0x0, 0x0, 0x637b}, 0x0, 0x2, 0xffffffffffffffff, 0x0) 15.586625641s ago: executing program 3 (id=2345): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18bec893d100000000000000000000000000000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) 14.612819522s ago: executing program 3 (id=2352): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x135, 0x7b, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r1, &(0x7f0000000000), 0x0}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\x00') 13.895685044s ago: executing program 3 (id=2354): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b9040a1d08020a000000041296a1180002000000000000000e1208000f0100810401a8001600200001400300", 0x3a}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x891c, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc008000200070002000600", 0x2e}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000840) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xb, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000694d0f00000000008510000002000000850000000500000095004800000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0xc, 0xc3, &(0x7f0000000940)=""/195, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x21) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000540)=""/240, 0xf0}, {&(0x7f0000000640)=""/221, 0xdd}, {&(0x7f0000000740)=""/31, 0x1f}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000a40)=""/77, 0x4d}], 0x6, &(0x7f0000000b40)=""/85, 0x55}, 0x21) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a600e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000ffffffff"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00}, 0x94) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000001000)="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", 0x118}, {&(0x7f0000000c00)="887c6f4169bd9c00fed34ed5aca9798d4421626131eb6a6849dbaccc97bfd7beed8b23756993a20451522b504b834f2bfe778889489fa21c63f1ea3256ce0463fb8413382e7855f7a1ed2c327f7c096d3a1cfbc8cf3876f33f484447ead2d68afe81a42cd850b29476a5685f1c358f15cf9facc92c3a361b345693f14d29ba5c6093a23e9dc3a29c2227ad526f0ad2226c01cbc76a3efc12f718119d5d259f90a1b5fc5b5802cf4fa0dfe15275d285b835b00459ad74624ba51e7e805060524c756250d8d07f27c14118ce05d42fec", 0xcf}, {&(0x7f0000000d00)="500f80b43e9ae7970449a84037e26500000000c346baded1293d47b3dfd39ea22fdc86d6d6c7f58d7f4f36f3808ebe55d9970d57983bf313326b05ab1c0dfb8f6460b855b5f4274fc8df6c0500002b4cfb000000000048e84760cabe3800"/106, 0x6a}, {&(0x7f0000000f40)="eb6768428892a82057a7506add878f418e81b199656b03000000000000dff45d4fd644d35d6b1098bcaf5c4d58dd517a389720a906caabbdb9ddecc1b08ac72c2a6c3b8855e640022ca569668cf63d602543b5e6e0c277407eb220eb0ccdbc75b63c935db8f0d304be09c2e14dc4d0bee36cfd207670bbf3596367449e24a88aa401272dd0dabbc53b9cae1adbeae0d4a5747be181eb74000000000000000000", 0xa0}, {&(0x7f0000000d80)="0d3728d0130f2c0ee2a5653b41f24c29e71058aff990c2a775c3c1764b3ae7fa7632bfb725de930643be47c1dca0ac069b891c5188cfe36ed465d6555a5f4cc3c0158036888b7a3dd447a803000634c92ddd738190050b1b770bd5ea8352e16218b91c5baf07938298f6a77adf12d8be31b389d267720000cfebfa5bd1bfbcce11dcd1730325e8eb0fea668fe473475922b3fa0bbd7fa38fd1c84f24a5bbb83400"/174, 0xae}], 0x5}, 0x40841) 13.04798554s ago: executing program 3 (id=2356): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="d8000000580081044e81f782db44b904021d080009000200df55a1180015000600142603600e120900210000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7ce5e61fd3acff96ceec14f80080000000000000048ee4bf3b6e0d869d8dc531f4d1030547aa25de38d1c77d5ab0500132afde1da60d6318e627abae3b924ae1f8c828e38f4125292761f3f16288f98aec5d7d283696d596878b5cf1249d18526d44ed41109b1158c7eeaeabcbd67", 0xd8}], 0x1}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 10.900305988s ago: executing program 3 (id=2357): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002480)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8921, &(0x7f0000000900)={'wlan1\x00', @random="0e65925bf900"}) socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 6.582311134s ago: executing program 2 (id=2377): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x5, 0x1ff001, 0x135, 0x7b, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xf, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f00000007c0)={r1, &(0x7f0000000000), 0x0}, 0x20) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100)=0x8000000000000000, 0x12) ioctl$SIOCSIFHWADDR(r4, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000380)='\'\x00') 5.831495707s ago: executing program 0 (id=2379): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b000008050000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000300)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="0180000000001e8fb96e00000000001811083c0b698832d0653192553a5bb4e63827c8924cf18454d589556cc7c55ff752f6e71625417375b7e6b6d42451f8179d90a766befb2485df033a7b53f14e09ccdc72a5d254f32ec745057788baea8ab15b537b4e4a33389d5d55b355b61770d4d9dee85922a6fe9e4d61377c9cb34d47ffba60bf3e344bdd", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000100000085000000030000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000280)={r3, r0}, 0x4) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x4, 0x4, 0x12, 0x8, 0xffffffffffffffff, 0x3}, 0x50) (rerun: 64) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000100)={0xffffffffffffffff, r4}, 0xc) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r4, @ANYRES32, @ANYBLOB="05"], 0x10) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) (async, rerun: 32) r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (rerun: 32) r7 = openat$cgroup_devices(r6, 0x0, 0x2, 0x0) write$cgroup_devices(r7, 0x0, 0x9) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000080040000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b703000000000000850000000f000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="d7000000200000007911b800000000001801000020646c2500000000002020207b18f8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000700000085000000060000009500740000000000ef5f6082e4a0a52b72bde925efe35e0c28542f1716572a77c3939e085958131eb5d6ab7a69e1a83a4c8354fce7a66fe529cf5d06f6010e13c72fe2174e984706fbb446efe6271a62fc1c495beb391ce3ca6f852a3a36ecf9c5"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x18, &(0x7f000000cf3d)=""/195, 0x0, 0xc, '\x00', 0x0, @fallback=0xd}, 0x59) (async, rerun: 64) socket$kcm(0x2, 0x5, 0x84) (async, rerun: 64) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0x2000000000000216, &(0x7f0000000480)=ANY=[@ANYRESHEX=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r11, &(0x7f0000000000)=ANY=[@ANYBLOB='c *:4\tw', @ANYRESHEX=r11], 0xa) (async, rerun: 64) perf_event_open(&(0x7f00000003c0)={0x0, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0xb0000}, 0x15408, 0x0, 0x0, 0x0, 0x8, 0x3, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (rerun: 64) 5.830340737s ago: executing program 1 (id=2387): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x7, 0x4, 0x2}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x3, 0x4, 0x4, 0xbf22}, 0x48) socketpair(0xa, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xfb1585202ff31891}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e002900", 0x24}, {&(0x7f0000000080)="37eebf67e624ab8c623291", 0xb}], 0x2}, 0x0) r10 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x891a, &(0x7f0000000440)) ioctl$TUNSETSTEERINGEBPF(r6, 0x800454e0, &(0x7f0000000300)=r8) write$cgroup_devices(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 5.685314131s ago: executing program 2 (id=2380): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x40, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x8}, 0x8000, 0x5, 0x43a1bd74, 0x7, 0x9, 0x6, 0x2, 0x0, 0xfffffffd, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x8000000000000000, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$kcm(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305828, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="e5450000120091ef"], 0xfe33) socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r2) write$cgroup_subtree(r0, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.502533757s ago: executing program 0 (id=2381): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x40820) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x10001, 0x0, 0xfffffffc, 0x5}, {0x2}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x6e, &(0x7f0000000000)=r5, 0x20) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x22, &(0x7f0000000000)=r9, 0x10) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) close(0xffffffffffffffff) r11 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000a020011000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c4", 0x45}], 0x1}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x16, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000024}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r1, 0x0, 0x83, 0x25, &(0x7f0000000240)="35a0af28fbdf23e63167ae332799ae7624ee051ec01ded3e65f4d9a72746079b68f7768d51b0131ad1eb0c58c44a0ee8b57462bc2391ad68a283279daf944f23192bce43dc776f3106c888d80453150db11ad73775330f3324534dacd24daa0914f9183223982ecefcc2acf15f9901a38b3e7377d6dbd99fc3158da12a9e3f29e4bcaf", &(0x7f0000000380)=""/37, 0xffff7fff, 0x0, 0xd3, 0xb7, &(0x7f0000000500)="95341ec5eb489b5bcddcb6eb7e2af1323d9ff3560a5fb6dbe161d0fa153a2d5e3268017b1ef2d23a1430233a3ed06f204cfc30606450f3758173864fd93769519212eed29ff28b651874e8defdc9e36ebf2885e5b92fec51edc5acc57596f7cd367ad74a64c81dc2aaaa4124572fef2601f03dbbef5936cae48dbefdc8c31366befd2f69d089058139106b8608cc7ed073a6d12c3e2d834d9535a438fb6ab45ce2b8476767858f0de04512f517c2aa6bb7cba84c1d1cd9bf893548beab0f8edbcce84b1f229414152aa83b6fc73dc6be2efc6d", &(0x7f0000000940)="c515486ca4b5d2c2fcca06943f1f1399d092c41ee6b3ad13e83aeafa2400fdfa34dc249ceaa08891ca7cc8861379a443b8e79929384c8efffc8f86336d4f5a11a7dde5ae5794156888fcea59138a01c507a9715941000375c445c5e0c942e40f40163bcf132bea36823ae313ba48a84ceea0c9a25edc29a340706d40949f16e566aad813e9f838066c53c67b5fdab434b749d9d5fb4c759e92d6f01cac3ef998f0b77020cf2f2a76f00c144055329497807dd17ff5b573", 0x1, 0x0, 0x7fff}, 0x50) socket$kcm(0xa, 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) 2.420286404s ago: executing program 1 (id=2382): perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={&(0x7f0000000040), 0x1}, 0x8000, 0xce1, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x6, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x5, 0x5, &(0x7f0000000c80)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x82, &(0x7f0000000180), 0x127) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x50}, 0x48) r4 = socket$kcm(0x2, 0x5, 0x84) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000), 0x10) r5 = getpid() r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x677e, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x6, 0x0, r6, 0x72, '\x00', 0x0, r7, 0x5}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa7, 0xf2, 0x10, 0x2, 0x0, 0x0, 0xa1100, 0xe1a7d742b0ec2988, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x80000002, 0x2, @perf_config_ext={0x4, 0x1}, 0xd12, 0x8, 0x2, 0x2, 0x3bd, 0x0, 0xe, 0x0, 0x79, 0x0, 0x4}, r5, 0x5, r3, 0x1) sendmsg$inet(r4, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r4) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8b0b, 0x0) 2.419880654s ago: executing program 2 (id=2383): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (rerun: 64) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18bec893d100000000000000000000000000000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (rerun: 32) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) (async, rerun: 64) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x465e, 0x4, 0x3fe, 0x80000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x1, 0x106) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x86dd, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async, rerun: 64) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 64) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r4, 0x4010744d, &(0x7f0000000180)) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) 2.413087844s ago: executing program 0 (id=2391): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002480)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8921, &(0x7f0000000900)={'wlan1\x00', @random="0e65925bf900"}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 2.055578916s ago: executing program 2 (id=2385): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000100)=r1) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000080)}) 1.805708463s ago: executing program 0 (id=2386): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="18bec893d100000000000000000000000000000071123100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a1, &(0x7f0000000080)) 1.58561342s ago: executing program 1 (id=2388): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0xa, [@union={0xc, 0x7, 0x0, 0x5, 0x0, 0x60039e53, [{0x8, 0x0, 0x80000000}, {0xf, 0x4, 0x200}, {0x6, 0x0, 0x6}, {0xd, 0x4, 0x7}, {0xa, 0x5, 0x2}, {0x8, 0x5, 0x7}, {0xc, 0x4, 0x81}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x2}, @fwd={0x9}, @enum={0xe, 0x3, 0x0, 0x6, 0x4, [{0x3, 0x3}, {0x9, 0x2}, {0xb, 0xce3a}]}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @type_tag={0xf, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x2e, 0x0, 0x30, 0x30, 0x5f, 0x30, 0x0, 0x0]}}, &(0x7f0000000880)=""/27, 0xd6, 0x1b, 0x1, 0x5, 0x10000, @value=r0}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r3 = gettid() sendmsg$unix(r2, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0x38, 0x800}, 0x40800) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) sendmsg$inet(r4, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.410541096s ago: executing program 2 (id=2389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c1c800aac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r3, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0xc, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x3a, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x5, 0x0, r0, 0x7, '\x00', r5, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) 789.110025ms ago: executing program 0 (id=2390): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x40, 0x8}, 0x10a410, 0x3, 0x43a1bd76, 0x7, 0x7, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x200c8000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000000000}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff808500000004"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea018512babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7acbf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000005d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd353646000000000000000000002b0000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c30180000000000000c03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3e16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e2e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54ae54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db55474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1386f5800"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x18000000000002a0, 0x46, 0x0, &(0x7f0000000000)="b9fa030711a5f32e019e14f088a847e0ffff00124000632177fbac141416e000030a94029f03035ab130ebde34e98186896ba8b5297b1840bbb17b001f3258556af650b8fddb", 0x0, 0xffffeffc, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 702.086848ms ago: executing program 1 (id=2392): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c000000210000000200000008000000040000840700000004000000000000008200000007000000010000000600000048000000050000002b0f0000000400000000000007"], 0x0, 0x56}, 0x20) r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="d8000000200081044e81f782db44b90402200000e8fe450f55a1180015000600142603600e120900100000000401a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef52b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4d180a54f14f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace91ed0bffd6e4edef3d93452a92954b43370e00"/216, 0xd8}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="600000001e007f109e", 0x2a}, {&(0x7f0000000140)="78cafb73fc02010700000000ef02258f2e440ab8f9e6aaeb1ae2f6e8bcb5ee52dc06b6c9ad11cb5dbc249798093c5102a1bca0b6050000004f6e6b788b3219c233e60ddc36024a99a63e7238fe9f9b06f96137c8af12b6", 0x98}], 0x2}, 0x4000000) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000000)={r0}) 498.696654ms ago: executing program 2 (id=2393): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c40)={@ifindex, 0xffffffffffffffff, 0x2}, 0x20) (rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r2}, 0x8) write$cgroup_int(r3, &(0x7f00000001c0), 0xfffffdef) (async) write$cgroup_int(r3, &(0x7f0000000300)=0x5, 0x12) 356.333759ms ago: executing program 0 (id=2394): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0xc69a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x28, 0x4, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x24, r2}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r5}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8941, 0x0) 249.914732ms ago: executing program 1 (id=2395): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002480)=ANY=[@ANYRES8=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x400000}, 0x8}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4", 0x9}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000140)}], 0x2}, 0x8100) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3b) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_vlan\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) 0s ago: executing program 1 (id=2396): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x11b, 0x6, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$kcm(0x2, 0x3, 