last executing test programs: 1m2.467195276s ago: executing program 0 (id=2779): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0xf, 0x2, 0xff, 0x0, 0x0, 0x2, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x5, 0xdf1d, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r1], 0x9a) 1m2.314050878s ago: executing program 0 (id=2784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf0, 0x0, 0x0, 0x3, 0x0, 0x100000001, 0x82e0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x3}, 0x2018, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8982, &(0x7f0000000080)) 1m2.192830918s ago: executing program 0 (id=2787): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 1m2.054593419s ago: executing program 0 (id=2790): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2e, &(0x7f0000000040), 0x4) 1m1.856972996s ago: executing program 3 (id=2793): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x418f, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r0, 0x8010743f, &(0x7f0000000500)) 1m1.615570905s ago: executing program 2 (id=2796): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0xfffffffffffffc79, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1m1.573400899s ago: executing program 3 (id=2797): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.450299228s ago: executing program 2 (id=2798): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m1.420566581s ago: executing program 3 (id=2799): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m1.420135061s ago: executing program 2 (id=2800): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) 1m1.286324111s ago: executing program 2 (id=2802): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0", 0xf}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fe9cb7907021175f37538e486dd6317ce22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f06558"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m1.285965962s ago: executing program 3 (id=2803): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 1m1.014416824s ago: executing program 0 (id=2804): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x4, 0x6, 0xa}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000200), &(0x7f0000000280)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) 1m0.996245495s ago: executing program 3 (id=2805): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 1m0.918313202s ago: executing program 2 (id=2806): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x6) 1m0.717541248s ago: executing program 0 (id=2807): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000002000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1m0.710829368s ago: executing program 3 (id=2808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m0.329728629s ago: executing program 32 (id=2808): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000010000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b70300000000ecff850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m0.286173822s ago: executing program 33 (id=2807): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1m0.285720262s ago: executing program 2 (id=2812): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) 1m0.256586355s ago: executing program 34 (id=2812): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) recvmsg(r0, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x0) 3.45851252s ago: executing program 6 (id=3137): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x894b, 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000640)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000580)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r3, 0x4, r3}, 0x10) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831373f00000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 3.228485849s ago: executing program 6 (id=3138): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x4}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000", 0x4}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x102, 0x0, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473be0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0", 0x0, 0x31, 0x6000000000000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 3.223843669s ago: executing program 1 (id=3146): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x58, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x21}, 0x94) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, 0x0}, 0x8) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040)=r2, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000440)={r3, r1}, 0xc) 2.989142408s ago: executing program 4 (id=3140): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="13"], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x4e20, @multicast1}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0xfc00) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYBLOB="3eca", @ANYRES8=r1], 0x9a) 2.694335232s ago: executing program 4 (id=3141): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 2.691653662s ago: executing program 1 (id=3150): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="13"], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 2.691189832s ago: executing program 6 (id=3142): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40010) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000", 0x1b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80", 0xb}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c", 0xbf}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = socket$kcm(0x15, 0x5, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) r7 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r8, 0x0, 0x0}, 0x10) r9 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r5, 0x0, 0x2121) recvmsg$kcm(r5, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 2.508105847s ago: executing program 1 (id=3143): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) close(0x3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) 2.075839272s ago: executing program 5 (id=3144): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x921180, 0x0) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller0\x00', @multicast}) 2.021935666s ago: executing program 4 (id=3145): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92010, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffff7fffffff}, 0x0, 0xca, 0x6, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x2, 0x56d, 0x3, 0x2, 0xffffffffffffffff, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7ff2, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407ffd, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) recvmsg$unix(r2, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa0}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 2.020362767s ago: executing program 1 (id=3155): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x2, @perf_config_ext={0x77ffffff, 0x6b2}, 0x2000, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'geneve1\x00', 0x1}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x890b, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86, 0x0, 0x25, 0x0, &(0x7f00000001c0)="daf9e846ab156efc71b59652333536dbfd26a6d0546366e36eb77dd0aaa2dbe567d168904c", 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x12, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) 1.665743216s ago: executing program 4 (id=3147): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x30506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc60100005000a000200053582c137153e37000c0680050002000300", 0x33fe0}], 0x1}, 0x0) 1.664198866s ago: executing program 5 (id=3148): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x2505, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8}, 0x0, 0x4, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r3, 0xffffffffffffffff}, &(0x7f00000007c0), &(0x7f0000000640)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r4}, &(0x7f0000000480), &(0x7f00000005c0)}, 0x20) 1.663078576s ago: executing program 6 (id=3149): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000280)={0x4, 0x80, 0x4, 0x5, 0x1, 0x2, 0x0, 0x13, 0x80000, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0xccf, 0x2, @perf_bp={&(0x7f00000000c0), 0x4}, 0x10, 0x2, 0x1, 0x8, 0x7, 0xd7, 0x4, 0x0, 0x1, 0x0, 0x6}, 0xffffffffffffffff, 0x201, r1, 0x3) r3 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x4000000005}, 0xc003, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, r2, 0x1) ioctl$PERF_EVENT_IOC_RESET(r3, 0x2403, 0x1) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) r5 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000340), &(0x7f0000000380)=r6}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r0, &(0x7f00000001c0)="00cb1243a7808012e6850eee12f2417fcd9c56173b2e95", 0x0}, 0x20) syz_clone(0x10222000, &(0x7f0000000200)="1d5b1aa2b5345c5d73f0a66a57e157b4c130a20da7e24a6f7d5b25430260384302da0e545e74e736a7453ff0f7c6a74340fba90f26a7705f54641d5e9e752a8e75a66433d48e1458858757fc7d70c28fe7dfa71b0074ac95a6e770f2ab6223387d4fd173e34bec1e72e126c60b75ba0bd775f9cb62", 0x75, &(0x7f0000000000), &(0x7f0000000100), &(0x7f0000000340)="ec81178d76e1554846228ba0c5e7bf418f22e61086e1a0c647351ec305d39674dea9d0d6baa71cd6baba7c1dd1e9668c3b939a69e085b218488c1a4d4b061f1267911c5f2ca6844b6e35ff75df369ae1befb1b539adc3e9b36c85ca3d435513b8badfe89ab8030411781b6e290f55f675612da4ca83003c47fc924957ac4be87ee15d0") socket$kcm(0x10, 0x3, 0x10) 1.375460139s ago: executing program 5 (id=3151): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x43, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x1a089, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6, 0x4}, 0x2018, 0x0, 0x0, 0x8, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0f020000", 0x4}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0x102, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x20e}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 1.373348899s ago: executing program 1 (id=3160): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40010) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000", 0x1b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a8064", 0xc}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c", 0xbf}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r7, 0x0, 0x0}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, 0x0, 0x2121) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 1.102705531s ago: executing program 5 (id=3152): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000380)={0x0, 0x0}) close(r1) socket$kcm(0x10, 0x400000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x10e, 0xb, &(0x7f0000000180), 0x4) sendmsg$inet(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05d480004fbffffffff020025902e4409b8f9e6aaeb88bea123dc2c6726e89b1ae24f89a565ee52dcd729cd39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) 1.013279048s ago: executing program 4 (id=3153): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0xa0}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="13"], 0xfe33) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 901.800417ms ago: executing program 5 (id=3154): socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) openat$tun(0xffffff9c, &(0x7f0000000040), 0x80800, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x90}, 0x100) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="850200000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 756.245759ms ago: executing program 4 (id=3156): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_bp={0x0, 0xb}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x7}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0xd6, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x9, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 413.813877ms ago: executing program 1 (id=3157): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) recvmsg(r0, 0x0, 0x102) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff00"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8000ef, 0x1af1ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 413.279707ms ago: executing program 6 (id=3158): r0 = socket$kcm(0x23, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{0x1}, &(0x7f0000000000), 0x0}, 0x20) r1 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0xcc0f9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x100000000000000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000340)=""/4106, 0x5a8}], 0x10}, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000000) sendmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x80) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fefdffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b70500002a0000006a0a00fe00000000850000000b000000b70000005920000095000000000000006c8457920ba0fad478e86823cc07b88f5d76781dcb7729f41726a067818b990b13bfdd5db1b7ef826f015cd03018d546fa9b6827767c171a4f0720596bb3b4d821d976f5843061cc2e3afbae82d7932d4f91f718f0e56315040148e11bac31821236192321fa3b3042"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xcb, 0xdb, &(0x7f0000000480)="a63f24af88356f1ac313cbbc808e01eda1c4679a5e0f6c24cfd023ca46b371699411f1b69b86f1e00c868dadd331084567071e9b7a55ecae14a998bdeb5da421b2d8e50403237a9791579a4a68409eeec5cec4a9a43fb2ef8e0f04f56d9c0775034420be0db79368c851fad9e752804d515794cea0a68ed55d8b6bd8f03869c33d57a766c83f13d576fe9c72c7e183c6bdb2fc4310478f576d86801202d858f37f93fddefebf1e1f0dc1ac834dfb3de4addad2908d3920cf1923cc471e40d6e0cbbfaf996c4444c5582479", &(0x7f0000000580)=""/219, 0x10000, 0x0, 0x4a, 0x1000, &(0x7f0000000140)="4fe09a698a8a6dadd3a0be3325c202fba345edd2e164ec364bb971370f823bc6f6002930969c6a87f5370ef1be346d44ddf07d19371b82b5ec971e0ef95c4c66b57e9562c9ec96fa3b82", &(0x7f0000000680)="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", 0x1, 0x0, 0x5}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x0, 0xcc0, 0xdd7, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24}, 0x28) 412.727517ms ago: executing program 5 (id=3166): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40010) recvmsg(r0, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000", 0x1b}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000580)=ANY=[], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a8064", 0xc}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c", 0xbf}], 0x1, &(0x7f00000001c0)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x10}}], 0x28}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$kcm(0x15, 0x5, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) r6 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r7, 0x0, 0x0}, 0x10) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r8) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) recvmsg(r5, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) recvmsg(r4, 0x0, 0x2121) recvmsg$kcm(r4, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2) 0s ago: executing program 6 (id=3159): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x40af1d, 0x1, @perf_config_ext={0xff, 0x7}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000093a1400000000000a37bf489ba2862cc0000000000"], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @exit, @alu={0x6, 0x0, 0x3, 0xa}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000000340)=""/222}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x73) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x0) recvmsg(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x18, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xf00, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 6388][T11427] netlink: 'syz.0.1490': attribute type 10 has an invalid length. [ 285.896127][T11427] netlink: 'syz.0.1490': attribute type 19 has an invalid length. [ 285.911145][T11427] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1490'. [ 287.373364][T11440] netlink: 'syz.1.1494': attribute type 10 has an invalid length. [ 287.381623][T11440] netlink: 'syz.1.1494': attribute type 19 has an invalid length. [ 287.389579][T11440] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1494'. [ 290.368992][T11462] netlink: 'syz.0.1499': attribute type 10 has an invalid length. [ 290.377085][T11462] netlink: 'syz.0.1499': attribute type 19 has an invalid length. [ 290.385265][T11462] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1499'. [ 290.683819][T11471] netlink: 'syz.3.1503': attribute type 10 has an invalid length. [ 290.720044][T11471] netlink: 'syz.3.1503': attribute type 19 has an invalid length. [ 290.776696][T11471] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1503'. [ 290.863403][T11474] netlink: 'syz.2.1502': attribute type 10 has an invalid length. [ 290.879725][T11474] netlink: 'syz.2.1502': attribute type 19 has an invalid length. [ 290.904809][T11474] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1502'. [ 290.960826][T11477] netlink: 'syz.1.1505': attribute type 10 has an invalid length. [ 290.977570][T11477] netlink: 'syz.1.1505': attribute type 19 has an invalid length. [ 291.028748][T11477] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1505'. [ 291.579472][T11501] netlink: 'syz.0.1516': attribute type 10 has an invalid length. [ 291.596606][T11501] netlink: 'syz.0.1516': attribute type 19 has an invalid length. [ 291.606329][T11501] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1516'. [ 291.626522][T11504] netlink: 'syz.1.1517': attribute type 10 has an invalid length. [ 291.652764][T11504] netlink: 'syz.1.1517': attribute type 19 has an invalid length. [ 291.696431][T11504] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1517'. [ 