last executing test programs: 24.547736981s ago: executing program 3 (id=1605): bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x50) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1e, 0x6, 0x40, 0xbf, 0x22420, r0, 0x9, '\x00', r1, r2, 0x1, 0x3, 0x2}, 0x50) (async) bpf$ENABLE_STATS(0x20, &(0x7f00000002c0), 0x4) syz_clone(0x0, &(0x7f0000000300)="b0a310dd7ea17f302f4f5931994dde0b001000074d8e73273e76c4", 0x1b, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)="68fccae0542d529129e57b86bc56d33f5d59e4a06cc6a7618683316f7b5f30d9a26e2328168f2f24b6b755cb25449f9e37759605d92fe9733be5813cca83cd7325c84032a86779112776f45f2b56fde79a1e8e0096ef09834be6e3598ddf5f3d6a9ece0453570e4d3b1179b1ef0303a334b0755c12a4e3446cfb652a6dea1828b08d113d1cd3da9990abf7808bf2283b1873b375342a64a6d30729a09f8af0b67d325e4ab0bd25c0776d8097b21ea1f3aad31a87496618e2f3eb395b2982b92aef7b0594bd046577d16c22a77d0674ed4f88d2737c0a7ab5fde9290804bfbf4a95ceabb9d348a6e7") (async) bpf$ENABLE_STATS(0x20, &(0x7f00000004c0), 0x4) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1da, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, r2, 0x3, 0x5, 0x1}, 0x50) (rerun: 64) syz_clone(0x800, &(0x7f0000000580)="b51072f419787d", 0x7, &(0x7f00000005c0), &(0x7f0000000600), &(0x7f0000000640)="d3a57581fcfd140694cdf4f230fe46729007c37b89858b82095188cddc59f135a76a69568e0e16824c70291e365fe9dc62ac7d77144ba2f5b8544dab1743c79ac8742317ae89c124a0d61729668acb647eee699f0317fd8701be561b9b06c5092616cbb07113cef817c724e7a445eb440488e289d9d3e86b63af035f2dbd6a") (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000007c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x95, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1d, 0x2d, &(0x7f0000000b40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x1ff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000cc0)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x9, '\x00', r1, @lsm=0x2b, r2, 0x8, &(0x7f0000000d00)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x5, 0xe, 0xa640}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8, &(0x7f0000000d80)=[r3, r0, r0, r3, r0, r3, r4, r3, r4], &(0x7f0000000dc0)=[{0x1, 0x1, 0xb, 0xc}, {0x5, 0x5, 0x3, 0x1}, {0x5, 0x3, 0xa, 0xc}, {0x1, 0x3, 0xa, 0x7}, {0x1, 0x1, 0xd, 0xb}, {0x2, 0x5, 0x8, 0x4}, {0x5, 0x3, 0xb}, {0x3, 0x2, 0xa, 0x9}], 0x10, 0x200}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x9, 0xb, &(0x7f00000006c0)=@raw=[@map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000740)='GPL\x00', 0x4, 0x5, &(0x7f0000000780)=""/5, 0x61680, 0x1, '\x00', r5, @fallback=0x31, r2, 0x8, &(0x7f0000000ac0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000b00)={0x1, 0x3, 0x7, 0x5}, 0x10, 0xffffffffffffffff, r6, 0x6, &(0x7f0000000f00)=[r3], &(0x7f0000000f40)=[{0x0, 0x3, 0x6, 0xa}, {0x0, 0x4, 0xa, 0x3}, {0x0, 0x2, 0x5, 0x4}, {0x0, 0x5, 0x6, 0x7}, {0x3, 0x2, 0xe, 0x4}, {0x5, 0x4, 0x0, 0x6}]}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001080)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x4e96, '\x00', r5, r2, 0x5, 0x2}, 0x50) (async, rerun: 64) syz_clone(0x71200, &(0x7f0000001100)="59f165594cd7470d831772e8abca4a385fd592c5a035587bfa4aaf327090d619e231456bb819d3d15d7b16d8ed110ea698a6fe1826e923063ff50624247aff00abdd63340097dbd4b50368327ae86d3c0e4265dec8c9d8e441ce605936adc1906990b5ca0c6176aad69be21af9dc48fd", 0x70, &(0x7f0000001180), &(0x7f00000011c0), &(0x7f0000001200)="6f3203073a4e3633b82720bf94a5ed90ff5ec0cb08e7dad72f55911f4e9b334dcc54111bec5d1bd72de6128c541ce28089b3cc2a4d604525a6319bfca02ce9f7db1a7c106dc83e4c4edef1e1aa3ac9674016782713cefd9b0903b253f4f12ec49532fc8620c1f6175913d9494b828d284117e6069b544b3d90942d75bd7f4db42a8db97c0f37e344d4fccb419a2c37e225d03dc92efed115e879ee334cf7135c1c55928bcdc8af84ae92e89dcf50fd6aaa67b24403ef6b15a55ea43fad84f75c486e28b53608acb5151d175529693c615ec23769bd4523ed35cc9708bf279751278e76b17e80cbd5f798d7bb6cc1f6e9ab093edee2") (rerun: 64) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001400)={r0, &(0x7f0000001300)="0bad36e9250918b4992fe4d7d466b8d2a80b083a0deb7e844c58f52222eb25fc0011ff13778f506e81", &(0x7f0000001340)=""/191}, 0x20) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001540)={@map=r8, 0xf, 0x1, 0x6, &(0x7f0000001440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001580)={@map=r3, r6, 0x1c, 0x0, 0x0, @void, @value=r7, @void, @void, r9}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001640)={{r0, 0xffffffffffffffff}, &(0x7f00000015c0), &(0x7f0000001600)=r7}, 0x20) (async, rerun: 64) r11 = socket$kcm(0x29, 0x2, 0x0) (async, rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001700)={r4, 0x58, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=@base={0xd, 0xedfe, 0xd4, 0x3, 0x3080c, 0xffffffffffffffff, 0x3, '\x00', r12, r2, 0x4, 0x4, 0x5, 0x0, @void, @value, @value=r10}, 0x50) r13 = openat$tun(0xffffffffffffff9c, &(0x7f00000017c0), 0x301a00, 0x0) ioctl$TUNSETQUEUE(r13, 0x400454d9, &(0x7f0000001800)={'ip_vti0\x00', 0x400}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x3, 0x400, 0x683d, 0xa27b, 0x2000, r10, 0x6, '\x00', r5, r2, 0x3, 0x5, 0x3}, 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r11, 0x89e0, &(0x7f00000018c0)={r11, r7}) (async) r14 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001940), 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001980)=@o_path={&(0x7f0000001900)='./file0\x00', r6, 0x4000, r14}, 0x18) 24.271185581s ago: executing program 3 (id=1607): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x64, 0x64, 0x6, [@typedef={0x0, 0x0, 0x0, 0x8, 0x1}, @union={0xa, 0x5, 0x0, 0x5, 0x1, 0x18, [{0xd, 0x1, 0xfffffffc}, {0xa, 0x5, 0x7}, {0x0, 0x1, 0x4d}, {0x10, 0x1, 0x1}, {0x3, 0x1, 0xfffffffc}]}, @var={0xc, 0x0, 0x0, 0xe, 0x3, 0x2}]}, {0x0, [0x2e, 0x5f, 0x30, 0x30]}}, &(0x7f00000004c0)=""/4096, 0x82, 0x1000, 0x0, 0x9}, 0x28) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4020940d, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x800000, '\x00', 0x0, 0xffffffffffffffff, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000d000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000200000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000001680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.093203509s ago: executing program 1 (id=1608): r0 = socket$kcm(0xa, 0x2, 0x88) r1 = socket$kcm(0x10, 0x3, 0x10) recvmsg$kcm(r1, 0x0, 0x120) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) close(0xffffffffffffffff) socket$kcm(0x2, 0x1000000000000002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r3, 0xc0189436, 0x8000001ffffffd) write$cgroup_type(r3, &(0x7f0000000440), 0x9) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="378303076844268cb89e14f00806", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)=[{0x0}, {0x0}, {&(0x7f00000046c0)="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", 0x61d}], 0x3}, 0x400c000) r7 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r8) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000002c0)=@in6={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x80, 0x0}, 0x8e8c5) sendmsg(r0, &(0x7f00000005c0)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x10000, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd7}, 0x80, 0x0}, 0x4000010) 24.081128027s ago: executing program 0 (id=1609): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000010}, 0x20000080) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1200000006000000040000000200000000000000", @ANYRES32, @ANYBLOB="000000000000f4e5c8a6963e0000000000000000b1acb2b888b97842a13e4a295bc5804219d9cd7537f4a7437d9ead879cd494b92d73df5be6554229c7f7d0354477e63e72aedd59a0d00ee95ae94049afa7385f9b861d8eb264307e49e85482bd9baf1b3fed19680000e567e959496e09a96a26f572b699eecaafada043dcda25f65f882883085afa95472e18e8571a01700a7295b4fd", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfda8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0xfda8, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r8, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4000041) close(r8) socket$kcm(0xa, 0x2, 0x11) (async) r9 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r9, 0x1, 0x3d, &(0x7f00000002c0), 0x8) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x400000, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff0000}}], 0x18}, 0x0) (async) sendmsg$sock(r9, &(0x7f00000000c0)={&(0x7f0000000180)=@in6={0xa, 0x4e22, 0x400000, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[@txtime={{0x18, 0x1, 0x3d, 0xffffffffffff0000}}], 0x18}, 0x0) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000080)=0x1) r10 = socket$kcm(0x29, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8990, &(0x7f0000000200)={'bond0\x00', @local}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) write$cgroup_subtree(r7, &(0x7f0000000500)=ANY=[@ANYBLOB="8fedcb79070311"], 0xfdef) socket$kcm(0xa, 0x1, 0x106) (async) socket$kcm(0xa, 0x1, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) (async) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x52cc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r7, 0x0, 0xa6, 0xc5, &(0x7f0000000300)="39ed9a51747f93c021c6cde02e8648458a707fd425a266784ff2b2bea0dfbb905ef9e287b3fb288d52d684f7303aee86105182634fd545c27d766710eae793fc93e71975b5b1368ddc6436250f2e99635fef626fd3cd3bdff5dceb96dfa507ef351604dee29716ae27433bb942edb3645061d6a7c4975ccc3ae3f2f2b1bdf88ab10673e058de7f32b5e1abe189dd61522af66f701258bbe915783538424ac286172ebe6d478d", &(0x7f0000000580)=""/197, 0x1, 0x0, 0x4d, 0x1000, &(0x7f0000000680)="4c7db679333ed95f25abd6e21e675d09cbce507743f1cbb06ef2371c7845d7e920f5f7907d14d1ecdd157cb1f59b95a302215257b74a8f84fdbc57858c8beed2de53b4d1091a8d5ab59d600c7e", &(0x7f0000001980)="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", 0x1, 0x0, 0x7}, 0x50) 23.948809493s ago: executing program 3 (id=1610): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r0, 0xc0189436, 0x8000001ffffffd) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x0, @remote, 0x3}, 0x80, 0x0}, 0x8000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000480)="b9ffb2ed6844268cb89e14f0886411e0ff15661aaa50e7369dfbac141416e000004062079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)}, 0x400c000) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xbb, 0x0, &(0x7f0000000240)="f3a7bc3ec50699726cecaa28b9dfc23bef28269cb069cfaf51324436f9a490aff78bcb3b13e1348c6d0f78a781997ad82f8677417c45b4122842c4fe60764f38bd83af4d7c81801b2cf2c49d3f20c288ebf3eff326cbdb6ee78c289f9a00c8d876fab3799c7d936ef8fc207fd725be44833d1a74662ed75c474a5aef3f78e0df359b2941a39dbaa068b9b00d60c046e598e752ca61ffead00a4208f394610280f6c7c5c241acf93b8414a4257767fa9eb92fd54d6dbede3abababe", 0x0, 0x20000fe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000ec0)={@map, 0xffffffffffffffff, 0x6}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000180)=0x1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x400000000000f9, 0xffffffffffffffff, 0x3) r5 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x23, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x10) close(r5) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x67ca5e32d9a78e02, 0xe, &(0x7f0000000300)=ANY=[@ANYRESHEX=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b954bc6762240c61c57ed374ad", 0x0, 0x20041ff, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x35a05, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_config_ext={0x500, 0x2}, 0x1075, 0x6, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x1, 0x0, 0xfffffffe, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 23.508504335s ago: executing program 0 (id=1611): r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x0, 0x40000000000, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x20000000000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r3) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8b0d, &(0x7f00000001c0)={'team_slave_1\x00', @random}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) socket$kcm(0x2b, 0x1, 0x0) (async) r6 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0}, 0x24000000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socketpair(0xf, 0x2, 0x1, &(0x7f0000000140)) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)={0xffffffffffffffff, r2}) (async) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x890b, &(0x7f0000000100)={0xffffffffffffffff, r2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x6) (async) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x6) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/N'], 0x6a) perf_event_open(&(0x7f0000000800)={0x1, 0x80, 0x2, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x35606b6ecd96b89c, 0x0, 0x0, 0x4, 0x0, 0x6}, 0xffffffffffffffff, 0x0, r1, 0x0) 23.507302704s ago: executing program 1 (id=1612): r0 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x2405, 0x8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r1}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x2}, 0x2405, 0x8, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0xd) (async) socket$kcm(0xa, 0x5, 0x0) (async) ioctl$PERF_EVENT_IOC_RESET(r0, 0x2403, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890c, &(0x7f0000000000)={r1}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x181000, 0x0) (async) 23.236998506s ago: executing program 1 (id=1614): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, 0x0, 0x4) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xffdd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, &(0x7f0000000500)=r5, 0x4) 23.176842205s ago: executing program 3 (id=1615): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x5, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x4e24, 0x4, @loopback={0xf5}}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000022103ad50233e87b91f8d0d5740967cdaa08b69a436c045b387e453c2d7bbc303289e9fb0b5bbf0c914310b4353272da40fc8ac7aa6b0536e2be1f69022b39a8b6bdc92d35a0bddcc21201a96455cd6b6df8d9cf6887f6a1150df99"], 0x18}, 0xfc00) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000200)={0x2, 0x0, [0x0, 0x0]}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x4) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, &(0x7f0000000340)=""/81, 0x26, 0x51, 0x1, 0x5}, 0x28) r4 = openat$cgroup_int(r3, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000340)=ANY=[], 0x27) socket$kcm(0x1e, 0x5, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, r2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2408, 0xca, 0x0, 0x4, 0x8}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) close(r6) recvmsg$unix(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[@ANYRES64], 0x2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x35, &(0x7f00000005c0), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000480)=ANY=[], 0x50) openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{}], 0x1}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) 23.176155625s ago: executing program 0 (id=1616): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000007c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffefffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x101) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000030000"], 0x0, 0x33, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=r1], &(0x7f0000000200)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x41100, 0x327421a81efff52b}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) close(0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x4000000) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg(r3, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)=ANY=[@ANYBLOB="1000000000000000130100001700000010000000000000008400000002000000"], 0x20}, 0x22000010) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000018c0)=""/178}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB], 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x3d) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) 22.749031699s ago: executing program 1 (id=1618): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x0, 0x100000, 0x8, 0x2, 0xfffffffa, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) 22.736856096s ago: executing program 2 (id=1619): socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0x830d}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) (async) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) (async, rerun: 64) sendmsg$inet(r0, &(0x7f0000003a80)={&(0x7f00000004c0)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x4008804) (async, rerun: 64) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90324fc60100002000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000440)}, 0x4040851) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000500)={0xffffffffffffffff}, 0x4) (async) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f00000000c0)={'pim6reg0\x00', @random="d28800b38020"}) (async) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x9, &(0x7f0000000040), 0x4) socket$kcm(0x10, 0x2, 0x10) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'wlan1\x00', @random="f7ffcc201000"}) 22.718968073s ago: executing program 0 (id=1620): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000000000000850000000400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r1}, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4156, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x10041c, 0x0, 0xfffffffe, 0x6, 0x5, 0x4, 0x101, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 22.565078586s ago: executing program 3 (id=1621): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000240)="b1e203076008008cb89e0cf00800511d08b3df54a66a5af8ab4a2059e3520faf4943", 0x0, 0xfffffdff, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x2, 0x6, &(0x7f0000000040)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x3}], &(0x7f0000000080)='GPL\x00', 0x3, 0x92, &(0x7f00000000c0)=""/146, 0x41100, 0x4, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x3, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0xa, 0x2, 0xbb}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x5, 0x1, 0xd, 0x7}], 0x10, 0xffff}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3}, &(0x7f0000000000), &(0x7f0000000340)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e}, [@ldst={0x7, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xe}, 0x23) 22.563788326s ago: executing program 0 (id=1622): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0xfd, 0x0, 0x6, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54b2359a, 0x52d0}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000000000009500"/32], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open$cgroup(&(0x7f0000001340)={0x5, 0x80, 0x0, 0x4, 0x9, 0x2, 0x0, 0x9, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x96, 0x347}, 0x8, 0x6, 0xfffffffa, 0x9, 0x0, 0x5, 0xf8c1, 0x0, 0x7}, r4, 0x6, r1, 0xc) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x9a) ioctl$TUNSETLINK(r3, 0x400454cd, 0x200) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.985843692s ago: executing program 2 (id=1623): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x10, 