0x84) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000007c0)={'netdevsim0\x00', @broadcast}) sendmsg$inet(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001040)="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", 0x3eb}, {&(0x7f0000001b80)="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", 0x614}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x26}, @loopback}}}], 0x20}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="1400000037000b", 0x7}, {0x0}], 0x2}, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r6) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d0002117ea6e070d6064e22000300000000250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r9) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x4}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) kernel console output (not intermixed with test programs): tes leftover after parsing attributes in process `syz.1.416'. [ 183.610541][ T7407] 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.781743][ T7414] netlink: 'syz.1.416': attribute type 10 has an invalid length. [ 183.795606][ T7407] Node 1 Normal: 233*4kB (UME) 56*8kB (UME) 30*16kB (UME) 95*32kB (UME) 22*64kB (UE) 9*128kB (UME) 0*256kB 3*512kB (UME) 0*1024kB 2*2048kB (UE) 948*4096kB (M) = 3896100kB [ 183.819765][ T7414] netlink: 40 bytes leftover after parsing attributes in process `syz.1.416'. [ 183.874568][ T7414] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 183.880082][ T7407] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.894859][ T7414] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.928570][ T7414] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 183.941256][ T7407] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.968508][ T7407] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.978858][ T7407] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.013297][ T7407] 75784 total pagecache pages [ 184.027309][ T7407] 0 pages in swap cache [ 184.041419][ T7407] Free swap = 124996kB [ 184.053806][ T7407] Total swap = 124996kB [ 184.064928][ T7426] netlink: 'syz.3.419': attribute type 39 has an invalid length. [ 184.066169][ T7407] 2097051 pages RAM [ 184.093113][ T7407] 0 pages HighMem/MovableOnly [ 184.140926][ T7407] 416933 pages reserved [ 184.151419][ T7407] 0 pages cma reserved [ 184.607138][ T7436] netlink: 'syz.0.421': attribute type 3 has an invalid length. [ 184.645507][ T7436] netlink: 179176 bytes leftover after parsing attributes in process `syz.0.421'. [ 187.430023][ T7448] sit0: entered allmulticast mode [ 187.444260][ T7449] sit0: entered promiscuous mode [ 187.501637][ T7453] netlink: 132 bytes leftover after parsing attributes in process `syz.0.427'. [ 188.217170][ T7479] netlink: 'syz.3.433': attribute type 21 has an invalid length. [ 188.229181][ T7479] netlink: 132 bytes leftover after parsing attributes in process `syz.3.433'. [ 188.252989][ T7479] netlink: 'syz.3.433': attribute type 21 has an invalid length. [ 188.286469][ T7479] netlink: 'syz.3.433': attribute type 22 has an invalid length. [ 188.311106][ T7479] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.433'. [ 188.640784][ T7493] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.437'. [ 189.091367][ T6290] tipc: Subscription rejected, illegal request [ 189.108784][ T7503] netlink: 'syz.0.440': attribute type 21 has an invalid length. [ 189.126073][ T7503] netlink: 132 bytes leftover after parsing attributes in process `syz.0.440'. [ 189.145195][ T7503] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 189.211139][ T5790] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 189.254213][ T7505] netlink: 'syz.2.441': attribute type 10 has an invalid length. [ 189.263514][ T7505] hsr_slave_0: left promiscuous mode [ 189.273870][ T7507] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.300416][ T7505] hsr_slave_1: left promiscuous mode [ 191.260642][ T5790] Bluetooth: hci2: command tx timeout [ 192.902434][ T7532] netlink: 'syz.1.449': attribute type 39 has an invalid length. [ 193.252751][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.386892][ T7563] netlink: 'syz.1.458': attribute type 10 has an invalid length. [ 194.404000][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.1.458'. [ 194.569599][ T7563] batman_adv: batadv0: Adding interface: veth0_vlan [ 194.616206][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.622609][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.639164][ T7563] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.801051][ T7563] batman_adv: batadv0: Interface activated: veth0_vlan [ 194.857853][ T7570] netlink: 'syz.0.460': attribute type 21 has an invalid length. [ 194.868692][ T7570] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 194.878701][ T7570] netlink: 100 bytes leftover after parsing attributes in process `syz.0.460'. [ 194.889065][ T7571] netlink: 132 bytes leftover after parsing attributes in process `syz.0.460'. [ 194.899527][ T7573] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.461'. [ 194.910255][ T7573] tc_dump_action: action bad kind [ 195.020664][ T7578] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.462'. [ 195.442390][ T7597] netlink: 'syz.3.469': attribute type 5 has an invalid length. [ 195.454670][ T7588] netlink: 'syz.2.466': attribute type 3 has an invalid length. [ 195.468125][ T7588] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.466'. [ 195.500285][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 196.053873][ T7610] À: port 1(vlan0) entered blocking state [ 196.083188][ T7614] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.473'. [ 196.101823][ T7610] À: port 1(vlan0) entered disabled state [ 196.115273][ T7610] vlan0: entered allmulticast mode [ 196.150193][ T7610] veth0_vlan: entered allmulticast mode [ 196.180157][ T7610] vlan0: entered promiscuous mode [ 197.242961][ T7629] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.477'. [ 197.262330][ T7629] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 197.271392][ T7629] CPU: 1 PID: 7629 Comm: syz.3.477 Not tainted syzkaller #0 [ 197.278730][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.288823][ T7629] Call Trace: [ 197.292156][ T7629] [ 197.295120][ T7629] dump_stack_lvl+0x18c/0x250 [ 197.299861][ T7629] ? show_regs_print_info+0x20/0x20 [ 197.305112][ T7629] ? load_image+0x420/0x420 [ 197.309699][ T7629] sysfs_warn_dup+0x8e/0xa0 [ 197.314239][ T7629] sysfs_do_create_link_sd+0xc0/0x110 [ 197.319650][ T7629] device_add_class_symlinks+0x1cf/0x240 [ 197.325330][ T7629] device_add+0x507/0xc50 [ 197.329715][ T7629] wiphy_register+0x1dad/0x2ae0 [ 197.334641][ T7629] ? cfg80211_event_work+0x40/0x40 [ 197.339791][ T7629] ? minstrel_ht_alloc+0x88a/0x990 [ 197.344950][ T7629] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 197.351066][ T7629] ieee80211_register_hw+0x3464/0x4250 [ 197.356604][ T7629] ? ieee80211_tasklet_handler+0x20/0x20 [ 197.362298][ T7629] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 197.368266][ T7629] ? __debug_object_init+0xec/0x450 [ 197.373555][ T7629] ? __asan_memset+0x22/0x40 [ 197.378209][ T7629] ? __hrtimer_init+0x186/0x270 [ 197.383114][ T7629] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 197.388908][ T7629] ? mac80211_hwsim_free+0x220/0x220 [ 197.394242][ T7629] ? rcu_is_watching+0x15/0xb0 [ 197.399048][ T7629] ? kstrndup+0xbd/0x140 [ 197.403349][ T7629] hwsim_new_radio_nl+0xdc9/0x1a90 [ 197.408603][ T7629] ? __nla_validate+0x50/0x50 [ 197.413422][ T7629] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 197.419828][ T7629] ? __nla_parse+0x40/0x50 [ 197.424285][ T7629] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 197.430674][ T7629] genl_family_rcv_msg_doit+0x211/0x310 [ 197.436245][ T7629] ? end_current_label_crit_section+0x170/0x170 [ 197.442508][ T7629] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 197.448432][ T7629] ? bpf_lsm_capable+0x9/0x10 [ 197.453155][ T7629] ? security_capable+0x89/0xb0 [ 197.458037][ T7629] genl_rcv_msg+0x619/0x7a0 [ 197.462580][ T7629] ? genl_bind+0x360/0x360 [ 197.467010][ T7629] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 197.473358][ T7629] ? ref_tracker_free+0x690/0x840 [ 197.478407][ T7629] netlink_rcv_skb+0x241/0x4d0 [ 197.483187][ T7629] ? genl_bind+0x360/0x360 [ 197.487621][ T7629] ? netlink_ack+0x1180/0x1180 [ 197.492410][ T7629] ? __lock_acquire+0x7d40/0x7d40 [ 197.497465][ T7629] ? down_read+0x1ac/0x2e0 [ 197.501927][ T7629] genl_rcv+0x28/0x40 [ 197.505928][ T7629] netlink_unicast+0x751/0x8d0 [ 197.510717][ T7629] netlink_sendmsg+0x8d0/0xbf0 [ 197.515503][ T7629] ? netlink_getsockopt+0x590/0x590 [ 197.520722][ T7629] ? aa_sock_msg_perm+0x94/0x150 [ 197.525684][ T7629] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 197.531071][ T7629] ? security_socket_sendmsg+0x80/0xa0 [ 197.536546][ T7629] ? netlink_getsockopt+0x590/0x590 [ 197.541759][ T7629] ____sys_sendmsg+0x5ba/0x960 [ 197.546559][ T7629] ? __asan_memset+0x22/0x40 [ 197.551170][ T7629] ? __sys_sendmsg_sock+0x30/0x30 [ 197.556207][ T7629] ? __import_iovec+0x5f2/0x850 [ 197.561081][ T7629] ? import_iovec+0x73/0xa0 [ 197.565599][ T7629] ___sys_sendmsg+0x2a6/0x360 [ 197.570331][ T7629] ? __sys_sendmsg+0x2a0/0x2a0 [ 197.575182][ T7629] __se_sys_sendmsg+0x1c2/0x2b0 [ 197.580051][ T7629] ? __x64_sys_sendmsg+0x80/0x80 [ 197.585020][ T7629] ? lockdep_hardirqs_on+0x98/0x150 [ 197.590241][ T7629] do_syscall_64+0x55/0xb0 [ 197.594670][ T7629] ? clear_bhb_loop+0x40/0x90 [ 197.599364][ T7629] ? clear_bhb_loop+0x40/0x90 [ 197.604056][ T7629] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 197.609966][ T7629] RIP: 0033:0x7f270579ce59 [ 197.614395][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.634019][ T7629] RSP: 002b:00007f27066f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.642455][ T7629] RAX: ffffffffffffffda RBX: 00007f2705a15fa0 RCX: 00007f270579ce59 [ 197.650441][ T7629] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 197.658433][ T7629] RBP: 00007f2705832d6f R08: 0000000000000000 R09: 0000000000000000 [ 197.666443][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.674424][ T7629] R13: 00007f2705a16038 R14: 00007f2705a15fa0 R15: 00007ffe393225e8 [ 197.682423][ T7629] [ 197.902717][ T7638] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 198.334188][ T7608] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 198.360964][ T7608] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 198.384832][ T7628] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 198.444066][ T7608] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 198.492565][ T7608] netlink: 'syz.1.471': attribute type 29 has an invalid length. [ 198.886831][ T7665] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.487'. [ 198.899815][ T7665] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 199.133308][ T7670] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.487'. [ 199.304854][ T7670] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 200.164348][ T36] tipc: Subscription rejected, illegal request [ 200.182817][ T7688] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.492'. [ 200.403363][ T7694] netlink: 156 bytes leftover after parsing attributes in process `syz.2.494'. [ 200.960001][ T7712] validate_nla: 3 callbacks suppressed [ 200.960023][ T7712] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 200.996800][ T7712] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 201.042582][ T7713] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 201.085579][ T7712] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 201.107478][ T7712] netlink: 'syz.0.498': attribute type 29 has an invalid length. [ 201.138076][ T7712] Q±6ã`Ò˜: renamed from lo (while UP) [ 202.160753][ T7728] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.501'. [ 202.189240][ T7728] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.501'. [ 202.227088][ T7732] netlink: 763 bytes leftover after parsing attributes in process `syz.0.503'. [ 202.273849][ T7724] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.501'. [ 202.309036][ T7728] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.501'. [ 202.902068][ T7724] netlink: 'syz.2.501': attribute type 10 has an invalid length. [ 202.921393][ T7724] netlink: 40 bytes leftover after parsing attributes in process `syz.2.501'. [ 202.986930][ T7724] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 203.016236][ T7724] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.091432][ T7724] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 203.408106][ T7751] netlink: 'syz.2.507': attribute type 39 has an invalid length. [ 203.995159][ T7760] netlink: 'syz.3.513': attribute type 10 has an invalid length. [ 204.012644][ T7760] netlink: 40 bytes leftover after parsing attributes in process `syz.3.513'. [ 204.134565][ T7764] netlink: 128 bytes leftover after parsing attributes in process `syz.1.514'. [ 204.170317][ T7764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 204.225835][ T7763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 205.090060][ T7781] netlink: 'syz.1.519': attribute type 33 has an invalid length. [ 205.183216][ T7772] netlink: 'syz.0.517': attribute type 10 has an invalid length. [ 205.214454][ T7772] __nla_validate_parse: 6 callbacks suppressed [ 205.214472][ T7772] netlink: 40 bytes leftover after parsing attributes in process `syz.0.517'. [ 205.262808][ T7772] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 205.291082][ T7772] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.337232][ T7772] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 206.760925][ T7794] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.522'. [ 206.924802][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 206.925106][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 206.930909][ T5087] Bluetooth: hci3: command 0x0406 tx timeout [ 206.938406][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 207.611761][ T7811] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 208.504353][ T7823] delete_channel: no stack [ 208.519813][ T7811] syzkaller0: entered promiscuous mode [ 208.535358][ T7811] syzkaller0: entered allmulticast mode [ 209.089147][ T7835] netlink: 196 bytes leftover after parsing attributes in process `syz.2.534'. [ 211.525849][ T7842] netlink: 'syz.0.536': attribute type 33 has an invalid length. [ 211.658091][ T7842] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.536'. [ 212.117701][ T7844] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.535'. [ 212.142402][ T7844] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.535'. [ 212.163533][ T7849] netlink: 171476 bytes leftover after parsing attributes in process `syz.1.537'. [ 212.764524][ T7864] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.549'. [ 213.718921][ T7889] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 213.760093][ T7897] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 213.865001][ T7897] netlink: 'syz.0.551': attribute type 39 has an invalid length. [ 214.189503][ T7902] netlink: 160040 bytes leftover after parsing attributes in process `syz.3.552'. [ 214.229545][ T7902] openvswitch: netlink: IP tunnel dst address not specified [ 214.446083][ T7911] netlink: 'syz.1.556': attribute type 4 has an invalid length. [ 214.453865][ T7911] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.556'. [ 215.868063][ T7926] netlink: 'syz.3.559': attribute type 10 has an invalid length. [ 216.083239][ T7926] team0: Port device wlan1 added [ 216.312267][ T7943] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.565'. [ 216.367518][ T7943] netlink: del zone limit has 8 unknown bytes [ 216.401596][ T7945] netlink: 'syz.2.564': attribute type 10 has an invalid length. [ 216.497620][ T7945] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.512941][ T7945] bond0: (slave team0): Enslaving as an active interface with an up link [ 216.844639][ T7962] netlink: 14 bytes leftover after parsing attributes in process `syz.1.569'. [ 216.938644][ T7969] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.572'. [ 217.344620][ T7984] netlink: 132 bytes leftover after parsing attributes in process `syz.0.578'. [ 217.376374][ T7987] netlink: 132 bytes leftover after parsing attributes in process `syz.0.578'. [ 218.249300][ T8006] netlink: 14 bytes leftover after parsing attributes in process `syz.3.581'. [ 220.570854][ T8037] syzkaller0: left promiscuous mode [ 220.583797][ T8037] syzkaller0: left allmulticast mode [ 222.861851][ T8073] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.600'. [ 222.881375][ T8073] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.600'. [ 222.896221][ T8071] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.600'. [ 222.928915][ T8073] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.600'. [ 223.242521][ T8069] netlink: 'syz.2.599': attribute type 21 has an invalid length. [ 223.289734][ T8077] netlink: 'syz.3.601': attribute type 1 has an invalid length. [ 223.301825][ T8069] netlink: 132 bytes leftover after parsing attributes in process `syz.2.599'. [ 223.318412][ T8077] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.601'. [ 225.568360][ T8101] netlink: 'syz.1.607': attribute type 21 has an invalid length. [ 225.852852][ T8103] netlink: 'syz.3.608': attribute type 10 has an invalid length. [ 225.889726][ T8107] netlink: 'syz.1.610': attribute type 2 has an invalid length. [ 225.919833][ T8107] netlink: 14 bytes leftover after parsing attributes in process `syz.1.610'. [ 227.135043][ T8107] netlink: 'syz.1.610': attribute type 2 has an invalid length. [ 227.166378][ T8107] netlink: 'syz.1.610': attribute type 8 has an invalid length. [ 227.185573][ T8107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.610'. [ 227.915640][ T8125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.612'. [ 