291.855850][T11516] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1512'. [ 292.206705][T11528] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1513'. [ 292.470868][T11536] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1525'. [ 292.600739][T11541] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1518'. [ 293.087992][T11559] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1530'. [ 293.147457][T11562] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1522'. [ 293.280937][T11566] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1523'. [ 293.420455][T11569] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1524'. [ 294.137716][T11590] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1528'. [ 294.320222][T11603] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1534'. [ 294.621723][T11611] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1536'. [ 294.654432][T11614] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1537'. [ 295.441389][T11648] netlink: zone id is out of range [ 295.490037][T11648] netlink: del zone limit has 4 unknown bytes [ 295.707280][T11652] syzkaller0: entered promiscuous mode [ 295.713031][T11652] syzkaller0: entered allmulticast mode [ 297.421568][T11657] validate_nla: 22 callbacks suppressed [ 297.421612][T11657] netlink: 'syz.3.1546': attribute type 10 has an invalid length. [ 297.436164][T11657] netlink: 'syz.3.1546': attribute type 19 has an invalid length. [ 297.451813][T11674] netlink: 'syz.2.1548': attribute type 10 has an invalid length. [ 297.463873][T11674] netlink: 'syz.2.1548': attribute type 19 has an invalid length. [ 297.483002][T11674] __nla_validate_parse: 6 callbacks suppressed [ 297.483015][T11674] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1548'. [ 297.861463][T11686] netlink: 'syz.0.1550': attribute type 10 has an invalid length. [ 297.881968][T11686] netlink: 'syz.0.1550': attribute type 19 has an invalid length. [ 297.908077][T11686] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1550'. [ 297.942313][T11690] netlink: 'syz.2.1552': attribute type 10 has an invalid length. [ 297.957267][T11690] netlink: 'syz.2.1552': attribute type 19 has an invalid length. [ 297.984475][T11690] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1552'. [ 298.508274][T11708] netlink: 'syz.1.1555': attribute type 10 has an invalid length. [ 298.516314][T11708] netlink: 'syz.1.1555': attribute type 19 has an invalid length. [ 298.534506][T11708] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1555'. [ 298.798372][T11717] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1558'. [ 300.335688][T11726] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1560'. [ 300.348772][T11737] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1561'. [ 300.622524][T11755] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1563'. [ 300.856545][T11753] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1565'. [ 300.878235][T11757] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1566'. [ 301.245417][T11775] sock: sock_timestamping_bind_phc: sock not bind to device [ 302.515891][T11820] __nla_validate_parse: 7 callbacks suppressed [ 302.515907][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1580'. [ 302.560316][T11815] validate_nla: 16 callbacks suppressed [ 302.560346][T11815] netlink: 'syz.3.1579': attribute type 10 has an invalid length. [ 302.586376][T11815] netlink: 'syz.3.1579': attribute type 19 has an invalid length. [ 302.620117][T11815] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1579'. [ 302.639903][T11827] sock: sock_timestamping_bind_phc: sock not bind to device [ 302.642912][T11820] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1580'. [ 302.711118][T11821] netlink: 'syz.0.1588': attribute type 10 has an invalid length. [ 302.726327][T11821] netlink: 'syz.0.1588': attribute type 19 has an invalid length. [ 302.758412][T11821] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1588'. [ 302.944846][T11839] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1582'. [ 303.229783][T11842] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1584'. [ 303.263808][T11838] netlink: 'syz.2.1583': attribute type 10 has an invalid length. [ 303.292677][T11838] netlink: 'syz.2.1583': attribute type 19 has an invalid length. [ 303.324658][T11838] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1583'. [ 303.853335][T11870] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1591'. [ 303.931143][T11861] netlink: 'syz.0.1587': attribute type 10 has an invalid length. [ 303.955989][T11861] netlink: 'syz.0.1587': attribute type 19 has an invalid length. [ 303.978890][T11861] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1587'. [ 305.396627][T11879] sock: sock_timestamping_bind_phc: sock not bind to device [ 305.639364][T11881] netlink: 'syz.0.1594': attribute type 10 has an invalid length. [ 305.651729][T11881] netlink: 'syz.0.1594': attribute type 19 has an invalid length. [ 305.660245][T11881] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1594'. [ 307.851155][T11936] validate_nla: 4 callbacks suppressed [ 307.851192][T11936] netlink: 'syz.2.1611': attribute type 10 has an invalid length. [ 307.876488][T11936] netlink: 'syz.2.1611': attribute type 19 has an invalid length. [ 307.896456][T11936] __nla_validate_parse: 5 callbacks suppressed [ 307.896494][T11936] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1611'. [ 308.363766][T11949] netlink: 'syz.2.1616': attribute type 10 has an invalid length. [ 308.378286][T11949] netlink: 'syz.2.1616': attribute type 19 has an invalid length. [ 308.386480][T11949] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1616'. [ 308.657682][T11958] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1618'. [ 308.832927][T11961] netlink: 'syz.3.1619': attribute type 10 has an invalid length. [ 308.851420][T11961] netlink: 'syz.3.1619': attribute type 19 has an invalid length. [ 308.862401][T11961] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1619'. [ 309.020948][T11971] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1620'. [ 309.761746][T11978] netlink: 'syz.3.1624': attribute type 10 has an invalid length. [ 309.805519][T11978] netlink: 'syz.3.1624': attribute type 19 has an invalid length. [ 309.839565][T11978] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1624'. [ 310.345073][T11995] netlink: 'syz.0.1628': attribute type 10 has an invalid length. [ 310.361167][T11995] netlink: 'syz.0.1628': attribute type 19 has an invalid length. [ 310.381384][T11995] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1628'. [ 310.487950][T11997] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1630'. [ 310.964752][T12011] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1632'. [ 310.984483][T12013] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1633'. [ 311.551926][T12031] ipvlan1: entered promiscuous mode [ 311.557274][T12031] ipvlan1: entered allmulticast mode [ 311.573697][T12031] veth0_vlan: entered allmulticast mode [ 311.806192][ T5796] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 313.839305][T12055] validate_nla: 10 callbacks suppressed [ 313.839322][T12055] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 313.853185][T12055] netlink: 'syz.2.1645': attribute type 19 has an invalid length. [ 313.861193][T12055] __nla_validate_parse: 3 callbacks suppressed [ 313.861204][T12055] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1645'. [ 314.256390][T12074] netlink: 'syz.0.1651': attribute type 29 has an invalid length. [ 314.274963][T12074] netlink: 'syz.0.1651': attribute type 29 has an invalid length. [ 314.441251][T12072] netlink: 'syz.2.1650': attribute type 10 has an invalid length. [ 314.453384][T12072] netlink: 'syz.2.1650': attribute type 19 has an invalid length. [ 314.462056][T12072] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1650'. [ 314.478362][T12070] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 314.486592][T12070] netlink: 'syz.1.1649': attribute type 19 has an invalid length. [ 314.497283][T12070] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1649'. [ 314.881384][T12085] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1655'. [ 315.089174][T12088] netlink: 'syz.2.1656': attribute type 10 has an invalid length. [ 315.122952][T12088] netlink: 'syz.2.1656': attribute type 19 has an invalid length. [ 315.138743][T12088] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1656'. [ 315.913429][T12117] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1664'. [ 316.150834][T12123] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1667'. [ 316.216315][T12119] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1665'. [ 316.977527][T12142] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1670'. [ 317.170804][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.177457][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.223557][T12151] ipvlan1: entered promiscuous mode [ 317.248365][T12151] ipvlan1: entered allmulticast mode [ 317.253748][T12151] veth0_vlan: entered allmulticast mode [ 318.074496][T12165] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1677'. [ 319.591899][T12211] validate_nla: 13 callbacks suppressed [ 319.591933][T12211] netlink: 'syz.3.1689': attribute type 29 has an invalid length. [ 321.160923][T12211] netlink: 'syz.3.1689': attribute type 29 has an invalid length. [ 321.173537][T12216] netlink: 'syz.0.1690': attribute type 10 has an invalid length. [ 321.182171][T12216] netlink: 'syz.0.1690': attribute type 19 has an invalid length. [ 321.195767][T12216] __nla_validate_parse: 3 callbacks suppressed [ 321.195779][T12216] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1690'. [ 321.333068][T12224] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1692'. [ 323.472650][T12249] netlink: 'syz.2.1708': attribute type 17 has an invalid length. [ 323.486458][T12249] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1708'. [ 323.535888][T12248] netlink: 'syz.0.1700': attribute type 10 has an invalid length. [ 323.544284][T12248] netlink: 'syz.0.1700': attribute type 19 has an invalid length. [ 323.553905][T12248] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1700'. [ 325.023812][T12253] netlink: 'syz.3.1702': attribute type 10 has an invalid length. [ 325.031990][T12253] netlink: 'syz.3.1702': attribute type 19 has an invalid length. [ 325.040605][T12253] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1702'. [ 325.051995][T12264] netlink: 'syz.2.1703': attribute type 10 has an invalid length. [ 325.060239][T12264] netlink: 'syz.2.1703': attribute type 19 has an invalid length. [ 325.068775][T12264] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1703'. [ 325.358854][T12283] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1706'. [ 326.611151][T12300] netlink: 'syz.3.1712': attribute type 10 has an invalid length. [ 326.642221][T12300] netlink: 'syz.3.1712': attribute type 19 has an invalid length. [ 326.653108][T12300] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1712'. [ 326.692962][T12297] netlink: 'syz.1.1713': attribute type 10 has an invalid length. [ 326.715571][T12297] netlink: 'syz.1.1713': attribute type 19 has an invalid length. [ 326.736922][T12297] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1713'. [ 326.846650][T12303] netlink: 'syz.2.1714': attribute type 10 has an invalid length. [ 326.867337][T12303] netlink: 'syz.2.1714': attribute type 19 has an invalid length. [ 326.887350][T12303] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1714'. [ 328.752263][T12316] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1716'. [ 328.764405][T12318] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1717'. [ 331.150524][T12356] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1726'. [ 331.460998][T12362] validate_nla: 4 callbacks suppressed [ 331.461042][T12362] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 331.480669][T12362] netlink: 'syz.0.1729': attribute type 19 has an invalid length. [ 331.490166][T12362] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1729'. [ 331.514716][T12372] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1731'. [ 331.618151][T12365] netlink: 'syz.1.1730': attribute type 10 has an invalid length. [ 331.662637][T12365] netlink: 'syz.1.1730': attribute type 19 has an invalid length. [ 331.674864][T12365] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1730'. [ 332.147682][T12396] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1738'. [ 332.476565][T12403] netlink: 'syz.1.1741': attribute type 10 has an invalid length. [ 332.485228][T12403] netlink: 'syz.1.1741': attribute type 19 has an invalid length. [ 332.493938][T12403] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1741'. [ 332.639419][T12407] netlink: 'syz.0.1743': attribute type 10 has an invalid length. [ 332.652230][T12407] netlink: 'syz.0.1743': attribute type 19 has an invalid length. [ 332.663099][T12407] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1743'. [ 333.154810][T12430] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1749'. [ 333.273888][T12438] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1751'. [ 333.515672][T12440] netlink: 'syz.1.1754': attribute type 10 has an invalid length. [ 333.524325][T12440] netlink: 'syz.1.1754': attribute type 19 has an invalid length. [ 333.532562][T12440] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1754'. [ 333.885327][T12451] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1763'. [ 334.168169][T12465] …: port 1(ip6gretap0) entered blocking state [ 334.184153][T12465] …: port 1(ip6gretap0) entered disabled state [ 334.199007][T12465] ip6gretap0: entered allmulticast mode [ 334.225124][T12465] ip6gretap0: entered promiscuous mode [ 334.383799][T12467] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1761'. [ 334.492750][T12476] syzkaller0: entered promiscuous mode [ 334.498690][T12476] syzkaller0: entered allmulticast mode [ 335.928313][T12474] syzkaller0: entered promiscuous mode [ 335.933826][T12474] syzkaller0: entered allmulticast mode [ 335.940984][T12472] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1762'. [ 337.445761][T12497] validate_nla: 4 callbacks suppressed [ 337.445804][T12497] netlink: 'syz.1.1771': attribute type 19 has an invalid length. [ 337.484092][T12497] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1771'. [ 337.705446][T12499] netlink: 'syz.2.1770': attribute type 10 has an invalid length. [ 337.714804][T12499] netlink: 'syz.2.1770': attribute type 19 has an invalid length. [ 337.727565][T12499] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1770'. [ 340.294381][T12520] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1776'. [ 340.305483][T12519] netlink: 'syz.0.1778': attribute type 10 has an invalid length. [ 340.313692][T12519] netlink: 'syz.0.1778': attribute type 19 has an invalid length. [ 340.322044][T12519] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1778'. [ 340.700571][T12541] netlink: 'syz.1.1782': attribute type 10 has an invalid length. [ 340.708998][T12541] netlink: 'syz.1.1782': attribute type 19 has an invalid length. [ 340.717230][T12541] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1782'. [ 340.842661][T12544] netlink: 'syz.3.1784': attribute type 10 has an invalid length. [ 340.859153][T12544] netlink: 'syz.3.1784': attribute type 19 has an invalid length. [ 340.867315][T12544] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1784'. [ 341.488802][T12564] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1790'. [ 342.967865][T12579] netlink: 'syz.1.1793': attribute type 39 has an invalid length. [ 343.564983][T12589] netlink: 'syz.3.1797': attribute type 10 has an invalid length. [ 343.575252][T12589] netlink: 'syz.3.1797': attribute type 19 has an invalid length. [ 343.586101][T12589] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1797'. [ 343.618526][T12601] syzkaller0: entered promiscuous mode [ 343.637924][T12601] syzkaller0: entered allmulticast mode [ 344.161307][T12611] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1803'. [ 344.221805][T12622] netlink: 'syz.1.1812': attribute type 10 has an invalid length. [ 344.271089][T12622] netlink: 'syz.1.1812': attribute type 19 has an invalid length. [ 344.300968][T12622] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1812'. [ 344.582014][T12628] netlink: 'syz.2.1807': attribute type 10 has an invalid length. [ 344.590614][T12628] netlink: 'syz.2.1807': attribute type 19 has an invalid length. [ 344.600365][T12628] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1807'. [ 345.047067][T12645] netlink: 'syz.0.1813': attribute type 10 has an invalid length. [ 345.055860][T12645] netlink: 'syz.0.1813': attribute type 19 has an invalid length. [ 345.064523][T12645] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1813'. [ 345.353708][T12658] netlink: 'syz.2.1816': attribute type 10 has an invalid length. [ 345.364558][T12658] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1816'. [ 345.625768][T12673] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1819'. [ 345.773943][T12678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.021975][T12683] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1824'. [ 346.261088][T12691] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1825'. [ 346.626815][T12709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1829'. [ 347.574883][T12742] syzkaller0: entered promiscuous mode [ 347.580625][T12742] syzkaller0: entered allmulticast mode [ 348.011146][T12759] validate_nla: 13 callbacks suppressed [ 348.011162][T12759] netlink: 'syz.3.1841': attribute type 29 has an invalid length. [ 348.033536][T12759] netlink: 'syz.3.1841': attribute type 29 has an invalid length. [ 348.471835][T12771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.596128][T12772] __nla_validate_parse: 7 callbacks suppressed [ 348.596157][T12772] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1846'. [ 348.645050][T12777] netlink: 'syz.3.1849': attribute type 39 has an invalid length. [ 348.813675][T12787] netlink: 'syz.0.1851': attribute type 10 has an invalid length. [ 348.865148][T12787] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 348.873858][T12787] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 348.889072][T12787] team0: Port device wlan1 added [ 348.964311][T12786] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.052060][T12790] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.1852'. [ 349.061583][T12787] syz.0.1851 (12787) used greatest stack depth: 19496 bytes left [ 349.299382][T12802] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1857'. [ 349.361955][T12806] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1856'. [ 349.784386][T12811] netlink: 'syz.3.1858': attribute type 10 has an invalid length. [ 349.795195][T12811] netlink: 'syz.3.1858': attribute type 19 has an invalid length. [ 349.812771][T12811] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1858'. [ 349.847945][T12813] netlink: 'syz.1.1859': attribute type 10 has an invalid length. [ 349.869276][T12813] netlink: 'syz.1.1859': attribute type 19 has an invalid length. [ 349.877365][T12813] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1859'. [ 350.036107][T12824] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1861'. [ 350.246682][T12832] netlink: 'syz.1.1863': attribute type 10 has an invalid length. [ 350.339203][T12832] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 350.349317][T12832] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 350.360444][T12832] team0: Port device wlan1 added [ 350.375251][T12835] netlink: 'syz.2.1864': attribute type 39 has an invalid length. [ 350.382686][T12831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.463957][T12832] syz.1.1863 (12832) used greatest stack depth: 18608 bytes left [ 350.758826][T12846] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1869'. [ 351.014108][T12850] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1870'. [ 351.251353][T12870] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1873'. [ 351.472813][T12875] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 351.520281][ T5796] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 351.528426][T12875] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 351.549379][T12875] team0: Port device wlan1 added [ 351.574546][T12874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.069276][T12923] validate_nla: 15 callbacks suppressed [ 353.069321][T12923] netlink: 'syz.3.1890': attribute type 10 has an invalid length. [ 353.086103][T12923] netlink: 'syz.3.1890': attribute type 19 has an invalid length. [ 353.370004][T12938] bridge0: port 3(team0) entered disabled state [ 353.383859][T12938] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.397895][T12938] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.455400][T12938] bridge0: entered allmulticast mode [ 353.568198][T12940] netlink: 'syz.0.1895': attribute type 10 has an invalid length. [ 353.582642][T12940] netlink: 'syz.0.1895': attribute type 19 has an invalid length. [ 353.662036][T12942] netlink: 'syz.2.1896': attribute type 10 has an invalid length. [ 353.695241][T12942] netlink: 'syz.2.1896': attribute type 19 has an invalid length. [ 353.733267][T12942] __nla_validate_parse: 7 callbacks suppressed [ 353.733302][T12942] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1896'. [ 353.815931][ T5796] Bluetooth: hci2: unexpected event 0x36 length: 15 > 7 [ 353.936408][T12952] netlink: 'syz.0.1898': attribute type 10 has an invalid length. [ 353.976525][T12952] netlink: 'syz.0.1898': attribute type 19 has an invalid length. [ 353.988110][T12952] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1898'. [ 354.636627][T12975] netlink: 'syz.0.1905': attribute type 10 has an invalid length. [ 354.651260][T12975] netlink: 'syz.0.1905': attribute type 19 has an invalid length. [ 354.659623][T12975] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1905'. [ 355.263468][T12982] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1906'. [ 355.276433][ T5796] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 355.280442][ T5796] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 355.446248][T12990] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1909'. [ 355.806053][T12996] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1910'. [ 356.115115][T13011] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1915'. [ 356.215716][T13009] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1913'. [ 356.488128][T13016] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1917'. [ 356.695948][T13025] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1918'. [ 356.716886][T13033] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 356.725009][T13033] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 356.955782][T13038] delete_channel: no stack [ 358.096233][T13073] validate_nla: 20 callbacks suppressed [ 358.096299][T13073] netlink: 'syz.3.1930': attribute type 10 has an invalid length. [ 358.111852][ T5796] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 358.113124][T13073] netlink: 'syz.3.1930': attribute type 19 has an invalid length. [ 358.258086][T13084] @ÿ: renamed from bond_slave_0 (while UP) [ 358.548936][T13087] netlink: 'syz.0.1933': attribute type 10 has an invalid length. [ 358.557452][T13087] netlink: 'syz.0.1933': attribute type 19 has an invalid length. [ 358.685951][T13093] netlink: 'syz.2.1935': attribute type 10 has an invalid length. [ 358.713349][T13093] netlink: 'syz.2.1935': attribute type 19 has an invalid length. [ 358.738312][T13093] __nla_validate_parse: 7 callbacks suppressed [ 358.738344][T13093] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1935'. [ 358.973798][T13103] netlink: 'syz.3.1936': attribute type 10 has an invalid length. [ 358.984450][T13103] netlink: 'syz.3.1936': attribute type 19 has an invalid length. [ 359.008129][T13103] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1936'. [ 359.237326][T13120] team0: left allmulticast mode [ 359.248890][T13120] team_slave_0: left allmulticast mode [ 359.254402][T13120] team_slave_1: left allmulticast mode [ 359.265218][T13120] mac80211_hwsim hwsim6 wlan1: left allmulticast mode [ 359.273942][T13120] bridge0: port 3(team0) entered disabled state [ 359.303472][T13120] bridge_slave_1: left allmulticast mode [ 359.328994][T13120] bridge_slave_1: left promiscuous mode [ 359.348904][T13120] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.372022][T13120] bridge_slave_0: left allmulticast mode [ 359.385944][T13120] bridge_slave_0: left promiscuous mode [ 359.402348][T13120] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.456532][T13120] $Hÿ: (slave bridge0): Releasing backup interface [ 359.464331][T13120] bridge0 (unregistering): left promiscuous mode [ 359.522700][T13127] netlink: 'syz.0.1942': attribute type 10 has an invalid length. [ 359.530830][T13127] netlink: 'syz.0.1942': attribute type 19 has an invalid length. [ 359.539360][T13127] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1942'. [ 359.549074][T13124] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1941'. [ 360.135098][T13140] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1945'. [ 360.202453][T13136] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1944'. [ 360.232048][T13142] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1947'. [ 360.616753][T13164] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1948'. [ 360.734708][T13163] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1949'. [ 361.054128][T13179] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1953'. [ 361.213261][T13182] delete_channel: no stack [ 362.258593][T13219] bridge0: port 3(team0) entered disabled state [ 362.265347][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.272699][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.288344][T13219] bridge0: left promiscuous mode [ 362.307244][T13219] bridge0: left allmulticast mode [ 362.341924][T13222] delete_channel: no stack [ 362.376768][T13219] team0: left allmulticast mode [ 362.391728][T13219] team_slave_0: left allmulticast mode [ 362.401846][T13219] team_slave_1: left allmulticast mode [ 362.408571][ T5796] Bluetooth: hci2: unexpected event 0x2c length: 82 > 17 [ 362.411990][T13219] team0: left promiscuous mode [ 362.439410][T13219] team_slave_0: left promiscuous mode [ 362.450417][T13219] team_slave_1: left promiscuous mode [ 362.460737][T13219] bridge0: port 3(team0) entered disabled state [ 362.472641][T13219] bridge_slave_1: left allmulticast mode [ 362.485465][T13219] bridge_slave_1: left promiscuous mode [ 362.495787][T13219] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.541043][T13219] bridge_slave_0: left allmulticast mode [ 362.553863][T13219] bridge_slave_0: left promiscuous mode [ 362.578332][T13219] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.162157][T13242] validate_nla: 20 callbacks suppressed [ 363.162191][T13242] netlink: 'syz.3.1971': attribute type 10 has an invalid length. [ 363.176839][T13242] netlink: 'syz.3.1971': attribute type 19 has an invalid length. [ 363.186439][T13240] netlink: 'syz.2.1970': attribute type 10 has an invalid length. [ 363.196452][T13240] netlink: 'syz.2.1970': attribute type 19 has an invalid length. [ 363.638043][T13252] netlink: 'syz.1.1973': attribute type 10 has an invalid length. [ 363.651355][T13252] netlink: 'syz.1.1973': attribute type 19 has an invalid length. [ 364.007634][T13267] __nla_validate_parse: 7 callbacks suppressed [ 364.007671][T13267] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1977'. [ 364.122902][T13275] netlink: 'syz.1.1978': attribute type 3 has an invalid length. [ 364.141293][T13275] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1978'. [ 364.373561][T13284] IPv6: Can't replace route, no match found [ 364.526484][T13283] netlink: 'syz.1.1980': attribute type 10 has an invalid length. [ 364.541684][T13283] netlink: 'syz.1.1980': attribute type 19 has an invalid length. [ 364.561397][T13283] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1980'. [ 364.859416][T13295] bridge0: left allmulticast mode [ 364.902329][T13295] team0: left allmulticast mode [ 364.907244][T13295] C: left allmulticast mode [ 364.948118][T13295] team_slave_1: left allmulticast mode [ 364.967529][T13295] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 364.980815][T13295] team0: left promiscuous mode [ 365.001448][T13295] C: left promiscuous mode [ 365.017697][T13295] team_slave_1: left promiscuous mode [ 365.023941][T13295] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 365.031336][T13295] bridge0: port 3(team0) entered disabled state [ 365.050121][T13295] bridge_slave_1: left allmulticast mode [ 365.055793][T13295] bridge_slave_1: left promiscuous mode [ 365.068084][T13295] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.100927][T13295] bridge_slave_0: left allmulticast mode [ 365.110391][T13295] bridge_slave_0: left promiscuous mode [ 365.116145][T13295] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.163951][T13295] bond0: (slave bridge0): Releasing backup interface [ 365.243045][T13292] netlink: 'syz.3.1983': attribute type 10 has an invalid length. [ 365.255948][T13292] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1983'. [ 365.303040][T13294] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1982'. [ 365.624028][T13306] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1984'. [ 365.841620][T13311] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1986'. [ 366.357499][T13317] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1995'. [ 366.535046][T13326] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1989'. [ 366.980731][T13341] syz_tun: entered promiscuous mode [ 367.051053][T13341] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 367.460285][T13352] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2001'. [ 368.223603][T13371] validate_nla: 17 callbacks suppressed [ 368.223638][T13371] netlink: 'syz.1.1997': attribute type 1 has an invalid length. [ 368.425923][T13369] netlink: 'syz.2.1999': attribute type 10 has an invalid length. [ 368.448881][T13369] netlink: 'syz.2.1999': attribute type 19 has an invalid length. [ 369.002866][T13387] netlink: 'syz.1.2003': attribute type 10 has an invalid length. [ 369.035026][T13387] netlink: 'syz.1.2003': attribute type 19 has an invalid length. [ 369.056659][T13387] __nla_validate_parse: 2 callbacks suppressed [ 369.056690][T13387] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2003'. [ 369.118497][T13391] netlink: 'syz.3.2005': attribute type 10 has an invalid length. [ 369.132627][T13391] netlink: 'syz.3.2005': attribute type 19 has an invalid length. [ 369.142607][T13391] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2005'. [ 369.440836][ T5796] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 370.059094][T13407] netlink: 'syz.3.2008': attribute type 10 has an invalid length. [ 370.067207][T13407] netlink: 'syz.3.2008': attribute type 19 has an invalid length. [ 370.097111][T13407] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2008'. [ 370.152933][T13403] netlink: 'syz.0.2014': attribute type 10 has an invalid length. [ 370.171331][T13403] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2014'. [ 370.377293][ T5796] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 370.613040][ T5796] Bluetooth: hci1: adv larger than maximum supported [ 370.788765][T13435] syz_tun: entered promiscuous mode [ 370.880447][T13435] syz_tun: entered allmulticast mode [ 370.886543][T13435] $Hÿ: (slave syz_tun): Enslaving as an active interface with an up link [ 371.390070][T13444] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2018'. [ 371.474834][T13452] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2021'. [ 371.745086][T13449] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2020'. [ 371.809356][T13455] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2022'. [ 373.290539][ T5796] Bluetooth: hci1: unexpected event 0x2c length: 82 > 17 [ 373.514929][T13497] validate_nla: 9 callbacks suppressed [ 373.514961][T13497] netlink: 'syz.1.2031': attribute type 10 has an invalid length. [ 373.538087][T13497] netlink: 'syz.1.2031': attribute type 19 has an invalid length. [ 373.553584][T13497] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2031'. [ 373.814688][T13512] netlink: 'syz.0.2033': attribute type 10 has an invalid length. [ 373.879700][T13512] netlink: 'syz.0.2033': attribute type 19 has an invalid length. [ 373.887610][T13512] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2033'. [ 373.905197][T13504] netlink: 'syz.3.2034': attribute type 10 has an invalid length. [ 373.914789][T13504] netlink: 'syz.3.2034': attribute type 19 has an invalid length. [ 375.087222][T13528] netlink: 'syz.3.2045': attribute type 10 has an invalid length. [ 375.119640][T13528] netlink: 'syz.3.2045': attribute type 19 has an invalid length. [ 375.146079][T13528] __nla_validate_parse: 2 callbacks suppressed [ 375.146121][T13528] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2045'. [ 375.274023][T13530] netlink: 'syz.0.2044': attribute type 10 has an invalid length. [ 375.353932][T13530] netlink: 'syz.0.2044': attribute type 19 has an invalid length. [ 375.409242][T13530] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2044'. [ 376.406644][T13559] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2050'. [ 376.662437][T13571] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2046'. [ 376.737556][ T5796] Bluetooth: hci1: unexpected event 0x0b length: 15 > 11 [ 376.897112][T13574] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2043'. [ 377.231684][T13585] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2048'. [ 378.254615][T13606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2054'. [ 378.345109][T13615] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2056'. [ 378.414194][T13615] veth0_macvtap: left promiscuous mode [ 378.652808][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.662836][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.937369][T13625] validate_nla: 10 callbacks suppressed [ 378.937388][T13625] netlink: 'syz.2.2057': attribute type 21 has an invalid length. [ 379.106529][T13632] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2061'. [ 379.170935][T13627] netlink: 'syz.3.2059': attribute type 10 has an invalid length. [ 379.181728][T13627] netlink: 'syz.3.2059': attribute type 19 has an invalid length. [ 379.194237][T13627] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2059'. [ 379.539342][T13646] syzkaller0: entered promiscuous mode [ 379.544952][T13646] syzkaller0: entered allmulticast mode [ 379.664839][T13644] netlink: 'syz.1.2062': attribute type 10 has an invalid length. [ 379.673572][T13644] netlink: 'syz.1.2062': attribute type 19 has an invalid