last executing test programs: 13.385976159s ago: executing program 1 (id=2723): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x41) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x8800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 11.134362333s ago: executing program 2 (id=2724): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB], 0x230}, 0x8042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b70300002400"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2b, 0x1, 0x0) 11.015804364s ago: executing program 3 (id=2726): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cc3f5a3203a29e3af3e09fedc1542a4e450cb29f0590afe4", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xa}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/6, 0x29, 0x6, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x100, 0x7, 0x5, 0x2002, r1, 0x7, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) sendmsg$tipc(r0, &(0x7f0000001a00)={&(0x7f00000018c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f0000001900), 0x0, &(0x7f0000001940)="85123761e8623615effee61e08361439ba62f8bec13412ba397e75e83008dcd3bc7e5da511219e44b9ff0bdc8fef660622426f063c748a129a6a124564f6f78c029a939b4b6f40e47414b00710873ca081376b7d14faa6625b8a802cb5d3bc59804ce4e4de0600b403bcdf12178ae6bb5478b32be45067b726c70b93ee26fd8f557ff1a57ed56375827b70513f507445d5fb9af012cc8d9746694091b17695b51d3ba16e279d24682ba72116d7603c83156f0ad1bf370d", 0xb7}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff66}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb61}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000030000000000000047b3d0fffd4ff1608fc8a007c8fc1bb3af09a8d31f657ea797f93c30531ddffc5168363fe52623a6a7e72ef89ca6eb0915c3c568d441afc604e074158b9cfb224f0e678bd0ac4a365dae96a8aeb31619daf1e1c10dbda9d2fdadf3f21a0596374b6776d790b34190b1f821bdb5cce04aec8a0404b7ddef55f87f12da7c256c384d1175c56252af39cbcbacf3a449d26bbf8ff477ad52672fe7de3bf729d1a930991e7ee0272c9503", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000300"/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x17, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x9f, &(0x7f00000009c0)=""/159, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[r8, r3, r8, r3, r8, r3, r8, r10, r3], &(0x7f0000000b00)=[{0x5, 0x2, 0xa}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x2, 0xc, 0x6}, {0x2, 0x1, 0x8, 0x4}, {0x0, 0x2, 0x6, 0x5}, {0x2, 0x3, 0xd, 0x5}], 0x10, 0x401}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$sock(r11, &(0x7f0000001880)={&(0x7f00000004c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="c88f15c4bcb03961fd7fa6c52c3f486e8eb6875adc1c31159aa8dfaa86845cfda2e84f352082", 0x1c}], 0x1, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x20008000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0xfffffebb) 11.002153395s ago: executing program 1 (id=2727): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x0, 0x20000, 0x0, 0x6832, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) 10.278861086s ago: executing program 1 (id=2728): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 10.247967476s ago: executing program 2 (id=2729): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0xffffffffffffff16, 0x0}, 0x44080) sendmsg(r0, &(0x7f0000003680)={0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000002d80)="0f", 0x1}, {0x0, 0x2}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0, 0x4d}, {0x0}], 0x9}, 0x0) 9.909285621s ago: executing program 2 (id=2731): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x100, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0x1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@fwd={0x3}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @ptr={0x4}, @struct={0xb, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x7, 0x3, 0x16}, {0x5, 0x4, 0x9}, {0xc, 0x4, 0xfffffff7}, {0x8, 0x3, 0x8}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x80000000}}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000a40)=""/161, 0xb0, 0xa1, 0x1, 0xe802}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x11, &(0x7f00000006c0)=@raw=[@alu={0x7, 0x1, 0x0, 0xa, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @ldst={0x1, 0x1, 0x1, 0xa, 0x8, 0x50, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0x10, 0x80000002, 0x6}, 0x10, 0x2e66b, 0xffffffffffffffff, 0x4, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x0, 0x1, 0x10, 0x7}, {0x5, 0x4, 0x9}, {0x1, 0x4, 0x3, 0x6}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x6f28}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000000), 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000004000000007d2e00"], 0x0, 0x1c, 0x0, 0x1, 0x6}, 0x28) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x617e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 9.192719792s ago: executing program 3 (id=2733): perf_event_open(&(0x7f0000000480)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x85d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x18a30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe47, 0x0, 0x3}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32, @ANYBLOB='u\x00'/20, @ANYRES32=0x0, @ANYBLOB="0000000004000000050000000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYRES32], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="a5c439b2719d03dd87f482c8ca4a864292774c4a6d3b2d290a2c74475e8b84df5a"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000640)={r2}, 0x70) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5c00000014006b030231a6080c000af32c00e3f629c7b091ea1638d40df9056873fd7dc72e13bbb44a16d1009dfff1fc0000f800250f02000f00edaa000057d34060bc24cdb556bd05251e6194949a27", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000800000040000000400000004000000", @ANYRES32=0x1, @ANYBLOB="010000000000000000000008446b19384ff94c4e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f00000009c0)=ANY=[@ANYBLOB="9feb01001800000000000000d2000000d2000000040000000f0000000500000f02000000020000000800000000000000030000000100000000100000030000000700000000040000030000000700000007000000010000000d00000092815167d9a70f000000000000120300000007000000090000020400000007000000450600000900000003000000080000000800000010000000ff01000006000000090000000c0000009100000007000000020000000d0000000900000002000000ff7f00001000000000000002030000000d0000000000000c04000000010000000000000e0200000002000000000000002e000653bbf8b8a89ae2d2473b46ae5391cb1d5e3cbea8f072a97cf315965c8ef5643a"], &(0x7f0000000380)=""/161, 0xf0, 0xa1, 0x1, 0x4}, 0x28) r3 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(r3, 0x0, 0x4045) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x14, &(0x7f0000000440)=[{&(0x7f0000000280)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fe80000000000e1208000f0100a10401a80016eaa4000640fefffffeffffffffb94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c817bd6c496ddffaa2795edb1e61e0100000000000000cb090000001fb791643a5ee4001b14547df36745d6d930dfe1d9d322fe7c9fd68775730d96a4683f5aeb4edbb57a5025ccca9e00158c89ed6cb4d1ac95e7765e04c2360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b4", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r5 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0xfffffffd, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x80, 0x0}, 0x20000001) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700"], 0xfe33) perf_event_open(&(0x7f0000000780)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xa, &(0x7f0000000180), 0x4) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x12, 0x15, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x3, 0xbe, &(0x7f00000003c0)=""/190, 0x60880, 0x20, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="d8000000210081044e81f782db44b9040200000000806c0100001500100014000000001209000d2000000401a80018000a000e4006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee062e1c547cbc7225e6756cfb39b0590b4800089e408e8d8ef52b49816277cf4090000001fb791643a5ee4ce1b14d6d930dfe1d9db22fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db701000000eafad95667e006dcdf969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d939acd92637429397f632838", 0xd8}], 0x1}, 0x0) 9.176764542s ago: executing program 2 (id=2734): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r3, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 7.34006673s ago: executing program 1 (id=2736): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x41) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) 7.31283393s ago: executing program 3 (id=2737): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e00000000"], 0x230}, 0x8042) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b70300002400"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2b, 0x1, 0x0) 7.137186962s ago: executing program 0 (id=2738): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) recvmsg(r1, 0x0, 0x40000042) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x400}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0xa, 0x7, 0x106) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x20000801) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) 6.533903052s ago: executing program 0 (id=2739): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x0, 0x20000, 0x0, 0x6832, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) 6.336540565s ago: executing program 0 (id=2740): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="fe112162c63e6da8bc8432294ef18af53cc330a62a2c7035246635093ba4d30fcf19a90804f04a10939db8f4e13069cda6d167bf1b68c94d8d694d6ad1a4d51a715975560ad48770706eb1b88d021e1119f2eb75275cfe77f862368649be0f7aff5e7826729816e3d3e7986d9434f891c71ca6e4210c6757083cfd8e732048c504f28b6d309fc129ed8eb5a82e224eb648f90134d1d315977c6ea360a7fece4baa3dd7dcc970759f29df0e86469e954e2b050e87b203ca27a2a519b7555c3b73f2681d49442d9647ff5ea64110cc5020fdeafe53a7d8be70f3260816bc376bcdc5352771fa55d9733e27730ec7103520e8359c78edd21ee6c68feb3685a55722f5da09ffe8ba9f05081a8d214156376f99906245f2f390ad717979d98f0574f8c5b52dcc2fa494f461be6c2560ddbaafb80c5b4583cbe56d24f14ab78fd718947077ea736251c7b8eee267267534c84daa6f095e94bfb85986a03ddea362cc7e6682884e710727c1163cd4f336c13b844605b7a815fe39e43bd0d2e414410a82958455b8a6bd9194c631d66295675fed64c04107a595c421111a3af6e9fadab5c9", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xf}], 0x3}, 0x0) 2.897228026s ago: executing program 3 (id=2741): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cc3f5a3203a29e3af3e09fedc1542a4e450cb29f0590afe4", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xa}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/6, 0x29, 0x6, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x100, 0x7, 0x5, 0x2002, r1, 0x7, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) sendmsg$tipc(r0, &(0x7f0000001a00)={&(0x7f00000018c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f0000001900), 0x0, &(0x7f0000001940)="85123761e8623615effee61e08361439ba62f8bec13412ba397e75e83008dcd3bc7e5da511219e44b9ff0bdc8fef660622426f063c748a129a6a124564f6f78c029a939b4b6f40e47414b00710873ca081376b7d14faa6625b8a802cb5d3bc59804ce4e4de0600b403bcdf12178ae6bb5478b32be45067b726c70b93ee26fd8f557ff1a57ed56375827b70513f507445d5fb9af012cc8d9746694091b17695b51d3ba16e279d24682ba72116d7603c83156f0ad1bf370d", 0xb7}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff66}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb61}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000030000000000000047b3d0fffd4ff1608fc8a007c8fc1bb3af09a8d31f657ea797f93c30531ddffc5168363fe52623a6a7e72ef89ca6eb0915c3c568d441afc604e074158b9cfb224f0e678bd0ac4a365dae96a8aeb31619daf1e1c10dbda9d2fdadf3f21a0596374b6776d790b34190b1f821bdb5cce04aec8a0404b7ddef55f87f12da7c256c384d1175c56252af39cbcbacf3a449d26bbf8ff477ad52672fe7de3bf729d1a930991e7ee0272c9503", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000300"/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x17, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x9f, &(0x7f00000009c0)=""/159, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x5, 0x2, 0xa}, {0x2, 0x7, 0xc, 0x1}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x2, 0xc, 0x6}, {0x2, 0x1, 0x8, 0x4}, {0x0, 0x2, 0x6, 0x5}, {0x2, 0x3, 0xd, 0x5}], 0x10, 0x401}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$sock(r11, &(0x7f0000001880)={&(0x7f00000004c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="c88f15c4bcb03961fd7fa6c52c3f486e8eb6875adc1c31159aa8dfaa86845cfda2e84f352082", 0x1c}], 0x1, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x20008000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0xfffffebb) 2.893167636s ago: executing program 0 (id=2749): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b70300002400"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2b, 0x1, 0x0) 2.826972367s ago: executing program 2 (id=2742): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cc3f5a3203a29e3af3e09fedc1542a4e450cb29f0590afe4", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xa}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/6, 0x29, 0x6, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x100, 0x7, 0x5, 0x2002, r1, 0x7, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) sendmsg$tipc(r0, &(0x7f0000001a00)={&(0x7f00000018c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f0000001900), 0x0, &(0x7f0000001940)="85123761e8623615effee61e08361439ba62f8bec13412ba397e75e83008dcd3bc7e5da511219e44b9ff0bdc8fef660622426f063c748a129a6a124564f6f78c029a939b4b6f40e47414b00710873ca081376b7d14faa6625b8a802cb5d3bc59804ce4e4de0600b403bcdf12178ae6bb5478b32be45067b726c70b93ee26fd8f557ff1a57ed56375827b70513f507445d5fb9af012cc8d9746694091b17695b51d3ba16e279d24682ba72116d7603c83156f0ad1bf370d", 0xb7}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff66}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb61}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000030000000000000047b3d0fffd4ff1608fc8a007c8fc1bb3af09a8d31f657ea797f93c30531ddffc5168363fe52623a6a7e72ef89ca6eb0915c3c568d441afc604e074158b9cfb224f0e678bd0ac4a365dae96a8aeb31619daf1e1c10dbda9d2fdadf3f21a0596374b6776d790b34190b1f821bdb5cce04aec8a0404b7ddef55f87f12da7c256c384d1175c56252af39cbcbacf3a449d26bbf8ff477ad52672fe7de3bf729d1a930991e7ee0272c9503", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000300"/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x17, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x9f, &(0x7f00000009c0)=""/159, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000ac0)=[r8, r3, r8, r3, r8, r3, r8, r10, r3], &(0x7f0000000b00)=[{0x2, 0x7, 0xc, 0x1}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x2, 0xc, 0x6}, {0x2, 0x1, 0x8, 0x4}, {0x0, 0x2, 0x6, 0x5}, {0x2, 0x3, 0xd, 0x5}], 0x10, 0x401}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$sock(r11, &(0x7f0000001880)={&(0x7f00000004c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="c88f15c4bcb03961fd7fa6c52c3f486e8eb6875adc1c31159aa8dfaa86845cfda2e84f352082", 0x1c}], 0x1, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x20008000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0xfffffebb) 2.800118308s ago: executing program 1 (id=2743): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x101d0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0xfffe, 0x0, 0x100, 0x0, 0x2009}, 0x0, 0xfffffffffffffffb, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000940)={0x1, 0x58, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000980)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x94, 0x94, 0x4, [@fwd={0x3}, @float={0x2, 0x0, 0x0, 0x10, 0x8}, @ptr={0x4}, @struct={0xb, 0x4, 0x0, 0x4, 0x0, 0x2, [{0x7, 0x3, 0x16}, {0x5, 0x4, 0x9}, {0xc, 0x4, 0xfffffff7}, {0x8, 0x3, 0x8}]}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x4, 0x5}, @restrict={0x6, 0x0, 0x0, 0xb, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x80000000}}]}, {0x0, [0x30, 0x0]}}, &(0x7f0000000a40)=""/161, 0xb0, 0xa1, 0x1, 0xe802}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d00)=@bpf_ext={0x1c, 0x11, &(0x7f00000006c0)=@raw=[@alu={0x7, 0x1, 0x0, 0xa, 0xb, 0xfffffffffffffffc, 0xfffffffffffffffc}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @ldst={0x1, 0x1, 0x1, 0xa, 0x8, 0x50, 0x10}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x20, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x4, 0x10, 0x80000002, 0x6}, 0x10, 0x2e66b, 0xffffffffffffffff, 0x4, &(0x7f0000000c80)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000cc0)=[{0x0, 0x1, 0x10, 0x7}, {0x5, 0x4, 0x9}, {0x1, 0x4, 0x3, 0x6}, {0x0, 0x3, 0x5, 0x7}], 0x10, 0x6f28}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r6, 0x84, 0x1f, &(0x7f0000000000), 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0x1, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40e00, 0x0, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000000000000000000004000000007d2e00"], 0x0, 0x1c, 0x0, 0x1, 0x6}, 0x28) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x617e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) 689.235449ms ago: executing program 0 (id=2744): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x0, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x3, 0x3, 0x0, 0x8, 0x20, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x8) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={0x0, 