last executing test programs: 3m54.975455864s ago: executing program 2 (id=3274): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000040000000800000009"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000002000085000000b000000018110000", @ANYRES32=r0, @ANYRES64=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x10c002, 0xac5d, 0x0, 0x8, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101140, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000280)={0x2, &(0x7f0000000400)=[{0x30, 0xff, 0x6, 0xfffff008}, {0x6, 0xff, 0x84, 0x1}]}) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@bloom_filter={0x1e, 0x7, 0x7fff, 0x4, 0x20000, r0, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x1, 0x4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000a00)={&(0x7f0000000580)="5669e6e30c85884e2381c97ad195e6bc72333aaa8474f3ca9e8dea09f0ad6210da3f8b7eda34bc571c261859c129dada3b753c6fd3126ccb089afb67f96004a4606f8ab8aade8c730b280f60f6507397682e9730d525c79efc7ce7a55a025e98d08c0600796ddc53a8c97616cdb60744cb4232ec1d437381d94d3a74a4067b99aff6568a499faf74b06e03603ba9d5", &(0x7f0000000640)=""/224, &(0x7f0000000740)="5ac52138325e8227ce38829d7f4aa49c33648327305ff3b06db124fd31aac011bd3ba73d2156470cc6f96f95684111407cd026de1f15827016080586a24cef45d54670ddd296d011fbbe7ae399dbecbca589250e8e09a4e7c3921ca224a652b8ab2a3e82a7f67a4bcdb079ea7a1c27e5f49a03f3aeb32c2993f435df0a9dd68bd5f2e0", &(0x7f0000000800)="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", 0x6, r3}, 0x38) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c80)={r5, 0x58, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000cc0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x7, [@enum64={0x6, 0x3, 0x0, 0x13, 0x0, 0x4, [{0x10, 0x5, 0x8f3}, {0xf, 0x7fffffff, 0x5}, {0x5, 0x0, 0x2}]}, @func={0x3, 0x0, 0x0, 0xc, 0x4}, @volatile={0x8}]}, {0x0, [0x0, 0x61, 0x0, 0x61, 0x2e]}}, &(0x7f0000000d40)=""/183, 0x67, 0xb7, 0x0, 0x4a9, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x18, 0x16, &(0x7f0000000a40)=@raw=[@btf_id={0x18, 0x1, 0x3, 0x0, 0x5}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x1}, @generic={0x8, 0xb, 0x7, 0x40, 0xffff0000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x82}, @generic={0x9, 0x0, 0x7, 0x4, 0x8}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xf}], &(0x7f0000000b00)='GPL\x00', 0x0, 0x86, &(0x7f0000000b40)=""/134, 0x41000, 0x50, '\x00', r7, 0x0, r8, 0x8, &(0x7f0000000e40)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000e80)={0x2, 0xc, 0x5, 0x6}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000ec0)=[r5, r3, r3, r5, r5, r0, r5, r0], &(0x7f0000000f00)=[{0x4, 0x3, 0x9, 0x8}, {0x4, 0x2, 0xe, 0x6}, {0x5, 0x2, 0x9, 0x7}, {0x4, 0x1, 0xa, 0x1}, {0x4, 0x5, 0xe, 0x5}, {0x3, 0x1, 0x7, 0x3}, {0x3, 0x4, 0x0, 0x7}, {0x1, 0x1, 0x2, 0x3}, {0x4, 0x1, 0x2, 0xc}, {0x4, 0x5, 0x4, 0x7}], 0x10, 0x3}, 0x94) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f91a24fc602f020f000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r5, 0x31, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0xffff0000}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710429000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 3m54.638258115s ago: executing program 2 (id=3279): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000800), &(0x7f00000006c0)=""/194}, 0x20) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x24080, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc006, 0xac5d, 0xffffffff, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0e00009bd029ef8020ab070004000523a608463a3f", @ANYRES16=r2], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001840)="ad86a145498148c6d24a4b31a13ab223e49d32e20ea07f46ef06c9cfeaa442c41dfd76717df583363a6476a2d5ff653e7ac5bce54179dfda47afbe8cda4723db2504bbe33d417678405a7d2ca37f0b77a8c5962aa92f76d2d524debc4874e60bd1b13601450caded33e34d2d93d7f458febb4c4af17b6f4e34c866a41e86418e0f8b6f1f5e75aa4372dd44760e3c1e2508162e0f690c42", &(0x7f0000001900)="39ee1d0430207fcc52f59a93c35d94678d11249600b9f43509ae93aa19c81715675f7528489d448b564855b87c31eac37053c27ae338fb6f552e823f97cedf5c49258c449c1ac8824ec4314bd4f1c3a3cfab7ccc92824d79afd4dd458bfb3c8ad107dff970a942ad86f79a456d56baf2704de7d7823e6b6683ff85c62763", 0x1ff, r0, 0x4}, 0x38) r4 = socket$kcm(0x29, 0x7, 0x0) recvmsg$kcm(r4, &(0x7f0000000740)={&(0x7f0000000000)=@nfc, 0x80, &(0x7f0000000600)=[{&(0x7f0000000100)=""/5, 0x5}, {&(0x7f00000001c0)=""/162, 0xa2}, {&(0x7f0000000280)=""/218, 0xda}, {&(0x7f0000000380)=""/207, 0xcf}, {0x0}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/17, 0x11}], 0x7, &(0x7f00000006c0)=""/86, 0x56}, 0x140) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000b40)={&(0x7f00000008c0)="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", &(0x7f00000009c0)=""/228, &(0x7f0000000ac0)="eea734df4f38f0beba39a6df9f30acf05968e85c", &(0x7f0000000b00)="3a3d2d79763191932e5e8430a786", 0x2, r0}, 0x38) r5 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000880)={@map=r0, 0x26, 0x0, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) sendmsg$kcm(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188e6b62aa73772cc9f1ba1f848430000009bb9ef7f75c9f12c0e000a000f000000a7e11e2f7c5d", 0x2e}], 0x1}, 0x40) 3m53.730394163s ago: executing program 2 (id=3282): r0 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x7, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3fb, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xf}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair(0x18, 0x3, 0xd6e, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r6, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r7, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x40e8, 0x0, 0x0, 0x0, 0x0}, 0x40) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) setsockopt$sock_attach_bpf(r8, 0x0, 0x10, 0x0, 0x11) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x60, &(0x7f0000000000)=[{&(0x7f0000000300)="2000000011008188040f80ec59acbc0413a181000d0000004001000000000000", 0x20}], 0x1}, 0x40000) 3m52.844134711s ago: executing program 2 (id=3286): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa2}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) socket$kcm(0x2, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r1, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r4 = socket$kcm(0xa, 0x2, 0x88) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x41, &(0x7f0000000040)=r3, 0x4) 3m48.170354106s ago: executing program 2 (id=3289): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720ac4ff000000007110ce00000000009500000000000000"], &(0x7f0000000480)='GPL\x00'}, 0x80) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000000c0), &(0x7f0000000140)=r2}, 0x20) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88841, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) 3m47.879993964s ago: executing program 2 (id=3294): socket$kcm(0x21, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x300) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000520033d087277b9b108b4ab51c"], 0xfe33) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000006, 0x0) socket$kcm(0x2c, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000003c0), 0x6e, &(0x7f0000001280)=[{&(0x7f0000000b40)=""/77, 0x4d}, {&(0x7f0000000f80)=""/207, 0xcf}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000011c0)=""/157, 0x9d}], 0x6}, 0x40010000) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}, {&(0x7f00000017c0)="27508686058c28de27d11efe69991abae0796fbd5d7c3fc47623734ad68baa7c3c6662f373778d7ef7b8a8be161f0475bf01b8a379f4e825fd7beb27c0c1da66b2a5ef85947e4bd3cef8b8f3975a07edceca9365d215d29362292bfa73ae1eb31df398aa89", 0x65}, {&(0x7f0000001480)="d3ffee1deddc76b615336dbeb7ec04ecb5626393e18e987813ac85b8db1ad4c02bb3b852652a9b3df01a9549c1eaf36f211bcf1bfc80eedb4f868c6e250631e7ecd5577bf0fdbf3dba0b74f4d5a8f183e5f3786337019f52fe841775054e0bb46f71f38973baf5e99994dc239fbdb7729d6cf8e680fa9b52831897c7e2bf7a171a55e978dae28897be4d284af16ce97d2ae5376de03af21894737977993cfc0d0c704ba585ccc757c7b933afe37f35763ba7e853c6a6cc9314eb3ea8c84262004146185d8029ee9f92c8e9003e", 0xcd}, {&(0x7f0000001580)="6a6a19aa490a8d3eb7c3ecf5ac217fd566d5c2fc9d68dd7a0bd46c6b493c8d360286c10405942fe47d733da303cb964a0cdbd8b310ae3dcec91091c1e116fda5c6f640f1470ceb6e33904428274af15f120c2faa9bdb4fdba4e31bf0caf84dcb72cc54570960a51ce7924769e526dc92f0614aeae378dd7f1605d68e777899e458998840d1f21b32f02e9731a304e7cfecfa5c04bb5e77f18eeba168435334ebc9a17ff214ea8db2545d4852fd2f4b6e4f", 0xb1}, {&(0x7f0000001840)="8d6a6089c7809671abdb29bd62fc5e192acb21a6ee00d83e297ba4d3c2637d147c74ba7dd9ee2c85d5fb3632a7b34921328485e3ed430ee0f116575bfca5926b7097e1c87281ed11c6d3adeb015b05719c1ac73d4d02ca2b27595d962eed6da863b54bd1b9b900c5d015365a72c62d231a4640f921083594bccfc393c20b64e9d62492997e982d1e1c7388f3c64c9f4fd683f9145a738ccd274309701c537438a9f0cb018d38050329e0ee6a53fb312c2686020f9d7f49ce95ba7ee24abe9f224fc2533c7748a930665dec4fee7f1634788bafa8", 0xd4}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0x6, 0x10000201, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x1231, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000000000, 0xc2ba, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x22, 0x80000, 0x0, &(0x7f0000000280)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendmsg(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000ec0)="f3037a70df05304338769202fa0e2d07e9e0cefbac681bafb116c9c672691285a4a899b7dc1cb598eade977d2180ea2396455369fe9c3ec34cb16464d73712260edab124ba3d5c362f8b974189811884d6ce447bd39e527d", 0x58}, {&(0x7f0000000540)="7c85b744770aaf47d41a9d32f65a9186b9681cebb7ffac4e95425b9e49ed0ad35c8b91a379b7506ab0d20bdac33561b45e20de0861c1cd21d0f48b464d7dc77085815bece59840893645b9a87d490b25e2af9f02e5367090b86bcdb3c89cab155daef54da03b8293967aa8630e4eb2e820952240305898af646ba57678ac624906f516f1925ffddc53b9764f6fec6a1802e0316d837941d893f52974671b6d890da91c9af93a9672f06a6d911c898c8fccb71c084e074b1b273dc7b83c2ffa518b1567a7d0bbb4bab3db2f9a8289507cc4e5f1828ebc553445a5d61fd054c6727591291cfecdf4a4850403166481f555862232800acf8376d7056cf4d2dff9", 0xff}, {&(0x7f0000000640)}, {&(0x7f0000000640)="046c5b7e991742d89403717990562967d7528ce20d5c88f82a10a1ed53fea9b700b3cbf385af37ed16d4d36d0f93d90dfbb33b03b87ac43e179393ad084e098f41511d8e1cc621c1a017c27a0de72a1d3fa20094c559f4bd7f5df752fbac15866b027a231e9a19e50ff03d3ebe544772a4235e7f78f92c6258e0ad412fb5534ebd0a721c9a2b587b805277d0125bc6fef8d292f1ef07540dc56b3ba612b6b7337da8cc6f9ec7b819d95557da64b79f751cc86a20112b82ccc821b66332bdbf", 0xbf}, {&(0x7f0000000840)="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", 0xfd}, {&(0x7f0000000940)="5ee5c9753ad07eb1414c8572ee18eaf36182bbdad40776d8051f07dcb14cbd5db1a92782ce5f6da5fcb8514363917755fa46ea249ca91ed0a71f8d2227e0e0184018ef5f17dda87fc5f53babef92be2871321e9472df289afc111de467c6175b864436813750446b23afd56532982343b6ae3f1f94493948371fec8a3dee34a0d821cda628f478f5015bde252d896b5e84dc6236e78fed85dd3e20a8e0d74db90466087047d8e76618259e5bb93686", 0xaf}, {&(0x7f0000000a00)="78baef7a5feff36a5e189e64c8fead1d6cb6aaf9dbc34f5d5ca970c9b3fe138baa4f90d4f557ba471c29c758663a6df72dc8a219ee056be5e0561c81003f16cd319f5604fb103d49975b9b06ef1e317ed256379f46022d715a1725fcff562fd6dff5d792b02bf27102d9c1ab225c0ffbad14555559eea8177acddaaa1e504fa1b07c9093", 0x84}, {&(0x7f0000000ac0)="0f6f0876e03a43c5980ea33e76fe76aa0bd62d9743a84a395244712be0ff5fe2f8b2fbfd328fd53ed58e79a901dd518be8310aa4e823080cb8a3a985c34a1d8bf98fed9aaeff750466e3cd", 0x4b}, {&(0x7f0000000c40)="afbabf4d92d3e33fe222a61c22c118eeb714a3fc68983ad360b5601212633000e93b1ad52a0c81aab5c1eb1acf643636b149fcc87929c8a690c369476d2cc53cecb261a880589bb8e5c83de1df394a74156ff47f169158768af455a05a435a83c974e968f00926de332b9a6671ac97b8824d9d37408ae908775b48c581eea40b1271ac30fb71cfc087dbb03bb65d278193cbfed42817e80cd386ba299c579c9feff912a819eedd89fdc3b6dc26ea974632e7d416bb2c192c2728fa3a351aa97e199391240af61bed9a7b02ea9ef80365b17c7abe2e098ff3073002c77e42aa9141ab68", 0xe3}], 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x130}, 0x851) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 3m32.819187431s ago: executing program 32 (id=3294): socket$kcm(0x21, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x49, 0x0, 0x300) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="11000000520033d087277b9b108b4ab51c"], 0xfe33) close(0xffffffffffffffff) socket$kcm(0x2, 0x200000000000006, 0x0) socket$kcm(0x2c, 0x3, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f00000003c0), 0x6e, &(0x7f0000001280)=[{&(0x7f0000000b40)=""/77, 0x4d}, {&(0x7f0000000f80)=""/207, 0xcf}, {&(0x7f0000001080)}, {&(0x7f00000010c0)=""/162, 0xa2}, {&(0x7f0000000380)=""/44, 0x2c}, {&(0x7f00000011c0)=""/157, 0x9d}], 0x6}, 0x40010000) socket$kcm(0x10, 0x2, 0x4) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000780)="5c00000014006b030231a6080c000af32c0cae934c46a7539602000f00e5aa000017d34460bc24ea000007000000000000002756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1000000e6657594f1817d", 0x5c}, {&(0x7f00000017c0)="27508686058c28de27d11efe69991abae0796fbd5d7c3fc47623734ad68baa7c3c6662f373778d7ef7b8a8be161f0475bf01b8a379f4e825fd7beb27c0c1da66b2a5ef85947e4bd3cef8b8f3975a07edceca9365d215d29362292bfa73ae1eb31df398aa89", 0x65}, {&(0x7f0000001480)="d3ffee1deddc76b615336dbeb7ec04ecb5626393e18e987813ac85b8db1ad4c02bb3b852652a9b3df01a9549c1eaf36f211bcf1bfc80eedb4f868c6e250631e7ecd5577bf0fdbf3dba0b74f4d5a8f183e5f3786337019f52fe841775054e0bb46f71f38973baf5e99994dc239fbdb7729d6cf8e680fa9b52831897c7e2bf7a171a55e978dae28897be4d284af16ce97d2ae5376de03af21894737977993cfc0d0c704ba585ccc757c7b933afe37f35763ba7e853c6a6cc9314eb3ea8c84262004146185d8029ee9f92c8e9003e", 0xcd}, {&(0x7f0000001580)="6a6a19aa490a8d3eb7c3ecf5ac217fd566d5c2fc9d68dd7a0bd46c6b493c8d360286c10405942fe47d733da303cb964a0cdbd8b310ae3dcec91091c1e116fda5c6f640f1470ceb6e33904428274af15f120c2faa9bdb4fdba4e31bf0caf84dcb72cc54570960a51ce7924769e526dc92f0614aeae378dd7f1605d68e777899e458998840d1f21b32f02e9731a304e7cfecfa5c04bb5e77f18eeba168435334ebc9a17ff214ea8db2545d4852fd2f4b6e4f", 0xb1}, {&(0x7f0000001840)="8d6a6089c7809671abdb29bd62fc5e192acb21a6ee00d83e297ba4d3c2637d147c74ba7dd9ee2c85d5fb3632a7b34921328485e3ed430ee0f116575bfca5926b7097e1c87281ed11c6d3adeb015b05719c1ac73d4d02ca2b27595d962eed6da863b54bd1b9b900c5d015365a72c62d231a4640f921083594bccfc393c20b64e9d62492997e982d1e1c7388f3c64c9f4fd683f9145a738ccd274309701c537438a9f0cb018d38050329e0ee6a53fb312c2686020f9d7f49ce95ba7ee24abe9f224fc2533c7748a930665dec4fee7f1634788bafa8", 0xd4}], 0x5, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x1, 0x3, 0x0, 0x0, 0xffffffffffffffff, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0x6, 0x10000201, 0x5}, 0x0, 0x6, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x5, 0x3, &(0x7f0000000200)=ANY=[@ANYRES16], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x1231, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b2, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x8000000000000000, 0xc2ba, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) socketpair(0x22, 0x80000, 0x0, &(0x7f0000000280)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) sendmsg(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000ec0)="f3037a70df05304338769202fa0e2d07e9e0cefbac681bafb116c9c672691285a4a899b7dc1cb598eade977d2180ea2396455369fe9c3ec34cb16464d73712260edab124ba3d5c362f8b974189811884d6ce447bd39e527d", 0x58}, {&(0x7f0000000540)="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", 0xff}, {&(0x7f0000000640)}, {&(0x7f0000000640)="046c5b7e991742d89403717990562967d7528ce20d5c88f82a10a1ed53fea9b700b3cbf385af37ed16d4d36d0f93d90dfbb33b03b87ac43e179393ad084e098f41511d8e1cc621c1a017c27a0de72a1d3fa20094c559f4bd7f5df752fbac15866b027a231e9a19e50ff03d3ebe544772a4235e7f78f92c6258e0ad412fb5534ebd0a721c9a2b587b805277d0125bc6fef8d292f1ef07540dc56b3ba612b6b7337da8cc6f9ec7b819d95557da64b79f751cc86a20112b82ccc821b66332bdbf", 0xbf}, {&(0x7f0000000840)="1715635c5b148efe29f1eb1fecbf805df0b1325f72038cf9d820d5df17357c6651c0b0358db046997671872ea549a550ad81cdfb541bf0f93e1ea2a18a730d49f456dc35b02d4871fcb53d970a63a0d26807e7b4c7f4ee5ec9e3e3a3dbce0f700969ffc3f572d6c18dc26d3e2140fc531cc990c473839f7a39aba522bae7e7add7f64114b0f4caaed41c2e21d3e05e85ccf12d6f43e3f59f944732515f34cd86761b31f74f4e4e0616606fe7641533b997bc7fbce306f0e24dc8d062cdffc30fd3308a52bd62c40c3ece203717151cdeda67a7e079d642f1d8f92bfe415e3e8208d8ab98849e19eb4eea46159beda40d60373d519055c5efb206cfb257", 0xfd}, {&(0x7f0000000940)="5ee5c9753ad07eb1414c8572ee18eaf36182bbdad40776d8051f07dcb14cbd5db1a92782ce5f6da5fcb8514363917755fa46ea249ca91ed0a71f8d2227e0e0184018ef5f17dda87fc5f53babef92be2871321e9472df289afc111de467c6175b864436813750446b23afd56532982343b6ae3f1f94493948371fec8a3dee34a0d821cda628f478f5015bde252d896b5e84dc6236e78fed85dd3e20a8e0d74db90466087047d8e76618259e5bb93686", 0xaf}, {&(0x7f0000000a00)="78baef7a5feff36a5e189e64c8fead1d6cb6aaf9dbc34f5d5ca970c9b3fe138baa4f90d4f557ba471c29c758663a6df72dc8a219ee056be5e0561c81003f16cd319f5604fb103d49975b9b06ef1e317ed256379f46022d715a1725fcff562fd6dff5d792b02bf27102d9c1ab225c0ffbad14555559eea8177acddaaa1e504fa1b07c9093", 0x84}, {&(0x7f0000000ac0)="0f6f0876e03a43c5980ea33e76fe76aa0bd62d9743a84a395244712be0ff5fe2f8b2fbfd328fd53ed58e79a901dd518be8310aa4e823080cb8a3a985c34a1d8bf98fed9aaeff750466e3cd", 0x4b}, {&(0x7f0000000c40)="afbabf4d92d3e33fe222a61c22c118eeb714a3fc68983ad360b5601212633000e93b1ad52a0c81aab5c1eb1acf643636b149fcc87929c8a690c369476d2cc53cecb261a880589bb8e5c83de1df394a74156ff47f169158768af455a05a435a83c974e968f00926de332b9a6671ac97b8824d9d37408ae908775b48c581eea40b1271ac30fb71cfc087dbb03bb65d278193cbfed42817e80cd386ba299c579c9feff912a819eedd89fdc3b6dc26ea974632e7d416bb2c192c2728fa3a351aa97e199391240af61bed9a7b02ea9ef80365b17c7abe2e098ff3073002c77e42aa9141ab68", 0xe3}], 0x9, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x130}, 0x851) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 5.180183029s ago: executing program 1 (id=4458): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) socket$kcm(0x2, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) 4.901164878s ago: executing program 3 (id=4462): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x39}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f00000001c0), 0x4}, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000000c0)={r1, r0}) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(0x0, 0x0, 0x4000000000000200, 0xffffffffffffffff, 0x0) (async) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id, 0x80, 0x0}, 0x0) (async) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\"gl$\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r3}, &(0x7f00000003c0), &(0x7f0000000440)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}]}}, &(0x7f0000000140)=""/237, 0x46, 0xed, 0x1}, 0x28) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0xd, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x3, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5d}}, 0x0, 0x1}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) socketpair(0x10, 0x3, 0x3, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000031294", 0x2e}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20) 4.743824343s ago: executing program 1 (id=4463): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x8, 0x1}, 0x50) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='cpuacct.usage_sys\x00', 0x26e1, 0x0) ioctl$TUNSETNOCSUM(r1, 0xc0189436, 0x210020000005) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x17, 0x8, 0x4, 0x0, 0x1, 0x7}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r3}, 0x38) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0x7, 0x5, 0x5, 0x40084, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x5, 0x6}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xc, &(0x7f00000001c0)=@raw=[@btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @alu={0x7, 0x1, 0x0, 0x1, 0x7, 0xffffffffffffffff, 0x4}, @call={0x85, 0x0, 0x0, 0x62}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xd}], &(0x7f0000000240)='GPL\x00', 0x3, 0x20, &(0x7f0000000280)=""/32, 0x40f00, 0x43, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000002c0)={0x3, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x6, 0xfffffff2}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000440)=[r2, r3, r4], &(0x7f0000000480)=[{0x0, 0x4, 0x2, 0xf}, {0x5, 0x4, 0x4, 0x7}, {0x0, 0x5, 0xe, 0x3}, {0x3, 0x1, 0xe, 0x2}, {0x0, 0x4, 0x8, 0x4}, {0x1, 0x5, 0xc, 0x8}, {0x3, 0x2, 0x3, 0x6}], 0x10, 0x9}, 0x94) r5 = socket$kcm(0x2b, 0x1, 0x0) r6 = socket$kcm(0x2, 0x3, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x16, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x894b, &(0x7f0000000040)={r5}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3504000040000511d25a80648c63940d0324fc60040035400c00020002", 0x1d}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000032"], 0xfe33) 4.480680161s ago: executing program 3 (id=4465): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0xc0189436, &(0x7f00000005c0)=0x400000001) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x0, 0x0, 0x46fa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x8, 0x1, 0x1ff, &(0x7f0000000280)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x8, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r0, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000100)="bdff0300600d698cff9e14f00800f27ecdcdb6ae12115e6ba3ef4197195c59569470", 0x0, 0x8000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.270783987s ago: executing program 1 (id=4466): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="6679a5476a115d0e73114c0000000000850000de00d10000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x81f00}, 0x94) close(r0) socket$kcm(0x2, 0x200000000000006, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000007a6a4d0000000000000000001812000038ff990a1c18ed0bd222a1fb5797a71246b5b84b96606cf6c39d0735dab03e6e276c80c70f4af18778be23c23fca060a0e0ea4", @ANYRES32=r1], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r1, 0x0, &(0x7f00000003c0)=""/199}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x2, 0x80, 0x10, 0x19, 0x3, 0x0, 0x0, 0x1, 0x90, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0xaa32, 0x3, 0xfffffffd, 0x0, 0x7, 0x0, 0x10}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x21, 0x2, 0xa) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180300000000000000"], 0x18}, 0xfc00) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) socketpair(0x1, 0x801, 0x0, &(0x7f0000000500)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60000040) syz_clone(0x188000, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800400000000000280000002800000004000000000000000000000201000000020000000000000802000000020000000000000e020000000000000000003000"], 0x0, 0x44}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={&(0x7f00000001c0), 0x1}, 0x0, 0x0, 0xc2ba, 0x5, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, &(0x7f0000002380)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) 4.168011671s ago: executing program 0 (id=4467): syz_clone(0x10004000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x2000000000000}, 0x0, 0x0, 0xf61, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x4c, &(0x7f00000000c0), 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,') perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x20000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000002400)={0xffffffffffffffff, 0x58, &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000002780)={0xffffffffffffffff, 0x6, 0x10}, 0xc) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0d0000000300000004000000070000", @ANYRES32=r5, @ANYBLOB="b41500000000", @ANYRES32=0x0, @ANYRES32], 0x50) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002840)=@bpf_lsm={0x1d, 0x0, 0xfffffffffffffffe, &(0x7f0000000440)='syzkaller\x00', 0x2, 0x1000, &(0x7f0000001380)=""/4096, 0x40f00, 0x40, '\x00', r3, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002440)={0x0, 0xd, 0x6, 0x153}, 0x10, 0x0, 0x0, 0x2, &(0x7f00000027c0)=[r4, r5], &(0x7f0000002800)=[{0x3, 0x1, 0x3, 0x4}, {0x4, 0x3, 0x5, 0xa}], 0x10, 0x8}, 0x94) r7 = perf_event_open(&(0x7f00000003c0)={0x1, 0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f00000004c0), 0x6}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r7, 0xc008240a, 0x0) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x60) r8 = socket$kcm(0xa, 0x2, 0x88) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r6, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000580)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000640)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0xc9, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$inet(r8, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r3, @ANYBLOB="e0000002bd14a5a2445700001c00002ef60f44000000000008000000", @ANYRES32=r9, @ANYBLOB="e0000002ac1414150000000014000000000000000000000001000000ffffffff000000008c00000000000000000000000700000044049b700094040000444c1dc1ac14143f00006c5600000000000000050a01010200000006ac1414aa00000003640101000000000bac1414bb00000007ac1414aa0000000bac1414bb000039a7ac1414bb0000000944245051ffffffff00000010e00000010000000664010101000000050a0101010000000600000000000000"], 0xe8}, 0x8040) sendmsg$kcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="8186452e4b44261a5f3ca11dd0c3f408e7168398836c600bd0edf6ea53c933a3e3e347613165986cd7ce2d94d4f49a8a0bc98182d1702e00338cb75c1756d902eddb2ad97823d7a0", 0x48}, {&(0x7f0000000300)="f5954dd6210bc07df27db069136e2d17229856b4018c8cb80e766b06acca21497c3742c7eadfb5ce18e5fc0a031f6428a0bc7f9ad58c3eeb0616e860c3a5d5bd8235acfc649866fa93c1bdf5c8fb57ab0cf19f21457fa2bdc49903fa5b6758d893df630390d8bf0d33b701bb2325bc70a988fc3d8f01f6db6e68", 0x7a}], 0x2}, 0x8000) 4.160872971s ago: executing program 3 (id=4468): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0xffb0, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0xa4}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x1e37cf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x401, 0x200, 0x0, 0x7, 0x0, 0x100}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d35010000000000950041000000000069163a0000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf670000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a25c3a2feb39e94a5266a10716d4a3cef499fa176018054e9149a1c9d20a809ce3"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8], 0x12) sendmsg$tipc(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f00000003c0)="56897a23204c04b3921cfadebfd202ce40e6827ba0aca3c6e57f2c04fbd1502b4fa320af25055202dd00f6ce7257117a027697fe57589fe6ec8c2fb5", 0x3c}, {&(0x7f0000000640)="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", 0x1000}, {&(0x7f0000001680)="5ccfa2523df38b0a600d38a60ad31c6666bdb877e65d1091b6a9a5997e172fd9adf3829f69d872726b43da57c8484a91d0c457d098067d48065dbf2014dee02eed2f376c9a0ecd9d18035c69575ed5165eb5536ab6910c", 0x57}, {&(0x7f0000001700)="de97a0e8de01c1b78915d7c77fa1268454c7b29b3b16d6ae38c73e8dfecc545008d81bcb033d3129ae80d306674d6df78dee73c00fea17a82674476739535c1142a5897e0016d27dda93687c1c310bf375226c74f4c19ae3696bce35578c58ad4439b138c0c114d29f848c6b7f172b1afa8d73853c5bd4d93e87bb2a06527cb7582ceb5ca12bc4ffc095b46d5f98dc8603a8ad92b5f9fc844b36b10d92b18a70e49168f19382814120ce728a7362f04107fd294b4ddc5ab542f45c76bce5347a265c98c065aa525d0d2a28", 0xcb}, {&(0x7f0000001800)="910811c3ff24584004fb2f239fc6542d31e2ec7c5469f5507ed8299c236b2343b3da7aa485b65bc5f0ff9afaa4b2305e6a4e5a9c55330d16d53c9c0f38ca90a4b9b85cfccf98fd1d694ebcc17d1c4192e57a49ad5668f959d0ab94fc6ba6a8c63145518ecc92b349d9e9d31e4758295995ebdaa8220d9ed6171a2a112bdfcbff4d90b273c9bae2e5b098142831030a2762ab84149cef7d0fcbfb224069f4e08c4a161198f672f46fc2c23c51a0f55badda1b77c6abbca862f4f08a09aa19036ee8547f4cec3da54bd1", 0xc9}], 0x5, &(0x7f0000001980)="96f559307586cbbaecc793fc0389cc0acbddaba85a87944a0a6278be2d5711627ead0f85ff0962b570dd3db49faf4559394a5dc3beecd358f6d71824795c1f5ec773b9c3f64755e79987d70ff78a38ffed796bfef514c0793f1355bcf28ab8f7006df81520175d1ecd0eb7949352d7ee30bd906ca2f4656f719a74d48eb3826c495c464d5e52da14ff71aa10ebee269aef8eadd6bfd211f5a0f9c91d277c2c02e9eeaf24f166656dadc1a17810", 0xad}, 0x44813) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000080)=0x4) 3.907072119s ago: executing program 0 (id=4472): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) 3.692425555s ago: executing program 1 (id=4474): r0 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x4) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0x7dc0) perf_event_open(&(0x7f0000000280)={0x5, 0x4c, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x0, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x45, 0x2, 0x4, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x9, 0x4, 0x4, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.570742879s ago: executing program 0 (id=4475): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x302, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x22a82, 0x0) socket$kcm(0x2, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'geneve0\x00', 0x8000}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x8090) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x41, &(0x7f0000000040)=r2, 0x4) 3.322788467s ago: executing program 3 (id=4476): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b595"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x2}, 0xc02, 0x1, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x4040) setsockopt$sock_attach_bpf(r2, 0x110, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="76389e6a65585578f830e900000058c54feb682e25d3", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.24053212s ago: executing program 4 (id=4478): r0 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000040)={'bond_slave_1\x00', @random="02000000c000"}) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fddfffff000000001008000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x17) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) close(0x3) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f0000001380), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r1}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x4, 0x3}]}, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) 3.163111512s ago: executing program 0 (id=4479): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TUNGETSNDBUF(r1, 0x800454d3, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122300000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) r2 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'cpu'}, {0x2d, 'pids'}]}, 0xb) 2.89031424s ago: executing program 0 (id=4481): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{0x1, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)='%-5lx \x00'}, 0x20) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x104943, 0x400ac5d, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r1, 0x58, &(0x7f00000001c0)}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sockopt, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 2.866501731s ago: executing program 4 (id=4482): r0 = socket$kcm(0x10, 0x2, 0x10) openat$cgroup_ro(r0, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90624fc602f0000000a740100051382c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x80, 0x1, 0xfe, 0x0, 0xce8, 0x504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x7, 0xb, 0x4, 0x0, 0x101}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = getpid() r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x7, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1c842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r4 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, &(0x7f0000000200)}, 0x20) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000038000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a00018025641d00d1bd", 0x2e}], 0x1, 0x0, 0x0, 0x39c}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0xffffffffffffffb8, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x20000000}, 0x10c002, 0xac5d, 0x10001, 0x8}, 0x0, 0x4, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d0002117ea6ea6567e71b59000af32c6e020075f800250002000f00000017d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4d4938037e786a6d0bdd70000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101840, 0x0) r7 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r9) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0x12, &(0x7f00000008c0)=r10, 0x4) socket$kcm(0x10, 0x2, 0x10) 2.667976627s ago: executing program 3 (id=4483): socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) close(r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000080)="3a17", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8920, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000000000000850000002a0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x500, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000001000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000340)='ns/user\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) r9 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x1, 0x7}, 0x103865, 0x0, 0x51, 0x0, 0x2, 0x200004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000011c0)={0x0, 0x0, 0x0, 0x0, 0xffffffee}, 0x28) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r11, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r12, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000001080), 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000010c0)={0x1b, 0x0, 0x0, 0x28f, 0x0, r9, 0x3, '\x00', r12, r13, 0x5, 0x2, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0xd, 0x9, 0xa, 0x100, 0x10}]}, &(0x7f0000000180)='GPL\x00', 0x14, 0x3b, &(0x7f00000001c0)=""/59, 0x40f00, 0x38, '\x00', r12, 0x25, r2, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0xc, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000002c0)=[{0x4, 0x2, 0xa, 0x4}, {0x2, 0x3, 0x4, 0x9}, {0x5, 0x1, 0x9}, {0x4, 0x1, 0x9, 0x6}, {0x3, 0x1, 0x4, 0x5}], 0x10, 0x3}, 0x94) 2.599000389s ago: executing program 1 (id=4485): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000040)="3c00000033000b1229ae3f7f03b261130124fc60100c03400180ffff002000119215a2681cf6e50400003d490d20b735b16b6a44799406db26a57b35", 0x3c}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f00000000c0), 