last executing test programs: 7.2614663s ago: executing program 1 (id=3088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16], 0xffd3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x0, 0x6, 0xfe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10d6f3, 0xfffffffffffffffc, 0xcfb5, 0x1, 0x0, 0x4, 0x0, 0x0, 0x84000, 0x0, 0x1}, 0x0, 0xb, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000200), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r3, &(0x7f0000000240)={'batadv0', 0x32, 0x39}, 0xa) perf_event_open$cgroup(&(0x7f0000000340)={0x2, 0x80, 0x4, 0x87, 0x9, 0xc3, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x2, @perf_config_ext={0x2f0, 0xf72a}, 0x0, 0x3, 0xfffffff9, 0x3, 0x0, 0x9, 0xc, 0x0, 0x1, 0x0, 0x6}, r1, 0x10, 0xffffffffffffffff, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000001200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0xa, [@enum={0x2, 0x1, 0x0, 0x6, 0x4, [{0x6}]}]}, {0x0, [0x0, 0x61, 0x61, 0x2e, 0x2e, 0x5f, 0x30, 0x61]}}, 0x0, 0x36, 0x0, 0x1}, 0x28) write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="2d6e65745f7072696f20f53cc4127b47bf335ae5e85ff2608ea11ce6b86846db67b36ed32a03fb646517235f164784be7161400f2d9ce74afb07f2bb853950ff442559b39f23a886d7aec551c699c6557bf545ca0e72128301e65d9522d7676e9c5dd49b033dcd53f0dd759900fd62fa346ce4fd8d5b657151306c5c4d58c7dff52fe5c3b1d5a4bf65805b52ecd306559b9f18b7b81701de0e1b20ab81974dc6894b50ebc332760194a08297078b87"], 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv6\x00\x00s/\x8br\bc_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x90ih\xecd\'%\x11c\x91l,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x16016, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x3, 0x0, 0x7, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="5c00000014006b15c84e21008bf32c19020000f80200000044000200edb556a705251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b78000000000000", 0x5b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 6.158426147s ago: executing program 2 (id=3085): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x5b}, 0x28) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x5, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000380)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0), 0x0, 0x9b, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880), 0x8, 0x1040bb, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a40)={r1, &(0x7f0000000a80), &(0x7f0000000ac0)=""/164}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000b80), 0x43) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000bc0), 0x43) write$cgroup_subtree(r4, &(0x7f0000000c00)=ANY=[], 0x101d0) sendmsg$kcm(r4, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=ANY=[], 0x1458}, 0x240480d1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 6.05904048s ago: executing program 1 (id=3087): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7ff}, 0x105202, 0x400000, 0xbe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x1f, 0x0, 0x3000000, 0x3, 0x40000, r2, 0x8, '\x00', 0x0, r3, 0x5, 0x2, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0x200, 0x0, 0x0, 0xbf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 5.866688065s ago: executing program 1 (id=3092): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 5.735010548s ago: executing program 2 (id=3094): openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000180), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r5, &(0x7f0000000080), 0x12) r7 = openat$cgroup_ro(r6, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 5.587364422s ago: executing program 1 (id=3096): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r1, 0x110, 0x4, 0x0, 0x4) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000004a0850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, &(0x7f0000000040), 0x4) setsockopt$sock_attach_bpf(r5, 0x29, 0x6, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) setsockopt$sock_attach_bpf(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 4.991522886s ago: executing program 1 (id=3098): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xc10a, 0xac5d, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x3d27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNGETVNETLE(r3, 0x40107447, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x34, 0x0, 0x81, 0xfffffffe}, {0x20}, {0x0, 0x0, 0x0, 0x8}, {0x6}]}) 4.990878626s ago: executing program 4 (id=3100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d000000000000000000000000000000000000000300000000020000000300000000000000000000000100000d0000"], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) perf_event_open$cgroup(0x0, r0, 