0x9}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8982, &(0x7f0000000080)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)=ANY=[@ANYRES32], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x2, 0x88) recvmsg(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x41) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x28, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={&(0x7f0000000180)=@isdn={0x22, 0x3, 0x7f, 0xf, 0x7}, 0x80, 0x0}, 0x20000842) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80800, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000001540), 0x8800, 0x0) ioctl$TUNDETACHFILTER(r4, 0x401054d6, 0x0) 642.38931ms ago: executing program 3 (id=2753): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b70300002400"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2b, 0x1, 0x0) 640.09588ms ago: executing program 2 (id=2745): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000cc3f5a3203a29e3af3e09fedc1542a4e450cb29f0590afe4", @ANYRES32, @ANYBLOB='\f\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@volatile={0xa}]}, {0x0, [0x0, 0x0, 0x0]}}, &(0x7f0000000340)=""/6, 0x29, 0x6, 0x1, 0x0, 0x10000}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x9, 0x100, 0x7, 0x5, 0x2002, r1, 0x7, '\x00', 0x0, r2, 0x1, 0x5}, 0x50) sendmsg$tipc(r0, &(0x7f0000001a00)={&(0x7f00000018c0)=@id={0x1e, 0x3, 0x3, {0x4e24, 0x4}}, 0x10, &(0x7f0000001900), 0x0, &(0x7f0000001940)="85123761e8623615effee61e08361439ba62f8bec13412ba397e75e83008dcd3bc7e5da511219e44b9ff0bdc8fef660622426f063c748a129a6a124564f6f78c029a939b4b6f40e47414b00710873ca081376b7d14faa6625b8a802cb5d3bc59804ce4e4de0600b403bcdf12178ae6bb5478b32be45067b726c70b93ee26fd8f557ff1a57ed56375827b70513f507445d5fb9af012cc8d9746694091b17695b51d3ba16e279d24682ba72116d7603c83156f0ad1bf370d", 0xb7}, 0x40000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff66}, 0x94) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711808000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r7 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x6, 0xb61}, 0x828, 0x0, 0x0, 0x3, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x25, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="1b0000000000000000000000030000000000000047b3d0fffd4ff1608fc8a007c8fc1bb3af09a8d31f657ea797f93c30531ddffc5168363fe52623a6a7e72ef89ca6eb0915c3c568d441afc604e074158b9cfb224f0e678bd0ac4a365dae96a8aeb31619daf1e1c10dbda9d2fdadf3f21a0596374b6776d790b34190b1f821bdb5cce04aec8a0404b7ddef55f87f12da7c256c384d1175c56252af39cbcbacf3a449d26bbf8ff477ad52672fe7de3bf729d1a930991e7ee0272c9503", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="00000000030000000300"/28], 0x50) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0xb2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0x17, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x9f, &(0x7f00000009c0)=""/159, 0x40f00, 0x4, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000a80)={0x2, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000ac0)=[r8, r3, r8, r3, r8, r3, r10, r3], &(0x7f0000000b00)=[{0x5, 0x2, 0xa}, {0x2, 0x7, 0xc, 0x1}, {0x3, 0x4, 0x7, 0x8}, {0x0, 0x2, 0xc, 0x6}, {0x2, 0x1, 0x8, 0x4}, {0x0, 0x2, 0x6, 0x5}, {0x2, 0x3, 0xd, 0x5}], 0x10, 0x401}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$sock(r11, &(0x7f0000001880)={&(0x7f00000004c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="c88f15c4bcb03961fd7fa6c52c3f486e8eb6875adc1c31159aa8dfaa86845cfda2e84f352082", 0x1c}], 0x1, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x20008000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r8}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00', 0x2000000}, 0x20) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0xfffffebb) 580.430041ms ago: executing program 1 (id=2746): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x8042) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r1, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000840)="5400000037000b63d25a80648c2594f90a24fc601aed7123219afe6b298d4b12e74036397bc5f26e76cf89e67659fc0ed8b5818bfb0047debc8d1c5038b75d8263cc993a20fd1a077994eddcd264498606085c79", 0x54}], 0x1}, 0x24004800) ioctl$SIOCSIFHWADDR(r2, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0x2b, 0x1, 0x0) 278.690806ms ago: executing program 0 (id=2747): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x61}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, 0x0, 0x0) recvmsg(r1, 0x0, 0x40000042) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x400}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) socket$kcm(0xa, 0x7, 0x106) bpf$ITER_CREATE(0x21, &(0x7f00000002c0), 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r5, 0x0, 0x20000801) socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000", 0x2c}], 0x1}, 0x0) 0s ago: executing program 3 (id=2748): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x0, 0x20000, 0x0, 0x6832, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}, 0x0) kernel console output (not intermixed with test programs): k: zone id is out of range [ 521.528185][T10158] netlink: zone id is out of range [ 521.533325][T10158] netlink: zone id is out of range [ 521.550254][T10158] netlink: zone id is out of range [ 521.555442][T10158] netlink: zone id is out of range [ 521.561127][T10158] netlink: zone id is out of range [ 521.566286][T10158] netlink: zone id is out of range [ 521.574801][T10158] netlink: zone id is out of range [ 522.848767][T10165] netlink: 'syz.3.1588': attribute type 10 has an invalid length. [ 522.925127][T10161] netlink: 'syz.1.1596': attribute type 9 has an invalid length. [ 522.955388][T10161] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1596'. [ 523.488935][T10169] netlink: 'syz.0.1598': attribute type 9 has an invalid length. [ 523.514632][T10169] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1598'. [ 523.542508][T10176] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.1591'. [ 523.854032][T10182] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1602'. [ 524.080956][T10187] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.1594'. [ 524.092346][T10187] netlink: 'syz.1.1594': attribute type 1 has an invalid length. [ 524.107584][T10187] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.1594'. [ 524.197418][T10185] netlink: 'syz.2.1593': attribute type 9 has an invalid length. [ 524.215071][T10185] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1593'. [ 524.383945][T10188] netlink: 'syz.1.1594': attribute type 28 has an invalid length. [ 524.392796][T10188] netlink: 'syz.1.1594': attribute type 29 has an invalid length. [ 524.410886][T10188] __nla_validate_parse: 2 callbacks suppressed [ 524.410921][T10188] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1594'. [ 524.704276][T10197] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1597'. [ 524.725814][T10197] netlink: 'syz.2.1597': attribute type 1 has an invalid length. [ 524.737026][T10197] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.1597'. [ 524.748520][T10195] netlink: 'syz.0.1607': attribute type 9 has an invalid length. [ 524.760498][T10195] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1607'. [ 525.022610][T10204] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1597'. [ 525.051203][T10200] netlink: 'syz.2.1597': attribute type 28 has an invalid length. [ 525.059326][T10200] netlink: 'syz.2.1597': attribute type 29 has an invalid length. [ 525.069280][T10200] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1597'. [ 525.155418][T10203] netlink: 'syz.3.1600': attribute type 9 has an invalid length. [ 525.175759][T10203] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1600'. [ 525.514115][T10207] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1603'. [ 525.526507][T10207] netlink: 'syz.0.1603': attribute type 1 has an invalid length. [ 525.537710][T10207] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.1603'. [ 525.578903][T10207] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1603'. [ 527.585583][T10233] net_ratelimit: 139 callbacks suppressed [ 527.585620][T10233] netlink: zone id is out of range [ 527.603147][T10233] netlink: zone id is out of range [ 527.610095][T10233] netlink: zone id is out of range [ 527.616082][T10233] netlink: zone id is out of range [ 527.633918][T10233] netlink: zone id is out of range [ 527.644006][T10233] netlink: zone id is out of range [ 527.652069][T10233] netlink: zone id is out of range [ 527.662973][T10233] netlink: zone id is out of range [ 527.673044][T10233] netlink: zone id is out of range [ 527.681011][T10233] netlink: zone id is out of range [ 529.734647][T10259] syzkaller0: entered promiscuous mode [ 529.742768][T10259] syzkaller0: entered allmulticast mode [ 529.800090][T10261] syzkaller0: entered promiscuous mode [ 529.805636][T10261] syzkaller0: entered allmulticast mode [ 530.232202][T10270] validate_nla: 18 callbacks suppressed [ 530.232607][T10270] netlink: 'syz.1.1629': attribute type 9 has an invalid length. [ 530.246925][T10270] __nla_validate_parse: 24 callbacks suppressed [ 530.247002][T10270] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1629'. [ 532.522946][T10287] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.1635'. [ 533.395668][T10272] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1630'. [ 533.608111][T10295] netlink: 'syz.2.1637': attribute type 10 has an invalid length. [ 533.955680][T10305] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.1641'. [ 533.971402][T10305] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 533.983139][T10305] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.1641'. [ 534.136582][T10305] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1641'. [ 534.153717][T10305] netlink: 'syz.2.1641': attribute type 28 has an invalid length. [ 534.162691][T10305] netlink: 'syz.2.1641': attribute type 29 has an invalid length. [ 534.171845][T10305] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1641'. [ 534.203466][T10309] netlink: 'syz.1.1642': attribute type 9 has an invalid length. [ 534.252815][T10309] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1642'. [ 535.048071][T10327] syzkaller0: entered promiscuous mode [ 535.063228][T10327] syzkaller0: entered allmulticast mode [ 535.087331][T10330] netlink: 'syz.2.1649': attribute type 9 has an invalid length. [ 535.122013][T10330] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1649'. [ 535.141764][T10319] syzkaller0: entered promiscuous mode [ 535.147295][T10319] syzkaller0: entered allmulticast mode [ 535.245339][T10337] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1651'. [ 536.213987][T10345] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1653'. [ 536.224313][T10345] net_ratelimit: 38 callbacks suppressed [ 536.224329][T10345] netlink: zone id is out of range [ 536.235616][T10345] netlink: zone id is out of range [ 536.254046][T10345] netlink: zone id is out of range [ 536.259410][T10345] netlink: zone id is out of range [ 536.270518][T10345] netlink: zone id is out of range [ 536.290302][T10345] netlink: zone id is out of range [ 536.296609][T10345] netlink: zone id is out of range [ 536.305155][T10345] netlink: zone id is out of range [ 536.310847][T10345] netlink: zone id is out of range [ 536.316201][T10345] netlink: zone id is out of range [ 538.879583][T10356] netlink: 'syz.3.1656': attribute type 9 has an invalid length. [ 538.896633][T10356] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1656'. [ 539.531273][T10370] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1661'. [ 539.541093][T10358] netlink: 'syz.2.1664': attribute type 9 has an invalid length. [ 539.553472][T10358] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1664'. [ 539.632787][T10372] syzkaller0: entered promiscuous mode [ 539.640410][T10372] syzkaller0: entered allmulticast mode [ 540.145406][T10382] netlink: 'syz.0.1665': attribute type 28 has an invalid length. [ 540.159521][T10382] netlink: 'syz.0.1665': attribute type 29 has an invalid length. [ 540.172843][T10382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1665'. [ 540.409400][T10381] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1665'. [ 540.427565][T10378] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1665'. [ 542.297269][T10378] netlink: 'syz.0.1665': attribute type 1 has an invalid length. [ 542.305686][T10378] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.1665'. [ 542.320873][T10390] netlink: 'syz.2.1667': attribute type 10 has an invalid length. [ 542.805188][T10406] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1672'. [ 542.805226][T10408] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1673'. [ 542.841400][T10406] net_ratelimit: 14 callbacks suppressed [ 542.841436][T10406] netlink: zone id is out of range [ 542.854180][T10406] netlink: zone id is out of range [ 542.860238][T10406] netlink: zone id is out of range [ 542.865539][T10406] netlink: zone id is out of range [ 542.870958][T10406] netlink: zone id is out of range [ 542.876256][T10406] netlink: zone id is out of range [ 542.883397][T10406] netlink: zone id is out of range [ 542.893576][T10406] netlink: zone id is out of range [ 542.903866][T10406] netlink: zone id is out of range [ 542.918970][T10406] netlink: zone id is out of range [ 543.921420][T10439] syzkaller0: entered promiscuous mode [ 543.938656][T10439] syzkaller0: entered allmulticast mode [ 544.543618][T10444] netlink: 'syz.3.1685': attribute type 9 has an invalid length. [ 544.552522][T10444] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1685'. [ 544.779852][T10454] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1687'. [ 545.957873][T10450] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1686'. [ 547.250306][T10463] netlink: 'syz.3.1690': attribute type 10 has an invalid length. [ 547.605168][T10478] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1697'. [ 547.706378][T10483] netlink: 'syz.3.1699': attribute type 9 has an invalid length. [ 547.716331][T10483] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1699'. [ 548.053929][T10490] netlink: 'syz.1.1702': attribute type 10 has an invalid length. [ 548.088290][T10490] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1702'. [ 548.104036][T10490] bridge0: port 5(dummy0) entered blocking state [ 548.115389][T10490] bridge0: port 5(dummy0) entered disabled state [ 548.122446][T10490] dummy0: entered allmulticast mode [ 548.137076][T10490] dummy0: entered promiscuous mode [ 548.149326][T10490] bridge0: port 5(dummy0) entered blocking state [ 548.155894][T10490] bridge0: port 5(dummy0) entered forwarding state [ 548.529775][T10501] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1708'. [ 548.577237][T10501] netlink: 'syz.0.1708': attribute type 1 has an invalid length. [ 548.618509][T10501] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.1708'. [ 548.688017][T10501] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1708'. [ 548.768754][T10507] netlink: 'syz.3.1709': attribute type 9 has an invalid length. [ 548.777311][T10507] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1709'. [ 549.858740][T10518] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1714'. [ 549.881562][T10520] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1715'. [ 549.900159][T10520] net_ratelimit: 38 callbacks suppressed [ 549.900192][T10520] netlink: zone id is out of range [ 549.937167][T10520] netlink: zone id is out of range [ 549.944951][T10520] netlink: zone id is out of range [ 549.978653][T10520] netlink: zone id is out of range [ 549.984170][T10520] netlink: zone id is out of range [ 550.024611][T10520] netlink: zone id is out of range [ 550.033555][T10520] netlink: zone id is out of range [ 550.040192][T10520] netlink: zone id is out of range [ 550.055830][T10520] netlink: zone id is out of range [ 550.065550][T10520] netlink: zone id is out of range [ 550.130295][T10526] netlink: 'syz.0.1717': attribute type 9 has an invalid length. [ 550.140969][T10526] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1717'. [ 550.756955][T10538] netlink: 'syz.1.1721': attribute type 9 has an invalid length. [ 552.283489][T10571] netlink: 'syz.1.1734': attribute type 9 has an invalid length. [ 552.781564][T10582] netlink: 'syz.3.1739': attribute type 9 has an invalid length. [ 552.805906][T10582] __nla_validate_parse: 5 callbacks suppressed [ 552.806035][T10582] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1739'. [ 553.173524][T10588] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1742'. [ 553.244069][T10596] netlink: 'syz.0.1744': attribute type 10 has an invalid length. [ 554.523311][T10609] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1750'. [ 554.843117][T10625] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1755'. [ 554.923031][T10631] netlink: 'syz.0.1757': attribute type 10 has an invalid length. [ 554.932917][T10623] netlink: 'syz.2.1756': attribute type 9 has an invalid length. [ 554.979742][T10623] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1756'. [ 556.324593][T10647] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1764'. [ 556.354002][T10647] net_ratelimit: 62 callbacks suppressed [ 