0x4) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r2) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)}, 0x20) 2.556066991s ago: executing program 0 (id=4486): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 2.286902789s ago: executing program 4 (id=4487): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x10000000000000df}, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1}, &(0x7f0000000080), &(0x7f00000000c0)='%pI4 \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x3f, &(0x7f0000000480)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xd6, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x7fff, 0x8}, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000740)=@o_path={&(0x7f0000000700)='./file0\x00', 0x0, 0x8, r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@call={0x85, 0x0, 0x0, 0x2a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x80, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x50) (async) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) (async) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000002c0)={r4}, 0x8) write$cgroup_int(r5, &(0x7f00000001c0), 0xfffffdef) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x8, &(0x7f0000000740)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xffff}, 0xc) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000780)={0x0, 0xffff}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xc, 0x4, 0x9, 0x5, 0x4, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) 2.062881076s ago: executing program 3 (id=4489): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x58, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1d, 0x8, &(0x7f0000000600)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8e}}], &(0x7f00000006c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x15, '\x00', r2, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0x6, 0x838d, 0xe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000e00)=[0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000000e40), 0x10, 0x480000}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@bloom_filter={0x1e, 0x4a, 0x5, 0x2, 0x100, 0xffffffffffffffff, 0x6, '\x00', r2, 0xffffffffffffffff, 0x1, 0x1, 0x356, 0x4}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x79e, 0x0, 0xffffffffffffffff, 0x0, '\x00', r2, r0, 0x5, 0x3, 0x3}, 0x50) r4 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0x0, 0x8}, 0xc) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0xffffffffffffffff, 0x7fffffff}, 0xc) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000180)=r7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r7, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xe7, &(0x7f0000000b80)=[{}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0x1a, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0xffffffffffffffff, 0x3}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%ps \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0x1, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pI4 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x2c, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x371}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, 0x1}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x401}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x8b}, @map_fd={0x18, 0x1, 0x1, 0x0, 0x1}, @generic={0x1, 0x5, 0x3, 0x7e3}, @generic={0x1, 0x0, 0x0, 0x8, 0x912}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x43}}}, &(0x7f0000000540)='GPL\x00', 0x3, 0xb5, &(0x7f0000000580)=""/181, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000680)={0x0, 0x0, 0x81, 0xffffffff}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000009c0)=[r5, r8, r9, 0xffffffffffffffff, r10], &(0x7f0000000a00)=[{0x0, 0x4, 0xb, 0x8}, {0x0, 0x5, 0x6, 0xc}, {0x0, 0x5, 0x10, 0x1}, {0x1, 0x5, 0xa, 0x3}, {0x3, 0x3, 0x0, 0xb}], 0x10, 0x6}, 0x94) 1.319011979s ago: executing program 1 (id=4490): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18670000fa00947f95060000bc00000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x891a, 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x165a80, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x4d, 0x1, 0x3, 0x104}, {0x60, 0x8}, {0x0, 0x0, 0xfe, 0x3ff}, {0x0, 0x0, 0x0, 0xffffffff}, {0x6, 0x4, 0x4, 0x1}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x48101, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) socketpair(0x1e, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000008f926cb8f31805483a7a2cc32aa3df29e0cc514e1e44ebb21c378963d9ad325e635024db00bd08ed3581700e6531476ac44a3d4b3a982532cedc7c6369890f7af052c138d8d4e1a561abef2dca3de40fd14f309e51ab10c66e8eda031c88db63d0cb798068d6a1e9fbef490c2a41f7f5de6b9e850442f3963b42f71999911bfa229ae3072a03d9798d131c276ec54b97", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xd, &(0x7f0000000640)=ANY=[@ANYRES16=r1, @ANYRES32=r4, @ANYRESOCT=r4, @ANYBLOB="719d3530ab7a885f17190c2c7ab087e94b617d43230b4b4dee7a01a947aa2a7e0636c3088b0a687d21e0162107f19031377384d1431351ca7c04a4b091e59da775556771b5", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)=ANY=[], 0x0, 0x4e, 0x0, 0x1}, 0x28) sendmsg$inet(0xffffffffffffffff, 0x0, 0x40011) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000980)=ANY=[@ANYRES16=r5, @ANYRES32, @ANYRES16=r6, @ANYBLOB="58106f5b7d0bba6661b83c1fa83bfc0bbe3adf2c8b036c2774a908e1a7e2a598b804e3b7d8312965f1e270d88fd1d23c81f7bed125543cdf8d536291c9d1cd24720939aad6fe2c275b694d43137de8eba047265c137f430b5445a0dbbf1c0484fa4a6ec3db6d801d26aa6d4070518f7026375f5891d937a62b5d75dd5310857515e89a900690d6f738e9ec1f373c4629d7d2a711a61e04a3de710178af23a7e3c59077aeb84c59792dbeabb208af5f49648f450c57eae7635ea8bab2024d426c32", @ANYRES8=r4, @ANYRES8=r0], 0x0, 0x1c, 0x0, 0xffffffff, 0x33}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f00000003c0)="e097566f5bec64", 0x0, 0x8c9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x6, 0x0, 0x5, 0x440000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000240)="5c00000014006b04000000d86e6c1d0002887ea6ea65670000000000000090f9c3dc90f8f41f8ecff32c6e020075e300250045586c8da718ad4b4460bc24eab55600000000000000bf9367b4fa51f60a64c9f4d4938037e786a6d0bd", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x2, 0x0) 1.243927351s ago: executing program 4 (id=4491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) (async, rerun: 64) socket$kcm(0xa, 0x2, 0x0) (async, rerun: 64) socket$kcm(0x21, 0x2, 0x2) r1 = socket$kcm(0x1e, 0x4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async) r2 = socket$kcm(0x1e, 0x4, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={0xffffffffffffffff, 0x0, 0x0, 0x4c, 0x0, &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x0, 0x20, 0x0, &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cd", 0x1, 0x0, 0x13}, 0x50) (async, rerun: 32) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000740)={'bond_slave_0\x00', @local}) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x6, @empty, 0x5}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000900)="8a373642056bd2ab1ed18d80b1c3eb8a4601225082dcda0c1900d0c8880c81dbaa80176b5cd96a2db5eb2b2a958b31fcf81aaf7c40e3673f0204a9564e8bd43a4f592f05ef738c5034059d4ec7ad8892374cd2eac6fe4c98530cabc471bc0887672a4c9335d85acdb5d1c98cd30c7356a4ff1e4bb826fe5e46ac32915d3a5f63b0372000a21ed568c38b32b176eda837419e097220ff9004eb143ee75569e51076b6d8bc41f572fe7d0439252e93f4334616839e3e7d0ae19f1319c4724d764cd7ebb1f269dfa48e983087b40fb897280dbcd8b70d3d6c03069033bfd9f35683ac90727a2fe50fff52cd4ad7c0609720ea9dc626b92ae1f39162910e629e76ecf0ae55b85c1dbf808f9d63192c0ca14af5f9f173cc020151cad56b2b9d901c552fb0cf926967c7207091285abb2c8f2d356c67d478354984f80d0e3286e1d9a0bfdbf4c6066d1471b5efea808a35e225f397fe213b490c0807", 0x159}], 0x1}, 0x8000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, 0x0, 0x0) (async, rerun: 32) sendmsg$kcm(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41}, 0x5}}, 0x80, 0x0, 0x0, &(0x7f0000000900)=ANY=[], 0x1458}, 0x48800) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r0, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) (async) close(0x3) (async, rerun: 64) r6 = socket$kcm(0x10, 0x2, 0x4) (rerun: 64) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00123d00014008041000020400009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="110000000400000004bf6e000000020000000000", @ANYRES32=0x1, @ANYBLOB="ff00"/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.230920802s ago: executing program 5 (id=4492): r0 = socket$kcm(0x28, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x28, 0x6, 0x0, 0x44) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x9, 0x1b, 0x8, 0x100, 0x42, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@map=0x1, 0x13, 0x0, 0x9, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0], &(0x7f0000000140)}, 0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.events\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.memory_migrate\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f0000000040)=0x7, 0x12) r4 = socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0xff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8c182, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x0, 0x5, 0x0, 0x4, 0x3fe, 0x7ffbfffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xc070, 0x0, 0x0, 0x6, 0x0, 0x12}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x4}, 0x0, 0xac5e, 0x0, 0x3, 0x0, 0xffffffff, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x8}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e00)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0xf, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x8946, &(0x7f0000000080)) close(r4) socket$kcm(0x29, 0x2, 0x0) 979.009339ms ago: executing program 4 (id=4493): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r1}) r3 = syz_clone(0x1000800, &(0x7f0000000140)="ba469f2e68c0d3bdd97f4fc83a4cdae157d0ab9afe43952ef989f4046e44a982f0d7034d696fb5cf3072dabb806ad5ab3d851430cb2d6931208adb55ac642ea65c6952371a3915bbf6ebd685a0a0e52baf454a2e9ef3673e0a2068c8f6d81643b4ca9578a80c37018635b9b32ad24cd53065503f19da0d625a271f61c3f7600930a5c4f1295c415f89330d506827d8bc3d030f7e0dc45565f0c819bf314ef1050bf93f75f9aa6595f6b8cec7f052bef72a41808b7d5bf1feeb7d58f5bf827bb1b672c9170f72fc0efd39db7a9a7679bba364fd045256a8d0465feb8df599", 0xde, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="23013f3842837bbad9b83b695880bfcaef8029f51d3e1254a98d5cc2929589a9403229fe70bf0b4b756fd3fef9209276a36c00431c73236098920a346dccf8b210c0f3c155299236386b468e77205e962d8fde1b22fd10037da69eaf49d9ffdc2f76759f7630e0b7739a6d6c504dad96a9d3ea4ed0b24f4d135b378d986c65dee4c79d70dc44e793d9bd754973f8601e4e84b8d3888661c51df43f768d58b72f") r4 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xc6, 0x9, 0x35, 0x7, 0x0, 0x5, 0x601, 0x2, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x8000000000000001, 0xfffffffffffffffe}, 0x10000, 0xbc, 0xd, 0x5, 0xfffffffffffff2c0, 0x7f, 0x3, 0x0, 0x7}, r3, 0xffffffffffffffff, r0, 0xa) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_devices(r0, &(0x7f0000000400)='devices.deny\x00', 0x2, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f0000000440)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000480)='cpuacct.usage_percpu_sys\x00') perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0x6, 0x9, 0xf5, 0xb, 0x0, 0x9, 0x8, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0xf07a, 0x2, @perf_config_ext={0xfffffffffffffe00, 0x7}, 0x4080, 0xdb, 0x4, 0x3, 0xa, 0x0, 0x3, 0x0, 0xffff, 0x0, 0x4}, r3, 0x2, r0, 0xb) socket$kcm(0x29, 0x0, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000540)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r8, 0x2401, 0x9) openat$cgroup_procs(r7, &(0x7f0000000580)='tasks\x00', 0x2, 0x0) ioctl$TUNSETCARRIER(r8, 0x400454e2, &(0x7f00000005c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r8}, &(0x7f0000000600), &(0x7f0000000640)=r7}, 0x20) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000006c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000700)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x5, 0x8}, 0xc) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000780)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) openat$cgroup_devices(r5, &(0x7f00000007c0)='devices.allow\x00', 0x2, 0x0) r9 = socket$kcm(0x29, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000a80)={&(0x7f0000000800)=@l2={0x1f, 0x7, @none, 0x100, 0x2}, 0x80, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[{0x98, 0x10a, 0x2, "81a0b4244858f2b3b0a9e7e02c1b31f90240bc3cafba83f432b93778b58c9a2a99baf00c7fab904ddabb32b63dcd1c9ec69e2d5b7b937832501335ce1ed421a9884880be25326859ca6cb6dc83b4c76fdd8d3d5219e95479429b10ff348558141ae8e6df28ee7b11031d7c1f727ff6026d8b4e11098720c21d8324017c9f8f620697bf6db0a3"}, {0xf8, 0x10b, 0x6, "2e356dfc58ddc1d976db6b63273741ed5526e9247b80fa82cfd54bae1a726e5a65a3d1f48a46fe4178679f7d095db8e8e0be6b16790263fcea2850c50baa890dfebbeb61d2003b7845a7920be3740dbcadf707c31467c8804ddd173a041c0b1b48ce878e57a813b03b790ad45ff52a8cf33a6eb1ac9f9c097edfd0fda7a570ae0a96f2dd61d9961550bb2b3a969ea202571bd9f1117d9ef3d4e48bc0f87739c7e93ca69c13a53df5f186fa3d773d0cbbb4f4e918cb42cf4be18291ff764b9db393f833a8dea5ff67a9332a5bbb2d63c45d35382d265eb82c2d47872fe397268cee16"}], 0x190}, 0x2000c094) mkdirat$cgroup(r9, &(0x7f0000000ac0)='syz1\x00', 0x1ff) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x159ffd0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000b40)=r10, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000b80)=r7, 0x4) write$cgroup_freezer_state(r0, &(0x7f0000000bc0)='FROZEN\x00', 0x7) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000d80)={r8, &(0x7f0000000c00)="81a693578c5f6baee6c69694e9609aecb48db267f4074e10291c61f5f6dcf3592dde87afbdc94cd71e0e26a5797438fe8edb8445b7dfe73bc82cc9bbd88f12ab40e51d3f09a8710590f6d59f15c059874274e1afffaadcbb66b34bcc588362ecb3d6d13aa8d21f54471d7c00d159af1090145677ec2766051a71e8e8a952ebe565c03cbc7dc2c046df227a7b6411497262dad95744163ad970a03790257f7a4214ca07cdccf6b1324a619b32b9af", &(0x7f0000000cc0)=""/134}, 0x20) 936.9751ms ago: executing program 5 (id=4494): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000)=r1, 0x40) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x20004) 715.955187ms ago: executing program 4 (id=4495): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x5, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x1) socket$kcm(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000069123a000000000016000000000000009500"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b63d25a80648c2594f90124fc60100c06", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc600702", 0x16}], 0x1, 0x0, 0x0, 0x400300}, 0x20044050) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000000240)={&(0x7f00000002c0)=@ax25={{}, [@bcast, @remote, @default, @rose, @default, @remote, @rose, @bcast]}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f00000005c0)=""/253, 0xfd}, {&(0x7f0000000840)=""/133, 0x85}, {&(0x7f0000000900)=""/180, 0xb4}], 0x4, &(0x7f00000001c0)=""/52, 0x34}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c000000850000007d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 712.037187ms ago: executing program 5 (id=4496): socket$kcm(0x10, 0x2, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000014c0)={0x18, 0xf, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000f9ffffff0000000007000000181100007988c06fefd812be31786a66adcebb43e3baf7c38d2ca39455533de5135981925b93aa0147c398a6c2ce00891fa67810adea85ae35334e151dc9a7e7b3459169b7dffab1bf40f584beb261e378ad8774ce92db062e796bf341465295119a751227fc1f26ca04692ba26b1d12d520b8cbf9d899d84d3e166d88026fe0afe92859a18cee7ae7f303e592ac49d30da7e42a05ac32cadde9633e623148", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5656}, 0x50) r1 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffff}, 0x0, 0x0, 0x4000, 0x8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0xffffffffffffffff, 0x100000000, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xcf, 0xd}, 0x21, 0x0, 0x0, 0x4, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="1400000034000b63717a3c4a0ed8985b0808aa78", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r3, &(0x7f0000003780)={0x0, 0x0, 0x0}, 0x40000022) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xcfa4) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r4, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc9, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc7, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000c80)={0x4}, 0x8) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r5) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f5, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_REFRESH(r2, 0x2402, 0x7) 479.673045ms ago: executing program 5 (id=4497): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) (async) perf_event_open(&(0x7f0000004cc0)={0x1, 0x59, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x4000006, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00'], 0xfe33) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000e30100040000008000", @ANYRES32=0x0, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000020000000300"/21], 0x50) (async) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) (async) perf_event_open(&(0x7f00000019c0)={0x2, 0x80, 0x1c, 0x42, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5f, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x5, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x40, 0x3}, 0x60, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000b8158d000"/28], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000a0000000800000000000004040000000800000002000004f7ffffff0400000001000000000000000300000001000000000000000030615f5f5f2e2e5f00"], 0x0, 0x52, 0x0, 0x9, 0x6}, 0x18) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) (async) r4 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000001980), 0x8}, 0x0, 0x0, 0x8, 0x0, 0x4000003, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) r6 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r6, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r6, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00'], 0x30}, 0x7e8166965e22236a) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x2dd4, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r1}, 0xc) (async) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3ff, 0x41}, 0x0, 0x5, 0x1000, 0x8, 0x4000000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x3, 0x0, 0x0, 0x6, 0x0, 0x5, 0x0, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r8, &(0x7f0000001080)='syz1\x00', 0x1ff) 240.558542ms ago: executing program 5 (id=4498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200008877747ab7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xfca804a0, 0xe, 0x0, &(0x7f0000000200)='\x00'/14, 0x0, 0x973, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000001778b3019dc2761800000c0000000c02018d90168a88f1add7dd42bc27b2a47a9900000000615f30a9612e00"], &(0x7f00000008c0)=""/4096, 0x2c, 0x1000, 0x1, 0xc, 0x10000}, 0x28) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001a00)={0x6, 0x27, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x6}, @alu={0x4, 0x1, 0x7, 0x4, 0x2, 0x4, 0xffffffffffffffff}, @exit, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe21}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x65, &(0x7f0000000740)=""/101, 0x40f00, 0x77, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f0000001900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000001940)={0x3, 0x4, 0xfffffff7, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000019c0)=[r4], 0x0, 0x10, 0x7}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="00001000"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00'], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r5, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0xff8, &(0x7f0000002e00)=""/4088, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) 0s ago: executing program 5 (id=4499): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x8, 0x0, 0x62) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x1, 0xffffffffffffffff}, 0xa38, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a8001600200003", 0x37}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="6000000068007f089e", 0x9}, {&(0x7f0000000280)="68cabf2dfb58fc021d6b689866f05dc800028088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e8060000000000000052dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400", 0x57}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500000000000000"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r4}, 0xc) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x6, @perf_config_ext={0x0, 0x9}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r1}) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000580)={'caif0\x00', 0x1000}) kernel console output (not intermixed with test programs): EV_CHANGE): veth0_to_bond: link becomes ready [ 314.669961][ T9227] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1261'. [ 314.683367][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 314.701949][ T9227] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 314.737661][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 314.757904][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 314.922859][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 314.949884][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 314.983753][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 315.006333][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 315.025282][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 315.074706][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 315.100257][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 315.112364][ T8988] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 315.764344][ T9256] netlink: 8281 bytes leftover after parsing attributes in process `syz.1.1265'. [ 316.180778][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.193152][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.237913][ T8988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.346843][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 316.367341][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 316.452093][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 316.472504][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 316.533311][ T8988] device veth0_vlan entered promiscuous mode [ 316.568455][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 316.651739][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 316.672779][ T8988] device veth1_vlan entered promiscuous mode [ 316.788221][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 316.807763][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 316.910931][ T8988] device veth0_macvtap entered promiscuous mode [ 316.919481][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 316.935100][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 316.996375][ T8988] device veth1_macvtap entered promiscuous mode [ 317.060444][ T9298] netlink: 'syz.0.1275': attribute type 10 has an invalid length. [ 317.156051][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.162609][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.383105][ T9296] can: request_module (can-proto-0) failed. [ 319.452949][ T9298] team0: Device wg1 is of different type [ 319.500298][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 319.508876][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 319.553112][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.563852][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.579104][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.607796][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.633964][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 319.656168][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.683354][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.749567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 319.759845][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 319.770987][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.809185][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.836650][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.857669][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.878004][ T8988] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.906208][ T8988] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.932017][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.977840][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 320.015783][ T6867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 320.065994][ T8988] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.088805][ T8988] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.113420][ T8988] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.154669][ T8988] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.314656][ T6871] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.344716][ T6871] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.371379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 320.392329][ T6871] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.406648][ T6871] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.433877][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 321.210334][ T9366] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1285'. [ 322.815414][ T9400] netlink: 'syz.3.1294': attribute type 9 has an invalid length. [ 322.853115][ T9404] netlink: 'syz.3.1294': attribute type 27 has an invalid length. [ 323.173172][ T9407] netlink: 'syz.2.1296': attribute type 21 has an invalid length. [ 323.187924][ T9407] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1296'. [ 323.613382][ T9421] tipc: Started in network mode [ 323.624676][ T9421] tipc: Node identity 9215a268, cluster identity 4711 [ 323.639933][ T9421] tipc: Node number set to 2450891368 [ 324.026579][ T9430] netlink: 'syz.4.1303': attribute type 21 has an invalid length. [ 324.038745][ T9430] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1303'. [ 324.321053][ T9440] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1306'. [ 324.376743][ T9441] netlink: 'syz.2.1307': attribute type 3 has an invalid length. [ 324.407155][ T9441] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1307'. [ 324.828094][ T9454] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1310'. [ 324.916129][ T9455] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1311'. [ 324.946563][ T9455] tc_dump_action: action bad kind [ 327.086896][ T9475] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1317'. [ 327.096381][ T9482] netlink: 'syz.2.1319': attribute type 10 has an invalid length. [ 327.168947][ T9482] team0: Device wg1 is of different type [ 327.789496][ T9502] netlink: 'syz.0.1325': attribute type 3 has an invalid length. [ 327.849492][ T9502] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1325'. [ 327.949128][ T9511] netlink: 'syz.1.1328': attribute type 2 has an invalid length. [ 328.063012][ T9511] device 4 entered promiscuous mode [ 328.178884][ T9512] netlink: 'syz.1.1328': attribute type 41 has an invalid length. [ 328.315066][ T9520] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.1331'. [ 328.425871][ T9519] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.1330'. [ 328.450654][ T9515] netlink: 'syz.0.1329': attribute type 21 has an invalid length. [ 328.458912][ T9515] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1329'. [ 328.474572][ T9515] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1329'. [ 328.842338][ T9526] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1333'. [ 328.931824][ T9543] netlink: 'syz.1.1338': attribute type 5 has an invalid length. [ 328.971747][ T9546] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.1337'. [ 328.999759][ T9543] netlink: 'syz.1.1338': attribute type 5 has an invalid length. [ 329.021494][ T9545] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1338'. [ 330.545849][ T9573] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1343'. [ 330.852264][ T9587] delete_channel: no stack [ 330.867242][ T9587] delete_channel: no stack [ 330.912716][ T9583] netlink: 'syz.4.1347': attribute type 2 has an invalid length. [ 331.326255][ T9602] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 331.426854][ T9605] netlink: 'syz.0.1352': attribute type 3 has an invalid length. [ 331.447067][ T9605] netlink: 'syz.0.1352': attribute type 1 has an invalid length. [ 332.148796][ T9636] __nla_validate_parse: 14 callbacks suppressed [ 332.148818][ T9636] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1361'. [ 332.453650][ T9651] netlink: 'syz.3.1362': attribute type 29 has an invalid length. [ 332.482491][ T9642] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1362'. [ 332.943656][ T9670] device 1 entered promiscuous mode [ 333.090534][ T9676] validate_nla: 4 callbacks suppressed [ 333.090578][ T9676] netlink: 'syz.4.1367': attribute type 41 has an invalid length. [ 333.363821][ T9688] device syzkaller0 entered promiscuous mode [ 333.996557][ T4278] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 335.907644][ T9698] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 335.930571][ T9698] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 336.019235][ T9707] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 336.036731][ T9707] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1378'. [ 336.264660][ T9730] netlink: 79604 bytes leftover after parsing attributes in process `syz.3.1383'. [ 336.274421][ T9730] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1383'. [ 336.396640][ T9721] delete_channel: no stack [ 336.428276][ T9721] delete_channel: no stack [ 336.438385][ T9721] delete_channel: no stack [ 336.448523][ T9721] delete_channel: no stack [ 336.453739][ T9721] delete_channel: no stack [ 336.458339][ T9721] delete_channel: no stack [ 336.466507][ T9721] delete_channel: no stack [ 336.475352][ T9721] delete_channel: no stack [ 336.481697][ T9721] delete_channel: no stack [ 336.486404][ T9721] delete_channel: no stack [ 336.499945][ T9721] delete_channel: no stack [ 336.504667][ T9721] delete_channel: no stack [ 336.514818][ T9721] delete_channel: no stack [ 336.537919][ T9721] delete_channel: no stack [ 336.559505][ T9721] delete_channel: no stack [ 336.574493][ T9721] delete_channel: no stack [ 336.594819][ T9721] delete_channel: no stack [ 336.615197][ T9721] delete_channel: no stack [ 336.625372][ T9721] delete_channel: no stack [ 336.635545][ T9721] delete_channel: no stack [ 336.655898][ T9721] delete_channel: no stack [ 336.661038][ T9721] delete_channel: no stack [ 336.665680][ T9721] delete_channel: no stack [ 336.679834][ T9721] delete_channel: no stack [ 336.689504][ T9721] delete_channel: no stack [ 336.694160][ T9721] delete_channel: no stack [ 336.719764][ T9721] delete_channel: no stack [ 336.724441][ T9721] delete_channel: no stack [ 336.749562][ T9721] delete_channel: no stack [ 336.765014][ T9721] delete_channel: no stack [ 336.786939][ T9721] delete_channel: no stack [ 336.792064][ T9721] delete_channel: no stack [ 336.801613][ T9721] delete_channel: no stack [ 336.961523][ T9746] netlink: 'syz.3.1386': attribute type 2 has an invalid length. [ 336.980152][ T9747] netlink: 'syz.4.1387': attribute type 3 has an invalid length. [ 336.996830][ T9747] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1387'. [ 337.127610][ T9746] device 0 entered promiscuous mode [ 337.208890][ T9746] netlink: 'syz.3.1386': attribute type 41 has an invalid length. [ 338.554420][ T9771] netlink: 64799 bytes leftover after parsing attributes in process `syz.3.1391'. [ 339.124313][ T9779] netlink: 'syz.1.1394': attribute type 29 has an invalid length. [ 339.196512][ T9779] netlink: 'syz.1.1394': attribute type 29 has an invalid length. [ 339.299644][ T9780] netlink: 'syz.1.1394': attribute type 29 has an invalid length. [ 339.911075][ T9785] netlink: 'syz.3.1397': attribute type 20 has an invalid length. [ 339.966548][ T9785] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1397'. [ 340.052669][ T9785] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1397'. [ 340.124970][ T9786] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1397'. [ 341.649335][ T9812] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1401'. [ 341.666507][ T9812] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 341.695804][ T9812] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 342.034684][ T9824] netlink: 64799 bytes leftover after parsing attributes in process `syz.0.1407'. [ 342.064775][ T9827] netlink: 'syz.4.1408': attribute type 23 has an invalid length. [ 342.273794][ T9834] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1409'. [ 342.498508][ T9836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 343.597732][ T9870] netlink: 64799 bytes leftover after parsing attributes in process `syz.3.1420'. [ 343.967577][ T9879] netlink: 'syz.2.1424': attribute type 13 has an invalid length. [ 343.993380][ T9879] netlink: 'syz.2.1424': attribute type 14 has an invalid length. [ 344.008026][ T9879] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1424'. [ 344.074222][ T9889] Ÿë: port 1(gretap0) entered blocking state [ 344.111715][ T9889] Ÿë: port 1(gretap0) entered disabled state [ 344.146850][ T9889] device gretap0 entered promiscuous mode [ 344.214898][ T9888] netlink: 'syz.2.1424': attribute type 7 has an invalid length. [ 344.233288][ T9888] netlink: 'syz.2.1424': attribute type 7 has an invalid length. [ 344.259340][ T9888] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.1424'. [ 345.066112][ T9917] netlink: 'syz.1.1433': attribute type 39 has an invalid length. [ 345.083726][ T9916] netlink: 'syz.4.1432': attribute type 25 has an invalid length. [ 345.102327][ T9916] netlink: 'syz.4.1432': attribute type 29 has an invalid length. [ 345.348127][ T9930] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.1436'. [ 345.398711][ T9922] netlink: 'syz.2.1431': attribute type 25 has an invalid length. [ 345.429384][ T9922] netlink: 'syz.2.1431': attribute type 9 has an invalid length. [ 345.667027][ T9938] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1438'. [ 