length. [ 380.513189][T13660] netlink: 'syz.0.2067': attribute type 10 has an invalid length. [ 380.546482][T13660] netlink: 'syz.0.2067': attribute type 19 has an invalid length. [ 380.569123][T13660] __nla_validate_parse: 1 callbacks suppressed [ 380.569155][T13660] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2067'. [ 381.484440][T13677] netlink: 'syz.3.2071': attribute type 10 has an invalid length. [ 381.498542][T13677] netlink: 'syz.3.2071': attribute type 19 has an invalid length. [ 381.506510][T13677] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2071'. [ 381.883689][T13687] netlink: 'syz.1.2074': attribute type 21 has an invalid length. [ 382.206221][T13698] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2077'. [ 382.356034][T13704] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2078'. [ 382.909729][T13716] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2082'. [ 383.019644][T13719] $Hÿ: (slave syz_tun): Releasing backup interface [ 383.027516][T13719] syz_tun (unregistering): left allmulticast mode [ 383.194160][T13722] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2083'. [ 383.830144][T13735] syz_tun: entered promiscuous mode [ 383.857497][T13735] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 384.925011][T13737] validate_nla: 6 callbacks suppressed [ 384.925146][T13737] netlink: 'syz.0.2087': attribute type 10 has an invalid length. [ 384.941908][T13737] netlink: 'syz.0.2087': attribute type 19 has an invalid length. [ 384.951014][T13737] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2087'. [ 385.121546][ T5796] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 385.220538][T13741] netlink: 'syz.2.2088': attribute type 10 has an invalid length. [ 385.277610][T13741] netlink: 'syz.2.2088': attribute type 19 has an invalid length. [ 385.308210][T13741] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2088'. [ 385.362530][T13752] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2097'. [ 385.581067][T13750] netlink: 'syz.1.2091': attribute type 10 has an invalid length. [ 385.618107][T13750] netlink: 'syz.1.2091': attribute type 19 has an invalid length. [ 385.635652][T13750] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2091'. [ 385.776252][T13755] netlink: 'syz.0.2092': attribute type 10 has an invalid length. [ 385.790176][T13755] netlink: 'syz.0.2092': attribute type 19 has an invalid length. [ 385.812374][T13755] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2092'. [ 385.853129][T13760] netlink: 'syz.2.2093': attribute type 10 has an invalid length. [ 385.896654][T13760] netlink: 'syz.2.2093': attribute type 19 has an invalid length. [ 385.936413][T13760] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2093'. [ 386.357274][T13774] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2094'. [ 386.434509][T13778] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2095'. [ 387.024767][T13795] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2100'. [ 387.836067][T13802] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2102'. [ 388.010628][T13806] syz_tun: entered promiscuous mode [ 388.244240][T13806] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 388.507228][T13818] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2103'. [ 388.917356][T13828] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2104'. [ 388.967979][T13830] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2105'. [ 389.949292][T13851] validate_nla: 13 callbacks suppressed [ 389.949323][T13851] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 390.044440][T13851] netlink: 'syz.3.2110': attribute type 19 has an invalid length. [ 390.460753][T13865] netlink: 'syz.0.2113': attribute type 10 has an invalid length. [ 390.486297][T13865] netlink: 'syz.0.2113': attribute type 19 has an invalid length. [ 390.685328][T13868] netlink: 'syz.2.2114': attribute type 10 has an invalid length. [ 390.720932][T13868] netlink: 'syz.2.2114': attribute type 19 has an invalid length. [ 390.764087][T13868] __nla_validate_parse: 4 callbacks suppressed [ 390.764174][T13868] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2114'. [ 391.204661][T13882] netlink: 'syz.3.2116': attribute type 10 has an invalid length. [ 391.401896][T13872] netlink: 'syz.1.2115': attribute type 10 has an invalid length. [ 391.432449][T13872] netlink: 'syz.1.2115': attribute type 19 has an invalid length. [ 391.486147][T13872] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2115'. [ 391.781565][T13891] netlink: 'syz.0.2117': attribute type 10 has an invalid length. [ 391.805063][T13891] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2117'. [ 392.151780][ T5789] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 392.178840][T13903] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2127'. [ 392.192201][T13902] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2120'. [ 392.349378][T13911] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2121'. [ 392.488559][T13921] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2123'. [ 392.883308][T13928] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2124'. [ 393.044624][T13936] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2126'. [ 393.079486][T13932] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2125'. [ 395.100445][T14004] validate_nla: 23 callbacks suppressed [ 395.100462][T14004] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 395.118970][T14004] netlink: 'syz.1.2142': attribute type 19 has an invalid length. [ 395.130451][T13992] netlink: 'syz.0.2141': attribute type 10 has an invalid length. [ 395.141318][T13992] netlink: 'syz.0.2141': attribute type 19 has an invalid length. [ 395.502565][T14011] netlink: 'syz.2.2144': attribute type 10 has an invalid length. [ 395.514154][T14011] netlink: 'syz.2.2144': attribute type 19 has an invalid length. [ 395.836779][T14023] netlink: 'syz.0.2146': attribute type 10 has an invalid length. [ 395.860425][T14023] netlink: 'syz.0.2146': attribute type 19 has an invalid length. [ 395.886067][T14023] __nla_validate_parse: 10 callbacks suppressed [ 395.886080][T14023] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2146'. [ 396.246346][T14027] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2147'. [ 396.361499][T14038] netlink: 'syz.3.2148': attribute type 21 has an invalid length. [ 396.712338][T14045] netlink: 'syz.1.2152': attribute type 10 has an invalid length. [ 396.720785][T14045] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2152'. [ 396.736801][T14043] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2151'. [ 396.912494][T14047] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2153'. [ 397.215280][T14063] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2156'. [ 397.247253][T14060] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2154'. [ 397.460598][T14064] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2155'. [ 397.795732][T14083] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2159'. [ 397.860796][T14080] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2158'. [ 398.890624][T14114] bridge0: port 3(team0) entered disabled state [ 398.908386][T14114] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.918079][T14114] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.949929][T14114] bridge0: entered allmulticast mode [ 399.225573][T14122] $Hÿ: left allmulticast mode [ 399.233623][T14122] bond_slave_0: left allmulticast mode [ 399.239978][T14122] bond_slave_1: left allmulticast mode [ 399.245887][T14122] bridge0: port 4($Hÿ) entered disabled state [ 399.256249][T14122] team0: left allmulticast mode [ 399.261718][T14122] team_slave_0: left allmulticast mode [ 399.267313][T14122] team_slave_1: left allmulticast mode [ 399.273030][T14122] team0: left promiscuous mode [ 399.278395][T14122] team_slave_0: left promiscuous mode [ 399.284060][T14122] team_slave_1: left promiscuous mode [ 399.290836][T14122] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 399.298754][T14122] bridge0: port 3(team0) entered disabled state [ 399.307484][T14122] bridge_slave_1: left allmulticast mode [ 399.314507][T14122] bridge_slave_1: left promiscuous mode [ 399.323693][T14122] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.334646][T14122] bridge_slave_0: left allmulticast mode [ 399.343326][T14122] bridge_slave_0: left promiscuous mode [ 399.349150][T14122] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.406631][T14157] validate_nla: 24 callbacks suppressed [ 400.406665][T14157] netlink: 'syz.2.2176': attribute type 10 has an invalid length. [ 400.501664][T14157] netlink: 'syz.2.2176': attribute type 19 has an invalid length. [ 400.719712][T14164] netlink: 'syz.0.2177': attribute type 10 has an invalid length. [ 400.747933][T14164] netlink: 'syz.0.2177': attribute type 19 has an invalid length. [ 400.842622][ T5796] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 400.842662][ T5796] Bluetooth: hci3: unexpected event for opcode 0x656e [ 401.185606][T14176] netlink: 'syz.1.2179': attribute type 10 has an invalid length. [ 401.198316][T14176] netlink: 'syz.1.2179': attribute type 19 has an invalid length. [ 401.214371][T14176] __nla_validate_parse: 9 callbacks suppressed [ 401.214412][T14176] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2179'. [ 401.336405][T14180] netlink: 'syz.2.2180': attribute type 10 has an invalid length. [ 401.345296][T14180] netlink: 'syz.2.2180': attribute type 19 has an invalid length. [ 401.355415][T14180] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2180'. [ 401.447977][T14183] netlink: 'syz.3.2182': attribute type 10 has an invalid length. [ 401.469567][T14183] netlink: 'syz.3.2182': attribute type 19 has an invalid length. [ 401.507967][T14183] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2182'. [ 401.803766][ T5796] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 401.856568][ T5796] Bluetooth: hci0: unexpected event 0x10 length: 15 > 1 [ 401.858096][ T5796] Bluetooth: hci0: hardware error 0x00 [ 401.875340][ T5789] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 401.894801][T14199] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2183'. [ 402.201108][T14210] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2187'. [ 402.505619][T14218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2189'. [ 403.069359][T14236] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2193'. [ 403.419167][T14241] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2195'. [ 403.459473][T14242] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2194'. [ 403.924183][T14259] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2199'. [ 403.968754][ T5796] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 404.453044][ T5796] Bluetooth: hci2: unexpected event 0x31 length: 15 > 6 [ 405.424490][T14320] validate_nla: 26 callbacks suppressed [ 405.424524][T14320] netlink: 'syz.1.2212': attribute type 10 has an invalid length. [ 405.452192][T14320] netlink: 'syz.1.2212': attribute type 19 has an invalid length. [ 405.813858][T14327] netlink: 'syz.0.2213': attribute type 10 has an invalid length. [ 405.822213][T14327] netlink: 'syz.0.2213': attribute type 19 has an invalid length. [ 406.140752][T14340] netlink: 'syz.2.2217': attribute type 10 has an invalid length. [ 406.164589][T14340] netlink: 'syz.2.2217': attribute type 19 has an invalid length. [ 406.349629][T14350] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 406.371842][T14350] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 406.694259][T14348] netlink: 'syz.1.2219': attribute type 10 has an invalid length. [ 406.723570][T14348] netlink: 'syz.1.2219': attribute type 19 has an invalid length. [ 406.750256][T14348] __nla_validate_parse: 9 callbacks suppressed [ 406.750303][T14348] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2219'. [ 407.144313][T14367] netlink: 'syz.1.2223': attribute type 10 has an invalid length. [ 407.176997][T14367] netlink: 'syz.1.2223': attribute type 19 has an invalid length. [ 407.193089][T14367] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2223'. [ 407.375467][T14372] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2225'. [ 407.422805][T14370] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2224'. [ 408.256742][T14387] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2228'. [ 408.446497][T14385] macsec0: entered promiscuous mode [ 408.494399][T14385] macsec0: entered allmulticast mode [ 408.522342][T14385] veth1_macvtap: entered allmulticast mode [ 408.598685][T14393] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2230'. [ 408.831692][T14403] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2231'. [ 409.025534][T14415] veth1_macvtap: left promiscuous mode [ 409.296883][T14418] wg2: left promiscuous mode [ 409.313814][T14418] wg2: left allmulticast mode [ 409.549076][T14415] wg2: entered promiscuous mode [ 409.554606][T14415] wg2: entered allmulticast mode [ 409.897657][T14425] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2236'. [ 410.099304][T14431] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2238'. [ 410.626055][T14451] validate_nla: 14 callbacks suppressed [ 410.626082][T14451] netlink: 'syz.1.2242': attribute type 10 has an invalid length. [ 410.640074][T14451] netlink: 'syz.1.2242': attribute type 19 has an invalid length. [ 410.648490][T14451] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2242'. [ 410.970503][T14457] netlink: 'syz.1.2243': attribute type 10 has an invalid length. [ 410.983189][T14457] netlink: 'syz.1.2243': attribute type 19 has an invalid length. [ 411.140833][T14465] netlink: 'syz.3.2244': attribute type 10 has an invalid length. [ 411.173045][T14465] netlink: 'syz.3.2244': attribute type 19 has an invalid length. [ 411.625884][T14478] netlink: 'syz.2.2248': attribute type 10 has an invalid length. [ 411.644389][T14478] netlink: 'syz.2.2248': attribute type 19 has an invalid length. [ 411.827152][T14480] netlink: 'syz.3.2249': attribute type 10 has an invalid length. [ 411.857953][T14480] netlink: 'syz.3.2249': attribute type 19 has an invalid length. [ 411.866082][T14480] __nla_validate_parse: 3 callbacks suppressed [ 411.866128][T14480] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2249'. [ 412.077536][ T5796] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 412.276603][T14493] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2251'. [ 412.686353][T14514] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2257'. [ 412.762722][T14512] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2256'. [ 413.220336][T14520] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2258'. [ 413.843601][T14531] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2261'. [ 413.888746][T14534] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2262'. [ 414.479425][T14550] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2265'. [ 414.535407][T14556] syz.2.2267 uses obsolete (PF_INET,SOCK_PACKET) [ 414.762933][T14559] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2268'. [ 415.021049][T14574] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2271'. [ 415.704080][T14599] validate_nla: 19 callbacks suppressed [ 415.704098][T14599] netlink: 'syz.1.2277': attribute type 10 has an invalid length. [ 415.944030][T14599] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.962319][T14599] bond0: (slave team0): Enslaving as an active interface with an up link [ 415.981312][T14597] macsec0: entered promiscuous mode [ 415.986869][T14597] macsec0: entered allmulticast mode [ 416.016290][T14597] veth1_macvtap: entered allmulticast mode [ 416.034280][T14594] netlink: 'syz.3.2275': attribute type 10 has an invalid length. [ 416.071257][T14594] netlink: 'syz.3.2275': attribute type 19 has an invalid length. [ 416.130529][ T5796] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 416.146350][ T5796] Bluetooth: hci3: Injecting HCI hardware error event [ 416.154642][ T5796] Bluetooth: hci3: hardware error 0x00 [ 416.432929][T14607] netlink: 'syz.0.2280': attribute type 10 has an invalid length. [ 416.454418][T14607] netlink: 'syz.0.2280': attribute type 19 has an invalid length. [ 416.923645][ T5789] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 416.971528][T14617] netlink: 'syz.3.2281': attribute type 10 has an invalid length. [ 417.014398][T14617] netlink: 'syz.3.2281': attribute type 19 has an invalid length. [ 417.043744][T14617] __nla_validate_parse: 3 callbacks suppressed [ 417.043785][T14617] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2281'. [ 417.269376][T14627] netlink: 'syz.2.2285': attribute type 10 has an invalid length. [ 417.278037][T14627] netlink: 'syz.2.2285': attribute type 19 has an invalid length. [ 417.302589][T14627] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2285'. [ 417.510850][T14637] netlink: 'syz.1.2286': attribute type 10 has an invalid length. [ 417.519131][T14637] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2286'. [ 418.019377][T14656] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2289'. [ 418.182367][T14661] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2292'. [ 418.311936][T14671] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 418.527931][ T5796] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 419.158150][T14687] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2300'. [ 419.226249][T14686] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2299'. [ 