556.354042][T10647] netlink: zone id is out of range [ 556.377771][T10647] netlink: zone id is out of range [ 556.411704][T10647] netlink: zone id is out of range [ 556.422085][T10647] netlink: zone id is out of range [ 556.437102][T10647] netlink: zone id is out of range [ 556.458784][T10647] netlink: zone id is out of range [ 556.464263][T10647] netlink: zone id is out of range [ 556.467023][T10653] netlink: 'syz.2.1766': attribute type 9 has an invalid length. [ 556.472865][T10647] netlink: zone id is out of range [ 556.485271][T10653] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1766'. [ 556.495685][T10647] netlink: zone id is out of range [ 556.495759][T10647] netlink: zone id is out of range [ 556.987331][T10662] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1767'. [ 557.377126][T10680] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1775'. [ 557.402911][T10676] netlink: 'syz.0.1772': attribute type 9 has an invalid length. [ 557.418889][T10676] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1772'. [ 558.005850][T10687] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1778'. [ 558.681040][T10701] netlink: 'syz.2.1782': attribute type 9 has an invalid length. [ 558.689544][T10701] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1782'. [ 559.381487][T10698] netlink: 'syz.0.1789': attribute type 9 has an invalid length. [ 559.392142][T10698] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1789'. [ 560.132195][T10724] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1790'. [ 560.370098][T10733] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1792'. [ 560.891657][T10737] netlink: 'syz.0.1795': attribute type 9 has an invalid length. [ 560.911770][T10737] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1795'. [ 561.512735][T10746] syzkaller0: entered promiscuous mode [ 561.522352][T10746] syzkaller0: entered allmulticast mode [ 561.959071][T10768] netlink: 'syz.0.1803': attribute type 9 has an invalid length. [ 561.967350][T10768] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1803'. [ 563.191792][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.200229][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.888928][T10769] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1804'. [ 563.985971][T10776] netlink: 'syz.3.1806': attribute type 9 has an invalid length. [ 564.007861][T10776] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1806'. [ 564.212048][T10781] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1807'. [ 564.244925][T10781] net_ratelimit: 86 callbacks suppressed [ 564.244943][T10781] netlink: zone id is out of range [ 564.266090][T10781] netlink: zone id is out of range [ 564.292918][T10781] netlink: zone id is out of range [ 564.311299][T10781] netlink: zone id is out of range [ 564.327607][T10781] netlink: zone id is out of range [ 564.332917][T10781] netlink: zone id is out of range [ 564.346465][T10781] netlink: zone id is out of range [ 564.367904][T10781] netlink: zone id is out of range [ 564.378780][T10781] netlink: zone id is out of range [ 564.400108][T10781] netlink: zone id is out of range [ 564.458825][T10791] netlink: 'syz.1.1811': attribute type 10 has an invalid length. [ 564.866511][T10795] syzkaller0: entered promiscuous mode [ 564.886662][T10795] syzkaller0: entered allmulticast mode [ 564.909895][T10803] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1815'. [ 565.092924][T10805] netlink: 'syz.1.1816': attribute type 9 has an invalid length. [ 565.121991][T10805] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1816'. [ 566.607189][T10813] netlink: 'syz.2.1818': attribute type 9 has an invalid length. [ 566.630416][T10813] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1818'. [ 567.180849][T10835] netlink: 'syz.3.1825': attribute type 10 has an invalid length. [ 567.230977][T10832] netlink: 'syz.1.1826': attribute type 9 has an invalid length. [ 567.260831][T10832] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1826'. [ 567.280621][T10828] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.1824'. [ 568.215121][T10840] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1827'. [ 568.427008][T10842] syzkaller0: entered promiscuous mode [ 568.437564][T10842] syzkaller0: entered allmulticast mode [ 568.532395][T10855] netlink: 'syz.2.1831': attribute type 9 has an invalid length. [ 568.548433][T10855] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1831'. [ 568.572573][T10847] syzkaller0: entered promiscuous mode [ 568.578420][T10847] syzkaller0: entered allmulticast mode [ 571.726891][T10878] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 571.816296][T10871] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1837'. [ 571.913057][T10871] net_ratelimit: 38 callbacks suppressed [ 571.913148][T10871] netlink: zone id is out of range [ 571.937915][T10871] netlink: zone id is out of range [ 571.960559][T10871] netlink: zone id is out of range [ 571.966815][T10871] netlink: zone id is out of range [ 572.012725][T10871] netlink: zone id is out of range [ 572.018928][T10871] netlink: zone id is out of range [ 572.024652][T10871] netlink: zone id is out of range [ 572.067879][T10871] netlink: zone id is out of range [ 572.073423][T10871] netlink: zone id is out of range [ 572.093700][T10871] netlink: zone id is out of range [ 572.849292][T10891] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1844'. [ 573.070464][T10895] syzkaller0: entered promiscuous mode [ 573.076559][T10895] syzkaller0: entered allmulticast mode [ 573.144847][T10896] syzkaller0: entered promiscuous mode [ 573.151383][T10896] syzkaller0: entered allmulticast mode [ 573.302816][T10911] netlink: 'syz.1.1851': attribute type 9 has an invalid length. [ 573.311234][T10911] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1851'. [ 576.292134][T10914] syzkaller0: entered promiscuous mode [ 576.312388][T10914] syzkaller0: entered allmulticast mode [ 576.401493][T10926] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1852'. [ 577.110955][T10936] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.1855'. [ 577.128042][T10936] net_ratelimit: 38 callbacks suppressed [ 577.128059][T10936] netlink: zone id is out of range [ 577.139912][T10936] netlink: zone id is out of range [ 577.145070][T10936] netlink: zone id is out of range [ 577.150563][T10936] netlink: zone id is out of range [ 577.155709][T10936] netlink: zone id is out of range [ 577.161292][T10936] netlink: zone id is out of range [ 577.166479][T10936] netlink: zone id is out of range [ 577.172228][T10936] netlink: zone id is out of range [ 577.177386][T10936] netlink: zone id is out of range [ 577.190987][T10936] netlink: zone id is out of range [ 578.341878][T10935] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1857'. [ 578.724645][T10945] netlink: 'syz.3.1862': attribute type 9 has an invalid length. [ 578.750340][T10945] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.1862'. [ 579.329406][T10947] syzkaller0: entered promiscuous mode [ 579.335520][T10947] syzkaller0: entered allmulticast mode [ 579.359285][T10959] netlink: 'syz.0.1865': attribute type 10 has an invalid length. [ 579.427105][T10948] netlink: 'syz.1.1863': attribute type 9 has an invalid length. [ 579.459530][T10948] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1863'. [ 581.183213][T10968] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.1867'. [ 581.374948][T10966] syzkaller0: entered promiscuous mode [ 581.398216][T10966] syzkaller0: entered allmulticast mode [ 582.238956][T10989] ref_ctr_offset mismatch. inode: 0x42 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 582.602586][T10995] netlink: 'syz.1.1875': attribute type 9 has an invalid length. [ 582.615921][T10995] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1875'. [ 584.018320][T10999] syzkaller0: entered promiscuous mode [ 584.023913][T10999] syzkaller0: entered allmulticast mode [ 584.283997][T11015] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.1878'. [ 584.294412][T11015] net_ratelimit: 14 callbacks suppressed [ 584.294429][T11015] netlink: zone id is out of range [ 584.312973][T11015] netlink: zone id is out of range [ 584.319196][T11015] netlink: zone id is out of range [ 584.324351][T11015] netlink: zone id is out of range [ 584.329825][T11015] netlink: zone id is out of range [ 584.337551][T11015] netlink: zone id is out of range [ 584.351798][T11015] netlink: zone id is out of range [ 584.357401][T11015] netlink: zone id is out of range [ 584.367370][T11015] netlink: zone id is out of range [ 584.374106][T11015] netlink: zone id is out of range [ 585.723873][T11012] netlink: 'syz.3.1879': attribute type 10 has an invalid length. [ 586.169752][T11030] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1886'. [ 586.323929][T11033] syzkaller0: entered promiscuous mode [ 586.333614][T11033] syzkaller0: entered allmulticast mode [ 586.498371][T11042] netlink: 'syz.2.1889': attribute type 9 has an invalid length. [ 586.523899][T11042] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1889'. [ 588.030458][T11053] netlink: 'syz.1.1891': attribute type 10 has an invalid length. [ 588.085372][T11046] syzkaller0: entered promiscuous mode [ 588.109049][T11046] syzkaller0: entered allmulticast mode [ 588.649039][T11075] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.1898'. [ 589.727128][T11068] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1897'. [ 589.982402][T11085] netlink: 'syz.0.1900': attribute type 10 has an invalid length. [ 590.099895][T11082] syzkaller0: entered promiscuous mode [ 590.146310][T11082] syzkaller0: entered allmulticast mode [ 591.242439][T11111] netlink: 'syz.1.1910': attribute type 9 has an invalid length. [ 591.252818][T11111] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1910'. [ 592.533568][T11106] syzkaller0: entered promiscuous mode [ 592.542537][T11106] syzkaller0: entered allmulticast mode [ 592.819745][T11123] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1912'. [ 592.830349][T11123] net_ratelimit: 38 callbacks suppressed [ 592.830363][T11123] netlink: zone id is out of range [ 592.841589][T11123] netlink: zone id is out of range [ 592.846840][T11123] netlink: zone id is out of range [ 592.852602][T11123] netlink: zone id is out of range [ 592.857951][T11123] netlink: zone id is out of range [ 592.863372][T11123] netlink: zone id is out of range [ 592.873503][T11123] netlink: zone id is out of range [ 592.878866][T11123] netlink: zone id is out of range [ 592.884211][T11123] netlink: zone id is out of range [ 592.893018][T11123] netlink: zone id is out of range [ 594.083341][T11117] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1911'. [ 594.412485][T11136] netlink: 'syz.1.1916': attribute type 10 has an invalid length. [ 594.577879][T11143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1920'. [ 594.604917][T11143] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1920'. [ 594.772436][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1920'. [ 594.791539][T11148] netlink: 'syz.2.1921': attribute type 9 has an invalid length. [ 594.812301][T11145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1920'. [ 594.827130][T11148] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1921'. [ 595.436215][T11153] syzkaller0: entered promiscuous mode [ 595.445654][T11153] syzkaller0: entered allmulticast mode [ 595.471347][T11155] netlink: 'syz.1.1925': attribute type 9 has an invalid length. [ 595.480368][T11155] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1925'. [ 595.586324][T11157] syzkaller0: entered promiscuous mode [ 595.592352][T11157] syzkaller0: entered allmulticast mode [ 597.144117][T11168] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1929'. [ 597.372367][T11180] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.1930'. [ 599.446599][T11181] netlink: 'syz.1.1932': attribute type 10 has an invalid length. [ 599.625150][T11196] syzkaller0: entered promiscuous mode [ 599.640164][T11196] syzkaller0: entered allmulticast mode [ 599.730433][T11206] netlink: 'syz.0.1941': attribute type 9 has an invalid length. [ 599.756096][T11206] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1941'. [ 599.823209][T11204] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1939'. [ 602.068170][T11226] netlink: 'syz.1.1947': attribute type 10 has an invalid length. [ 602.127367][T11229] syzkaller0: entered promiscuous mode [ 602.149638][T11229] syzkaller0: entered allmulticast mode [ 602.301833][T11239] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.1949'. [ 602.334034][T11239] net_ratelimit: 38 callbacks suppressed [ 602.334067][T11239] netlink: zone id is out of range [ 602.347326][T11239] netlink: zone id is out of range [ 602.358856][T11239] netlink: zone id is out of range [ 602.364195][T11239] netlink: zone id is out of range [ 602.379403][T11239] netlink: zone id is out of range [ 602.384935][T11239] netlink: zone id is out of range [ 602.395528][T11239] netlink: zone id is out of range [ 602.401816][T11239] netlink: zone id is out of range [ 602.407680][T11239] netlink: zone id is out of range [ 602.426196][T11239] netlink: zone id is out of range [ 604.425745][T11245] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1952'. [ 604.444726][T11260] netlink: 'syz.0.1957': attribute type 10 has an invalid length. [ 604.645621][T11262] syzkaller0: entered promiscuous mode [ 604.656353][T11262] syzkaller0: entered allmulticast mode [ 604.712692][T11267] netlink: 'syz.2.1960': attribute type 9 has an invalid length. [ 604.724373][T11267] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1960'. [ 606.806507][T11284] netlink: 'syz.0.1966': attribute type 9 has an invalid length. [ 606.824929][T11284] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.1966'. [ 607.051646][T11289] syzkaller0: entered promiscuous mode [ 607.057189][T11289] syzkaller0: entered allmulticast mode [ 607.085339][T11291] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.1969'. [ 607.155151][T11297] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.1971'. [ 608.208132][T11321] netlink: 'syz.1.1977': attribute type 9 has an invalid length. [ 608.231015][T11321] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.1977'. [ 609.435428][T11310] netlink: 'syz.2.1975': attribute type 10 has an invalid length. [ 609.526435][T11313] syzkaller0: entered promiscuous mode [ 609.533499][T11313] syzkaller0: entered allmulticast mode [ 611.136586][T11335] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1983'. [ 611.475865][T11344] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.1986'. [ 611.495403][T11352] netlink: 'syz.3.1987': attribute type 10 has an invalid length. [ 611.508214][T11344] net_ratelimit: 38 callbacks suppressed [ 611.508252][T11344] netlink: zone id is out of range [ 611.536268][T11344] netlink: zone id is out of range [ 611.554332][T11344] netlink: zone id is out of range [ 611.565431][T11344] netlink: zone id is out of range [ 611.573201][T11344] netlink: zone id is out of range [ 611.584584][T11344] netlink: zone id is out of range [ 611.594942][T11344] netlink: zone id is out of range [ 611.605127][T11344] netlink: zone id is out of range [ 611.613553][T11344] netlink: zone id is out of range [ 611.622490][T11344] netlink: zone id is out of range [ 612.181999][T11357] syzkaller0: entered promiscuous mode [ 612.188295][T11357] syzkaller0: entered allmulticast mode [ 612.334187][T11362] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1992'. [ 612.405654][T11366] syzkaller0: entered promiscuous mode [ 612.426630][T11366] syzkaller0: entered allmulticast mode [ 612.685969][T11379] netlink: 'syz.2.1998': attribute type 9 has an invalid length. [ 612.695315][T11379] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.1998'. [ 614.382861][T11389] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2000'. [ 616.084484][T11396] netlink: 'syz.3.2002': attribute type 10 has an invalid length. [ 616.313208][T11403] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2005'. [ 616.520159][T11407] syzkaller0: entered promiscuous mode [ 616.525701][T11407] syzkaller0: entered allmulticast mode [ 617.177358][T11423] netlink: 'syz.2.2012': attribute type 10 has an invalid length. [ 617.225807][T11421] syzkaller0: entered promiscuous mode [ 617.257638][T11421] syzkaller0: entered allmulticast mode [ 617.359527][T11431] netlink: 'syz.0.2013': attribute type 9 has an invalid length. [ 617.368381][T11431] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2013'. [ 617.582617][T11437] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2014'. [ 617.598047][T11437] net_ratelimit: 38 callbacks suppressed [ 617.598064][T11437] netlink: zone id is out of range [ 617.609226][T11437] netlink: zone id is out of range [ 617.614547][T11437] netlink: zone id is out of range [ 617.619894][T11437] netlink: zone id is out of range [ 617.625031][T11437] netlink: zone id is out of range [ 617.630473][T11437] netlink: zone id is out of range [ 617.635629][T11437] netlink: zone id is out of range [ 617.641221][T11437] netlink: zone id is out of range [ 617.646365][T11437] netlink: zone id is out of range [ 