345.692160][ T9943] netlink: 'syz.3.1440': attribute type 2 has an invalid length. [ 345.701303][ T9938] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 345.719250][ T9943] netlink: 'syz.3.1440': attribute type 1 has an invalid length. [ 345.730566][ T9943] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.1440'. [ 345.814177][ T9938] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.947475][ T9937] delete_channel: no stack [ 346.309533][ T9959] netlink: 'syz.4.1443': attribute type 3 has an invalid length. [ 346.470024][ T9959] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1443'. [ 346.763665][ T9973] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1447'. [ 346.775674][ T9972] netlink: 64799 bytes leftover after parsing attributes in process `syz.4.1448'. [ 348.212999][T10015] netlink: 64799 bytes leftover after parsing attributes in process `syz.0.1461'. [ 348.601864][T10029] __nla_validate_parse: 2 callbacks suppressed [ 348.601885][T10029] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1465'. [ 348.684480][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.723558][T10029] device bond_slave_0 left promiscuous mode [ 348.782747][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.795062][T10029] device bond_slave_1 left promiscuous mode [ 348.833591][T10029] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 348.852135][T10029] device bridge_slave_1 left promiscuous mode [ 348.894095][T10029] bond0 (unregistering): Released all slaves [ 348.927404][T10034] device syzkaller0 entered promiscuous mode [ 349.019678][T10044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1468'. [ 349.084950][T10046] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1469'. [ 349.194300][ T4278] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 349.417929][T10065] FAULT_INJECTION: forcing a failure. [ 349.417929][T10065] name failslab, interval 1, probability 0, space 0, times 1 [ 349.462627][T10065] CPU: 1 PID: 10065 Comm: syz.3.1477 Not tainted syzkaller #0 [ 349.467072][T10071] validate_nla: 4 callbacks suppressed [ 349.467114][T10071] netlink: 'syz.0.1476': attribute type 4 has an invalid length. [ 349.470161][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.470188][T10065] Call Trace: [ 349.470196][T10065] [ 349.470205][T10065] dump_stack_lvl+0x188/0x24e [ 349.470247][T10065] ? show_regs_print_info+0x12/0x12 [ 349.470272][T10065] ? load_image+0x410/0x410 [ 349.470306][T10065] ? __might_sleep+0xd0/0xd0 [ 349.470329][T10065] ? __lock_acquire+0x7bd0/0x7bd0 [ 349.470361][T10065] ? lock_chain_count+0x20/0x20 [ 349.528801][T10065] should_fail_ex+0x390/0x4c0 [ 349.533545][T10065] should_failslab+0x5/0x20 [ 349.538082][T10065] slab_pre_alloc_hook+0x59/0x300 [ 349.543138][T10065] ? __get_vm_area_node+0x122/0x330 [ 349.548363][T10065] __kmem_cache_alloc_node+0x4f/0x270 [ 349.553764][T10065] ? __get_vm_area_node+0x122/0x330 [ 349.558998][T10065] kmalloc_node_trace+0x22/0xe0 [ 349.563909][T10065] __get_vm_area_node+0x122/0x330 [ 349.568962][T10065] ? __local_bh_enable_ip+0x136/0x1c0 [ 349.574368][T10065] __vmalloc_node_range+0x357/0x1380 [ 349.579684][T10065] ? netlink_sendmsg+0x5ec/0xbd0 [ 349.584653][T10065] ? netlink_insert+0x28d/0x13b0 [ 349.589622][T10065] ? free_vm_area+0x50/0x50 [ 349.594170][T10065] ? netlink_sendmsg+0x5ec/0xbd0 [ 349.599134][T10065] vmalloc+0x75/0x80 [ 349.603063][T10065] ? netlink_sendmsg+0x5ec/0xbd0 [ 349.608022][T10065] netlink_sendmsg+0x5ec/0xbd0 [ 349.612814][T10065] ? netlink_getsockopt+0x550/0x550 [ 349.618056][T10065] ? aa_file_perm+0x3ea/0xf00 [ 349.622765][T10065] ? aa_file_perm+0x112/0xf00 [ 349.627464][T10065] ? aa_sock_msg_perm+0x94/0x150 [ 349.632449][T10065] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 349.637761][T10065] ? security_socket_sendmsg+0x7c/0xa0 [ 349.643246][T10065] sock_write_iter+0x2d5/0x3e0 [ 349.648054][T10065] ? sock_read_iter+0x3a0/0x3a0 [ 349.652943][T10065] ? common_file_perm+0x171/0x1c0 [ 349.658000][T10065] vfs_write+0x482/0x9a0 [ 349.662294][T10065] ? file_end_write+0x250/0x250 [ 349.667178][T10065] ? __fget_files+0x3fc/0x460 [ 349.671888][T10065] ? __fdget_pos+0x1d4/0x360 [ 349.676525][T10065] ? ksys_write+0x70/0x260 [ 349.680988][T10065] ksys_write+0x14d/0x260 [ 349.685351][T10065] ? __ia32_sys_read+0x80/0x80 [ 349.690144][T10065] ? lockdep_hardirqs_on+0x94/0x140 [ 349.695372][T10065] do_syscall_64+0x4c/0xa0 [ 349.699842][T10065] ? clear_bhb_loop+0x60/0xb0 [ 349.704544][T10065] ? clear_bhb_loop+0x60/0xb0 [ 349.709251][T10065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 349.715207][T10065] RIP: 0033:0x7f06d739ce59 [ 349.719655][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.739284][T10065] RSP: 002b:00007f06d823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 349.747731][T10065] RAX: ffffffffffffffda RBX: 00007f06d7615fa0 RCX: 00007f06d739ce59 [ 349.755731][T10065] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004 [ 349.763719][T10065] RBP: 00007f06d823a090 R08: 0000000000000000 R09: 0000000000000000 [ 349.771714][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.779704][T10065] R13: 00007f06d7616038 R14: 00007f06d7615fa0 R15: 00007ffd254e1478 [ 349.787706][T10065] [ 349.799720][T10071] netlink: 'syz.0.1476': attribute type 26 has an invalid length. [ 349.829485][T10071] netlink: 60519 bytes leftover after parsing attributes in process `syz.0.1476'. [ 349.849593][T10065] syz.3.1477: vmalloc error: size 65408, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 349.879559][T10065] CPU: 0 PID: 10065 Comm: syz.3.1477 Not tainted syzkaller #0 [ 349.887206][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 349.897307][T10065] Call Trace: [ 349.900622][T10065] [ 349.903588][T10065] dump_stack_lvl+0x188/0x24e [ 349.908323][T10065] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 349.914797][T10065] ? show_regs_print_info+0x12/0x12 [ 349.920034][T10065] ? load_image+0x410/0x410 [ 349.924590][T10065] ? cpuset_print_current_mems_allowed+0x1b/0x360 [ 349.931051][T10065] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 349.937597][T10065] warn_alloc+0x242/0x330 [ 349.941976][T10065] ? __get_vm_area_node+0x122/0x330 [ 349.947219][T10065] ? zone_watermark_ok_safe+0x270/0x270 [ 349.952814][T10065] ? rcu_is_watching+0x11/0xa0 [ 349.957676][T10065] ? __get_vm_area_node+0x318/0x330 [ 349.962961][T10065] ? __local_bh_enable_ip+0x136/0x1c0 [ 349.968409][T10065] __vmalloc_node_range+0x37c/0x1380 [ 349.973772][T10065] ? netlink_insert+0x28d/0x13b0 [ 349.978769][T10065] ? free_vm_area+0x50/0x50 [ 349.983335][T10065] ? netlink_sendmsg+0x5ec/0xbd0 [ 349.988326][T10065] vmalloc+0x75/0x80 [ 349.992268][T10065] ? netlink_sendmsg+0x5ec/0xbd0 [ 349.997244][T10065] netlink_sendmsg+0x5ec/0xbd0 [ 350.002064][T10065] ? netlink_getsockopt+0x550/0x550 [ 350.007302][T10065] ? aa_file_perm+0x3ea/0xf00 [ 350.012029][T10065] ? aa_file_perm+0x112/0xf00 [ 350.016760][T10065] ? aa_sock_msg_perm+0x94/0x150 [ 350.021739][T10065] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 350.027081][T10065] ? security_socket_sendmsg+0x7c/0xa0 [ 350.032600][T10065] sock_write_iter+0x2d5/0x3e0 [ 350.037417][T10065] ? sock_read_iter+0x3a0/0x3a0 [ 350.042330][T10065] ? common_file_perm+0x171/0x1c0 [ 350.047403][T10065] vfs_write+0x482/0x9a0 [ 350.051712][T10065] ? file_end_write+0x250/0x250 [ 350.056631][T10065] ? __fget_files+0x3fc/0x460 [ 350.061377][T10065] ? __fdget_pos+0x1d4/0x360 [ 350.066044][T10065] ? ksys_write+0x70/0x260 [ 350.071160][T10065] ksys_write+0x14d/0x260 [ 350.075548][T10065] ? __ia32_sys_read+0x80/0x80 [ 350.080376][T10065] ? lockdep_hardirqs_on+0x94/0x140 [ 350.085631][T10065] do_syscall_64+0x4c/0xa0 [ 350.090101][T10065] ? clear_bhb_loop+0x60/0xb0 [ 350.094821][T10065] ? clear_bhb_loop+0x60/0xb0 [ 350.099535][T10065] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.105493][T10065] RIP: 0033:0x7f06d739ce59 [ 350.109953][T10065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.129602][T10065] RSP: 002b:00007f06d823a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 350.138062][T10065] RAX: ffffffffffffffda RBX: 00007f06d7615fa0 RCX: 00007f06d739ce59 [ 350.146074][T10065] RDX: 000000000000fe33 RSI: 0000200000000040 RDI: 0000000000000004 [ 350.154098][T10065] RBP: 00007f06d823a090 R08: 0000000000000000 R09: 0000000000000000 [ 350.162102][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.170102][T10065] R13: 00007f06d7616038 R14: 00007f06d7615fa0 R15: 00007ffd254e1478 [ 350.178113][T10065] [ 350.257823][T10065] Mem-Info: [ 350.263222][T10065] active_anon:9525 inactive_anon:0 isolated_anon:0 [ 350.263222][T10065] active_file:18947 inactive_file:40055 isolated_file:0 [ 350.263222][T10065] unevictable:768 dirty:210 writeback:0 [ 350.263222][T10065] slab_reclaimable:21134 slab_unreclaimable:96172 [ 350.263222][T10065] mapped:29326 shmem:1361 pagetables:641 [ 350.263222][T10065] sec_pagetables:0 bounce:0 [ 350.263222][T10065] kernel_misc_reclaimable:0 [ 350.263222][T10065] free:1321002 free_pcp:10866 free_cma:0 [ 350.383792][T10074] netlink: 56855 bytes leftover after parsing attributes in process `syz.4.1478'. [ 350.452940][T10076] netlink: 'syz.1.1479': attribute type 1 has an invalid length. [ 350.489525][T10076] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.1479'. [ 350.499163][T10065] Node 0 active_anon:38100kB inactive_anon:0kB active_file:75788kB inactive_file:160016kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:117404kB dirty:840kB writeback:0kB shmem:3908kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:11096kB pagetables:2564kB sec_pagetables:0kB all_unreclaimable? no [ 350.814930][T10065] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp: 0kB shmem_pmdmapped: 0kB anon_thp: 0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 350.852369][T10065] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.903952][T10087] netlink: 177648 bytes leftover after parsing attributes in process `syz.0.1482'. [ 350.913329][T10065] lowmem_reserve[]: 0 2527 2528 2528 2528 [ 350.913405][T10065] Node 0 DMA32 free:1374140kB boost:0kB min:34692kB low:43364kB high:52036kB reserved_highatomic:0KB active_anon:38052kB inactive_anon:0kB active_file:75788kB inactive_file:160016kB unevictable:1536kB writepending:756kB present:3129332kB managed:2592972kB mlocked:0kB bounce:0kB free_pcp:21340kB local_pcp:6748kB free_cma:0kB [ 350.957687][T10065] lowmem_reserve[]: 0 0 1 1 1 [ 350.962917][T10065] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:1048576kB managed:1424kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 350.990639][T10086] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1481'. [ 351.050066][T10065] lowmem_reserve[]: 0 0 0 0 0 [ 351.055070][T10065] Node 1 Normal free:3894004kB boost:0kB min:55192kB low:68988kB high:82784kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117620kB mlocked:0kB bounce:0kB free_pcp:21376kB local_pcp:10720kB free_cma:0kB [ 351.122844][T10065] lowmem_reserve[]: 0 0 0 0 0 [ 351.134792][T10065] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 351.179227][T10065] Node 0 DMA32: 1139*4kB (UM) 758*8kB (UM) 392*16kB (UM) 920*32kB (UME) 391*64kB (UME) 254*128kB (UME) 136*256kB (UM) 67*512kB (UM) 33*1024kB (UM) 12*2048kB (M) 279*4096kB (UM) = 1374140kB [ 351.203967][T10086] tap0: tun_chr_ioctl cmd 1074025688 [ 351.239282][T10065] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 351.292018][T10065] Node 1 Normal: 257*4kB (UE) 52*8kB (UE) 33*16kB (UME) 46*32kB (UME) 30*64kB (UME) 12*128kB (UME) 8*256kB (UME) 2*512kB (UM) 1*1024kB (E) 2*2048kB (UE) 947*4096kB (M) = 3894004kB [ 351.319736][T10065] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.330351][T10065] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.340058][T10065] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 351.382944][T10065] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 351.426442][T10065] 60363 total pagecache pages [ 351.474918][T10065] 0 pages in swap cache [ 351.511308][T10065] Free swap = 124996kB [ 351.515557][T10065] Total swap = 124996kB [ 351.575609][T10065] 2097051 pages RAM [ 351.629179][T10065] 0 pages HighMem/MovableOnly [ 351.659083][T10065] 415207 pages reserved [ 351.663552][T10065] 0 pages cma reserved [ 352.060692][T10109] netlink: 'syz.3.1490': attribute type 4 has an invalid length. [ 352.129267][T10109] netlink: 'syz.3.1490': attribute type 26 has an invalid length. [ 352.137426][T10109] netlink: 60519 bytes leftover after parsing attributes in process `syz.3.1490'. [ 352.913820][T10150] netlink: 'syz.3.1501': attribute type 10 has an invalid length. [ 352.933992][T10150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1501'. [ 353.119071][T10158] netlink: 'syz.2.1502': attribute type 4 has an invalid length. [ 353.132836][T10158] netlink: 'syz.2.1502': attribute type 26 has an invalid length. [ 353.563256][T10169] netlink: 'syz.3.1505': attribute type 41 has an invalid length. [ 355.712858][T10169] netlink: 'syz.3.1505': attribute type 41 has an invalid length. [ 355.999636][T10184] __nla_validate_parse: 3 callbacks suppressed [ 355.999654][T10184] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1509'. [ 356.297991][T10193] delete_channel: no stack [ 356.478660][T10184] can: request_module (can-proto-0) failed. [ 356.702466][T10217] syz.3.1519[10217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.702671][T10217] syz.3.1519[10217] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 356.831349][T10217] netlink: 'syz.3.1519': attribute type 3 has an invalid length. [ 356.878100][T10217] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1519'. [ 357.388446][T10244] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1526'. [ 358.667911][T10273] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1535'. [ 358.677398][T10282] netlink: 763 bytes leftover after parsing attributes in process `syz.2.1537'. [ 359.004344][T10305] netlink: 'syz.1.1544': attribute type 12 has an invalid length. [ 359.012650][T10305] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1544'. [ 359.367111][T10314] netlink: 17861 bytes leftover after parsing attributes in process `syz.3.1545'. [ 359.600628][T10325] netlink: 'syz.0.1549': attribute type 11 has an invalid length. [ 359.632881][T10325] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1549'. [ 359.754126][T10330] netlink: 'syz.2.1551': attribute type 2 has an invalid length. [ 359.769188][T10330] netlink: 'syz.2.1551': attribute type 1 has an invalid length. [ 359.909397][T10324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.175379][T10335] netlink: 'syz.4.1552': attribute type 39 has an invalid length. [ 361.149502][T10345] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1554'. [ 362.443872][T10402] netlink: 'syz.3.1570': attribute type 10 has an invalid length. [ 362.459303][T10402] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1570'. [ 362.540523][T10402] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 362.645279][T10414] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1573'. [ 362.667415][T10412] netlink: 65660 bytes leftover after parsing attributes in process `syz.4.1572'. [ 362.757377][T10412] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 362.876566][T10419] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 364.613183][T10458] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1584'. [ 364.901304][T10468] netlink: 'syz.3.1587': attribute type 3 has an invalid length. [ 364.960175][T10468] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 365.029472][T10468] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.1587'. [ 365.052951][T10475] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 365.079341][T10475] netlink: 'syz.3.1587': attribute type 1 has an invalid length. [ 365.114569][T10475] netlink: 'syz.3.1587': attribute type 2 has an invalid length. [ 365.150389][T10475] netlink: 198452 bytes leftover after parsing attributes in process `syz.3.1587'. [ 368.703260][ T4278] Bluetooth: hci4: unexpected subevent 0x0a length: 150 > 30 [ 368.711621][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:0' [ 368.721893][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 368.729508][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 368.739623][ T4278] Workqueue: hci4 hci_rx_work [ 368.744395][ T4278] Call Trace: [ 368.747726][ T4278] [ 368.750707][ T4278] dump_stack_lvl+0x188/0x24e [ 368.755442][ T4278] ? show_regs_print_info+0x12/0x12 [ 368.760700][ T4278] ? load_image+0x410/0x410 [ 368.765282][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 368.770470][ T4278] ? __lock_acquire+0x7bd0/0x7bd0 [ 368.775601][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 368.780354][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 368.785621][ T4278] kobject_add_internal+0x617/0xca0 [ 368.790897][ T4278] kobject_add+0x160/0x230 [ 368.795415][ T4278] ? kobject_init+0x1c0/0x1c0 [ 368.800209][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 368.805576][ T4278] ? klist_children_get+0x50/0x50 [ 368.810688][ T4278] ? get_device_parent+0x121/0x3e0 [ 368.815893][ T4278] device_add+0x470/0x1050 [ 368.820410][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 368.825441][ T4278] le_conn_complete_evt+0xf69/0x1560 [ 368.830818][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 368.837119][ T4278] ? bt_info+0x180/0x180 [ 368.841464][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 368.847165][ T4278] ? mutex_unlock+0x10/0x10 [ 368.851718][ T4278] ? skb_pull_data+0xec/0x1f0 [ 368.856460][ T4278] hci_le_enh_conn_complete_evt+0x185/0x460 [ 368.862416][ T4278] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 368.868901][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 368.875019][ T4278] hci_event_packet+0x7b3/0x1290 [ 368.880032][ T4278] ? __lock_acquire+0x7bd0/0x7bd0 [ 368.885116][ T4278] ? bis_list+0x280/0x280 [ 368.889500][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 368.895485][ T4278] ? kcov_remote_start+0x4b0/0x7e0 [ 368.900659][ T4278] ? nf_ct_resolve_clash+0x572/0x68f [ 368.906092][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 368.911373][ T4278] hci_rx_work+0x3eb/0xd40 [ 368.915874][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 368.920814][ T4278] ? process_one_work+0x7b4/0x1160 [ 368.925995][ T4278] process_one_work+0x8ab/0x1160 [ 368.931036][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 368.936737][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 368.941821][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 368.947450][ T4278] ? wq_worker_running+0x97/0x190 [ 368.952531][ T4278] worker_thread+0xaf5/0x12a0 [ 368.957345][ T4278] kthread+0x29d/0x330 [ 368.961470][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 368.966551][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 368.971200][ T4278] ret_from_fork+0x1f/0x30 [ 368.975717][ T4278] [ 368.988171][ T4278] kobject_add_internal failed for hci4:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 369.001614][ T4278] Bluetooth: hci4: failed to register connection device [ 369.109695][T10507] netlink: 'syz.3.1596': attribute type 39 has an invalid length. [ 369.326095][T10513] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1601'. [ 369.338105][T10513] openvswitch: netlink: Message has 6 unknown bytes. [ 369.590352][T10518] sctp: [Deprecated]: syz.4.1602 (pid 10518) Use of int in max_burst socket option deprecated. [ 369.590352][T10518] Use struct sctp_assoc_value instead [ 369.695870][T10524] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1602'. [ 369.734186][T10521] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.1605'. [ 369.834307][T10524] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 370.194672][T10533] netlink: 'syz.1.1609': attribute type 10 has an invalid length. [ 370.279160][T10533] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1609'. [ 370.319702][T10543] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1610'. [ 370.337024][T10533] bridge0: port 3(veth0_vlan) entered blocking state [ 370.377506][T10533] bridge0: port 3(veth0_vlan) entered disabled state [ 370.427582][T10533] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 370.904832][T10569] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 371.055690][ T4278] Bluetooth: hci4: command 0x2016 tx timeout [ 371.365022][T10569] team0: Device ipvlan1 failed to register rx_handler [ 372.106773][T10594] netlink: 'syz.2.1622': attribute type 21 has an invalid length. [ 372.199047][T10594] IPv6: Can't replace route, no match found [ 372.486259][T10611] netlink: 'syz.3.1626': attribute type 21 has an invalid length. [ 372.523707][T10611] netlink: 'syz.3.1626': attribute type 6 has an invalid length. [ 372.569253][T10611] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1626'. [ 372.655820][T10620] -1: renamed from syzkaller0 [ 373.653168][T10654] netlink: 'syz.3.1639': attribute type 11 has an invalid length. [ 374.407159][T10689] netlink: 'syz.1.1644': attribute type 3 has an invalid length. [ 374.466179][T10689] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1644'. [ 374.790739][T10705] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1649'. [ 375.753198][T10725] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1655'. [ 375.777278][T10724] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1655'. [ 376.445308][T10752] netlink: 'syz.2.1661': attribute type 3 has an invalid length. [ 376.489539][T10752] netlink: 16066 bytes leftover after parsing attributes in process `syz.2.1661'. [ 376.524134][T10752] netlink: 'syz.2.1661': attribute type 9 has an invalid length. [ 376.549114][T10752] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1661'. [ 376.908021][T10770] netlink: 'syz.1.1664': attribute type 21 has an invalid length. [ 376.970885][T10770] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1664'. [ 377.516780][T10779] netlink: 'syz.4.1667': attribute type 10 has an invalid length. [ 377.574716][T10779] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1667'. [ 377.721582][T10779] bridge0: port 7(veth0_vlan) entered blocking state [ 377.765869][T10779] bridge0: port 7(veth0_vlan) entered disabled state [ 377.797122][T10779] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 378.600187][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.606590][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.251441][T10811] netlink: 'syz.3.1673': attribute type 6 has an invalid length. [ 379.279051][T10811] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1673'. [ 381.566440][ T4278] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 381.726204][T10818] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1676'. [ 382.756188][T10851] netlink: 'syz.3.1682': attribute type 10 has an invalid length. [ 382.779219][T10851] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1682'. [ 382.800993][T10851] device veth0_vlan left promiscuous mode [ 382.819721][T10851] device veth0_vlan entered promiscuous mode [ 382.898669][T10851] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 383.029114][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 383.070748][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 383.436702][T10858] -1: renamed from syzkaller0 [ 383.609280][ T4278] Bluetooth: hci2: command 0x2016 tx timeout [ 383.629622][T10877] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1689'. [ 383.646527][T10877] ksmbd: Unknown IPC event: 10, ignore. [ 384.285522][T10913] sock: sock_set_timeout: `syz.2.1699' (pid 10913) tries to set negative timeout [ 384.547248][T10922] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.1701'. [ 385.852467][T10965] netlink: 'syz.3.1714': attribute type 9 has an invalid length. [ 385.869033][T10965] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1714'. [ 386.020414][ T4278] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 386.467416][T10989] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1721'. [ 386.627458][T10989] netlink: 'syz.4.1721': attribute type 20 has an invalid length. [ 386.808387][T10989] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.1721'. [ 386.836470][T10989] netlink: 'syz.4.1721': attribute type 2 has an invalid length. [ 386.856599][T10989] netlink: 'syz.4.1721': attribute type 8 has an invalid length. [ 386.866936][T10989] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1721'. [ 387.848884][T11018] netlink: 'syz.4.1730': attribute type 7 has an invalid length. [ 388.217049][T11028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1732'. [ 388.895886][T11038] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1735'. [ 389.397646][T11062] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1750'. [ 389.439467][T11062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 390.188602][T11087] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.1744'. [ 390.224488][T11085] netlink: 8210 bytes leftover after parsing attributes in process `syz.3.1744'. [ 392.509788][T11097] delete_channel: no stack [ 392.514413][T11097] delete_channel: no stack [ 392.594615][T11105] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1749'. [ 392.610202][T11102] netlink: 136 bytes leftover after parsing attributes in process `syz.0.1748'. [ 392.819087][T11120] IPv6: Can't replace route, no match found [ 392.908077][T11120] device syzkaller0 entered promiscuous mode [ 393.100106][T11131] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 394.461918][T11163] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1764'. [ 394.986374][T11175] netlink: 15794 bytes leftover after parsing attributes in process `syz.2.1766'. [ 395.046436][T11174] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1767'. [ 395.095690][T11174] device veth1_macvtap entered promiscuous mode [ 395.115059][T11174] device macsec0 entered promiscuous mode [ 395.191732][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 395.300488][T11186] tap0: tun_chr_ioctl cmd 1074812118 [ 395.919238][T11202] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1775'. [ 396.310213][T11216] netlink: 'syz.2.1780': attribute type 21 has an invalid length. [ 396.318216][T11216] netlink: 'syz.2.1780': attribute type 1 has an invalid length. [ 396.344247][T11218] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1779'. [ 396.365207][T11221] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1781'. [ 396.401652][T11221] netlink: 'syz.4.1781': attribute type 6 has an invalid length. [ 396.447374][T11221] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1781'. [ 396.705030][T11235] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1786'. [ 397.386592][T11264] netlink: 'syz.2.1793': attribute type 7 has an invalid length. [ 397.955831][T11291] device syzkaller0 entered promiscuous mode [ 398.852962][T11312] netlink: 'syz.0.1806': attribute type 10 has an invalid length. [ 398.891716][T11312] device dummy0 left promiscuous mode [ 398.981276][T11327] netlink: 'syz.3.1809': attribute type 275 has an invalid length. [ 399.028114][T11329] sock: sock_set_timeout: `syz.2.1810' (pid 11329) tries to set negative timeout [ 399.078386][T11331] netlink: 'syz.3.1809': attribute type 2 has an invalid length. [ 399.254026][T11316] device syzkaller0 entered promiscuous mode [ 399.267099][T11339] netlink: 'syz.1.1811': attribute type 39 has an invalid length. [ 401.938761][T11353] netlink: 'syz.1.1816': attribute type 23 has an invalid length. [ 401.978860][T11353] netlink: 'syz.1.1816': attribute type 2 has an invalid length. [ 402.029169][T11353] __nla_validate_parse: 3 callbacks suppressed [ 402.029187][T11353] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1816'. [ 402.057415][T11361] netlink: 16054 bytes leftover after parsing attributes in process `syz.0.1815'. [ 402.259456][T11369] device syzkaller0 entered promiscuous mode [ 402.657576][T11386] netlink: 16399 bytes leftover after parsing attributes in process `syz.2.1822'. [ 403.258809][ T4278] Bluetooth: hci2: unexpected subevent 0x01 length: 150 > 18 [ 403.266829][ T4278] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 403.276735][ T4278] CPU: 1 PID: 4278 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 403.284348][ T4278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 403.294470][ T4278] Workqueue: hci2 hci_rx_work [ 403.299218][ T4278] Call Trace: [ 403.302546][ T4278] [ 403.305516][ T4278] dump_stack_lvl+0x188/0x24e [ 403.310258][ T4278] ? show_regs_print_info+0x12/0x12 [ 403.315515][ T4278] ? load_image+0x410/0x410 [ 403.320091][ T4278] sysfs_create_dir_ns+0x26a/0x290 [ 403.325260][ T4278] ? __lock_acquire+0x7bd0/0x7bd0 [ 403.330323][ T4278] ? sysfs_warn_dup+0xa0/0xa0 [ 403.335036][ T4278] ? do_raw_spin_unlock+0x11d/0x230 [ 403.340270][ T4278] kobject_add_internal+0x617/0xca0 [ 403.345513][ T4278] kobject_add+0x160/0x230 [ 403.349996][ T4278] ? kobject_init+0x1c0/0x1c0 [ 403.354733][ T4278] ? __raw_spin_lock_init+0x41/0x100 [ 403.360050][ T4278] ? klist_children_get+0x50/0x50 [ 403.365100][ T4278] ? get_device_parent+0x121/0x3e0 [ 403.370246][ T4278] device_add+0x470/0x1050 [ 403.374698][ T4278] hci_conn_add_sysfs+0xd1/0x1e0 [ 403.379669][ T4278] le_conn_complete_evt+0xf69/0x1560 [ 403.385007][ T4278] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 403.391289][ T4278] ? bt_info+0x180/0x180 [ 403.395557][ T4278] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 403.401265][ T4278] ? mutex_unlock+0x10/0x10 [ 403.405800][ T4278] ? skb_pull_data+0xec/0x1f0 [ 403.410512][ T4278] hci_le_conn_complete_evt+0x183/0x440 [ 403.416111][ T4278] ? hci_remote_host_features_evt+0x230/0x230 [ 403.422213][ T4278] hci_event_packet+0x7b3/0x1290 [ 403.427186][ T4278] ? __lock_acquire+0x7bd0/0x7bd0 [ 403.432252][ T4278] ? bis_list+0x280/0x280 [ 403.436619][ T4278] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 403.442558][ T4278] ? kcov_remote_start+0x4b0/0x7e0 [ 403.447707][ T4278] ? nf_ct_resolve_clash+0x572/0x68f [ 403.453028][ T4278] ? hci_send_to_monitor+0x9c/0x4a0 [ 403.458286][ T4278] hci_rx_work+0x3eb/0xd40 [ 403.462742][ T4278] ? _raw_spin_unlock+0x40/0x40 [ 403.467637][ T4278] ? process_one_work+0x7b4/0x1160 [ 403.472780][ T4278] process_one_work+0x8ab/0x1160 [ 403.477766][ T4278] ? worker_detach_from_pool+0x240/0x240 [ 403.483432][ T4278] ? _raw_spin_lock_irq+0x86/0xf0 [ 403.488493][ T4278] ? _raw_spin_lock_irq+0xb7/0xf0 [ 403.493552][ T4278] ? _raw_spin_lock_irqsave+0x100/0x100 [ 403.499143][ T4278] ? wq_worker_running+0x97/0x190 [ 403.504203][ T4278] worker_thread+0xaf5/0x12a0 [ 403.508948][ T4278] kthread+0x29d/0x330 [ 403.513053][ T4278] ? worker_clr_flags+0x1a0/0x1a0 [ 403.518112][ T4278] ? kthread_blkcg+0xd0/0xd0 [ 403.522735][ T4278] ret_from_fork+0x1f/0x30 [ 403.527204][ T4278] [ 403.532420][ T4278] kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 403.545657][ T4278] Bluetooth: hci2: failed to register connection device [ 403.732396][T11409] netlink: 'syz.3.1830': attribute type 10 has an invalid length. [ 403.802485][T11409] device geneve1 entered promiscuous mode [ 403.850264][T11409] team0: Port device geneve1 added [ 404.007563][T11423] netlink: 'syz.1.1833': attribute type 21 has an invalid length. [ 404.061954][T11423] netlink: 'syz.1.1833': attribute type 6 has an invalid length. [ 404.087129][T11423] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1833'. [ 404.388828][T11432] device syzkaller0 entered promiscuous mode [ 405.609404][ T4278] Bluetooth: hci2: command 0x2016 tx timeout [ 408.147212][T11469] netlink: 'syz.3.1847': attribute type 1 has an invalid length. [ 408.172574][T11469] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1847'. [ 408.232262][T11483] netlink: 'syz.4.1850': attribute type 3 has an invalid length. [ 408.261567][T11483] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1850'. [ 409.185137][T11515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 409.212210][T11516] netlink: 'syz.0.1858': attribute type 10 has an invalid length. [ 409.220621][T11516] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1858'. [ 409.230205][T11516] device team0 entered promiscuous mode [ 409.236125][T11516] device team_slave_0 entered promiscuous mode [ 409.242987][T11516] device team_slave_1 entered promiscuous mode [ 409.259336][T11516] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 412.141966][T11553] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 412.229337][T11553] netlink: 'syz.4.1869': attribute type 3 has an invalid length. [ 412.237158][T11553] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1869'. [ 412.511942][T11562] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1871'. [ 413.795023][T11582] netlink: 'syz.3.1876': attribute type 10 has an invalid length. [ 413.834771][T11582] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1876'. [ 415.597736][T11619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 415.646722][T11619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 415.667715][T11619] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1885'. [ 415.868004][T11626] netlink: 15119 bytes leftover after parsing attributes in process `syz.0.1888'. [ 415.892216][T11625] netlink: 'syz.1.1887': attribute type 3 has an invalid length. [ 415.909220][T11628] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1889'. [ 415.918632][T11625] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1887'. [ 418.736174][T11691] netlink: 'syz.3.1905': attribute type 39 has an invalid length. [ 419.146248][T11702] netlink: 'syz.4.1908': attribute type 3 has an invalid length. [ 419.174993][T11702] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.1908'. [ 419.377422][T11712] device pim6reg1 entered promiscuous mode [ 422.500621][T11759] netlink: 'syz.1.1923': attribute type 25 has an invalid length. [ 422.647601][T11764] device syzkaller0 entered promiscuous mode [ 424.933001][T11771] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1925'. [ 424.942320][T11773] netlink: 'syz.0.1926': attribute type 11 has an invalid length. [ 424.950641][T11773] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1926'. [ 425.172976][T11789] netlink: 'syz.2.1929': attribute type 21 has an invalid length. [ 425.184365][T11789] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1929'. [ 