228.747310][ T8129] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.613'. [ 229.233602][ T8135] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.615'. [ 229.318537][ T8135] tc_dump_action: action bad kind [ 230.082373][ T8153] €Â0: renamed from batadv_slave_1 (while UP) [ 230.092915][ T8149] netlink: 2220 bytes leftover after parsing attributes in process `syz.3.619'. [ 230.195743][ T8155] netlink: 'syz.0.621': attribute type 21 has an invalid length. [ 230.204121][ T8155] netlink: 'syz.0.621': attribute type 6 has an invalid length. [ 230.212481][ T8155] netlink: 132 bytes leftover after parsing attributes in process `syz.0.621'. [ 230.386835][ T8158] netlink: 14 bytes leftover after parsing attributes in process `syz.0.621'. [ 230.959094][ T8167] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.622'. [ 231.115733][ T8167] netlink: 3064 bytes leftover after parsing attributes in process `syz.2.622'. [ 231.451256][ T8161] netlink: 'syz.2.622': attribute type 1 has an invalid length. [ 231.658091][ T8161] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.622'. [ 231.951367][ T8183] netlink: 'syz.0.627': attribute type 3 has an invalid length. [ 231.959443][ T8183] netlink: 201372 bytes leftover after parsing attributes in process `syz.0.627'. [ 232.321187][ T8186] netlink: 'syz.1.628': attribute type 9 has an invalid length. [ 232.808333][ T8200] netlink: 'syz.1.633': attribute type 21 has an invalid length. [ 232.834964][ T8200] netlink: 'syz.1.633': attribute type 6 has an invalid length. [ 233.076115][ T8200] __nla_validate_parse: 2 callbacks suppressed [ 233.076138][ T8200] netlink: 14 bytes leftover after parsing attributes in process `syz.1.633'. [ 233.791685][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.705129][ T8251] netlink: 'syz.2.647': attribute type 21 has an invalid length. [ 234.713130][ T8251] netlink: 'syz.2.647': attribute type 6 has an invalid length. [ 234.731001][ T8251] netlink: 132 bytes leftover after parsing attributes in process `syz.2.647'. [ 234.791230][ T8256] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.650'. [ 234.839154][ T8251] netlink: 14 bytes leftover after parsing attributes in process `syz.2.647'. [ 235.306695][ T8259] netlink: 10 bytes leftover after parsing attributes in process `syz.1.652'. [ 235.985126][ T8283] netlink: 'syz.0.660': attribute type 29 has an invalid length. [ 236.011763][ T8283] netlink: 'syz.0.660': attribute type 29 has an invalid length. [ 236.034902][ T8284] netlink: 'syz.0.660': attribute type 29 has an invalid length. [ 236.060349][ T8283] netlink: 'syz.0.660': attribute type 29 has an invalid length. [ 236.158846][ T8283] netlink: 'syz.0.660': attribute type 29 has an invalid length. [ 236.294404][ T8292] netlink: zone id is out of range [ 236.316849][ T8292] netlink: set zone limit has 8 unknown bytes [ 236.341753][ T8292] netlink: 'syz.3.664': attribute type 10 has an invalid length. [ 236.354571][ T8292] netlink: 55 bytes leftover after parsing attributes in process `syz.3.664'. [ 239.510385][ T8298] netlink: 'syz.2.663': attribute type 21 has an invalid length. [ 239.578623][ T8303] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.666'. [ 239.682799][ T8306] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.667'. [ 239.719377][ T8306] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 240.027335][ T8321] netlink: 14 bytes leftover after parsing attributes in process `syz.1.671'. [ 240.055236][ T8321] batman_adv: batadv0: Interface deactivated: €Â0 [ 240.063097][ T8321] batman_adv: batadv0: Removing interface: €Â0 [ 240.073564][ T8321] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 240.086358][ T8321] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 240.175208][ T8321] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 240.183253][ T8321] batman_adv: batadv0: Removing interface: veth0_vlan [ 240.607839][ T8336] Â: renamed from pim6reg1 [ 241.492736][ T8349] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.677'. [ 242.255771][ T8368] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.682'. [ 242.280067][ T8368] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 242.696266][ T8386] netlink: 14 bytes leftover after parsing attributes in process `syz.3.686'. [ 242.721382][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 242.744833][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 242.771271][ T8386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 242.815342][ T8386] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.593806][ T8405] netlink: 'syz.2.692': attribute type 10 has an invalid length. [ 243.610269][ T8407] netlink: 'syz.3.693': attribute type 6 has an invalid length. [ 243.621127][ T8407] netlink: 168 bytes leftover after parsing attributes in process `syz.3.693'. [ 243.634864][ T8407] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.693'. [ 243.802904][ T8410] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.694'. [ 243.914089][ T8413] netlink: 'syz.0.695': attribute type 9 has an invalid length. [ 243.934786][ T8413] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.695'. [ 244.051156][ T8414] netlink: 'syz.0.695': attribute type 9 has an invalid length. [ 244.545630][ T8437] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.550613][ T8433] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 244.615801][ T8433] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 244.646324][ T8433] __nla_validate_parse: 1 callbacks suppressed [ 244.646357][ T8433] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.699'. [ 244.696087][ T8433] openvswitch: netlink: Message has 4 unknown bytes. [ 244.831364][ T8447] vcan0: entered allmulticast mode [ 244.899546][ T8447] netlink: 'syz.1.703': attribute type 10 has an invalid length. [ 245.495929][ T8462] netlink: 'syz.1.707': attribute type 2 has an invalid length. [ 245.539691][ T8462] netlink: 'syz.1.707': attribute type 8 has an invalid length. [ 245.584968][ T8462] netlink: 132 bytes leftover after parsing attributes in process `syz.1.707'. [ 246.202717][ T8480] netlink: 'syz.1.712': attribute type 29 has an invalid length. [ 246.755150][ T8504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.718'. [ 246.994374][ T8504] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 247.046035][ T5790] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 251.661498][ T8539] validate_nla: 5 callbacks suppressed [ 251.661534][ T8539] netlink: 'syz.3.729': attribute type 9 has an invalid length. [ 253.105240][ T8539] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.729'. [ 254.754766][ T8545] netlink: 'syz.2.733': attribute type 33 has an invalid length. [ 254.762854][ T8545] netlink: 152 bytes leftover after parsing attributes in process `syz.2.733'. [ 254.808430][ T8555] netlink: 'syz.1.736': attribute type 21 has an invalid length. [ 254.816343][ T8555] netlink: 128 bytes leftover after parsing attributes in process `syz.1.736'. [ 254.825876][ T8555] netlink: 'syz.1.736': attribute type 4 has an invalid length. [ 254.834345][ T8555] netlink: 'syz.1.736': attribute type 3 has an invalid length. [ 254.842531][ T8555] netlink: 3 bytes leftover after parsing attributes in process `syz.1.736'. [ 255.252624][ T8569] netlink: 'syz.3.740': attribute type 27 has an invalid length. [ 255.447452][ T8574] netlink: 'syz.1.742': attribute type 10 has an invalid length. [ 255.617981][ T8574] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 256.067017][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.073464][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.544758][ T8594] sit0: entered allmulticast mode [ 256.645036][ T8596] sit0: entered promiscuous mode [ 256.670233][ T8592] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.747'. [ 256.886541][ T8607] netlink: 132 bytes leftover after parsing attributes in process `syz.3.751'. [ 257.469459][ T8619] netlink: 'syz.2.753': attribute type 27 has an invalid length. [ 258.178097][ T8640] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.758'. [ 258.208030][ T8640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 258.623868][ T8650] netlink: 'syz.0.761': attribute type 9 has an invalid length. [ 258.654273][ T8650] netlink: 170500 bytes leftover after parsing attributes in process `syz.0.761'. [ 259.179288][ T8661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.351795][ T8668] netlink: 'syz.3.768': attribute type 29 has an invalid length. [ 259.370781][ T8668] netlink: 'syz.3.768': attribute type 29 has an invalid length. [ 259.450809][ T8668] netlink: 'syz.3.768': attribute type 29 has an invalid length. [ 259.507807][ T8674] netlink: 'syz.3.768': attribute type 29 has an invalid length. [ 259.564330][ T8676] netlink: 'syz.0.770': attribute type 10 has an invalid length. [ 259.592279][ T8676] netlink: 'syz.0.770': attribute type 19 has an invalid length. [ 259.605438][ T8676] netlink: 14536 bytes leftover after parsing attributes in process `syz.0.770'. [ 259.620928][ T8668] netlink: 'syz.3.768': attribute type 29 has an invalid length. [ 259.646320][ T8672] netlink: 'syz.1.767': attribute type 27 has an invalid length. [ 261.894775][ T8745] team0: Device ipvlan1 failed to register rx_handler [ 262.713066][ T8773] validate_nla: 3 callbacks suppressed [ 262.713083][ T8773] netlink: 'syz.1.793': attribute type 39 has an invalid length. [ 263.033788][ T8770] netlink: 'syz.0.794': attribute type 1 has an invalid length. [ 263.064956][ T8770] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.794'. [ 263.107145][ T8770] netlink: 9 bytes leftover after parsing attributes in process `syz.0.794'. [ 263.285621][ T8769] netlink: 'syz.1.793': attribute type 10 has an invalid length. [ 263.962560][ T8769] team0: Port device geneve1 added [ 263.979828][ T8796] netlink: 'syz.2.801': attribute type 12 has an invalid length. [ 264.014981][ T8796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.801'. [ 264.605206][ T8818] netlink: 'syz.1.805': attribute type 39 has an invalid length. [ 264.673399][ T8818] netlink: 40 bytes leftover after parsing attributes in process `syz.1.805'. [ 264.892063][ T8818] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 264.919357][ T5790] Bluetooth: hci3: unexpected event 0x1c length: 15 > 5 [ 267.247121][ T8870] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 268.563372][ T8880] netlink: 'syz.0.825': attribute type 2 has an invalid length. [ 268.595099][ T8880] netlink: 'syz.0.825': attribute type 8 has an invalid length. [ 268.604830][ T8880] netlink: 132 bytes leftover after parsing attributes in process `syz.0.825'. [ 269.204576][ T8890] netlink: 132 bytes leftover after parsing attributes in process `syz.3.828'. [ 269.800630][ T8906] netlink: 'syz.2.834': attribute type 10 has an invalid length. [ 270.113797][ T8914] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.837'. [ 270.126479][ T8914] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 271.276245][ T8928] netlink: 'syz.2.840': attribute type 13 has an invalid length. [ 271.288414][ T8928] netlink: 172 bytes leftover after parsing attributes in process `syz.2.840'. [ 271.336241][ T8928] erspan0: refused to change device tx_queue_len [ 271.368638][ T8924] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 272.127940][ T8967] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 272.138257][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.846'. [ 272.187157][ T8967] netlink: 'syz.3.846': attribute type 10 has an invalid length. [ 272.205223][ T8967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.846'. [ 273.556919][ T8989] netlink: 'syz.0.856': attribute type 21 has an invalid length. [ 273.574080][ T8989] netlink: 128 bytes leftover after parsing attributes in process `syz.0.856'. [ 273.594551][ T8989] netlink: 'syz.0.856': attribute type 4 has an invalid length. [ 273.624367][ T8993] netlink: 'syz.0.856': attribute type 39 has an invalid length. [ 274.544940][ T9021] netlink: 132 bytes leftover after parsing attributes in process `syz.1.867'. [ 275.512775][ T9025] netlink: 'syz.3.865': attribute type 2 has an invalid length. [ 275.524853][ T9025] netlink: 'syz.3.865': attribute type 8 has an invalid length. [ 275.532531][ T9025] netlink: 132 bytes leftover after parsing attributes in process `syz.3.865'. [ 276.164792][ T9044] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.872'. [ 276.594928][ T9056] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.875'. [ 276.635240][ T9056] bridge_slave_1: entered promiscuous mode [ 278.155467][ T9095] netlink: 'syz.1.884': attribute type 10 has an invalid length. [ 278.495285][ T9095] team0 (unregistering): Port device C removed [ 278.544262][ T9095] team0 (unregistering): Port device team_slave_1 removed [ 278.587696][ T9095] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.605548][ T9095] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.645439][ T9095] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.678598][ T9095] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.865458][ T9095] team0 (unregistering): Port device geneve1 removed [ 279.096439][ T9099] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.885'. [ 280.557262][ T9122] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 280.594920][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 280.620528][ T9122] netlink: 'syz.1.892': attribute type 10 has an invalid length. [ 280.639907][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz.1.892'. [ 280.734359][ T5790] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 280.839761][ T9132] netlink: 'syz.2.895': attribute type 21 has an invalid length. [ 280.959891][ T9132] IPv6: NLM_F_CREATE should be specified when creating new route [ 281.089471][ T9140] netlink: 76 bytes leftover after parsing attributes in process `syz.0.897'. [ 282.210879][ T9161] delete_channel: no stack [ 282.236090][ T9161] delete_channel: no stack [ 282.430496][ T9166] netlink: 132 bytes leftover after parsing attributes in process `syz.0.904'. [ 282.489363][ T9167] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.905'. [ 282.576493][ T9167] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.905'. [ 283.164584][ T9177] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.907'. [ 283.956955][ T9183] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.908'. [ 284.118587][ T9185] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.909'. [ 284.169116][ T9185] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.909'. [ 286.415308][ T9227] netlink: 'syz.2.920': attribute type 5 has an invalid length. [ 286.465199][ T9227] __nla_validate_parse: 1 callbacks suppressed [ 286.465219][ T9227] netlink: 176 bytes leftover after parsing attributes in process `syz.2.920'. [ 288.408370][ T9250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.925'. [ 289.009873][ T9250] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.588997][ T9257] netlink: 'syz.3.929': attribute type 29 has an invalid length. [ 289.607897][ T9265] netlink: 'syz.1.931': attribute type 9 has an invalid length. [ 289.640018][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 289.654241][ T9265] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.931'. [ 289.750508][ T9257] netlink: 'syz.3.929': attribute type 29 has an invalid length. [ 289.774896][ T9266] netlink: 'syz.1.931': attribute type 9 has an invalid length. [ 289.799518][ T9266] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.931'. [ 291.936479][ T9289] netlink: 'syz.3.937': attribute type 3 has an invalid length. [ 291.974877][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.937'. [ 292.030865][ T9291] netlink: 'syz.3.937': attribute type 3 has an invalid length. [ 292.084727][ T9291] netlink: 132 bytes leftover after parsing attributes in process `syz.3.937'. [ 292.782391][ T9298] netlink: 'syz.3.939': attribute type 3 has an invalid length. [ 292.830458][ T9298] netlink: 'syz.3.939': attribute type 1 has an invalid length. [ 292.867731][ T9298] netlink: 207 bytes leftover after parsing attributes in process `syz.3.939'. [ 294.294372][ T9324] delete_channel: no stack [ 294.306153][ T9328] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 294.315235][ T9324] delete_channel: no stack [ 294.347807][ T9328] netlink: 'syz.3.947': attribute type 3 has an invalid length. [ 294.395643][ T9328] netlink: 132 bytes leftover after parsing attributes in process `syz.3.947'. [ 297.521507][ T9355] netlink: 'syz.3.956': attribute type 10 has an invalid length. [ 297.549045][ T9355] netlink: 168 bytes leftover after parsing attributes in process `syz.3.956'. [ 300.721683][ T9364] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.959'. [ 300.811940][ T9366] Dead loop on virtual device ip6_vti0, fix it urgently! [ 300.866589][ T9368] netlink: 76 bytes leftover after parsing attributes in process `syz.2.960'. [ 300.971174][ T9368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.960'. [ 301.757586][ T9394] delete_channel: no stack [ 301.770396][ T9394] delete_channel: no stack [ 304.582714][ T9410] netlink: 176 bytes leftover after parsing attributes in process `syz.1.971'. [ 304.679083][ T9412] netlink: 76 bytes leftover after parsing attributes in process `syz.0.972'. [ 304.826069][ T9412] netlink: 132 bytes leftover after parsing attributes in process `syz.0.972'. [ 305.211821][ T9422] bridge0: port 3(team0) entered blocking state [ 305.220708][ T9422] bridge0: port 3(team0) entered disabled state [ 305.227959][ T9422] team0: entered allmulticast mode [ 305.233280][ T9422] team_slave_0: entered allmulticast mode [ 305.241378][ T9422] team_slave_1: entered allmulticast mode [ 305.252861][ T9422] team0: entered promiscuous mode [ 305.264519][ T9422] team_slave_0: entered