617.653759][T11437] netlink: zone id is out of range [ 620.563135][T11451] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2019'. [ 620.951175][T11462] syzkaller0: entered promiscuous mode [ 620.956726][T11462] syzkaller0: entered allmulticast mode [ 620.996497][T11465] netlink: 'syz.0.2022': attribute type 10 has an invalid length. [ 621.893979][T11489] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2030'. [ 623.062307][T11476] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2028'. [ 623.167031][T11482] syzkaller0: entered promiscuous mode [ 623.174846][T11482] syzkaller0: entered allmulticast mode [ 623.299276][T11494] netlink: 'syz.1.2031': attribute type 9 has an invalid length. [ 623.318682][T11494] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2031'. [ 624.632164][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.638922][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.833450][T11508] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 625.255632][T11519] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2039'. [ 625.366336][T11525] syzkaller0: entered promiscuous mode [ 625.400553][T11525] syzkaller0: entered allmulticast mode [ 625.942606][T11532] syzkaller0: entered promiscuous mode [ 625.952161][T11532] syzkaller0: entered allmulticast mode [ 626.254858][T11548] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2045'. [ 626.265200][T11548] net_ratelimit: 38 callbacks suppressed [ 626.265216][T11548] netlink: zone id is out of range [ 626.276264][T11548] netlink: zone id is out of range [ 626.281505][T11548] netlink: zone id is out of range [ 626.286815][T11548] netlink: zone id is out of range [ 626.292318][T11548] netlink: zone id is out of range [ 626.297656][T11548] netlink: zone id is out of range [ 626.302799][T11548] netlink: zone id is out of range [ 626.308126][T11548] netlink: zone id is out of range [ 626.313267][T11548] netlink: zone id is out of range [ 626.318585][T11548] netlink: zone id is out of range [ 627.572184][T11545] netlink: 'syz.1.2046': attribute type 10 has an invalid length. [ 627.744700][T11554] netlink: 'syz.3.2048': attribute type 9 has an invalid length. [ 627.763262][T11554] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2048'. [ 629.419233][T11572] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2053'. [ 629.470788][T11578] netlink: 'syz.3.2055': attribute type 10 has an invalid length. [ 630.346999][T11591] syzkaller0: entered promiscuous mode [ 630.367762][T11591] syzkaller0: entered allmulticast mode [ 630.442285][T11594] netlink: 'syz.1.2063': attribute type 9 has an invalid length. [ 630.450750][T11598] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2062'. [ 630.488910][T11594] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2063'. [ 630.548388][T11593] syzkaller0: entered promiscuous mode [ 630.553926][T11593] syzkaller0: entered allmulticast mode [ 632.036228][T11603] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2064'. [ 633.391509][T11632] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2073'. [ 633.404280][T11632] net_ratelimit: 38 callbacks suppressed [ 633.404312][T11632] netlink: zone id is out of range [ 633.416895][T11632] netlink: zone id is out of range [ 633.425452][T11632] netlink: zone id is out of range [ 633.432292][T11632] netlink: zone id is out of range [ 633.442419][T11632] netlink: zone id is out of range [ 633.454791][T11632] netlink: zone id is out of range [ 633.462380][T11632] netlink: zone id is out of range [ 633.468695][T11632] netlink: zone id is out of range [ 633.473963][T11632] netlink: zone id is out of range [ 633.479335][T11632] netlink: zone id is out of range [ 634.396030][T11620] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 634.591810][T11635] syzkaller0: entered promiscuous mode [ 634.602686][T11635] syzkaller0: entered allmulticast mode [ 634.610295][T11637] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2075'. [ 634.787263][T11643] netlink: 'syz.3.2077': attribute type 9 has an invalid length. [ 634.805143][T11643] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2077'. [ 637.065335][T11657] netlink: 'syz.2.2082': attribute type 10 has an invalid length. [ 637.169282][T11661] syzkaller0: entered promiscuous mode [ 637.174969][T11661] syzkaller0: entered allmulticast mode [ 637.462940][T11678] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2085'. [ 638.836571][T11677] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2087'. [ 639.231309][T11694] netlink: 'syz.3.2092': attribute type 10 has an invalid length. [ 639.318656][T11693] syzkaller0: entered promiscuous mode [ 639.332538][T11693] syzkaller0: entered allmulticast mode [ 640.294170][T11716] netlink: 'syz.2.2099': attribute type 9 has an invalid length. [ 640.317065][T11716] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2099'. [ 641.766075][T11704] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2097'. [ 641.836107][T11710] syzkaller0: entered promiscuous mode [ 641.847583][T11710] syzkaller0: entered allmulticast mode [ 642.329279][T11735] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2103'. [ 642.364206][T11735] net_ratelimit: 38 callbacks suppressed [ 642.364225][T11735] netlink: zone id is out of range [ 642.375816][T11735] netlink: zone id is out of range [ 642.381708][T11735] netlink: zone id is out of range [ 642.386974][T11735] netlink: zone id is out of range [ 642.399919][T11735] netlink: zone id is out of range [ 642.406207][T11735] netlink: zone id is out of range [ 642.413211][T11735] netlink: zone id is out of range [ 642.418782][T11735] netlink: zone id is out of range [ 642.424240][T11735] netlink: zone id is out of range [ 642.429581][T11735] netlink: zone id is out of range [ 643.754551][T11736] netlink: 'syz.1.2105': attribute type 10 has an invalid length. [ 644.001722][T11745] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2108'. [ 644.147744][T11746] syzkaller0: entered promiscuous mode [ 644.155167][T11746] syzkaller0: entered allmulticast mode [ 644.759496][T11758] netlink: 'syz.2.2114': attribute type 9 has an invalid length. [ 644.770984][T11758] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2114'. [ 646.267225][T11767] netlink: 'syz.3.2115': attribute type 10 has an invalid length. [ 646.324577][T11766] syzkaller0: entered promiscuous mode [ 646.330346][T11766] syzkaller0: entered allmulticast mode [ 646.650904][T11782] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2118'. [ 648.159471][T11792] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2121'. [ 648.496331][T11799] syzkaller0: entered promiscuous mode [ 648.503091][T11799] syzkaller0: entered allmulticast mode [ 649.038870][T11807] netlink: 'syz.1.2129': attribute type 9 has an invalid length. [ 649.047268][T11807] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2129'. [ 649.311637][T11815] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2130'. [ 649.322133][T11815] net_ratelimit: 38 callbacks suppressed [ 649.322150][T11815] netlink: zone id is out of range [ 649.334303][T11815] netlink: zone id is out of range [ 649.339596][T11815] netlink: zone id is out of range [ 649.345897][T11815] netlink: zone id is out of range [ 649.351711][T11815] netlink: zone id is out of range [ 649.356982][T11815] netlink: zone id is out of range [ 649.367069][T11815] netlink: zone id is out of range [ 649.376473][T11815] netlink: zone id is out of range [ 649.384265][T11815] netlink: zone id is out of range [ 649.390098][T11815] netlink: zone id is out of range [ 650.456072][T11808] netlink: 'syz.3.2127': attribute type 10 has an invalid length. [ 650.662182][T11818] syzkaller0: entered promiscuous mode [ 650.681463][T11818] syzkaller0: entered allmulticast mode [ 650.921780][T11830] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2136'. [ 652.061497][T11860] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2143'. [ 653.119210][T11845] netlink: 'syz.0.2139': attribute type 10 has an invalid length. [ 653.198536][T11848] syzkaller0: entered promiscuous mode [ 653.204078][T11848] syzkaller0: entered allmulticast mode [ 653.396045][T11866] netlink: 'syz.3.2147': attribute type 9 has an invalid length. [ 653.405127][T11866] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2147'. [ 654.906686][T11871] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2148'. [ 655.227763][T11883] netlink: 'syz.2.2152': attribute type 10 has an invalid length. [ 655.885122][T11890] syzkaller0: entered promiscuous mode [ 655.922843][T11890] syzkaller0: entered allmulticast mode [ 655.987142][T11897] netlink: 'syz.1.2158': attribute type 9 has an invalid length. [ 655.999152][T11897] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2158'. [ 656.086330][T11900] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2159'. [ 656.160666][T11904] syzkaller0: entered promiscuous mode [ 656.166200][T11904] syzkaller0: entered allmulticast mode [ 656.589651][T11914] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2162'. [ 656.600023][T11914] net_ratelimit: 38 callbacks suppressed [ 656.600039][T11914] netlink: zone id is out of range [ 656.611308][T11914] netlink: zone id is out of range [ 656.616470][T11914] netlink: zone id is out of range [ 656.621807][T11914] netlink: zone id is out of range [ 656.626956][T11914] netlink: zone id is out of range [ 656.640174][T11914] netlink: zone id is out of range [ 656.645502][T11914] netlink: zone id is out of range [ 656.651288][T11914] netlink: zone id is out of range [ 656.656439][T11914] netlink: zone id is out of range [ 656.662037][T11914] netlink: zone id is out of range [ 659.903893][T11919] netlink: 'syz.3.2163': attribute type 10 has an invalid length. [ 659.912313][T11933] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2169'. [ 660.202274][T11942] syzkaller0: entered promiscuous mode [ 660.225514][T11942] syzkaller0: entered allmulticast mode [ 660.475400][T11953] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2175'. [ 661.198669][T11964] netlink: 'syz.1.2180': attribute type 9 has an invalid length. [ 661.207354][T11964] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2180'. [ 662.368222][T11960] netlink: 'syz.3.2178': attribute type 10 has an invalid length. [ 662.635486][T11967] syzkaller0: entered promiscuous mode [ 662.657571][T11967] syzkaller0: entered allmulticast mode [ 662.694527][T11973] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2184'. [ 664.905818][T11990] netlink: 'syz.2.2189': attribute type 10 has an invalid length. [ 665.026611][T11996] syzkaller0: entered promiscuous mode [ 665.052222][T11996] syzkaller0: entered allmulticast mode [ 665.169346][T12006] netlink: 'syz.3.2193': attribute type 9 has an invalid length. [ 665.178598][T12006] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2193'. [ 665.224236][T12009] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2192'. [ 665.248107][T12009] net_ratelimit: 38 callbacks suppressed [ 665.248123][T12009] netlink: zone id is out of range [ 665.261181][T12009] netlink: zone id is out of range [ 665.266562][T12009] netlink: zone id is out of range [ 665.272301][T12009] netlink: zone id is out of range [ 665.283686][T12009] netlink: zone id is out of range [ 665.289200][T12009] netlink: zone id is out of range [ 665.294752][T12009] netlink: zone id is out of range [ 665.300460][T12009] netlink: zone id is out of range [ 665.305771][T12009] netlink: zone id is out of range [ 665.311417][T12009] netlink: zone id is out of range [ 666.847140][T12019] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.2198'. [ 667.117164][T12029] netlink: 'syz.1.2200': attribute type 10 has an invalid length. [ 667.339890][T12032] syzkaller0: entered promiscuous mode [ 667.348495][T12032] syzkaller0: entered allmulticast mode [ 669.306662][T12047] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2207'. [ 669.399912][T12051] syzkaller0: entered promiscuous mode [ 669.405456][T12051] syzkaller0: entered allmulticast mode [ 669.466860][T12059] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2209'. [ 669.532577][T12059] netlink: 'syz.1.2209': attribute type 1 has an invalid length. [ 669.553455][T12059] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.2209'. [ 669.570128][T12061] netlink: 'syz.2.2210': attribute type 9 has an invalid length. [ 669.584481][T12061] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2210'. [ 669.716921][T12068] netlink: 'syz.1.2209': attribute type 28 has an invalid length. [ 669.725289][T12068] netlink: 'syz.1.2209': attribute type 29 has an invalid length. [ 669.733798][T12068] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2209'. [ 669.753285][T12069] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2211'. [ 671.061925][T12062] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2209'. [ 671.287637][T12079] netlink: 'syz.0.2212': attribute type 10 has an invalid length. [ 671.927833][T12085] syzkaller0: entered promiscuous mode [ 671.944461][T12085] syzkaller0: entered allmulticast mode [ 671.966405][T12087] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2217'. [ 672.124208][T12094] syzkaller0: entered promiscuous mode [ 672.133020][T12094] syzkaller0: entered allmulticast mode [ 672.284631][T12100] netlink: 'syz.3.2221': attribute type 9 has an invalid length. [ 672.299553][T12100] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2221'. [ 672.460730][T12107] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2223'. [ 672.470995][T12107] net_ratelimit: 38 callbacks suppressed [ 672.471005][T12107] netlink: zone id is out of range [ 672.487635][T12107] netlink: zone id is out of range [ 672.495096][T12107] netlink: zone id is out of range [ 672.500970][T12107] netlink: zone id is out of range [ 672.506366][T12107] netlink: zone id is out of range [ 672.513173][T12107] netlink: zone id is out of range [ 672.525830][T12107] netlink: zone id is out of range [ 672.534209][T12107] netlink: zone id is out of range [ 672.539751][T12107] netlink: zone id is out of range [ 672.545107][T12107] netlink: zone id is out of range [ 674.355655][T12124] netlink: 'syz.1.2228': attribute type 28 has an invalid length. [ 674.364124][T12124] netlink: 'syz.1.2228': attribute type 29 has an invalid length. [ 674.372476][T12124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2228'. [ 675.353204][T12116] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 675.363043][T12123] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2228'. [ 675.388596][T12121] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.2228'. [ 675.424658][T12121] netlink: 'syz.1.2228': attribute type 1 has an invalid length. [ 675.444753][T12121] netlink: 16520 bytes leftover after parsing attributes in process `syz.1.2228'. [ 675.549269][T12128] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2229'. [ 675.687059][T12132] syzkaller0: entered promiscuous mode [ 675.695826][T12132] syzkaller0: entered allmulticast mode [ 676.010104][T12140] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2233'. [ 676.526753][T12150] netlink: 'syz.0.2238': attribute type 9 has an invalid length. [ 676.541165][T12150] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2238'. [ 677.846543][T12154] syzkaller0: entered promiscuous mode [ 677.853207][T12154] syzkaller0: entered allmulticast mode [ 679.410353][T12168] netlink: 'syz.1.2240': attribute type 10 has an invalid length. [ 679.583926][T12172] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2242'. [ 680.262888][T12185] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2248'. [ 680.346006][T12187] syzkaller0: entered promiscuous mode [ 680.351716][T12187] syzkaller0: entered allmulticast mode [ 680.362997][T12185] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 680.372548][T12185] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.2248'. [ 680.419259][T12189] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2250'. [ 680.433411][T12189] net_ratelimit: 38 callbacks suppressed [ 680.433457][T12189] netlink: zone id is out of range [ 680.445683][T12189] netlink: zone id is out of range [ 680.451835][T12189] netlink: zone id is out of range [ 680.459716][T12189] netlink: zone id is out of range [ 680.465584][T12189] netlink: zone id is out of range [ 680.473354][T12190] netlink: 'syz.0.2248': attribute type 28 has an invalid length. [ 680.473904][T12189] netlink: zone id is out of range [ 680.483770][T12185] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2248'. [ 680.492179][T12189] netlink: zone id is out of range [ 680.496102][T12190] netlink: 'syz.0.2248': attribute type 29 has an invalid length. [ 680.501517][T12189] netlink: zone id is out of range [ 680.514849][T12190] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2248'. [ 680.535681][T12189] netlink: zone id is out of range [ 680.545858][T12189] netlink: zone id is out of range [ 680.584620][T12194] syzkaller0: entered promiscuous mode [ 680.598724][T12194] syzkaller0: entered allmulticast mode [ 680.724724][T12199] netlink: 'syz.0.2252': attribute type 9 has an invalid length. [ 680.733464][T12199] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2252'. [ 683.726048][T12204] netlink: 