0xd, r2, 0x8) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b", &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r4, &(0x7f0000000b80)='syz0\x00', 0x1ff) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 4.546608498s ago: executing program 3 (id=3101): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xd, 0x4, &(0x7f0000000540)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x17, 0xd0}, [@ldst={0x6, 0x0, 0x5, 0x7}]}, &(0x7f0000000580)='GPL\x00', 0x4, 0x3e0, &(0x7f00000005c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f00000006c0), 0x0, 0x10, &(0x7f0000000700), 0x76}, 0x48) r3 = syz_clone(0x1000, &(0x7f0000000740)="63fc8afa50", 0x5, &(0x7f0000000780), &(0x7f00000007c0), 0x0) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xc, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000880)={r3, r4, 0x0, 0x1, &(0x7f00000008c0)='\x00'}, 0x30) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) recvmsg$unix(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2040) write$cgroup_subtree(r6, &(0x7f0000000180)=ANY=[@ANYRES8=r1, @ANYBLOB="3e971b"], 0x9a) 4.532942938s ago: executing program 2 (id=3102): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7ff}, 0x105202, 0x400000, 0xbe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x1f, 0x0, 0x3000000, 0x3, 0x40000, r2, 0x8, '\x00', 0x0, r3, 0x5, 0x2, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0x200, 0x0, 0x0, 0xbf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 4.315540793s ago: executing program 2 (id=3103): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d35, 0x82210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x5, 0x0, 0xfdffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = socket$kcm(0x11, 0x2, 0x0) close(r1) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x107, 0x12, &(0x7f00000000c0), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000000)='cpu&\t\t') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x1, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vcan0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8914, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8922, &(0x7f0000000080)) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x4008800) socket$kcm(0xa, 0x5, 0x73) socket$kcm(0x2, 0x5, 0x84) 4.311791023s ago: executing program 0 (id=3114): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7ff}, 0x105202, 0x400000, 0xbe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000031c0)={0x0, &(0x7f00000030c0)=""/224, 0x0, 0xe0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x1f, 0x0, 0x3000000, 0x3, 0x40000, r2, 0x8, '\x00', 0x0, r3, 0x5, 0x2, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0x200, 0x0, 0x0, 0xbf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 3.917961133s ago: executing program 0 (id=3104): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.735093398s ago: executing program 4 (id=3105): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d32, 0x24008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x14, 0x7, 0x1, 0x7, [{@rand_addr=0x64010101}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x5}]}]}}}], 0x48}, 0x200040c4) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000240)="809ef3a83992085464a9f7994345e6161463c4c5c60a9d3a45f267d3ee7f54d00c9c", 0x22}, {&(0x7f0000000380)}, {&(0x7f0000000440)="d262b40c402135fcfd3025ad22ea9f69291aaf443b0db6a6fcb6ff79a5307d7e4e299e922321883bd5782475771f85367c0486f57818d5d914cdcd848b70d48eca0f4ccd5b7dd0d1aecc69eaf11be5c1ceb418de55560b051b235edcbbc1230c5d803cd8bc72fb66342b8467d3f1064ca0f7dd3d75f07adf0db81833afc27d0c88beac90cb0f0cd76552d1bee717233f83a42fb371", 0x95}, {&(0x7f00000005c0)="66c89aeee39489650b4d13eb4524cbe217b2e3788627f7071534449f6cfed85dda7c8fedb0c3ac64146ca9325440cfa9ab55b37c870b7ce6d1c6a4de9034ec297923d916e3b3d908c4b2d393b312f63ac7e15d640e1dd28d79b48d218c03e3d062f71613b4b586097efc6b52aae8e69afd965191a6231f08475a27a068a6552d82e87637", 0x84}, {&(0x7f0000000680)="d728d82099c992c9f4de1ed694a2a67179e9b81fe9eaa9d9cf432e5bf0b8363f80271eacbe0f1e83dc459b3872433a2aa632c094d588b7320aff9456323b873695b4c1d1a2f7309a8ba40ecb986fc31688b654197f1ea2880fc9f9f04b72702c4c3f08cacbbcc9c0877b37672747bcd88b4a3c779e95c91e4f7c16035d47ad113b0254f6637aa35f53b39f15d89d91f1dc16834cae91440c117b5041d9c04c273ff1ff4a98fa0980", 0xa8}, {&(0x7f0000000740)="021d8d8f5ac9620a19341babcc080ab4c220aa44759a36322c00b5a8b840ae1d00ae40ff48cf1a027e91c1ad205cdb9808ec9237eedc611a70e12a75e151dbe81c36c20fd618f02dff68116a0ff2b52271d77e02fcf0a642", 0x58}], 0x6, &(0x7f00000008c0)=[@rights={{0x18, 0x1, 0x1, [r0, r0]}}, @rights={{0x10}}], 