419.757593][T14707] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2304'. [ 419.914770][T14712] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2305'. [ 420.314834][T14730] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.2308'. [ 420.502505][T14733] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 420.902437][T14749] validate_nla: 14 callbacks suppressed [ 420.902454][T14749] netlink: 'syz.0.2314': attribute type 10 has an invalid length. [ 420.937818][T14749] netlink: 'syz.0.2314': attribute type 19 has an invalid length. [ 420.962052][T14751] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 421.018604][T14751] netlink: 'syz.2.2313': attribute type 19 has an invalid length. [ 421.303455][T14758] netlink: 'syz.3.2315': attribute type 10 has an invalid length. [ 421.312796][T14758] netlink: 'syz.3.2315': attribute type 19 has an invalid length. [ 421.793670][T14768] netlink: 'syz.2.2316': attribute type 10 has an invalid length. [ 421.822889][T14768] netlink: 'syz.2.2316': attribute type 19 has an invalid length. [ 421.943124][T14780] netlink: 'syz.1.2319': attribute type 39 has an invalid length. [ 422.009214][T14780] bond0: (slave syz_tun): Releasing backup interface [ 422.256612][T14789] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 422.264009][T14789] IPv6: NLM_F_CREATE should be set when creating new route [ 422.352917][T14791] __nla_validate_parse: 4 callbacks suppressed [ 422.352933][T14791] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2321'. [ 422.508788][T14793] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2322'. [ 422.563566][T14797] netlink: 'syz.0.2324': attribute type 29 has an invalid length. [ 422.953134][T14803] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2325'. [ 423.165264][T14809] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2326'. [ 423.514560][T14819] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2328'. [ 423.539518][ T5796] Bluetooth: hci1: Malformed Event: 0x2f [ 423.562790][T14815] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2327'. [ 424.756041][T14857] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2338'. [ 424.847302][T14855] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2337'. [ 425.266716][T14875] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2340'. [ 425.292756][T14875] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 425.699225][T14884] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2343'. [ 425.876896][T14895] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 426.422853][T14908] validate_nla: 25 callbacks suppressed [ 426.422896][T14908] netlink: 'syz.2.2349': attribute type 10 has an invalid length. [ 426.442190][T14908] netlink: 'syz.2.2349': attribute type 19 has an invalid length. [ 426.736471][T14913] netlink: 'syz.0.2350': attribute type 10 has an invalid length. [ 426.791772][T14913] netlink: 'syz.0.2350': attribute type 19 has an invalid length. [ 426.947344][T14923] netlink: 'syz.2.2351': attribute type 2 has an invalid length. [ 426.961786][T14923] netlink: 'syz.2.2351': attribute type 8 has an invalid length. [ 427.108807][T14926] Dead loop on virtual device ip6_vti0, fix it urgently! [ 427.562708][T14938] netlink: 'syz.3.2356': attribute type 10 has an invalid length. [ 427.571813][T14938] netlink: 'syz.3.2356': attribute type 19 has an invalid length. [ 427.580686][T14938] __nla_validate_parse: 4 callbacks suppressed [ 427.580723][T14938] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2356'. [ 427.741921][T14940] netlink: 'syz.2.2357': attribute type 10 has an invalid length. [ 427.752897][T14940] netlink: 'syz.2.2357': attribute type 19 has an invalid length. [ 427.765140][T14940] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2357'. [ 428.149670][T14955] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2360'. [ 428.218725][T14957] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2361'. [ 428.519138][T14974] Dead loop on virtual device ip6_vti0, fix it urgently! [ 428.583878][T14978] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2366'. [ 428.786712][T14978] team0: Port device team_slave_0 removed [ 428.802173][T14978] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 429.131401][T14987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2368'. [ 429.344469][T14995] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2370'. [ 429.768344][T15010] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2373'. [ 429.909772][T15014] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2374'. [ 430.860307][T15046] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2381'. [ 431.453057][T15067] validate_nla: 19 callbacks suppressed [ 431.453086][T15067] netlink: 'syz.0.2386': attribute type 10 has an invalid length. [ 431.550175][T15073] netlink: 'syz.3.2388': attribute type 10 has an invalid length. [ 431.609651][T15066] netlink: 'syz.2.2387': attribute type 10 has an invalid length. [ 431.644743][T15066] netlink: 'syz.2.2387': attribute type 19 has an invalid length. [ 431.935095][T15084] netlink: 'syz.3.2391': attribute type 10 has an invalid length. [ 431.994190][T15084] wlan1: mtu less than device minimum [ 432.079063][T15084] bond0: (slave wlan1): Error -22 calling dev_set_mtu [ 432.632937][T15106] netlink: 'syz.0.2395': attribute type 10 has an invalid length. [ 432.652952][T15106] netlink: 'syz.0.2395': attribute type 19 has an invalid length. [ 432.683237][T15106] __nla_validate_parse: 8 callbacks suppressed [ 432.683251][T15106] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2395'. [ 432.721854][T15105] netlink: 'syz.3.2394': attribute type 10 has an invalid length. [ 432.750260][T15105] netlink: 'syz.3.2394': attribute type 19 has an invalid length. [ 432.772362][T15105] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2394'. [ 433.304924][T15124] netlink: 'syz.3.2399': attribute type 10 has an invalid length. [ 433.313327][T15124] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2399'. [ 433.824389][T15134] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2401'. [ 434.012132][T15140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.024290][T15140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.055579][T15140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.074781][T15140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.740409][T15140] syz.0.2403 (15140) used greatest stack depth: 18408 bytes left [ 434.781091][T15151] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2406'. [ 434.821386][T15153] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2407'. [ 435.324350][T15167] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2410'. [ 435.676998][T15179] veth0_vlan: left promiscuous mode [ 435.703497][T15179] veth0_vlan: entered promiscuous mode [ 435.722045][T15179] team0: Device veth0_vlan failed to register rx_handler [ 435.891146][T15179] syz.0.2413 (15179) used greatest stack depth: 17096 bytes left [ 436.186856][T15192] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2415'. [ 436.442799][T15197] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2418'. [ 436.490733][T15208] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2419'. [ 436.748588][T15213] validate_nla: 14 callbacks suppressed [ 436.748652][T15213] netlink: 'syz.1.2420': attribute type 3 has an invalid length. [ 436.884867][T15219] netlink: 'syz.2.2422': attribute type 10 has an invalid length. [ 436.897906][T15219] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.923762][T15219] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.983459][T15219] batadv_slave_0: entered promiscuous mode [ 437.002977][T15219] $Hÿ: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 437.052443][T15223] netlink: 'syz.0.2424': attribute type 21 has an invalid length. [ 437.246461][T15217] netlink: 'syz.3.2421': attribute type 10 has an invalid length. [ 437.282254][T15217] netlink: 'syz.3.2421': attribute type 19 has an invalid length. [ 437.313813][T15227] netlink: 'syz.2.2425': attribute type 3 has an invalid length. [ 437.337269][T15222] netlink: 'syz.1.2423': attribute type 10 has an invalid length. [ 437.377872][T15222] netlink: 'syz.1.2423': attribute type 19 has an invalid length. [ 437.481081][T15236] netlink: 'syz.0.2426': attribute type 10 has an invalid length. [ 437.532804][T15236] team0: Port device wlan1 removed [ 437.950940][T15247] netlink: 'syz.1.2430': attribute type 10 has an invalid length. [ 437.981146][T15247] __nla_validate_parse: 4 callbacks suppressed [ 437.981181][T15247] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2430'. [ 438.047089][T15244] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2429'. [ 438.963881][T15273] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2436'. [ 439.482802][T15278] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2438'. [ 439.850657][T15294] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2441'. [ 440.011906][T15301] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2443'. [ 440.052439][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.058947][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.835611][T15330] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2450'. [ 440.855990][T15335] C: renamed from team_slave_0 (while UP) [ 440.878280][T15335] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2451'. [ 440.887358][T15335] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 440.935707][T15335] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2451'. [ 441.127043][T15345] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2454'. [ 441.750620][T15361] bridge_slave_0: entered allmulticast mode [ 441.851425][T15371] validate_nla: 23 callbacks suppressed [ 441.851469][T15371] netlink: 'syz.2.2460': attribute type 10 has an invalid length. [ 441.914605][T15371] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 441.927758][T15371] $Hÿ: (slave netdevsim0): Enslaving as an active interface with an up link [ 441.941975][T15373] netlink: 'syz.3.2461': attribute type 8 has an invalid length. [ 441.962539][T15373] netlink: 'syz.3.2461': attribute type 9 has an invalid length. [ 441.980558][T15373] netlink: 'syz.3.2461': attribute type 10 has an invalid length. [ 441.991028][T15373] netlink: 'syz.3.2461': attribute type 11 has an invalid length. [ 442.139823][T15376] netlink: 'syz.1.2462': attribute type 10 has an invalid length. [ 442.151607][T15376] netlink: 'syz.1.2462': attribute type 19 has an invalid length. [ 442.556792][T15391] netlink: 'syz.0.2466': attribute type 10 has an invalid length. [ 442.572217][T15397] Dead loop on virtual device ip6_vti0, fix it urgently! [ 442.582699][T15391] netlink: 'syz.0.2466': attribute type 19 has an invalid length. [ 442.832412][T15400] netlink: 'syz.2.2468': attribute type 10 has an invalid length. [ 443.308585][T15416] __nla_validate_parse: 9 callbacks suppressed [ 443.308622][T15416] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2472'. [ 443.791115][T15421] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2475'. [ 444.166932][T15440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2478'. [ 444.448366][T15453] netlink: 55 bytes leftover after parsing attributes in process `syz.2.2480'. [ 444.573577][T15445] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2479'. [ 445.172638][T15463] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2483'. [ 445.516238][T15477] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2486'. [ 445.614438][T15479] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2487'. [ 445.669345][T15490] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2489'. [ 446.535238][T15503] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2493'. [ 446.615524][T15512] syz.2.2495[15512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.615667][T15512] syz.2.2495[15512] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 447.154131][T15516] validate_nla: 26 callbacks suppressed [ 447.154165][T15516] netlink: 'syz.0.2497': attribute type 10 has an invalid length. [ 447.206559][T15516] netlink: 'syz.0.2497': attribute type 19 has an invalid length. [ 447.320480][T15524] netlink: 'syz.3.2498': attribute type 10 has an invalid length. [ 447.338184][T15524] netlink: 'syz.3.2498': attribute type 19 has an invalid length. [ 447.532664][T15527] netlink: 'syz.2.2499': attribute type 10 has an invalid length. [ 447.558099][T15527] netlink: 'syz.2.2499': attribute type 19 has an invalid length. [ 447.647816][T15539] netlink: 'syz.0.2501': attribute type 10 has an invalid length. [ 447.676822][T15539] netlink: 'syz.0.2501': attribute type 19 has an invalid length. [ 448.259506][T15542] batadv_slave_1: entered promiscuous mode [ 448.706305][T15560] netlink: 'syz.0.2505': attribute type 10 has an invalid length. [ 448.734191][T15560] macvlan0: entered allmulticast mode [ 448.792909][T15560] veth1_vlan: entered allmulticast mode [ 448.908729][T15560] macvlan0: entered promiscuous mode [ 448.930101][T15560] $Hÿ: (slave macvlan0): Enslaving as an active interface with an up link [ 449.421175][T15573] netlink: 'syz.0.2508': attribute type 8 has an invalid length. [ 449.446472][T15573] __nla_validate_parse: 7 callbacks suppressed [ 449.446486][T15573] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2508'. [ 449.462760][T15574] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2506'. [ 450.384743][T15632] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2510'. [ 450.823544][T15652] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2511'. [ 451.050054][T15658] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2512'. [ 451.425279][T15676] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2515'. [ 451.443561][T15682] netlink: 10 bytes leftover after parsing attributes in process `syz.0.2517'. [ 451.448276][T15676] bridge_slave_0: entered allmulticast mode [ 451.886323][T15689] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2519'. [ 452.064423][T15696] batadv0: entered promiscuous mode [ 452.197802][T15699] validate_nla: 14 callbacks suppressed [ 452.197818][T15699] netlink: 'syz.2.2521': attribute type 8 has an invalid length. [ 452.213104][T15699] netlink: 'syz.2.2521': attribute type 9 has an invalid length. [ 452.222732][T15699] netlink: 'syz.2.2521': attribute type 10 has an invalid length. [ 452.233806][T15699] netlink: 'syz.2.2521': attribute type 11 has an invalid length. [ 452.243128][T15699] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2521'. [ 452.293720][T15702] netlink: 'syz.3.2522': attribute type 21 has an invalid length. [ 452.527250][T15705] netlink: 'syz.0.2523': attribute type 10 has an invalid length. [ 452.535828][T15705] netlink: 'syz.0.2523': attribute type 19 has an invalid length. [ 452.544118][T15705] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2523'. [ 452.733288][T15709] netlink: 'syz.3.2524': attribute type 10 has an invalid length. [ 452.749164][T15709] netlink: 'syz.3.2524': attribute type 19 has an invalid length. [ 453.082447][T15726] syzkaller0: entered promiscuous mode [ 453.112499][T15726] syzkaller0: entered allmulticast mode [ 453.146131][T15723] netlink: 'syz.0.2526': attribute type 10 has an invalid length. [ 454.435549][T15770] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 454.443290][T15770] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 454.450782][T15770] veth0_to_bridge: entered allmulticast mode [ 454.460102][T15770] veth0_to_bridge: entered promiscuous mode [ 454.603875][T15774] __nla_validate_parse: 7 callbacks suppressed [ 454.603890][T15774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2538'. [ 455.036372][T15783] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 455.043823][T15783] IPv6: NLM_F_CREATE should be set when creating new route [ 455.051583][T15783] IPv6: NLM_F_CREATE should be set when creating new route [ 455.067287][T15779] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2539'. [ 455.291883][T15788] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2541'. [ 455.377121][T15792] bridge0: port 1(team0) entered blocking state [ 455.391401][T15792] bridge0: port 1(team0) entered disabled state [ 455.399923][T15792] team0: entered allmulticast mode [ 455.407918][T15792] team_slave_0: entered allmulticast mode [ 455.419415][T15792] team_slave_1: entered allmulticast mode [ 455.425602][T15792] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 455.543952][T15801] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2543'. [ 456.655127][T15828] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2552'. [ 456.858976][T15836] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2555'. [ 457.158447][T15846] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2557'. [ 457.988055][T15877] validate_nla: 23 callbacks suppressed [ 457.988103][T15877] netlink: 'syz.0.2568': attribute type 10 has an invalid length. [ 458.002126][T15877] netlink: 'syz.0.2568': attribute type 19 has an invalid length. [ 458.014229][T15877] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2568'. [ 458.132522][T15873] netlink: 'syz.1.2566': attribute type 10 has an invalid length. [ 458.183207][T15873] netlink: 'syz.1.2566': attribute type 19 has an invalid length. [ 458.207475][T15873] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2566'. [ 458.308530][T15896] netlink: 'syz.2.2573': attribute type 1 has an invalid length. [ 458.450982][T15900] netlink: 'syz.0.2574': attribute type 10 has an invalid length. [ 458.491589][T15900] team0: Device veth1_vlan failed to register