0xfd, 0x0, 0x6, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x54b2359a, 0x52d0}, 0x408, 0x800000000000ca, 0x0, 0x9, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x6}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000000000009500"/32], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socketpair$unix(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r3, 0x8) socket$kcm(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f00000002c0)={'macvlan1\x00', @random="0100061f8145"}) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) perf_event_open$cgroup(&(0x7f0000001340)={0x5, 0x80, 0x0, 0x4, 0x9, 0x2, 0x0, 0x9, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x2, @perf_config_ext={0x96, 0x347}, 0x8, 0x6, 0xfffffffa, 0x9, 0x0, 0x5, 0xf8c1, 0x0, 0x7}, r4, 0x6, r1, 0xc) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[@ANYRES8=r0], 0x9a) ioctl$TUNSETLINK(r3, 0x400454cd, 0x200) ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001300)="b9fb0307683a06000000ffff888e", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 21.876038692s ago: executing program 1 (id=1624): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x5}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='GPL\x00'}, 0x90) (async) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) 21.745703959s ago: executing program 0 (id=1625): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000059c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/102, 0x66}], 0x10}, 0x2122) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 21.680905527s ago: executing program 1 (id=1626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, 0x0, 0x4) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xffdd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, &(0x7f0000000500)=r5, 0x4) 21.590634551s ago: executing program 2 (id=1627): openat$ppp(0xffffffffffffff9c, &(0x7f0000000400), 0x620401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e2000080000000000020028500ff04000000009500000000000000af150f31f08c44"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5c298795369ca04f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 21.462003939s ago: executing program 2 (id=1628): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001d008104e00f80ecdb4cb9f207c804a000000000880802fb0a0002000a0ada1b40d80800c500c50083b8", 0x2e}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 21.224891216s ago: executing program 2 (id=1629): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33, 0x1010000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xcc, &(0x7f0000000500)=""/204}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f00000000c0)="5d90748b8c3a4ed7051e953d0586de241bd08fc3775d6bfd5d9b88304d0591d33c4e796deb36e602f752764aa01635fc6a48cd0a8003ca791061b44a052261a04ece14509e486be76b860c9920b3e849726cf00f6733bbb75aff140f41d475aa5a1f6edad54b4eff292a22b76ca79808246129f5209724c73fb2cc6cefa73ec1fda84a186dc01ede24c59072cc87f4adeb37298da04ecc726a935d2144cf718bb3175f4bb4840aa94b6ad89fea2339ac78ea2fcccf1214079952e8df9846a49a3fe3d772ac53375cc1", &(0x7f00000001c0)=""/247}, 0x20) 20.990105054s ago: executing program 3 (id=1630): perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp, 0x110c40, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 19.442073027s ago: executing program 2 (id=1631): r0 = socket$kcm(0x10, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x8600, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x12, 0x8, 0x4, 0x2}, 0x50) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r2, 0x0, 0x40488c4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x39, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r5) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f900"}) (async) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="3f8cd1863f8a50a6a29bcf5e68bdcee634dd39224a783fcbeeea483e28b45a83d3a18272e237b7195c94dfa7f729fa31592b973796c899a92d4bf90f210cb4c1bab0863da0c13b72d089035d48cf9d938bf8d99f7ebe348cf266e71d678557cd02ce5a31dd3239ea5ebdee9482efabb2984f19447e56bdf738f4a8ce084a960fbeddfc4e751c696a666f4efd0ab9bc2b37a659a3d93aab46c0ab080e1ffd275d150a92f37fc239d9a478818b91fe48deac60bad464afc73dfdcbe7dc2f8cd9f6d39d3806c14f71c8ea5a6167edf69b8f54061dc994719f4c090d"}, {&(0x7f0000000280)="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"}], 0x0, 0x0, 0xfffffffffffffff2}, 0x4000000) 6.37242642s ago: executing program 32 (id=1625): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x513, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x202, 0x0, 0xffffffff, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x520, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xa99, 0x3}, 0x8500, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x30, &(0x7f0000000140), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000100)=""/185, 0xb9}, {&(0x7f0000000680)=""/191, 0xbf}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4081, 0xff1}, {&(0x7f00000002c0)=""/172, 0xac}, {&(0x7f00000003c0)=""/123, 0x7b}, {&(0x7f0000000740)=""/81, 0x51}, {&(0x7f0000000d40)=""/4099, 0x1003}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f0000000880)=""/132, 0x84}, {&(0x7f0000000c40)=""/222, 0xde}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f00000009c0)=""/219, 0xdb}, {&(0x7f00000059c0)=""/109, 0x6d}, {&(0x7f0000000940)=""/102, 0x66}], 0x10}, 0x2122) socket$kcm(0xf, 0x3, 0x2) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="020e000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x0, 0x0, &(0x7f0000000540), 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 33 (id=1626): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301142, 0x0) close(r2) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0xa, 0x3, 0x106) setsockopt$sock_attach_bpf(r3, 0x29, 0x4c, 0x0, 0x4) write$cgroup_devices(r0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0xffdd) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3c, &(0x7f0000000500)=r5, 0x4) kernel console output (not intermixed with test programs): later): interface not active [ 74.491153][ T5771] team0: Port device team_slave_0 added [ 74.498055][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.505178][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.531690][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.558458][ T5771] team0: Port device team_slave_1 added [ 74.604165][ T5774] hsr_slave_0: entered promiscuous mode [ 74.611454][ T5774] hsr_slave_1: entered promiscuous mode [ 74.617601][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.626250][ T5774] Cannot create hsr debugfs directory [ 74.696951][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.704339][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.730797][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.747733][ T5773] hsr_slave_0: entered promiscuous mode [ 74.754864][ T5773] hsr_slave_1: entered promiscuous mode [ 74.760115][ T5782] Bluetooth: hci2: command tx timeout [ 74.766171][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.773924][ T5773] Cannot create hsr debugfs directory [ 74.806296][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.814735][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.841577][ T51] Bluetooth: hci3: command tx timeout [ 74.847602][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.847700][ T5782] Bluetooth: hci1: command tx timeout [ 74.864832][ T51] Bluetooth: hci0: command tx timeout [ 74.995206][ T5771] hsr_slave_0: entered promiscuous mode [ 75.003125][ T5771] hsr_slave_1: entered promiscuous mode [ 75.009568][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.017646][ T5771] Cannot create hsr debugfs directory [ 75.190189][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.206083][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.233894][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.245437][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.347011][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.375762][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.391290][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.413809][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.462004][ T5773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.492778][ T5773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.537122][ T5773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.562486][ T5773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.625172][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.636813][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.647509][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.668050][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.677372][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.775890][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.822121][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.829734][ T4163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.845128][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.852279][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.876040][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.936084][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.976498][ T4277] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.983753][ T4277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.005077][ T4277] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.012332][ T4277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.041323][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.077005][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.118109][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.137579][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.171523][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.178789][ T4163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.196620][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.203872][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.221786][ T4163] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.229026][ T4163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.267685][ T4163] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.274932][ T4163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.438647][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.608495][ T5772] veth0_vlan: entered promiscuous mode [ 76.656198][ T5772] veth1_vlan: entered promiscuous mode [ 76.735926][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.796796][ T5772] veth0_macvtap: entered promiscuous mode [ 76.816540][ T5772] veth1_macvtap: entered promiscuous mode [ 76.840654][ T5782] Bluetooth: hci2: command tx timeout [ 76.886442][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.901540][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.913648][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.924194][ T51] Bluetooth: hci0: command tx timeout [ 76.929870][ T5780] Bluetooth: hci3: command tx timeout [ 76.930549][ T5782] Bluetooth: hci1: command tx timeout [ 76.941097][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.950352][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.959232][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.013318][ T5774] veth0_vlan: entered promiscuous mode [ 77.055040][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.091689][ T5774] veth1_vlan: entered promiscuous mode [ 77.212892][ T5774] veth0_macvtap: entered promiscuous mode [ 77.215962][ T4175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.234521][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.245363][ T4175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.255110][ T5771] veth0_vlan: entered promiscuous mode [ 77.282509][ T5774] veth1_macvtap: entered promiscuous mode [ 77.313139][ T5771] veth1_vlan: entered promiscuous mode [ 77.343077][ T4175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.364053][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.371820][ T4175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.375680][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.395545][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.430392][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.440969][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.454975][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.487115][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.496453][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.507275][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.516415][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.532113][ T5771] veth0_macvtap: entered promiscuous mode [ 77.551281][ T5771] veth1_macvtap: entered promiscuous mode [ 77.584802][ T5773] veth0_vlan: entered promiscuous mode [ 77.631110][ T5773] veth1_vlan: entered promiscuous mode [ 77.663290][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.685260][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.698635][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.710493][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.724135][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.736022][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.747645][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.758339][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.769396][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.783331][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.841275][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.854227][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.865960][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.875165][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.967241][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.977946][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.018015][ T5773] veth0_macvtap: entered promiscuous mode [ 78.097384][ T5773] veth1_macvtap: entered promiscuous mode [ 78.121189][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.143372][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.191039][ C1] hrtimer: interrupt took 34719 ns [ 78.214428][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.233887][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.249301][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.260535][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.270511][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.281756][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.293485][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.318283][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.340426][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.360884][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.372783][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.383104][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.394119][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.406845][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.743922][ T5773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.782351][ T5773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.818291][ T5773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.852515][ T5773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.882650][ T5843] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5'. [ 78.929309][ T5782] Bluetooth: hci2: command tx timeout [ 78.937847][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.961263][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.999829][ T5782] Bluetooth: hci3: command tx timeout [ 79.000598][ T5780] Bluetooth: hci1: command tx timeout [ 79.005545][ T51] Bluetooth: hci0: command tx timeout [ 79.164901][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.222446][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.268068][ T5849] netlink: 'syz.1.6': attribute type 21 has an invalid length. [ 79.279990][ T5849] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.287999][ T5849] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.295622][ T5849] IPv6: NLM_F_CREATE should be set when creating new route [ 79.303003][ T5849] IPv6: NLM_F_CREATE should be set when creating new route [ 79.310306][ T5849] IPv6: NLM_F_CREATE should be set when creating new route [ 79.326045][ T5851] netlink: 209592 bytes leftover after parsing attributes in process `syz.3.7'. [ 79.459583][ T4293] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.495472][ T4293] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.536576][ T5853] netlink: 'syz.3.7': attribute type 10 has an invalid length. [ 79.693642][ T5853] team0: Device wg1 is of different type [ 79.868584][ T5856] netlink: 'syz.2.3': attribute type 21 has an invalid length. [ 79.904099][ T5856] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.935461][ T5856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.943253][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 79.950681][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 79.957960][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 80.295509][ T4277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.322691][ T4277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.139115][ T5782] Bluetooth: hci1: command tx timeout [ 81.144707][ T5780] Bluetooth: hci2: command tx timeout [ 81.150390][ T5786] Bluetooth: hci0: command tx timeout [ 81.156743][ T51] Bluetooth: hci3: command tx timeout [ 81.244009][ T5870] netlink: 'syz.1.9': attribute type 21 has an invalid length. [ 81.258541][ T5870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.881037][ T5882] netlink: 'syz.3.11': attribute type 21 has an invalid length. [ 81.899411][ T5882] IPv6: NLM_F_CREATE should be specified when creating new route [ 81.915641][ T5882] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.922948][ T5882] IPv6: NLM_F_CREATE should be set when creating new route [ 81.930337][ T5882] IPv6: NLM_F_CREATE should be set when creating new route [ 81.937691][ T5882] IPv6: NLM_F_CREATE should be set when creating new route [ 82.461528][ T5893] netlink: 6 bytes leftover after parsing attributes in process `syz.0.13'. [ 82.483798][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'. [ 82.540515][ T5893] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 82.810396][ T5888] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13'. [ 82.915018][ T5890] syzkaller0: entered promiscuous mode [ 82.921920][ T5890] syzkaller0: entered allmulticast mode [ 82.938445][ T5892] netlink: 'syz.1.14': attribute type 3 has an invalid length. [ 82.959887][ T5892] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.14'. [ 84.746823][ T5901] netlink: 180 bytes leftover after parsing attributes in process `syz.1.15'. [ 84.759464][ T5902] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 84.768573][ T5902] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 85.527637][ T5920] syzkaller0: entered promiscuous mode [ 85.541380][ T5920] syzkaller0: entered allmulticast