0x28, 0x1}, 0x10) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000000c0)=r2, 0x12) r3 = socket$kcm(0x10, 0x2, 0x4) r4 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001840)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r7 = openat$cgroup_devices(r6, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r7, &(0x7f0000000080)=ANY=[@ANYBLOB='b 7:', @ANYRESOCT], 0xd) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001880)="5c00000012006b949e3de3d86e6c1dffff137e03000000000000fcce1ef0f8001d000a00a0e6b1e517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.732594147s ago: executing program 0 (id=3117): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xc10a, 0xac5d, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x3d27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNGETVNETLE(r3, 0x40107447, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x34, 0x0, 0x81, 0xfffffffe}, {0x20}, {0x0, 0x0, 0x0, 0x8}, {0x6}]}) 3.731778248s ago: executing program 1 (id=3106): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x18, &(0x7f0000000a40)=ANY=[@ANYBLOB="bf16000000000000b7000000000000007b0af8ff000000007b0af0ff000000007b0ae8ff000000007b0ae0ff000000007b0ad8ff000000007b0ad0ff000000007b0ac8ff000000007b0ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac8ff00000000b70200007f000001632ae0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002000)={r0, 0x0, 0xe, 0x0, &(0x7f00000003c0)="e0278f7c5768793f40cc764532db", 0x0, 0x2800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x2000009, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext, 0x100080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910900000000000630aacff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) close(0xffffffffffffffff) close(0x3) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x80044944, &(0x7f0000000200)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x1c, &(0x7f0000000500)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x4, 0xe2, &(0x7f00000001c0)=""/226, 0x40f00}, 0x94) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = syz_clone(0x20000000, 0x0, 0x0, &(0x7f0000001e80), &(0x7f0000001ec0), &(0x7f0000000580)) r5 = syz_clone(0xa000600, 0x0, 0x0, &(0x7f00000000c0), 0x0, &(0x7f00000001c0)="d259c64c6d7ae45dfc4487680290e15660b6529648f69df9caebae42e566c7402f7c1099014cb0291071232b549694bb47c1b0ee1f776b6ab81bdaff4da90bfa057790f95eeb47b613e45c7ead0e53a6456006052f05fbf845acef14784bd32a76168a5803e3caec1987") bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000240)='GPL\x00'}, 0x30) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002080)={&(0x7f0000000340)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001d80)=[{&(0x7f00000003c0)="da0082e27e029227a7a5f9e05e069cb7461b48dfde1faf50235894ee4c92dd1aa1d76f8d0bcbc9b5e75287f13b5a5714903f658e6e4e777ddced70aee15bae0259abadce295607f5a2f89f59f2ca3c0b3e4408264c0f9869e4002499ada8cf8107121f1a24fbe77dad7ba338", 0x6c}, {&(0x7f0000000640)="ad6ecffc5e27c65d3e031a35c14012ce298c9f1d6325", 0x16}, {&(0x7f0000000940)="6f54e9d3c8d01bec4c9fbc23fd25aa55b0873840f86808bfdca8094c8a25adc394b15529a63cb4f9dba238c53e867eca3afd0208bf4910deef3005d015197afe764f285ecafe1d6c13eac47aba1dbb4e0c6b53cb03b07a7d66da028581e4b388b9de06a3fb494de386334b9bb17e776d3e9c67422005907f", 0x78}, {&(0x7f0000000ac0)}, {&(0x7f0000001c40)}], 0x5, &(0x7f0000001fc0)=[@rights={{0x1c, 0x1, 0x1, [r2, 0xffffffffffffffff, r3]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r4, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r5}}}], 0x80}, 0x20004000) perf_event_open(&(0x7f0000000240)={0x4, 0x80, 0x8c, 0x58, 0x3, 0x7f, 0x0, 0x7, 0x81020, 0xc, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, @perf_config_ext={0x7, 0x1}, 0x4101, 0x2, 0x7325be73, 0x5, 0x479, 0x10000, 0xf, 0x0, 0x7}, r4, 0x1, r1, 0x1) 3.666041029s ago: executing program 3 (id=3107): bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000004440)=@base={0x14, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) 2.897916878s ago: executing program 2 (id=3109): socket$kcm(0x21, 0x7, 0x2) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, r0, 0x8) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000380)={0x0, 0xfffffec9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8020, 0xc8, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x0, 0x0}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r4, &(0x7f00000005c0)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x5, @dev}, 0x80, &(0x7f0000000480)=[{0x0}], 0x1}, 0x20004050) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) recvmsg(r1, &(0x7f0000000580)={&(0x7f0000000b80)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, 