promiscuous mode [ 305.277867][ T9422] team_slave_1: entered promiscuous mode [ 305.506406][ T9427] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.978'. [ 305.731929][ T9444] netlink: 'syz.2.979': attribute type 21 has an invalid length. [ 306.684582][ T9486] netlink: 76 bytes leftover after parsing attributes in process `syz.3.986'. [ 306.785044][ T9486] netlink: 132 bytes leftover after parsing attributes in process `syz.3.986'. [ 307.321747][ T9506] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.992'. [ 307.729313][ T9519] netlink: 168 bytes leftover after parsing attributes in process `syz.3.997'. [ 307.769327][ T9515] netlink: 'syz.0.998': attribute type 19 has an invalid length. [ 307.781598][ T9515] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 307.835819][ T9521] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 307.855480][ T9521] netlink: 168 bytes leftover after parsing attributes in process `syz.1.999'. [ 307.933869][ T9526] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1002'. [ 308.288253][ T9538] netlink: 'syz.1.1005': attribute type 10 has an invalid length. [ 308.356861][ T9537] FAULT_INJECTION: forcing a failure. [ 308.356861][ T9537] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 308.409162][ T9537] CPU: 1 PID: 9537 Comm: syz.3.1004 Not tainted syzkaller #0 [ 308.416612][ T9537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.426704][ T9537] Call Trace: [ 308.430009][ T9537] [ 308.432966][ T9537] dump_stack_lvl+0x18c/0x250 [ 308.437687][ T9537] ? show_regs_print_info+0x20/0x20 [ 308.442918][ T9537] ? load_image+0x420/0x420 [ 308.447455][ T9537] ? __lock_acquire+0x7d40/0x7d40 [ 308.452517][ T9537] ? snprintf+0xe9/0x140 [ 308.456804][ T9537] should_fail_ex+0x39d/0x4d0 [ 308.461538][ T9537] _copy_to_user+0x2f/0xa0 [ 308.465995][ T9537] simple_read_from_buffer+0xe7/0x150 [ 308.471419][ T9537] proc_fail_nth_read+0x1e8/0x260 [ 308.476484][ T9537] ? proc_fault_inject_write+0x360/0x360 [ 308.482163][ T9537] ? fsnotify_perm+0x271/0x5e0 [ 308.486959][ T9537] ? proc_fault_inject_write+0x360/0x360 [ 308.492629][ T9537] vfs_read+0x28b/0x970 [ 308.496829][ T9537] ? kernel_read+0x1e0/0x1e0 [ 308.501460][ T9537] ? __fget_files+0x28/0x4b0 [ 308.506118][ T9537] ? __fget_files+0x28/0x4b0 [ 308.510748][ T9537] ? __fget_files+0x43d/0x4b0 [ 308.515475][ T9537] ? __fdget_pos+0x2a3/0x330 [ 308.520101][ T9537] ? ksys_read+0x75/0x260 [ 308.524473][ T9537] ksys_read+0x150/0x260 [ 308.528759][ T9537] ? vfs_write+0x990/0x990 [ 308.533219][ T9537] ? lockdep_hardirqs_on+0x98/0x150 [ 308.538441][ T9537] do_syscall_64+0x55/0xb0 [ 308.542869][ T9537] ? clear_bhb_loop+0x40/0x90 [ 308.547579][ T9537] ? clear_bhb_loop+0x40/0x90 [ 308.552297][ T9537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 308.558256][ T9537] RIP: 0033:0x7f270575d68e [ 308.562714][ T9537] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 308.582372][ T9537] RSP: 002b:00007f27066f7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.590845][ T9537] RAX: ffffffffffffffda RBX: 00007f27066f86c0 RCX: 00007f270575d68e [ 308.598864][ T9537] RDX: 000000000000000f RSI: 00007f27066f80a0 RDI: 0000000000000004 [ 308.606877][ T9537] RBP: 00007f27066f8090 R08: 0000000000000000 R09: 0000000000000000 [ 308.614888][ T9537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.622901][ T9537] R13: 00007f2705a16038 R14: 00007f2705a15fa0 R15: 00007ffe393225e8 [ 308.630934][ T9537] [ 310.544863][ T9601] netlink: 'syz.1.1021': attribute type 10 has an invalid length. [ 310.591932][ T9601] __nla_validate_parse: 4 callbacks suppressed [ 310.592024][ T9601] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1021'. [ 310.783405][ T9601] caif0: entered promiscuous mode [ 310.815965][ T9601] caif0: entered allmulticast mode [ 310.859316][ T9601] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 311.136726][ T9612] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 311.155533][ T9615] netlink: 'syz.2.1024': attribute type 10 has an invalid length. [ 311.719299][ T9623] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1028'. [ 312.641123][ T9644] netlink: 'syz.0.1035': attribute type 27 has an invalid length. [ 314.367095][ T9671] netlink: 'syz.1.1043': attribute type 3 has an invalid length. [ 314.390409][ T9671] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1043'. [ 314.483389][ T9674] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1044'. [ 314.495591][ T9674] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 314.681384][ T9679] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1045'. [ 314.852722][ T9681] netlink: 'syz.0.1046': attribute type 3 has an invalid length. [ 314.861638][ T9681] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1046'. [ 314.972727][ T9685] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 315.001159][ T9685] vxcan1: entered promiscuous mode [ 315.035227][ T9685] vxcan1: entered allmulticast mode [ 315.043046][ T9685] team0: Device vxcan1 is of different type [ 315.409883][ T9696] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1050'. [ 316.114256][ T9718] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1055'. [ 316.606118][ T9724] netlink: 'syz.3.1058': attribute type 3 has an invalid length. [ 316.613983][ T9724] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1058'. [ 317.075000][ T9743] netlink: 'syz.3.1062': attribute type 9 has an invalid length. [ 317.104794][ T9743] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1062'. [ 317.224436][ T9739] netlink: 'syz.3.1062': attribute type 28 has an invalid length. [ 317.314139][ T9739] netlink: 'syz.3.1062': attribute type 29 has an invalid length. [ 317.387278][ T9739] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1062'. [ 318.772480][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.778911][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.797678][ T9781] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1072'. [ 321.446901][ T9798] netlink: 'syz.2.1077': attribute type 10 has an invalid length. [ 321.890981][ T9798] team0: Port device geneve1 added [ 322.158957][ T9812] syzkaller0: entered promiscuous mode [ 322.164520][ T9812] syzkaller0: entered allmulticast mode [ 324.425735][ T9829] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1086'. [ 324.435337][ T9834] netlink: 'syz.0.1089': attribute type 39 has an invalid length. [ 324.450281][ T9848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1091'. [ 324.818182][ T9864] netlink: 'syz.0.1094': attribute type 1 has an invalid length. [ 324.836841][ T9864] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.1094'. [ 325.071284][ T9868] netlink: 'syz.1.1095': attribute type 10 has an invalid length. [ 326.219457][ T9880] netlink: 'syz.1.1098': attribute type 9 has an invalid length. [ 326.227722][ T9880] netlink: 84908 bytes leftover after parsing attributes in process `syz.1.1098'. [ 326.592690][ T9890] netlink: 'syz.2.1101': attribute type 2 has an invalid length. [ 326.602783][ T9890] netlink: 'syz.2.1101': attribute type 8 has an invalid length. [ 326.612489][ T9890] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1101'. [ 326.993573][ T9904] netlink: 'syz.3.1104': attribute type 10 has an invalid length. [ 329.971229][ T9907] delete_channel: no stack [ 330.240238][ T9916] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 330.258347][ T9916] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1109'. [ 330.284344][ T9920] netlink: 'syz.3.1108': attribute type 10 has an invalid length. [ 330.550941][ T9923] netlink: 'syz.0.1110': attribute type 3 has an invalid length. [ 330.570886][ T9923] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1110'. [ 331.073050][ T9933] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1114'. [ 331.111313][ T9931] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1112'. [ 331.292650][ T9929] netlink: 'syz.2.1113': attribute type 10 has an invalid length. [ 331.304508][ T9929] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1113'. [ 331.530746][ T9939] netlink: 'syz.0.1117': attribute type 27 has an invalid length. [ 332.414376][ T9964] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1126'. [ 332.459052][ T9969] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 337.387097][T10003] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.1136'. [ 337.824775][T10012] syz.2.1140[10012] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 337.839683][T10013] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 337.864803][T10013] netlink: 'syz.0.1139': attribute type 4 has an invalid length. [ 337.873728][T10013] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1139'. [ 338.447283][T10023] netlink: 'syz.0.1143': attribute type 10 has an invalid length. [ 338.463602][T10023] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1143'. [ 338.478796][T10023] hsr0: entered promiscuous mode [ 338.487859][T10023] bridge0: port 4(hsr0) entered blocking state [ 338.496979][T10023] bridge0: port 4(hsr0) entered disabled state [ 338.511016][T10023] hsr0: entered allmulticast mode [ 338.517550][T10023] hsr_slave_0: entered allmulticast mode [ 338.533301][T10023] hsr_slave_1: entered allmulticast mode [ 338.572866][T10034] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1147'. [ 338.591661][T10034] ƒ: renamed from tunl0 (while UP) [ 338.601782][T10032] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1146'. [ 338.760156][T10037] netlink: 'syz.2.1149': attribute type 21 has an invalid length. [ 338.775467][T10037] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1149'. [ 339.159389][T10051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1152'. [ 339.721842][T10071] netlink: 123072 bytes leftover after parsing attributes in process `syz.2.1158'. [ 340.415942][T10075] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 340.431248][T10075] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1157'. [ 340.454426][T10071] netlink: 'syz.2.1158': attribute type 10 has an invalid length. [ 340.484908][T10071] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1158'. [ 340.507603][T10077] netlink: 'syz.3.1160': attribute type 21 has an invalid length. [ 340.518288][T10080] netlink: 'syz.0.1161': attribute type 9 has an invalid length. [ 340.534946][T10077] IPv6: Can't replace route, no match found [ 341.566899][T10106] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 341.919161][T10124] netlink: 'syz.0.1172': attribute type 9 has an invalid length. [ 342.714186][T10148] __nla_validate_parse: 2 callbacks suppressed [ 342.714208][T10148] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.1177'. [ 343.534004][T10176] sock: sock_set_timeout: `syz.1.1182' (pid 10176) tries to set negative timeout [ 344.973687][T10205] validate_nla: 2 callbacks suppressed [ 344.973728][T10205] netlink: 'syz.1.1190': attribute type 39 has an invalid length. [ 346.474253][T10237] netlink: 'syz.1.1197': attribute type 6 has an invalid length. [ 346.490452][T10237] netlink: 170540 bytes leftover after parsing attributes in process `syz.1.1197'. [ 346.662576][T10244] netlink: 'syz.2.1200': attribute type 10 has an invalid length. [ 346.711148][T10244] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1200'. [ 347.143812][T10261] netlink: 'syz.0.1205': attribute type 21 has an invalid length. [ 347.168379][T10261] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1205'. [ 347.838972][T10281] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1211'. [ 348.520945][T10302] netlink: 'syz.2.1217': attribute type 21 has an invalid length. [ 348.533582][T10302] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1217'. [ 348.749717][T10315] netlink: 'syz.0.1220': attribute type 21 has an invalid length. [ 348.775694][T10315] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1220'. [ 350.021262][T10355] netlink: 'syz.2.1230': attribute type 3 has an invalid length. [ 350.030493][T10355] netlink: 201336 bytes leftover after parsing attributes in process `syz.2.1230'. [ 350.438850][T10371] netlink: 'syz.2.1233': attribute type 5 has an invalid length. [ 351.042891][T10393] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 351.069916][T10389] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1236'. [ 351.196151][T10389] bridge_slave_1: default FDB implementation only supports local addresses [ 354.669363][T10426] netlink: 'syz.0.1249': attribute type 10 has an invalid length. [ 354.751827][T10426] team0: left allmulticast mode [ 354.774986][T10426] team_slave_0: left allmulticast mode [ 354.780876][T10426] team_slave_1: left allmulticast mode [ 354.802446][T10426] team0: left promiscuous mode [ 354.824368][T10426] team_slave_0: left promiscuous mode [ 354.873680][T10426] team_slave_1: left promiscuous mode [ 354.893490][T10433] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 354.902395][T10426] bridge0: port 3(team0) entered disabled state [ 354.923728][T10426] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.933566][T10426] bond0: (slave team0): Enslaving as an active interface with an up link [ 354.947221][T10433] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 355.092245][T10435] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 355.140717][T10436] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1250'. [ 355.171568][T10435] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 355.445461][T10435] netlink: 'syz.3.1251': attribute type 29 has an invalid length. [ 357.553867][T10472] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1262'. [ 357.870859][T10479] netlink: 'syz.2.1264': attribute type 29 has an invalid length. [ 357.905602][T10479] netlink: 'syz.2.1264': attribute type 29 has an invalid length. [ 358.028237][T10489] netlink: 'syz.2.1264': attribute type 29 has an invalid length. [ 358.146408][T10489] netlink: 'syz.2.1264': attribute type 29 has an invalid length. [ 358.190137][T10491] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1267'. [ 358.206597][T10490] tun0: tun_chr_ioctl cmd 1074025678 [ 358.211947][T10490] tun0: group set to 0 [ 358.328145][T10479] netlink: 'syz.2.1264': attribute type 29 has an invalid length. [ 358.560366][T10497] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1266'. [ 358.743770][T10501] netlink: 'syz.2.1271': attribute type 58 has an invalid length. [ 358.935207][T10501] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1271'. [ 359.873631][T10525] netlink: 'syz.0.1278': attribute type 3 has an invalid length. [ 359.884529][T10525] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1278'. [ 360.111292][T10525] hsr0: left allmulticast mode [ 360.125668][T10525] hsr_slave_0: left allmulticast mode [ 360.142581][T10525] hsr_slave_1: left allmulticast mode [ 360.167831][T10525] hsr0: left promiscuous mode [ 360.184089][T10525] bridge0: port 4(hsr0) entered disabled state [ 360.306604][T10525] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 360.747432][T10546] validate_nla: 1 callbacks suppressed [ 360.747472][T10546] netlink: 'syz.1.1283': attribute type 39 has an invalid length. [ 360.891978][T10546] netlink: 'syz.1.1283': attribute type 9 has an invalid length. [ 360.904765][T10546] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1283'. [ 361.109434][T10551] netlink: 'syz.0.1284': attribute type 10 has an invalid length. [ 361.125157][T10551] bridge0: left allmulticast mode [ 361.141966][T10551] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.150096][T10551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.160037][T10551] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.168118][T10551] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.261506][T10551] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 361.601794][T10553] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1285'. [ 364.048160][T10619] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1301'. [ 366.108513][T10652] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1310'. [ 366.135620][T10652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.267420][T10652] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 366.279262][T10652] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1310'. [ 366.311573][T10652] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 366.754580][T10661] netlink: 'syz.2.1314': attribute type 3 has an invalid length. [ 366.763997][T10661] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1314'. [ 366.904766][T10667] netlink: 'syz.2.1314': attribute type 10 has an invalid length. [ 369.863006][T10685] tun0: tun_chr_ioctl cmd 2147767507 [ 371.184132][T10737] netlink: 'syz.3.1332': attribute type 10 has an invalid length. [ 373.868178][T10737] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 374.142648][T10761] netlink: 'syz.1.1339': attribute type 4 has an invalid length. [ 374.157537][T10761] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1339'. [ 375.122882][T10794] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 375.136134][T10794] team0: Device ipvlan1 failed to register rx_handler [ 375.185679][T10793] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1348'. [ 376.633354][T10824] netlink: 'syz.2.1354': attribute type 15 has an invalid length. [ 376.747151][T10824] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1354'. [ 376.898531][T10821] netlink: 'syz.2.1354': attribute type 9 has an invalid length. [ 376.935698][T10821] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1354'. [ 377.815612][T10853] C: renamed from team_slave_0 (while UP) [ 378.018127][T10853] netlink: 'syz.2.1362': attribute type 4 has an invalid length. [ 378.048616][T10853] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1362'. [ 378.080336][T10853] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 