mode [ 85.554864][ T5922] netlink: 14 bytes leftover after parsing attributes in process `syz.1.21'. [ 86.021191][ T5925] syz.1.22 (5925) used greatest stack depth: 20016 bytes left [ 86.288189][ T5927] Driver unsupported XDP return value 0 on prog (id 58) dev N/A, expect packet loss! [ 87.018360][ T965] cfg80211: failed to load regulatory.db [ 87.047169][ T5931] netlink: 'syz.1.24': attribute type 21 has an invalid length. [ 87.071125][ T5931] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.600370][ T5940] netlink: 'syz.2.27': attribute type 3 has an invalid length. [ 87.610770][ T5940] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.27'. [ 87.635850][ T5941] netlink: 180 bytes leftover after parsing attributes in process `syz.0.26'. [ 87.651481][ T5942] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 87.659159][ T5942] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 87.920814][ T5945] syzkaller0: entered promiscuous mode [ 87.926351][ T5945] syzkaller0: entered allmulticast mode [ 88.041555][ T5946] netlink: 6 bytes leftover after parsing attributes in process `syz.3.28'. [ 88.076266][ T5945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28'. [ 88.103801][ T5946] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 88.128761][ T5945] netlink: 60 bytes leftover after parsing attributes in process `syz.3.28'. [ 90.190177][ T5953] netlink: 'syz.0.31': attribute type 21 has an invalid length. [ 90.198492][ T5953] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.212602][ T5953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.219974][ T5953] IPv6: NLM_F_CREATE should be set when creating new route [ 90.227392][ T5953] IPv6: NLM_F_CREATE should be set when creating new route [ 90.234871][ T5953] IPv6: NLM_F_CREATE should be set when creating new route [ 90.743545][ T5962] netlink: 'syz.2.32': attribute type 21 has an invalid length. [ 90.772070][ T5962] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.829609][ T5963] netlink: 180 bytes leftover after parsing attributes in process `syz.3.40'. [ 90.845889][ T5972] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.34'. [ 90.932743][ T5966] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 90.973236][ T5966] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 91.051466][ T5974] netlink: 'syz.1.34': attribute type 10 has an invalid length. [ 91.128581][ T5974] team0: Device wg1 is of different type [ 91.397151][ T5979] netlink: 'syz.2.35': attribute type 21 has an invalid length. [ 91.417682][ T5979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.316686][ T5984] netlink: 156 bytes leftover after parsing attributes in process `syz.0.36'. [ 92.587169][ T5990] netlink: 'syz.3.38': attribute type 3 has an invalid length. [ 92.596508][ T5990] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.38'. [ 92.820331][ T5998] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.48'. [ 92.949271][ T6001] netlink: 'syz.2.48': attribute type 10 has an invalid length. [ 93.048694][ T6004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'. [ 93.051726][ T6001] team0: Device wg1 is of different type [ 93.117945][ T5997] netlink: 6 bytes leftover after parsing attributes in process `syz.1.41'. [ 93.148356][ T5997] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 93.239183][ T6004] netlink: 60 bytes leftover after parsing attributes in process `syz.1.41'. [ 93.278718][ T5999] syzkaller0: entered promiscuous mode [ 93.284672][ T5999] syzkaller0: entered allmulticast mode [ 95.816190][ T6015] netlink: 'syz.0.45': attribute type 21 has an invalid length. [ 95.824235][ T6015] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.833764][ T6014] netlink: 'syz.3.44': attribute type 21 has an invalid length. [ 95.847333][ T6014] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.894796][ T6016] netlink: 'syz.2.43': attribute type 21 has an invalid length. [ 95.910528][ T6016] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.964807][ T6030] netlink: 'syz.1.57': attribute type 21 has an invalid length. [ 96.989238][ T6030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 97.003619][ T6031] netlink: 'syz.3.49': attribute type 21 has an invalid length. [ 97.019143][ T6031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 98.111436][ T6038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.50'. [ 98.630215][ T6051] netlink: 'syz.0.51': attribute type 21 has an invalid length. [ 98.638291][ T6051] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 99.869811][ T6066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.919708][ T6070] Zero length message leads to an empty skb [ 100.970193][ T6081] netlink: 'syz.1.63': attribute type 21 has an invalid length. [ 101.129351][ T6081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.434512][ T6086] netlink: 'syz.0.64': attribute type 21 has an invalid length. [ 101.449805][ T6086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 101.549800][ T6080] netlink: 156 bytes leftover after parsing attributes in process `syz.3.62'. [ 102.503360][ T6109] netlink: 'syz.0.68': attribute type 21 has an invalid length. [ 102.545001][ T6109] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.186907][ T6130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.489512][ T6139] netlink: 'syz.2.78': attribute type 21 has an invalid length. [ 103.497391][ T6139] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.740167][ T6141] netlink: 'syz.3.79': attribute type 10 has an invalid length. [ 103.771335][ T6141] netlink: 40 bytes leftover after parsing attributes in process `syz.3.79'. [ 103.830248][ T6141] caif0: entered promiscuous mode [ 103.839444][ T6141] caif0: entered allmulticast mode [ 103.844791][ T6141] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.924839][ T6142] netlink: 'syz.3.79': attribute type 4 has an invalid length. [ 103.950226][ T6142] netlink: 152 bytes leftover after parsing attributes in process `syz.3.79'. [ 104.009479][ T6142] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 105.174598][ T6168] netlink: 'syz.0.87': attribute type 15 has an invalid length. [ 105.244464][ T6168] netlink: 'syz.0.87': attribute type 7 has an invalid length. [ 105.259159][ T6171] netlink: 'syz.1.86': attribute type 1 has an invalid length. [ 105.273808][ T6171] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.86'. [ 105.915225][ T6176] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.88'. [ 106.845576][ T6186] netlink: 'syz.1.91': attribute type 21 has an invalid length. [ 106.873808][ T6176] syz.3.88 (6176) used greatest stack depth: 19432 bytes left [ 106.887715][ T6186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.776153][ T6214] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.100'. [ 107.797884][ T6214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.100'. [ 107.826068][ T6214] netlink: 60 bytes leftover after parsing attributes in process `syz.0.100'. [ 107.895538][ T6216] syzkaller0: entered promiscuous mode [ 107.902425][ T6216] syzkaller0: entered allmulticast mode [ 110.301623][ T6243] syz.3.107 uses obsolete (PF_INET,SOCK_PACKET) [ 112.223247][ T6290] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.123'. [ 112.243097][ T6291] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.123'. [ 112.287634][ T6290] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.123'. [ 112.449862][ T6297] netlink: 'syz.2.124': attribute type 21 has an invalid length. [ 112.457841][ T6297] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.736747][ T6304] netlink: 'syz.0.126': attribute type 21 has an invalid length. [ 112.745050][ T6310] netlink: 'syz.1.128': attribute type 2 has an invalid length. [ 112.753112][ T6304] netlink: 128 bytes leftover after parsing attributes in process `syz.0.126'. [ 112.775926][ T6310] netlink: 'syz.1.128': attribute type 1 has an invalid length. [ 112.784780][ T6310] netlink: 'syz.1.128': attribute type 2 has an invalid length. [ 112.809361][ T6310] netlink: 198048 bytes leftover after parsing attributes in process `syz.1.128'. [ 113.656135][ T6329] warning: `syz.2.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.036639][ T6358] netlink: 'syz.1.140': attribute type 21 has an invalid length. [ 116.089182][ T6358] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.464669][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 116.605294][ T6368] netlink: 'syz.2.144': attribute type 39 has an invalid length. [ 117.627283][ T6399] netlink: 'syz.2.151': attribute type 1 has an invalid length. [ 117.642968][ T6399] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.151'. [ 118.107820][ T6409] dummy0: entered promiscuous mode [ 118.341032][ T6407] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 118.385006][ T6407] netlink: 132 bytes leftover after parsing attributes in process `syz.0.154'. [ 118.642344][ T6418] bridge_slave_1: left allmulticast mode [ 118.652149][ T6418] bridge_slave_1: left promiscuous mode [ 118.676357][ T6418] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.721446][ T6418] bridge_slave_0: left allmulticast mode [ 118.769186][ T6418] bridge_slave_0: left promiscuous mode [ 118.775907][ T6418] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.184893][ T6437] netlink: 'syz.2.161': attribute type 21 has an invalid length. [ 119.201861][ T6437] netlink: 'syz.2.161': attribute type 6 has an invalid length. [ 119.234099][ T6437] netlink: 132 bytes leftover after parsing attributes in process `syz.2.161'. [ 119.970307][ T6470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 120.002622][ T6471] netlink: 'syz.1.168': attribute type 21 has an invalid length. [ 120.029827][ T6471] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 120.037547][ T6470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 120.152259][ T6472] netlink: 60 bytes leftover after parsing attributes in process `syz.0.169'. [ 120.273770][ T6478] netlink: 'syz.2.171': attribute type 9 has an invalid length. [ 120.316709][ T6478] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.171'. [ 120.406899][ T6479] netlink: 'syz.3.170': attribute type 27 has an invalid length. [ 120.467174][ T6479] netlink: 164 bytes leftover after parsing attributes in process `syz.3.170'. [ 121.951100][ T6511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 123.702631][ T6526] netlink: 'syz.0.184': attribute type 21 has an invalid length. [ 123.725778][ T6526] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 124.256230][ T6533] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 124.264986][ T6533] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 124.936800][ T6554] netlink: 'syz.2.192': attribute type 21 has an invalid length. [ 124.958223][ T6554] netlink: 'syz.2.192': attribute type 30 has an invalid length. [ 125.275615][ T6568] tap0: tun_chr_ioctl cmd 1074025677 [ 125.286924][ T6568] tap0: linktype set to 773 [ 125.737936][ T6579] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.199'. [ 126.542044][ T6599] netlink: 'syz.1.205': attribute type 12 has an invalid length. [ 126.564215][ T6599] netlink: 14585 bytes leftover after parsing attributes in process `syz.1.205'. [ 127.000124][ T6609] netlink: 'syz.1.207': attribute type 5 has an invalid length. [ 127.443752][ T6616] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.209'. [ 127.630672][ T6618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 128.080162][ T6625] netlink: 'syz.0.212': attribute type 21 has an invalid length. [ 128.088540][ T6625] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.356695][ T6635] raw_sendmsg: syz.3.215 forgot to set AF_INET. Fix it! [ 128.980837][ T6651] netlink: 'syz.2.220': attribute type 21 has an invalid length. [ 128.988671][ T6651] netlink: 156 bytes leftover after parsing attributes in process `syz.2.220'. [ 129.056354][ T6656] netlink: 'syz.0.221': attribute type 33 has an invalid length. [ 129.075411][ T6656] netlink: 152 bytes leftover after parsing attributes in process `syz.0.221'. [ 129.113499][ T6656] `: renamed from team0 (while UP) [ 129.337982][ T6657] netpci0: tun_chr_ioctl cmd 2147767517 [ 129.354882][ T6658] netlink: 'syz.1.218': attribute type 3 has an invalid length. [ 129.412081][ T6658] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.218'. [ 129.488619][ T6661] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.222'. [ 130.062947][ T6671] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 130.085374][ T6671] netlink: 'syz.2.225': attribute type 29 has an invalid length. [ 130.121977][ T6671] netlink: 763 bytes leftover after parsing attributes in process `syz.2.225'. [ 130.460834][ T6689] netlink: 'syz.2.229': attribute type 21 has an invalid length. [ 130.490342][ T6689] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 131.700597][ T6716] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.238'. [ 131.802090][ T6716] : renamed from veth0_to_bond (while UP) [ 133.314722][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.321246][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.895292][ T6737] netlink: 'syz.0.245': attribute type 3 has an invalid length. [ 135.913496][ T6737] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.245'. [ 136.403468][ T6751] netlink: 'syz.0.247': attribute type 21 has an invalid length. [ 136.439247][ T6751] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 136.556429][ T6755] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.248'. [ 136.648092][ T6755] syzkaller0: entered promiscuous mode [ 136.662948][ T6755] syzkaller0: entered allmulticast mode [ 136.706540][ T6755] netlink: set zone limit has 8 unknown bytes [ 136.728049][ T6755] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 137.669453][ T6774] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.253'. [ 137.952513][ T6781] netlink: 'syz.2.256': attribute type 46 has an invalid length. [ 137.966016][ T6781] netlink: 'syz.2.256': attribute type 46 has an invalid length. [ 138.024802][ T51] Bluetooth: hci0: unexpected event 0x03 length: 15 > 11 [ 138.747902][ T6794] netlink: 'syz.2.261': attribute type 21 has an invalid length. [ 138.796656][ T6794] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.570478][ T6810] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.584253][ T6806] netlink: 'syz.1.264': attribute type 10 has an invalid length. [ 139.617268][ T6806] team0: Port device wlan1 added [ 139.635117][ T6810] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.265'. [ 139.667541][ T6816] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.265'. [ 140.313691][ T6805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.229386][ T6881] netlink: 'syz.1.286': attribute type 9 has an invalid length. [ 142.237438][ T6881] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.286'. [ 142.297265][ T6884] delete_channel: no stack [ 142.557913][ T6894] netlink: 'syz.0.291': attribute type 10 has an invalid length. [ 142.630526][ T6894] `: Port device geneve1 added [ 142.666324][ T6897] netlink: 'syz.2.289': attribute type 21 has an invalid length. [ 142.769619][ T6897] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 143.428981][ T6916] netlink: 'syz.3.297': attribute type 2 has an invalid length. [ 143.436742][ T6916] netlink: 'syz.3.297': attribute type 3 has an invalid length. [ 143.461142][ T6909] netlink: 14 bytes leftover after parsing attributes in process `syz.1.295'. [ 143.480161][ T6916] netlink: 132 bytes leftover after parsing attributes in process `syz.3.297'. [ 144.183976][ T6909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.364426][ T6909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.397781][ T6909] bond0 (unregistering): Released all slaves [ 146.089910][ T6932] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.301'. [ 146.477572][ T6932] sit0: entered promiscuous mode [ 146.483944][ T6932] sit0: entered allmulticast mode [ 146.641104][ T6939] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.302'. [ 146.888316][ T6949] sit0: entered allmulticast mode [ 146.940634][ T6949] sit0: entered promiscuous mode [ 148.197883][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.1.311'. [ 148.234230][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.1.311'. [ 148.256504][ T6970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.311'. [ 148.305997][ T6967] netlink: 60 bytes leftover after parsing attributes in process `syz.1.311'. [ 149.172259][ T6988] netlink: 'syz.3.313': attribute type 4 has an invalid length. [ 149.301881][ T6988] netlink: 152 bytes leftover after parsing attributes in process `syz.3.313'. [ 149.409115][ T6988] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 149.532496][ T6998] netlink: 'syz.1.318': attribute type 21 has an invalid length. [ 149.559052][ T6998] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.566353][ T6998] IPv6: NLM_F_CREATE should be set when creating new route [ 149.573816][ T6998] IPv6: NLM_F_CREATE should be set when creating new route [ 149.581220][ T6998] IPv6: NLM_F_CREATE should be set when creating new route [ 149.664999][ T7003] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.320'. [ 150.790824][ T7016] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.323'. [ 151.371806][ T7021] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 151.383980][ T7022] netlink: 'syz.0.325': attribute type 21 has an invalid length. [ 151.393428][ T7020] C: renamed from team_slave_0 (while UP) [ 152.609849][ T7020] netlink: 'syz.3.324': attribute type 4 has an invalid length. [ 152.617611][ T7020] netlink: 116 bytes leftover after parsing attributes in process `syz.3.324'. [ 152.627415][ T7020] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 152.643642][ T7023] netlink: 76 bytes leftover after parsing attributes in process `syz.0.325'. [ 152.895796][ T7032] macvlan1: entered promiscuous mode [ 152.920692][ T7032] macvlan1: entered allmulticast mode [ 152.926326][ T7032] veth1_vlan: entered allmulticast mode [ 154.019272][ T7065] pimreg: tun_chr_ioctl cmd 1074025677 [ 154.025171][ T7065] pimreg: linktype set to 270 [ 154.062459][ T7067] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 (while UP) [ 154.857620][ T7069] netlink: 'syz.1.335': attribute type 10 has an invalid length. [ 155.072522][ T7069] team0: Device ipvlan1 failed to register rx_handler [ 155.292738][ T7069] syz.1.335 (7069) used greatest stack depth: 18792 bytes left [ 155.681620][ T7096] netlink: 'syz.0.340': attribute type 21 has an invalid length. [ 155.719779][ T7096] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 156.382476][ T7101] bridge_slave_0: entered allmulticast mode [ 158.278384][ T7192] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 158.440757][ T7192] hsr_slave_0: left promiscuous mode [ 158.487835][ T7192] hsr_slave_1: left promiscuous mode [ 158.626433][ T7199] FAULT_INJECTION: forcing a failure. [ 158.626433][ T7199] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 