0x0}, 0x2042) socketpair(0x25, 0x1, 0x2, &(0x7f0000000200)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) socket$kcm(0xf, 0x3, 0x2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r3, 0x58, &(0x7f0000000600)}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 2.897542628s ago: executing program 3 (id=3110): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f00000014c0)={&(0x7f00000000c0)=@ieee802154={0x24, @long={0x3, 0x1, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000000180)="aabcbc0b17f4360f7bf25ca7217645c0f3a281706c3a23c40b6905d48b82d2b01c82c8b3ae1776245cdcab1e9774a8b307ea7069325efb492859927c308dcfdc5660f7a5d6fbd038abf5a33b57b088696c57f94d651be9b9728a21f66a278df2e1e95aacf710c548d781f46c0b04a587", 0x70}, {&(0x7f0000000200)="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", 0xf00}, {0x0}], 0x3, &(0x7f0000001340)=[{0xe8, 0x115, 0x9, "3b4e64be995839d4c1991da1b2b35a7f976e11e258a3a1d6a8960eb6fdae642a2a94b06576cbedb410014498f0ed3675d63b540cc13532d45221470de4215a2ff6c3aeff7903a840ec0261dfbb669eb0e00295757ecb7080fd2363e092d2144e996f24dbf47ae99cf6177f7dfb17fe9582cb2019d0090841dbf3cb3ab7954f76b073ff48466a299736b16a3f6d9592ea9d655ed94ebb73b8253f299f2b6cf00ff6d6eaa79cfb5b706c90e36de4a22ff49d08bf636f02ab4f3dd3d4c06a80c83a3308f546638994ddbf833cb51376ce18316f5fb750"}, {0x78, 0x10d, 0x1, "f176c4155bf7e8aa3cc857f43f394a4e155e16d22164a10b51edb0fe3afe46399109937fb2b4a39a206b3ce03b34c4cc2b54e1ad3ab8f47f80544ac3a21a7479464fcc3b43e83ee044b41adbc22517ca4056d80553aa4982e3305718445b1a2e0d"}], 0x160}, 0x4000004) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xd, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r4, 0x84, 0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000000d2cf00003d36000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000180), 0x3, r5}, 0x38) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup(r6, 0x0, 0x200002, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r5, 0x0, &(0x7f00000002c0)=""/187}, 0x20) recvmsg$kcm(r4, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001500)=""/72, 0x48}], 0x1, &(0x7f00000015c0)=""/130, 0x82}, 0x12063) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e21, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x10) close(0x3) 2.897321268s ago: executing program 4 (id=3111): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000032000b07d25a806f090094f9105f9253", 0x14}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 2.490336939s ago: executing program 4 (id=3112): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @loopback}, 0x80, 0x0}, 0x20000001) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x104212, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001d00810ce00f80ecdb4cb9f207c804a01f000000810006fb0a0002000a0ada1b40d803000000000001", 0x2d}], 0x1, 0x0, 0x0, 0x5865}, 0x4000800) perf_event_open(&(0x7f0000000c40)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x67408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000560000009500000000000000b7c511bf50965de45992da9f46a58fbbbae4626131870ed76df6d8e7fe74f72ae9aeb0682f14cedf15a877d65c6ae1fdc462105f5e0c7c6d97795bf616214c72e20d51b65b492d1d90a6a333074ae6f282b885cf0190271900116257b1228ceb73a3087f87a3b19d78849d6c4ee4df8291623f7af17dd330bfa855ca147b6271"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x1, 0x4}, 0x0, 0x3, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0xb, r1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) r7 = socket$kcm(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="8500000019000000760000000000000027000000000800009500000000000000667f0c7ee76ae58cc18062bce3975ba022fb733e72b1f275f5083d567b4ad780d7664fe81ef35f0b0bec1128d351df080aaab6a7f1356be8408e34a4e722c145d8219bca1ac6a9e3da3565043c4294b2246562c9f623a0739bb9217fecce9cef022d82c783"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) sendmsg$kcm(r7, &(0x7f0000000bc0)={&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r7, {0x2, 0x4e23, @rand_addr=0x64010101}, 0x4, 0xffffffff, 0x3, 0xfffffffe}}, 0x80, 0x0}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x18) sendmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.476250959s ago: executing program 0 (id=3124): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x2, @empty}, 0x80, 0x0}, 0x20000001) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0xc10a, 0xac5d, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4, 0x0, 0x3d27}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2000000000, 0x10000}, 0x4800, 0x2, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) ioctl$TUNGETVNETLE(r3, 