378.942144][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.950025][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.553500][T10902] netlink: 'syz.2.1377': attribute type 1 has an invalid length. [ 379.578088][T10902] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1377'. [ 379.752454][T10913] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1382'. [ 380.049554][T10920] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.1383'. [ 380.061263][T10920] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 380.750916][T10946] mac80211_hwsim hwsim16 wlan1: entered allmulticast mode [ 381.490318][T10964] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1397'. [ 382.490542][T10995] netlink: 'syz.1.1407': attribute type 15 has an invalid length. [ 382.529284][T10995] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1407'. [ 382.698125][T10995] netlink: 'syz.1.1407': attribute type 9 has an invalid length. [ 382.713762][T10995] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1407'. [ 382.749541][T11000] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 384.075028][T11037] netlink: 'syz.3.1418': attribute type 15 has an invalid length. [ 384.154789][T11037] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1418'. [ 384.193906][T11034] netlink: 'syz.3.1418': attribute type 9 has an invalid length. [ 384.207988][T11034] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1418'. [ 384.409120][T11039] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1420'. [ 384.419781][T11039] openvswitch: netlink: Tunnel attr 11913 out of range max 16 [ 384.553054][T11042] netlink: 'syz.1.1421': attribute type 10 has an invalid length. [ 384.586126][T11042] netlink: 'syz.1.1421': attribute type 21 has an invalid length. [ 384.815166][T11051] sctp: [Deprecated]: syz.2.1424 (pid 11051) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.815166][T11051] Use struct sctp_sack_info instead [ 384.886836][T11054] sctp: [Deprecated]: syz.2.1424 (pid 11054) Use of struct sctp_assoc_value in delayed_ack socket option. [ 384.886836][T11054] Use struct sctp_sack_info instead [ 385.081374][T11058] netlink: 'syz.0.1427': attribute type 21 has an invalid length. [ 385.125818][T11058] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1427'. [ 385.471970][T11071] netlink: 'syz.1.1433': attribute type 16 has an invalid length. [ 385.481439][T11071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1433'. [ 385.496876][T11072] netlink: 'syz.1.1433': attribute type 16 has an invalid length. [ 385.627402][T11072] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1433'. [ 385.696570][T11075] netlink: 'syz.0.1431': attribute type 15 has an invalid length. [ 385.720865][T11075] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1431'. [ 385.803696][T11075] netlink: 'syz.0.1431': attribute type 9 has an invalid length. [ 385.923353][T11075] netlink: 399 bytes leftover after parsing attributes in process `syz.0.1431'. [ 386.659795][T11096] netlink: 'syz.2.1439': attribute type 3 has an invalid length. [ 386.672617][T11096] netlink: 'syz.2.1439': attribute type 16 has an invalid length. [ 386.698638][T11096] netlink: 'syz.2.1439': attribute type 18 has an invalid length. [ 386.712227][T11096] netlink: 'syz.2.1439': attribute type 20 has an invalid length. [ 388.798922][T11178] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1463'. [ 388.939798][T11178] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1463'. [ 389.523831][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.536761][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.550913][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.563910][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.579696][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.642327][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.653347][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.659219][T11200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1468'. [ 389.666198][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.686031][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 389.702047][T11196] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 394.704972][T11240] validate_nla: 4 callbacks suppressed [ 394.704994][T11240] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 394.836645][T11240] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 394.935165][T11243] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 394.963927][T11240] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 394.997345][T11248] netlink: 'syz.1.1479': attribute type 29 has an invalid length. [ 395.830728][T11265] syzkaller0: entered promiscuous mode [ 395.849743][T11265] syzkaller0: entered allmulticast mode [ 395.866361][T11268] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1486'. [ 398.881224][T11305] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1495'. [ 399.536099][T11332] net_ratelimit: 10907 callbacks suppressed [ 399.536191][T11332] netlink: set zone limit has 8 unknown bytes [ 399.882187][T11340] netlink: 'syz.2.1505': attribute type 9 has an invalid length. [ 400.065629][T11340] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1505'. [ 400.462785][T11348] netlink: 'syz.3.1506': attribute type 153 has an invalid length. [ 400.472371][T11348] netlink: 'syz.3.1506': attribute type 1 has an invalid length. [ 400.481591][T11348] netlink: 104088 bytes leftover after parsing attributes in process `syz.3.1506'. [ 400.862019][T11354] delete_channel: no stack [ 400.879503][T11354] delete_channel: no stack [ 401.116814][T11361] tap0: tun_chr_ioctl cmd 1074025680 [ 402.029762][T11400] netlink: 'syz.0.1522': attribute type 21 has an invalid length. [ 402.073978][T11400] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1522'. [ 402.115448][T11398] netlink: 'syz.0.1522': attribute type 21 has an invalid length. [ 402.123655][T11398] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1522'. [ 402.243320][T11406] netlink: 'syz.1.1523': attribute type 2 has an invalid length. [ 402.472641][T11408] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1523'. [ 402.937089][T11419] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1527'. [ 403.032372][T11423] netlink: 'syz.1.1528': attribute type 21 has an invalid length. [ 403.104732][T11423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1528'. [ 403.310466][T11432] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 403.324865][T11432] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1533'. [ 403.351620][T11432] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 403.577294][T11443] netlink: 'syz.0.1535': attribute type 153 has an invalid length. [ 403.585475][T11443] netlink: 'syz.0.1535': attribute type 1 has an invalid length. [ 403.596985][T11443] netlink: 104088 bytes leftover after parsing attributes in process `syz.0.1535'. [ 403.998341][T11457] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1540'. [ 404.115473][T11459] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1541'. [ 404.238111][T11467] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1544'. [ 407.221871][T11523] __nla_validate_parse: 1 callbacks suppressed [ 407.222317][T11523] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1559'. [ 407.243835][T11523] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 407.381765][T11524] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 407.638616][T11501] validate_nla: 6 callbacks suppressed [ 407.638644][T11501] netlink: 'syz.0.1553': attribute type 10 has an invalid length. [ 407.916476][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.989747][T11501] bridge_slave_1: left allmulticast mode [ 408.042739][T11501] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.349062][T11501] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 408.503030][T11543] netlink: 'syz.1.1564': attribute type 21 has an invalid length. [ 408.847459][T11552] netlink: 'syz.3.1567': attribute type 10 has an invalid length. [ 409.032419][T11553] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1567'. [ 409.074474][T11557] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1567'. [ 410.043223][T11574] netlink: 'syz.2.1574': attribute type 3 has an invalid length. [ 410.216719][T11574] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1574'. [ 410.748525][T11586] netlink: 'syz.0.1578': attribute type 2 has an invalid length. [ 410.784750][T11586] netlink: 'syz.0.1578': attribute type 8 has an invalid length. [ 410.793643][T11586] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1578'. [ 410.808832][T11580] Ù: renamed from bond_slave_1 (while UP) [ 411.214411][T11595] netlink: 'syz.1.1581': attribute type 33 has an invalid length. [ 411.245091][T11595] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1581'. [ 411.881908][T11618] netlink: 'syz.2.1588': attribute type 10 has an invalid length. [ 411.891651][T11618] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1588'. [ 412.399724][T11626] netlink: 'syz.1.1590': attribute type 3 has an invalid length. [ 412.421678][T11626] netlink: 'syz.1.1590': attribute type 1 has an invalid length. [ 412.444853][T11626] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1590'. [ 412.566886][T11629] Ù: renamed from bond_slave_1 (while UP) [ 413.063043][T11648] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1597'. [ 413.619509][T11657] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1600'. [ 413.844223][T11662] netlink: 'syz.2.1601': attribute type 1 has an invalid length. [ 413.874877][T11662] netlink: 'syz.2.1601': attribute type 3 has an invalid length. [ 413.931376][T11662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1601'. [ 414.243100][T11668] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1604'. [ 414.606819][T11677] tap0: tun_chr_ioctl cmd 1074025692 [ 416.713149][T11708] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1616'. [ 416.825637][T11715] netlink: 'syz.0.1611': attribute type 12 has an invalid length. [ 416.900825][T11715] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1611'. [ 417.011337][T11717] netlink: 'syz.0.1611': attribute type 12 has an invalid length. [ 417.075674][T11717] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1611'. [ 417.637708][T11729] netlink: 'syz.2.1620': attribute type 10 has an invalid length. [ 417.651948][T11729] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 418.311747][T11749] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1626'. [ 418.893546][T11757] tun0: tun_chr_ioctl cmd 1074025675 [ 418.964878][T11757] tun0: persist enabled [ 418.976661][T11758] tun0: tun_chr_ioctl cmd 1074025675 [ 419.008516][T11758] tun0: persist disabled [ 419.142102][T11756] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1627'. [ 419.280664][T11760] netlink: 'syz.3.1629': attribute type 46 has an invalid length. [ 419.341524][T11760] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1629'. [ 419.693580][T11766] netlink: 'syz.2.1630': attribute type 10 has an invalid length. [ 419.744973][T11766] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1630'. [ 420.152277][T11773] syzkaller0: entered promiscuous mode [ 420.174097][T11773] syzkaller0: entered allmulticast mode [ 420.894279][T11797] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1637'. [ 421.082500][T11797] A link change request failed with some changes committed already. Interface Q±6ã`Ò˜ may have been left with an inconsistent configuration, please check. [ 421.853664][T11811] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1645'. [ 421.895672][T11813] netlink: 'syz.1.1647': attribute type 39 has an invalid length. [ 421.933551][T11811] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 421.956818][T11811] CPU: 1 PID: 11811 Comm: syz.3.1645 Not tainted syzkaller #0 [ 421.964384][T11811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.974508][T11811] Call Trace: [ 421.977930][T11811] [ 421.980994][T11811] dump_stack_lvl+0x18c/0x250 [ 421.985931][T11811] ? show_regs_print_info+0x20/0x20 [ 421.991240][T11811] ? load_image+0x420/0x420 [ 421.995877][T11811] sysfs_warn_dup+0x8e/0xa0 [ 422.000512][T11811] sysfs_do_create_link_sd+0xc0/0x110 [ 422.005954][T11811] device_add_class_symlinks+0x1cf/0x240 [ 422.011678][T11811] device_add+0x507/0xc50 [ 422.016053][T11811] wiphy_register+0x1dad/0x2ae0 [ 422.021054][T11811] ? cfg80211_event_work+0x40/0x40 [ 422.026191][T11811] ? minstrel_ht_alloc+0x88a/0x990 [ 422.031397][T11811] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 422.037588][T11811] ieee80211_register_hw+0x3464/0x4250 [ 422.043156][T11811] ? ieee80211_tasklet_handler+0x20/0x20 [ 422.048826][T11811] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 422.054821][T11811] ? __debug_object_init+0xec/0x450 [ 422.060104][T11811] ? __asan_memset+0x22/0x40 [ 422.064756][T11811] ? __hrtimer_init+0x186/0x270 [ 422.069684][T11811] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 422.075499][T11811] ? mac80211_hwsim_free+0x220/0x220 [ 422.080813][T11811] ? rcu_is_watching+0x15/0xb0 [ 422.085609][T11811] ? kstrndup+0xbd/0x140 [ 422.089920][T11811] hwsim_new_radio_nl+0xdc9/0x1a90 [ 422.095071][T11811] ? __nla_validate+0x50/0x50 [ 422.099798][T11811] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 422.106179][T11811] ? __nla_parse+0x40/0x50 [ 422.110626][T11811] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 422.117064][T11811] genl_family_rcv_msg_doit+0x211/0x310 [ 422.122638][T11811] ? end_current_label_crit_section+0x170/0x170 [ 422.128940][T11811] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 422.134877][T11811] ? bpf_lsm_capable+0x9/0x10 [ 422.139595][T11811] ? security_capable+0x89/0xb0 [ 422.144493][T11811] genl_rcv_msg+0x619/0x7a0 [ 422.149036][T11811] ? genl_bind+0x360/0x360 [ 422.153479][T11811] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 422.159839][T11811] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 422.166462][T11811] ? ref_tracker_free+0x690/0x840 [ 422.171535][T11811] netlink_rcv_skb+0x241/0x4d0 [ 422.176337][T11811] ? genl_bind+0x360/0x360 [ 422.180783][T11811] ? netlink_ack+0x1180/0x1180 [ 422.185596][T11811] ? __lock_acquire+0x7d40/0x7d40 [ 422.190661][T11811] ? down_read+0x1ac/0x2e0 [ 422.195112][T11811] genl_rcv+0x28/0x40 [ 422.199132][T11811] netlink_unicast+0x751/0x8d0 [ 422.203940][T11811] netlink_sendmsg+0x8d0/0xbf0 [ 422.208749][T11811] ? netlink_getsockopt+0x590/0x590 [ 422.213981][T11811] ? aa_sock_msg_perm+0x94/0x150 [ 422.218971][T11811] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 422.224285][T11811] ? security_socket_sendmsg+0x80/0xa0 [ 422.229775][T11811] ? netlink_getsockopt+0x590/0x590 [ 422.235004][T11811] ____sys_sendmsg+0x5ba/0x960 [ 422.239882][T11811] ? __asan_memset+0x22/0x40 [ 422.244504][T11811] ? __sys_sendmsg_sock+0x30/0x30 [ 422.249558][T11811] ? __import_iovec+0x5f2/0x850 [ 422.254516][T11811] ? import_iovec+0x73/0xa0 [ 422.259079][T11811] ___sys_sendmsg+0x2a6/0x360 [ 422.263813][T11811] ? __sys_sendmsg+0x2a0/0x2a0 [ 422.268706][T11811] __se_sys_sendmsg+0x1c2/0x2b0 [ 422.273596][T11811] ? __x64_sys_sendmsg+0x80/0x80 [ 422.278593][T11811] ? lockdep_hardirqs_on+0x98/0x150 [ 422.283829][T11811] do_syscall_64+0x55/0xb0 [ 422.288267][T11811] ? clear_bhb_loop+0x40/0x90 [ 422.293040][T11811] ? clear_bhb_loop+0x40/0x90 [ 422.297742][T11811] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 422.303748][T11811] RIP: 0033:0x7f270579ce59 [ 422.308228][T11811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.327909][T11811] RSP: 002b:00007f27066f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.336422][T11811] RAX: ffffffffffffffda RBX: 00007f2705a15fa0 RCX: 00007f270579ce59 [ 422.344417][T11811] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 422.352414][T11811] RBP: 00007f2705832d6f R08: 0000000000000000 R09: 0000000000000000 [ 422.360416][T11811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.368416][T11811] R13: 00007f2705a16038 R14: 00007f2705a15fa0 R15: 00007ffe393225e8 [ 422.376443][T11811] [ 426.335437][T11855] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1656'. [ 426.888086][T11864] netlink: 'syz.0.1660': attribute type 9 has an invalid length. [ 426.901320][T11864] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1660'. [ 427.266400][T11864] netlink: 'syz.0.1660': attribute type 9 has an invalid length. [ 427.279501][T11864] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1660'. [ 427.917031][T11876] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 427.974826][T11879] netlink: set zone limit has 8 unknown bytes [ 427.985982][T11876] netlink: 'syz.2.1662': attribute type 29 has an invalid length. [ 427.993957][T11878] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1664'. [ 428.711140][T11906] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1673'. [ 428.749531][T11906] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1673'. [ 429.424926][T11910] syzkaller0: left promiscuous mode [ 429.430885][T11910] syzkaller0: left allmulticast mode [ 429.472238][T11913] netlink: 'syz.3.1674': attribute type 9 has an invalid length. [ 429.480451][T11913] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1674'. [ 429.491003][T11916] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1676'. [ 429.751912][T11913] netlink: 'syz.3.1674': attribute type 9 has an invalid length. [ 429.764702][T11913] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1674'. [ 429.790412][T11928] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1679'. [ 429.816692][T11928] netlink: zone id is out of range [ 434.237411][T11968] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1689'. [ 436.251364][T11975] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1691'. [ 436.551585][T11977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 