158.657051][ T7199] CPU: 1 PID: 7199 Comm: syz.1.352 Not tainted syzkaller #0 [ 158.664619][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 158.674730][ T7199] Call Trace: [ 158.678049][ T7199] [ 158.681021][ T7199] dump_stack_lvl+0x18c/0x250 [ 158.685845][ T7199] ? show_regs_print_info+0x20/0x20 [ 158.691118][ T7199] ? load_image+0x400/0x400 [ 158.695698][ T7199] ? __might_fault+0xaa/0x120 [ 158.700433][ T7199] ? __lock_acquire+0x7d40/0x7d40 [ 158.705686][ T7199] should_fail_ex+0x39d/0x4d0 [ 158.710434][ T7199] _copy_from_user+0x2f/0xe0 [ 158.715118][ T7199] ___sys_sendmsg+0x1c7/0x360 [ 158.719845][ T7199] ? __sys_sendmsg+0x2a0/0x2a0 [ 158.724724][ T7199] ? __lock_acquire+0x7d40/0x7d40 [ 158.729839][ T7199] __se_sys_sendmsg+0x1c2/0x2b0 [ 158.734830][ T7199] ? __x64_sys_sendmsg+0x80/0x80 [ 158.739832][ T7199] ? lockdep_hardirqs_on+0x98/0x150 [ 158.745081][ T7199] do_syscall_64+0x55/0xa0 [ 158.749561][ T7199] ? clear_bhb_loop+0x40/0x90 [ 158.754379][ T7199] ? clear_bhb_loop+0x40/0x90 [ 158.759102][ T7199] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 158.765133][ T7199] RIP: 0033:0x7f735a59c799 [ 158.769629][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 158.789464][ T7199] RSP: 002b:00007f735b488028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.798018][ T7199] RAX: ffffffffffffffda RBX: 00007f735a815fa0 RCX: 00007f735a59c799 [ 158.806045][ T7199] RDX: 0000000000000800 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 158.814150][ T7199] RBP: 00007f735b488090 R08: 0000000000000000 R09: 0000000000000000 [ 158.822163][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.830266][ T7199] R13: 00007f735a816038 R14: 00007f735a815fa0 R15: 00007ffc55a8f2a8 [ 158.838404][ T7199] [ 159.947969][ T7195] netlink: 'syz.2.350': attribute type 10 has an invalid length. [ 160.231172][ T7217] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.357'. [ 160.316362][ T7217] : renamed from veth0_to_bond (while UP) [ 160.325414][ T7218] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.358'. [ 160.400332][ T7219] netlink: 'syz.3.356': attribute type 21 has an invalid length. [ 160.449440][ T7219] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.238871][ T7230] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 161.245946][ T7230] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 162.452895][ T7255] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.368'. [ 162.729393][ T7252] netlink: set zone limit has 8 unknown bytes [ 162.890995][ T7255] syzkaller0: entered promiscuous mode [ 162.899079][ T7255] syzkaller0: entered allmulticast mode [ 162.923693][ T7248] netlink: 'syz.0.374': attribute type 10 has an invalid length. [ 163.034070][ T7248] `: Device ipvlan1 failed to register rx_handler [ 163.206241][ T7263] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 163.219222][ T7263] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.369'. [ 163.249186][ T7258] netlink: 'syz.3.367': attribute type 3 has an invalid length. [ 163.257077][ T7258] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.367'. [ 163.734322][ T7269] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.371'. [ 163.862529][ T7269] : renamed from veth0_to_bond (while UP) [ 163.946557][ T7272] netlink: 'syz.3.372': attribute type 21 has an invalid length. [ 163.969123][ T7272] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 164.128094][ T7275] sit0: entered allmulticast mode [ 164.479866][ T7282] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 165.330004][ T7295] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 165.381705][ T7297] netlink: 'syz.1.386': attribute type 27 has an invalid length. [ 165.400062][ T7297] netlink: 164 bytes leftover after parsing attributes in process `syz.1.386'. [ 166.065797][ T7308] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.380'. [ 166.142457][ T7308] syzkaller0: entered promiscuous mode [ 166.148009][ T7308] syzkaller0: entered allmulticast mode [ 166.183303][ T7309] netlink: 'syz.2.390': attribute type 27 has an invalid length. [ 166.294888][ T7309] netlink: 164 bytes leftover after parsing attributes in process `syz.2.390'. [ 166.306164][ T7308] netlink: set zone limit has 8 unknown bytes [ 167.317700][ T7317] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.383'. [ 167.400738][ T7317] netlink: 'syz.2.383': attribute type 17 has an invalid length. [ 167.431903][ T7321] netlink: 'syz.3.384': attribute type 1 has an invalid length. [ 167.440407][ T7317] netlink: 148 bytes leftover after parsing attributes in process `syz.2.383'. [ 167.469088][ T7321] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.384'. [ 168.382724][ T7325] netlink: 'syz.2.385': attribute type 21 has an invalid length. [ 168.430186][ T7325] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 171.608527][ T7345] netlink: 'syz.3.400': attribute type 1 has an invalid length. [ 171.710577][ T7343] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 171.791924][ T7345] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.400'. [ 171.974948][ T7345] netlink: 'syz.3.400': attribute type 16 has an invalid length. [ 171.988486][ T7345] netlink: 156 bytes leftover after parsing attributes in process `syz.3.400'. [ 172.781018][ T7359] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.395'. [ 172.991036][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.999211][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.049821][ T7365] bridge0: entered allmulticast mode [ 173.381963][ T7371] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.399'. [ 173.500500][ T7372] syzkaller0: entered promiscuous mode [ 173.506156][ T7372] syzkaller0: entered allmulticast mode [ 173.815841][ T7386] netlink: 'syz.0.403': attribute type 21 has an invalid length. [ 173.999179][ T7386] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 174.162022][ T7392] netlink: 'syz.1.404': attribute type 1 has an invalid length. [ 174.185545][ T7392] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.404'. [ 174.401939][ T7388] netlink: 'syz.2.402': attribute type 3 has an invalid length. [ 174.429332][ T7394] netlink: 'syz.1.404': attribute type 16 has an invalid length. [ 174.450260][ T7388] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.402'. [ 174.467735][ T7394] netlink: 156 bytes leftover after parsing attributes in process `syz.1.404'. [ 175.270323][ T7409] netlink: 'syz.3.407': attribute type 21 has an invalid length. [ 175.309417][ T7409] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.567646][ T7413] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.411'. [ 176.231520][ T7423] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.414'. [ 176.444913][ T7428] netlink: 830 bytes leftover after parsing attributes in process `syz.1.415'. [ 176.517329][ T7430] netlink: 'syz.2.417': attribute type 4 has an invalid length. [ 176.567387][ T7430] .`: renamed from bond0 (while UP) [ 176.577189][ T7434] netlink: 'syz.0.416': attribute type 1 has an invalid length. [ 176.664974][ T7434] netlink: 'syz.0.416': attribute type 16 has an invalid length. [ 177.773756][ T7459] netlink: 'syz.0.425': attribute type 10 has an invalid length. [ 177.800913][ T7459] __nla_validate_parse: 3 callbacks suppressed [ 177.800930][ T7459] netlink: 164 bytes leftover after parsing attributes in process `syz.0.425'. [ 178.861868][ T7491] netlink: 'syz.0.433': attribute type 21 has an invalid length. [ 178.881573][ T7490] netlink: 'syz.3.432': attribute type 2 has an invalid length. [ 178.889730][ T7491] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 178.957201][ T7490] netlink: 'syz.3.432': attribute type 1 has an invalid length. [ 178.980252][ T7490] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.432'. [ 179.462325][ T7513] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.439'. [ 179.971173][ T7522] netlink: 177156 bytes leftover after parsing attributes in process `syz.0.442'. [ 179.985888][ T7522] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.442'. [ 180.488080][ T7543] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.445'. [ 180.532771][ T7543] openvswitch: netlink: Duplicate key (type 0). [ 181.813310][ T7560] netlink: 'syz.1.448': attribute type 21 has an invalid length. [ 181.822779][ T7560] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 182.305020][ T7565] syz.2.451[7565] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 182.968072][ T7593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.459'. [ 183.150562][ T7592] netlink: 132 bytes leftover after parsing attributes in process `syz.2.459'. [ 183.432332][ T7591] netlink: 'syz.2.459': attribute type 4 has an invalid length. [ 183.462394][ T7591] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.459'. [ 184.699670][ T7614] netlink: 'syz.2.463': attribute type 21 has an invalid length. [ 184.717543][ T7614] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 184.893012][ T7618] netlink: 'syz.1.465': attribute type 21 has an invalid length. [ 184.893818][ T7622] netlink: 'syz.3.466': attribute type 12 has an invalid length. [ 184.923089][ T7622] netlink: 'syz.3.466': attribute type 11 has an invalid length. [ 184.942532][ T7622] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.466'. [ 185.001436][ T7618] netlink: 'syz.1.465': attribute type 10 has an invalid length. [ 185.051599][ T7623] netlink: 'syz.1.465': attribute type 3 has an invalid length. [ 185.086024][ T7623] netlink: 'syz.1.465': attribute type 1 has an invalid length. [ 185.113571][ T7623] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.465'. [ 185.147821][ T7624] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.464'. [ 185.244155][ T7624] netlink: 22828 bytes leftover after parsing attributes in process `syz.0.464'. [ 185.452319][ T7629] netlink: 'syz.3.468': attribute type 2 has an invalid length. [ 185.491313][ T7629] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.468'. [ 188.144792][ T7674] netlink: 'syz.2.478': attribute type 21 has an invalid length. [ 188.206832][ T7674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 189.233809][ T7693] netlink: 'syz.2.481': attribute type 2 has an invalid length. [ 189.269059][ T7693] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.481'. [ 190.035535][ T7714] netlink: 'syz.2.489': attribute type 21 has an invalid length. [ 190.074813][ T7714] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 190.506069][ T7718] netlink: 'syz.1.490': attribute type 29 has an invalid length. [ 190.563772][ T7718] netlink: 'syz.1.490': attribute type 29 has an invalid length. [ 190.586426][ T7721] netlink: 'syz.1.490': attribute type 29 has an invalid length. [ 190.669295][ T7722] netlink: 'syz.1.490': attribute type 29 has an invalid length. [ 190.717481][ T7725] netlink: 'syz.1.490': attribute type 29 has an invalid length. [ 192.233027][ T7740] netlink: 'syz.1.497': attribute type 2 has an invalid length. [ 192.258636][ T7740] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.497'. [ 192.350145][ T7751] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.498'. [ 192.586385][ T7754] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.655949][ T7758] netlink: 'syz.2.501': attribute type 21 has an invalid length. [ 192.669669][ T7752] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.498'. [ 192.699392][ T7758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.629254][ T7779] netlink: 'syz.1.506': attribute type 41 has an invalid length. [ 194.478016][ T7793] netlink: 168 bytes leftover after parsing attributes in process `syz.3.510'. [ 194.639469][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.645848][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.215076][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 195.232596][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 195.287173][ T7824] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 195.307839][ T7824] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.679077][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 196.685289][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 196.691473][ T5085] Bluetooth: hci0: command 0x0406 tx timeout [ 196.697683][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 196.977848][ T7851] netlink: 'syz.0.524': attribute type 5 has an invalid length. [ 197.952568][ T7863] netlink: 68 bytes leftover after parsing attributes in process `syz.2.528'. [ 198.007105][ T7863] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 198.969830][ T7874] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.532'. [ 199.691477][ T7887] netlink: 4 bytes leftover after parsing attributes in process `syz.2.535'. [ 199.810717][ T7887] IPv6: Can't replace route, no match found [ 200.967309][ T7903] netlink: 'syz.2.539': attribute type 10 has an invalid length. [ 200.995917][ T7903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.340137][ T7903] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.376331][ T7903] .`: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 201.386074][ T7906] netlink: 'syz.2.539': attribute type 6 has an invalid length. [ 201.399181][ T7906] netlink: 168 bytes leftover after parsing attributes in process `syz.2.539'. [ 201.799213][ T7919] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 202.354455][ T7932] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 202.389468][ T7932] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 202.435152][ T7930] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 202.514960][ T7932] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 202.558979][ T7930] netlink: 'syz.3.548': attribute type 29 has an invalid length. [ 203.061619][ T7948] netlink: 'syz.2.553': attribute type 1 has an invalid length. [ 203.084959][ T7948] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.553'. [ 203.480934][ T7947] bridge_slave_1: left allmulticast mode [ 203.557233][ T7947] bridge_slave_1: left promiscuous mode [ 203.711946][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.743007][ T7947] bridge_slave_0: left allmulticast mode [ 203.804120][ T7947] bridge_slave_0: left promiscuous mode [ 203.842369][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.087308][ T7971] netlink: 'syz.2.560': attribute type 1 has an invalid length. [ 204.113594][ T7971] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.560'. [ 204.549434][ T7971] netlink: 'syz.2.560': attribute type 3 has an invalid length. [ 204.555629][ T7974] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.561'. [ 204.574843][ T7971] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.560'. [ 204.770617][ T7962] syz.0.556 (7962) used greatest stack depth: 18664 bytes left [ 207.132416][ T8022] bridge_slave_1: left allmulticast mode [ 207.180976][ T8022] bridge_slave_1: left promiscuous mode [ 207.237077][ T8022] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.300076][ T8022] bridge_slave_0: left allmulticast mode [ 207.305822][ T8022] bridge_slave_0: left promiscuous mode [ 207.352135][ T8022] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.341449][ T8074] validate_nla: 1 callbacks suppressed [ 209.341631][ T8074] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 210.242108][ T8074] team0 (unregistering): Port device team_slave_0 removed [ 210.290600][ T8074] team0 (unregistering): Port device team_slave_1 removed [ 210.752691][ T8098] netlink: 144 bytes leftover after parsing attributes in process `syz.3.583'. [ 210.850130][ T8101] netlink: 'syz.1.585': attribute type 28 has an invalid length. [ 210.860541][ T8101] netlink: 'syz.1.585': attribute type 29 has an invalid length. [ 210.871073][ T8101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.585'. [ 211.082362][ T8103] sit0: entered promiscuous mode [ 211.783986][ T8125] netlink: 'syz.0.592': attribute type 3 has an invalid length. [ 211.800035][ T8125] netlink: 'syz.0.592': attribute type 1 has an invalid length. [ 211.814367][ T8125] netlink: 191376 bytes leftover after parsing attributes in process `syz.0.592'. [ 212.259355][ T8132] syzkaller0: entered promiscuous mode [ 212.289432][ T8132] syzkaller0: entered allmulticast mode [ 212.373392][ T8136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.594'. [ 212.411211][ T8136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.594'. [ 212.685045][ T8140] netlink: 60 bytes leftover after parsing attributes in process `syz.3.594'. [ 212.753116][ T8136] netlink: 60 bytes leftover after parsing attributes in process `syz.3.594'. [ 212.815845][ T8136] netlink: 14 bytes leftover after parsing attributes in process `syz.3.594'. [ 213.292028][ T8153] syzkaller0: entered promiscuous mode [ 213.303808][ T8153] syzkaller0: entered allmulticast mode [ 215.621786][ T8165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.602'. [ 215.631778][ T8174] netlink: 'syz.0.604': attribute type 19 has an invalid length. [ 215.641874][ T8174] netlink: 172 bytes leftover after parsing attributes in process `syz.0.604'. [ 215.654294][ T8179] netlink: 'syz.0.604': attribute type 16 has an invalid length. [ 216.242683][ T8211] netlink: 'syz.1.613': attribute type 10 has an invalid length. [ 216.264818][ T8211] __nla_validate_parse: 1 callbacks suppressed [ 216.264846][ T8211] netlink: 991 bytes leftover after parsing attributes in process `syz.1.613'. [ 216.489535][ T5786] Bluetooth: hci0: ISO packet too small [ 216.650813][ T8217] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.617'. [ 217.646695][ T8254] C: renamed from team_slave_0 (while UP) [ 217.717856][ T8254] netlink: 'syz.0.629': attribute type 4 has an invalid length. [ 217.807367][ T8254] netlink: 116 bytes leftover after parsing attributes in process `syz.0.629'. [ 217.818153][ T8254] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 218.802778][ T8276] netlink: 'syz.3.636': attribute type 39 has an invalid length. [ 218.913134][ T8277] pimreg: tun_chr_ioctl cmd 1074025677 [ 218.939485][ T8277] pimreg: linktype set to 1 [ 218.946143][ T8279] pimreg: tun_chr_ioctl cmd 1074025677 [ 218.973537][ T8279] pimreg: linktype set to 1 [ 218.991102][ T8275] pimreg: tun_chr_ioctl cmd 1074025673 [ 219.217420][ T8286] netlink: 'syz.1.640': attribute type 1 has an invalid length. [ 219.235945][ T8286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.640'. [ 219.259934][ T8289] netlink: 'syz.2.639': attribute type 7 has an invalid length. [ 220.290221][ T8322] netlink: 156 bytes leftover after parsing attributes in process `syz.3.648'. [ 220.381827][ T8322] netlink: 'syz.3.648': attribute type 9 has an invalid length. [ 220.399142][ T8322] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.648'. [ 221.977496][ T8332] netlink: 'syz.0.650': attribute type 21 has an invalid length. [ 222.596245][ T8357] netlink: 188 bytes leftover after parsing attributes in process `syz.1.655'. [ 223.365804][ T8375] sctp: [Deprecated]: syz.2.661 (pid 8375) Use of int in maxseg socket option. [ 223.365804][ T8375] Use