rx_handler [ 458.532578][T15892] netlink: 'syz.3.2572': attribute type 10 has an invalid length. [ 458.546478][T15892] netlink: 'syz.3.2572': attribute type 19 has an invalid length. [ 458.554829][T15892] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2572'. [ 458.904305][T15914] netlink: 'syz.3.2578': attribute type 39 has an invalid length. [ 459.006647][T15918] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 459.013985][T15918] IPv6: NLM_F_CREATE should be set when creating new route [ 459.306593][T15924] netlink: 'syz.3.2582': attribute type 10 has an invalid length. [ 459.534618][T15939] team0: Device dummy0 is up. Set it down before adding it as a team port [ 459.647614][T15931] __nla_validate_parse: 1 callbacks suppressed [ 459.647651][T15931] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2585'. [ 459.713958][T15936] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2586'. [ 460.165454][T15961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.210004][T15961] team0: Port device bond0 added [ 460.311310][T15968] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2597'. [ 460.641378][T15970] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2596'. [ 460.847372][T15981] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2601'. [ 461.000477][T15983] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2602'. [ 461.268636][T16002] netlink: 55 bytes leftover after parsing attributes in process `syz.0.2605'. [ 461.286154][T16005] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2606'. [ 461.534473][T16015] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2610'. [ 461.798484][T16026] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2614'. [ 463.093250][T16063] validate_nla: 26 callbacks suppressed [ 463.093282][T16063] netlink: 'syz.0.2625': attribute type 10 has an invalid length. [ 463.127463][T16063] netlink: 'syz.0.2625': attribute type 19 has an invalid length. [ 463.995123][T16065] netlink: 'syz.1.2627': attribute type 10 has an invalid length. [ 464.015739][T16065] netlink: 'syz.1.2627': attribute type 19 has an invalid length. [ 464.440916][T16099] netlink: 'syz.1.2638': attribute type 3 has an invalid length. [ 464.677374][T16105] netlink: 'syz.2.2641': attribute type 10 has an invalid length. [ 464.686109][T16105] netlink: 'syz.2.2641': attribute type 19 has an invalid length. [ 464.695618][T16105] __nla_validate_parse: 6 callbacks suppressed [ 464.695651][T16105] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2641'. [ 464.876827][T16110] netlink: 'syz.3.2643': attribute type 10 has an invalid length. [ 464.887163][T16110] netlink: 'syz.3.2643': attribute type 19 has an invalid length. [ 464.895683][T16110] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2643'. [ 465.671825][T16150] netlink: 'syz.2.2657': attribute type 10 has an invalid length. [ 465.689378][T16150] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2657'. [ 465.858542][T16153] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2659'. [ 466.377638][T16182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2669'. [ 466.408807][T16183] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.679311][T16188] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2672'. [ 466.701074][T16187] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2671'. [ 467.045182][T16210] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2677'. [ 467.068752][T16210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.090329][T16210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.111223][T16210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.126636][T16210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.138361][T16210] batadv_slave_1: entered promiscuous mode [ 467.655993][T16226] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2685'. [ 467.701871][T16240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2690'. [ 468.143752][T16262] validate_nla: 20 callbacks suppressed [ 468.143768][T16262] netlink: 'syz.0.2696': attribute type 29 has an invalid length. [ 468.168304][T16262] netlink: 'syz.0.2696': attribute type 29 has an invalid length. [ 468.186268][T16262] netlink: 'syz.0.2696': attribute type 29 has an invalid length. [ 468.194905][T16262] netlink: 'syz.0.2696': attribute type 29 has an invalid length. [ 468.840691][T16276] netlink: 'syz.1.2703': attribute type 10 has an invalid length. [ 468.850878][T16276] netlink: 'syz.1.2703': attribute type 19 has an invalid length. [ 468.880285][T16278] netlink: 'syz.0.2704': attribute type 10 has an invalid length. [ 468.910288][T16278] netlink: 'syz.0.2704': attribute type 19 has an invalid length. [ 469.090923][T16288] netlink: 'syz.2.2706': attribute type 29 has an invalid length. [ 469.112232][T16288] netlink: 'syz.2.2706': attribute type 29 has an invalid length. [ 469.763185][T16315] __nla_validate_parse: 10 callbacks suppressed [ 469.763222][T16315] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2717'. [ 469.959450][T16322] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2719'. [ 470.378023][T16347] pimreg: tun_chr_ioctl cmd 1074025673 [ 470.956864][T16359] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2730'. [ 471.095357][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2731'. [ 471.111084][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2731'. [ 471.123518][T16367] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2731'. [ 471.140822][T16370] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2731'. [ 471.266421][T16375] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2735'. [ 471.633378][T16394] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 471.751490][T16401] netlink: 183676 bytes leftover after parsing attributes in process `syz.2.2745'. [ 471.764095][T16401] netlink: del zone limit has 4 unknown bytes [ 472.550993][T16438] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2763'. [ 473.561344][ T5796] Bluetooth: hci1: unexpected subevent 0x04 length: 150 > 11 [ 473.787050][T16490] validate_nla: 31 callbacks suppressed [ 473.787069][T16490] netlink: 'syz.1.2786': attribute type 8 has an invalid length. [ 473.828429][T16490] netlink: 'syz.1.2786': attribute type 9 has an invalid length. [ 473.836200][T16490] netlink: 'syz.1.2786': attribute type 10 has an invalid length. [ 473.892165][T16490] netlink: 'syz.1.2786': attribute type 11 has an invalid length. [ 473.989742][T16502] syz.3.2791[16502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 473.989966][T16502] syz.3.2791[16502] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 475.156312][T16537] bond0: (slave syz_tun): Releasing backup interface [ 475.221139][T15325] $Hÿ: (slave syz_tun): Releasing backup interface [ 475.898828][T16544] netlink: 'syz.1.2813': attribute type 10 has an invalid length. [ 475.906730][T16544] __nla_validate_parse: 3 callbacks suppressed [ 475.906742][T16544] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2813'. [ 475.947814][T16544] team0: entered promiscuous mode [ 475.958122][T16544] C: entered promiscuous mode [ 475.968332][T16544] team_slave_1: entered promiscuous mode [ 475.978331][T16544] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 475.999746][T16544] bond0: (slave team0): Releasing backup interface [ 476.235038][ T42] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.294283][ T5789] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 476.304968][ T5789] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 476.316618][ T5789] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 476.325988][ T5789] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 476.338996][ T5789] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 476.346583][ T5789] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 476.385783][ T5798] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 476.396414][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.407132][ T42] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.407799][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 476.427719][ T5796] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.436419][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 476.443799][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.462716][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.469958][ T5796] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 476.482132][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 476.488393][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 476.490741][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.497238][ T5796] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.568024][ T42] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.592955][T16555] netlink: 'syz.1.2815': attribute type 10 has an invalid length. [ 476.602154][T16555] netlink: 'syz.1.2815': attribute type 16 has an invalid length. [ 476.610075][T16555] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2815'. [ 476.662867][ T42] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.058203][T16567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2819'. [ 477.067269][T16567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2819'. [ 477.126657][ T42] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.142655][T16565] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2819'. [ 477.155011][T16567] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2819'. [ 477.217529][T16549] chnl_net:caif_netlink_parms(): no params data found [ 477.270584][ T42] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.311406][T16547] chnl_net:caif_netlink_parms(): no params data found [ 477.413697][ T42] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.601962][ T42] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.727426][T16549] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.756697][T16549] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.764154][T16549] bridge_slave_0: entered allmulticast mode [ 477.774375][T16549] bridge_slave_0: entered promiscuous mode [ 477.783772][T16549] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.791201][T16549] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.798415][T16549] bridge_slave_1: entered allmulticast mode [ 477.809055][T16549] bridge_slave_1: entered promiscuous mode [ 477.917921][T16550] chnl_net:caif_netlink_parms(): no params data found [ 477.956546][T16549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.973148][T16549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.044348][T16547] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.052250][T16547] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.084545][T16547] bridge_slave_0: entered allmulticast mode [ 478.099995][T16547] bridge_slave_0: entered promiscuous mode [ 478.109130][T16547] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.116251][T16547] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.123935][T16547] bridge_slave_1: entered allmulticast mode [ 478.132031][T16547] bridge_slave_1: entered promiscuous mode [ 478.235555][T16549] team0: Port device team_slave_0 added [ 478.245240][T16549] team0: Port device team_slave_1 added [ 478.265718][ T5796] Bluetooth: hci2: Malformed HCI Event [ 478.310497][T16547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.392538][T16547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.403529][T16549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.410899][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.438172][T16549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.458260][ T5796] Bluetooth: hci0: command tx timeout [ 478.528376][ T5791] Bluetooth: hci3: command tx timeout [ 478.534937][ T5796] Bluetooth: hci1: command tx timeout [ 478.590649][T16549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.597649][T16549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.638954][T16549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.652004][T16550] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.660964][T16550] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.668262][T16550] bridge_slave_0: entered allmulticast mode [ 478.675657][T16550] bridge_slave_0: entered promiscuous mode [ 478.684338][T16550] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.692318][T16550] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.699905][T16550] bridge_slave_1: entered allmulticast mode [ 478.707386][T16550] bridge_slave_1: entered promiscuous mode [ 478.716380][T16614] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2829'. [ 478.748858][T16547] team0: Port device team_slave_0 added [ 478.762678][T16547] team0: Port device team_slave_1 added [ 479.013603][T16550] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.195988][T16550] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.210444][T16547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.217782][T16547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.245167][T16547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.462712][T16624] syzkaller0: entered promiscuous mode [ 479.468322][T16624] syzkaller0: entered allmulticast mode [ 479.487642][T16547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.495471][T16547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.522870][T16547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.544850][T16549] hsr_slave_0: entered promiscuous mode [ 479.553274][T16549] hsr_slave_1: entered promiscuous mode [ 479.560005][T16549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 479.567588][T16549] Cannot create hsr debugfs directory [ 480.534542][ T5796] Bluetooth: hci0: command tx timeout [ 480.611562][ T5796] Bluetooth: hci3: command tx timeout [ 480.611581][ T5791] Bluetooth: hci1: command tx timeout [ 481.072200][T16550] team0: Port device team_slave_0 added [ 481.085490][T16550] team0: Port device team_slave_1 added [ 481.196788][T16547] hsr_slave_0: entered promiscuous mode [ 481.206112][T16547] hsr_slave_1: entered promiscuous mode [ 481.212822][T16547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 481.221568][T16547] Cannot create hsr debugfs directory [ 481.240757][T16550] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.248280][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.274691][T16550] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.314022][T16636] syzkaller0: entered promiscuous mode [ 481.319670][T16636] syzkaller0: entered allmulticast mode [ 481.364267][T16550] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.371490][T16550] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.398198][T16550] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 482.621460][ T5791] Bluetooth: hci0: command tx timeout [ 482.692632][ T5791] Bluetooth: hci1: command tx timeout [ 482.698736][ T5796] Bluetooth: hci3: command tx timeout [ 483.136595][T16550] hsr_slave_0: entered promiscuous mode [ 483.155301][T16550] hsr_slave_1: entered promiscuous mode [ 483.162428][T16550] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 483.170398][T16550] Cannot create hsr debugfs directory [ 483.816720][T16549] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 483.868553][T16549] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 483.907818][T16549] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 483.951805][T16549] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 484.025332][T16547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 484.041711][T16547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 484.053575][T16547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 484.064089][T16547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.233936][T16550] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 484.295147][T16550] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 484.325429][T16550] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 484.375099][T16550] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 484.626682][T16549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.678849][T16547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.691941][ T5791] Bluetooth: hci0: command tx timeout [ 484.704211][T16549] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.756206][ T2951] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.763447][ T2951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.778249][ T5791] Bluetooth: hci1: command tx timeout [ 484.783795][ T5796] Bluetooth: hci3: command tx timeout [ 484.798459][T16547] 8021q: adding VLAN 0 to HW filter on device team0 [ 484.812086][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.819260][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.844761][T15614] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.851924][T15614] bridge0: port 1(bridge_slave_0) entered forwarding state [ 484.883809][ T42] veth0_to_bridge: left allmulticast mode [ 484.890469][ T42] veth0_to_bridge: left promiscuous mode [ 484.897153][ T42] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 484.918969][ T42] hsr_slave_0: left promiscuous mode [ 484.924891][ T42] hsr_slave_1: left promiscuous mode [ 484.936997][ T42] hsr_slave_0: left promiscuous mode [ 484.944224][ T42] hsr_slave_1: left promiscuous mode [ 484.953104][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.961639][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.971008][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.978676][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 485.108963][ T42] veth1_macvtap: left