436.580241][T11981] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1693'. [ 436.871562][T12003] netlink: 'syz.0.1699': attribute type 64 has an invalid length. [ 438.518038][T12000] netlink: 'syz.1.1698': attribute type 29 has an invalid length. [ 438.528202][T12038] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1707'. [ 438.719011][T12000] netlink: 'syz.1.1698': attribute type 29 has an invalid length. [ 438.949438][T12006] netlink: 'syz.1.1698': attribute type 29 has an invalid length. [ 439.267833][T12059] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1712'. [ 440.372311][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.379054][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.526974][T12089] netlink: 'syz.1.1720': attribute type 4 has an invalid length. [ 440.539038][T12089] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1720'. [ 440.627484][T12089] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 441.560417][T12119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 441.725480][T12122] syz.1.1729[12122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 441.725668][T12122] syz.1.1729[12122] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 442.147274][T12137] netlink: 'syz.0.1735': attribute type 5 has an invalid length. [ 442.394365][T12147] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1738'. [ 442.417628][T12147] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1738'. [ 442.931044][T12158] netlink: 'syz.3.1741': attribute type 29 has an invalid length. [ 442.966135][T12158] netlink: 'syz.3.1741': attribute type 29 has an invalid length. [ 443.091513][T12163] netlink: 'syz.2.1743': attribute type 21 has an invalid length. [ 443.125670][T12163] netlink: 'syz.2.1743': attribute type 6 has an invalid length. [ 443.146094][T12163] netlink: 'syz.2.1743': attribute type 6 has an invalid length. [ 443.153910][T12163] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1743'. [ 443.408371][T12172] delete_channel: no stack [ 443.425954][T12172] delete_channel: no stack [ 443.556046][T12178] ªªªªªª: renamed from vlan0 (while UP) [ 444.119761][T12186] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1752'. [ 444.139483][T12186] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1752'. [ 444.515834][T12197] netlink: 'syz.3.1754': attribute type 29 has an invalid length. [ 444.546390][T12197] netlink: 'syz.3.1754': attribute type 29 has an invalid length. [ 444.606801][T12197] netlink: 'syz.3.1754': attribute type 29 has an invalid length. [ 446.771475][T12217] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1760'. [ 447.137013][T12228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 448.433738][T12242] netlink: 'syz.1.1767': attribute type 4 has an invalid length. [ 448.469030][T12242] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1767'. [ 448.908993][T12242] .`: renamed from bond0 (while UP) [ 449.004057][T12244] C: renamed from team_slave_0 (while UP) [ 449.017286][T12244] netlink: 'syz.0.1766': attribute type 4 has an invalid length. [ 449.034757][T12244] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1766'. [ 449.049982][T12244] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 449.388586][T12223] netlink: 'syz.2.1763': attribute type 29 has an invalid length. [ 449.520049][T12223] netlink: 'syz.2.1763': attribute type 29 has an invalid length. [ 449.675363][T12229] netlink: 'syz.2.1763': attribute type 29 has an invalid length. [ 449.763804][T12262] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 449.804524][T12263] netlink: 'syz.0.1772': attribute type 3 has an invalid length. [ 449.828436][T12263] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1772'. [ 450.705477][T12266] mac80211_hwsim hwsim9 ..ãc¤±: renamed from wlan1 [ 450.925823][T12273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.645144][T12285] netlink: 'syz.1.1780': attribute type 5 has an invalid length. [ 451.724370][T12289] -1: renamed from syzkaller0 (while UP) [ 451.894111][T12294] netlink: 'syz.1.1782': attribute type 39 has an invalid length. [ 451.915112][T12294] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1782'. [ 451.938649][T12294] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 452.295023][T12302] netlink: 'syz.0.1787': attribute type 4 has an invalid length. [ 452.304253][T12306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 452.307227][T12302] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1787'. [ 452.414918][T12302] .`: renamed from bond0 (while UP) [ 453.731520][T12325] netlink: 'syz.0.1790': attribute type 10 has an invalid length. [ 455.175428][T12325] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.192914][T12325] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.205162][T12325] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.214424][T12325] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.136833][T12325] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.164721][T12325] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.183737][T12325] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.206134][T12325] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.237467][T12325] team0: Port device geneve1 added [ 457.387061][T12371] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.1803'. [ 457.389821][T12368] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.1803'. [ 457.735900][T12383] netlink: 'syz.0.1807': attribute type 3 has an invalid length. [ 457.745872][T12383] netlink: 'syz.0.1807': attribute type 1 has an invalid length. [ 457.767876][T12383] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.1807'. [ 457.774853][T12384] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1806'. [ 458.345437][T12387] netlink: 'syz.3.1809': attribute type 4 has an invalid length. [ 458.353572][T12387] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1809'. [ 458.462139][T12387] .`: renamed from bond0 (while UP) [ 459.320890][T12401] netlink: 'syz.1.1815': attribute type 1 has an invalid length. [ 459.352187][T12401] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1815'. [ 459.671673][T12420] netlink: 'syz.2.1818': attribute type 27 has an invalid length. [ 459.715596][T12420] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1818'. [ 459.970511][T12427] netlink: 'syz.0.1821': attribute type 9 has an invalid length. [ 459.985547][T12427] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1821'. [ 460.867823][T12447] netlink: 'syz.0.1826': attribute type 4 has an invalid length. [ 460.885021][T12447] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1826'. [ 461.472915][T12461] netlink: 'syz.0.1833': attribute type 1 has an invalid length. [ 461.501080][T12461] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.1833'. [ 461.777634][T12464] netlink: 'syz.3.1834': attribute type 27 has an invalid length. [ 462.165553][T12476] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.256365][T12476] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.289951][T12476] batman_adv: batadv0: Interface deactivated: €Â0 [ 462.311189][T12476] batman_adv: batadv0: Removing interface: €Â0 [ 462.322746][T12476] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 462.331890][T12476] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 463.240861][T12504] netlink: 'syz.2.1840': attribute type 4 has an invalid length. [ 463.261838][T12504] __nla_validate_parse: 1 callbacks suppressed [ 463.261856][T12504] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1840'. [ 463.373793][T12504] wlan1: mtu less than device minimum [ 463.386197][T12504] team0: Device wlan1 failed to change mtu [ 463.873175][T12504] syz.2.1840 (12504) used greatest stack depth: 17192 bytes left [ 464.432410][T12514] netlink: 'syz.2.1846': attribute type 10 has an invalid length. [ 464.444820][T12514] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1846'. [ 464.456030][T12519] netlink: 'syz.0.1844': attribute type 10 has an invalid length. [ 464.932249][T12519] team0: Device veth0_vlan failed to register rx_handler [ 465.179333][T12532] netlink: 'syz.1.1849': attribute type 27 has an invalid length. [ 465.194825][T12532] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1849'. [ 466.043852][T12554] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1857'. [ 466.055962][T12554] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1857'. [ 466.508371][T12555] delete_channel: no stack [ 466.739740][T12561] netlink: 'syz.0.1859': attribute type 10 has an invalid length. [ 466.916541][T12561] .`: (slave team0): Releasing backup interface [ 466.990148][T12561] team0 (unregistering): Port device C removed [ 467.025093][T12561] team0 (unregistering): Port device team_slave_1 removed [ 467.046123][T12561] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.055749][T12561] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.066442][T12561] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.075919][T12561] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.109811][T12561] team0 (unregistering): Port device geneve1 removed [ 467.227519][T12575] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1861'. [ 467.291461][T12580] netlink: 'syz.3.1865': attribute type 9 has an invalid length. [ 467.319161][T12580] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1865'. [ 467.463781][T12586] netlink: 'syz.0.1867': attribute type 27 has an invalid length. [ 467.525297][T12586] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1867'. [ 467.831884][T12593] syzkaller0: entered promiscuous mode [ 467.856219][T12593] syzkaller0: entered allmulticast mode [ 468.082103][T12595] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1871'. [ 468.131219][T12595] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1871'. [ 468.381833][T12602] netlink: 'syz.0.1872': attribute type 3 has an invalid length. [ 468.392887][T12602] __nla_validate_parse: 1 callbacks suppressed [ 468.392906][T12602] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1872'. [ 469.057896][T12609] netlink: 'syz.3.1874': attribute type 13 has an invalid length. [ 469.087526][T12609] netlink: 160 bytes leftover after parsing attributes in process `syz.3.1874'. [ 469.122369][T12609] erspan0: refused to change device tx_queue_len [ 469.129051][T12609] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 469.412132][T12609] netlink: 'syz.3.1874': attribute type 10 has an invalid length. [ 470.337490][T12644] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1882'. [ 470.367438][T12644] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1882'. [ 470.772535][T12650] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1885'. [ 471.531985][T12658] syzkaller0: entered promiscuous mode [ 471.540920][T12658] syzkaller0: entered allmulticast mode [ 471.597714][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1891'. [ 471.899318][T12676] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1892'. [ 472.703712][T12701] netlink: 'syz.1.1900': attribute type 9 has an invalid length. [ 472.712030][T12701] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1900'. [ 473.331293][T12709] netlink: 'syz.3.1902': attribute type 6 has an invalid length. [ 473.364176][T12709] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1902'. [ 473.796074][T12726] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1907'. [ 473.849336][T12725] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1908'. [ 474.622979][T12747] netlink: 'syz.2.1914': attribute type 9 has an invalid length. [ 474.660774][T12747] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1914'. [ 474.906205][T12757] netlink: 'syz.0.1917': attribute type 6 has an invalid length. [ 474.922425][T12757] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1917'. [ 475.221787][T12770] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 475.246257][T12770] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 475.756825][T12786] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1921'. [ 475.916787][T12787] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1925'. [ 477.185481][T12803] À: port 1(ªªªªªª) entered blocking state [ 477.191584][T12803] À: port 1(ªªªªªª) entered disabled state [ 477.207982][T12803] ªªªªªª: entered allmulticast mode [ 477.213276][T12803] veth0_vlan: entered allmulticast mode [ 477.261080][T12803] ªªªªªª: entered promiscuous mode [ 477.291706][T12803] À: port 1(ªªªªªª) entered blocking state [ 477.298698][T12803] À: port 1(ªªªªªª) entered forwarding state [ 477.705646][T12827] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1938'. [ 477.736474][T12827] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1938'. [ 478.248196][T12838] pim6reg1: entered promiscuous mode [ 478.253586][T12838] pim6reg1: entered allmulticast mode [ 478.260625][T12825] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1936'. [ 478.578690][T12844] netlink: 'syz.3.1942': attribute type 21 has an invalid length. [ 479.076006][T12853] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1945'. [ 479.926036][T12882] mac80211_hwsim hwsim3 .3ãc¤±: renamed from wlan1 [ 479.940869][T12882] netlink: 'syz.3.1952': attribute type 3 has an invalid length. [ 479.949756][T12882] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1952'. [ 480.062417][T12885] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1954'. [ 480.106215][T12887] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1955'. [ 480.405639][T12898] netlink: 'syz.3.1956': attribute type 1 has an invalid length. [ 480.413603][T12898] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1956'. [ 480.431250][T12897] netlink: 'syz.0.1958': attribute type 4 has an invalid length. [ 480.439656][T12897] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1958'. [ 480.478867][T12900] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1957'. [ 480.499938][T12900] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 480.710020][T12904] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1960'. [ 481.159856][T12918] netlink: 'syz.1.1964': attribute type 9 has an invalid length. [ 481.184888][T12918] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1964'. [ 481.357338][T12922] syzkaller0: entered promiscuous mode [ 481.374763][T12922] syzkaller0: entered allmulticast mode [ 481.879289][T12932] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1968'. [ 482.527511][T12945] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 482.544588][T12944] netlink: 'syz.1.1971': attribute type 3 has an invalid length. [ 482.858504][T12949] netlink: 'syz.2.1973': attribute type 29 has an invalid length. [ 482.906765][T12949] netlink: 'syz.2.1973': attribute type 29 has an invalid length. [ 482.943096][T12949] netlink: 'syz.2.1973': attribute type 29 has an invalid length. [ 483.547503][T12960] À: port 1(vlan0) entered blocking state [ 483.591568][T12960] À: port 1(vlan0) entered disabled state [ 483.655614][T12960] vlan0: entered allmulticast mode [ 483.702784][T12960] veth0_vlan: entered allmulticast mode [ 483.774223][T12960] vlan0: entered promiscuous mode [ 483.866036][T12960] À: port 1(vlan0) entered blocking state [ 483.871956][T12960] À: port 1(vlan0) entered forwarding state [ 486.171236][T12978] validate_nla: 2 callbacks suppressed [ 486.171257][T12978] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 486.226869][T12978] __nla_validate_parse: 3 callbacks suppressed [ 486.226886][T12978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1980'. [ 486.259714][T12978] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 487.561329][T13007] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1988'. [ 489.900848][T13031] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1993'. [ 489.924785][T13026] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1992'. [ 491.213105][T13054] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1996'. [ 493.675088][T13097] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2010'. [ 493.754910][T13097] team0: Port device team_slave_0 removed [ 493.767255][T13097] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 495.494803][T13120] netlink: 'syz.3.2017': attribute type 4 has an invalid length. [ 495.519437][T13120] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2017'. [ 495.646281][T13129] netlink: 49920 bytes leftover after parsing attributes in process `syz.1.2020'. [ 495.715144][T13129] netlink: 'syz.1.2020': attribute type 21 has an invalid length. [ 495.723053][T13129] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2020'. [ 495.861415][T13133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2022'. [ 496.818566][T13155] tap0: tun_chr_ioctl cmd 35108 [ 496.935280][T13157] netlink: 180 bytes leftover after parsing attributes in process `syz.3.2028'. [ 497.140087][T13167] netlink: 'syz.3.2032': attribute type 21 has an invalid length. [ 497.174159][T13167] netlink: 'syz.3.2032': attribute type 1 has an invalid length. [ 497.212657][T13167] netlink: 15998 bytes leftover after parsing attributes in process `syz.3.2032'. [ 497.987085][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 34 [ 499.219382][T13213] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 499.261553][T13213] team0: Device nlmon0 is of different type [ 499.298611][T13214] netlink: 'syz.3.2044': attribute type 10 has an invalid length. [ 499.342482][T13214] team0: Device nlmon0 is of different type [ 499.428133][T13226] netlink: 'syz.2.2047': attribute type 4 has an invalid length. [ 499.467579][T13226] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2047'. [ 499.502503][T13226] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 499.700994][T13233] syzkaller1: entered promiscuous mode [ 499.718140][T13233] syzkaller1: entered allmulticast mode [ 500.797471][T13266] syz.0.2059[13266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 