struct sctp_assoc_value instead [ 223.813659][ T8384] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 223.882586][ T8386] netlink: 'syz.2.666': attribute type 21 has an invalid length. [ 223.909120][ T8386] netlink: 128 bytes leftover after parsing attributes in process `syz.2.666'. [ 223.932376][ T8386] netlink: 'syz.2.666': attribute type 5 has an invalid length. [ 223.947981][ T8386] netlink: 'syz.2.666': attribute type 6 has an invalid length. [ 223.964369][ T8386] netlink: 3 bytes leftover after parsing attributes in process `syz.2.666'. [ 224.136794][ T8395] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.670'. [ 224.215976][ T8395] syzkaller0: entered promiscuous mode [ 224.221751][ T8395] syzkaller0: entered allmulticast mode [ 224.245114][ T8395] netlink: set zone limit has 8 unknown bytes [ 224.896330][ T8428] syz.0.679: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 224.945988][ T8428] CPU: 0 PID: 8428 Comm: syz.0.679 Not tainted syzkaller #0 [ 224.953480][ T8428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 224.963586][ T8428] Call Trace: [ 224.966910][ T8428] [ 224.969879][ T8428] dump_stack_lvl+0x18c/0x250 [ 224.974620][ T8428] ? show_regs_print_info+0x20/0x20 [ 224.979876][ T8428] ? load_image+0x400/0x400 [ 224.984445][ T8428] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 224.990915][ T8428] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 224.997471][ T8428] warn_alloc+0x246/0x340 [ 225.002040][ T8428] ? stack_trace_save+0xaa/0x100 [ 225.007093][ T8428] ? zone_watermark_ok_safe+0x230/0x230 [ 225.012707][ T8428] ? kasan_set_track+0x5f/0x70 [ 225.017525][ T8428] ? kasan_set_track+0x4e/0x70 [ 225.022343][ T8428] ? __kasan_kmalloc+0x8f/0xa0 [ 225.027161][ T8428] ? xsk_init_queue+0xad/0x100 [ 225.031974][ T8428] ? xsk_setsockopt+0x4e5/0x760 [ 225.036976][ T8428] ? do_sock_setsockopt+0x175/0x1a0 [ 225.042227][ T8428] ? __x64_sys_setsockopt+0x182/0x200 [ 225.047647][ T8428] __vmalloc_node_range+0x126/0x1330 [ 225.053028][ T8428] ? free_vm_area+0x50/0x50 [ 225.057598][ T8428] vmalloc_user+0x74/0x80 [ 225.061979][ T8428] ? xskq_create+0xbf/0x170 [ 225.066619][ T8428] xskq_create+0xbf/0x170 [ 225.070994][ T8428] xsk_init_queue+0xad/0x100 [ 225.075620][ T8428] xsk_setsockopt+0x4e5/0x760 [ 225.080331][ T8428] ? xsk_poll+0x680/0x680 [ 225.084694][ T8428] ? __fget_files+0x28/0x4b0 [ 225.089403][ T8428] ? __fget_files+0x28/0x4b0 [ 225.094018][ T8428] ? aa_sock_opt_perm+0x74/0x100 [ 225.098979][ T8428] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 225.104558][ T8428] ? security_socket_setsockopt+0x7e/0xa0 [ 225.110291][ T8428] ? xsk_poll+0x680/0x680 [ 225.114657][ T8428] do_sock_setsockopt+0x175/0x1a0 [ 225.119692][ T8428] ? __fdget+0x180/0x210 [ 225.123951][ T8428] __x64_sys_setsockopt+0x182/0x200 [ 225.129279][ T8428] do_syscall_64+0x55/0xa0 [ 225.133710][ T8428] ? clear_bhb_loop+0x40/0x90 [ 225.138484][ T8428] ? clear_bhb_loop+0x40/0x90 [ 225.143177][ T8428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 225.149085][ T8428] RIP: 0033:0x7f37d7d9c799 [ 225.153722][ T8428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.173361][ T8428] RSP: 002b:00007f37d8c42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.181818][ T8428] RAX: ffffffffffffffda RBX: 00007f37d8015fa0 RCX: 00007f37d7d9c799 [ 225.189900][ T8428] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 225.197914][ T8428] RBP: 00007f37d7e32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 225.206550][ T8428] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 225.214740][ T8428] R13: 00007f37d8016038 R14: 00007f37d8015fa0 R15: 00007ffcd6b0e958 [ 225.222786][ T8428] [ 225.229846][ T8428] Mem-Info: [ 225.233039][ T8428] active_anon:5450 inactive_anon:0 isolated_anon:0 [ 225.233039][ T8428] active_file:16805 inactive_file:39987 isolated_file:0 [ 225.233039][ T8428] unevictable:768 dirty:128 writeback:0 [ 225.233039][ T8428] slab_reclaimable:10491 slab_unreclaimable:94080 [ 225.233039][ T8428] mapped:24727 shmem:1361 pagetables:559 [ 225.233039][ T8428] sec_pagetables:0 bounce:0 [ 225.233039][ T8428] kernel_misc_reclaimable:0 [ 225.233039][ T8428] free:1346864 free_pcp:9623 free_cma:0 [ 225.303594][ T8428] Node 0 active_anon:21812kB inactive_anon:0kB active_file:67220kB inactive_file:159752kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98860kB dirty:520kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11144kB pagetables:2268kB sec_pagetables:0kB all_unreclaimable? no [ 225.352573][ T8428] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 225.395876][ T8428] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.435192][ T8439] netlink: 'syz.2.681': attribute type 21 has an invalid length. [ 225.443902][ T8441] netlink: 'syz.2.681': attribute type 21 has an invalid length. [ 225.457863][ T8428] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 225.465251][ T8428] Node 0 DMA32 free:1474080kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:21872kB inactive_anon:0kB active_file:67220kB inactive_file:158920kB unevictable:1536kB writepending:520kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:22676kB local_pcp:20716kB free_cma:0kB [ 225.506396][ T8428] lowmem_reserve[]: 0 0 0 0 0 [ 225.511598][ T8428] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 225.550106][ T8428] lowmem_reserve[]: 0 0 0 0 0 [ 225.554923][ T8428] Node 1 Normal free:3898016kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:16612kB local_pcp:10884kB free_cma:0kB [ 225.609281][ T8428] lowmem_reserve[]: 0 0 0 0 0 [ 225.614107][ T8428] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 225.657428][ T8428] Node 0 DMA32: 1542*4kB (UM) 1535*8kB (UM) 1199*16kB (UME) 551*32kB (UME) 509*64kB (UME) 144*128kB (UME) 83*256kB (UME) 40*512kB (UME) 19*1024kB (UM) 10*2048kB (UM) 314*4096kB (M) = 1474080kB [ 225.708273][ T8448] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.684'. [ 225.720783][ T8428] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 225.772504][ T8428] Node 1 Normal: 240*4kB (UME) 44*8kB (UME) 44*16kB (UME) 98*32kB (UME) 40*64kB (UME) 7*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3898016kB [ 225.814808][ T8428] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.837580][ T8448] syzkaller0: entered promiscuous mode [ 225.846665][ T8428] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 225.861687][ T8448] syzkaller0: entered allmulticast mode [ 225.971315][ T8428] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 225.986186][ T8452] netlink: set zone limit has 8 unknown bytes [ 226.011856][ T8428] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 226.072228][ T8428] 58280 total pagecache pages [ 226.077082][ T8428] 0 pages in swap cache [ 226.083591][ T8428] Free swap = 124996kB [ 226.087885][ T8428] Total swap = 124996kB [ 226.093008][ T8428] 2097051 pages RAM [ 226.097050][ T8428] 0 pages HighMem/MovableOnly [ 226.103252][ T8428] 416924 pages reserved [ 226.107532][ T8428] 0 pages cma reserved [ 226.284759][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.686'. [ 226.331033][ T8455] netlink: 152 bytes leftover after parsing attributes in process `syz.2.686'. [ 226.469962][ T8464] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.688'. [ 226.898181][ T8471] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.689'. [ 227.751168][ T8483] netlink: 'syz.0.692': attribute type 9 has an invalid length. [ 227.763458][ T8483] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.692'. [ 230.242239][ T8493] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.696'. [ 230.270414][ T8493] syzkaller0: entered promiscuous mode [ 230.276048][ T8493] syzkaller0: entered allmulticast mode [ 230.313856][ T8493] netlink: set zone limit has 8 unknown bytes [ 230.332596][ T8498] netlink: 'syz.0.698': attribute type 29 has an invalid length. [ 230.349562][ T8498] netlink: 'syz.0.698': attribute type 29 has an invalid length. [ 233.216744][ T8499] netlink: 'syz.0.698': attribute type 29 has an invalid length. [ 233.780574][ T8524] netlink: 'syz.0.704': attribute type 3 has an invalid length. [ 233.788548][ T8524] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.704'. [ 234.061598][ T8532] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.708'. [ 234.097493][ T8532] syzkaller0: entered promiscuous mode [ 234.106651][ T8532] syzkaller0: entered allmulticast mode [ 234.130233][ T8532] netlink: set zone limit has 8 unknown bytes [ 234.203569][ T8534] netlink: 'syz.2.709': attribute type 4 has an invalid length. [ 234.214072][ T8534] netlink: 152 bytes leftover after parsing attributes in process `syz.2.709'. [ 234.533271][ T8547] netlink: 'syz.0.714': attribute type 30 has an invalid length. [ 234.723616][ T8554] netlink: 'syz.1.716': attribute type 5 has an invalid length. [ 234.756587][ T8554] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.716'. [ 234.839285][ T8558] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.717'. [ 235.138121][ T8566] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.719'. [ 235.150435][ T8566] syzkaller0: entered promiscuous mode [ 235.157506][ T8566] syzkaller0: entered allmulticast mode [ 235.191455][ T8566] netlink: set zone limit has 8 unknown bytes [ 235.666613][ T8570] netlink: 10 bytes leftover after parsing attributes in process `syz.0.721'. [ 235.837053][ T8574] tap0: tun_chr_ioctl cmd 1074025676 [ 235.849192][ T8574] tap0: owner set to 778 [ 236.405917][ T8593] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.729'. [ 236.514994][ T8600] netlink: set zone limit has 8 unknown bytes [ 236.527085][ T8594] syzkaller0: entered promiscuous mode [ 236.536417][ T8594] syzkaller0: entered allmulticast mode [ 236.552932][ T8593] syzkaller0: entered promiscuous mode [ 236.569018][ T8593] syzkaller0: entered allmulticast mode [ 239.383018][ T8604] netlink: 188 bytes leftover after parsing attributes in process `syz.0.731'. [ 239.392600][ T8602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 239.407083][ T8611] netlink: 'syz.1.732': attribute type 13 has an invalid length. [ 239.425595][ T8611] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.732'. [ 240.146185][ T8640] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.739'. [ 240.209250][ T8640] syzkaller0: entered promiscuous mode [ 240.214892][ T8640] syzkaller0: entered allmulticast mode [ 240.309694][ T8640] netlink: set zone limit has 8 unknown bytes [ 240.689206][ T8644] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 240.709948][ T8644] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 240.835841][ T8650] netlink: 180 bytes leftover after parsing attributes in process `syz.1.740'. [ 240.847706][ T8652] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 240.855247][ T8652] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 240.880416][ T8659] netlink: 6 bytes leftover after parsing attributes in process `syz.3.744'. [ 240.899379][ T8656] netlink: 14546 bytes leftover after parsing attributes in process `syz.3.744'. [ 240.929918][ T8654] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.743'. [ 241.299534][ T8663] netlink: 'syz.1.746': attribute type 1 has an invalid length. [ 241.307432][ T8663] netlink: 157116 bytes leftover after parsing attributes in process `syz.1.746'. [ 242.085821][ T8679] netlink: 'syz.3.751': attribute type 9 has an invalid length. [ 242.169203][ T8679] netlink: 399 bytes leftover after parsing attributes in process `syz.3.751'. [ 243.372144][ T8697] syz.0.756 (8697) used greatest stack depth: 17704 bytes left [ 243.673538][ T8702] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 243.710899][ T8702] mac80211_hwsim hwsim17 wlan0: entered allmulticast mode [ 243.836224][ T8716] netlink: 'syz.3.761': attribute type 17 has an invalid length. [ 243.856987][ T8716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.226221][ T8728] netlink: 'syz.2.764': attribute type 33 has an invalid length. [ 244.361087][ T8731] C: renamed from team_slave_0 (while UP) [ 244.382748][ T8731] netlink: 'syz.1.766': attribute type 3 has an invalid length. [ 244.405128][ T8731] netlink: 'syz.1.766': attribute type 1 has an invalid length. [ 244.417257][ T8731] __nla_validate_parse: 4 callbacks suppressed [ 244.417274][ T8731] netlink: 116 bytes leftover after parsing attributes in process `syz.1.766'. [ 244.908471][ T8743] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.767'. [ 245.093254][ T8743] syzkaller0: entered promiscuous mode [ 245.105208][ T8743] syzkaller0: entered allmulticast mode [ 245.162221][ T8743] netlink: set zone limit has 8 unknown bytes [ 245.486630][ T8751] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 245.535842][ T8751] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 245.725202][ T8759] netlink: 180 bytes leftover after parsing attributes in process `syz.2.771'. [ 245.738129][ T8760] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 245.755384][ T8760] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 245.804306][ T8761] netlink: 'syz.3.772': attribute type 17 has an invalid length. [ 245.854935][ T8761] netlink: 152 bytes leftover after parsing attributes in process `syz.3.772'. [ 247.324424][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 247.359066][ T8782] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 247.383378][ T8774] netlink: 60 bytes leftover after parsing attributes in process `syz.3.776'. [ 247.625662][ T8788] netlink: 'syz.2.779': attribute type 21 has an invalid length. [ 247.636571][ T8788] netlink: 'syz.2.779': attribute type 1 has an invalid length. [ 247.954681][ T8795] netlink: 'syz.2.781': attribute type 13 has an invalid length. [ 247.996822][ T8795] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.781'. [ 248.043412][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.782'. [ 248.492368][ T8808] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.785'. [ 248.535064][ T8808] syzkaller0: entered promiscuous mode [ 248.563525][ T8808] syzkaller0: entered allmulticast mode [ 248.620736][ T8808] netlink: set zone limit has 8 unknown bytes [ 248.642383][ T8809] netlink: 'syz.0.784': attribute type 9 has an invalid length. [ 248.652737][ T8811] netlink: 'syz.1.786': attribute type 6 has an invalid length. [ 249.473726][ T8819] netlink: 'syz.2.788': attribute type 39 has an invalid length. [ 249.606285][ T8813] netlink: 'syz.0.784': attribute type 9 has an invalid length. [ 249.646498][ T8813] __nla_validate_parse: 3 callbacks suppressed [ 249.646512][ T8813] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.784'. [ 249.681695][ T8821] netlink: 'syz.3.789': attribute type 2 has an invalid length. [ 249.705386][ T8821] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.789'. [ 249.946654][ T8835] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 249.977129][ T8835] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.793'. [ 249.997484][ T8840] sit0: entered allmulticast mode [ 250.141050][ T8834] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.793'. [ 250.167189][ T8835] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.793'. [ 250.202071][ T8840] sit0: entered promiscuous mode [ 251.076925][ T8866] netlink: 'syz.3.799': attribute type 9 has an invalid length. [ 251.093353][ T8866] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.799'. [ 251.145629][ T8861] netlink: 830 bytes leftover after parsing attributes in process `syz.2.798'. [ 251.364588][ T8867] netlink: 'syz.3.799': attribute type 9 has an invalid length. [ 251.390427][ T8867] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.799'. [ 251.714123][ T8873] netlink: 'syz.2.800': attribute type 9 has an invalid length. [ 251.733274][ T8873] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.800'. [ 251.991463][ T8881] netlink: 'syz.3.803': attribute type 21 has an invalid length. [ 252.004132][ T8881] netlink: 128 bytes leftover after parsing attributes in process `syz.3.803'. [ 252.013863][ T8881] netlink: 'syz.3.803': attribute type 4 has an invalid length. [ 252.022504][ T8881] netlink: 'syz.3.803': attribute type 3 has an invalid length. [ 252.118316][ T8889] netlink: 'syz.3.805': attribute type 39 has an invalid length. [ 252.832402][ T8903] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 252.860083][ T8903] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 253.357908][ T8921] netlink: 'syz.0.814': attribute type 3 has an invalid length. [ 254.336894][ T8938] sit0: left promiscuous mode [ 254.482862][ T8939] sit0: entered promiscuous mode [ 255.619579][ T8970] __nla_validate_parse: 8 callbacks suppressed [ 255.619597][ T8970] netlink: 10 bytes leftover after parsing attributes in process `syz.0.823'. [ 255.784467][ T8970] netlink: 116 bytes leftover after parsing attributes in process `syz.0.823'. [ 255.803071][ T8970] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 256.606745][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.619343][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.648679][ T8995] netlink: 14 bytes leftover after parsing attributes in process `syz.3.831'. [ 257.673320][ T9000] validate_nla: 1 callbacks suppressed [ 257.673338][ T9000] netlink: 'syz.2.830': attribute type 9 has an invalid length. [ 257.699215][ T9000] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.830'. [ 258.079762][ T8995] mac80211_hwsim hwsim17 wlan0: left promiscuous mode [ 258.109927][ T8995] mac80211_hwsim hwsim17 wlan0: left allmulticast mode [ 258.393616][ T8993] netlink: 'syz.2.830': attribute type 9 has an invalid length. [ 258.441302][ T8993] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.830'. [ 259.015435][ T9019] sit0: left promiscuous mode [ 259.119842][ T9019] sit0: entered promiscuous mode [ 260.272398][ T9051] netlink: 'syz.2.847': attribute type 19 has an invalid length. [ 260.287829][ T9051] netlink: 14524 bytes leftover after parsing attributes in process `syz.2.847'. [ 260.746805][ T9070] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.852'. [ 260.984310][ T9070] syzkaller0: entered promiscuous mode [ 260.999480][ T9070] syzkaller0: entered allmulticast mode [ 261.006911][ T9076] netlink: 60 bytes leftover after parsing attributes in process `syz.2.851'. [ 263.303635][ T9107] netlink: 'syz.3.862': attribute type 39 has an invalid length. [ 264.120691][ T9123] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.865'. [ 264.277823][ T9119] netlink: 'syz.2.866': attribute type 12 has an invalid length. [ 264.293255][ T9119] netlink: 132 bytes leftover after parsing attributes in process `syz.2.866'. [ 264.364778][ T9123] syzkaller0: entered promiscuous mode [ 264.370879][ T9123] syzkaller0: entered allmulticast mode [ 264.684566][ T9136] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 264.694487][ T9136] netlink: 'syz.3.869': attribute type 8 has an invalid length. [ 264.703014][ T9136] netlink: 132 bytes leftover after parsing attributes in process `syz.3.869'. [ 264.727206][ T9134] netlink: 'syz.3.869': attribute type 2 has an invalid length. [ 264.773022][ T9134] netlink: 'syz.3.869': attribute type 8 has an invalid length. [ 264.783569][ T9134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.869'. [ 264.800090][ T9137] aaaaaaaaaaaaaaa: entered promiscuous mode [ 265.309321][ T9147] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.872'. [ 265.545015][ T9154] netlink: 'syz.2.875': attribute type 10 has an invalid length. [ 265.593805][ T9154] veth0_macvtap: left promiscuous mode [ 266.277823][ T9171] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 266.285965][ T9171] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.881'. [ 268.027221][ T9204] netlink: 'syz.2.887': attribute type 1 has an invalid length. [ 268.074894][ T9196] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.885'. [ 268.661791][ T9225] netlink: 'syz.0.894': attribute type 6 has an invalid length. [ 268.691043][ T9225] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.894'. [ 269.104870][ T9233] netlink: 152 bytes leftover after parsing attributes in process `syz.2.897'. [ 269.161294][ T9233] netlink: 'syz.2.897': attribute type 8 has an invalid length. [ 269.179176][ T9233] netlink: 'syz.2.897': attribute type 9 has an invalid length. [ 269.186914][ T9233] netlink: 'syz.2.897': attribute type 10 has an invalid length. [ 269.219592][ T9233] netlink: 'syz.2.897': attribute type 11 has an invalid length. [ 269.239959][ T9233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.897'. [ 269.454002][ T9245] netlink: 156 bytes leftover after parsing attributes in process `syz.1.901'. [ 269.599987][ T9247] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.902'. [ 269.612670][ T9247] syzkaller0: entered promiscuous mode [ 269.618297][ T9247] syzkaller0: entered allmulticast mode [ 269.839522][ T9254] netlink: 'syz.3.904': attribute type 4 has an invalid length. [ 269.869918][ T9254] netlink: 152 bytes leftover after parsing attributes in process `syz.3.904'. [ 269.940019][ T9254] .