'syz.3.2253': attribute type 10 has an invalid length. [ 683.898952][T12218] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2257'. [ 684.521077][T12227] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2262'. [ 684.555332][T12227] netlink: 'syz.0.2262': attribute type 1 has an invalid length. [ 684.593991][T12227] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.2262'. [ 684.700800][T12235] syzkaller0: entered promiscuous mode [ 684.703888][T12232] netlink: 'syz.0.2262': attribute type 28 has an invalid length. [ 684.720732][T12235] syzkaller0: entered allmulticast mode [ 684.750573][T12237] netlink: 'syz.1.2265': attribute type 9 has an invalid length. [ 684.760279][T12232] netlink: 'syz.0.2262': attribute type 29 has an invalid length. [ 684.768754][T12237] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2265'. [ 684.779648][T12227] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2262'. [ 684.800064][T12232] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2262'. [ 684.806901][T12234] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2264'. [ 686.072879][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.082260][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.608807][T12243] syzkaller0: entered promiscuous mode [ 686.614329][T12243] syzkaller0: entered allmulticast mode [ 688.440253][T12256] netlink: 'syz.3.2267': attribute type 10 has an invalid length. [ 688.449708][T12258] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2269'. [ 689.151093][ T5818] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 689.161106][ T5818] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 689.170282][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 689.181366][ T5818] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 689.191723][ T5818] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 689.200030][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 689.585430][T12281] syzkaller0: entered promiscuous mode [ 689.591052][T12281] syzkaller0: entered allmulticast mode [ 689.702105][T12285] netlink: 'syz.3.2277': attribute type 9 has an invalid length. [ 689.748520][T12285] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2277'. [ 690.086864][T12296] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2279'. [ 690.097018][T12296] net_ratelimit: 38 callbacks suppressed [ 690.097059][T12296] netlink: zone id is out of range [ 690.108536][T12296] netlink: zone id is out of range [ 690.113818][T12296] netlink: zone id is out of range [ 690.119296][T12296] netlink: zone id is out of range [ 690.124446][T12296] netlink: zone id is out of range [ 690.129843][T12296] netlink: zone id is out of range [ 690.135032][T12296] netlink: zone id is out of range [ 690.147664][T12296] netlink: zone id is out of range [ 690.154849][T12296] netlink: zone id is out of range [ 690.167982][T12296] netlink: zone id is out of range [ 691.268101][ T51] Bluetooth: hci4: command tx timeout [ 691.481962][T12277] chnl_net:caif_netlink_parms(): no params data found [ 691.565849][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.693461][T12306] netlink: 'syz.2.2280': attribute type 10 has an invalid length. [ 691.714961][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 691.752680][T12305] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2281'. [ 691.904311][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.043326][T12310] syzkaller0: entered promiscuous mode [ 692.060820][T12310] syzkaller0: entered allmulticast mode [ 692.093503][T12324] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2286'. [ 692.385450][T12330] netlink: 'syz.3.2286': attribute type 28 has an invalid length. [ 692.394062][T12330] netlink: 'syz.3.2286': attribute type 29 has an invalid length. [ 692.402584][T12330] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2286'. [ 692.555420][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 692.684242][T12324] netlink: 'syz.3.2286': attribute type 1 has an invalid length. [ 692.697569][T12324] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2286'. [ 692.720579][T12329] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2286'. [ 692.767826][T12277] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.780482][T12277] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.795044][T12277] bridge_slave_0: entered allmulticast mode [ 692.804056][T12277] bridge_slave_0: entered promiscuous mode [ 693.347777][ T51] Bluetooth: hci4: command tx timeout [ 694.281937][T12277] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.289471][T12277] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.296662][T12277] bridge_slave_1: entered allmulticast mode [ 694.303716][T12277] bridge_slave_1: entered promiscuous mode [ 694.344471][T12334] syzkaller0: entered promiscuous mode [ 694.352583][T12334] syzkaller0: entered allmulticast mode [ 694.456273][T12341] netlink: 'syz.1.2288': attribute type 9 has an invalid length. [ 694.466258][T12341] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2288'. [ 695.405647][T12347] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2289'. [ 695.415834][T12347] net_ratelimit: 14 callbacks suppressed [ 695.415849][T12347] netlink: zone id is out of range [ 695.427045][T12347] netlink: zone id is out of range [ 695.434159][ T51] Bluetooth: hci4: command tx timeout [ 695.436530][T12347] netlink: zone id is out of range [ 695.449959][T12347] netlink: zone id is out of range [ 695.455533][T12347] netlink: zone id is out of range [ 695.466378][T12347] netlink: zone id is out of range [ 695.475107][T12347] netlink: zone id is out of range [ 695.481657][T12347] netlink: zone id is out of range [ 695.486966][T12347] netlink: zone id is out of range [ 695.493277][T12347] netlink: zone id is out of range [ 696.061035][T12277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 696.158060][T12277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 696.320737][T12352] netlink: 'syz.2.2290': attribute type 10 has an invalid length. [ 696.446647][T12277] team0: Port device team_slave_0 added [ 696.502006][T12277] team0: Port device team_slave_1 added [ 696.601742][T12357] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2292'. [ 696.636855][T12277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 696.664422][T12277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.705340][T12277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 696.736392][T12277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 696.750496][T12277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 696.865646][T12277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 697.507871][ T51] Bluetooth: hci4: command tx timeout [ 697.710659][T12389] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.2296'. [ 697.736289][T12373] syzkaller0: entered promiscuous mode [ 697.742077][T12373] syzkaller0: entered allmulticast mode [ 697.836337][T12389] netlink: 'syz.2.2296': attribute type 1 has an invalid length. [ 697.844432][T12389] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.2296'. [ 697.881682][T12277] hsr_slave_0: entered promiscuous mode [ 697.890869][T12277] hsr_slave_1: entered promiscuous mode [ 697.897147][T12277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 697.910086][T12277] Cannot create hsr debugfs directory [ 697.952232][T12392] netlink: 'syz.2.2296': attribute type 28 has an invalid length. [ 697.978557][T12392] netlink: 'syz.2.2296': attribute type 29 has an invalid length. [ 697.995957][T12392] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2296'. [ 699.335236][T12389] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2296'. [ 699.505663][T12398] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2298'. [ 699.522882][T12398] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 699.537683][T12398] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2298'. [ 699.667890][T12406] syzkaller0: entered promiscuous mode [ 699.673417][T12406] syzkaller0: entered allmulticast mode [ 699.710817][T12408] netlink: 'syz.3.2298': attribute type 28 has an invalid length. [ 699.718756][T12408] netlink: 'syz.3.2298': attribute type 29 has an invalid length. [ 699.726782][T12408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2298'. [ 699.774346][T12400] syzkaller0: entered promiscuous mode [ 699.781225][T12400] syzkaller0: entered allmulticast mode [ 699.803111][T12403] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2298'. [ 702.159062][T12428] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2299'. [ 702.170649][T12428] net_ratelimit: 14 callbacks suppressed [ 702.170664][T12428] netlink: zone id is out of range [ 702.182221][T12428] netlink: zone id is out of range [ 702.187488][T12428] netlink: zone id is out of range [ 702.192797][T12428] netlink: zone id is out of range [ 702.199119][T12428] netlink: zone id is out of range [ 702.204364][T12428] netlink: zone id is out of range [ 702.214520][T12428] netlink: zone id is out of range [ 702.224297][T12428] netlink: zone id is out of range [ 702.231333][T12428] netlink: zone id is out of range [ 702.236536][T12428] netlink: zone id is out of range [ 703.768097][T12435] netlink: 'syz.3.2301': attribute type 10 has an invalid length. [ 703.814319][T12441] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2302'. [ 704.072487][T12445] netlink: 'syz.2.2305': attribute type 9 has an invalid length. [ 704.091720][T12445] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2305'. [ 705.056190][T12468] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2308'. [ 705.258983][T12480] netlink: 'syz.3.2308': attribute type 28 has an invalid length. [ 705.288183][T12480] netlink: 'syz.3.2308': attribute type 29 has an invalid length. [ 705.296064][T12480] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2308'. [ 705.297619][T12468] netlink: 'syz.3.2308': attribute type 1 has an invalid length. [ 705.369230][T12468] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2308'. [ 705.455507][T12482] netlink: 'syz.2.2311': attribute type 9 has an invalid length. [ 705.464415][T12482] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2311'. [ 705.530224][T12476] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2308'. [ 705.705790][T12488] netlink: 'syz.1.2312': attribute type 10 has an invalid length. [ 706.155581][T12493] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2314'. [ 706.206388][T12491] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2313'. [ 706.389898][T12277] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 706.835079][T12277] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 706.879189][T12277] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 706.963160][T12277] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 707.285903][T12512] syzkaller0: entered promiscuous mode [ 707.295557][T12512] syzkaller0: entered allmulticast mode [ 709.530315][T12529] netlink: 'syz.1.2321': attribute type 10 has an invalid length. [ 709.546720][T12534] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2322'. [ 709.696421][T12542] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2323'. [ 709.731206][T12548] netlink: 'syz.1.2323': attribute type 28 has an invalid length. [ 709.783700][T12548] netlink: 'syz.1.2323': attribute type 29 has an invalid length. [ 709.809283][T12548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2323'. [ 709.835954][T12277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.893368][T12546] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2325'. [ 709.918563][T12546] net_ratelimit: 38 callbacks suppressed [ 709.918607][T12546] netlink: zone id is out of range [ 709.946682][T12546] netlink: zone id is out of range [ 709.953008][T12546] netlink: zone id is out of range [ 709.958725][T12546] netlink: zone id is out of range [ 709.964689][T12546] netlink: zone id is out of range [ 709.970730][T12546] netlink: zone id is out of range [ 709.986084][T12546] netlink: zone id is out of range [ 709.993760][T12546] netlink: zone id is out of range [ 710.010163][T12546] netlink: zone id is out of range [ 710.015683][T12546] netlink: zone id is out of range [ 710.761013][T12277] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.798955][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.806184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.862460][ T8985] bridge0: port 2(bridge_slave_1) entered blocking state [ 710.869789][ T8985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.968545][T12571] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2328'. [ 711.101979][T12573] netlink: 'syz.2.2327': attribute type 9 has an invalid length. [ 711.138851][T12573] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2327'. [ 711.887025][T12277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 712.061261][T12277] veth0_vlan: entered promiscuous mode [ 712.127045][T12277] veth1_vlan: entered promiscuous mode [ 712.180399][T12277] veth0_macvtap: entered promiscuous mode [ 712.223901][T12277] veth1_macvtap: entered promiscuous mode [ 712.259050][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.274123][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.284973][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.299632][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.310197][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.327034][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.337264][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 712.348430][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.368133][T12277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 712.397351][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.408273][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.418568][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.429418][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.445374][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.456561][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.466769][T12277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 712.477858][T12277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 712.489390][T12277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 712.513130][T12277] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.522212][T12277] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.531345][T12277] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.540607][T12277] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 712.773539][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.803323][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.873904][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.910168][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.195044][ T59] hsr_slave_0: left promiscuous mode [ 713.211825][ T59] hsr_slave_1: left promiscuous mode [ 713.221019][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 713.235765][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 713.279717][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 713.289891][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 713.315492][ T59] batadv0: left allmulticast mode [ 713.323612][ T59] batadv0: left promiscuous mode [ 713.338957][ T59] bridge0: port 3(batadv0) entered disabled state [ 713.370951][ T59] bridge_slave_1: left allmulticast mode [ 713.382547][ T59] bridge_slave_1: left promiscuous mode [ 713.390531][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.402789][ T59] bridge_slave_0: left allmulticast mode [ 713.422352][ T59] bridge_slave_0: left promiscuous mode [ 713.428550][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.470975][ T59] veth0_macvtap: left promiscuous mode [ 713.488813][ T59] veth1_vlan: left promiscuous mode [ 713.500082][ T59] veth0_vlan: left promiscuous mode [ 713.810902][ T59] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 714.301616][ T59] team0 (unregistering): Port device team_slave_1 removed [ 714.344621][ T59] team0 (unregistering): Port device C removed [ 714.386971][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 714.434766][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 714.724487][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 714.762664][ T59] bond0 (unregistering): Released all slaves [ 714.852262][T12623] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2331'. [ 714.863057][T12624] netlink: 'syz.2.2330': attribute type 10 has an invalid length. [ 715.159498][T12637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2333'. [ 715.201537][T12634] netlink: 'syz.2.2333': attribute type 28 has an invalid length. [ 715.214985][T12634] netlink: 'syz.2.2333': attribute type 29 has an invalid length. [ 715.236263][T12634] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2333'. [ 715.245171][T12633] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2334'. [ 715.280964][T12633] net_ratelimit: 14 callbacks suppressed [ 715.281007][T12633] netlink: zone id is out of range [ 715.324618][T12633] netlink: zone id is out of range [ 715.337694][T12633] netlink: zone id is out of range [ 715.363657][T12633] netlink: zone id is out of range [ 715.377677][T12633] netlink: zone id is out of