425.499534][T11812] netlink: 'syz.4.1935': attribute type 22 has an invalid length. [ 425.507460][T11812] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1935'. [ 425.885017][T11824] netlink: 'syz.1.1939': attribute type 2 has an invalid length. [ 425.925889][T11824] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1939'. [ 425.947900][T11827] netlink: 'syz.1.1939': attribute type 2 has an invalid length. [ 425.959679][T11827] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1939'. [ 426.118917][T11835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1951'. [ 426.911578][T11860] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 426.937045][T11860] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 427.261930][T11870] netlink: 'syz.2.1950': attribute type 10 has an invalid length. [ 427.273704][T11870] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1950'. [ 427.293817][T11870] device hsr0 entered promiscuous mode [ 427.311740][T11870] bridge0: port 3(hsr0) entered blocking state [ 427.330168][T11870] bridge0: port 3(hsr0) entered disabled state [ 427.358864][T11870] bridge0: port 3(hsr0) entered blocking state [ 427.365595][T11870] bridge0: port 3(hsr0) entered forwarding state [ 428.537704][T11914] netlink: 'syz.0.1964': attribute type 2 has an invalid length. [ 428.626085][T11914] device 0 entered promiscuous mode [ 428.823674][T11931] netlink: 'syz.1.1969': attribute type 39 has an invalid length. [ 429.251383][T11948] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1971'. [ 429.286254][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1970'. [ 429.675562][ T4278] Bluetooth: hci4: ISO packet for unknown connection handle 1380 [ 430.027815][T11969] netlink: 'syz.3.1976': attribute type 21 has an invalid length. [ 430.173326][T11969] netlink: 'syz.3.1976': attribute type 12 has an invalid length. [ 430.281081][T11969] netlink: 'syz.3.1976': attribute type 13 has an invalid length. [ 430.404832][T11969] netlink: 'syz.3.1976': attribute type 14 has an invalid length. [ 430.447894][T11969] netlink: 'syz.3.1976': attribute type 15 has an invalid length. [ 430.582613][T11969] netlink: 'syz.3.1976': attribute type 16 has an invalid length. [ 430.637264][T11969] __nla_validate_parse: 2 callbacks suppressed [ 430.637285][T11969] netlink: 12926 bytes leftover after parsing attributes in process `syz.3.1976'. [ 430.904917][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.917474][T11982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.939815][T11982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.960731][T11982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 431.116128][T11985] netlink: 'syz.2.1982': attribute type 21 has an invalid length. [ 431.139358][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1982'. [ 431.162893][T11985] netlink: 'syz.2.1982': attribute type 1 has an invalid length. [ 431.686968][T12002] device syzkaller0 entered promiscuous mode [ 431.704761][T12016] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1991'. [ 431.716193][T12017] netlink: 'syz.3.1990': attribute type 29 has an invalid length. [ 431.725735][T12018] netlink: 'syz.4.1989': attribute type 10 has an invalid length. [ 431.762757][T12020] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1991'. [ 431.813864][T12022] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1991'. [ 434.909082][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1993'. [ 434.919315][T12044] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1997'. [ 434.939134][T12048] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1997'. [ 435.099505][T12061] validate_nla: 1 callbacks suppressed [ 435.099544][T12061] netlink: 'syz.2.2000': attribute type 19 has an invalid length. [ 435.174959][T12058] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.2001'. [ 435.186466][T12061] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2000'. [ 435.209826][T12058] openvswitch: netlink: Message has 48126 unknown bytes. [ 435.333928][T12065] netlink: 'syz.3.2003': attribute type 10 has an invalid length. [ 435.357133][T12065] device hsr0 entered promiscuous mode [ 435.885144][T12088] netlink: 'syz.1.2008': attribute type 4 has an invalid length. [ 436.072265][T12098] __nla_validate_parse: 2 callbacks suppressed [ 436.072284][T12098] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2011'. [ 436.156062][T12098] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 436.240757][T12098] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 437.224776][T12128] netlink: 'syz.1.2018': attribute type 10 has an invalid length. [ 437.249671][T12128] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2018'. [ 437.299963][T12128] bridge0: port 3(hsr0) entered blocking state [ 437.320079][T12128] bridge0: port 3(hsr0) entered disabled state [ 437.359133][T12128] bridge0: port 3(hsr0) entered blocking state [ 437.365619][T12128] bridge0: port 3(hsr0) entered forwarding state [ 437.402901][T12142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2023'. [ 437.718799][T12148] netlink: 'syz.4.2024': attribute type 2 has an invalid length. [ 437.945850][T12148] device 2 entered promiscuous mode [ 438.023114][T12158] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2027'. [ 438.061997][T12156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2027'. [ 438.097700][T12163] netlink: 8964 bytes leftover after parsing attributes in process `syz.4.2024'. [ 438.336034][T12179] netlink: 'syz.1.2033': attribute type 7 has an invalid length. [ 439.007164][T12205] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2039'. [ 439.112263][T12205] netlink: 'syz.1.2039': attribute type 39 has an invalid length. [ 440.012042][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.018552][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.228467][T12236] netlink: 'syz.4.2048': attribute type 10 has an invalid length. [ 440.245241][T12238] netlink: 'syz.1.2049': attribute type 2 has an invalid length. [ 440.257903][T12238] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2049'. [ 440.289158][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2048'. [ 440.398622][T12236] netlink: 'syz.4.2048': attribute type 39 has an invalid length. [ 440.441400][T12245] netlink: 'syz.1.2050': attribute type 21 has an invalid length. [ 440.755077][T12261] syz.3.2056[12261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.755251][T12261] syz.3.2056[12261] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 440.767828][T12263] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2054'. [ 440.878877][T12263] tap0: tun_chr_ioctl cmd 1074025675 [ 440.887135][T12263] tap0: persist enabled [ 442.265983][T12270] netlink: 'syz.3.2059': attribute type 39 has an invalid length. [ 442.543610][T12287] netlink: 'syz.4.2064': attribute type 1 has an invalid length. [ 442.557615][T12284] netlink: 'syz.3.2062': attribute type 4 has an invalid length. [ 442.579228][T12287] netlink: 'syz.4.2064': attribute type 3 has an invalid length. [ 442.587036][T12287] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2064'. [ 442.596558][T12284] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.2062'. [ 442.791056][T12297] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2066'. [ 442.900232][ T4278] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 443.269332][T12317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2073'. [ 443.482120][T12326] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 443.579249][T12326] device syzkaller0 entered promiscuous mode [ 444.980813][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 446.253199][T12342] netlink: 'syz.0.2079': attribute type 21 has an invalid length. [ 446.537541][T12384] netlink: 'syz.1.2090': attribute type 1 has an invalid length. [ 446.589232][T12384] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.2090'. [ 447.290854][T12390] netlink: 'syz.4.2092': attribute type 10 has an invalid length. [ 447.309567][T12390] netlink: 168 bytes leftover after parsing attributes in process `syz.4.2092'. [ 447.325844][T12395] netlink: 'syz.4.2092': attribute type 10 has an invalid length. [ 447.373109][T12395] device wlan1 left promiscuous mode [ 447.423170][T12395] device wlan1 entered promiscuous mode [ 447.488113][T12395] team0: Port device wlan1 added [ 448.465701][T12440] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2105'. [ 449.695599][T12490] __sock_release: fasync list not empty! [ 450.386715][T12513] delete_channel: no stack [ 450.666882][T12522] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 450.693982][T12522] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2132'. [ 450.770412][T12522] netlink: 'syz.0.2132': attribute type 10 has an invalid length. [ 450.818913][T12522] device wlan1 left promiscuous mode [ 450.844205][T12531] netlink: 'syz.1.2134': attribute type 2 has an invalid length. [ 450.865331][T12532] netlink: 'syz.1.2134': attribute type 2 has an invalid length. [ 450.942540][T12522] device wlan1 entered promiscuous mode [ 450.968213][T12522] team0: Port device wlan1 added [ 451.065226][T12532] device 5 entered promiscuous mode [ 451.112793][T12531] device 6 entered promiscuous mode [ 451.442017][T12551] netlink: 'syz.1.2140': attribute type 3 has an invalid length. [ 451.480299][T12551] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2140'. [ 451.605394][T12568] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2143'. [ 451.655591][T12568] netlink: 'syz.2.2143': attribute type 4 has an invalid length. [ 451.668772][T12568] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2143'. [ 451.745919][T12568] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 452.205580][T12577] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2147'. [ 452.223129][T12577] device hsr_slave_0 left promiscuous mode [ 452.284763][T12577] device hsr_slave_1 left promiscuous mode [ 452.535933][T12581] netlink: 'syz.0.2146': attribute type 10 has an invalid length. [ 452.791794][T12581] device wg1 entered promiscuous mode [ 452.797552][T12581] team0: Device wg1 is of different type [ 452.899514][T12596] netlink: 'syz.3.2150': attribute type 10 has an invalid length. [ 452.932171][T12596] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2150'. [ 452.948772][T12599] netlink: 'syz.3.2150': attribute type 10 has an invalid length. [ 452.957394][T12599] device wlan1 left promiscuous mode [ 452.976068][T12374] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 452.991228][T12599] device wlan1 entered promiscuous mode [ 452.997082][T12374] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 453.014082][T12599] team0: Port device wlan1 added [ 453.036846][T12608] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2154'. [ 453.058554][ T6880] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.115584][T12612] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2154'. [ 453.380480][T12625] netlink: 'syz.3.2159': attribute type 10 has an invalid length. [ 460.328990][T12709] netlink: 'syz.4.2179': attribute type 28 has an invalid length. [ 461.871092][T12716] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 461.911260][T12716] device syzkaller0 entered promiscuous mode [ 463.978878][T12752] mac80211_hwsim hwsim6 ªªªªªªõUÁMVµ"˜: renamed from wlan0 [ 464.112139][T12764] netlink: 'syz.2.2195': attribute type 7 has an invalid length. [ 464.121879][T12764] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.2195'. [ 464.138223][T12764] netlink: 'syz.2.2195': attribute type 21 has an invalid length. [ 464.152912][T12764] netlink: 'syz.2.2195': attribute type 6 has an invalid length. [ 464.167598][T12764] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2195'. [ 464.562758][T12783] netlink: 'syz.0.2198': attribute type 3 has an invalid length. [ 464.589416][T12783] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2198'. [ 464.599755][T12779] tipc: Started in network mode [ 464.604813][T12779] tipc: Node identity 9215a268, cluster identity 4711 [ 464.616879][T12779] tipc: Node number set to 2450891368 [ 464.623032][T12784] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2200'. [ 464.637591][T12780] netlink: 'syz.2.2199': attribute type 25 has an invalid length. [ 464.646710][T12780] netlink: 'syz.2.2199': attribute type 29 has an invalid length. [ 464.661779][T12781] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2199'. [ 465.111057][ T4279] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 465.903408][T12821] netlink: 'syz.1.2210': attribute type 13 has an invalid length. [ 465.967876][T12821] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2210'. [ 466.087376][T12821] erspan0: refused to change device tx_queue_len [ 466.523556][T12833] netlink: 'syz.4.2212': attribute type 10 has an invalid length. [ 466.607422][T12816] netlink: 'syz.2.2209': attribute type 7 has an invalid length. [ 466.642790][T12816] netlink: 'syz.2.2209': attribute type 1 has an invalid length. [ 466.669569][T12816] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.2209'. [ 466.699496][T12839] netlink: 'syz.0.2214': attribute type 3 has an invalid length. [ 466.728109][T12839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2214'. [ 467.177336][T12858] netlink: 'syz.3.2220': attribute type 4 has an invalid length. [ 467.185500][T12858] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2220'. [ 470.784514][T12871] netlink: 'syz.3.2224': attribute type 1 has an invalid length. [ 471.166794][T12886] netlink: 'syz.2.2229': attribute type 21 has an invalid length. [ 471.183125][T12886] netlink: 14082 bytes leftover after parsing attributes in process `syz.2.2229'. [ 471.206644][T12887] netlink: 'syz.2.2229': attribute type 21 has an invalid length. [ 471.219306][T12887] netlink: 14082 bytes leftover after parsing attributes in process `syz.2.2229'. [ 472.602332][T12923] netlink: 'syz.3.2237': attribute type 1 has an invalid length. [ 473.584694][T12947] netlink: 'syz.2.2244': attribute type 11 has an invalid length. [ 473.633626][T12947] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2244'. [ 473.655089][T12949] FAULT_INJECTION: forcing a failure. [ 473.655089][T12949] name failslab, interval 1, probability 0, space 0, times 0 [ 473.710537][T12949] CPU: 1 PID: 12949 Comm: syz.0.2245 Not tainted syzkaller #0 [ 473.718099][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 473.728205][T12949] Call Trace: [ 473.731524][T12949] [ 473.734580][T12949] dump_stack_lvl+0x188/0x24e [ 473.739312][T12949] ? show_regs_print_info+0x12/0x12 [ 473.744556][T12949] ? load_image+0x410/0x410 [ 473.749132][T12949] ? __might_sleep+0xd0/0xd0 [ 473.753778][T12949] ? __lock_acquire+0x7bd0/0x7bd0 [ 473.758873][T12949] should_fail_ex+0x390/0x4c0 [ 473.763615][T12949] should_failslab+0x5/0x20 [ 473.768258][T12949] slab_pre_alloc_hook+0x59/0x300 [ 473.773336][T12949] ? __lock_acquire+0x130c/0x7bd0 [ 473.778418][T12949] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 473.784197][T12949] __kmem_cache_alloc_node+0x4f/0x270 [ 473.789636][T12949] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 473.795405][T12949] __kmalloc+0xa3/0x240 [ 473.799724][T12949] tomoyo_realpath_from_path+0xe2/0x5c0 [ 473.805328][T12949] ? tomoyo_domain+0xd2/0x120 [ 473.810067][T12949] ? tomoyo_path_number_perm+0x205/0x650 [ 473.815756][T12949] tomoyo_path_number_perm+0x22f/0x650 [ 473.821263][T12949] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 473.826761][T12949] ? ksys_write+0x1ce/0x260 [ 473.831299][T12949] ? common_file_perm+0x171/0x1c0 [ 473.836380][T12949] ? __fget_files+0x28/0x460 [ 473.841011][T12949] security_file_ioctl+0x6c/0xa0 [ 473.845984][T12949] __se_sys_ioctl+0x48/0x170 [ 473.850624][T12949] do_syscall_64+0x4c/0xa0 [ 473.855075][T12949] ? clear_bhb_loop+0x60/0xb0 [ 473.859775][T12949] ? clear_bhb_loop+0x60/0xb0 [ 473.864485][T12949] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.870412][T12949] RIP: 0033:0x7f0e1eb9ce59 [ 473.874851][T12949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.894485][T12949] RSP: 002b:00007f0e1fa62028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.902926][T12949] RAX: ffffffffffffffda RBX: 00007f0e1ee15fa0 RCX: 00007f0e1eb9ce59 [ 473.910927][T12949] RDX: 0000200000000180 RSI: 0000000040047451 RDI: 0000000000000004 [ 473.918930][T12949] RBP: 00007f0e1fa62090 R08: 0000000000000000 R09: 0000000000000000 [ 473.926932][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.934924][T12949] R13: 00007f0e1ee16038 R14: 00007f0e1ee15fa0 R15: 00007ffdf013ff98 [ 473.942937][T12949] [ 474.002705][T12957] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.2247'. [ 474.012680][T12949] ERROR: Out of memory at tomoyo_realpath_from_path. [ 474.029483][T12957] netlink: zone id is out of range [ 474.085966][T12947] device syzkaller0 entered promiscuous mode [ 476.590986][T12968] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2248'. [ 476.879156][T12946] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 480.372551][ T4279] Bluetooth: hci2: Malformed HCI Event: 0x22 [ 480.386242][T13022] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 480.429463][T13022] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2262'. [ 480.459700][T13028] netlink: 'syz.2.2262': attribute type 1 has an invalid length. [ 480.467533][T13028] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2262'. [ 481.506547][T13053] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2269'. [ 482.160011][T13066] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 482.305510][T13066] device syzkaller0 entered promiscuous mode [ 483.556334][T13098] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.2282'. [ 484.325377][T13114] netlink: 'syz.0.2285': attribute type 2 has an invalid length. [ 484.343988][T13114] netlink: 'syz.0.2285': attribute type 1 has an invalid length. [ 484.353437][T13114] netlink: 148288 bytes leftover after parsing attributes in process `syz.0.2285'. [ 485.025348][T13098] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 485.045702][T13098] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 485.058596][T13098] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 485.447890][T13119] netlink: 'syz.2.2288': attribute type 39 has an invalid length. [ 485.873715][T13139] device syzkaller0 entered promiscuous mode [ 487.211743][T13182] netlink: 'syz.1.2303': attribute type 2 has an invalid length. [ 487.240266][T13182] netlink: 'syz.1.2303': attribute type 1 has an invalid length. [ 487.258815][T13182] netlink: 182072 bytes leftover after parsing attributes in process `syz.1.2303'. [ 487.383418][T13197] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 487.390779][T13197] IPv6: NLM_F_CREATE should be set when creating new route [ 487.590057][T13204] netlink: 'syz.4.2310': attribute type 21 has an invalid length. [ 487.815237][T13211] netlink: 'syz.2.2313': attribute type 10 has an invalid length. [ 487.828930][T13211] bridge0: port 3(hsr0) entered disabled state [ 487.860220][T13211] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 488.001966][T13217] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2314'. [ 488.343466][T13232] netlink: 'syz.4.2319': attribute type 2 has an invalid length. [ 488.534524][T13232] device 3 entered promiscuous mode [ 488.776530][T13242] netlink: 'syz.0.2322': attribute type 29 has an invalid length. [ 488.794350][T13242] netlink: 'syz.0.2322': attribute type 29 has an invalid length. [ 488.811759][T13242] netlink: 'syz.0.2322': attribute type 29 has an invalid length. [ 489.225822][T13254] netlink: 'syz.0.2322': attribute type 29 has an invalid length. [ 490.127786][T13294] netlink: 'syz.1.2336': attribute type 11 has an invalid length. [ 490.168089][T13294] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2336'. [ 490.232637][T13294] netlink: 'syz.1.2336': attribute type 11 has an invalid length. [ 490.258567][T13294] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2336'. [ 490.876457][T13289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 490.939977][T13287] delete_channel: no stack [ 491.481597][T13325] validate_nla: 7 callbacks suppressed [ 491.481619][T13325] netlink: 'syz.2.2346': attribute type 16 has an invalid length. [ 491.518684][T13325] netlink: 164 bytes leftover after parsing attributes in process `syz.2.2346'. [ 491.562285][T13324] delete_channel: no stack [ 491.631811][T13323] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2345'. [ 491.643272][T13323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 491.872969][T13337] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2349'. [ 491.906509][T13343] netlink: 'syz.2.2350': attribute type 12 has an invalid length. [ 491.933827][T13343] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2350'. [ 491.957525][T13344] netlink: 'syz.2.2350': attribute type 29 has an invalid length. [ 491.979745][T13344] netlink: 'syz.2.2350': attribute type 29 has an invalid length. [ 491.988600][T13343] netlink: 'syz.2.2350': attribute type 29 has an invalid length. [ 492.002668][T13344] netlink: 'syz.2.2350': attribute type 29 has an invalid length. [ 492.093447][T13321] device syzkaller0 entered promiscuous mode [ 493.654783][T13385] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2360'. [ 493.804391][T13392] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.2364'. [ 493.814068][T13392] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 495.578401][T13364] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2354'. [ 495.587624][T13364] device hsr_slave_0 left promiscuous mode [ 495.594452][T13364] device hsr_slave_1 left promiscuous mode [ 495.657151][T13388] bridge0: port 3(ip6gretap0) entered blocking state [ 495.664364][T13388] bridge0: port 3(ip6gretap0) entered disabled state [ 495.672548][T13388] device ip6gretap0 entered promiscuous mode [ 495.679287][T13388] bridge0: port 3(ip6gretap0) entered blocking state [ 495.686319][T13388] bridge0: port 3(ip6gretap0) entered forwarding state [ 495.695241][T13391] netlink: 'syz.2.2363': attribute type 10 has an invalid length. [ 495.735829][T13391] team0: Port device geneve1 added [ 495.766212][T13409] netlink: 'syz.4.2368': attribute type 39 has an invalid length. [ 495.846473][T13385] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 495.859302][T13385] CPU: 1 PID: 13385 Comm: syz.0.2360 Not tainted syzkaller #0 [ 495.866865][T13385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.876980][T13385] Call Trace: [ 495.880313][T13385] [ 495.883292][T13385] dump_stack_lvl+0x188/0x24e [ 495.888033][T13385] ? show_regs_print_info+0x12/0x12 [ 495.893291][T13385] ? load_image+0x410/0x410 [ 495.897868][T13385] sysfs_warn_dup+0x8a/0xa0 [ 495.902435][T13385] sysfs_do_create_link_sd+0xc0/0x110 [ 495.907877][T13385] device_add+0x83b/0x1050 [ 495.912357][T13385] wiphy_register+0x1d8b/0x2aa0 [ 495.917286][T13385] ? cfg80211_event_work+0x40/0x40 [ 495.922444][T13385] ? minstrel_ht_alloc+0x894/0xa20 [ 495.927579][T13385] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 495.933674][T13385] ieee80211_register_hw+0x2d48/0x39f0 [ 495.939188][T13385] ? ieee80211_register_hw+0xed1/0x39f0 [ 495.944794][T13385] ? ieee80211_register_hw+0xed1/0x39f0 [ 495.950400][T13385] ? ieee80211_tasklet_handler+0x20/0x20 [ 495.956094][T13385] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 495.962073][T13385] ? __debug_object_init+0xed/0x440 [ 495.967344][T13385] ? memset+0x1e/0x40 [ 495.971365][T13385] ? __hrtimer_init+0x189/0x270 [ 495.976284][T13385] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 495.982092][T13385] hwsim_new_radio_nl+0xab7/0xc90 [ 495.987194][T13385] genl_family_rcv_msg_doit+0x22f/0x350 [ 495.992801][T13385] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 495.999096][T13385] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 496.005064][T13385] ? bpf_lsm_capable+0x5/0x10 [ 496.009796][T13385] ? security_capable+0x85/0xb0 [ 496.014717][T13385] genl_rcv_msg+0x601/0x790 [ 496.019301][T13385] ? genl_bind+0x360/0x360 [ 496.023795][T13385] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 496.030213][T13385] netlink_rcv_skb+0x1ef/0x440 [ 496.035044][T13385] ? genl_bind+0x360/0x360 [ 496.039544][T13385] ? netlink_ack+0x1160/0x1160 [ 496.044391][T13385] ? down_read+0x1a8/0x2d0 [ 496.048876][T13385] genl_rcv+0x24/0x40 [ 496.052917][T13385] netlink_unicast+0x7ad/0x920 [ 496.057762][T13385] netlink_sendmsg+0x8ad/0xbd0 [ 496.062579][T13385] ? netlink_getsockopt+0x550/0x550 [ 496.067803][T13385] ? aa_sock_msg_perm+0x94/0x150 [ 496.072780][T13385] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 496.078104][T13385] ? security_socket_sendmsg+0x7c/0xa0 [ 496.083588][T13385] ? netlink_getsockopt+0x550/0x550 [ 496.088806][T13385] ____sys_sendmsg+0x5ed/0x9a0 [ 496.093600][T13385] ? __sys_sendmsg_sock+0x30/0x30 [ 496.098644][T13385] ? __import_iovec+0x306/0x510 [ 496.103542][T13385] ? import_iovec+0x6f/0xa0 [ 496.108092][T13385] ___sys_sendmsg+0x2a2/0x360 [ 496.112799][T13385] ? __sys_sendmsg+0x2a0/0x2a0 [ 496.117629][T13385] __se_sys_sendmsg+0x1c3/0x2b0 [ 496.122508][T13385] ? ct_nmi_exit+0x145/0x1c0 [ 496.127133][T13385] ? __x64_sys_sendmsg+0x80/0x80 [ 496.132113][T13385] ? lockdep_hardirqs_on+0x94/0x140 [ 496.137349][T13385] do_syscall_64+0x4c/0xa0 [ 496.141810][T13385] ? clear_bhb_loop+0x60/0xb0 [ 496.146525][T13385] ? clear_bhb_loop+0x60/0xb0 [ 496.151263][T13385] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 496.157214][T13385] RIP: 0033:0x7f0e1eb9ce59 [ 496.161661][T13385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.181301][T13385] RSP: 002b:00007f0e1fa41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.189760][T13385] RAX: ffffffffffffffda RBX: 00007f0e1ee16090 RCX: 00007f0e1eb9ce59 [ 496.197808][T13385] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 496.205816][T13385] RBP: 00007f0e1ec32e6f R08: 0000000000000000 R09: 0000000000000000 [ 496.213816][T13385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.221820][T13385] R13: 00007f0e1ee16128 R14: 00007f0e1ee16090 R15: 00007ffdf013ff98 [ 496.229835][T13385] [ 496.243756][T13416] netlink: 'syz.3.2370': attribute type 21 has an invalid length. [ 496.251875][T13416] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 496.783100][T13439] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2377'. [ 496.865166][T13439] netlink: 14719 bytes leftover after parsing attributes in process `syz.2.2377'. [ 497.379150][T13455] netlink: 'syz.2.2381': attribute type 10 has an invalid length. [ 497.867083][T13455] team0: Device wg1 is of different type [ 498.102928][T13474] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2386'. [ 498.117590][T13474] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 498.141250][T13474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 499.108660][T13495] device aaaaaaaaaaaaaaa entered promiscuous mode [ 499.328792][T13509] netlink: 763 bytes leftover after parsing attributes in process `syz.1.2395'. [ 499.341028][T13509] IPv6: NLM_F_CREATE should be specified when creating new route [ 499.828086][T13515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2398'. [ 500.164239][T13527] netlink: 'syz.2.2402': attribute type 10 has an invalid length. [ 501.452511][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.458900][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.280806][T13527] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.331574][T13527] device bridge_slave_1 left promiscuous mode [ 502.338166][T13527] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.365239][T13527] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 502.565515][T13547] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 502.619884][T13547] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 502.692074][T13547] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 502.825752][T13547] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 502.984852][T13550] netlink: 'syz.3.2407': attribute type 29 has an invalid length. [ 503.475011][T13555] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2409'. [ 503.589647][T13555] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2409'. [ 503.815449][T13562] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2409'. [ 505.080428][T13588] netlink: 'syz.2.2415': attribute type 10 has an invalid length. [ 507.023617][T13596] netlink: 'syz.2.2415': attribute type 10 has an invalid length. [ 507.527293][T13599] device syzkaller0 entered promiscuous mode [ 507.571389][T13606] netlink: 'syz.3.2417': attribute type 10 has an invalid length. [ 507.586587][T13614] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2418'. [ 507.640357][T13614] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 509.314089][T13646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2425'. [ 511.656644][T13646] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2425'. [ 511.922539][T13657] netlink: 'syz.2.2429': attribute type 29 has an invalid length. [ 511.936671][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 511.962842][T13657] netlink: 'syz.2.2429': attribute type 29 has an invalid length. [ 511.971329][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2429'. [ 512.934827][T13666] netlink: 'syz.2.2431': attribute type 27 has an invalid length. [ 513.442527][T13688] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 513.510947][T13688] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 513.552753][T13691] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 513.720224][T13688] netlink: 'syz.3.2438': attribute type 29 has an invalid length. [ 514.624169][T13718] netlink: 196 bytes leftover after parsing attributes in process `syz.3.2446'. [ 515.010863][T13728] netlink: 'syz.0.2450': attribute type 29 has an invalid length. [ 515.036758][T13728] netlink: 'syz.0.2450': attribute type 29 has an invalid length. [ 515.056710][T13728] netlink: 'syz.0.2450': attribute type 29 has an invalid length. [ 515.137011][T13732] netlink: 'syz.0.2450': attribute type 29 has an invalid length. [ 517.182238][T13785] netlink: 'syz.2.2464': attribute type 39 has an invalid length. [ 517.486875][T13794] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2466'. [ 517.575922][T13800] netlink: 92148 bytes leftover after parsing attributes in process `syz.2.2470'. [ 517.588083][T13799] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2468'. [ 517.966486][T13813] validate_nla: 2 callbacks suppressed [ 517.966509][T13813] netlink: 'syz.2.2473': attribute type 29 has an invalid length. [ 518.042372][T13813] netlink: 'syz.2.2473': attribute type 29 has an invalid length. [ 518.138815][T13816] netlink: 'syz.2.2473': attribute type 29 has an invalid length. [ 518.530135][T13823] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2476'. [ 518.533740][T13822] netlink: 'syz.2.2473': attribute type 29 has an invalid length. [ 518.641310][T13823] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 518.696781][T13823] CPU: 0 PID: 13823 Comm: syz.4.2476 Not tainted syzkaller #0 [ 518.704340][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 518.714437][T13823] Call Trace: [ 518.717759][T13823] [ 518.720731][T13823] dump_stack_lvl+0x188/0x24e [ 518.725474][T13823] ? show_regs_print_info+0x12/0x12 [ 518.730723][T13823] ? load_image+0x410/0x410 [ 518.735307][T13823] sysfs_warn_dup+0x8a/0xa0 [ 518.739872][T13823] sysfs_do_create_link_sd+0xc0/0x110 [ 518.745387][T13823] device_add+0x83b/0x1050 [ 518.749858][T13823] wiphy_register+0x1d8b/0x2aa0 [ 518.754794][T13823] ? cfg80211_event_work+0x40/0x40 [ 518.759961][T13823] ? minstrel_ht_alloc+0x894/0xa20 [ 518.765135][T13823] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 518.771269][T13823] ieee80211_register_hw+0x2d48/0x39f0 [ 518.776811][T13823] ? ieee80211_register_hw+0xed1/0x39f0 [ 518.782417][T13823] ? ieee80211_register_hw+0xed1/0x39f0 [ 518.788029][T13823] ? ieee80211_tasklet_handler+0x20/0x20 [ 518.793711][T13823] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 518.799672][T13823] ? __debug_object_init+0xed/0x440 [ 518.804922][T13823] ? memset+0x1e/0x40 [ 518.808947][T13823] ? __hrtimer_init+0x189/0x270 [ 518.813851][T13823] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 518.819642][T13823] ? memcpy+0x3c/0x60 [ 518.823677][T13823] hwsim_new_radio_nl+0xab7/0xc90 [ 518.828774][T13823] genl_family_rcv_msg_doit+0x22f/0x350 [ 518.834382][T13823] ? end_current_label_crit_section+0x170/0x170 [ 518.840774][T13823] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 518.846741][T13823] ? bpf_lsm_capable+0x5/0x10 [ 518.851498][T13823] ? security_capable+0x85/0xb0 [ 518.856407][T13823] genl_rcv_msg+0x601/0x790 [ 518.860969][T13823] ? lock_chain_count+0x20/0x20 [ 518.865884][T13823] ? genl_bind+0x360/0x360 [ 518.870355][T13823] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 518.876839][T13823] netlink_rcv_skb+0x1ef/0x440 [ 518.881651][T13823] ? genl_bind+0x360/0x360 [ 518.886124][T13823] ? netlink_ack+0x1160/0x1160 [ 518.890989][T13823] ? down_read+0x1a8/0x2d0 [ 518.895459][T13823] genl_rcv+0x24/0x40 [ 518.899491][T13823] netlink_unicast+0x7ad/0x920 [ 518.904316][T13823] netlink_sendmsg+0x8ad/0xbd0 [ 518.909144][T13823] ? netlink_getsockopt+0x550/0x550 [ 518.914400][T13823] ? aa_sock_msg_perm+0x94/0x150 [ 518.919440][T13823] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 518.924963][T13823] ? security_socket_sendmsg+0x7c/0xa0 [ 518.930476][T13823] ? netlink_getsockopt+0x550/0x550 [ 518.935747][T13823] ____sys_sendmsg+0x5ed/0x9a0 [ 518.940595][T13823] ? __sys_sendmsg_sock+0x30/0x30 [ 518.945664][T13823] ? __import_iovec+0x306/0x510 [ 518.950616][T13823] ? import_iovec+0x6f/0xa0 [ 518.955177][T13823] ___sys_sendmsg+0x2a2/0x360 [ 518.959910][T13823] ? __sys_sendmsg+0x2a0/0x2a0 [ 518.964788][T13823] __se_sys_sendmsg+0x1c3/0x2b0 [ 518.969747][T13823] ? __x64_sys_sendmsg+0x80/0x80 [ 518.974757][T13823] ? lockdep_hardirqs_on+0x94/0x140 [ 518.980020][T13823] do_syscall_64+0x4c/0xa0 [ 518.984530][T13823] ? clear_bhb_loop+0x60/0xb0 [ 518.989259][T13823] ? clear_bhb_loop+0x60/0xb0 [ 518.993994][T13823] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 518.999959][T13823] RIP: 0033:0x7f67a759ce59 [ 519.004438][T13823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.024140][T13823] RSP: 