`: renamed from bond0 (while UP) [ 270.540371][ T9266] netlink: 'syz.3.909': attribute type 29 has an invalid length. [ 270.549364][ T9260] netlink: 'syz.0.907': attribute type 33 has an invalid length. [ 270.562412][ T9260] netlink: 152 bytes leftover after parsing attributes in process `syz.0.907'. [ 270.714861][ T9266] netlink: 'syz.3.909': attribute type 29 has an invalid length. [ 271.085034][ T9281] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.914'. [ 271.156281][ T9281] syzkaller0: entered promiscuous mode [ 271.185140][ T9281] syzkaller0: entered allmulticast mode [ 272.091461][ T9295] netlink: 'syz.3.918': attribute type 10 has an invalid length. [ 272.118372][ T9295] netlink: 40 bytes leftover after parsing attributes in process `syz.3.918'. [ 272.136490][ T9295] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 272.159607][ T9295] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.711242][ T9315] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.926'. [ 272.775554][ T9315] syzkaller0: entered promiscuous mode [ 272.815419][ T9315] syzkaller0: entered allmulticast mode [ 273.231373][ T9323] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.928'. [ 273.820589][ T9333] lo: entered allmulticast mode [ 274.866321][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 275.272837][ T9355] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.937'. [ 275.348108][ T9357] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.938'. [ 275.379462][ T9357] validate_nla: 1 callbacks suppressed [ 275.379482][ T9357] netlink: 'syz.0.938': attribute type 3 has an invalid length. [ 275.423297][ T9357] netlink: 132 bytes leftover after parsing attributes in process `syz.0.938'. [ 276.468244][ T9366] netlink: 'syz.1.949': attribute type 33 has an invalid length. [ 276.503925][ T9366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.949'. [ 277.051820][ T9381] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.945'. [ 277.091184][ T9381] openvswitch: netlink: Duplicate key (type 0). [ 277.321359][ T9389] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.950'. [ 277.545723][ T9392] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.947'. [ 279.875661][ T9429] netlink: 'syz.0.961': attribute type 1 has an invalid length. [ 279.897921][ T9429] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.961'. [ 280.389686][ T9439] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.965'. [ 281.247941][ T9467] netlink: 'syz.1.973': attribute type 4 has an invalid length. [ 281.263320][ T9467] netlink: 156 bytes leftover after parsing attributes in process `syz.1.973'. [ 281.692974][ T9470] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.974'. [ 281.886531][ T9487] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.980'. [ 282.027968][ T9491] syzkaller1: tun_chr_ioctl cmd 2148553947 [ 282.200655][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.982'. [ 283.682003][ T9529] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.992'. [ 283.716961][ T9532] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.978373][ T9536] netlink: 'syz.1.994': attribute type 21 has an invalid length. [ 283.994596][ T9536] netlink: 156 bytes leftover after parsing attributes in process `syz.1.994'. [ 284.683917][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.996'. [ 284.781870][ T9545] netlink: 60 bytes leftover after parsing attributes in process `syz.1.996'. [ 284.812657][ T9546] netlink: 60 bytes leftover after parsing attributes in process `syz.1.996'. [ 285.037647][ T9559] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.999'. [ 285.048980][ T9559] openvswitch: netlink: Duplicate key (type 0). [ 286.324052][ T9563] netlink: 'syz.1.1000': attribute type 28 has an invalid length. [ 286.374200][ T9563] netlink: 'syz.1.1000': attribute type 29 has an invalid length. [ 286.505377][ T9563] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1000'. [ 286.733108][ T9570] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1002'. [ 288.883778][ T9605] netlink: 'syz.2.1008': attribute type 21 has an invalid length. [ 289.013941][ T9605] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1008'. [ 289.098364][ T9606] sit0: left promiscuous mode [ 289.498621][ T9610] netlink: 'syz.3.1009': attribute type 21 has an invalid length. [ 289.924116][ T9624] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1013'. [ 290.504408][ T9634] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 290.518319][ T9634] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 290.818682][ T9651] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1022'. [ 291.003175][ T9659] netlink: 'syz.2.1023': attribute type 3 has an invalid length. [ 291.012565][ T9659] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1023'. [ 291.062799][ T9660] netlink: 'syz.2.1023': attribute type 3 has an invalid length. [ 291.076999][ T9660] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1023'. [ 291.127299][ T9664] netlink: 'syz.3.1024': attribute type 1 has an invalid length. [ 291.146514][ T9664] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1024'. [ 291.271453][ T9669] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1026'. [ 291.284789][ T9669] ksmbd: Unknown IPC event: 0, ignore. [ 291.312585][ T9667] syzkaller0: entered promiscuous mode [ 291.325191][ T9667] syzkaller0: entered allmulticast mode [ 292.957429][ T9703] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1033'. [ 294.593963][ T9692] netlink: 'syz.2.1031': attribute type 10 has an invalid length. [ 294.608010][ T9692] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1031'. [ 295.474992][ T9714] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1036'. [ 295.970434][ T9719] netlink: 'syz.1.1039': attribute type 4 has an invalid length. [ 296.003875][ T9719] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1039'. [ 296.181371][ T9719] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 296.233629][ T9727] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1041'. [ 296.614934][ T9742] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1045'. [ 297.890236][ T5786] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 298.802567][ T9780] netlink: 'syz.2.1052': attribute type 21 has an invalid length. [ 298.849304][ T9780] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1052'. [ 298.879682][ T9781] netlink: 'syz.2.1052': attribute type 21 has an invalid length. [ 298.887834][ T9781] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1052'. [ 299.121728][ T9792] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1055'. [ 299.451938][ T9801] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1056'. [ 299.766150][ T9806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 299.773677][ T9806] IPv6: NLM_F_CREATE should be set when creating new route [ 299.781072][ T9806] IPv6: NLM_F_CREATE should be set when creating new route [ 299.788437][ T9806] IPv6: NLM_F_CREATE should be set when creating new route [ 299.874013][ T9812] netlink: 'syz.0.1059': attribute type 29 has an invalid length. [ 299.892806][ T9806] syzkaller0: entered promiscuous mode [ 299.898485][ T9806] syzkaller0: entered allmulticast mode [ 299.919086][ T9812] netlink: 'syz.0.1059': attribute type 29 has an invalid length. [ 300.323670][ T9821] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1062'. [ 303.138306][ T9854] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1071'. [ 303.779378][ T9863] syzkaller0: entered promiscuous mode [ 303.817496][ T9863] syzkaller0: entered allmulticast mode [ 304.336497][ T5786] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 304.445646][ T9886] netlink: 'syz.2.1082': attribute type 21 has an invalid length. [ 304.475851][ T9886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1082'. [ 304.782730][ T9892] netlink: 'syz.3.1084': attribute type 33 has an invalid length. [ 304.796497][ T9892] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1084'. [ 304.811996][ T9892] `: renamed from team0 (while UP) [ 305.080457][ T9903] sit0: left promiscuous mode [ 305.429415][ T9906] sit0: entered promiscuous mode [ 305.689348][ T9916] syzkaller0: entered promiscuous mode [ 305.706921][ T9916] syzkaller0: entered allmulticast mode [ 306.058626][ T9928] netlink: 'syz.2.1091': attribute type 41 has an invalid length. [ 306.481644][ T5786] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 306.903189][ T9938] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 306.921603][ T9938] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 306.934296][ T9942] netlink: 'syz.2.1096': attribute type 9 has an invalid length. [ 306.959505][ T9942] netlink: 187596 bytes leftover after parsing attributes in process `syz.2.1096'. [ 306.967744][ T9943] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 307.872431][ T9959] syzkaller0: entered promiscuous mode [ 307.878083][ T9959] syzkaller0: entered allmulticast mode [ 308.031330][ T9963] netlink: 'syz.3.1102': attribute type 21 has an invalid length. [ 308.048950][ T9963] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1102'. [ 308.155015][ T9971] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1105'. [ 308.280634][ T9977] syzkaller0: entered promiscuous mode [ 308.286190][ T9977] syzkaller0: entered allmulticast mode [ 309.261958][ T9993] netlink: 'syz.3.1112': attribute type 9 has an invalid length. [ 309.272804][ T9993] netlink: 187596 bytes leftover after parsing attributes in process `syz.3.1112'. [ 309.609888][ T9998] syzkaller0: entered promiscuous mode [ 309.630603][ T9998] syzkaller0: entered allmulticast mode [ 312.838286][T10012] syzkaller0: entered promiscuous mode [ 312.844579][T10012] syzkaller0: entered allmulticast mode [ 313.250309][T10028] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 313.269101][T10028] netlink: 212412 bytes leftover after parsing attributes in process `syz.3.1122'. [ 313.278685][T10028] openvswitch: netlink: Flow key attr not present in new flow. [ 313.405490][T10028] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 313.429166][T10028] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 313.445615][T10028] netlink: 209216 bytes leftover after parsing attributes in process `syz.3.1122'. [ 313.456556][T10028] openvswitch: netlink: Message has 4 unknown bytes. [ 313.592163][T10039] syzkaller0: entered promiscuous mode [ 313.618922][T10039] syzkaller0: entered allmulticast mode [ 313.878764][T10047] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1128'. [ 313.965006][T10052] syzkaller0: entered promiscuous mode [ 313.974836][T10052] syzkaller0: entered allmulticast mode [ 315.072787][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 317.025818][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1134'. [ 317.275989][T10092] syzkaller0: entered promiscuous mode [ 317.282387][T10092] syzkaller0: entered allmulticast mode [ 317.403459][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.411314][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.787563][T10116] netlink: 'syz.2.1144': attribute type 21 has an invalid length. [ 317.809412][T10116] IPv6: NLM_F_CREATE should be specified when creating new route [ 317.827272][T10116] IPv6: Can't replace route, no match found [ 318.169271][T10124] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1148'. [ 318.225458][T10124] netlink: 'syz.1.1148': attribute type 21 has an invalid length. [ 318.244053][T10124] netlink: 'syz.1.1148': attribute type 6 has an invalid length. [ 318.279009][T10124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1148'. [ 318.612244][T10139] netlink: 'syz.2.1153': attribute type 10 has an invalid length. [ 318.715080][T10140] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1152'. [ 319.311592][T10152] syz.0.1151 (10152) used obsolete PPPIOCDETACH ioctl [ 319.836411][T10166] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1159'. [ 320.295290][T10175] netlink: 'syz.0.1162': attribute type 1 has an invalid length. [ 320.310350][T10175] netlink: 'syz.0.1162': attribute type 4 has an invalid length. [ 320.318338][T10175] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1162'. [ 320.655465][T10192] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1166'. [ 320.810123][T10185] netlink: 'syz.1.1164': attribute type 10 has an invalid length. [ 321.084549][T10185] team0: Port device dummy0 added [ 321.955160][T10213] netlink: 'syz.2.1171': attribute type 10 has an invalid length. [ 322.199063][T10226] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1175'. [ 322.867677][T10238] netlink: 'syz.0.1178': attribute type 10 has an invalid length. [ 322.879998][T10238] dummy0: left promiscuous mode [ 322.997004][T10238] `: Port device dummy0 added [ 323.314843][T10254] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1184'. [ 323.387954][T10251] netlink: 'syz.2.1182': attribute type 25 has an invalid length. [ 323.418934][T10251] netlink: 'syz.2.1182': attribute type 28 has an invalid length. [ 323.498116][T10251] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1182'. [ 326.202164][T10291] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1192'. [ 326.274341][T10291] : entered promiscuous mode [ 326.437932][T10298] netlink: 'syz.1.1195': attribute type 41 has an invalid length. [ 326.486570][T10298] netlink: 'syz.1.1195': attribute type 41 has an invalid length. [ 326.921271][T10308] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1198'. [ 327.203959][T10316] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1203'. [ 327.488037][T10325] syzkaller0: entered promiscuous mode [ 327.498955][T10325] syzkaller0: entered allmulticast mode [ 327.687325][T10334] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 329.007202][T10359] netlink: 'syz.2.1217': attribute type 2 has an invalid length. [ 329.057133][T10359] netlink: 51 bytes leftover after parsing attributes in process `syz.2.1217'. [ 329.111384][T10362] netlink: 'syz.2.1217': attribute type 21 has an invalid length. [ 329.149786][T10362] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1217'. [ 329.205775][T10362] netlink: 'syz.2.1217': attribute type 4 has an invalid length. [ 329.237275][T10362] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1217'. [ 330.339903][T10377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1223'. [ 330.359065][T10377] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1223'. [ 330.440152][T10379] syz.1.1224: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 330.457030][T10379] CPU: 0 PID: 10379 Comm: syz.1.1224 Not tainted syzkaller #0 [ 330.464544][T10379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 330.474647][T10379] Call Trace: [ 330.477967][T10379] [ 330.481122][T10379] dump_stack_lvl+0x18c/0x250 [ 330.485842][T10379] ? show_regs_print_info+0x20/0x20 [ 330.491068][T10379] ? load_image+0x400/0x400 [ 330.495592][T10379] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 330.502022][T10379] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 330.508545][T10379] warn_alloc+0x246/0x340 [ 330.513017][T10379] ? zone_watermark_ok_safe+0x230/0x230 [ 330.518860][T10379] ? lockdep_hardirqs_on+0x98/0x150 [ 330.524080][T10379] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 330.530254][T10379] ? __vmalloc_node_range+0x110/0x1330 [ 330.535801][T10379] __vmalloc_node_range+0x126/0x1330 [ 330.541127][T10379] ? free_vm_area+0x50/0x50 [ 330.545656][T10379] vmalloc_user+0x74/0x80 [ 330.549997][T10379] ? xskq_create+0xbf/0x170 [ 330.554516][T10379] xskq_create+0xbf/0x170 [ 330.558970][T10379] xsk_init_queue+0xad/0x100 [ 330.563594][T10379] xsk_setsockopt+0x4e5/0x760 [ 330.568287][T10379] ? xsk_poll+0x680/0x680 [ 330.572638][T10379] ? security_socket_setsockopt+0x59/0xa0 [ 330.578545][T10379] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 330.584104][T10379] ? security_socket_setsockopt+0x7e/0xa0 [ 330.589918][T10379] ? xsk_poll+0x680/0x680 [ 330.594288][T10379] do_sock_setsockopt+0x175/0x1a0 [ 330.599380][T10379] ? __fdget+0x180/0x210 [ 330.603649][T10379] __x64_sys_setsockopt+0x182/0x200 [ 330.608878][T10379] do_syscall_64+0x55/0xa0 [ 330.613372][T10379] ? clear_bhb_loop+0x40/0x90 [ 330.618066][T10379] ? clear_bhb_loop+0x40/0x90 [ 330.622842][T10379] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 330.628743][T10379] RIP: 0033:0x7f735a59c799 [ 330.633264][T10379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.652885][T10379] RSP: 002b:00007f735b488028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 330.661311][T10379] RAX: ffffffffffffffda RBX: 00007f735a815fa0 RCX: 00007f735a59c799 [ 330.669291][T10379] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000007 [ 330.677267][T10379] RBP: 00007f735a632bd9 R08: 0000000000000004 R09: 0000000000000000 [ 330.685247][T10379] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 330.693227][T10379] R13: 00007f735a816038 R14: 00007f735a815fa0 R15: 00007ffc55a8f2a8 [ 330.701401][T10379] [ 330.735502][T10379] Mem-Info: [ 330.745102][T10379] active_anon:5848 inactive_anon:0 isolated_anon:0 [ 330.745102][T10379] active_file:16839 inactive_file:40029 isolated_file:0 [ 330.745102][T10379] unevictable:768 dirty:174 writeback:0 [ 330.745102][T10379] slab_reclaimable:10467 slab_unreclaimable:93812 [ 330.745102][T10379] mapped:24139 shmem:1561 pagetables:604 [ 330.745102][T10379] sec_pagetables:0 bounce:0 [ 330.745102][T10379] kernel_misc_reclaimable:0 [ 330.745102][T10379] free:1348572 free_pcp:9121 free_cma:0 [ 330.827661][T10381] netlink: 'syz.1.1224': attribute type 30 has an invalid length. [ 330.830826][T10379] Node 0 active_anon:24392kB inactive_anon:0kB active_file:67356kB inactive_file:159912kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97256kB dirty:696kB writeback:0kB shmem:5808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11392kB pagetables:2416kB sec_pagetables:0kB all_unreclaimable? no [ 330.938519][T10379] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 330.979401][T10389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1227'. [ 331.021859][T10379] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.079264][T10379] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 331.085385][T10379] Node 0 DMA32 free:1476636kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:26712kB inactive_anon:0kB active_file:67356kB inactive_file:159080kB unevictable:1536kB writepending:696kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:20200kB local_pcp:19032kB free_cma:0kB [ 331.129723][T10379] lowmem_reserve[]: 0 0 0 0 0 [ 331.134540][T10379] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 331.210575][T10379] lowmem_reserve[]: 0 0 0 0 0 [ 331.237165][T10379] Node 1 Normal free:3899300kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:15424kB local_pcp:10432kB free_cma:0kB [ 331.327229][T10379] lowmem_reserve[]: 0 0 0 0 0 [ 331.339154][T10379] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 331.379253][T10379] Node 0 DMA32: 297*4kB (UM) 809*8kB (UM) 1258*16kB (UME) 2456*32kB (UME) 1518*64kB (UME) 531*128kB (UME) 196*256kB (UME) 96*512kB (UME) 29*1024kB (UM) 14*2048kB (UM) 254*4096kB (UM) = 1469580kB [ 331.446547][T10379] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 331.474076][T10379] Node 1 Normal: 241*4kB (UME) 44*8kB (UME) 44*16kB (UME) 120*32kB (UME) 47*64kB (UME) 8*128kB (UE) 1*256kB (U) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 948*4096kB (M) = 3899300kB [ 331.519258][T10379] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.538824][T10379] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.548190][T10379] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 331.582204][T10379] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 331.591747][T10379] 61415 total pagecache pages [ 331.596465][T10379] 0 pages in swap cache [ 331.618841][T10379] Free swap = 124996kB [ 331.623161][T10379] Total swap = 124996kB [ 331.627435][T10379] 2097051 pages RAM [ 331.638085][T10379] 0 pages HighMem/MovableOnly [ 331.668829][T10379] 416924 pages reserved [ 331.673056][T10379] 0 pages cma reserved [ 333.202269][T10431] netlink: 'syz.0.1239': attribute type 21 has an invalid length. [ 337.818924][T10470] netlink: 'syz.0.1248': attribute type 41 has an invalid length. [ 338.744994][T10484] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 339.613471][T10500] netlink: 'syz.0.1257': attribute type 1 has an invalid length. [ 339.639267][T10500] netlink: 'syz.0.1257': attribute type 4 has an invalid length. [ 339.647097][T10500] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1257'. [ 340.417603][T10525] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1265'. [ 340.713017][T10530] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1266'. [ 341.720699][T10530] bridge_slave_0 (unregistering): left allmulticast mode [ 341.728059][T10530] bridge_slave_0 (unregistering): left promiscuous mode [ 341.735846][T10530] bridge0: port 1(bridge_slave_0) entered disabled state [ 342.319858][T10547] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1273'. [ 342.493054][T10553] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1275'. [ 342.616818][T10552] netlink: 'syz.2.1274': attribute type 13 has an invalid length. [ 342.674036][T10552] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1274'. [ 342.706593][T10552] syz_tun: refused to change device tx_queue_len [ 342.844575][T10557] netlink: 'syz.2.1274': attribute type 2 has an invalid length. [ 342.986877][T10557] netlink: 'syz.2.1274': attribute type 8 has an invalid length. [ 344.085545][T10557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1274'. [ 344.394347][T10552] netlink: 'syz.2.1274': attribute type 11 has an invalid length. [ 344.705832][T10573] netlink: 'syz.1.1279': attribute type 21 has an invalid length. [ 344.742364][T10573] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1279'. [ 344.807856][T10573] netlink: 'syz.1.1279': attribute type 5 has an invalid length. [ 344.829656][T10573] netlink: 'syz.1.1279': attribute type 6 has an invalid length. [ 344.859051][T10573] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1279'. [ 345.018372][T10581] netlink: 'syz.3.1282': attribute type 2 has an invalid length. [ 345.068143][T10581] netlink: 'syz.3.1282': attribute type 8 has an invalid length. [ 345.125006][T10581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1282'. [ 349.055642][T10613] netlink: 'syz.2.1284': attribute type 41 has an invalid length. [ 351.535334][T10658] netlink: 'syz.1.1302': attribute type 27 has an invalid length. [ 351.559401][T10658] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.1302'. [ 351.597379][T10661] netlink: 'syz.2.1301': attribute type 21 has an invalid length. [ 351.629305][T10661] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 352.372547][T10688] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1308'. [ 352.486188][T10693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 352.507575][T10688] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.1308'. [ 352.669223][T10696] delete_channel: no stack [ 352.669561][T10694] netlink: 'syz.3.1309': attribute type 3 has an invalid length. [ 352.712080][T10694] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1309'. [ 352.761317][T10693] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 352.955236][T10695] delete_channel: no stack [ 353.049107][T10690] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 353.148642][T10697] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1307'. [ 354.033542][T10707] netlink: 'syz.2.1313': attribute type 27 has an invalid length. [ 354.055375][T10707] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.1313'. [ 354.173889][T10709] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.745542][T10714] netlink: 'syz.0.1314': attribute type 10 has an invalid length. [ 354.799221][T10714] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1314'. [ 355.693473][T10728] netlink: 'syz.3.1318': attribute type 21 has an invalid length. [ 355.714887][T10728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.722429][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 355.730070][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 355.737379][T10728] IPv6: NLM_F_CREATE should be set when creating new route [ 356.611362][T10736] netlink: 'syz.1.1320': attribute type 3 has an invalid length. [ 356.701994][T10736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1320'. [ 366.452773][T10790] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1334'. [ 366.519210][T10790] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1334'. [ 367.577085][T10796] syzkaller0: entered promiscuous mode [ 367.643982][T10796] syzkaller0: entered allmulticast mode [ 369.249004][T10823] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1341'. [ 372.402436][T10801] netlink: 'syz.3.1336': attribute type 21 has an invalid length. [ 372.410586][T10801] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1336'. [ 372.420212][T10815] netlink: 'syz.1.1339': attribute type 21 has an invalid length. [ 372.428155][T10815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 373.271508][T10851] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1348'. [ 373.275218][T10849] netlink: 'syz.3.1347': attribute type 3 has an invalid length. [ 373.288722][T10849] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1347'. [ 373.595922][T10858] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1350'. [ 373.619997][T10861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1351'. [ 374.138203][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 374.251507][T10874] syzkaller0: entered promiscuous mode [ 374.260991][T10874] syzkaller0: entered allmulticast mode [ 374.292473][T10879] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 374.318175][T10880] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 374.339646][T10887] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1356'. [ 375.121880][T10912] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1362'. [ 376.804262][T10889] netlink: 'syz.0.1358': attribute type 21 has an invalid length. [ 376.812477][T10889] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 376.819768][T10889] IPv6: NLM_F_CREATE should be set when creating new route [ 376.827075][T10889] IPv6: NLM_F_CREATE should be set when creating new route [ 376.834371][T10889] IPv6: NLM_F_CREATE should be set when creating new route [ 376.852321][T10912] netlink: 'syz.1.1362': attribute type 21 has an invalid length. [ 377.175382][T10917] netlink: 'syz.3.1363': attribute type 10 has an invalid length. [ 377.357338][T10917] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 377.827722][T10925] netlink: 'syz.0.1367': attribute type 10 has an invalid length. [ 377.930644][T10941] __nla_validate_parse: 1 callbacks suppressed [ 377.930661][T10941] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1371'. [ 377.989072][T10941] veth0_to_bond: entered promiscuous mode [ 378.849377][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.864620][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.074718][T10956] netlink: 'syz.2.1375': attribute type 21 has an invalid length. [ 379.104149][T10956] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 380.048623][T10975] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1378'. [ 380.427254][T10982] delete_channel: no stack [ 380.436788][T10982] delete_channel: no stack [ 380.637244][T10989] netlink: 'syz.1.1383': attribute type 21 has an invalid length. [ 380.646763][T10989] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1383'. [ 383.246177][T11030] netlink: 'syz.1.1394': attribute type 4 has an invalid length. [ 383.270573][T11030] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1394'. [ 384.442185][T11051] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1399'. [ 384.463217][T11051] netlink: 21096 bytes leftover after parsing attributes in process `syz.1.1399'. [ 384.481840][T11051] tipc: Started in network mode [ 384.486776][T11051] tipc: Node identity 1a, cluster identity 4711 [ 384.523789][T11051] tipc: Node number set to 26 [ 385.071387][T11061] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1401'. [ 385.204445][T11061] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1401'. [ 385.459883][T11070] netlink: 'syz.0.1403': attribute type 21 has an invalid length. [ 385.468346][T11070] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 386.553796][T11103] netlink: 'syz.0.1411': attribute type 10 has an invalid length. [ 386.651800][T11103] `: Device wg1 is of different type [ 386.821721][T11112] netlink: 'syz.1.1413': attribute type 10 has an invalid length. [ 387.788949][T11117] mac80211_hwsim hwsim8 »»»»»»: renamed from wlan0 (while UP) [ 387.997194][T11133] netlink: 'syz.3.1421': attribute type 10 has an invalid length. [ 388.015688][T11133] `: Device wg1 is of different type [ 388.059714][ T5786] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 388.526150][T11148] netlink: 127924 bytes leftover after parsing attributes in process `syz.0.1424'. [ 388.536938][T11148] netlink: 16384 bytes leftover after parsing attributes in process `syz.0.1424'. [ 388.728204][T11158] syzkaller0: entered promiscuous mode [ 388.734439][T11158] syzkaller0: entered allmulticast mode [ 391.798474][T11183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1432'. [ 392.004490][T11192] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1436'. [ 392.036244][T11192] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1436'. [ 392.704521][T11217] netlink: 'syz.0.1443': attribute type 7 has an invalid length. [ 392.971835][T11229] netlink: 'syz.1.1445': attribute type 21 has an invalid length. [ 392.984377][T11229] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.207986][T11238] netlink: 'syz.3.1447': attribute type 21 has an invalid length. [ 393.241553][T11238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 393.805028][T11244] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1449'. [ 395.400380][T11290] netlink: 'syz.2.1462': attribute type 8 has an invalid length. [ 395.421610][T11290] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1462'. [ 396.402699][T11313] netlink: 'syz.0.1469': attribute type 2 has an invalid length. [ 398.543298][T11323] netlink: 'syz.0.1472': attribute type 21 has an invalid length. [ 398.567354][T11323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 398.665953][T11328] netlink: 56843 bytes leftover after parsing attributes in process `syz.1.1474'. [ 398.758318][T11333] netlink: 'syz.2.1475': attribute type 29 has an invalid length. [ 398.784350][T11333] netlink: 'syz.2.1475': attribute type 29 has an invalid length. [ 398.795248][T11333] netlink: 'syz.2.1475': attribute type 29 has an invalid length. [ 399.328316][T11351] netlink: 'syz.0.1480': attribute type 2 has an invalid length. [ 399.347812][T11351] netlink: 'syz.0.1480': attribute type 8 has an invalid length. [ 399.373379][T11351] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1480'. [ 399.556587][T11357] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 399.566307][T11357] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 399.586780][T11357] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 399.610041][T11357] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 399.903935][T11367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'. [ 399.915867][T11367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'. [ 399.958263][T11368] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'. [ 400.037746][T11367] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1486'. [ 400.107413][T11375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.594764][T11385] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 400.643596][T11392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1494'. [ 400.665085][T11390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1493'. [ 401.002677][T11398] `: Port device wlan1 added [ 401.449502][T11411] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1496'. [ 401.891363][T11411] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 402.062056][T11423] netlink: 209716 bytes leftover after parsing attributes in process `syz.1.1501'. [ 402.389047][T11431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.146272][T11440] delete_channel: no stack [ 403.182003][T11445] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.198876][T11479] validate_nla: 6 callbacks suppressed [ 405.199442][T11479] netlink: 'syz.2.1517': attribute type 8 has an invalid length. [ 405.214788][T11479] netlink: 209716 bytes leftover after parsing attributes in process `syz.2.1517'. [ 405.565824][T11474] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1513'. [ 405.575086][T11474] : entered promiscuous mode [ 405.667028][T11479] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 405.945888][T11484] netlink: 'syz.3.1518': attribute type 3 has an invalid length. [ 405.961941][T11484] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1518'. [ 406.526559][ T5786] Bluetooth: hci1: ISO packet for unknown connection handle 18 [ 407.486156][T11529] netlink: 'syz.0.1529': attribute type 8 has an invalid length. [ 407.499035][T11529] netlink: 209716 bytes leftover after parsing attributes in process `syz.0.1529'. [ 407.599570][T11529] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 407.814966][T11536] netlink: 'syz.3.1531': attribute type 21 has an invalid length. [ 407.873254][T11536] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.965147][T11539] netlink: 'syz.0.1533': attribute type 10 has an invalid length. [ 407.977499][T11539] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1533'. [ 408.021522][T11539] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 408.627586][T11552] syzkaller0: entered promiscuous mode [ 408.654489][T11552] syzkaller0: entered allmulticast mode [ 411.351393][T11582] netlink: 'syz.1.1544': attribute type 21 has an invalid length. [ 411.365392][T11582] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 411.731609][T11585] netlink: 'syz.3.1545': attribute type 3 has an invalid length. [ 411.746810][T11585] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1545'. [ 412.258275][T11610] netlink: 'syz.2.1551': attribute type 21 has an invalid length. [ 412.280053][T11610] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1551'. [ 413.493424][T11649] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 413.540129][T11649] netlink: 'syz.0.1562': attribute type 4 has an invalid length. [ 413.550347][T11649] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1562'. [ 413.629706][T11653] netlink: 'syz.1.1565': attribute type 2 has an invalid length. [ 413.638954][T11653] netlink: 'syz.1.1565': attribute type 1 has an invalid length. [ 413.646914][T11653] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1565'. [ 414.969260][T11680] netlink: 180 bytes leftover after parsing attributes in process `syz.0.1572'. [ 415.446471][T11687] netlink: 'syz.2.1574': attribute type 1 has an invalid length. [ 415.452543][T11692] netlink: 'syz.2.1574': attribute type 2 has an invalid length. [ 415.500089][T11692] netlink: 'syz.2.1574': attribute type 8 has an invalid length. [ 415.508324][T11692] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1574'. [ 415.549338][T11687] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1574'. [ 416.774510][T11716] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1579'. [ 417.658101][T11733] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1585'. [ 418.200361][T11755] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1590'. [ 419.021106][T11788] netlink: 'syz.3.1600': attribute type 17 has an invalid length. [ 419.101027][T11788] netlink: 'syz.3.1600': attribute type 16 has an invalid length. [ 419.107970][ T7172] tipc: Subscription rejected, illegal request [ 419.112553][T11788] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1600'. [ 