range [ 715.389882][T12633] netlink: zone id is out of range [ 715.405910][T12633] netlink: zone id is out of range [ 715.419390][T12633] netlink: zone id is out of range [ 715.437842][T12633] netlink: zone id is out of range [ 715.445775][T12633] netlink: zone id is out of range [ 715.453796][T12635] syzkaller0: entered promiscuous mode [ 715.468882][T12635] syzkaller0: entered allmulticast mode [ 716.198253][T12648] netlink: 'syz.1.2339': attribute type 9 has an invalid length. [ 716.214968][T12648] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2339'. [ 717.611199][T12655] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2341'. [ 717.702494][T12651] netlink: 'syz.0.2340': attribute type 9 has an invalid length. [ 717.725867][T12651] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2340'. [ 717.907935][T12660] netlink: 'syz.2.2342': attribute type 10 has an invalid length. [ 718.218344][T12667] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2346'. [ 718.259121][T12667] netlink: 'syz.1.2346': attribute type 28 has an invalid length. [ 718.276732][T12667] netlink: 'syz.1.2346': attribute type 29 has an invalid length. [ 718.285894][T12667] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2346'. [ 718.484618][T12678] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.2350'. [ 718.569532][T12677] netlink: 'syz.1.2349': attribute type 9 has an invalid length. [ 718.607759][T12680] syzkaller0: entered promiscuous mode [ 718.614247][T12680] syzkaller0: entered allmulticast mode [ 720.918901][T12693] __nla_validate_parse: 1 callbacks suppressed [ 720.919020][T12693] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2361'. [ 721.083244][T12694] netlink: 'syz.2.2353': attribute type 9 has an invalid length. [ 721.114002][T12694] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2353'. [ 721.603722][T12714] netlink: 'syz.0.2358': attribute type 28 has an invalid length. [ 721.657901][T12714] netlink: 'syz.0.2358': attribute type 29 has an invalid length. [ 721.665807][T12714] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2358'. [ 721.807588][T12710] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2358'. [ 722.305799][T12716] syzkaller0: entered promiscuous mode [ 722.361546][T12716] syzkaller0: entered allmulticast mode [ 722.580170][T12735] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2363'. [ 722.599909][T12735] net_ratelimit: 14 callbacks suppressed [ 722.599927][T12735] netlink: zone id is out of range [ 722.611308][T12735] netlink: zone id is out of range [ 722.616578][T12735] netlink: zone id is out of range [ 722.621927][T12735] netlink: zone id is out of range [ 722.627116][T12735] netlink: zone id is out of range [ 722.637623][T12735] netlink: zone id is out of range [ 722.642993][T12735] netlink: zone id is out of range [ 722.655093][T12735] netlink: zone id is out of range [ 722.660594][T12735] netlink: zone id is out of range [ 722.672599][T12735] netlink: zone id is out of range [ 723.962967][T12729] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2366'. [ 724.290204][T12740] syzkaller0: entered promiscuous mode [ 724.321882][T12740] syzkaller0: entered allmulticast mode [ 724.963066][ T5818] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 724.985890][ T5818] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 725.038602][ T5818] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 725.051853][ T5818] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 725.070922][ T5818] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 725.079010][ T5818] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 725.279211][T12754] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 727.112734][ T5818] Bluetooth: hci3: command tx timeout [ 727.273986][T12754] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2372'. [ 727.362837][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.477319][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.551459][T12771] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2378'. [ 727.576772][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.631189][T12776] ref_ctr_offset mismatch. inode: 0x5e offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 727.776819][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.133549][T12786] netlink: 'syz.0.2383': attribute type 10 has an invalid length. [ 728.203232][T12786] 8021q: adding VLAN 0 to HW filter on device team0 [ 728.231805][T12786] bond0: (slave team0): Enslaving as an active interface with an up link [ 728.350337][T12750] chnl_net:caif_netlink_parms(): no params data found [ 729.188638][ T5818] Bluetooth: hci3: command tx timeout [ 729.377852][T12750] bridge0: port 1(bridge_slave_0) entered blocking state [ 729.385229][T12750] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.392830][T12750] bridge_slave_0: entered allmulticast mode [ 729.400542][T12750] bridge_slave_0: entered promiscuous mode [ 729.419161][T12750] bridge0: port 2(bridge_slave_1) entered blocking state [ 729.426303][T12750] bridge0: port 2(bridge_slave_1) entered disabled state [ 729.486691][T12750] bridge_slave_1: entered allmulticast mode [ 729.517765][T12750] bridge_slave_1: entered promiscuous mode [ 729.542279][T12795] netlink: 'syz.3.2386': attribute type 9 has an invalid length. [ 729.555689][T12795] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2386'. [ 729.630106][T12750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 729.954213][T12750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 730.019705][T12801] syzkaller0: entered promiscuous mode [ 730.025310][T12801] syzkaller0: entered allmulticast mode [ 730.593790][T12818] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2391'. [ 730.604433][T12818] net_ratelimit: 38 callbacks suppressed [ 730.604448][T12818] netlink: zone id is out of range [ 730.616221][T12818] netlink: zone id is out of range [ 730.621590][T12818] netlink: zone id is out of range [ 730.626923][T12818] netlink: zone id is out of range [ 730.632312][T12818] netlink: zone id is out of range [ 730.638872][T12818] netlink: zone id is out of range [ 730.644133][T12818] netlink: zone id is out of range [ 730.649903][T12818] netlink: zone id is out of range [ 730.655082][T12818] netlink: zone id is out of range [ 730.660682][T12818] netlink: zone id is out of range [ 731.269852][ T5818] Bluetooth: hci3: command tx timeout [ 731.802736][T12750] team0: Port device team_slave_0 added [ 731.819456][T12750] team0: Port device team_slave_1 added [ 731.934776][T12750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 731.973406][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.015909][T12750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.829473][T12750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.847397][T12750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 732.923939][T12750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 733.264565][T12750] hsr_slave_0: entered promiscuous mode [ 733.273017][T12750] hsr_slave_1: entered promiscuous mode [ 733.285750][T12750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 733.300154][T12750] Cannot create hsr debugfs directory [ 733.347451][ T5818] Bluetooth: hci3: command tx timeout [ 733.354748][T12847] syzkaller0: entered promiscuous mode [ 733.366413][T12847] syzkaller0: entered allmulticast mode [ 733.383036][T12859] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2400'. [ 733.481515][T12853] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2401'. [ 736.690668][T12905] net_ratelimit: 38 callbacks suppressed [ 736.690685][T12905] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 736.703172][T12905] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 736.750564][T12900] syzkaller0: entered promiscuous mode [ 736.756239][T12900] syzkaller0: entered allmulticast mode [ 736.826880][T12904] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2411'. [ 738.287063][T12933] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2418'. [ 738.308228][T12933] netlink: zone id is out of range [ 738.313406][T12933] netlink: zone id is out of range [ 738.319768][T12933] netlink: zone id is out of range [ 738.327246][T12933] netlink: zone id is out of range [ 738.341017][T12933] netlink: zone id is out of range [ 738.346297][T12933] netlink: zone id is out of range [ 738.357536][T12933] netlink: zone id is out of range [ 738.362906][T12933] netlink: zone id is out of range [ 740.008320][T12750] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 740.031404][T12750] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 740.066444][T12750] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 740.083455][T12943] netlink: 'syz.0.2421': attribute type 9 has an invalid length. [ 740.112763][T12943] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2421'. [ 740.145662][T12750] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 741.673229][T12978] syzkaller0: entered promiscuous mode [ 741.687709][T12978] syzkaller0: entered allmulticast mode [ 742.076184][T13004] netlink: 'syz.0.2436': attribute type 28 has an invalid length. [ 742.084330][T13004] netlink: 'syz.0.2436': attribute type 29 has an invalid length. [ 742.113882][T13004] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2436'. [ 742.237314][T13005] netlink: 'syz.2.2437': attribute type 9 has an invalid length. [ 742.246122][T13005] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2437'. [ 743.924351][T13001] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2436'. [ 743.992596][T12750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 744.636324][T12750] 8021q: adding VLAN 0 to HW filter on device team0 [ 744.694252][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 744.701458][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 744.790927][ T3437] bridge0: port 2(bridge_slave_1) entered blocking state [ 744.798184][ T3437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 745.120407][T13039] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2445'. [ 745.149294][T13037] netlink: 'syz.0.2446': attribute type 9 has an invalid length. [ 745.158091][T13037] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2446'. [ 745.161650][T13040] netlink: 'syz.3.2445': attribute type 28 has an invalid length. [ 745.188309][T13040] netlink: 'syz.3.2445': attribute type 29 has an invalid length. [ 745.196243][T13040] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2445'. [ 746.123700][T13047] netlink: 'syz.2.2448': attribute type 9 has an invalid length. [ 746.153712][T13047] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2448'. [ 746.239883][T13055] net_ratelimit: 16 callbacks suppressed [ 746.239920][T13055] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 746.252596][T13055] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 746.436284][T12750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 746.607148][T12750] veth0_vlan: entered promiscuous mode [ 746.707793][T12750] veth1_vlan: entered promiscuous mode [ 746.803125][T12750] veth0_macvtap: entered promiscuous mode [ 746.846961][T12750] veth1_macvtap: entered promiscuous mode [ 746.871570][T13069] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2457'. [ 746.934580][T13069] netlink: 'syz.0.2457': attribute type 1 has an invalid length. [ 746.971978][T13069] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.2457'. [ 746.988050][T13071] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2458'. [ 747.020270][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.048739][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.059717][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.074086][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.092595][T13072] netlink: 'syz.0.2457': attribute type 28 has an invalid length. [ 747.107073][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.117501][T13072] netlink: 'syz.0.2457': attribute type 29 has an invalid length. [ 747.117601][T13072] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2457'. [ 747.143721][T13079] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2459'. [ 747.157108][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.167469][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 747.178018][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.191304][T12750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 747.206271][T13069] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2457'. [ 747.248979][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.265323][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.277194][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.293131][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.318167][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.335279][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.345198][T12750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 747.361439][T12750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 747.363255][T13084] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 747.373576][T12750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 747.377812][T13084] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 747.434746][T13083] netlink: 'syz.0.2462': attribute type 9 has an invalid length. [ 747.472696][T12750] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.485318][T12750] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.494413][T12750] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.512111][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.513169][T12750] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 747.518811][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.473818][ T8985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.498711][ T8985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.633953][ T8985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 748.651201][ T8985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.654891][T13107] netlink: 'syz.2.2470': attribute type 1 has an invalid length. [ 748.781840][T13107] netlink: 'syz.2.2470': attribute type 28 has an invalid length. [ 749.249796][T13120] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 749.256713][T13120] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 749.971945][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 749.984708][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 750.000724][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 750.022200][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 750.048948][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 750.056757][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 750.377169][T13138] syzkaller0: entered promiscuous mode [ 750.387810][T13138] syzkaller0: entered allmulticast mode [ 750.422082][T13143] bridge0: port 3(batadv0) entered blocking state [ 750.432811][T13143] bridge0: port 3(batadv0) entered disabled state [ 750.440836][T13143] batadv0: entered allmulticast mode [ 750.457879][T13143] batadv0: entered promiscuous mode [ 750.463879][T13140] __nla_validate_parse: 10 callbacks suppressed [ 750.463894][T13140] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2483'. [ 750.465568][T13143] bridge0: port 3(batadv0) entered blocking state [ 750.486415][T13143] bridge0: port 3(batadv0) entered forwarding state [ 750.597964][ T3911] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 750.607223][ T3911] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 750.991507][T13156] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 750.998725][T13156] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 751.106985][T13159] validate_nla: 4 callbacks suppressed [ 751.107002][T13159] netlink: 'syz.1.2488': attribute type 28 has an invalid length. [ 751.129961][T13159] netlink: 'syz.1.2488': attribute type 29 has an invalid length. [ 751.138371][T13159] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2488'. [ 751.355340][T13163] netlink: 'syz.0.2491': attribute type 9 has an invalid length. [ 751.377741][T13163] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2491'. [ 752.160264][ T5818] Bluetooth: hci0: command tx timeout [ 752.530282][T13158] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2488'. [ 752.754037][T13133] chnl_net:caif_netlink_parms(): no params data found [ 752.857222][ T59] hsr_slave_0: left promiscuous mode [ 752.879401][ T59] hsr_slave_1: left promiscuous mode [ 752.905444][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.913429][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.932818][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.940748][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.953005][ T59] dummy0: left allmulticast mode [ 752.968667][ T59] dummy0: left promiscuous mode [ 752.973764][ T59] bridge0: port 5(dummy0) entered disabled state [ 752.998034][ T59] hsr0: left allmulticast mode [ 753.014683][ T59] bridge0: port 4(hsr0) entered disabled state [ 753.025704][ T59] batadv0: left allmulticast mode [ 753.028254][T13175] netlink: 'syz.0.2500': attribute type 9 has an invalid length. [ 753.040761][ T59] batadv0: left promiscuous mode [ 753.043207][T13175] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2500'. [ 