002b:00007f67a84d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.032615][T13823] RAX: ffffffffffffffda RBX: 00007f67a7816180 RCX: 00007f67a759ce59 [ 519.040905][T13823] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 519.048933][T13823] RBP: 00007f67a7632e6f R08: 0000000000000000 R09: 0000000000000000 [ 519.056956][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.064991][T13823] R13: 00007f67a7816218 R14: 00007f67a7816180 R15: 00007ffc3061e618 [ 519.073042][T13823] [ 520.622461][T13840] netlink: 'syz.4.2481': attribute type 2 has an invalid length. [ 520.637214][T13840] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2481'. [ 521.996920][T13846] can: request_module (can-proto-0) failed. [ 522.071174][T13850] netlink: 13695 bytes leftover after parsing attributes in process `syz.2.2482'. [ 522.101463][T13853] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2484'. [ 522.771609][T13876] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 522.829403][T13866] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2488'. [ 522.856772][T13876] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 522.981535][T13879] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 523.099193][T13881] netlink: 'syz.3.2489': attribute type 29 has an invalid length. [ 524.452440][T13918] netlink: 'syz.3.2502': attribute type 3 has an invalid length. [ 524.471983][T13916] device syzkaller0 entered promiscuous mode [ 524.483710][T13918] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2502'. [ 525.166608][T13921] netlink: 130181 bytes leftover after parsing attributes in process `syz.2.2503'. [ 528.675969][T13930] netlink: 'syz.0.2504': attribute type 17 has an invalid length. [ 528.684027][T13930] netlink: 'syz.0.2504': attribute type 16 has an invalid length. [ 528.692642][T13930] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2504'. [ 528.717425][T13949] netlink: 'syz.2.2511': attribute type 5 has an invalid length. [ 529.110070][T13960] netlink: 'syz.3.2515': attribute type 3 has an invalid length. [ 529.118043][T13960] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2515'. [ 529.846672][T13972] netlink: 'syz.2.2512': attribute type 10 has an invalid length. [ 529.893794][T13972] device netdevsim0 entered promiscuous mode [ 529.921800][T13973] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2516'. [ 530.170508][T13980] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2518'. [ 530.266840][T13986] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 530.297986][T13986] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 530.333146][T13985] netlink: 'syz.4.2520': attribute type 27 has an invalid length. [ 531.068163][T14013] netlink: 'syz.4.2524': attribute type 10 has an invalid length. [ 532.230846][T14030] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2531'. [ 532.252959][T14034] sock: sock_set_timeout: `syz.2.2532' (pid 14034) tries to set negative timeout [ 532.365650][T14034] netlink: 'syz.2.2532': attribute type 13 has an invalid length. [ 532.406373][T14034] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2532'. [ 532.490530][T14039] netlink: 'syz.2.2532': attribute type 13 has an invalid length. [ 532.527679][T14039] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2532'. [ 532.582905][T14042] netlink: 'syz.2.2532': attribute type 10 has an invalid length. [ 532.625283][T14042] device netdevsim0 left promiscuous mode [ 532.681104][T14042] team0: Port device netdevsim0 added [ 534.137227][T14087] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 534.191669][T14089] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.2544'. [ 534.223266][T14089] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 536.851850][T14120] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.2551'. [ 537.491668][T14141] netlink: 'syz.1.2558': attribute type 6 has an invalid length. [ 538.576850][T14170] sock: sock_timestamping_bind_phc: sock not bind to device [ 541.093476][T14201] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2574'. [ 541.272731][T14216] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2576'. [ 541.309177][T14216] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 541.553838][T14234] netlink: 'syz.3.2582': attribute type 7 has an invalid length. [ 541.562459][T14234] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.2582'. [ 541.717650][T14236] device syzkaller0 entered promiscuous mode [ 541.873869][T14241] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.2584'. [ 541.899464][T14241] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 542.019666][T14247] netlink: 'syz.3.2586': attribute type 3 has an invalid length. [ 542.098262][T14247] netlink: 'syz.3.2586': attribute type 3 has an invalid length. [ 547.137517][T14255] netlink: 'syz.2.2588': attribute type 19 has an invalid length. [ 547.145526][T14255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2588'. [ 547.154674][T14256] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2588'. [ 547.165568][T14257] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2588'. [ 547.374281][T14282] netlink: 'syz.3.2595': attribute type 2 has an invalid length. [ 547.425257][T14282] netlink: 'syz.3.2595': attribute type 4 has an invalid length. [ 547.491375][T14282] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2595'. [ 548.569554][T14319] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2604'. [ 549.267646][T14338] netlink: 'syz.4.2610': attribute type 29 has an invalid length. [ 549.277879][T14338] netlink: 'syz.4.2610': attribute type 29 has an invalid length. [ 549.376546][ T4279] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 549.782239][ T4279] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 550.000302][T14352] tap0: tun_chr_ioctl cmd 1074025677 [ 550.029636][T14352] tap0: linktype set to 774 [ 550.038399][T14351] delete_channel: no stack [ 550.222956][T14371] netlink: 'syz.0.2620': attribute type 11 has an invalid length. [ 550.262543][ T4279] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 551.739021][T14379] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2621'. [ 552.382747][T14426] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2632'. [ 552.714544][T14429] netlink: 'syz.3.2633': attribute type 7 has an invalid length. [ 552.987332][T14446] netlink: 'syz.1.2636': attribute type 21 has an invalid length. [ 553.010142][T14446] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2636'. [ 553.083015][T14446] netlink: 'syz.1.2636': attribute type 22 has an invalid length. [ 553.196421][T14449] netlink: 'syz.4.2637': attribute type 2 has an invalid length. [ 553.235487][T14449] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2637'. [ 553.461456][T14453] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.2640'. [ 553.877878][T14468] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2644'. [ 554.766046][T14483] netlink: 'syz.3.2648': attribute type 29 has an invalid length. [ 554.798733][T14483] netlink: 'syz.3.2648': attribute type 29 has an invalid length. [ 554.820521][T14485] netlink: 'syz.3.2648': attribute type 29 has an invalid length. [ 554.843669][T14489] netlink: 'syz.3.2648': attribute type 29 has an invalid length. [ 556.774252][T14511] sock: sock_timestamping_bind_phc: sock not bind to device [ 556.967930][T14515] netlink: 'syz.0.2659': attribute type 2 has an invalid length. [ 557.004217][T14515] netlink: 'syz.0.2659': attribute type 8 has an invalid length. [ 557.028627][T14515] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.2659'. [ 558.898827][T14540] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 558.962688][T14540] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 559.003855][T14548] netlink: 'syz.2.2665': attribute type 5 has an invalid length. [ 559.486691][T14565] sock: sock_timestamping_bind_phc: sock not bind to device [ 559.672150][T14577] netlink: 'syz.3.2673': attribute type 21 has an invalid length. [ 559.861941][T14585] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2676'. [ 560.681345][T14601] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 560.757139][T14601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.972118][T14612] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 560.991737][T14612] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2683'. [ 561.009504][T14612] netlink: 'syz.3.2683': attribute type 10 has an invalid length. [ 561.521496][T14621] netlink: 'syz.0.2685': attribute type 1 has an invalid length. [ 561.530827][T14621] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2685'. [ 561.580610][T14625] netlink: 'syz.2.2687': attribute type 2 has an invalid length. [ 561.588427][T14625] netlink: 'syz.2.2687': attribute type 1 has an invalid length. [ 561.609278][T14625] netlink: 'syz.2.2687': attribute type 2 has an invalid length. [ 561.617096][T14625] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.2687'. [ 562.474301][T14642] sock: sock_timestamping_bind_phc: sock not bind to device [ 562.910723][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.917287][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.424378][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2694'. [ 563.690866][ T4279] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 563.793620][T14678] Ÿë: port 1(gretap0) entered blocking state [ 563.820653][T14678] Ÿë: port 1(gretap0) entered disabled state [ 563.841511][T14678] device gretap0 entered promiscuous mode [ 563.864579][T14671] Ÿë: port 2(veth0_to_team) entered blocking state [ 563.877121][T14671] Ÿë: port 2(veth0_to_team) entered disabled state [ 563.904089][T14671] device veth0_to_team entered promiscuous mode [ 564.126862][T14687] netlink: 'syz.0.2702': attribute type 3 has an invalid length. [ 564.145344][T14687] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2702'. [ 564.192574][T14686] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2703'. [ 564.207136][T14683] sock: sock_timestamping_bind_phc: sock not bind to device [ 564.584776][T14705] netlink: 'syz.1.2708': attribute type 21 has an invalid length. [ 564.606355][T14705] netlink: 16166 bytes leftover after parsing attributes in process `syz.1.2708'. [ 565.538277][T14716] device syzkaller0 entered promiscuous mode [ 565.876795][T14741] sock: sock_timestamping_bind_phc: sock not bind to device [ 567.883347][T14757] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2721'. [ 568.246843][T14760] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2723'. [ 568.270549][T14760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 568.338112][T14776] netlink: 'syz.4.2727': attribute type 3 has an invalid length. [ 568.346044][T14776] netlink: 16066 bytes leftover after parsing attributes in process `syz.4.2727'. [ 568.526340][T14788] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2730'. [ 568.612325][T14790] Ÿë: port 1(gretap0) entered blocking state [ 568.620118][T14790] Ÿë: port 1(gretap0) entered disabled state [ 568.642401][T14790] device gretap0 entered promiscuous mode [ 568.689253][T14795] Ÿë: port 2(veth0_to_team) entered blocking state [ 568.703610][T14795] Ÿë: port 2(veth0_to_team) entered disabled state [ 568.724138][T14795] device veth0_to_team entered promiscuous mode [ 568.737446][T14794] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2733'. [ 568.828387][T14801] netlink: 'syz.1.2735': attribute type 21 has an invalid length. [ 568.849440][T14797] sock: sock_timestamping_bind_phc: sock not bind to device [ 571.106810][T14837] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.615121][T14869] netlink: 'syz.4.2749': attribute type 10 has an invalid length. [ 571.630090][T14869] team0: Device ipvlan1 failed to register rx_handler [ 571.813834][T14871] netlink: 'syz.0.2755': attribute type 10 has an invalid length. [ 572.646769][T14890] -1: renamed from syzkaller0 [ 572.917490][T14895] Ÿë: port 2(veth0_to_team) entered blocking state [ 572.951594][T14895] Ÿë: port 2(veth0_to_team) entered disabled state [ 572.975853][T14895] device veth0_to_team entered promiscuous mode [ 573.919701][T14929] netlink: 'syz.4.2771': attribute type 7 has an invalid length. [ 574.174353][T14939] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2776'. [ 574.242447][T14939] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.176358][T14968] device syzkaller0 entered promiscuous mode [ 576.176142][T14997] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.2793'. [ 576.545003][T15019] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2796'. [ 576.728301][T15019] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 576.756454][T15019] CPU: 1 PID: 15019 Comm: syz.4.2796 Not tainted syzkaller #0 [ 576.764009][T15019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 576.774125][T15019] Call Trace: [ 576.777439][T15019] [ 576.780408][T15019] dump_stack_lvl+0x188/0x24e [ 576.785143][T15019] ? show_regs_print_info+0x12/0x12 [ 576.790394][T15019] ? load_image+0x410/0x410 [ 576.794971][T15019] sysfs_warn_dup+0x8a/0xa0 [ 576.799533][T15019] sysfs_do_create_link_sd+0xc0/0x110 [ 576.804970][T15019] device_add+0x83b/0x1050 [ 576.809446][T15019] wiphy_register+0x1d8b/0x2aa0 [ 576.814382][T15019] ? cfg80211_event_work+0x40/0x40 [ 576.819552][T15019] ? minstrel_ht_alloc+0x894/0xa20 [ 576.824900][T15019] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 576.831040][T15019] ieee80211_register_hw+0x2d48/0x39f0 [ 576.836572][T15019] ? ieee80211_register_hw+0xed1/0x39f0 [ 576.842176][T15019] ? ieee80211_register_hw+0xed1/0x39f0 [ 576.847789][T15019] ? ieee80211_tasklet_handler+0x20/0x20 [ 576.853473][T15019] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 576.859431][T15019] ? __debug_object_init+0xed/0x440 [ 576.864702][T15019] ? memset+0x1e/0x40 [ 576.868716][T15019] ? __hrtimer_init+0x189/0x270 [ 576.873602][T15019] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 576.879366][T15019] ? memcpy+0x3c/0x60 [ 576.883380][T15019] hwsim_new_radio_nl+0xab7/0xc90 [ 576.888445][T15019] genl_family_rcv_msg_doit+0x22f/0x350 [ 576.894019][T15019] ? end_current_label_crit_section+0x170/0x170 [ 576.900295][T15019] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 576.906249][T15019] ? bpf_lsm_capable+0x5/0x10 [ 576.910973][T15019] ? security_capable+0x85/0xb0 [ 576.915874][T15019] genl_rcv_msg+0x601/0x790 [ 576.920439][T15019] ? lock_chain_count+0x20/0x20 [ 576.925359][T15019] ? genl_bind+0x360/0x360 [ 576.929832][T15019] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 576.936207][T15019] netlink_rcv_skb+0x1ef/0x440 [ 576.941011][T15019] ? genl_bind+0x360/0x360 [ 576.945467][T15019] ? netlink_ack+0x1160/0x1160 [ 576.950283][T15019] ? down_read+0x1a8/0x2d0 [ 576.954757][T15019] genl_rcv+0x24/0x40 [ 576.958792][T15019] netlink_unicast+0x7ad/0x920 [ 576.963603][T15019] netlink_sendmsg+0x8ad/0xbd0 [ 576.968409][T15019] ? netlink_getsockopt+0x550/0x550 [ 576.973646][T15019] ? aa_sock_msg_perm+0x94/0x150 [ 576.978652][T15019] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 576.983978][T15019] ? security_socket_sendmsg+0x7c/0xa0 [ 576.989464][T15019] ? netlink_getsockopt+0x550/0x550 [ 576.994693][T15019] ____sys_sendmsg+0x5ed/0x9a0 [ 576.999493][T15019] ? __sys_sendmsg_sock+0x30/0x30 [ 577.004546][T15019] ? __import_iovec+0x306/0x510 [ 577.009429][T15019] ? import_iovec+0x6f/0xa0 [ 577.013957][T15019] ___sys_sendmsg+0x2a2/0x360 [ 577.018666][T15019] ? __lock_acquire+0x7bd0/0x7bd0 [ 577.023733][T15019] ? __sys_sendmsg+0x2a0/0x2a0 [ 577.028562][T15019] __se_sys_sendmsg+0x1c3/0x2b0 [ 577.033445][T15019] ? ct_nmi_exit+0x145/0x1c0 [ 577.038157][T15019] ? __x64_sys_sendmsg+0x80/0x80 [ 577.043138][T15019] ? lockdep_hardirqs_on+0x94/0x140 [ 577.048378][T15019] do_syscall_64+0x4c/0xa0 [ 577.052826][T15019] ? clear_bhb_loop+0x60/0xb0 [ 577.057525][T15019] ? clear_bhb_loop+0x60/0xb0 [ 577.062226][T15019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 577.068161][T15019] RIP: 0033:0x7f67a759ce59 [ 577.072602][T15019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.092236][T15019] RSP: 002b:00007f67a84d1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 577.100674][T15019] RAX: ffffffffffffffda RBX: 00007f67a7816180 RCX: 00007f67a759ce59 [ 577.108693][T15019] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 577.116704][T15019] RBP: 00007f67a7632e6f R08: 0000000000000000 R09: 0000000000000000 [ 577.124709][T15019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.132711][T15019] R13: 00007f67a7816218 R14: 00007f67a7816180 R15: 00007ffc3061e618 [ 577.140728][T15019] [ 580.271190][ T4279] Bluetooth: hci3: unexpected event 0x0b length: 15 > 11 [ 580.355854][T15078] netlink: 'syz.0.2812': attribute type 3 has an invalid length. [ 580.381659][T15078] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2812'. [ 580.546921][T15083] netlink: 'syz.3.2814': attribute type 21 has an invalid length. [ 580.598472][T15083] netlink: 'syz.3.2814': attribute type 5 has an invalid length. [ 580.773232][T15090] device syzkaller0 entered promiscuous mode [ 581.125634][T15100] delete_channel: no stack [ 581.130581][T15100] delete_channel: no stack [ 581.180396][T15106] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.2819'. [ 581.200378][T15106] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 584.471171][T15134] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.2823'. [ 584.566504][T15148] netlink: 'syz.4.2828': attribute type 1 has an invalid length. [ 584.610657][T15148] netlink: 'syz.4.2828': attribute type 2 has an invalid length. [ 584.644683][T15148] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2828'. [ 584.826572][T15143] device syzkaller0 entered promiscuous mode [ 585.041239][T15138] delete_channel: no stack [ 587.361676][T15134] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 587.388162][T15162] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2834'. [ 587.404147][T15165] netlink: 'syz.3.2834': attribute type 1 has an invalid length. [ 588.887075][T15210] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.2846'. [ 590.314180][T15219] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2849'. [ 590.400940][T15225] netlink: 'syz.2.2849': attribute type 1 has an invalid length. [ 590.864816][T15241] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2852'. [ 590.950502][T15241] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 590.977212][T15241] CPU: 0 PID: 15241 Comm: syz.0.2852 Not tainted syzkaller #0 [ 590.984744][T15241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 590.994839][T15241] Call Trace: [ 590.998157][T15241] [ 591.001137][T15241] dump_stack_lvl+0x188/0x24e [ 591.005901][T15241] ? show_regs_print_info+0x12/0x12 [ 591.011153][T15241] ? load_image+0x410/0x410 [ 591.015731][T15241] sysfs_warn_dup+0x8a/0xa0 [ 591.020288][T15241] sysfs_do_create_link_sd+0xc0/0x110 [ 591.025720][T15241] device_add+0x83b/0x1050 [ 591.030193][T15241] wiphy_register+0x1d8b/0x2aa0 [ 591.035152][T15241] ? cfg80211_event_work+0x40/0x40 [ 591.040321][T15241] ? minstrel_ht_alloc+0x894/0xa20 [ 591.045493][T15241] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 591.051634][T15241] ieee80211_register_hw+0x2d48/0x39f0 [ 591.057169][T15241] ? ieee80211_register_hw+0xed1/0x39f0 [ 591.062775][T15241] ? ieee80211_register_hw+0xed1/0x39f0 [ 591.068385][T15241] ? ieee80211_tasklet_handler+0x20/0x20 [ 591.074078][T15241] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 591.080042][T15241] ? __debug_object_init+0xed/0x440 [ 591.085320][T15241] ? memset+0x1e/0x40 [ 591.089374][T15241] ? __hrtimer_init+0x189/0x270 [ 591.094281][T15241] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 591.100066][T15241] ? memcpy+0x3c/0x60 [ 591.104101][T15241] hwsim_new_radio_nl+0xab7/0xc90 [ 591.109195][T15241] genl_family_rcv_msg_doit+0x22f/0x350 [ 591.114805][T15241] ? end_current_label_crit_section+0x170/0x170 [ 591.121105][T15241] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 591.127065][T15241] ? bpf_lsm_capable+0x5/0x10 [ 591.131799][T15241] ? security_capable+0x85/0xb0 [ 591.136715][T15241] genl_rcv_msg+0x601/0x790 [ 591.141289][T15241] ? genl_bind+0x360/0x360 [ 591.145755][T15241] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 591.152156][T15241] netlink_rcv_skb+0x1ef/0x440 [ 591.156972][T15241] ? genl_bind+0x360/0x360 [ 591.161445][T15241] ? netlink_ack+0x1160/0x1160 [ 591.166274][T15241] ? down_read+0x1a8/0x2d0 [ 591.170756][T15241] genl_rcv+0x24/0x40 [ 591.174793][T15241] netlink_unicast+0x7ad/0x920 [ 591.179625][T15241] netlink_sendmsg+0x8ad/0xbd0 [ 591.184476][T15241] ? netlink_getsockopt+0x550/0x550 [ 591.189735][T15241] ? aa_sock_msg_perm+0x94/0x150 [ 591.194727][T15241] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 591.200078][T15241] ? security_socket_sendmsg+0x7c/0xa0 [ 591.205585][T15241] ? netlink_getsockopt+0x550/0x550 [ 591.210833][T15241] ____sys_sendmsg+0x5ed/0x9a0 [ 591.215659][T15241] ? __sys_sendmsg_sock+0x30/0x30 [ 591.220735][T15241] ? __import_iovec+0x306/0x510 [ 591.225641][T15241] ? import_iovec+0x6f/0xa0 [ 591.230213][T15241] ___sys_sendmsg+0x2a2/0x360 [ 591.234941][T15241] ? __lock_acquire+0x7bd0/0x7bd0 [ 591.240019][T15241] ? __sys_sendmsg+0x2a0/0x2a0 [ 591.244884][T15241] __se_sys_sendmsg+0x1c3/0x2b0 [ 591.249798][T15241] ? ct_nmi_exit+0x145/0x1c0 [ 591.254459][T15241] ? __x64_sys_sendmsg+0x80/0x80 [ 591.259477][T15241] ? lockdep_hardirqs_on+0x94/0x140 [ 591.264749][T15241] do_syscall_64+0x4c/0xa0 [ 591.269215][T15241] ? clear_bhb_loop+0x60/0xb0 [ 591.273948][T15241] ? clear_bhb_loop+0x60/0xb0 [ 591.278678][T15241] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 591.284643][T15241] RIP: 0033:0x7f0e1eb9ce59 [ 591.289108][T15241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.308757][T15241] RSP: 002b:00007f0e1fa41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 591.317203][T15241] RAX: ffffffffffffffda RBX: 00007f0e1ee16090 RCX: 00007f0e1eb9ce59 [ 591.325203][T15241] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 591.333200][T15241] RBP: 00007f0e1ec32e6f R08: 0000000000000000 R09: 0000000000000000 [ 591.341197][T15241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.349194][T15241] R13: 00007f0e1ee16128 R14: 00007f0e1ee16090 R15: 00007ffdf013ff98 [ 591.357203][T15241] [ 591.586346][T15268] netlink: 'syz.3.2860': attribute type 21 has an invalid length. [ 591.620377][T15268] IPv6: NLM_F_CREATE should be specified when creating new route [ 591.628247][T15268] IPv6: Can't replace route, no match found [ 591.657285][T15269] netlink: 'syz.4.2861': attribute type 10 has an invalid length. [ 591.678327][T15269] netlink: 65015 bytes leftover after parsing attributes in process `syz.4.2861'. [ 592.118028][T15293] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2866'. [ 592.148712][T15294] netlink: 'syz.4.2867': attribute type 21 has an invalid length. [ 592.356535][T15293] netlink: 'syz.1.2866': attribute type 1 has an invalid length. [ 592.525896][T15315] __sock_release: fasync list not empty! [ 593.632637][T15345] netlink: 'syz.4.2883': attribute type 13 has an invalid length. [ 593.646236][T15345] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.2883'. [ 593.663053][T15343] netlink: 'syz.0.2882': attribute type 21 has an invalid length. [ 593.683248][T15343] netlink: 'syz.0.2882': attribute type 5 has an invalid length. [ 594.079283][T15343] device syzkaller0 entered promiscuous mode [ 596.669651][T15374] netlink: 'syz.3.2891': attribute type 22 has an invalid length. [ 596.677924][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 596.691671][T15375] netlink: 'syz.3.2891': attribute type 22 has an invalid length. [ 596.701755][T15375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2891'. [ 596.737291][T15387] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.2894'. [ 597.133660][T15416] netlink: 'syz.0.2902': attribute type 9 has an invalid length. [ 597.149027][T15416] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2902'. [ 597.327782][T15425] netlink: 'syz.4.2904': attribute type 29 has an invalid length. [ 597.348348][T15425] netlink: 'syz.4.2904': attribute type 29 has an invalid length. [ 600.626017][T15460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2914'. [ 601.205854][T15497] netlink: 'syz.1.2923': attribute type 7 has an invalid length. [ 601.481062][T15504] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2925'. [ 601.505490][T15504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 601.620959][T15504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.164865][T15526] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2934'. [ 602.621728][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 602.632713][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 602.641239][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 602.660158][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 602.667977][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 602.675806][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 603.713644][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.753985][T15547] netlink: 'syz.3.2940': attribute type 10 has an invalid length. [ 603.766868][T15547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2940'. [ 603.856247][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.081534][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.262927][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.319834][T15564] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 604.589946][T15564] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.666827][T15536] chnl_net:caif_netlink_parms(): no params data found [ 604.739425][ T4278] Bluetooth: hci0: command 0x0409 tx timeout [ 605.225562][T15536] bridge0: port 1(bridge_slave_0) entered blocking state [ 605.232898][T15536] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.242403][T15536] device bridge_slave_0 entered promiscuous mode [ 605.254695][T15536] bridge0: port 2(bridge_slave_1) entered blocking state [ 605.272253][T15536] bridge0: port 2(bridge_slave_1) entered disabled state [ 605.310391][T15536] device bridge_slave_1 entered promiscuous mode [ 605.322880][ T9] device 0 left promiscuous mode [ 605.447724][T15536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 605.513804][ T9] tipc: Left network mode [ 605.523333][T15536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 605.779930][ T4278] Bluetooth: hci3: ISO packet for unknown connection handle 2366 [ 605.845801][T15536] team0: Port device team_slave_0 added [ 605.856451][T15536] team0: Port device team_slave_1 added [ 606.057304][T15536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 606.089008][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.215111][T15536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 606.348608][T15536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 606.367075][T15536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 606.530427][T15536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 606.809275][ T4278] Bluetooth: hci0: command 0x041b tx timeout [ 606.955015][T15536] device hsr_slave_0 entered promiscuous mode [ 606.974065][T15536] device hsr_slave_1 entered promiscuous mode [ 607.015930][T15536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.032273][T15536] Cannot create hsr debugfs directory [ 607.743243][T15647] netlink: 'syz.4.2964': attribute type 21 has an invalid length. [ 607.836906][T15647] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2964'. [ 607.914032][T15647] bond0: (slave bond_slave_0): Releasing backup interface [ 607.951062][T15647] device bond_slave_0 left promiscuous mode [ 608.031996][T15647] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 608.497542][T15670] netlink: 'syz.3.2968': attribute type 1 has an invalid length. [ 608.546859][T15670] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2968'. [ 608.912482][ T4278] Bluetooth: hci0: command 0x040f tx timeout [ 610.046091][T15657] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2966'. [ 610.112793][T15662] device syzkaller0 entered promiscuous mode [ 610.971172][ T4278] Bluetooth: hci0: command 0x0419 tx timeout [ 612.386359][T15536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 612.564934][ T9] team0: Port device wlan1 removed [ 612.594274][T15536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 612.679828][T15536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 612.758363][T15718] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.2978'. [ 612.953564][T15720] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2978'. [ 613.062174][T15536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 613.376722][ T9] device vlan0 left promiscuous mode [ 613.393344][ T9] À: port 1(vlan0) entered disabled state [ 613.445353][ T9] device hsr_slave_0 left promiscuous mode [ 613.466713][ T9] device hsr_slave_1 left promiscuous mode [ 613.554302][ T9] device veth1_macvtap left promiscuous mode [ 613.569189][ T9] device veth0_macvtap left promiscuous mode [ 613.579749][ T9] device veth1_vlan left promiscuous mode [ 613.595958][ T9] device veth0_vlan left promiscuous mode [ 614.281593][ T9] device team_slave_1 left promiscuous mode [ 614.288493][ T9] team0 (unregistering): Port device team_slave_1 removed [ 614.327317][ T9] device team_slave_0 left promiscuous mode [ 614.335236][ T9] team0 (unregistering): Port device team_slave_0 removed [ 614.833866][T15536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.877146][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 614.899977][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 614.959034][T15536] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.001039][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 615.011201][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 615.037298][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.044529][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.087836][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 615.106273][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 615.131199][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 615.160504][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.167751][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.242306][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 615.313574][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 615.333052][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 615.350959][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 615.419906][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 615.458106][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 615.518508][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 615.538214][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 615.587354][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 615.617174][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 615.660136][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 615.703952][T15755] netlink: 'syz.1.2983': attribute type 2 has an invalid length. [ 615.725210][T15755] netlink: 'syz.1.2983': attribute type 8 has an invalid length. [ 615.744119][T15755] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2983'. [ 615.786482][T15536] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 618.835629][T15536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 618.846556][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 618.867927][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 618.972032][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 618.991623][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 619.051605][T15018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 619.081266][T15018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 619.105760][T15536] device veth0_vlan entered promiscuous mode [ 619.131977][T15018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 619.158560][T15018] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 619.177790][T15536] device veth1_vlan entered promiscuous mode [ 619.305710][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 619.314539][T15826] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.2995'. [ 619.333145][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 619.358443][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 619.388389][ T6593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 619.418005][T15536] device veth0_macvtap entered promiscuous mode [ 619.452727][T15536] device veth1_macvtap entered promiscuous mode [ 619.563505][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.625878][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.659606][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.679860][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.695111][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 619.706586][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.721235][T15536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 619.743851][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 619.773132][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 619.804578][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 619.824331][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 619.870096][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.889485][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.919748][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.930893][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.948980][T15536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 619.961615][T15536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 619.993862][T15536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 620.036811][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 620.045750][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 620.078576][T15536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.087926][T15536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.103757][T15536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.112715][T15536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.327340][ T6593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.375886][ T6593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.492385][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 620.542503][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.550887][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.586763][ T59] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 621.584389][T15873] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3006'. [ 621.624704][T15873] netlink: 56815 bytes leftover after parsing attributes in process `syz.4.3006'. [ 622.924723][T15913] : port 1(ip6gretap0) entered blocking state [ 622.969045][T15913] : port 1(ip6gretap0) entered disabled state [ 623.006397][T15913] device ip6gretap0 entered promiscuous mode [ 623.221008][ T4278] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 623.231107][ T4278] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 623.261112][ T4278] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 623.278063][ T4278] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 623.285831][ T4278] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 623.293604][ T4278] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 623.417200][T15924] netlink: 'syz.2.3020': attribute type 10 has an invalid length. [ 624.126000][T15925] netlink: 'syz.2.3020': attribute type 21 has an invalid length. [ 624.150415][T15925] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3020'. [ 624.253900][ T4641] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.331251][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.337719][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.441043][ T4641] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.640192][ T4641] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.699867][T15916] chnl_net:caif_netlink_parms(): no params data found [ 624.834827][ T4641] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.005878][T15916] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.076663][T15916] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.115054][T15916] device bridge_slave_0 entered promiscuous mode [ 625.144412][T15916] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.165138][T15916] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.187390][T15916] device bridge_slave_1 entered promiscuous mode [ 625.370432][T15916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.379864][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 625.451202][T15916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.844920][T15916] team0: Port device team_slave_0 added [ 625.854901][T15916] team0: Port device team_slave_1 added [ 625.934265][T15981] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.975088][T15981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 626.030309][T15981] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 626.058272][T15981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.208180][T15983] netlink: 'syz.3.3035': attribute type 11 has an invalid length. [ 626.330880][ T4641] device 0 left promiscuous mode [ 626.383210][T15916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.404011][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.444405][T15916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.475570][ T4641] device 1 left promiscuous mode [ 626.507670][T15916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.534499][T15916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.614058][T15916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.662652][ T4641] device 2 left promiscuous mode [ 626.754017][ T4641] device 3 left promiscuous mode [ 626.790974][T15916] device hsr_slave_0 entered promiscuous mode [ 626.809452][T15916] device hsr_slave_1 entered promiscuous mode [ 626.876944][T15994] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.3037'. [ 627.449030][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 627.586480][T16013] netlink: 'syz.3.3041': attribute type 28 has an invalid length. [ 627.623871][T16013] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3041'. [ 628.221655][ T4641] device gretap0 left promiscuous mode [ 628.254062][ T4641] Ÿë: port 1(gretap0) entered disabled state [ 629.539424][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 630.068740][T15916] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.130480][T15916] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.181706][T15916] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 630.210612][T16113] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.3051'. [ 630.341281][ T4641] device wlan1 left promiscuous mode [ 630.362466][ T4641] team0: Port device wlan1 removed [ 630.388163][T15916] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.406241][T16118] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3053'. [ 630.439594][T16125] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3053'. [ 630.473748][T16125] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 630.536242][T16127] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3053'. [ 630.559105][T16127] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 630.618841][T16127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 630.894487][ T4641] device veth0_to_team left promiscuous mode [ 630.915482][ T4641] Ÿë: port 2(veth0_to_team) entered disabled state [ 630.952905][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 630.977383][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.048636][ T4641] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 631.076108][ T4641] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 631.103989][ T4641] bridge0: port 6(bond0) entered disabled state [ 631.128637][ T4641] device batadv0 left promiscuous mode [ 631.141438][ T4641] bridge0: port 5(batadv0) entered disabled state [ 631.176766][ T4641] bridge0: port 4(dummy0) entered disabled state [ 631.186086][ T4641] bridge0: port 3(team0) entered disabled state [ 631.218243][ T4641] device bridge_slave_1 left promiscuous mode [ 631.229783][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.247307][ T4641] device bridge_slave_0 left promiscuous mode [ 631.253954][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.300222][ T4641] device veth1_vlan left promiscuous mode [ 631.609034][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 631.853641][ T4641] device macvlan0 left promiscuous mode [ 631.861365][ T4641] team0 (unregistering): Port device macvlan0 removed [ 632.200794][ T4641] device team_slave_1 left promiscuous mode [ 632.207709][ T4641] team0 (unregistering): Port device team_slave_1 removed [ 632.254357][ T4641] device team_slave_0 left promiscuous mode [ 632.262647][ T4641] team0 (unregistering): Port device team_slave_0 removed [ 632.306637][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 632.316147][ T4641] device bond_slave_1 left promiscuous mode [ 632.633969][ T4641] bond0 (unregistering): Released all slaves [ 632.748947][T16142] netlink: 'syz.1.3057': attribute type 12 has an invalid length. [ 632.757071][T16142] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3057'. [ 632.766798][T16155] netlink: 'syz.3.3060': attribute type 10 has an invalid length. [ 632.779785][T16155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3060'. [ 632.898814][T15916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.923066][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 632.936433][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 632.961573][T15916] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.026424][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.037746][T16168] netlink: 'syz.2.3063': attribute type 27 has an invalid length. [ 633.047841][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.067134][ T6850] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.074390][ T6850] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.094176][T16168] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3063'. [ 633.111479][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.180326][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.228123][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.243916][ T6837] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.251185][ T6837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.309189][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.327920][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.393412][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.427562][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.487314][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.497238][T16185] netlink: 'syz.0.3068': attribute type 3 has an invalid length. [ 633.512756][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.524608][T16185] netlink: 'syz.0.3068': attribute type 8 has an invalid length. [ 633.532113][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.541665][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 633.550497][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 633.579199][T16185] netlink: 197344 bytes leftover after parsing attributes in process `syz.0.3068'. [ 633.613107][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 633.630077][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 633.651234][T15916] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 633.838774][T16195] netlink: 168 bytes leftover after parsing attributes in process `syz.3.3071'. [ 634.420037][T16211] netlink: 'syz.1.3073': attribute type 2 has an invalid length. [ 634.433328][T16211] netlink: 193948 bytes leftover after parsing attributes in process `syz.1.3073'. [ 634.490738][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 634.507876][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 634.541061][T15916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.548345][T16217] netlink: 'syz.0.3076': attribute type 10 has an invalid length. [ 634.563705][T16217] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3076'. [ 634.611210][T16217] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 635.346491][T16239] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3081'. [ 635.539870][T16239] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3081'. [ 635.571612][T16239] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 635.789104][T16242] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3081'. [ 635.798364][T16242] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 635.910026][T16242] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.396636][T16252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 636.582339][T16256] delete_channel: no stack [ 636.612077][T16252] netlink: 'syz.1.3083': attribute type 10 has an invalid length. [ 636.688701][T16252] team0 (unregistering): Port device team_slave_0 removed [ 636.736349][T16252] team0 (unregistering): Port device team_slave_1 removed [ 636.746149][T16252] team0 (unregistering): Port device netdevsim0 removed [ 636.787173][T16259] netlink: 'syz.2.3086': attribute type 10 has an invalid length. [ 636.795819][T16259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 636.828665][T16259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 636.870827][T16259] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 636.905627][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 636.932633][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.983843][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.033485][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.058140][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.077041][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.104016][T15916] device veth0_vlan entered promiscuous mode [ 637.145851][T15916] device veth1_vlan entered promiscuous mode [ 637.194202][T16270] netlink: 'syz.2.3090': attribute type 10 has an invalid length. [ 637.233676][T16270] batman_adv: batadv0: Adding interface: vlan1 [ 637.268014][T16270] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 637.328349][T16270] batman_adv: batadv0: Interface activated: vlan1 [ 637.444046][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.482279][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.535592][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.564824][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.607511][T15916] device veth0_macvtap entered promiscuous mode [ 637.652472][T15916] device veth1_macvtap entered promiscuous mode [ 637.740518][T15916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.784328][T15916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.817564][T15916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.838162][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 637.866224][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.890755][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.914206][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 637.944275][T15916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 637.986829][T15916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.047175][T15916] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.098957][T15916] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.215776][T15916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.294055][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.319053][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.370012][T15916] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.398531][T15916] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.440717][T15916] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.501739][T15916] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.736876][T16299] netlink: 'syz.3.3096': attribute type 2 has an invalid length. [ 638.764418][T16299] __nla_validate_parse: 2 callbacks suppressed [ 638.764435][T16299] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3096'. [ 638.946444][ T6850] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.972581][ T6850] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.034294][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.072237][ T4641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.082106][ T4641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.106351][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 639.388506][T16324] netlink: 'syz.1.3102': attribute type 27 has an invalid length. [ 639.438139][T16324] netlink: 'syz.1.3102': attribute type 4 has an invalid length. [ 639.477586][T16324] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3102'. [ 640.158691][ T6856] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.290782][ T4279] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.300889][ T4279] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.315536][ T4279] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.325970][ T4279] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.339781][ T4279] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 640.349307][ T4279] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.475409][ T6856] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 640.834274][T16349] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.3109'. [ 642.409366][ T4278] Bluetooth: hci3: command 0x0409 tx timeout [ 642.982108][ T6856] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.226883][T16358] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3112'. [ 643.584745][ T6856] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.654044][T16338] chnl_net:caif_netlink_parms(): no params data found [ 644.049796][T16338] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.164629][T16338] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.226619][T16338] device bridge_slave_0 entered promiscuous mode [ 644.320722][T16338] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.378211][T16338] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.446743][T16338] device bridge_slave_1 entered promiscuous mode [ 644.489868][ T4278] Bluetooth: hci3: command 0x041b tx timeout [ 644.777630][T16338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 644.848559][T16338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.900640][ T6856] device 0 left promiscuous mode [ 645.049240][T16338] team0: Port device team_slave_0 added [ 645.108532][T16338] team0: Port device team_slave_1 added [ 645.389746][T16415] netlink: 'syz.0.3123': attribute type 3 has an invalid length. [ 645.468320][T16415] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3123'. [ 645.584212][T16423] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3125'. [ 646.575182][ T4279] Bluetooth: hci3: command 0x040f tx timeout [ 648.254008][ T6856] device ip6gretap0 left promiscuous mode [ 648.263517][ T6856] : port 1(ip6gretap0) entered disabled state [ 648.289761][T16338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 648.303706][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.368983][T16338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 648.390614][T16417] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3122'. [ 648.400889][T16417] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 648.444798][T16417] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 648.724681][ T4279] Bluetooth: hci3: command 0x0419 tx timeout [ 648.756293][T16338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 648.769077][T16338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 648.907454][T16338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.840423][T16338] device hsr_slave_0 entered promiscuous mode [ 649.875114][T16338] device hsr_slave_1 entered promiscuous mode [ 650.124775][T16338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.173043][T16338] Cannot create hsr debugfs directory [ 650.179493][T16460] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3131'. [ 650.262321][T16470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 650.465847][T16470] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 650.570855][T16480] netlink: 'syz.1.3134': attribute type 3 has an invalid length. [ 650.606450][T16480] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.3134'. [ 650.655482][T16471] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 650.706196][T16475] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3133'. [ 650.807977][ T6856] device gretap0 left promiscuous mode [ 650.817229][ T6856] Ÿë: port 1(gretap0) entered disabled state [ 650.882355][T16487] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.3135'. [ 651.952776][T16522] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.3145'. [ 652.038404][T16526] __sock_release: fasync list not empty! [ 652.423614][ T6856] device wlan1 left promiscuous mode [ 652.438082][ T6856] team0: Port device wlan1 removed [ 652.581943][T16543] netlink: 'syz.1.3149': attribute type 3 has an invalid length. [ 652.590100][T16543] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3149'. [ 652.608469][T16533] device syzkaller0 entered promiscuous mode [ 656.102351][T16548] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 656.123991][T16548] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.166320][T16338] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 656.217159][ T6856] device veth0_to_team left promiscuous mode [ 656.224993][ T6856] Ÿë: port 2(veth0_to_team) entered disabled state [ 656.242022][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 656.300639][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 656.321257][ T6856] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 656.328768][ T6856] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 656.448598][ T6856] device veth1_macvtap left promiscuous mode [ 656.463627][ T6856] device veth0_macvtap left promiscuous mode [ 657.065640][ T6856] device geneve1 left promiscuous mode [ 657.080495][ T6856] team0 (unregistering): Port device geneve1 removed [ 657.786912][ T6856] device team_slave_1 left promiscuous mode [ 657.794458][ T6856] team0 (unregistering): Port device team_slave_1 removed [ 657.840636][ T6856] device team_slave_0 left promiscuous mode [ 657.847677][ T6856] team0 (unregistering): Port device team_slave_0 removed [ 658.203140][T16338] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 658.214309][T16338] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 658.232475][T16584] netlink: 'syz.2.3159': attribute type 19 has an invalid length. [ 658.254716][T16584] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.3159'. [ 658.353257][T16338] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 658.714062][T16604] syzkaller0: tun_chr_ioctl cmd 35624 [ 659.010955][T16338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 659.032790][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 659.052245][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 659.081976][T16338] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.144694][T16619] netlink: 'syz.2.3165': attribute type 3 has an invalid length. [ 659.172328][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 659.184187][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 659.238058][T16619] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3165'. [ 659.244127][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.254597][ T6862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.359762][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 659.385761][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 659.417865][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 659.459100][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.466304][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.551165][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 659.560769][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 659.594174][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 659.608269][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 659.640576][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 659.660271][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 659.688669][T16338] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.716994][T16338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.748357][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 659.765519][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 659.792717][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 659.832417][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 659.853165][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 659.884576][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 660.572960][T16649] netlink: 'syz.4.3170': attribute type 49 has an invalid length. [ 660.599566][T16649] netlink: 'syz.4.3170': attribute type 49 has an invalid length. [ 660.667415][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 660.685679][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 660.707546][T16649] netlink: 'syz.4.3170': attribute type 10 has an invalid length. [ 661.453976][T16649] team0 (unregistering): Port device team_slave_0 removed [ 661.486189][T16649] team0 (unregistering): Port device team_slave_1 removed [ 661.514600][T16655] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3171'. [ 661.568768][T16338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 661.680015][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 661.716755][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 661.753778][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 661.766839][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 661.781958][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 661.794562][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 661.812664][T16338] device veth0_vlan entered promiscuous mode [ 661.833691][T16338] device veth1_vlan entered promiscuous mode [ 661.893504][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 661.906341][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 661.935062][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 661.958705][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 661.987299][T16338] device veth0_macvtap entered promiscuous mode [ 662.012408][T16675] netlink: 'syz.1.3176': attribute type 6 has an invalid length. [ 662.021598][T16675] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3176'. [ 662.073412][T16338] device veth1_macvtap entered promiscuous mode [ 662.129823][T16338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 662.159422][T16338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.204329][T16680] netlink: 'syz.4.3178': attribute type 29 has an invalid length. [ 662.216570][T16338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 662.237916][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 662.247463][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 662.273389][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 662.283596][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 662.293458][T16680] netlink: 'syz.4.3178': attribute type 29 has an invalid length. [ 662.340175][T16338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.380629][T16338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.411189][T16338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 662.429073][T16338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 662.446679][T16690] delete_channel: no stack [ 662.452283][T16338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 662.465059][T16688] netlink: 'syz.0.3180': attribute type 10 has an invalid length. [ 662.494532][T16688] netlink: 'syz.0.3180': attribute type 19 has an invalid length. [ 662.514283][T16688] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3180'. [ 662.523912][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 662.536124][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 662.562636][T16338] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.578928][T16338] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.608233][T16338] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.630187][T16338] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.904489][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 662.941218][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 662.956347][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 663.013574][ T6850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 663.026831][ T6850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 663.044081][ T4278] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 663.055419][T16705] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3186'. [ 663.102357][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 663.317643][T16715] validate_nla: 3 callbacks suppressed [ 663.317665][T16715] netlink: 'syz.3.3103': attribute type 3 has an invalid length. [ 663.359253][T16715] netlink: 'syz.3.3103': attribute type 8 has an invalid length. [ 663.403637][T16715] netlink: 197344 bytes leftover after parsing attributes in process `syz.3.3103'. [ 663.799880][T16706] team0 (unregistering): Port device team_slave_0 removed [ 664.016811][T16706] team0 (unregistering): Port device team_slave_1 removed [ 665.425169][T16749] netlink: 'syz.4.3197': attribute type 2 has an invalid length. [ 665.673205][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 665.682775][ T4279] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 665.699588][ T4279] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 665.708231][ T4279] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 665.717189][ T4279] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 665.724704][ T4279] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 665.827406][ T6862] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 665.991077][ T6862] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.168800][ T6862] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.310107][ T6862] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.519315][T16758] chnl_net:caif_netlink_parms(): no params data found [ 666.825442][T16783] netlink: 'syz.2.3204': attribute type 49 has an invalid length. [ 666.837966][ T6862] device 0 left promiscuous mode [ 666.947123][T16783] netlink: 'syz.2.3204': attribute type 49 has an invalid length. [ 666.977083][T16792] netlink: 'syz.2.3204': attribute type 10 has an invalid length. [ 667.048036][T16797] netlink: 'syz.4.3207': attribute type 3 has an invalid length. [ 667.066666][T16797] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.3207'. [ 667.134483][T16792] team0 (unregistering): Port device team_slave_0 removed [ 667.174676][T16792] team0 (unregistering): Port device team_slave_1 removed [ 667.194828][T16792] team0 (unregistering): Port device geneve1 removed [ 667.236855][T16792] team0 (unregistering): Port device netdevsim0 removed [ 667.302710][T16790] netlink: 'syz.4.3207': attribute type 21 has an invalid length. [ 667.321071][T16790] netlink: 'syz.4.3207': attribute type 20 has an invalid length. [ 667.368394][ T6862] device 1 left promiscuous mode [ 667.457872][ T6862] device 2 left promiscuous mode [ 667.484968][T16758] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.509051][T16758] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.536665][T16758] device bridge_slave_0 entered promiscuous mode [ 667.570967][T16758] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.578144][T16758] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.710502][T16758] device bridge_slave_1 entered promiscuous mode [ 667.743182][T16808] netlink: 'syz.2.3209': attribute type 3 has an invalid length. [ 667.758346][ T6862] device 3 left promiscuous mode [ 667.765067][T16808] netlink: 197344 bytes leftover after parsing attributes in process `syz.2.3209'. [ 667.775154][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 667.888988][ T6862] device 4 left promiscuous mode [ 667.932064][T16758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 667.972003][T16758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.094760][ T6862] device 5 left promiscuous mode [ 668.116018][T16758] team0: Port device team_slave_0 added [ 668.159662][ T6862] device 6 left promiscuous mode [ 668.185154][T16758] team0: Port device team_slave_1 added [ 668.249829][ T6862] tipc: Left network mode [ 668.313591][T16758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.349171][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.423607][T16758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 668.490322][T16758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 668.497358][T16758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 668.609239][T16758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.655746][T16758] device hsr_slave_0 entered promiscuous mode [ 669.663036][T16758] device hsr_slave_1 entered promiscuous mode [ 669.690651][T16758] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 669.698303][T16758] Cannot create hsr debugfs directory [ 669.768252][T16853] validate_nla: 1 callbacks suppressed [ 669.768292][T16853] netlink: 'syz.3.3222': attribute type 49 has an invalid length. [ 669.849410][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 670.004547][T16853] netlink: 'syz.3.3222': attribute type 49 has an invalid length. [ 670.045225][T16860] netlink: 'syz.3.3222': attribute type 10 has an invalid length. [ 671.955458][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 672.411491][T16860] team0 (unregistering): Port device team_slave_0 removed [ 672.458445][T16860] team0 (unregistering): Port device team_slave_1 removed [ 673.734119][T16916] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3236'. [ 673.817357][T16916] device hsr_slave_0 left promiscuous mode [ 673.857693][T16916] device hsr_slave_1 left promiscuous mode [ 674.009372][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 674.301871][T16920] device syzkaller0 entered promiscuous mode [ 674.844411][T16951] netlink: 'syz.0.3243': attribute type 3 has an invalid length. [ 674.863909][T16951] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.3243'. [ 677.493140][T16955] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3244'. [ 677.768253][T17007] netlink: 'syz.2.3261': attribute type 27 has an invalid length. [ 677.885184][T17007] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3261'. [ 678.004698][T17013] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 678.184449][T17001] device syzkaller0 entered promiscuous mode [ 678.332955][T17013] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 678.342441][T17017] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 678.352630][T17022] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3266'. [ 678.371923][T17022] device hsr_slave_0 left promiscuous mode [ 678.380281][T17030] netlink: 'syz.2.3265': attribute type 29 has an invalid length. [ 678.395102][T17022] device hsr_slave_1 left promiscuous mode [ 678.533594][T17025] netlink: 'syz.0.3263': attribute type 5 has an invalid length. [ 678.548529][T17025] netlink: 168 bytes leftover after parsing attributes in process `syz.0.3263'. [ 678.563377][T17024] netlink: 'syz.2.3265': attribute type 22 has an invalid length. [ 678.579682][T17024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3265'. [ 680.547322][T17019] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 680.555597][T17023] netlink: 'syz.0.3263': attribute type 29 has an invalid length. [ 680.566525][T17030] netlink: 'syz.2.3265': attribute type 29 has an invalid length. [ 680.582537][T17036] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.3267'. [ 680.598629][T17036] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.3267'. [ 680.613392][T17036] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.3267'. [ 680.644471][ T6862] device hsr_slave_0 left promiscuous mode [ 680.679757][ T6862] device hsr_slave_1 left promiscuous mode [ 680.695601][ T6862] bridge0: port 3(hsr0) entered disabled state [ 680.720151][ T6862] device bridge_slave_1 left promiscuous mode [ 680.746878][ T6862] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.779588][ T6862] device bridge_slave_0 left promiscuous mode [ 680.785913][ T6862] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.872637][ T6862] device veth1_macvtap left promiscuous mode [ 