500.797620][T13266] syz.0.2059[13266] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 501.059763][T13275] netlink: 'syz.0.2061': attribute type 1 has an invalid length. [ 501.210785][T13275] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2061'. [ 501.809389][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.816079][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.907083][T13286] syzkaller1: entered promiscuous mode [ 501.919949][T13286] syzkaller1: entered allmulticast mode [ 502.187627][T13304] bridge_slave_0: mtu less than device minimum [ 503.299628][T13335] netlink: 'syz.2.2076': attribute type 1 has an invalid length. [ 503.494774][T13335] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.2076'. [ 503.549932][ T5790] Bluetooth: hci0: ISO packet for unknown connection handle 34 [ 504.376689][T13355] netlink: 'syz.3.2084': attribute type 29 has an invalid length. [ 504.395585][T13355] netlink: 'syz.3.2084': attribute type 29 has an invalid length. [ 504.455994][T13357] netlink: 'syz.3.2084': attribute type 29 has an invalid length. [ 504.506165][T13356] netlink: 15998 bytes leftover after parsing attributes in process `syz.0.2082'. [ 504.554872][T13355] netlink: 'syz.3.2084': attribute type 29 has an invalid length. [ 504.597424][T13357] netlink: 'syz.3.2084': attribute type 23 has an invalid length. [ 504.819663][T13369] netlink: 209032 bytes leftover after parsing attributes in process `syz.3.2086'. [ 504.852966][T13369] netlink: 252 bytes leftover after parsing attributes in process `syz.3.2086'. [ 505.821872][T13391] netlink: 'syz.2.2091': attribute type 21 has an invalid length. [ 505.864866][T13391] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2091'. [ 506.056447][T13396] netlink: 'syz.3.2093': attribute type 41 has an invalid length. [ 506.064347][T13396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2093'. [ 506.300774][T13407] netlink: 'syz.1.2092': attribute type 1 has an invalid length. [ 506.344746][T13407] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2092'. [ 506.377741][T13406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.159952][T13423] netlink: 'syz.1.2101': attribute type 2 has an invalid length. [ 507.196295][T13423] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2101'. [ 507.703203][T13435] netlink: 183836 bytes leftover after parsing attributes in process `syz.1.2101'. [ 507.739803][T13435] openvswitch: netlink: Key type 29 is not supported [ 508.121288][T13415] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2099'. [ 508.161702][T13415] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2099'. [ 509.275122][T13443] bridge0: port 2(gretap0) entered blocking state [ 509.281741][T13443] bridge0: port 2(gretap0) entered disabled state [ 509.391554][T13443] gretap0: entered allmulticast mode [ 509.475211][T13443] gretap0: entered promiscuous mode [ 509.505587][T13443] bridge0: port 2(gretap0) entered blocking state [ 509.512324][T13443] bridge0: port 2(gretap0) entered forwarding state [ 509.832373][T13462] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2110'. [ 509.888510][T13462] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2110'. [ 510.026668][T13461] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.2109'. [ 510.078270][T13461] netlink: 'syz.0.2109': attribute type 10 has an invalid length. [ 510.129154][T13461] veth0_macvtap: left promiscuous mode [ 511.617312][T13495] netlink: 'syz.2.2119': attribute type 10 has an invalid length. [ 511.789558][T13495] bond0: (slave team0): Releasing backup interface [ 511.900012][T13495] team0 (unregistering): Port device C removed [ 511.947319][T13495] team0 (unregistering): Port device team_slave_1 removed [ 511.984463][T13495] team0 (unregistering): Port device wlan1 removed [ 512.021469][T13495] team0 (unregistering): Port device geneve1 removed [ 512.048978][T13502] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2120'. [ 512.059244][T13502] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2120'. [ 512.416736][T13519] netlink: 'syz.2.2125': attribute type 46 has an invalid length. [ 512.579952][T13529] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2126'. [ 512.609382][ T5790] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 512.947412][T13536] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2128'. [ 514.684768][ T5789] Bluetooth: hci3: command 0x0406 tx timeout [ 515.682278][T13547] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2133'. [ 515.692004][T13547] bridge_slave_1: default FDB implementation only supports local addresses [ 515.935848][T13558] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2134'. [ 515.958827][T13558] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2134'. [ 516.575053][T13565] netlink: 'syz.2.2135': attribute type 10 has an invalid length. [ 516.722724][T13567] veth1_macvtap: left promiscuous mode [ 516.788195][T13566] veth1_macvtap: entered promiscuous mode [ 516.796846][T13566] macsec0: entered promiscuous mode [ 516.805440][T13566] macsec0: entered allmulticast mode [ 516.811294][T13566] veth1_macvtap: entered allmulticast mode [ 516.889236][T13569] netlink: 'syz.3.2138': attribute type 25 has an invalid length. [ 516.923281][T13569] netlink: 'syz.3.2138': attribute type 3 has an invalid length. [ 516.949799][T13569] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2138'. [ 517.614033][T13601] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2146'. [ 517.644296][T13601] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2146'. [ 517.891520][T13604] netlink: 'syz.1.2147': attribute type 27 has an invalid length. [ 518.409557][T13621] netlink: 'syz.0.2151': attribute type 25 has an invalid length. [ 518.484160][T13621] netlink: 'syz.0.2151': attribute type 3 has an invalid length. [ 518.544751][T13621] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2151'. [ 519.357667][T13651] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2158'. [ 519.402542][T13651] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2158'. [ 520.591446][T13682] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2168'. [ 521.036565][T13699] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2172'. [ 521.067372][T13699] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2172'. [ 522.818867][T13738] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2180'. [ 523.034369][T13744] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2183'. [ 523.060108][T13744] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2183'. [ 523.083691][T13746] syz.3.2184[13746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.083951][T13746] syz.3.2184[13746] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 523.158794][T13742] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2182'. [ 524.134831][T13766] netlink: 'syz.3.2191': attribute type 21 has an invalid length. [ 525.077880][T13779] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2196'. [ 525.099284][T13779] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2196'. [ 525.499866][T13788] netlink: 'syz.1.2199': attribute type 10 has an invalid length. [ 525.508949][T13788] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2199'. [ 525.652886][T13796] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2200'. [ 526.579569][T13811] netlink: 'syz.3.2206': attribute type 10 has an invalid length. [ 526.595904][T13811] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2206'. [ 526.697596][T13818] netlink: 'syz.3.2209': attribute type 3 has an invalid length. [ 526.724706][T13818] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2209'. [ 526.931007][T13822] netlink: 'syz.1.2210': attribute type 1 has an invalid length. [ 526.944901][T13822] netlink: 'syz.1.2210': attribute type 2 has an invalid length. [ 526.958166][T13822] netlink: 'syz.1.2210': attribute type 2 has an invalid length. [ 526.977279][T13822] netlink: 'syz.1.2210': attribute type 3 has an invalid length. [ 527.004890][T13822] netlink: 'syz.1.2210': attribute type 4 has an invalid length. [ 527.023746][T13822] netlink: 'syz.1.2210': attribute type 5 has an invalid length. [ 527.050322][T13822] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.2210'. [ 527.093409][T13824] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2212'. [ 528.910957][T13860] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2223'. [ 529.766755][T13875] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2225'. [ 529.786176][T13859] validate_nla: 7 callbacks suppressed [ 529.786212][T13859] netlink: 'syz.0.2221': attribute type 7 has an invalid length. [ 529.825630][T13877] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2226'. [ 529.910204][T13859] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 529.944908][T13859] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2221'. [ 530.949462][T13900] netlink: 'syz.0.2233': attribute type 7 has an invalid length. [ 530.960757][T13900] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2233'. [ 532.335398][T13923] netlink: 'syz.3.2240': attribute type 11 has an invalid length. [ 533.617826][T13931] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2242'. [ 533.931684][T13936] delete_channel: no stack [ 533.939549][T13936] netlink: 'syz.0.2245': attribute type 22 has an invalid length. [ 534.228514][T13946] netlink: 'syz.0.2247': attribute type 21 has an invalid length. [ 534.295778][T13949] netlink: 'syz.3.2249': attribute type 1 has an invalid length. [ 534.304080][T13949] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2249'. [ 535.159917][T13976] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2256'. [ 536.111976][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 536.163395][T13978] delete_channel: no stack [ 536.175870][T13985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 536.216444][T13985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 536.223974][T13985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.305927][T13985] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 536.773832][T13992] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2261'. [ 536.935903][T13992] netlink: 'syz.1.2261': attribute type 1 has an invalid length. [ 536.965442][T13992] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2261'. [ 537.740052][T14011] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2267'. [ 537.812834][T14011] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2267'. [ 537.851024][T14011] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2267'. [ 537.872962][T14013] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2269'. [ 537.907356][T14007] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2267'. [ 537.943154][T14011] netlink: 'syz.1.2267': attribute type 10 has an invalid length. [ 537.981000][T14011] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 538.438612][T14027] openvswitch: netlink: Key type 29 is not supported [ 538.878733][T14042] netlink: 'syz.1.2276': attribute type 21 has an invalid length. [ 538.888253][T14042] __nla_validate_parse: 4 callbacks suppressed [ 538.888293][T14042] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2276'. [ 538.905412][T14042] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 539.263814][T14048] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2280'. [ 539.465387][T14048] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2280'. [ 539.706161][T14055] IPv6: Can't replace route, no match found [ 539.924637][T14052] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2281'. [ 540.149629][T14064] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2283'. [ 540.176396][T14064] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2283'. [ 540.449692][T14069] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2284'. [ 540.471790][T14068] netlink: 'syz.0.2285': attribute type 3 has an invalid length. [ 540.485207][T14068] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.2285'. [ 540.552835][T14068] netlink: 'syz.0.2285': attribute type 10 has an invalid length. [ 540.861431][T14081] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2289'. [ 541.830533][T14096] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2293'. [ 542.105933][T14099] IPv6: Can't replace route, no match found [ 542.908372][T14123] netlink: 'syz.2.2301': attribute type 21 has an invalid length. [ 542.916992][T14123] netlink: 'syz.2.2301': attribute type 1 has an invalid length. [ 543.363502][T14137] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 543.379550][T14137] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 543.397301][T14137] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 543.425608][T14137] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 543.457774][T14137] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 543.470392][T14137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 544.011735][T14157] netlink: 'syz.2.2308': attribute type 15 has an invalid length. [ 544.019879][T14157] __nla_validate_parse: 6 callbacks suppressed [ 544.019894][T14157] netlink: 168 bytes leftover after parsing attributes in process `syz.2.2308'. [ 544.252444][T14167] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2309'. [ 544.295934][T14166] delete_channel: no stack [ 544.762152][T14132] chnl_net:caif_netlink_parms(): no params data found [ 545.453370][T14132] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.472233][T14132] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.511346][T14132] bridge_slave_0: entered allmulticast mode [ 545.562677][T14132] bridge_slave_0: entered promiscuous mode [ 545.568957][ T5789] Bluetooth: hci1: command tx timeout [ 545.613771][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.652696][T14132] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.681084][T14132] bridge_slave_1: entered allmulticast mode [ 545.714246][T14132] bridge_slave_1: entered promiscuous mode [ 545.925178][T14186] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.2315'. [ 546.597520][T14132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.662848][T14132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.724697][T14200] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2317'. [ 546.756327][T14200] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2317'. [ 547.202545][T14217] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2316'. [ 547.482611][T14132] team0: Port device team_slave_0 added [ 547.495265][T14217] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2316'. [ 547.534108][T14221] netlink: 'syz.1.2316': attribute type 10 has an invalid length. [ 547.549083][T14221] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2316'. [ 547.560154][T14221] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 547.622910][T14132] team0: Port device team_slave_1 added [ 547.646550][ T5789] Bluetooth: hci1: command tx timeout [ 547.673946][T14197] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2316'. [ 547.788094][T14219] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.2316'. [ 547.815613][T14132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.834600][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.898767][T14132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.951203][ T9448] bridge0: port 2(gretap0) entered disabled state [ 548.024072][ T9448] gretap0 (unregistering): left allmulticast mode [ 548.041522][ T9448] gretap0 (unregistering): left promiscuous mode [ 548.051726][ T9448] bridge0: port 2(gretap0) entered disabled state [ 548.088134][T14132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.105002][T14132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.164054][T14132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.787367][T14132] hsr_slave_0: entered promiscuous mode [ 548.817656][T14132] hsr_slave_1: entered promiscuous mode [ 548.871156][T14231] netlink: 'syz.1.2321': attribute type 3 has an invalid length. [ 549.724718][ T5789] Bluetooth: hci1: command tx timeout [ 550.136429][T14264] __nla_validate_parse: 1 callbacks suppressed [ 550.136448][T14264] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2326'. [ 550.183095][T14264] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2326'. [ 551.289507][T14284] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2335'. [ 551.320210][T14284] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2335'. [ 551.805948][ T5789] Bluetooth: hci1: command tx timeout [ 551.938604][T14298] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2330'. [ 552.086912][T14300] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2328'. [ 552.126991][T14300] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2328'. [ 552.250852][T14285] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2328'. [ 552.344206][T14294] netlink: 'syz.3.2328': attribute type 10 has an invalid length. [ 552.363476][T14294] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2328'. [ 552.402227][T14301] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2328'. [ 552.432525][T14132] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 552.515071][T14132] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 552.706482][T14132] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 552.746924][T14132] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 554.140768][ T9448] vlan0: left allmulticast mode [ 554.154620][ T9448] veth0_vlan: left allmulticast mode [ 554.166144][ T9448] vlan0: left promiscuous mode [ 554.182026][ T9448] À: port 1(vlan0) entered disabled state [ 554.207005][ T9448] hsr_slave_0: left promiscuous mode [ 554.221428][ T9448] hsr_slave_1: left promiscuous mode [ 554.235589][ T9448] bridge_slave_0: left allmulticast mode [ 554.241535][ T9448] bridge_slave_0: left promiscuous mode [ 554.257716][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.341063][ T9448] veth1_macvtap: left allmulticast mode [ 554.347308][ T9448] veth1_macvtap: left promiscuous mode [ 554.353712][ T9448] veth1_vlan: left promiscuous mode [ 558.099110][ T9448] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.152442][ T9448] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.200425][ T9448] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 558.456864][ T9448] .