419.146041][T11792] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1601'. [ 419.162365][T11795] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1601'. [ 420.740132][T11833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1613'. [ 443.990543][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.997352][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.131463][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.149115][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.157406][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.171265][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.180279][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.187729][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.350143][ T5786] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 445.360454][ T5786] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 445.368538][ T5786] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 445.379460][ T5786] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.387325][ T5786] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 445.395208][ T5786] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.580948][ T5786] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 445.594228][ T5786] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 445.602733][ T5786] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 445.618981][ T5786] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 445.626756][ T5786] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 445.637891][ T5786] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 445.708572][ T5782] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 445.718219][ T5782] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 445.730926][ T5782] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 445.741574][ T5782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 445.750661][ T5782] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 445.758073][ T5782] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 447.239023][ T5782] Bluetooth: hci4: command tx timeout [ 447.478959][ T5782] Bluetooth: hci5: command tx timeout [ 447.719010][ T5782] Bluetooth: hci6: command tx timeout [ 447.799033][ T5782] Bluetooth: hci7: command tx timeout [ 449.823526][ T5782] Bluetooth: hci4: command tx timeout [ 449.829185][ T5782] Bluetooth: hci5: command tx timeout [ 449.834604][ T5782] Bluetooth: hci6: command tx timeout [ 449.878867][ T5780] Bluetooth: hci7: command tx timeout [ 451.889473][ T5782] Bluetooth: hci5: command tx timeout [ 451.894955][ T5782] Bluetooth: hci4: command tx timeout [ 451.902417][ T5780] Bluetooth: hci6: command tx timeout [ 451.959561][ T5780] Bluetooth: hci7: command tx timeout [ 456.990177][ T5780] Bluetooth: hci6: command tx timeout [ 456.995659][ T5780] Bluetooth: hci4: command tx timeout [ 457.001171][ T5780] Bluetooth: hci5: command tx timeout [ 457.006634][ T5780] Bluetooth: hci7: command tx timeout [ 498.506968][ T5786] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 498.516346][ T5786] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 498.528786][ T5786] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 498.536988][ T5786] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 498.546490][ T5786] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 498.554028][ T5786] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 498.636459][ T5780] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 498.656372][ T5780] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 498.666043][ T5780] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 498.675684][ T5780] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 498.684087][ T5780] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 498.691953][ T5780] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 500.598970][ T5780] Bluetooth: hci8: command tx timeout [ 500.762695][ T5780] Bluetooth: hci9: command tx timeout [ 502.678904][ T5780] Bluetooth: hci8: command tx timeout [ 502.839053][ T5780] Bluetooth: hci9: command tx timeout [ 504.768928][ T5780] Bluetooth: hci8: command tx timeout [ 504.926232][ T5780] Bluetooth: hci9: command tx timeout [ 505.610047][ T5786] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 505.620140][ T5786] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 505.628343][ T5786] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 505.637829][ T5786] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 505.646969][ T5786] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 505.654669][ T5786] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 505.765009][ T5780] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 505.778314][ T5780] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 505.787867][ T5780] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 505.796596][ T5780] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 505.805962][ T5780] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 505.813585][ T5780] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 506.842869][ T5780] Bluetooth: hci8: command tx timeout [ 506.849157][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.855568][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.009058][ T5780] Bluetooth: hci9: command tx timeout [ 507.718944][ T5780] Bluetooth: hci10: command tx timeout [ 507.879514][ T5780] Bluetooth: hci11: command tx timeout [ 509.799329][ T5780] Bluetooth: hci10: command tx timeout [ 509.960472][ T5780] Bluetooth: hci11: command tx timeout [ 511.879590][ T5780] Bluetooth: hci10: command tx timeout [ 512.052404][ T5780] Bluetooth: hci11: command tx timeout [ 513.958926][ T5780] Bluetooth: hci10: command tx timeout [ 514.118934][ T5780] Bluetooth: hci11: command tx timeout [ 529.718684][ C0] rcu: INFO: rcu_preempt self-detected stall on CPU [ 529.725575][ C0] rcu: 0-....: (10245 ticks this GP) idle=7fac/1/0x4000000000000000 softirq=41115/41117 fqs=3513 [ 529.737214][ C0] rcu: hardirqs softirqs csw/system [ 529.743642][ C0] rcu: number: 1317517 0 0 [ 529.750061][ C0] rcu: cputime: 17799 34680 46 ==> 52480(ms) [ 529.757903][ C0] rcu: (t=10500 jiffies g=50013 q=2017 ncpus=2) [ 529.764226][ C0] CPU: 0 PID: 11871 Comm: syz.0.1625 Not tainted syzkaller #0 [ 529.771768][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.781825][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 529.788511][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 0b c9 cd f6 65 8b 05 2c f8 74 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 529.808349][ C0] RSP: 0018:ffffc90000005f00 EFLAGS: 00000206 [ 529.814433][ C0] RAX: dffffc0000000004 RBX: 0000000000000a02 RCX: 9a90f3329b961100 [ 529.822401][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: 0000000000000001 [ 529.830405][ C0] RBP: ffffc90000005f88 R08: ffffffff911c15c7 R09: 1ffffffff22382b8 [ 529.838516][ C0] R10: dffffc0000000000 R11: fffffbfff22382b9 R12: dffffc0000000000 [ 529.846503][ C0] R13: ffff8880309c0260 R14: ffffffff8d7ee620 R15: 1ffff92000000be0 [ 529.854479][ C0] FS: 00007f37d8c426c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 529.863404][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 529.870174][ C0] CR2: 0000000000000000 CR3: 000000001c3c2000 CR4: 00000000003506f0 [ 529.878153][ C0] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 529.886117][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 529.894104][ C0] Call Trace: [ 529.897514][ C0] [ 529.900375][ C0] ? _raw_spin_unlock+0x40/0x40 [ 529.905345][ C0] ? stack_trace_save+0xaa/0x100 [ 529.910382][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 529.915499][ C0] __stack_depot_save+0x560/0x630 [ 529.920526][ C0] kasan_set_track+0x5f/0x70 [ 529.925216][ C0] ? kasan_set_track+0x4e/0x70 [ 529.929972][ C0] ? kasan_save_free_info+0x2e/0x50 [ 529.935164][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 529.940456][ C0] ? slab_free_freelist_hook+0x130/0x1a0 [ 529.946182][ C0] ? kmem_cache_free+0xf8/0x270 [ 529.951049][ C0] ? packet_rcv+0x16b/0x13d0 [ 529.955635][ C0] ? dev_queue_xmit_nit+0xb16/0xbb0 [ 529.960824][ C0] ? dev_hard_start_xmit+0x148/0x740 [ 529.966114][ C0] ? sch_direct_xmit+0x25e/0x4c0 [ 529.971042][ C0] ? __dev_queue_xmit+0x165d/0x3660 [ 529.976236][ C0] ? ip_finish_output2+0xcec/0x11e0 [ 529.981515][ C0] ? ip_output+0x2a1/0x3b0 [ 529.985923][ C0] ? __ip_queue_xmit+0x1049/0x1950 [ 529.991037][ C0] ? __tcp_transmit_skb+0x1d6b/0x33f0 [ 529.996663][ C0] ? tcp_write_xmit+0x174c/0x62e0 [ 530.001681][ C0] ? __tcp_push_pending_frames+0x97/0x340 [ 530.007398][ C0] ? tcp_rcv_established+0xfb0/0x1d20 [ 530.012761][ C0] ? tcp_v4_do_rcv+0x4ed/0xb80 [ 530.017530][ C0] ? tcp_v4_rcv+0x23bf/0x2af0 [ 530.022203][ C0] ? ip_protocol_deliver_rcu+0x20e/0x3f0 [ 530.027831][ C0] ? ip_local_deliver_finish+0x2ca/0x510 [ 530.033459][ C0] ? NF_HOOK+0x32d/0x3b0 [ 530.037696][ C0] ? ip_sublist_rcv+0xa4c/0xd70 [ 530.042557][ C0] ? ip_list_rcv+0x3f2/0x440 [ 530.047164][ C0] ? __netif_receive_skb_list_core+0x583/0x750 [ 530.053314][ C0] ? netif_receive_skb_list_internal+0x943/0xca0 [ 530.059644][ C0] ? napi_gro_receive+0x565/0xb00 [ 530.064668][ C0] ? receive_buf+0x2203/0x3820 [ 530.069510][ C0] ? virtnet_poll+0x5dd/0x1280 [ 530.074357][ C0] ? __napi_poll+0xc0/0x460 [ 530.078970][ C0] ? net_rx_action+0x616/0xc40 [ 530.083751][ C0] ? handle_softirqs+0x280/0x820 [ 530.088694][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 530.093452][ C0] ? irq_exit_rcu+0x9/0x20 [ 530.097859][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 530.103665][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.110011][ C0] ? finish_task_switch+0x26a/0x8f0 [ 530.115211][ C0] ? __schedule+0x155b/0x45a0 [ 530.119910][ C0] ? preempt_schedule_irq+0xbf/0x150 [ 530.125300][ C0] ? irqentry_exit+0x67/0x70 [ 530.129916][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.136160][ C0] ? __sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 530.142331][ C0] ? perf_install_in_context+0x5c9/0x920 [ 530.147984][ C0] ? __se_sys_perf_event_open+0x1836/0x1c50 [ 530.153984][ C0] ? do_syscall_64+0x55/0xa0 [ 530.158599][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.164766][ C0] ? kmem_cache_free+0xf8/0x270 [ 530.169618][ C0] kasan_save_free_info+0x2e/0x50 [ 530.174641][ C0] ____kasan_slab_free+0x126/0x1e0 [ 530.179747][ C0] slab_free_freelist_hook+0x130/0x1a0 [ 530.185376][ C0] ? packet_rcv+0x16b/0x13d0 [ 530.190028][ C0] kmem_cache_free+0xf8/0x270 [ 530.194829][ C0] packet_rcv+0x16b/0x13d0 [ 530.199254][ C0] ? packet_sock_destruct+0x160/0x160 [ 530.204648][ C0] dev_queue_xmit_nit+0xb16/0xbb0 [ 530.209669][ C0] ? dev_queue_xmit_nit+0x2d/0xbb0 [ 530.214798][ C0] dev_hard_start_xmit+0x148/0x740 [ 530.219940][ C0] sch_direct_xmit+0x25e/0x4c0 [ 530.224711][ C0] ? mrp_pdu_parse_vecattr_event+0x2a0/0x2a0 [ 530.230693][ C0] __dev_queue_xmit+0x165d/0x3660 [ 530.235713][ C0] ? lapic_next_event+0x11/0x20 [ 530.240557][ C0] ? clockevents_program_event+0x230/0x310 [ 530.246366][ C0] ? __dev_queue_xmit+0x265/0x3660 [ 530.251473][ C0] ? mark_lock+0x94/0x320 [ 530.255828][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 530.261949][ C0] ? netdev_core_pick_tx+0x340/0x340 [ 530.267250][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.273407][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 530.278603][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.284752][ C0] ? ip_finish_output2+0xb04/0x11e0 [ 530.289946][ C0] ? ip_finish_output2+0x457/0x11e0 [ 530.295135][ C0] ip_finish_output2+0xcec/0x11e0 [ 530.300162][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.306330][ C0] ? ip_finish_output2+0x457/0x11e0 [ 530.311612][ C0] ? ip_fragment+0x210/0x210 [ 530.316196][ C0] ? ip_finish_output+0x192/0x4c0 [ 530.321309][ C0] ? ip_finish_output+0x3ef/0x4c0 [ 530.326332][ C0] ip_output+0x2a1/0x3b0 [ 530.330686][ C0] ? ip_output+0x60/0x3b0 [ 530.335008][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 530.339935][ C0] __ip_queue_xmit+0x1049/0x1950 [ 530.344869][ C0] ? ip_queue_xmit+0x3f/0x70 [ 530.349446][ C0] ? __ip_queue_xmit+0x5d/0x1950 [ 530.354377][ C0] __tcp_transmit_skb+0x1d6b/0x33f0 [ 530.359581][ C0] ? __tcp_send_ack+0x5a0/0x5a0 [ 530.364442][ C0] ? tcp_small_queue_check+0x201/0x400 [ 530.369895][ C0] tcp_write_xmit+0x174c/0x62e0 [ 530.374762][ C0] __tcp_push_pending_frames+0x97/0x340 [ 530.380302][ C0] tcp_rcv_established+0xfb0/0x1d20 [ 530.385491][ C0] ? rt_is_expired+0x1c/0x2d0 [ 530.390168][ C0] ? tcp_check_space+0xad0/0xad0 [ 530.395094][ C0] ? rt_is_expired+0x1c/0x2d0 [ 530.399769][ C0] ? rt_is_expired+0x250/0x2d0 [ 530.404529][ C0] tcp_v4_do_rcv+0x4ed/0xb80 [ 530.409125][ C0] tcp_v4_rcv+0x23bf/0x2af0 [ 530.413622][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 530.418983][ C0] ? tcp_v4_rcv+0x1091/0x2af0 [ 530.423675][ C0] ? tcp_filter+0x90/0x90 [ 530.428004][ C0] ip_protocol_deliver_rcu+0x20e/0x3f0 [ 530.433463][ C0] ? ip_local_deliver_finish+0x1cb/0x510 [ 530.439273][ C0] ip_local_deliver_finish+0x2ca/0x510 [ 530.444734][ C0] NF_HOOK+0x32d/0x3b0 [ 530.448902][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 530.453155][ C0] ? NF_HOOK+0x9f/0x3b0 [ 530.457403][ C0] ? ip_local_deliver+0x1b0/0x1b0 [ 530.462429][ C0] ? NF_HOOK+0x3b0/0x3b0 [ 530.466686][ C0] ? ip_local_deliver+0x122/0x1b0 [ 530.471821][ C0] ip_sublist_rcv+0xa4c/0xd70 [ 530.476503][ C0] ? ip_list_rcv+0x440/0x440 [ 530.481107][ C0] ? ip_rcv_core+0xdb0/0xdb0 [ 530.485704][ C0] ip_list_rcv+0x3f2/0x440 [ 530.490269][ C0] ? ip_rcv_finish+0x250/0x250 [ 530.495031][ C0] ? ip_rcv_finish+0x250/0x250 [ 530.499790][ C0] __netif_receive_skb_list_core+0x583/0x750 [ 530.505768][ C0] ? set_rps_cpu+0x6a0/0x6a0 [ 530.510350][ C0] ? read_tsc+0x9/0x20 [ 530.514415][ C0] netif_receive_skb_list_internal+0x943/0xca0 [ 530.520564][ C0] ? netif_receive_skb_list_internal+0x4b1/0xca0 [ 530.526896][ C0] ? dev_gro_receive+0x10ce/0x22c0 [ 530.532016][ C0] ? netif_receive_skb_core+0x230/0x230 [ 530.537576][ C0] napi_gro_receive+0x565/0xb00 [ 530.542447][ C0] receive_buf+0x2203/0x3820 [ 530.547059][ C0] ? virtnet_poll_tx+0x530/0x530 [ 530.551987][ C0] ? virtqueue_get_buf_ctx+0x697/0xd10 [ 530.557443][ C0] virtnet_poll+0x5dd/0x1280 [ 530.562040][ C0] ? refill_work+0x220/0x220 [ 530.566628][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.572779][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 530.577967][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.584123][ C0] __napi_poll+0xc0/0x460 [ 530.588454][ C0] net_rx_action+0x616/0xc40 [ 530.593152][ C0] ? net_tx_action+0x980/0x980 [ 530.597992][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 530.603193][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.609345][ C0] handle_softirqs+0x280/0x820 [ 530.614131][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 530.618891][ C0] ? do_softirq+0x1a0/0x1a0 [ 530.623404][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 530.628624][ C0] __irq_exit_rcu+0xd3/0x190 [ 530.633341][ C0] ? irq_exit_rcu+0x20/0x20 [ 530.637948][ C0] irq_exit_rcu+0x9/0x20 [ 530.642379][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 530.648060][ C0] [ 530.651046][ C0] [ 530.653976][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.659960][ C0] RIP: 0010:finish_task_switch+0x26a/0x8f0 [ 530.665852][ C0] Code: 0f 84 33 01 00 00 48 85 db 0f 85 52 01 00 00 0f 1f 44 00 00 4c 8b 75 d0 4c 89 e7 e8 00 54 31 09 e8 9b 23 30 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0 [ 530.685455][ C0] RSP: 0018:ffffc9000bf8f7d8 EFLAGS: 00000286 [ 530.691568][ C0] RAX: 9a90f3329b961100 RBX: 0000000000000000 RCX: 9a90f3329b961100 [ 530.699556][ C0] RDX: dffffc0000000000 RSI: ffffffff8acac960 RDI: ffffffff8b1c85a0 [ 530.707558][ C0] RBP: ffffc9000bf8f830 R08: ffffffff911c15ff R09: 1ffffffff22382bf [ 530.715551][ C0] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: ffff88802d435a00 [ 530.723523][ C0] R13: dffffc0000000000 R14: ffff8880227dbc00 R15: ffff8880b8e3cac8 [ 530.731609][ C0] ? finish_task_switch+0x265/0x8f0 [ 530.736832][ C0] __schedule+0x155b/0x45a0 [ 530.741344][ C0] ? perf_trace_run_bpf_submit+0xf4/0x1c0 [ 530.747116][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 530.753182][ C0] ? asan.module_dtor+0x20/0x20 [ 530.758055][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 530.763596][ C0] preempt_schedule_irq+0xbf/0x150 [ 530.768707][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 530.774476][ C0] ? lock_chain_count+0x20/0x20 [ 530.779341][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 530.785152][ C0] irqentry_exit+0x67/0x70 [ 530.789569][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 530.795549][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0x90 [ 530.802396][ C0] Code: 08 03 00 00 00 48 89 7c 11 10 48 89 74 11 18 48 89 44 11 20 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 a0 95 7c 7e 65 8b 0d a1 95 7c 7e 81 e1 00 01 ff 00 74 [ 530.822262][ C0] RSP: 0018:ffffc9000bf8fbd8 EFLAGS: 00000246 [ 530.828378][ C0] RAX: ffffffff81af6339 RBX: 0000000000000000 RCX: 0000000000080000 [ 530.836341][ C0] RDX: ffffc9000d57a000 RSI: 0000000000000000 RDI: 0000000000000000 [ 530.844322][ C0] RBP: ffffc9000bf8fd30 R08: ffffffff911c15ff R09: 1ffffffff22382bf [ 530.852291][ C0] R10: dffffc0000000000 R11: fffffbfff22382c0 R12: 1ffff11005a86b42 [ 530.860286][ C0] R13: ffff88802d435a14 R14: ffffc9000bf8fc60 R15: dffffc0000000000 [ 530.868291][ C0] ? perf_install_in_context+0x5c9/0x920 [ 530.873932][ C0] perf_install_in_context+0x5c9/0x920 [ 530.879409][ C0] ? exclusive_event_installable+0x2c0/0x2c0 [ 530.885390][ C0] ? add_event_to_ctx+0x1180/0x1180 [ 530.890588][ C0] ? exclusive_event_installable+0xd3/0x2c0 [ 530.896640][ C0] ? anon_inode_getfile+0x109/0x1a0 [ 530.901867][ C0] ? perf_event__header_size+0x165/0x220 [ 530.907619][ C0] __se_sys_perf_event_open+0x1836/0x1c50 [ 530.913440][ C0] ? __x64_sys_perf_event_open+0xc0/0xc0 [ 530.919080][ C0] ? lock_chain_count+0x20/0x20 [ 530.923969][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 530.929180][ C0] ? __x64_sys_perf_event_open+0x20/0xc0 [ 530.934839][ C0] do_syscall_64+0x55/0xa0 [ 530.939270][ C0] ? clear_bhb_loop+0x40/0x90 [ 530.943987][ C0] ? clear_bhb_loop+0x40/0x90 [ 530.948688][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 530.954595][ C0] RIP: 0033:0x7f37d7d9c799 [ 530.959067][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.978698][ C0] RSP: 002b:00007f37d8c42028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 530.987119][ C0] RAX: ffffffffffffffda RBX: 00007f37d8015fa0 RCX: 00007f37d7d9c799 [ 530.995091][ C0] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: 0000200000000140 [ 531.003054][ C0] RBP: 00007f37d7e32bd9 R08: 0000000000000002 R09: 0000000000000000 [ 531.011036][ C0] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 531.019007][ C0] R13: 00007f37d8016038 R14: 00007f37d8015fa0 R15: 00007ffcd6b0e958 [ 531.027010][ C0] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)