680.914127][ T6862] device veth1_vlan left promiscuous mode [ 682.677801][T16758] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 682.709816][T17061] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3269'. [ 682.729988][T17061] device caif0 entered promiscuous mode [ 682.735617][T17061] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 682.780278][T17066] netlink: 'syz.0.3272': attribute type 3 has an invalid length. [ 682.788085][T17066] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.3272'. [ 682.838627][T16758] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 682.882993][T16758] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 682.932352][T16758] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 683.276335][T16758] 8021q: adding VLAN 0 to HW filter on device bond0 [ 683.461701][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 683.520839][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 683.602822][T16758] 8021q: adding VLAN 0 to HW filter on device team0 [ 683.773279][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 683.790260][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 683.809440][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.816656][ T4641] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.851271][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 683.869427][T17113] netlink: 'syz.2.3279': attribute type 10 has an invalid length. [ 683.882690][T17113] device netdevsim0 entered promiscuous mode [ 683.915368][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 683.929954][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 683.969945][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.977227][ T4641] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.049564][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 684.058619][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 684.111555][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 684.136366][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 684.189999][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 684.207154][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 684.236597][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 684.335574][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 684.351544][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 684.361120][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 684.370969][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 684.386729][T16758] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 684.396397][T17120] netlink: 'syz.0.3283': attribute type 4 has an invalid length. [ 684.409854][T17122] device ip6gretap0 left promiscuous mode [ 684.417126][T17122] bridge0: port 3(ip6gretap0) entered disabled state [ 684.603021][T17122] device bridge_slave_0 left promiscuous mode [ 684.620325][T17122] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.886181][T17123] device syzkaller0 entered promiscuous mode [ 685.211964][T17146] netlink: 'syz.0.3285': attribute type 29 has an invalid length. [ 685.339229][T17147] sock: sock_timestamping_bind_phc: sock not bind to device [ 685.791866][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.798322][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.591946][T17146] netlink: 'syz.0.3285': attribute type 29 has an invalid length. [ 689.604382][T17152] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3288'. [ 689.972328][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 689.982119][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.006591][T16758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 690.065784][T17172] netlink: 'syz.4.3293': attribute type 275 has an invalid length. [ 690.085258][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 690.108084][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 690.173478][T16758] device veth0_vlan entered promiscuous mode [ 690.192733][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 690.212387][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 690.235757][T16758] device veth1_vlan entered promiscuous mode [ 690.255073][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 690.273384][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 690.303357][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 690.373042][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 690.384586][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 690.406947][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 690.432258][T16758] device veth0_macvtap entered promiscuous mode [ 690.454853][T16758] device veth1_macvtap entered promiscuous mode [ 690.505014][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.528934][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.538800][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 690.549697][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.561410][T16758] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 690.568801][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 690.597848][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 690.608224][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 690.621970][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 690.648196][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.679059][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.708920][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.738903][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.767798][T16758] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 690.787564][T16758] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 690.815697][T16758] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 690.833589][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 690.845508][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 690.855937][T17186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3298'. [ 690.872267][T16758] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.882955][T16758] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.895861][T16758] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 690.906568][T16758] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 691.143460][ T6862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.171145][ T6862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.206184][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 691.253982][ T6862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 691.286066][ T6862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 691.295696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 691.604091][T17207] netlink: 'syz.0.3304': attribute type 29 has an invalid length. [ 691.627169][T17207] netlink: 'syz.0.3304': attribute type 29 has an invalid length. [ 692.136553][T17216] tipc: Started in network mode [ 692.144546][T17216] tipc: Node identity 9215a268, cluster identity 4711 [ 692.153954][T17216] tipc: Node number set to 2450891368 [ 692.386686][T17223] netlink: 63579 bytes leftover after parsing attributes in process `syz.3.3308'. [ 692.431607][T17211] device syzkaller0 entered promiscuous mode [ 692.847084][T17233] netlink: 'syz.4.3312': attribute type 2 has an invalid length. [ 692.853055][T17232] netlink: 'syz.4.3312': attribute type 2 has an invalid length. [ 692.896253][T17235] syz.3.3313[17235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 692.896459][T17235] syz.3.3313[17235] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 692.928017][T17233] device 0 entered promiscuous mode [ 693.047670][T17232] device 1 entered promiscuous mode [ 693.402825][T17249] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3327'. [ 693.985013][T17276] delete_channel: no stack [ 694.087096][T17287] netlink: 'syz.1.3326': attribute type 2 has an invalid length. [ 694.149253][T17287] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 694.354258][T17294] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3329'. [ 694.760021][T17296] can: request_module (can-proto-0) failed. [ 696.090986][T17343] tipc: Started in network mode [ 696.113535][T17343] tipc: Node identity 9215a268, cluster identity 4711 [ 696.130976][T17343] tipc: Node number set to 2450891368 [ 696.375701][T17354] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3345'. [ 696.410508][T17354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 696.440662][T17354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 696.853160][T17373] netlink: 'syz.1.3350': attribute type 27 has an invalid length. [ 696.859680][T17372] netlink: 'syz.1.3350': attribute type 27 has an invalid length. [ 696.871521][T17373] netlink: 'syz.1.3350': attribute type 3 has an invalid length. [ 696.957987][T17372] netlink: 'syz.1.3350': attribute type 3 has an invalid length. [ 699.258328][T17415] netlink: 'syz.0.3362': attribute type 9 has an invalid length. [ 699.284929][T17415] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.3362'. [ 699.382997][T17420] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3365'. [ 703.087986][T17448] tipc: Started in network mode [ 703.112447][T17448] tipc: Node identity 9215a268, cluster identity 4711 [ 703.147985][T17448] tipc: Node number set to 2450891368 [ 703.168576][T17453] : port 1(ip6gretap0) entered blocking state [ 703.179430][T17453] : port 1(ip6gretap0) entered disabled state [ 703.186505][T17453] device ip6gretap0 entered promiscuous mode [ 703.216126][T17459] device ip6gretap0 left promiscuous mode [ 703.224902][T17459] : port 1(ip6gretap0) entered disabled state [ 703.691484][T17476] netlink: 'syz.1.3379': attribute type 10 has an invalid length. [ 703.726213][T17476] device veth1_macvtap left promiscuous mode [ 705.843948][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 705.859060][ T4283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 705.870028][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 705.878324][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 705.897173][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 705.904731][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 706.393239][T17490] chnl_net:caif_netlink_parms(): no params data found [ 706.542896][T17490] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.556419][T17490] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.577071][T17490] device bridge_slave_0 entered promiscuous mode [ 706.587385][T17490] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.601111][T17490] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.613744][T17490] device bridge_slave_1 entered promiscuous mode [ 706.656150][T17490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.682589][T17490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.740261][T17490] team0: Port device team_slave_0 added [ 706.757123][T17490] team0: Port device team_slave_1 added [ 706.796095][T17490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.807379][T17490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.841788][T17490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.860324][T17490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.867492][T17490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 707.039523][T17490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.166673][T17490] device hsr_slave_0 entered promiscuous mode [ 707.197917][T17490] device hsr_slave_1 entered promiscuous mode [ 707.478438][T17502] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3384'. [ 707.517146][T17504] device sit0 entered promiscuous mode [ 707.907329][T17513] netlink: 'syz.3.3386': attribute type 21 has an invalid length. [ 707.929077][T17513] netlink: 'syz.3.3386': attribute type 2 has an invalid length. [ 708.099540][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 708.581143][T17490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 708.612804][T17490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 708.637188][T17490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 708.693207][T17490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 708.735849][T17538] netlink: 184 bytes leftover after parsing attributes in process `syz.4.3392'. [ 709.041411][T17490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.179052][T17544] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3394'. [ 709.190023][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 709.217487][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 709.270281][T17490] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.308597][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 709.333661][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 709.357291][ T6862] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.364657][ T6862] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.393144][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 709.423777][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 709.444370][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 709.486327][ T6862] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.493564][ T6862] bridge0: port 2(bridge_slave_1) entered forwarding state [ 709.526948][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 709.548032][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 709.608030][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 709.638498][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 709.659811][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 709.681842][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 709.704016][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 709.723634][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 709.739755][ T6862] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 709.763736][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 709.795324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 709.833300][T17490] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 710.177047][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 712.249245][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 713.161166][T17588] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3406'. [ 713.505083][T17588] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 713.576118][T17588] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 713.661068][T17588] bond0 (unregistering): Released all slaves [ 713.700294][T17581] netlink: 'syz.3.3405': attribute type 17 has an invalid length. [ 713.717311][T17581] netlink: 148 bytes leftover after parsing attributes in process `syz.3.3405'. [ 714.116850][T17607] netlink: 'syz.3.3412': attribute type 21 has an invalid length. [ 714.125673][T17607] netlink: 'syz.3.3412': attribute type 4 has an invalid length. [ 714.134265][T17607] netlink: 'syz.3.3412': attribute type 23 has an invalid length. [ 714.158965][T17607] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3412'. [ 714.254932][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 714.303614][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 714.312034][T17610] netlink: 'syz.3.3412': attribute type 22 has an invalid length. [ 714.331037][T17610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3412'. [ 714.340940][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 714.360277][T17611] netlink: 'syz.0.3411': attribute type 21 has an invalid length. [ 714.379290][T17490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 714.733147][T17613] tipc: Started in network mode [ 714.750230][T17613] tipc: Node identity 9215a268, cluster identity 4711 [ 714.786551][T17613] tipc: Node number set to 2450891368 [ 714.831287][T17620] netlink: 'syz.0.3411': attribute type 11 has an invalid length. [ 714.878989][T17620] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3411'. [ 714.891554][T17608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 715.201387][T17634] netlink: 'syz.4.3418': attribute type 27 has an invalid length. [ 715.229321][T17634] netlink: 'syz.4.3418': attribute type 3 has an invalid length. [ 715.305526][T17634] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3418'. [ 715.981921][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 716.000952][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 716.053151][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 716.066358][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 716.097078][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 716.114242][ T6856] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 716.155766][T17652] IPv6: NLM_F_CREATE should be specified when creating new route [ 716.182071][T17652] netlink: 1 bytes leftover after parsing attributes in process `syz.4.3423'. [ 716.217767][T17490] device veth0_vlan entered promiscuous mode [ 716.267890][T17490] device veth1_vlan entered promiscuous mode [ 716.323861][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 716.354781][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 716.375004][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 716.516188][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 716.542732][T17490] device veth0_macvtap entered promiscuous mode [ 716.663663][T17490] device veth1_macvtap entered promiscuous mode [ 716.727061][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.741090][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.752078][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.763472][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.774209][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 716.785438][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 716.797828][T17490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 716.816717][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 716.827934][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 716.884364][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 716.914577][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 716.937321][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 716.984180][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.017687][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.036832][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.048207][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.095727][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.123079][T17490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 717.135176][T17490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 717.147436][T17490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 717.155843][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 717.170057][ T6837] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 717.195158][T17490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.206194][T17490] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.217360][T17490] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.226566][T17490] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 717.295677][T17687] netlink: 'syz.1.3434': attribute type 3 has an invalid length. [ 717.338984][T17687] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3434'. [ 719.507144][T17706] netlink: 'syz.3.3439': attribute type 10 has an invalid length. [ 719.519080][T17706] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3439'. [ 719.535530][T17706] batman_adv: batadv0: Adding interface: veth0_vlan [ 719.542461][T17706] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 719.575829][T17706] batman_adv: batadv0: Interface activated: veth0_vlan [ 719.777891][ T4641] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.796215][ T4641] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 719.838920][ T4641] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 719.947814][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 719.956938][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 720.002498][ T6843] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 723.023582][T17741] netlink: 'syz.4.3448': attribute type 11 has an invalid length. [ 723.062413][T17741] netlink: 184220 bytes leftover after parsing attributes in process `syz.4.3448'. [ 723.143070][T17741] netlink: 'syz.4.3448': attribute type 3 has an invalid length. [ 723.164398][T17741] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3448'. [ 723.424585][T17734] device wg2 entered promiscuous mode [ 723.531987][T17732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 723.790662][T17760] netlink: 'syz.0.3452': attribute type 20 has an invalid length. [ 723.831123][T17760] IPv6: NLM_F_CREATE should be specified when creating new route [ 723.871659][T17760] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3452'. [ 724.037293][T17764] netlink: 'syz.4.3453': attribute type 10 has an invalid length. [ 726.477822][T17771] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3457'. [ 726.722662][T17795] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3463'. [ 726.764232][T17795] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 726.824103][T17795] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 726.994266][T17795] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3463'. [ 727.921847][T17835] netlink: 'syz.4.3475': attribute type 1 has an invalid length. [ 727.959895][T17835] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3475'. [ 728.819026][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 730.707640][T17888] netlink: 'syz.3.3488': attribute type 29 has an invalid length. [ 732.714261][T17871] netlink: 'syz.4.3484': attribute type 27 has an invalid length. [ 732.722256][T17871] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3484'. [ 732.731937][T17871] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 732.752630][T17888] netlink: 'syz.3.3488': attribute type 29 has an invalid length. [ 733.026785][T17902] netlink: 'syz.5.3493': attribute type 29 has an invalid length. [ 733.037479][T17902] netlink: 'syz.5.3493': attribute type 29 has an invalid length. [ 733.070416][T17902] netlink: 'syz.5.3493': attribute type 29 has an invalid length. [ 733.090271][T17902] device bridge_slave_1 left promiscuous mode [ 733.096601][T17902] bridge0: port 2(bridge_slave_1) entered disabled state [ 733.116325][T17902] device bridge_slave_0 left promiscuous mode [ 733.151186][T17902] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.613232][T17920] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3497'. [ 733.687886][T17920] netlink: 'syz.5.3497': attribute type 20 has an invalid length. [ 733.719241][T17920] IPv6: NLM_F_CREATE should be specified when creating new route [ 733.744273][T17920] netlink: 1 bytes leftover after parsing attributes in process `syz.5.3497'. [ 733.872124][T17920] netlink: 4083 bytes leftover after parsing attributes in process `syz.5.3497'. [ 734.242490][T17935] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3500'. [ 734.404361][T17935] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 734.605168][T17953] netlink: 'syz.5.3503': attribute type 10 has an invalid length. [ 734.763654][T17953] team0: Port device geneve1 added [ 735.866829][T17974] netlink: 14 bytes leftover after parsing attributes in process `syz.5.3508'. [ 735.883204][T17979] netlink: 'syz.4.3509': attribute type 1 has an invalid length. [ 735.911790][T17979] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.3509'. [ 736.680688][T17974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 736.703840][T17974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 736.731353][T17974] bond0 (unregistering): Released all slaves [ 740.905144][T18029] netlink: 192432 bytes leftover after parsing attributes in process `syz.1.3526'. [ 741.018033][T18029] netlink: get zone limit has 4 unknown bytes [ 741.841506][T18049] tipc: Started in network mode [ 741.861434][T18049] tipc: Node identity 9215a268, cluster identity 4711 [ 741.891516][T18049] tipc: Node number set to 2450891368 [ 742.700686][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3540'. [ 742.744008][T18084] delete_channel: no stack [ 742.771926][T18085] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3542'. [ 742.832964][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3544'. [ 742.846304][T18090] netlink: 129384 bytes leftover after parsing attributes in process `syz.5.3545'. [ 742.869223][T18087] tc_dump_action: action bad kind [ 742.904182][T18085] netlink: 'syz.0.3542': attribute type 20 has an invalid length. [ 742.928788][T18091] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3542'. [ 742.965987][T18087] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.3544'. [ 742.991607][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3544'. [ 743.016280][T18091] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.3542'. [ 743.456289][T18108] sctp: [Deprecated]: syz.5.3550 (pid 18108) Use of int in max_burst socket option deprecated. [ 743.456289][T18108] Use struct sctp_assoc_value instead [ 743.516314][T18108] netlink: 'syz.5.3550': attribute type 10 has an invalid length. [ 745.455774][T18146] netlink: 'syz.0.3561': attribute type 29 has an invalid length. [ 746.002448][T18151] netlink: 'syz.1.3562': attribute type 1 has an invalid length. [ 746.029457][T18151] netlink: 148288 bytes leftover after parsing attributes in process `syz.1.3562'. [ 746.035801][T18154] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.3562'. [ 747.222719][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.229143][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.478994][T18146] netlink: 'syz.0.3561': attribute type 29 has an invalid length. [ 747.965456][T18159] netlink: 'syz.3.3564': attribute type 10 has an invalid length. [ 749.151706][T18178] netdevsim netdevsim5: Direct firmware load for Ö failed with error -2 [ 749.189197][T18178] netdevsim netdevsim5: Falling back to sysfs fallback for: Ö [ 749.289114][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 749.533366][T18196] netlink: 'syz.4.3575': attribute type 39 has an invalid length. [ 749.735843][T18194] netlink: 'syz.1.3576': attribute type 39 has an invalid length. [ 750.175843][T18217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3580'. [ 753.558456][T18249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3589'. [ 753.587854][T18249] tc_dump_action: action bad kind [ 753.836998][T18249] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3589'. [ 753.847474][T18258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3589'. [ 754.255052][T18266] netlink: 'syz.5.3594': attribute type 10 has an invalid length. [ 754.283986][T18266] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3594'. [ 754.930111][T18287] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 754.946423][T18287] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 755.196418][T18292] sock: sock_timestamping_bind_phc: sock not bind to device [ 755.833480][T18312] netlink: 'syz.3.3609': attribute type 13 has an invalid length. [ 755.841642][T18312] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3609'. [ 755.854651][T18312] syz_tun: refused to change device tx_queue_len [ 755.862208][T18312] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 755.927644][T18312] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3609'. [ 755.969243][T18312] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 756.020422][T18312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 756.049728][T18311] netlink: 'syz.4.3611': attribute type 10 has an invalid length. [ 756.066727][T18320] sock: sock_timestamping_bind_phc: sock not bind to device [ 756.077028][T18311] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3611'. [ 756.542456][T18336] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3618'. [ 756.970987][T18350] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 757.062832][T18350] device syzkaller0 entered promiscuous mode [ 757.166826][T18358] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3623'. [ 757.337183][T18358] device syzkaller0 entered promiscuous mode [ 757.552433][T18371] netlink: 'syz.3.3629': attribute type 6 has an invalid length. [ 757.566233][T18371] netlink: 96096 bytes leftover after parsing attributes in process `syz.3.3629'. [ 759.320036][T18365] netlink: 'syz.1.3628': attribute type 10 has an invalid length. [ 759.351550][T18365] team0: Port device geneve1 added [ 761.678484][T18403] netlink: 'syz.3.3636': attribute type 19 has an invalid length. [ 761.688737][T18403] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.3636'. [ 762.079053][T18412] netlink: 'syz.4.3638': attribute type 10 has an invalid length. [ 762.112475][T18412] device veth0_macvtap left promiscuous mode [ 762.918762][T18422] device syzkaller0 entered promiscuous mode [ 763.618013][T18446] sock: sock_timestamping_bind_phc: sock not bind to device [ 764.650096][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 765.299829][T18455] netlink: 'syz.5.3649': attribute type 29 has an invalid length. [ 767.741272][T18436] netlink: 'syz.1.3644': attribute type 15 has an invalid length. [ 767.749367][T18436] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.3644'. [ 767.761539][T18455] netlink: 'syz.5.3649': attribute type 29 has an invalid length. [ 767.789174][T18470] netlink: 'syz.3.3652': attribute type 22 has an invalid length. [ 767.994610][T18484] netlink: 'syz.1.3655': attribute type 21 has an invalid length. [ 768.025769][T18484] netlink: 'syz.1.3655': attribute type 1 has an invalid length. [ 768.044598][T18483] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3657'. [ 768.215887][T18488] netlink: 'syz.5.3656': attribute type 17 has an invalid length. [ 768.266635][T18488] netlink: 'syz.5.3656': attribute type 16 has an invalid length. [ 768.349160][T18488] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3656'. [ 768.463115][T18496] netlink: 'syz.1.3659': attribute type 10 has an invalid length. [ 768.496578][T18496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3659'. [ 768.524664][T18496] batman_adv: batadv0: Adding interface: vlan1 [ 768.532329][T18496] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.559284][T18496] batman_adv: batadv0: Interface activated: vlan1 [ 769.546166][T18547] netlink: 'syz.0.3671': attribute type 29 has an invalid length. [ 769.599985][T18558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3671'. [ 769.731822][T18558] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3671'. [ 769.779623][T18559] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3671'. [ 771.983223][T18541] validate_nla: 1 callbacks suppressed [ 771.983240][T18541] netlink: 'syz.0.3671': attribute type 29 has an invalid length. [ 771.998144][T18565] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3675'. [ 772.008617][T18565] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 772.036947][T18565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 772.087575][T18575] netlink: 184 bytes leftover after parsing attributes in process `syz.5.3678'. [ 775.498003][T18608] delete_channel: no stack [ 775.611978][ T4279] Bluetooth: hci1: unexpected event 0x08 length: 15 > 4 [ 776.424553][T18636] netlink: 'syz.3.3692': attribute type 10 has an invalid length. [ 776.443845][T18636] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3692'. [ 776.469960][T18636] batman_adv: batadv0: Adding interface: vlan1 [ 776.494282][T18636] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 776.559346][T18636] batman_adv: batadv0: Interface activated: vlan1 [ 777.199465][T18648] can: request_module (can-proto-0) failed. [ 777.334836][T18661] mac80211_hwsim hwsim44 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 777.919023][ T4279] Bluetooth: hci5: adv larger than maximum supported [ 777.919106][ T4279] Bluetooth: hci5: Malformed LE Event: 0x0d [ 778.358290][T18704] netlink: 'syz.5.3713': attribute type 4 has an invalid length. [ 778.377966][T18704] netlink: 128124 bytes leftover after parsing attributes in process `syz.5.3713'. [ 778.392482][T18704] netlink: 'syz.5.3713': attribute type 1 has an invalid length. [ 778.400835][T18704] netlink: 15999 bytes leftover after parsing attributes in process `syz.5.3713'. [ 778.669100][T18712] mac80211_hwsim hwsim47 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 779.142483][T18728] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3719'. [ 780.943732][T18747] IPv6: Can't replace route, no match found [ 781.005116][T18748] IPv6: Can't replace route, no match found [ 781.286329][T18761] mac80211_hwsim hwsim40 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 781.517787][T18765] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.3730'. [ 781.797255][T18763] netlink: 'syz.3.3729': attribute type 21 has an invalid length. [ 782.015620][T18778] device pim6reg1 entered promiscuous mode [ 782.341126][T18793] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 782.588905][T18792] netlink: 'syz.3.3738': attribute type 39 has an invalid length. [ 782.647160][T18793] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 782.665751][T18788] netlink: 'syz.1.3736': attribute type 29 has an invalid length. [ 782.731062][T18790] device syzkaller0 entered promiscuous mode [ 782.990718][T18805] cgroup: fork rejected by pids controller in /syz1 [ 785.104822][T18919] netlink: 'syz.4.3745': attribute type 1 has an invalid length. [ 785.119109][T18920] netlink: 'syz.4.3745': attribute type 21 has an invalid length. [ 785.137390][T18919] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.3745'. [ 785.157455][T18920] netlink: 'syz.4.3745': attribute type 5 has an invalid length. [ 786.145844][ T6843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.295937][ T6843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.439989][T18965] netlink: 'syz.0.3757': attribute type 3 has an invalid length. [ 786.460743][ T6843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.478771][T18963] netlink: 'syz.0.3757': attribute type 3 has an invalid length. [ 786.479856][T18965] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3757'. [ 786.517953][T18968] netlink: 'syz.5.3759': attribute type 2 has an invalid length. [ 786.533740][T18968] netlink: 'syz.5.3759': attribute type 1 has an invalid length. [ 786.541689][T18963] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.3757'. [ 