` (unregistering): (slave bridge0): Releasing backup interface [ 558.465668][ T9448] .` (unregistering): Released all slaves [ 558.600869][T14132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 558.714157][T14132] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.749848][T14364] __nla_validate_parse: 6 callbacks suppressed [ 558.749869][T14364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2344'. [ 558.823712][ T9439] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.830985][ T9439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.903897][ T9439] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.911165][ T9439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.292383][T14382] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2348'. [ 559.336260][T14382] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2348'. [ 559.773375][T14403] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2351'. [ 559.827631][T14399] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.2350'. [ 559.901448][T14132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.110770][T14132] veth0_vlan: entered promiscuous mode [ 560.197528][T14132] veth1_vlan: entered promiscuous mode [ 560.322056][T14132] veth0_macvtap: entered promiscuous mode [ 560.388519][T14132] veth1_macvtap: entered promiscuous mode [ 560.432426][T14415] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2353'. [ 560.466594][T14132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.519508][T14132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.729373][T14420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2354'. [ 560.788256][T14132] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.814900][T14132] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.864668][T14132] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.893986][T14132] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.345474][ T2922] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.353387][ T2922] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 561.419361][T14433] netlink: 'syz.3.2356': attribute type 2 has an invalid length. [ 561.438742][T14433] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2356'. [ 561.515718][ T9448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 561.549621][ T9448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 563.285178][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.294463][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.201596][T14484] netlink: 'syz.0.2362': attribute type 1 has an invalid length. [ 564.234780][T14484] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.2362'. [ 564.462684][T14486] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2363'. [ 564.908242][T14493] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2365'. [ 564.999607][T14493] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.214450][T14137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 565.228810][T14137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 565.239210][T14137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 565.274822][T14137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 565.287310][T14137] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 565.295326][T14137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 565.477553][ T9440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.539781][T14504] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2368'. [ 565.601381][T14507] sit0: left promiscuous mode [ 565.736226][T14509] sit0: entered promiscuous mode [ 565.769698][T14511] netlink: 17861 bytes leftover after parsing attributes in process `syz.1.2369'. [ 565.933939][ T9440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.139425][ T9440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.359784][ T9440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.439704][T14520] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2372'. [ 566.530215][T14525] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2373'. [ 567.061280][T14495] chnl_net:caif_netlink_parms(): no params data found [ 567.142852][T14532] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2374'. [ 567.203147][T14536] netlink: 'syz.2.2374': attribute type 27 has an invalid length. [ 567.246559][T14536] netlink: 'syz.2.2374': attribute type 4 has an invalid length. [ 567.254367][T14536] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2374'. [ 567.405415][T14137] Bluetooth: hci0: command tx timeout [ 567.748548][T14553] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2375'. [ 568.598184][T14495] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.612088][T14495] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.637578][T14495] bridge_slave_0: entered allmulticast mode [ 568.659076][T14495] bridge_slave_0: entered promiscuous mode [ 568.897977][T14495] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.940504][T14495] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.964831][T14495] bridge_slave_1: entered allmulticast mode [ 568.982758][T14495] bridge_slave_1: entered promiscuous mode [ 569.029009][T14588] netlink: 'syz.1.2387': attribute type 41 has an invalid length. [ 569.141494][T14576] syzkaller0: entered promiscuous mode [ 569.152630][T14576] syzkaller0: entered allmulticast mode [ 569.359637][T14495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 569.498203][T14137] Bluetooth: hci0: command tx timeout [ 571.565678][T14137] Bluetooth: hci0: command tx timeout [ 571.706430][T14495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.932675][T14495] team0: Port device team_slave_0 added [ 571.960081][T14495] team0: Port device team_slave_1 added [ 572.465578][T14495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.493149][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.594618][T14495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.631260][T14495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.639489][T14495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 572.696282][T14495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.014978][T14622] __nla_validate_parse: 2 callbacks suppressed [ 573.015019][T14622] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2388'. [ 573.123725][T14495] hsr_slave_0: entered promiscuous mode [ 573.135941][T14495] hsr_slave_1: entered promiscuous mode [ 573.174203][T14495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 573.182157][T14495] Cannot create hsr debugfs directory [ 573.449681][T14627] netlink: 3076 bytes leftover after parsing attributes in process `syz.2.2389'. [ 573.472171][T14627] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2389'. [ 573.644802][T14137] Bluetooth: hci0: command tx timeout [ 573.782644][T14637] netlink: 'syz.1.2392': attribute type 6 has an invalid length. [ 573.817672][T14637] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2392'. [ 573.916146][T14639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2392'. [ 574.542484][ T9440] [ 574.544888][ T9440] ====================================================== [ 574.551931][ T9440] WARNING: possible circular locking dependency detected [ 574.558972][ T9440] syzkaller #0 Not tainted [ 574.563417][ T9440] ------------------------------------------------------ [ 574.570463][ T9440] kworker/u4:26/9440 is trying to acquire lock: [ 574.576768][ T9440] ffff88807a254d80 (team->team_lock_key){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 574.586279][ T9440] [ 574.586279][ T9440] but task is already holding lock: [ 574.593840][ T9440] ffff88807bab8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 574.604248][ T9440] [ 574.604248][ T9440] which lock already depends on the new lock. [ 574.604248][ T9440] [ 574.614670][ T9440] [ 574.614670][ T9440] the existing dependency chain (in reverse order) is: [ 574.623701][ T9440] [ 574.623701][ T9440] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 574.631469][ T9440] __mutex_lock+0x136/0xcc0 [ 574.636615][ T9440] ieee80211_open+0x144/0x200 [ 574.641841][ T9440] __dev_open+0x2cb/0x430 [ 574.646789][ T9440] dev_open+0xab/0x190 [ 574.651402][ T9440] team_add_slave+0x75f/0x29a0 [ 574.656712][ T9440] do_setlink+0xdfe/0x4130 [ 574.661728][ T9440] rtnl_newlink+0x17da/0x20a0 [ 574.666953][ T9440] rtnetlink_rcv_msg+0x869/0xfa0 [ 574.672524][ T9440] netlink_rcv_skb+0x241/0x4d0 [ 574.677841][ T9440] netlink_unicast+0x751/0x8d0 [ 574.683155][ T9440] netlink_sendmsg+0x8d0/0xbf0 [ 574.688471][ T9440] ____sys_sendmsg+0x5ba/0x960 [ 574.693783][ T9440] ___sys_sendmsg+0x2a6/0x360 [ 574.699006][ T9440] __se_sys_sendmsg+0x1c2/0x2b0 [ 574.704406][ T9440] do_syscall_64+0x55/0xb0 [ 574.709378][ T9440] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.715827][ T9440] [ 574.715827][ T9440] -> #0 (team->team_lock_key){+.+.}-{3:3}: [ 574.723870][ T9440] __lock_acquire+0x2df1/0x7d40 [ 574.729271][ T9440] lock_acquire+0x19e/0x420 [ 574.734319][ T9440] __mutex_lock+0x136/0xcc0 [ 574.739370][ T9440] team_del_slave+0x32/0x1c0 [ 574.744509][ T9440] team_device_event+0x28d/0xa20 [ 574.750008][ T9440] notifier_call_chain+0x197/0x380 [ 574.756053][ T9440] unregister_netdevice_many_notify+0x100d/0x1900 [ 574.763019][ T9440] unregister_netdevice_queue+0x32c/0x370 [ 574.769286][ T9440] _cfg80211_unregister_wdev+0x16b/0x580 [ 574.775471][ T9440] ieee80211_remove_interfaces+0x49e/0x690 [ 574.781826][ T9440] ieee80211_unregister_hw+0x5d/0x2a0 [ 574.787748][ T9440] mac80211_hwsim_del_radio+0x289/0x480 [ 574.793844][ T9440] hwsim_exit_net+0x58d/0x650 [ 574.799077][ T9440] cleanup_net+0x70a/0xbb0 [ 574.804039][ T9440] process_scheduled_works+0xa5d/0x15d0 [ 574.810138][ T9440] worker_thread+0xa55/0xfc0 [ 574.815287][ T9440] kthread+0x2fa/0x390 [ 574.819902][ T9440] ret_from_fork+0x48/0x80 [ 574.824884][ T9440] ret_from_fork_asm+0x11/0x20 [ 574.830220][ T9440] [ 574.830220][ T9440] other info that might help us debug this: [ 574.830220][ T9440] [ 574.840468][ T9440] Possible unsafe locking scenario: [ 574.840468][ T9440] [ 574.847934][ T9440] CPU0 CPU1 [ 574.853315][ T9440] ---- ---- [ 574.858698][ T9440] lock(&rdev->wiphy.mtx); [ 574.863242][ T9440] lock(team->team_lock_key); [ 574.870574][ T9440] lock(&rdev->wiphy.mtx); [ 574.877643][ T9440] lock(team->team_lock_key); [ 574.882444][ T9440] [ 574.882444][ T9440] *** DEADLOCK *** [ 574.882444][ T9440] [ 574.890607][ T9440] 5 locks held by kworker/u4:26/9440: [ 574.895998][ T9440] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 574.906929][ T9440] #1: ffffc900033b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 574.917504][ T9440] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 574.926971][ T9440] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 574.936854][ T9440] #4: ffff88807bab8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 574.947696][ T9440] [ 574.947696][ T9440] stack backtrace: [ 574.953774][ T9440] CPU: 1 PID: 9440 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 574.961436][ T9440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.971512][ T9440] Workqueue: netns cleanup_net [ 574.976311][ T9440] Call Trace: [ 574.979697][ T9440] [ 574.982662][ T9440] dump_stack_lvl+0x18c/0x250 [ 574.987371][ T9440] ? load_image+0x420/0x420 [ 574.991895][ T9440] ? show_regs_print_info+0x20/0x20 [ 574.997150][ T9440] ? print_circular_bug+0x12b/0x1a0 [ 575.002384][ T9440] check_noncircular+0x2fc/0x400 [ 575.007356][ T9440] ? print_deadlock_bug+0x5d0/0x5d0 [ 575.012579][ T9440] ? lockdep_lock+0xf5/0x230 [ 575.017203][ T9440] ? _find_first_zero_bit+0xd3/0x100 [ 575.022525][ T9440] __lock_acquire+0x2df1/0x7d40 [ 575.027430][ T9440] ? verify_lock_unused+0x140/0x140 [ 575.032656][ T9440] ? perf_trace_lock_acquire+0x104/0x410 [ 575.038328][ T9440] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 575.044955][ T9440] ? perf_trace_lock_acquire+0x104/0x410 [ 575.050631][ T9440] lock_acquire+0x19e/0x420 [ 575.055164][ T9440] ? team_del_slave+0x32/0x1c0 [ 575.059969][ T9440] ? __might_sleep+0xe0/0xe0 [ 575.064592][ T9440] ? read_lock_is_recursive+0x20/0x20 [ 575.070007][ T9440] __mutex_lock+0x136/0xcc0 [ 575.074543][ T9440] ? team_del_slave+0x32/0x1c0 [ 575.079341][ T9440] ? __lock_acquire+0x7d40/0x7d40 [ 575.084428][ T9440] ? rcu_is_watching+0x15/0xb0 [ 575.089279][ T9440] ? trace_contention_end+0x39/0xe0 [ 575.094510][ T9440] ? __mutex_lock+0x315/0xcc0 [ 575.099216][ T9440] ? team_del_slave+0x32/0x1c0 [ 575.104014][ T9440] ? mutex_lock_nested+0x20/0x20 [ 575.108994][ T9440] ? bond_netdev_event+0xeb/0xf20 [ 575.114048][ T9440] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 575.119813][ T9440] team_del_slave+0x32/0x1c0 [ 575.124447][ T9440] team_device_event+0x28d/0xa20 [ 575.129439][ T9440] notifier_call_chain+0x197/0x380 [ 575.134590][ T9440] unregister_netdevice_many_notify+0x100d/0x1900 [ 575.141126][ T9440] ? lock_chain_count+0x20/0x20 [ 575.146033][ T9440] ? unregister_netdevice_many+0x20/0x20 [ 575.151700][ T9440] ? kernfs_remove_by_name_ns+0x117/0x150 [ 575.157461][ T9440] ? __lock_acquire+0x7d40/0x7d40 [ 575.162521][ T9440] unregister_netdevice_queue+0x32c/0x370 [ 575.168273][ T9440] ? list_netdevice+0x730/0x730 [ 575.173172][ T9440] ? kernfs_remove_by_name_ns+0x117/0x150 [ 575.178928][ T9440] _cfg80211_unregister_wdev+0x16b/0x580 [ 575.184632][ T9440] ieee80211_remove_interfaces+0x49e/0x690 [ 575.190477][ T9440] ? ieee80211_do_stop+0x1e20/0x1e20 [ 575.195800][ T9440] ? rcu_is_watching+0x15/0xb0 [ 575.200612][ T9440] ieee80211_unregister_hw+0x5d/0x2a0 [ 575.206049][ T9440] mac80211_hwsim_del_radio+0x289/0x480 [ 575.211631][ T9440] ? rhashtable_remove_fast+0xc00/0xc00 [ 575.217213][ T9440] hwsim_exit_net+0x58d/0x650 [ 575.221924][ T9440] ? hwsim_init_net+0x90/0x90 [ 575.226637][ T9440] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 575.232578][ T9440] cleanup_net+0x70a/0xbb0 [ 575.237037][ T9440] ? ops_free_list+0x3b0/0x3b0 [ 575.241835][ T9440] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.247080][ T9440] ? process_scheduled_works+0x96f/0x15d0 [ 575.252833][ T9440] ? process_scheduled_works+0x96f/0x15d0 [ 575.258583][ T9440] process_scheduled_works+0xa5d/0x15d0 [ 575.264183][ T9440] ? worker_attach_to_pool+0x380/0x380 [ 575.269683][ T9440] ? assign_work+0x3d2/0x5d0 [ 575.274327][ T9440] worker_thread+0xa55/0xfc0 [ 575.278993][ T9440] kthread+0x2fa/0x390 [ 575.283103][ T9440] ? pr_cont_work+0x560/0x560 [ 575.287813][ T9440] ? kthread_blkcg+0xd0/0xd0 [ 575.292431][ T9440] ret_from_fork+0x48/0x80 [ 575.296881][ T9440] ? kthread_blkcg+0xd0/0xd0 [ 575.301504][ T9440] ret_from_fork_asm+0x11/0x20 [ 575.306315][ T9440] [ 575.420377][ T9440] team0: Port device .3ãc¤± removed [ 575.547051][T14658] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 578.619419][ T9440] team0 (unregistering): Port device geneve1 removed [ 578.651264][ T9440] .` (unregistering): (slave geneve0): Releasing backup interface [ 578.763762][ T9440] team0 (unregistering): Port device team_slave_1 removed [ 578.829961][ T9440] .` (unregistering): (slave cÙ): Releasing backup interface [ 578.866921][ T9440] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 578.897175][ T9440] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 579.025140][ T9440] .` (unregistering): Released all slaves [ 579.055270][T14495] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 579.066298][T14495] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 579.080697][T14495] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 579.092331][T14495] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 579.220432][T14495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.252831][T14495] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.270252][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.277441][ T9452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.298518][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.305992][ T9452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.538866][T14495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 579.593344][T14495] veth0_vlan: entered promiscuous mode [ 579.607670][T14495] veth1_vlan: entered promiscuous mode [ 579.640644][T14495] veth0_macvtap: entered promiscuous mode [ 579.657524][T14495] veth1_macvtap: entered promiscuous mode [ 579.677834][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 579.689047][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.701430][T14495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 579.714975][T14495] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.725884][T14495] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.740243][T14495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.752812][T14495] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.761967][T14495] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.771515][T14495] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.781223][T14495] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.833566][T14495] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht' [ 579.870491][T13039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.881210][T14495] ieee80211 phy57: Selected rate control algorithm 'minstrel_ht' [ 579.893715][T13039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.933739][T13039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.943024][T13039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50