allmulticast mode [ 485.114781][ T42] veth1_macvtap: left promiscuous mode [ 485.122189][ T42] veth0_macvtap: left promiscuous mode [ 485.131352][ T42] veth1_vlan: left promiscuous mode [ 485.136852][ T42] veth0_vlan: left promiscuous mode [ 487.049977][ T42] $Hÿ (unregistering): (slave macvlan0): Releasing backup interface [ 487.058596][ T42] macvlan0 (unregistering): left promiscuous mode [ 487.302791][ T42] team0 (unregistering): Port device team_slave_1 removed [ 487.371420][ T42] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.380672][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 487.419402][ T42] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.429170][ T42] bond_slave_0 (unregistering): left promiscuous mode [ 487.809964][ T42] $Hÿ (unregistering): Released all slaves [ 489.599472][ T42] team0 (unregistering): Port device team_slave_1 removed [ 489.636098][ T42] team0 (unregistering): Port device C removed [ 489.673468][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 489.713421][ T42] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 490.014397][ T42] team0 (unregistering): Port device bond0 removed [ 490.119786][ T42] bond0 (unregistering): Released all slaves [ 490.167152][T15643] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.174368][T15643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.253488][T16550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.335925][T16550] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.391582][T15643] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.399313][T15643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.434397][ T2951] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.441570][ T2951] bridge0: port 2(bridge_slave_1) entered forwarding state [ 490.485700][T16708] syz.1.2838[16708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.486033][T16708] syz.1.2838[16708] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 490.607594][T16550] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 490.676701][T16550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.035503][T16549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.147364][T16547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.293212][T16550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.879846][T16549] veth0_vlan: entered promiscuous mode [ 491.983586][T16550] veth0_vlan: entered promiscuous mode [ 492.011130][T16549] veth1_vlan: entered promiscuous mode [ 492.046088][T16547] veth0_vlan: entered promiscuous mode [ 492.120159][T16550] veth1_vlan: entered promiscuous mode [ 492.127176][T16547] veth1_vlan: entered promiscuous mode [ 492.175249][T16549] veth0_macvtap: entered promiscuous mode [ 492.230468][T16549] veth1_macvtap: entered promiscuous mode [ 492.301709][T16763] syzkaller0: entered promiscuous mode [ 492.307530][T16763] syzkaller0: entered allmulticast mode [ 492.330257][T16547] veth0_macvtap: entered promiscuous mode [ 492.349787][T16550] veth0_macvtap: entered promiscuous mode [ 493.856152][T16547] veth1_macvtap: entered promiscuous mode [ 493.939966][T16550] veth1_macvtap: entered promiscuous mode [ 493.950002][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.967381][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.980124][T16549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.019541][T16547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.031176][T16547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.043236][T16547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.055494][T16547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.067268][T16547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.070210][ T5796] Bluetooth: hci2: unexpected event 0x08 length: 151 > 4 [ 494.080551][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.098817][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.110307][T16549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.121369][T16549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.133041][T16549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.150346][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.183901][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.194763][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.205637][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.215726][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 494.233938][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.245357][T16550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.261151][T16547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.273129][T16547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.283252][T16547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.294103][T16547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.304449][T16547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.315095][T16547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.326761][T16547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.350214][T16549] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.360004][T16549] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.370226][T16549] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.379118][T16549] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.392778][T16547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.402880][T16547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.411950][T16547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.421012][T16547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.435628][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.446596][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.457491][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.468969][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.478927][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.489589][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.499552][T16550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.510084][T16550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.521625][T16550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.533929][T16550] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.543227][T16550] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.552508][T16550] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.563348][T16550] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.744099][ T2951] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.788121][ T2951] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.795557][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.810513][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.896193][T15605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.915177][T15605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.957061][T15605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.008235][T15605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.049812][T15605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.067885][T15605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.132031][T15603] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.141287][T15603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.294363][T16797] netlink: 'syz.5.2810': attribute type 8 has an invalid length. [ 495.348167][T16797] netlink: 'syz.5.2810': attribute type 9 has an invalid length. [ 495.368471][T16797] netlink: 'syz.5.2810': attribute type 10 has an invalid length. [ 495.397782][T16797] netlink: 'syz.5.2810': attribute type 11 has an invalid length. [ 495.405667][T16797] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2810'. [ 495.998780][T16824] syzkaller0: entered promiscuous mode [ 496.005717][T16824] syzkaller0: entered allmulticast mode [ 496.482421][T16839] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2856'. [ 496.694885][T16844] syzkaller0: entered promiscuous mode [ 496.727866][T16844] syzkaller0: entered allmulticast mode [ 498.701047][T16864] netlink: 'syz.5.2863': attribute type 8 has an invalid length. [ 498.712509][T16864] netlink: 'syz.5.2863': attribute type 9 has an invalid length. [ 498.721748][T16864] netlink: 'syz.5.2863': attribute type 10 has an invalid length. [ 498.730225][T16864] netlink: 'syz.5.2863': attribute type 11 has an invalid length. [ 498.747741][T16864] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2863'. [ 498.767436][T16867] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.2865'. [ 498.975204][T16884] netlink: 'syz.1.2868': attribute type 8 has an invalid length. [ 498.991296][T16884] netlink: 'syz.1.2868': attribute type 9 has an invalid length. [ 499.004158][T16884] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2868'. [ 499.255008][T16892] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2871'. [ 500.178566][T16928] -1: renamed from syzkaller0 [ 500.899594][T16949] validate_nla: 2 callbacks suppressed [ 500.899610][T16949] netlink: 'syz.5.2890': attribute type 8 has an invalid length. [ 500.948369][T16949] netlink: 'syz.5.2890': attribute type 9 has an invalid length. [ 500.988496][T16949] netlink: 'syz.5.2890': attribute type 10 has an invalid length. [ 501.013816][T16949] netlink: 'syz.5.2890': attribute type 11 has an invalid length. [ 501.037595][ T5796] Bluetooth: hci1: ISO packet too small [ 501.045595][T16949] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2890'. [ 501.508249][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.518136][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.588157][T16974] netlink: 183676 bytes leftover after parsing attributes in process `syz.6.2898'. [ 501.683832][T16974] netlink: zone id is out of range [ 501.705301][T16974] netlink: del zone limit has 4 unknown bytes [ 501.846508][T16983] netlink: 'syz.1.2900': attribute type 10 has an invalid length. [ 502.577906][T17013] netlink: 'syz.6.2910': attribute type 8 has an invalid length. [ 502.607902][T17013] netlink: 'syz.6.2910': attribute type 9 has an invalid length. [ 502.651151][T17013] netlink: 'syz.6.2910': attribute type 10 has an invalid length. [ 502.682388][T17013] netlink: 'syz.6.2910': attribute type 11 has an invalid length. [ 502.762110][T17013] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2910'. [ 502.834012][T17022] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2911'. [ 502.865270][T17027] netlink: 'syz.5.2913': attribute type 27 has an invalid length. [ 502.887863][T17027] bridge0: port 1(bridge_slave_0) entered learning state [ 503.195992][ T5796] Bluetooth: Frame is too long (len 149, expected len 4) [ 504.041677][T17062] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2924'. [ 504.525764][T17077] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2930'. [ 505.726924][T17115] syzkaller0: entered promiscuous mode [ 505.732870][T17115] syzkaller0: entered allmulticast mode [ 505.968508][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.513816][T17124] validate_nla: 9 callbacks suppressed [ 507.513831][T17124] netlink: 'syz.5.2943': attribute type 10 has an invalid length. [ 507.545504][T17124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 507.579997][T17124] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 507.606026][T17130] netlink: 'syz.5.2943': attribute type 10 has an invalid length. [ 507.624225][T17130] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2943'. [ 507.663840][T17130] batadv0: entered promiscuous mode [ 507.673940][T17130] batadv0: entered allmulticast mode [ 507.690750][T17130] bond0: (slave batadv0): Releasing backup interface [ 507.726285][T17130] bridge0: port 3(batadv0) entered blocking state [ 507.738718][T17130] bridge0: port 3(batadv0) entered disabled state [ 507.829895][T15614] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 507.839872][T15614] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 507.875996][T17142] netlink: 'syz.5.2948': attribute type 8 has an invalid length. [ 507.902379][T17142] netlink: 'syz.5.2948': attribute type 9 has an invalid length. [ 507.914041][T17142] netlink: 'syz.5.2948': attribute type 10 has an invalid length. [ 507.928447][T17142] netlink: 'syz.5.2948': attribute type 11 has an invalid length. [ 507.967943][T17142] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2948'. [ 510.312296][T17215] veth1_macvtap: left promiscuous mode [ 510.330334][T17215] macsec0: entered allmulticast mode [ 510.436010][T17217] netlink: 'syz.1.2965': attribute type 8 has an invalid length. [ 510.444606][T17217] netlink: 'syz.1.2965': attribute type 9 has an invalid length. [ 510.466832][T17217] netlink: 'syz.1.2965': attribute type 10 has an invalid length. [ 510.499669][T17217] netlink: 'syz.1.2965': attribute type 11 has an invalid length. [ 510.561687][T17217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2965'. [ 510.575001][T17220] veth1_macvtap: entered promiscuous mode [ 510.581010][T17220] veth1_macvtap: entered allmulticast mode [ 510.594172][T17220] macsec0: entered promiscuous mode [ 511.746047][T17263] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.2976'. [ 512.451227][T17284] netlink: 14593 bytes leftover after parsing attributes in process `syz.6.2981'. [ 512.532818][T17284] netlink: 'syz.6.2981': attribute type 10 has an invalid length. [ 512.574629][T17284] netlink: 55 bytes leftover after parsing attributes in process `syz.6.2981'. [ 513.322195][T17292] netlink: 'syz.5.2983': attribute type 8 has an invalid length. [ 513.330777][T17292] netlink: 'syz.5.2983': attribute type 9 has an invalid length. [ 513.339485][T17292] netlink: 'syz.5.2983': attribute type 10 has an invalid length. [ 513.347436][T17292] netlink: 'syz.5.2983': attribute type 11 has an invalid length. [ 513.356628][T17292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2983'. [ 513.525139][ T5796] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 513.551064][ T5796] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 513.889818][T17320] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x31 [ 514.064166][ T5796] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 514.177237][T17334] netlink: 'syz.4.2994': attribute type 39 has an invalid length. [ 514.231334][T17334] veth0_macvtap: left promiscuous mode [ 514.543172][T17349] netlink: 'syz.6.2998': attribute type 8 has an invalid length. [ 514.580753][T17349] netlink: 'syz.6.2998': attribute type 9 has an invalid length. [ 514.600278][T17349] netlink: 'syz.6.2998': attribute type 10 has an invalid length. [ 514.613451][T17349] netlink: 'syz.6.2998': attribute type 11 has an invalid length. [ 514.623422][T17349] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2998'. [ 515.566223][T17379] IPv6: Can't replace route, no match found [ 515.667582][ T5796] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 516.070082][ T5796] Bluetooth: hci2: unexpected event 0x32 length: 15 > 9 [ 516.294291][T17401] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.328842][T17401] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.395063][T17401] bridge0: entered allmulticast mode [ 516.575506][T17404] bridge0: port 3(batadv0) entered disabled state [ 516.590350][T17404] bridge_slave_1: left allmulticast mode [ 516.604399][T17404] bridge_slave_1: left promiscuous mode [ 516.612637][T17404] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.622300][T17404] bridge_slave_0: left allmulticast mode [ 516.629356][T17404] bridge_slave_0: left promiscuous mode [ 516.635075][T17404] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.683224][T17406] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3013'. [ 517.370054][ T5796] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 518.195635][T17468] validate_nla: 4 callbacks suppressed [ 518.195651][T17468] netlink: 'syz.4.3029': attribute type 8 has an invalid length. [ 518.348862][T17468] netlink: 'syz.4.3029': attribute type 9 has an invalid length. [ 518.425149][T17468] netlink: 'syz.4.3029': attribute type 10 has an invalid length. [ 518.482073][T17468] netlink: 'syz.4.3029': attribute type 11 has an invalid length. [ 518.517821][T17468] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3029'. [ 519.306810][T17498] veth1_macvtap: left promiscuous mode [ 519.646908][T17505] wg2: entered promiscuous mode [ 519.659772][T17505] wg2: entered allmulticast mode [ 521.022992][T17528] netlink: 'syz.5.3043': attribute type 8 has an invalid length. [ 521.051767][T17528] netlink: 'syz.5.3043': attribute type 9 has an invalid length. [ 521.060781][T17528] netlink: 'syz.5.3043': attribute type 10 has an invalid length. [ 521.095617][T17528] netlink: 'syz.5.3043': attribute type 11 has an invalid length. [ 521.127137][T17528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3043'. [ 521.185834][ T5796] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 521.207797][T17533] macsec0: entered promiscuous mode [ 521.258401][T17533] macsec0: entered allmulticast mode [ 521.268275][T17533] veth1_macvtap: entered allmulticast mode [ 522.164331][ T5796] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 522.371816][T17554] veth1_macvtap: entered promiscuous mode [ 522.405501][T17554] macsec0: entered promiscuous mode [ 522.417190][T17554] macsec0: entered allmulticast mode [ 522.429791][T17554] veth1_macvtap: entered allmulticast mode [ 522.677006][T17567] netlink: 'syz.1.3053': attribute type 1 has an invalid length. [ 522.728243][T17567] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.3053'. [ 523.008687][T17580] netlink: 'syz.4.3057': attribute