786.565064][T18957] device pim6reg1 entered promiscuous mode [ 786.742279][ T6843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.430425][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 787.440514][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 787.448477][ T4278] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 787.457363][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 787.466368][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 787.474917][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 787.581404][ T6843] tipc: Left network mode [ 788.815486][T19027] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3768'. [ 789.041619][T18978] chnl_net:caif_netlink_parms(): no params data found [ 789.529043][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 789.697843][T18978] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.709009][T18978] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.738296][T18978] device bridge_slave_0 entered promiscuous mode [ 789.788229][T18978] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.808935][T18978] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.817499][T18978] device bridge_slave_1 entered promiscuous mode [ 789.888511][T19069] netlink: 'syz.3.3777': attribute type 3 has an invalid length. [ 789.923853][T19069] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3777'. [ 790.226468][T18978] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 790.283895][T18978] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 790.441105][T19082] netlink: 'syz.4.3779': attribute type 10 has an invalid length. [ 790.560013][ T6843] device hsr_slave_0 left promiscuous mode [ 790.567721][ T6843] device hsr_slave_1 left promiscuous mode [ 790.608069][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.624466][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.671374][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.680149][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.698121][ T6843] batman_adv: batadv0: Interface deactivated: vlan1 [ 790.732998][ T6843] batman_adv: batadv0: Removing interface: vlan1 [ 790.743224][ T6843] device bridge_slave_1 left promiscuous mode [ 790.750612][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.764162][T19088] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3781'. [ 790.774341][ T6843] device bridge_slave_0 left promiscuous mode [ 790.780800][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.815369][ T6843] device veth0_macvtap left promiscuous mode [ 790.832714][ T6843] device veth1_vlan left promiscuous mode [ 790.838709][ T6843] device veth0_vlan left promiscuous mode [ 791.191293][ T6843] team0 (unregistering): Port device geneve1 removed [ 791.613628][ T4279] Bluetooth: hci1: command 0x041b tx timeout [ 791.672066][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 791.724029][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 792.173956][T19072] device pim6reg1 entered promiscuous mode [ 792.203160][T18978] team0: Port device team_slave_0 added [ 792.368591][T18978] team0: Port device team_slave_1 added [ 792.465056][T18978] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 792.472184][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.605828][T18978] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 792.642998][T18978] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 792.666893][T18978] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 792.758210][T18978] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 792.790083][T19107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3786'. [ 792.974777][T18978] device hsr_slave_0 entered promiscuous mode [ 793.019745][T18978] device hsr_slave_1 entered promiscuous mode [ 793.282427][T19122] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.3789'. [ 793.311529][T19118] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.3788'. [ 793.520665][T18978] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 793.573231][T18978] Cannot create hsr debugfs directory [ 793.690520][ T4279] Bluetooth: hci1: command 0x040f tx timeout [ 795.770640][ T4279] Bluetooth: hci1: command 0x0419 tx timeout [ 795.977787][T19162] can: request_module (can-proto-0) failed. [ 796.663347][T19185] netlink: 'syz.0.3802': attribute type 3 has an invalid length. [ 796.692700][T19185] netlink: 114680 bytes leftover after parsing attributes in process `syz.0.3802'. [ 796.719947][T19180] device wlan1 entered promiscuous mode [ 797.062043][T18978] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 797.099038][T19195] netlink: 'syz.0.3805': attribute type 2 has an invalid length. [ 797.127452][T19195] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3805'. [ 797.157473][T18978] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 797.223279][T18978] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 797.275568][T18978] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 797.589275][T18978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.676884][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 797.707206][ T6850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 797.728105][T18978] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.776382][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 797.869916][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 797.918370][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.925601][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 797.960762][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 797.980937][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.000449][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.009506][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.016687][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.095011][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 798.124187][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 798.176324][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.224963][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.261830][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 798.287766][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 801.116260][T18978] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 801.155694][T18978] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 801.168079][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 801.180769][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 801.201658][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 801.224604][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 801.260256][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 801.339166][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 801.651209][T19256] netlink: 'syz.0.3818': attribute type 28 has an invalid length. [ 801.700035][T19256] netlink: 'syz.0.3818': attribute type 29 has an invalid length. [ 801.719482][T19256] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3818'. [ 802.196695][T19266] netlink: 'syz.0.3822': attribute type 11 has an invalid length. [ 802.245415][T19266] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3822'. [ 802.483832][T19273] netlink: 'syz.0.3823': attribute type 21 has an invalid length. [ 802.509621][T19273] netlink: 'syz.0.3823': attribute type 12 has an invalid length. [ 802.517788][T19273] netlink: 'syz.0.3823': attribute type 13 has an invalid length. [ 802.559911][T19273] netlink: 'syz.0.3823': attribute type 14 has an invalid length. [ 802.567906][T19273] netlink: 'syz.0.3823': attribute type 15 has an invalid length. [ 802.605609][T19273] netlink: 'syz.0.3823': attribute type 16 has an invalid length. [ 802.633763][T19273] netlink: 'syz.0.3823': attribute type 19 has an invalid length. [ 802.662021][T19273] netlink: 'syz.0.3823': attribute type 6 has an invalid length. [ 802.708893][T19273] netlink: 9618 bytes leftover after parsing attributes in process `syz.0.3823'. [ 802.762978][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 802.780268][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 802.832345][T18978] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 802.912009][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 802.934910][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 803.009220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 803.030435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 803.062448][T18978] device veth0_vlan entered promiscuous mode [ 803.095323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 803.121992][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 803.180510][T18978] device veth1_vlan entered promiscuous mode [ 803.301152][T18978] device veth0_macvtap entered promiscuous mode [ 803.319118][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 803.359809][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 803.390001][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 803.435011][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.482942][T18978] device veth1_macvtap entered promiscuous mode [ 803.507060][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 803.531814][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 803.578448][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.611669][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.632630][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.643731][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.678066][T18978] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.710976][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.722729][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.755180][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.778646][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.790193][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.801341][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.819017][T18978] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 803.849145][T18978] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.889746][T18978] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 803.897826][T19293] netlink: 63503 bytes leftover after parsing attributes in process `syz.5.3825'. [ 804.070371][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.090007][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.124305][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 804.153653][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 804.190454][T18978] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.218882][T18978] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.246577][T18978] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.266357][T18978] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.657376][T15016] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.691856][T15016] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.752520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 804.795543][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 804.811523][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 804.859855][T15016] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 805.323862][T19332] netlink: 35840 bytes leftover after parsing attributes in process `syz.5.3833'. [ 806.163834][T19358] netlink: 'syz.1.3839': attribute type 1 has an invalid length. [ 806.208947][T19358] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.3839'. [ 808.100980][T19405] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3853'. [ 808.650904][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.657334][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.878550][T19424] device wg2 entered promiscuous mode [ 808.944276][T19433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3856'. [ 809.064762][T19444] validate_nla: 1 callbacks suppressed [ 809.064801][T19444] netlink: 'syz.3.3860': attribute type 10 has an invalid length. [ 809.253556][T19452] netlink: 'syz.3.3860': attribute type 29 has an invalid length. [ 809.321451][T19456] netlink: 'syz.5.3861': attribute type 3 has an invalid length. [ 809.346797][T19456] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.3861'. [ 809.442038][T19452] netlink: 'syz.3.3860': attribute type 29 has an invalid length. [ 809.482148][T19449] netlink: 'syz.3.3860': attribute type 29 has an invalid length. [ 809.884123][T19471] device wg2 left promiscuous mode [ 809.954338][T19471] device wg2 entered promiscuous mode [ 809.989582][T19472] tipc: Started in network mode [ 810.030634][T19472] tipc: Node identity 9215a268, cluster identity 4711 [ 810.054327][T19472] tipc: Node number set to 2450891368 [ 810.206360][T19481] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3866'. [ 810.741715][T19500] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3873'. [ 810.834714][T19500] netlink: 'syz.1.3873': attribute type 2 has an invalid length. [ 810.848366][T19503] netlink: 'syz.5.3874': attribute type 3 has an invalid length. [ 810.872320][T19503] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3874'. [ 810.907360][T19506] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3873'. [ 810.949094][T19506] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 811.018208][T19501] netlink: 'syz.1.3873': attribute type 2 has an invalid length. [ 811.526044][T19531] mac80211_hwsim hwsim46 ªªªªªª: renamed from wlan0 [ 811.597066][T19534] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.3881'. [ 811.802173][T19536] netlink: 'syz.3.3883': attribute type 10 has an invalid length. [ 812.027186][T19548] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3884'. [ 812.602121][T19564] delete_channel: no stack [ 813.066276][T19574] netlink: 'syz.3.3894': attribute type 29 has an invalid length. [ 813.097631][T19576] netlink: 197344 bytes leftover after parsing attributes in process `syz.1.3896'. [ 813.115566][T19574] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3894'. [ 814.206709][T19615] validate_nla: 4 callbacks suppressed [ 814.206746][T19615] netlink: 'syz.4.3906': attribute type 23 has an invalid length. [ 814.264355][T19615] netlink: 168 bytes leftover after parsing attributes in process `syz.4.3906'. [ 814.403992][T19618] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.3907'. [ 814.556619][T19622] netlink: 'syz.5.3907': attribute type 10 has an invalid length. [ 814.668054][T19622] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 815.304648][T19642] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3912'. [ 815.363739][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.449010][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.478965][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.571096][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.633470][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.645997][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.656697][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.675179][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.714743][T19642] device batadv_slave_1 entered promiscuous mode [ 815.804918][T19652] netlink: 'syz.0.3917': attribute type 39 has an invalid length. [ 815.839468][T19642] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3912'. [ 815.860016][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.885003][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 815.941613][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 815.987867][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.012132][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.043926][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.055814][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.104501][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.120014][T19642] netlink: 2 bytes leftover after parsing attributes in process `syz.5.3912'. [ 816.185107][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.218983][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.250541][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.267843][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.299012][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.319010][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.348987][T19642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 816.378956][T19642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 816.551887][T19666] netlink: 'syz.3.3920': attribute type 29 has an invalid length. [ 816.608343][T19666] netlink: 'syz.3.3920': attribute type 29 has an invalid length. [ 817.992601][T19693] netlink: 14593 bytes leftover after parsing attributes in process `syz.3.3926'. [ 818.253209][T19702] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 818.637628][T19737] netlink: 'syz.4.3936': attribute type 2 has an invalid length. [ 818.676932][T19737] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3936'. [ 818.721016][T19739] netlink: 'syz.1.3935': attribute type 1 has an invalid length. [ 818.736932][T19735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3938'. [ 818.753785][T19735] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3938'. [ 818.785247][T19739] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.3935'. [ 818.804285][T19742] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3938'. [ 827.096375][ T6856] tipc: Subscription rejected, illegal request [ 827.177634][T19837] netlink: 'syz.1.3970': attribute type 10 has an invalid length. [ 827.200996][T19837] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3970'. [ 828.167117][T19839] netlink: 'syz.0.3958': attribute type 2 has an invalid length. [ 828.207756][T19839] netlink: 'syz.0.3958': attribute type 8 has an invalid length. [ 828.220707][T19839] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3958'. [ 828.850329][T19873] netlink: 'syz.1.3968': attribute type 2 has an invalid length. [ 831.209027][ T4279] Bluetooth: hci5: command 0x0406 tx timeout [ 833.880627][T19866] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3964'. [ 833.893952][T19873] device 0 entered promiscuous mode [ 833.914762][T19897] device wg2 entered promiscuous mode [ 834.645861][T19938] device pim6reg1 entered promiscuous mode [ 834.847752][T19953] netlink: 'syz.1.3991': attribute type 4 has an invalid length. [ 834.915536][T19953] netlink: 134728 bytes leftover after parsing attributes in process `syz.1.3991'. [ 835.026024][T19956] netlink: 'syz.0.3992': attribute type 10 has an invalid length. [ 835.044816][T19961] netlink: 'syz.4.3993': attribute type 8 has an invalid length. [ 835.054156][T19956] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.061824][T19956] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.089775][T19961] netlink: 'syz.4.3993': attribute type 1 has an invalid length. [ 835.097688][T19961] netlink: 104088 bytes leftover after parsing attributes in process `syz.4.3993'. [ 835.597972][T19975] netlink: 'syz.1.3994': attribute type 4 has an invalid length. [ 835.640613][T19975] netlink: 'syz.1.3994': attribute type 1 has an invalid length. [ 835.676964][T19975] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3994'. [ 836.595822][T19995] netlink: 'syz.5.4000': attribute type 1 has an invalid length. [ 836.688661][T19995] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4000'. [ 838.920023][T20069] netlink: 'syz.0.4017': attribute type 21 has an invalid length. [ 839.774233][T20080] netlink: 'syz.5.4024': attribute type 10 has an invalid length. [ 839.826181][T20083] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4024'. [ 840.408412][T20105] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4031'. [ 842.182334][T20106] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4031'. [ 842.194412][T20113] netlink: 'syz.5.4032': attribute type 11 has an invalid length. [ 842.206439][T20113] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4032'. [ 842.525453][T20126] netlink: 'syz.4.4037': attribute type 1 has an invalid length. [ 842.927554][T20144] netlink: 'syz.3.4043': attribute type 3 has an invalid length. [ 842.984446][T20144] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4043'. [ 843.881089][T20161] netlink: 'syz.5.4045': attribute type 2 has an invalid length. [ 843.906044][T20161] netlink: 'syz.5.4045': attribute type 3 has an invalid length. [ 843.953432][T20161] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4045'. [ 846.533657][T20168] netlink: 'syz.3.4049': attribute type 25 has an invalid length. [ 846.542427][T20168] netlink: 'syz.3.4049': attribute type 3 has an invalid length. [ 846.562262][T20168] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4049'. [ 846.713103][T20170] netlink: 64859 bytes leftover after parsing attributes in process `syz.5.4048'. [ 847.237560][T20191] netlink: 'syz.4.4057': attribute type 2 has an invalid length. [ 847.255978][T20191] netlink: 10 bytes leftover after parsing attributes in process `syz.4.4057'. [ 847.292251][T20191] netlink: 'syz.4.4057': attribute type 9 has an invalid length. [ 847.308921][T20191] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4057'. [ 847.649899][T20206] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4060'. [ 847.660825][T20206] netlink: 'syz.1.4060': attribute type 1 has an invalid length. [ 847.924478][T20213] netlink: 'syz.1.4062': attribute type 29 has an invalid length. [ 847.938588][T20214] netlink: 16066 bytes leftover after parsing attributes in process `syz.5.4061'. [ 847.974440][T20213] netlink: 'syz.1.4062': attribute type 29 has an invalid length. [ 848.075884][T20213] netlink: 'syz.1.4062': attribute type 29 has an invalid length. [ 848.095876][T20213] netlink: 'syz.1.4062': attribute type 29 has an invalid length. [ 848.133232][T20213] netlink: 'syz.1.4062': attribute type 29 has an invalid length. [ 848.783169][T20238] netlink: 'syz.1.4070': attribute type 2 has an invalid length. [ 848.803094][T20238] netlink: 'syz.1.4070': attribute type 8 has an invalid length. [ 848.824052][T20238] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4070'. [ 849.362342][T20244] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4068'. [ 849.412023][T20244] ksmbd: Unknown IPC event: 10, ignore. [ 849.556575][T20266] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.4073'. [ 850.283983][T20274] netlink: 10 bytes leftover after parsing attributes in process `syz.5.4077'. [ 850.905325][T20293] : port 1(ip6gretap0) entered blocking state [ 850.929341][T20293] : port 1(ip6gretap0) entered disabled state [ 850.981039][T20293] device ip6gretap0 entered promiscuous mode [ 850.993350][T20297] device ip6gretap0 left promiscuous mode [ 851.027113][T20297] : port 1(ip6gretap0) entered disabled state [ 852.308557][T20329] validate_nla: 3 callbacks suppressed [ 852.308579][T20329] netlink: 'syz.3.4097': attribute type 2 has an invalid length. [ 852.349352][T20329] __nla_validate_parse: 4 callbacks suppressed [ 852.349373][T20329] netlink: 191412 bytes leftover after parsing attributes in process `syz.3.4097'. [ 853.433498][T20341] netlink: 'syz.3.4099': attribute type 29 has an invalid length. [ 853.450556][T20341] netlink: 'syz.3.4099': attribute type 29 has an invalid length. [ 853.503277][T20340] netlink: 'syz.3.4099': attribute type 29 has an invalid length. [ 853.546656][T20340] netlink: 'syz.3.4099': attribute type 29 has an invalid length. [ 853.629775][T20341] netlink: 'syz.3.4099': attribute type 29 has an invalid length. [ 855.621262][T20354] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4103'. [ 855.739096][T20364] netlink: 'syz.4.4105': attribute type 39 has an invalid length. [ 856.367029][T20383] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4110'. [ 856.567122][T20393] netlink: 'syz.5.4114': attribute type 11 has an invalid length. [ 856.579541][T20393] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.4114'. [ 856.900611][T20402] netlink: 'syz.3.4116': attribute type 21 has an invalid length. [ 856.910386][T20402] netlink: 'syz.3.4116': attribute type 3 has an invalid length. [ 856.918318][T20402] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4116'. [ 856.946957][T20393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 857.060716][T20404] device syzkaller0 entered promiscuous mode [ 857.110563][T20412] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4118'. [ 857.177749][T20416] netlink: 'syz.4.4120': attribute type 29 has an invalid length. [ 860.728967][T20412] netlink: 60 bytes leftover after parsing attributes in process `syz.5.4118'. [ 860.738304][T20416] netlink: 'syz.4.4120': attribute type 29 has an invalid length. [ 861.111793][T20435] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.4122'. [ 862.684977][T20451] netlink: 'syz.0.4124': attribute type 2 has an invalid length. [ 862.715589][T20451] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.4124'. [ 862.882670][T20457] netlink: 'syz.4.4128': attribute type 29 has an invalid length. [ 863.343339][T20457] netlink: 'syz.4.4128': attribute type 29 has an invalid length. [ 863.360225][T20449] netlink: 'syz.4.4128': attribute type 29 has an invalid length. [ 863.388642][T20455] device syzkaller0 entered promiscuous mode [ 863.397849][T20463] netlink: 'syz.4.4128': attribute type 29 has an invalid length. [ 863.458232][T20466] netlink: 'syz.4.4128': attribute type 29 has an invalid length. [ 863.924825][T20482] netlink: 'syz.1.4136': attribute type 1 has an invalid length. [ 863.943169][T20482] netlink: 59181 bytes leftover after parsing attributes in process `syz.1.4136'. [ 864.050031][T20470] netlink: 'syz.3.4132': attribute type 7 has an invalid length. [ 864.066056][T20470] netlink: 'syz.3.4132': attribute type 1 has an invalid length. [ 864.075376][T20470] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.4132'. [ 864.229951][T20489] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.4138'. [ 864.400122][T20494] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4137'. [ 865.269627][T20504] device wg2 entered promiscuous mode [ 866.061099][T20555] validate_nla: 1 callbacks suppressed [ 866.061117][T20555] netlink: 'syz.3.4143': attribute type 12 has an invalid length. [ 866.141168][T20555] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4143'. [ 866.673114][T20579] netlink: 'syz.1.4151': attribute type 4 has an invalid length. [ 867.387803][T20574] netlink: 'syz.0.4149': attribute type 7 has an invalid length. [ 867.399403][T20574] netlink: 'syz.0.4149': attribute type 1 has an invalid length. [ 867.426660][T20574] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4149'. [ 867.825856][T20623] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.4165'. [ 867.933187][T20621] netlink: 2639 bytes leftover after parsing attributes in process `syz.0.4164'. [ 868.162305][T20628] IPv6: Can't replace route, no match found [ 868.311506][T20637] device wg2 left promiscuous mode [ 868.330665][T20636] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4170'. [ 868.376704][T20630] netlink: 'syz.4.4168': attribute type 39 has an invalid length. [ 868.417313][T20630] device wg2 entered promiscuous mode [ 868.823889][T20657] netlink: 'syz.3.4185': attribute type 1 has an invalid length. [ 869.412154][T20664] netlink: 'syz.4.4175': attribute type 7 has an invalid length. [ 869.428998][T20664] netlink: 'syz.4.4175': attribute type 1 has an invalid length. [ 869.437643][T20664] netlink: 184904 bytes leftover after parsing attributes in process `syz.4.4175'. [ 869.715867][T20675] netlink: 9087 bytes leftover after parsing attributes in process `syz.0.4180'. [ 869.913892][T20674] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.4181'. [ 869.929088][T20674] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 869.992472][T20681] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.4184'. [ 870.005309][T20681] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4184'. [ 870.091219][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.097645][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.255721][T20696] device wg2 left promiscuous mode [ 870.322143][T20687] netlink: 'syz.5.4186': attribute type 39 has an invalid length. [ 870.460057][T20701] netlink: 'syz.1.4191': attribute type 3 has an invalid length. [ 870.484243][T20696] device wg2 entered promiscuous mode [ 871.862208][ T4279] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 872.756403][T20801] __nla_validate_parse: 4 callbacks suppressed [ 872.756422][T20801] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.4221'. [ 873.475382][T20832] netlink: 'syz.3.4229': attribute type 27 has an invalid length. [ 873.567425][T20832] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4229'. [ 873.834880][T20841] netlink: 'syz.5.4232': attribute type 4 has an invalid length. [ 873.868171][T20841] netlink: 152 bytes leftover after parsing attributes in process `syz.5.4232'. [ 873.928921][ T4279] Bluetooth: hci1: command 0x0409 tx timeout [ 874.383720][T20867] netlink: 'syz.5.4239': attribute type 3 has an invalid length. [ 874.412430][T20867] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4239'. [ 874.726343][T20879] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.4244'. [ 874.896565][T20877] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.4242'. [ 874.940337][T20877] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 875.801079][T20901] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.4250'. [ 875.891668][T20901] device bridge_slave_1 entered promiscuous mode [ 876.385763][T20909] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 876.419200][T20909] syzkaller1: linktype set to 773 [ 876.448894][T20908] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 876.454939][T20908] syzkaller1: linktype set to 773 [ 876.629247][T20919] IPv6: Can't replace route, no match found [ 877.449644][T20939] netlink: 'syz.4.4260': attribute type 10 has an invalid length. [ 877.557053][T20951] netlink: 'syz.3.4264': attribute type 3 has an invalid length. [ 877.599075][T20951] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4264'. [ 877.888705][T20953] can: request_module (can-proto-0) failed. [ 880.981451][T20977] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4270'. [ 881.349147][T20974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4269'. [ 881.830359][T20988] netlink: 'syz.1.4273': attribute type 27 has an invalid length. [ 881.868967][T20988] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4273'. [ 881.907276][T20988] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 882.230793][T20997] netlink: 144 bytes leftover after parsing attributes in process `syz.5.4277'. [ 882.283277][T20999] netlink: 'syz.5.4277': attribute type 29 has an invalid length. [ 882.299273][T20999] netlink: 'syz.5.4277': attribute type 29 has an invalid length. [ 882.320102][T20992] netlink: 'syz.3.4275': attribute type 2 has an invalid length. [ 882.328714][T20992] netlink: 'syz.3.4275': attribute type 8 has an invalid length. [ 882.438428][T20992] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4275'. [ 882.691932][T20999] netlink: 'syz.5.4277': attribute type 29 has an invalid length. [ 882.857383][T21003] netlink: 'syz.5.4277': attribute type 3 has an invalid length. [ 883.296938][T21016] netlink: 'syz.1.4284': attribute type 25 has an invalid length. [ 883.325079][T21016] netlink: 'syz.1.4284': attribute type 3 has an invalid length. [ 883.369153][T21016] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4284'. [ 883.399803][T21018] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.4282'. [ 884.515504][T21025] netlink: 'syz.4.4285': attribute type 7 has an invalid length. [ 886.837581][T21060] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.887008][T21060] device bridge_slave_1 left promiscuous mode [ 886.900309][T21060] bridge0: port 2(bridge_slave_1) entered disabled state [ 886.932076][T21060] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 887.188319][T21067] device syzkaller0 entered promiscuous mode [ 887.395486][T21074] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4298'. [ 887.983094][T21094] syz.0.4305[21094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 887.983218][T21094] syz.0.4305[21094] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 888.656698][T21098] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.4306'. [ 889.314651][T21107] sock: sock_timestamping_bind_phc: sock not bind to device [ 889.361911][T21110] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4309'. [ 889.393612][T21110] netlink: 43 bytes leftover after parsing attributes in process `syz.1.4309'. [ 889.459194][T21116] validate_nla: 1 callbacks suppressed [ 889.459215][T21116] netlink: 'syz.5.4312': attribute type 3 has an invalid length. [ 889.494513][T21116] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.4312'. [ 889.590156][T21121] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 889.597171][T21121] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 889.680500][T21128] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4316'. [ 889.970997][T21138] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 889.978034][T21138] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 891.241763][T21165] sock: sock_timestamping_bind_phc: sock not bind to device [ 891.281694][T21170] netlink: 'syz.1.4328': attribute type 29 has an invalid length. [ 891.312509][T21170] netlink: 'syz.1.4328': attribute type 29 has an invalid length. [ 891.339892][T21178] netlink: 'syz.1.4328': attribute type 29 has an invalid length. [ 892.139497][T21184] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4330'. [ 892.158652][T21188] netlink: 'syz.4.4332': attribute type 21 has an invalid length. [ 892.218999][T21188] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4332'. [ 893.385692][T21192] netlink: 'syz.5.4329': attribute type 21 has an invalid length. [ 893.419786][T21197] netlink: 'syz.3.4333': attribute type 13 has an invalid length. [ 893.439073][T21197] netlink: 172 bytes leftover after parsing attributes in process `syz.3.4333'. [ 893.482663][T21197] erspan0: refused to change device tx_queue_len [ 893.908169][T21201] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4334'. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.