753.046906][ T59] bridge0: port 3(batadv0) entered disabled state [ 753.065251][ T59] bridge_slave_1: left allmulticast mode [ 753.072488][ T59] bridge_slave_1: left promiscuous mode [ 753.079065][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.087715][ T59] bridge_slave_0: left allmulticast mode [ 753.093477][ T59] bridge_slave_0: left promiscuous mode [ 753.099348][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.125126][ T59] veth0_macvtap: left promiscuous mode [ 753.131931][ T59] veth1_vlan: left promiscuous mode [ 753.137651][ T59] veth0_vlan: left promiscuous mode [ 753.214205][T13182] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.2495'. [ 753.803527][ T59] team0 (unregistering): Port device team_slave_1 removed [ 753.844451][ T59] team0 (unregistering): Port device team_slave_0 removed [ 753.885559][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.934544][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 754.206882][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 754.229379][ T5818] Bluetooth: hci0: command tx timeout [ 754.245782][ T59] bond0 (unregistering): Released all slaves [ 754.514047][T13133] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.528578][T13133] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.535970][T13133] bridge_slave_0: entered allmulticast mode [ 754.563832][T13133] bridge_slave_0: entered promiscuous mode [ 754.573311][T13133] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.587899][T13133] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.605397][T13133] bridge_slave_1: entered allmulticast mode [ 754.629249][T13133] bridge_slave_1: entered promiscuous mode [ 754.751773][T13193] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 754.758713][T13193] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 754.783942][T13133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 754.806877][T13133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 754.925796][T13133] team0: Port device team_slave_0 added [ 754.933732][T13195] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2499'. [ 754.978862][T13133] team0: Port device team_slave_1 added [ 754.993458][T13195] netlink: 'syz.0.2499': attribute type 28 has an invalid length. [ 755.028080][T13195] netlink: 'syz.0.2499': attribute type 29 has an invalid length. [ 755.065199][T13195] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2499'. [ 755.066490][T13133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 755.094677][T13133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.147498][T13133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 755.190810][T13133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 755.201311][T13133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 755.244734][T13133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 755.361824][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.411180][T13206] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2505'. [ 755.447314][T13133] hsr_slave_0: entered promiscuous mode [ 755.457712][T13133] hsr_slave_1: entered promiscuous mode [ 755.470872][T13133] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 755.479944][T13133] Cannot create hsr debugfs directory [ 755.486057][T13211] bridge0: port 3(batadv0) entered blocking state [ 755.511061][T13211] bridge0: port 3(batadv0) entered disabled state [ 755.528704][T13211] batadv0: entered allmulticast mode [ 755.543199][T13213] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2506'. [ 755.551888][T13215] netlink: 'syz.3.2508': attribute type 9 has an invalid length. [ 755.569054][T13215] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2508'. [ 755.582304][T13211] batadv0: entered promiscuous mode [ 755.596883][T13211] bridge0: port 3(batadv0) entered blocking state [ 755.603992][T13211] bridge0: port 3(batadv0) entered forwarding state [ 755.672839][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.779309][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 755.816861][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 755.826276][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 755.965327][T13226] netlink: 138036 bytes leftover after parsing attributes in process `syz.1.2510'. [ 756.030028][T13226] netlink: zone id is out of range [ 756.086560][T13226] netlink: zone id is out of range [ 756.126070][T13226] netlink: zone id is out of range [ 756.136953][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.148773][T13226] netlink: zone id is out of range [ 756.169612][T13226] netlink: zone id is out of range [ 756.174785][T13226] netlink: zone id is out of range [ 756.236622][T13226] netlink: zone id is out of range [ 756.257176][T13226] netlink: zone id is out of range [ 756.308352][ T5818] Bluetooth: hci0: command tx timeout [ 756.555948][T13233] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2514'. [ 756.583048][T13236] netlink: 'syz.3.2514': attribute type 28 has an invalid length. [ 756.628264][T13236] netlink: 'syz.3.2514': attribute type 29 has an invalid length. [ 756.662597][T13236] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2514'. [ 756.914576][T13240] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2517'. [ 756.966533][T13242] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.2518'. [ 757.368178][T13257] netlink: 'syz.3.2522': attribute type 9 has an invalid length. [ 757.377524][T13257] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2522'. [ 758.343062][T13133] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 758.397657][ T5818] Bluetooth: hci0: command tx timeout [ 758.456521][T13281] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2523'. [ 758.986963][T13133] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 759.081955][T13133] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 759.109925][T13133] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 759.306126][T13294] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2526'. [ 759.353114][T13294] netlink: 'syz.1.2526': attribute type 28 has an invalid length. [ 759.379676][T13294] netlink: 'syz.1.2526': attribute type 29 has an invalid length. [ 759.486200][T13133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 759.585756][T13133] 8021q: adding VLAN 0 to HW filter on device team0 [ 759.615808][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.623037][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.684013][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.691250][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.788899][T13303] netlink: 'syz.1.2531': attribute type 9 has an invalid length. [ 760.756678][T13314] net_ratelimit: 40 callbacks suppressed [ 760.756717][T13314] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 760.769681][T13314] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 761.012578][T13133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.154475][T13133] veth0_vlan: entered promiscuous mode [ 761.167781][T13326] __nla_validate_parse: 4 callbacks suppressed [ 761.167799][T13326] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2538'. [ 761.202620][T13326] netlink: 'syz.3.2538': attribute type 28 has an invalid length. [ 761.211991][T13326] netlink: 'syz.3.2538': attribute type 29 has an invalid length. [ 761.222820][T13326] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2538'. [ 761.247071][T13133] veth1_vlan: entered promiscuous mode [ 761.353780][T13133] veth0_macvtap: entered promiscuous mode [ 761.387239][T13133] veth1_macvtap: entered promiscuous mode [ 761.416531][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.437005][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.457417][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.462591][T13330] netlink: 'syz.3.2540': attribute type 9 has an invalid length. [ 761.477311][T13330] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2540'. [ 761.482478][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.503437][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.515407][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.525689][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.536333][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.551413][T13133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 761.563989][T13329] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2547'. [ 761.653768][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.683010][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.693524][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.704222][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.715193][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.725807][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.735739][T13133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 761.746498][T13133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.764699][T13133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.014601][T13133] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.023764][T13133] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.033291][T13133] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.042589][T13133] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.245320][T13337] netlink: 'syz.1.2542': attribute type 9 has an invalid length. [ 762.262248][T13337] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2542'. [ 763.291106][T13354] netlink: 'syz.1.2548': attribute type 28 has an invalid length. [ 763.301554][T13349] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2548'. [ 763.311278][T13354] netlink: 'syz.1.2548': attribute type 29 has an invalid length. [ 763.311303][T13354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2548'. [ 763.387702][ T8985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.407414][ T8985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.495372][T13357] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2550'. [ 763.575484][ T1078] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.610597][ T1078] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.753439][T13360] netlink: 'syz.1.2552': attribute type 9 has an invalid length. [ 763.790049][T13360] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2552'. [ 764.949108][T13369] netlink: 'syz.0.2555': attribute type 9 has an invalid length. [ 764.967540][T13369] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2555'. [ 765.352752][T13379] netlink: 'syz.1.2556': attribute type 9 has an invalid length. [ 766.099753][T13393] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 766.110459][T13393] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 766.121814][T13393] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 766.142503][T13393] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 766.152000][T13393] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 766.160152][T13393] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 766.566939][T13400] netlink: 'syz.2.2564': attribute type 9 has an invalid length. [ 766.589985][T13400] __nla_validate_parse: 2 callbacks suppressed [ 766.590003][T13400] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2564'. [ 767.275986][T13410] syzkaller0: entered promiscuous mode [ 767.283647][T13410] syzkaller0: entered allmulticast mode [ 767.975308][T13425] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 767.982344][T13425] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 768.234151][ T5818] Bluetooth: hci2: command tx timeout [ 768.905049][T13444] netlink: 'syz.0.2578': attribute type 9 has an invalid length. [ 768.915203][T13444] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2578'. [ 769.929786][T13430] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2573'. [ 770.186814][T13392] chnl_net:caif_netlink_parms(): no params data found [ 770.311719][ T5818] Bluetooth: hci2: command tx timeout [ 770.374883][T13456] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 770.382057][T13456] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 770.816107][T13392] bridge0: port 1(bridge_slave_0) entered blocking state [ 770.834972][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.858638][T13392] bridge_slave_0: entered allmulticast mode [ 770.883105][T13392] bridge_slave_0: entered promiscuous mode [ 770.925097][T13473] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.2586'. [ 770.949726][T13392] bridge0: port 2(bridge_slave_1) entered blocking state [ 770.966373][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 770.974445][T13392] bridge_slave_1: entered allmulticast mode [ 770.982307][T13392] bridge_slave_1: entered promiscuous mode [ 771.015366][T13472] netlink: 'syz.2.2587': attribute type 9 has an invalid length. [ 771.046439][T13472] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2587'. [ 771.127144][T13392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.174598][T13392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.274799][T13392] team0: Port device team_slave_0 added [ 771.435776][T13476] syzkaller0: entered promiscuous mode [ 771.447260][T13476] syzkaller0: entered allmulticast mode [ 771.456807][T13392] team0: Port device team_slave_1 added [ 771.863252][T13488] netlink: 'syz.1.2591': attribute type 9 has an invalid length. [ 771.874657][T13488] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2591'. [ 772.389055][ T5818] Bluetooth: hci2: command tx timeout [ 773.458308][T13392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 773.465305][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.496439][T13392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 773.558102][T13392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 773.565097][T13392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 773.611281][T13392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 773.953171][T13392] hsr_slave_0: entered promiscuous mode [ 773.991176][T13392] hsr_slave_1: entered promiscuous mode [ 774.028883][T13392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 774.057207][T13392] Cannot create hsr debugfs directory [ 774.452984][T13510] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2600'. [ 774.467709][ T5818] Bluetooth: hci2: command tx timeout [ 774.483328][T13510] netlink: zone id is out of range [ 774.509793][T13512] syzkaller0: entered promiscuous mode [ 774.509819][T13512] syzkaller0: entered allmulticast mode [ 774.544689][T13510] netlink: zone id is out of range [ 774.556837][T13510] netlink: zone id is out of range [ 774.576204][T13510] netlink: zone id is out of range [ 774.582025][T13510] netlink: zone id is out of range [ 774.588065][T13510] netlink: zone id is out of range [ 774.593448][T13510] netlink: zone id is out of range [ 774.601510][T13510] netlink: zone id is out of range [ 774.606858][T13510] netlink: zone id is out of range [ 774.623563][T13510] netlink: zone id is out of range [ 774.674527][T13392] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.191166][T13392] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.347601][T13392] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.429537][T13520] netlink: 'syz.2.2604': attribute type 9 has an invalid length. [ 776.444389][T13520] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2604'. [ 776.503919][T13392] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.614043][T13523] syzkaller0: entered promiscuous mode [ 776.620486][T13523] syzkaller0: entered allmulticast mode [ 776.775564][ T59] hsr_slave_0: left promiscuous mode [ 776.781863][ T59] hsr_slave_1: left promiscuous mode [ 776.791689][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 776.800604][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 776.812502][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 776.820706][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 776.832590][ T59] batadv0: left allmulticast mode [ 776.837867][ T59] batadv0: left promiscuous mode [ 776.843037][ T59] bridge0: port 3(batadv0) entered disabled state [ 776.852382][ T59] bridge_slave_1: left allmulticast mode [ 776.858415][ T59] bridge_slave_1: left promiscuous mode [ 776.864453][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.873781][ T59] bridge_slave_0: left allmulticast mode [ 776.879853][ T59] bridge_slave_0: left promiscuous mode [ 776.885647][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.907213][ T59] veth0_macvtap: left promiscuous mode [ 776.913021][ T59] veth1_vlan: left promiscuous mode [ 776.919005][ T59] veth0_vlan: left promiscuous mode [ 777.092489][ T59] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 777.531856][ T59] team0 (unregistering): Port device team_slave_1 removed [ 777.576773][ T59] team0 (unregistering): Port device team_slave_0 removed [ 777.624874][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.672214][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.953135][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 777.989477][ T59] bond0 (unregistering): Released all slaves [ 779.095615][T13554] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2614'. [ 780.254563][T13551] bridge0: port 3(batadv0) entered blocking state [ 780.264754][T13551] bridge0: port 3(batadv0) entered disabled state [ 780.276016][T13551] batadv0: entered allmulticast mode [ 780.285394][T13551] batadv0: entered promiscuous mode [ 780.299519][T13551] bridge0: port 3(batadv0) entered blocking state [ 780.306093][T13551] bridge0: port 3(batadv0) entered forwarding state [ 780.360603][ T3911] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 780.370402][ T3911] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 780.428089][T13552] syzkaller0: entered promiscuous mode [ 780.433644][T13552] syzkaller0: entered allmulticast mode [ 780.949861][T13574] net_ratelimit: 40 callbacks suppressed [ 780.949907][T13574] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 780.962597][T13574] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 782.555736][T13581] syzkaller0: entered promiscuous mode [ 782.561721][T13581] syzkaller0: entered allmulticast mode [ 782.663673][T13583] syzkaller0: entered promiscuous mode [ 782.670274][T13583] syzkaller0: entered allmulticast mode [ 782.861541][T13599] netlink: 'syz.0.2627': attribute type 9 has an invalid length. [ 782.870971][T13599] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2627'. [ 786.071376][T13392] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 786.177014][T13612] syzkaller0: entered promiscuous mode [ 786.183337][T13612] syzkaller0: entered allmulticast mode [ 787.667132][T13392] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 787.677904][T13392] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 787.718653][T13392] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 787.977257][T13392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 788.008158][T13624] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2632'. [ 788.042284][T13624] netlink: zone id is out of range [ 788.078385][T13624] netlink: zone id is out of range [ 788.098936][T13624] netlink: zone id is out of range [ 788.112215][T13624] netlink: zone id is out of range [ 788.120741][T13624] netlink: zone id is out of range [ 788.129294][T13624] netlink: zone id is out of range [ 788.134785][T13624] netlink: zone id is out of range [ 788.141079][T13624] netlink: zone id is out of range [ 788.146525][T13624] netlink: zone id is out of range [ 788.153458][T13624] netlink: zone id is out of range [ 788.246371][T13392] 8021q: adding VLAN 0 to HW filter on device team0 [ 788.338519][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.345765][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 788.386031][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.393260][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state [ 789.429747][T13647] netlink: 'syz.2.2642': attribute type 9 has an invalid length. [ 789.452352][T13647] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2642'. [ 789.518112][T13645] syzkaller0: entered promiscuous mode [ 789.523863][T13645] syzkaller0: entered allmulticast mode [ 790.204037][T13664] netlink: 'syz.2.2647': attribute type 9 has an invalid length. [ 790.212390][T13664] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2647'. [ 791.554904][T13392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 792.053512][T13392] veth0_vlan: entered promiscuous mode [ 792.123867][T13674] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2649'. [ 792.155264][T13392] veth1_vlan: entered promiscuous mode [ 792.818754][T13392] veth0_macvtap: entered promiscuous mode [ 792.864962][T13392] veth1_macvtap: entered promiscuous mode [ 792.952801][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 792.987371][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.001429][T13685] netlink: 'syz.1.2654': attribute type 9 has an invalid length. [ 793.004069][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.014924][T13685] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2654'. [ 793.037590][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.057391][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.074005][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.083972][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 793.097353][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.118924][T13392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 793.161250][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.176656][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.192454][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.206140][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.216080][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.230447][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.241048][T13392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 793.252670][T13392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 793.264270][T13392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 793.296302][T13392] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.305204][T13392] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.316428][T13392] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.325872][T13392] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 793.899206][T13696] netlink: 'syz.0.2657': attribute type 9 has an invalid length. [ 793.915306][T13696] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2657'. [ 794.129123][T13702] net_ratelimit: 42 callbacks suppressed [ 794.129170][T13702] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 794.141812][T13702] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 794.589582][T13708] netlink: 'syz.1.2662': attribute type 9 has an invalid length. [ 794.614317][T13708] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2662'. [ 794.658686][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.680894][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.917842][T13714] netlink: 138036 bytes leftover after parsing attributes in process `syz.2.2663'. [ 794.935268][T13714] netlink: zone id is out of range [ 794.957588][T13714] netlink: zone id is out of range [ 794.963341][T13714] netlink: zone id is out of range [ 794.969376][T13714] netlink: zone id is out of range [ 794.974844][T13714] netlink: zone id is out of range [ 794.985374][T13714] netlink: zone id is out of range [ 794.992720][T13714] netlink: zone id is out of range [ 795.007730][T13714] netlink: zone id is out of range [ 795.065921][ T3437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 795.096970][ T3437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 795.380897][T13721] netlink: 'syz.1.2667': attribute type 9 has an invalid length. [ 795.396949][T13721] netlink: 183128 bytes leftover after parsing attributes in process `syz.1.2667'. [ 795.796111][T13734] netlink: 'syz.3.2559': attribute type 28 has an invalid length. [ 795.818916][T13734] netlink: 'syz.3.2559': attribute type 29 has an invalid length. [ 795.837809][T13734] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2559'. [ 796.335550][T13732] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2559'. [ 796.938988][T13754] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2672'. [ 798.398427][T13771] netlink: 'syz.1.2682': attribute type 28 has an invalid length. [ 798.406865][T13771] netlink: 'syz.1.2682': attribute type 29 has an invalid length. [ 798.415639][T13771] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2682'. [ 798.777028][T13776] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2682'. [ 799.573024][T13792] bridge0: port 3(batadv0) entered blocking state [ 799.588286][T13792] bridge0: port 3(batadv0) entered disabled state [ 799.614914][T13792] batadv0: entered allmulticast mode [ 799.663582][T13802] netlink: 138036 bytes leftover after parsing attributes in process `syz.3.2687'. [ 799.721541][T13792] batadv0: entered promiscuous mode [ 799.739420][T13802] net_ratelimit: 42 callbacks suppressed [ 799.739440][T13802] netlink: zone id is out of range [ 799.797713][T13792] bridge0: port 3(batadv0) entered blocking state [ 799.806870][T13792] bridge0: port 3(batadv0) entered forwarding state [ 799.821072][T13802] netlink: zone id is out of range [ 799.851853][T13802] netlink: zone id is out of range [ 799.857059][T13802] netlink: zone id is out of range [ 799.882601][T13802] netlink: zone id is out of range [ 799.900183][T13802] netlink: zone id is out of range [ 799.924374][T13802] netlink: zone id is out of range [ 799.958170][T13802] netlink: zone id is out of range [ 799.965875][T13802] netlink: zone id is out of range [ 799.994986][T13802] netlink: zone id is out of range [ 800.036899][ T42] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 800.046272][ T42] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 800.706925][T13814] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2694'. [ 800.733289][T13814] netlink: 'syz.1.2694': attribute type 28 has an invalid length. [ 800.794109][T13814] netlink: 'syz.1.2694': attribute type 29 has an invalid length. [ 800.846020][T13814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2694'. [ 801.004965][T13819] netlink: 'syz.0.2698': attribute type 9 has an invalid length. [ 801.017831][T13819] netlink: 183128 bytes leftover after parsing attributes in process `syz.0.2698'. [ 801.309774][T13831] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2702'. [ 801.452842][T13831] netlink: 'syz.3.2702': attribute type 28 has an invalid length. [ 801.512379][T13831] netlink: 'syz.3.2702': attribute type 29 has an invalid length. [ 801.561501][T13826] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2702'. [ 801.598939][T13831] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2702'. [ 801.716536][T13841] netlink: 'syz.2.2703': attribute type 28 has an invalid length. [ 801.758910][T13839] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2703'. [ 801.777439][T13841] netlink: 'syz.2.2703': attribute type 29 has an invalid length. [ 801.804305][T13841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2703'. [ 801.860884][T13826] netlink: 'syz.3.2702': attribute type 1 has an invalid length. [ 801.884441][T13826] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2702'. [ 801.935411][T13830] netlink: 'syz.2.2703': attribute type 1 has an invalid length. [ 802.262824][T13847] syzkaller0: entered promiscuous mode [ 802.280038][T13847] syzkaller0: entered allmulticast mode [ 802.309820][T13858] netlink: 'syz.2.2709': attribute type 28 has an invalid length. [ 804.904735][T13883] syzkaller0: entered promiscuous mode [ 804.913323][T13883] syzkaller0: entered allmulticast mode Stopping sshd: stopped /usr/sbin/sshd (pid 5534) OK Stopping crond: stopped /usr/sbin/crond (pid 5518) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5433) Stopping network: [ 807.912906][T13897] __nla_validate_parse: 5 callbacks suppressed [ 807.912923][T13897] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2720'. [ 808.204357][T13929] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2724'. [ 808.274278][T13925] validate_nla: 1 callbacks suppressed [ 808.274367][T13925] netlink: 'syz.2.2724': attribute type 28 has an invalid length. [ 808.319676][T13925] netlink: 'syz.2.2724': attribute type 29 has an invalid length. [ 808.388418][T13925] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2724'. [ 808.752894][T13936] netlink: 'syz.3.2726': attribute type 9 has an invalid length. [ 808.787827][T13936] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2726'. [ 808.959439][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.966207][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.406827][T13941] syzkaller0: entered promiscuous mode [ 809.412907][T13941] syzkaller0: entered allmulticast mode [ 810.301054][T13973] netlink: 138036 bytes leftover after parsing attributes in process `syz.0.2735'. [ 810.325006][T13973] net_ratelimit: 42 callbacks suppressed [ 810.325024][T13973] netlink: zone id is out of range [ 810.349520][T13973] netlink: zone id is out of range [ 810.361401][T13973] netlink: zone id is out of range [ 810.366569][T13973] netlink: zone id is out of range [ 810.379914][T13973] netlink: zone id is out of range [ 810.392310][T13973] netlink: zone id is out of range [ 810.411174][T13973] netlink: zone id is out of range [ 810.416405][T13973] netlink: zone id is out of range [ 810.425315][T13973] netlink: zone id is out of range [ 810.436983][T13973] netlink: zone id is out of range [ 811.738684][T13965] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.2733'. OK [ 811.898721][T13964] syzkaller0: entered promiscuous mode [ 811.904258][T13964] syzkaller0: entered allmulticast mode Stopping iptables: OK [ 812.058930][ T59] hsr_slave_0: left promiscuous mode [ 812.076385][T13990] netlink: 'syz.3.2737': attribute type 28 has an invalid length. [ 812.086552][ T59] hsr_slave_1: left promiscuous mode [ 812.097169][T13990] netlink: 'syz.3.2737': attribute type 29 has an invalid length. [ 812.111572][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 812.127869][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.135624][T13990] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2737'. [ 812.162447][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 812.182910][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 812.211693][ T59] dummy0: left allmulticast mode [ 812.229539][ T59] dummy0: left promiscuous mode [ 812.243350][ T59] bridge0: port 4(dummy0) entered disabled state [ 812.267531][ T59] batadv0: left allmulticast mode [ 812.273210][ T59] batadv0: left promiscuous mode [ 812.285243][ T59] bridge0: port 3(batadv0) entered disabled state Stopping system message bus: [ 812.316258][ T59] bridge_slave_1: left allmulticast mode [ 812.332427][ T59] bridge_slave_1: left promiscuous mode [ 812.350420][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.378347][ T59] bridge_slave_0: left allmulticast mode [ 812.388899][ T59] bridge_slave_0: left promiscuous mode [ 812.412297][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.503918][ T59] veth0_macvtap: left promiscuous mode [ 812.516740][ T59] veth1_vlan: left promiscuous mode [ 812.529281][ T59] veth0_vlan: left promiscuous mode [ 812.986962][ T59] bond0 (unregistering): (slave geneve0): Releasing backup interface done [ 813.632901][ T59] team0 (unregistering): Port device team_slave_1 removed [ 813.714526][ T59] team0 (unregistering): Port device team_slave_0 removed Stopping klogd: [ 813.766448][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 813.851590][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface OK Stopping acpid: [ 814.229529][ T59] bond0 (unregistering): (slave team0): Releasing backup interface [ 814.263171][ T59] bond0 (unregistering): Released all slaves OK Stopping syslogd: stopped /sbin/syslogd (pid 5121) OK umount: can't remount debugfs read-only umount: can't remount tmpfs read-only [ 816.117369][T13985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2737'. [ 816.149763][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 816.360086][T14026] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.2749'. [ 816.420086][T14026] netlink: 'syz.0.2749': attribute type 1 has an invalid length. [ 816.537617][T14026] netlink: 16520 bytes leftover after parsing attributes in process `syz.0.2749'. [ 816.580261][T14037] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2749'. [ 816.604457][T14028] netlink: 'syz.3.2741': attribute type 9 has an invalid length. [ 816.629568][T14028] netlink: 183128 bytes leftover after parsing attributes in process `syz.3.2741'. [ 816.745123][T14026] netlink: 'syz.0.2749': attribute type 28 has an invalid length. [ 816.818672][T14026] netlink: 'syz.0.2749': attribute type 29 has an invalid length. [ 816.826577][T14026] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2749'. [ 817.501123][T14035] netlink: 'syz.2.2742': attribute type 9 has an invalid length. [ 817.520901][T14035] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2742'. [ 818.673189][T14046] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2753'. [ 818.704439][T14046] netlink: 'syz.3.2753': attribute type 28 has an invalid length. [ 818.725073][T14046] netlink: 'syz.3.2753': attribute type 29 has an invalid length. [ 818.781191][T14046] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2753'. [ 818.821820][T14048] netlink: 'syz.2.2745': attribute type 9 has an invalid length. [ 818.843823][T14048] netlink: 183128 bytes leftover after parsing attributes in process `syz.2.2745'. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Connection to 10.128.1.8 closed by remote host. [ 819.618445][T14050] netlink: 'syz.1.2746': attribute type 1 has an invalid length. Sent SIGKILL to all processes Requesting system poweroff [ 820.569397][ T1078] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.671176][ T1078] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.755693][ T1078] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 820.842284][ T1078] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 821.564386][T14060] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 821.574787][T14060] ACPI: PM: Preparing to enter system sleep state S5 [ 821.584567][T14060] kvm: exiting hardware virtualization [ 821.590324][T14060] reboot: Power down serialport: VM disconnected.