type 39 has an invalid length. [ 523.414098][T17593] netlink: 'syz.6.3059': attribute type 8 has an invalid length. [ 523.443832][T17593] netlink: 'syz.6.3059': attribute type 9 has an invalid length. [ 523.507808][T17593] netlink: 'syz.6.3059': attribute type 10 has an invalid length. [ 523.550715][T17593] netlink: 'syz.6.3059': attribute type 11 has an invalid length. [ 523.613903][T17599] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3060'. [ 523.628931][T17593] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3059'. [ 523.695393][T17595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 523.702759][T17595] IPv6: NLM_F_CREATE should be set when creating new route [ 523.710090][T17595] IPv6: NLM_F_CREATE should be set when creating new route [ 523.717361][T17595] IPv6: NLM_F_CREATE should be set when creating new route [ 523.814690][T17599] netlink: 'syz.4.3060': attribute type 39 has an invalid length. [ 523.901893][T17606] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.3062'. [ 524.150270][T17616] netlink: 209844 bytes leftover after parsing attributes in process `syz.5.3064'. [ 524.186858][T17617] netlink: 'syz.4.3063': attribute type 29 has an invalid length. [ 524.251579][T17617] netlink: 'syz.4.3063': attribute type 29 has an invalid length. [ 524.280997][T17619] netlink: 'syz.4.3063': attribute type 29 has an invalid length. [ 524.341140][T17617] netlink: 'syz.4.3063': attribute type 29 has an invalid length. [ 524.474029][ T5796] Bluetooth: hci2: unexpected event 0x17 length: 15 > 6 [ 524.726182][T17630] syzkaller0: entered promiscuous mode [ 524.741445][T17630] syzkaller0: entered allmulticast mode [ 524.975040][T17636] netlink: 'syz.4.3070': attribute type 29 has an invalid length. [ 525.335344][T17651] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3073'. [ 525.365763][T17651] ipvlan1: entered promiscuous mode [ 525.371814][T17651] ipvlan1: entered allmulticast mode [ 525.377597][ T5796] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 525.378988][T17651] veth0_vlan: entered allmulticast mode [ 525.413047][T17651] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 525.470929][ T5796] Bluetooth: hci0: adv larger than maximum supported [ 525.626096][ T5796] Bluetooth: hci0: unexpected event 0x32 length: 15 > 9 [ 525.888202][T17669] Dead loop on virtual device ip6_vti0, fix it urgently! [ 525.988960][T17663] team0: Port device wlan1 added [ 526.010598][T17665] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3080'. [ 526.234346][T17679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3084'. [ 526.394362][ T5796] Bluetooth: hci1: unexpected event 0x33 length: 15 > 10 [ 526.620970][ T5796] Bluetooth: hci2: adv larger than maximum supported [ 527.082358][ T5796] Bluetooth: hci1: unexpected event 0x32 length: 15 > 9 [ 527.201701][T17708] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.3100'. [ 527.312929][T17708] veth0_macvtap: left promiscuous mode [ 527.397572][ T5796] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11 [ 528.074362][T17731] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3101'. [ 528.078030][ T5796] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10 [ 528.325691][ T5796] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 529.022464][T17758] validate_nla: 16 callbacks suppressed [ 529.022480][T17758] netlink: 'syz.1.3109': attribute type 39 has an invalid length. [ 529.583905][T17774] netlink: 'syz.5.3119': attribute type 8 has an invalid length. [ 529.613519][T17774] netlink: 'syz.5.3119': attribute type 9 has an invalid length. [ 529.626737][T17774] netlink: 'syz.5.3119': attribute type 10 has an invalid length. [ 529.637337][T17774] netlink: 'syz.5.3119': attribute type 11 has an invalid length. [ 529.651571][T17774] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3119'. [ 529.669138][T17779] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3110'. [ 529.713698][T17779] netlink: 'syz.6.3110': attribute type 39 has an invalid length. [ 529.745016][T17779] veth0_macvtap: left promiscuous mode [ 530.198395][T17800] syzkaller0: entered promiscuous mode [ 530.204093][T17800] syzkaller0: entered allmulticast mode [ 530.508436][T17810] netlink: 'syz.6.3114': attribute type 20 has an invalid length. [ 531.158840][T17834] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.3123'. [ 531.306354][T17836] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.337784][T17836] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.393760][T17836] bridge0: entered allmulticast mode [ 531.524104][T17834] netlink: 'syz.1.3123': attribute type 39 has an invalid length. [ 531.542590][T17834] veth0_macvtap: left promiscuous mode [ 531.618471][T17841] netlink: 'syz.6.3126': attribute type 8 has an invalid length. [ 531.626510][T17841] netlink: 'syz.6.3126': attribute type 9 has an invalid length. [ 531.635206][T17841] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3126'. [ 531.645669][T17842] bridge_slave_1: left allmulticast mode [ 531.655349][T17842] bridge_slave_1: left promiscuous mode [ 531.663449][T17842] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.676560][T17842] bridge_slave_0: left allmulticast mode [ 531.685575][T17842] bridge_slave_0: left promiscuous mode [ 531.692240][T17842] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.804668][T17846] syzkaller0: entered promiscuous mode [ 531.811320][T17846] syzkaller0: entered allmulticast mode [ 532.150605][ T5791] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 532.150656][ T5791] Bluetooth: hci2: unexpected event for opcode 0x656e [ 532.457011][ T5791] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 532.484420][ T5791] Bluetooth: hci2: unexpected event 0x10 length: 15 > 1 [ 532.485560][ T5791] Bluetooth: hci2: hardware error 0x00 [ 532.612787][T17881] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.3137'. [ 533.136963][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.297454][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.356610][ T5796] Bluetooth: hci2: adv larger than maximum supported [ 533.360434][T17903] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3142'. [ 533.490406][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.531303][T17900] syzkaller0: entered promiscuous mode [ 533.536827][T17900] syzkaller0: entered allmulticast mode [ 533.613053][ T42] $Hÿ: (slave netdevsim0): Releasing backup interface [ 533.636110][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 533.663671][ T42] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.083843][T17919] syzkaller0: entered promiscuous mode [ 534.104852][T17919] syzkaller0: entered allmulticast mode [ 534.140761][ T5796] Bluetooth: hci0: unexpected event 0x31 length: 15 > 6 [ 534.485280][T17934] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.3147'. [ 534.617908][ T5791] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 534.804535][T17939] validate_nla: 7 callbacks suppressed [ 534.804574][T17939] netlink: 'syz.1.3160': attribute type 8 has an invalid length. [ 534.818381][T17939] netlink: 'syz.1.3160': attribute type 9 has an invalid length. [ 534.826142][T17939] netlink: 'syz.1.3160': attribute type 10 has an invalid length. [ 534.834194][T17939] netlink: 'syz.1.3160': attribute type 11 has an invalid length. [ 534.842529][T17939] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3160'. [ 535.115911][ T5791] Bluetooth: hci0: adv larger than maximum supported [ 535.462156][T17961] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 535.483234][T17961] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 535.670981][T17971] netlink: 'syz.5.3166': attribute type 8 has an invalid length. [ 535.727937][T17971] netlink: 'syz.5.3166': attribute type 9 has an invalid length. [ 535.737346][T17971] netlink: 'syz.5.3166': attribute type 10 has an invalid length. [ 535.801561][T17971] netlink: 'syz.5.3166': attribute type 11 has an invalid length. [ 535.838037][T17971] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3166'. [ 536.068677][ T42] [ 536.071064][ T42] ====================================================== [ 536.078086][ T42] WARNING: possible circular locking dependency detected [ 536.085126][ T42] syzkaller #0 Not tainted [ 536.089531][ T42] ------------------------------------------------------ [ 536.096536][ T42] kworker/u4:2/42 is trying to acquire lock: [ 536.102505][ T42] ffff88806130cd00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 536.112093][ T42] [ 536.112093][ T42] but task is already holding lock: [ 536.119448][ T42] ffff88801bb40768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 536.129803][ T42] [ 536.129803][ T42] which lock already depends on the new lock. [ 536.129803][ T42] [ 536.140199][ T42] [ 536.140199][ T42] the existing dependency chain (in reverse order) is: [ 536.149208][ T42] [ 536.149208][ T42] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 536.156966][ T42] __mutex_lock+0x129/0xcc0 [ 536.161999][ T42] ieee80211_open+0x144/0x200 [ 536.167205][ T42] __dev_open+0x2bc/0x430 [ 536.172069][ T42] dev_open+0xab/0x170 [ 536.176656][ T42] team_add_slave+0xae7/0x2660 [ 536.181933][ T42] do_setlink+0xe14/0x3fb0 [ 536.186869][ T42] rtnl_newlink+0x175b/0x2020 [ 536.192069][ T42] rtnetlink_rcv_msg+0x7c7/0xf10 [ 536.197534][ T42] netlink_rcv_skb+0x216/0x480 [ 536.202829][ T42] netlink_unicast+0x751/0x8d0 [ 536.208123][ T42] netlink_sendmsg+0x8c1/0xbe0 [ 536.213407][ T42] ____sys_sendmsg+0x5bf/0x950 [ 536.218691][ T42] ___sys_sendmsg+0x220/0x290 [ 536.223886][ T42] __se_sys_sendmsg+0x1a5/0x270 [ 536.229265][ T42] do_syscall_64+0x55/0xb0 [ 536.234209][ T42] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 536.240631][ T42] [ 536.240631][ T42] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 536.248800][ T42] __lock_acquire+0x2ddb/0x7c80 [ 536.254167][ T42] lock_acquire+0x197/0x410 [ 536.259187][ T42] __mutex_lock+0x129/0xcc0 [ 536.264214][ T42] team_del_slave+0x32/0x1c0 [ 536.269326][ T42] team_device_event+0x28d/0xa20 [ 536.274785][ T42] notifier_call_chain+0x197/0x390 [ 536.280416][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 536.287272][ T42] unregister_netdevice_queue+0x324/0x360 [ 536.293520][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 536.299679][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 536.306004][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 536.311892][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 536.317960][ T42] hwsim_exit_net+0x585/0x640 [ 536.323163][ T42] cleanup_net+0x6f4/0xb90 [ 536.328103][ T42] process_scheduled_works+0xa45/0x15b0 [ 536.334190][ T42] worker_thread+0xa55/0xfc0 [ 536.339301][ T42] kthread+0x2fa/0x390 [ 536.343881][ T42] ret_from_fork+0x48/0x80 [ 536.348817][ T42] ret_from_fork_asm+0x11/0x20 [ 536.354100][ T42] [ 536.354100][ T42] other info that might help us debug this: [ 536.354100][ T42] [ 536.364318][ T42] Possible unsafe locking scenario: [ 536.364318][ T42] [ 536.371760][ T42] CPU0 CPU1 [ 536.377121][ T42] ---- ---- [ 536.382485][ T42] lock(&rdev->wiphy.mtx); [ 536.386994][ T42] lock(team->team_lock_key#2); [ 536.394459][ T42] lock(&rdev->wiphy.mtx); [ 536.401477][ T42] lock(team->team_lock_key#2); [ 536.406416][ T42] [ 536.406416][ T42] *** DEADLOCK *** [ 536.406416][ T42] [ 536.414554][ T42] 5 locks held by kworker/u4:2/42: [ 536.419674][ T42] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.430552][ T42] #1: ffffc90000b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 536.441084][ T42] #2: ffffffff8dfaf510 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 536.450503][ T42] #3: ffffffff8dfbc348 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 536.460337][ T42] #4: ffff88801bb40768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 536.471127][ T42] [ 536.471127][ T42] stack backtrace: [ 536.477038][ T42] CPU: 1 PID: 42 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 536.484410][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 536.494463][ T42] Workqueue: netns cleanup_net [ 536.499238][ T42] Call Trace: [ 536.502529][ T42] [ 536.505466][ T42] dump_stack_lvl+0x16c/0x230 [ 536.510146][ T42] ? load_image+0x3b0/0x3b0 [ 536.514645][ T42] ? show_regs_print_info+0x20/0x20 [ 536.519845][ T42] ? print_circular_bug+0x12b/0x1a0 [ 536.525044][ T42] check_noncircular+0x2bd/0x3c0 [ 536.529985][ T42] ? print_deadlock_bug+0x5d0/0x5d0 [ 536.535177][ T42] ? lockdep_lock+0xe0/0x220 [ 536.539770][ T42] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 536.545329][ T42] ? _find_first_zero_bit+0xd3/0x100 [ 536.550620][ T42] __lock_acquire+0x2ddb/0x7c80 [ 536.555484][ T42] ? verify_lock_unused+0x140/0x140 [ 536.560678][ T42] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 536.566232][ T42] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 536.572826][ T42] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 536.578381][ T42] lock_acquire+0x197/0x410 [ 536.582879][ T42] ? team_del_slave+0x32/0x1c0 [ 536.587652][ T42] ? __might_sleep+0xe0/0xe0 [ 536.592246][ T42] ? read_lock_is_recursive+0x20/0x20 [ 536.597625][ T42] __mutex_lock+0x129/0xcc0 [ 536.602141][ T42] ? team_del_slave+0x32/0x1c0 [ 536.606896][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 536.611933][ T42] ? rcu_is_watching+0x15/0xb0 [ 536.616696][ T42] ? trace_contention_end+0x39/0xe0 [ 536.621895][ T42] ? __mutex_lock+0x304/0xcc0 [ 536.626570][ T42] ? team_del_slave+0x32/0x1c0 [ 536.631327][ T42] ? mutex_lock_nested+0x20/0x20 [ 536.636265][ T42] ? bond_netdev_event+0xe1/0xef0 [ 536.641296][ T42] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 536.646947][ T42] ? bond_ipsec_offload_ok+0x410/0x410 [ 536.652425][ T42] team_del_slave+0x32/0x1c0 [ 536.657043][ T42] team_device_event+0x28d/0xa20 [ 536.661985][ T42] notifier_call_chain+0x197/0x390 [ 536.667102][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 536.673445][ T42] ? lock_chain_count+0x20/0x20 [ 536.678301][ T42] ? unregister_netdevice_many+0x20/0x20 [ 536.683939][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 536.689664][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 536.694691][ T42] unregister_netdevice_queue+0x324/0x360 [ 536.700413][ T42] ? list_netdevice+0x730/0x730 [ 536.705267][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 536.710990][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 536.716628][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 536.722446][ T42] ? ieee80211_do_stop+0x1db0/0x1db0 [ 536.727744][ T42] ? rcu_is_watching+0x15/0xb0 [ 536.732539][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 536.737918][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 536.743469][ T42] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 536.749016][ T42] hwsim_exit_net+0x585/0x640 [ 536.753692][ T42] ? hwsim_init_net+0x90/0x90 [ 536.758372][ T42] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 536.764184][ T42] cleanup_net+0x6f4/0xb90 [ 536.768615][ T42] ? ops_free_list+0x3b0/0x3b0 [ 536.773379][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 536.778602][ T42] ? process_scheduled_works+0x957/0x15b0 [ 536.784335][ T42] ? process_scheduled_works+0x957/0x15b0 [ 536.790061][ T42] process_scheduled_works+0xa45/0x15b0 [ 536.795636][ T42] ? assign_work+0x400/0x400 [ 536.800240][ T42] ? assign_work+0x39e/0x400 [ 536.804853][ T42] worker_thread+0xa55/0xfc0 [ 536.809462][ T42] kthread+0x2fa/0x390 [ 536.813593][ T42] ? pr_cont_work+0x560/0x560 [ 536.818281][ T42] ? kthread_blkcg+0xd0/0xd0 [ 536.822867][ T42] ret_from_fork+0x48/0x80 [ 536.827295][ T42] ? kthread_blkcg+0xd0/0xd0 [ 536.831895][ T42] ret_from_fork_asm+0x11/0x20 [ 536.836667][ T42] [ 536.928648][ T42] mac80211_hwsim hwsim6 wlan1 (unregistering): left promiscuous mode [ 536.975444][ T42] mac80211_hwsim hwsim6 wlan1 (unregistering): left allmulticast mode [ 536.988303][ T42] team0: Port device wlan1 removed [ 537.003075][T17983] netlink: 'syz.6.3159': attribute type 39 has an invalid length. [ 537.119566][ T42] team0: left allmulticast mode [ 537.124489][ T42] team_slave_0: left allmulticast mode [ 537.131890][ T42] team_slave_1: left allmulticast mode [ 537.137663][ T42] bridge0: port 1(team0) entered disabled state [ 537.154768][ T42] hsr_slave_0: left promiscuous mode [ 537.167564][ T42] hsr_slave_1: left promiscuous mode [ 537.174208][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.183360][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.210031][ T42] veth1_macvtap: left allmulticast mode [ 537.215745][ T42] veth1_macvtap: left promiscuous mode [ 537.243237][ T42] veth0_macvtap: left promiscuous mode [ 537.249047][ T42] veth1_vlan: left promiscuous mode [ 537.254315][ T42] veth0_vlan: left promiscuous mode [ 537.587241][ T42] $Hÿ (unregistering): (slave batadv_slave_0): Releasing backup interface [ 537.596199][ T42] batadv_slave_0 (unregistering): left promiscuous mode [ 537.619425][ T42] team_slave_1 (unregistering): left promiscuous mode [ 537.626823][ T42] team0 (unregistering): Port device team_slave_1 removed [ 537.653801][ T42] team_slave_0 (unregistering): left promiscuous mode [ 537.662352][ T42] team0 (unregistering): Port device team_slave_0 removed [ 537.686256][ T42] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.696462][ T42] bond_slave_1 (unregistering): left promiscuous mode [ 537.720527][ T42] $Hÿ (unregistering): (slave 1@ÿ): Releasing backup interface [ 537.729030][ T42] @ÿ (unregistering): left promiscuous mode [ 537.889551][ T42] $Hÿ (unregistering): Released all slaves