0x40107447, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000100)=[{0x34, 0x0, 0x81, 0xfffffffe}, {0x20}, {0x0, 0x0, 0x0, 0x8}, {0x6}]}) 2.276994264s ago: executing program 3 (id=3113): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b400000000000000791028000000000069001e000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) r1 = socket$kcm(0x10, 0x2, 0x10) r2 = socket$kcm(0x1e, 0x5, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r4 = socket$kcm(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5083df640217bd04, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) sendmsg$kcm(r4, &(0x7f0000000100)={&(0x7f0000001540)=@tipc, 0x80, 0x0}, 0x0) r5 = perf_event_open(0x0, 0xffffffffffffffff, 0x4000000000000, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000000c0), &(0x7f0000000100)=r5}, 0x20) sendmsg$kcm(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)="3e0000003a000511d25a80698c63940d0124fc602f6e35400c000200001ec00037153e370a000180dc861d3e000000000000006ccdfb0a8259104247f3", 0x3d}], 0x1, 0x0, 0x0, 0x39c}, 0x0) 1.834381365s ago: executing program 2 (id=3115): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r0}, 0xfed0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb47, 0x4}, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x7}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x100000000, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 1.63260046s ago: executing program 3 (id=3116): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x0, 0x0, &(0x7f0000000380)='GPL\x00', 0x20a, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20}, 0x94) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000440)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x11003, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, @perf_config_ext={0x7ff}, 0x105202, 0x400000, 0xbe, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x200000c0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) r2 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000031c0)={0x0, &(0x7f00000030c0)=""/224, 0x0, 0xe0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=@base={0x1f, 0x0, 0x3000000, 0x3, 0x40000, r2, 0x8, '\x00', 0x0, r3, 0x5, 0x2, 0x1}, 0x50) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000140)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x1ff, 0xffff0000, 0x0, 0x0, 0x102ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x200}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c012, 0x200, 0x0, 0x0, 0xbf3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x8002, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r5, 0x0, 0x0}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r4}, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)) 1.396189656s ago: executing program 0 (id=3118): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d000000000000000000000000000000000000000300000000020000000300000000000000000000000100000d0000"], &(0x7f0000000140)=""/237, 0x5a, 0xed, 0x1}, 0x28) perf_event_open$cgroup(0x0, r0, 0xd, r2, 0x8) close(0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000080)='memory.numa_stat\x00', 0x80040, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={&(0x7f00000003c0)="f51f559c934242a941825ff2ab27f7a982883cc9f9f8cb8b459a5134f8a3aae2f140754b348d5087ee64e882d928b6969c41c4ae0c47b0e15d8794e9a6a3e420842dff5f16ba1ee0b47fc25ee8b52ee6d6625f58307a28820c338914764b51be3557a841378d88ae4ee1f150332ad6f8510733639b3d14b2e7fd57c5039cf555beed5c9f3ff9992b4a20a3a9af7164cf7f2b11c44b30720dbc5fc49cf88a77b4c6ba9980d891bfbed094974187840e67a3ae54a6f3bbdaa2617e6b", &(0x7f0000000900)=""/170, &(0x7f0000000c40), &(0x7f0000000a40), 0x80000001}, 0x38) mkdirat$cgroup(r4, &(0x7f0000000b80)='syz0\x00', 0x1ff) socketpair(0x18, 0x2, 0x1, &(0x7f0000000000)) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 1.23756436s ago: executing program 4 (id=3119): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)="5c000000120007ab9a3fe3d86e17aa0a076b876c1d0048007ea6f063160af36504000100381c1500", 0x28}, {&(0x7f0000000180)="83d2ff5f0000319fd2898a0cc6d6703b87eb29037b09bc7e64f918fa3be4664d327d90424d550300"/52, 0x34}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 9.130811ms ago: executing program 0 (id=3120): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) socketpair(0x27, 0x5, 0x10, &(0x7f0000000240)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10004, 0x2, @perf_config_ext, 0x10c002, 0xac5d, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, 0x0, 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.875271ms ago: executing program 3 (id=3121): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x9, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x80000001}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0x69, &(0x7f0000000500)=""/105, 0x40f00, 0xc, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x5, 0xb, 0x8001, 0x7}, 0x10, 0xcec4, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000006c0), 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x702, 0x36, 0x0, &(0x7f0000000380)="e460334470b8d480eb20c15286dda4fba8285e2e31ca72823a29dad4781041a996430bbe5ecac76a351df831cdb98842af6450b2abf5", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x400010, 0xffffffffffffffff, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1f, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x10}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="020000000006000000", @ANYBLOB='\x00'/18], 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xc807}, 0x400, 0x2d, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000380)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x2, @perf_bp={0x0, 0x1}, 0x10eda2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x6c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x200000000000800}, 0x0, 0x0, 0x0, 0x7, 0x6, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 0s ago: executing program 4 (id=3122): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfffbffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x108, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x100000000, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711009000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r0, &(0x7f0000000dc0)={&(0x7f00000001c0)=@ax25={{0x3, @bcast, 0x3}, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000440)}, {0x0}, {&(0x7f0000000680)="b0425ada33765ee434fa40908bf4e31c2e2b20eb2cb23fe5fcc0ceae9d9eaf84bd50f01bcacfab0f6cbc3839ee2d80fc75828d2a71203cd648f1c2abc3", 0x3d}, {&(0x7f00000009c0)="3f87475065314c8e059cd80dec6880525f51463263d7925f94c895735ec8f67ca5a521d2769d887b31bfcda24f6505aa7bdd362d5a431f1091a901ef984ccd197a7aa2330332a4a22444981505d3ddb8b6934e80f55f263f21cd1e4efa417f6aec7645cd260e337f521a3816aedda8f41f2a8d37ab1f4cbb65ffc13185aa8b34532a69c1", 0x84}, {&(0x7f0000000a80)="e56e18bd220eced4539f2df6d21a9084e95854cdead80c2886a33c0bba79da90db97df9504c40eb4420d1a5c4ccad8e9576a11ee062e6315d9560ce2d0a1e41b71b77e21da3c29f53d0e36aeb1c78cad08", 0x51}, {&(0x7f0000000b00)="57c532a165f58417836bdfd7ff90784a759700325bc3c37f0916076dbb9aa91b8a80a8415c6bb641c62aab2b26d2348d734cf281", 0x34}], 0x6, &(0x7f0000000bc0)=[{0x60, 0xff, 0x2, "634431d33f5ac2515ca9bb530583c76f79ff98881776647669b4edf09f493e000d39ade69c5ca6b7a8d9886faeb1ee39b3ad9db39989568421537ea6cbf89e977940eb73fc8160efaeb090fd"}, {0x88, 0x6, 0x28, "8a2b2c5384f3e502f2b7309a0c92145f100e93a472e8678fe9567c75fbc2803247a8ac524d6dfce4856d96bd000fae283041f4f019d962cf6440f2c2c473cddf8beba5ce3b7b98e39999ee0de6ac46572098dbf25038154cb73dc0f5378c8d148ea08b56eef916fdd3d06ec37870af5ff42267e07ea2ac68"}, {0xe0, 0x109, 0x523, "5e473565aed0f973473c5a0623378a45b98846b9e2308aecb3b649b7d69d460f0ad6640e9e45ce1b84ef064604bd2c441029173c0502095a0af0d3b909c2e1b0657d653600ddde34bcde7f0b19d0ca78ecee6b1a8d43ae4ca9ddbd1f48780d7c57698edc32dd3be0d9bcb66ee28342a4058a00f9934ac543b3c3c6411025c54074466018f097dc478d641613a75d1351953568f762ac7843bf6fa2301f244e74d8ffdcb76ff6ef9ef68364eb4bd197e68302b863264c504f8fa488568016be37275d11e4aade380a41f4edbe6af7e874"}], 0x1c8}, 0x811) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1e7c2373, 0x9}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x9a) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a800000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): ready exists on: batadv_slave_1 [ 92.025633][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.036101][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.046806][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.058533][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.077633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.089834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.099328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.108599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.152719][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.172575][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.185311][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.194965][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.222481][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.243495][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.257705][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.382341][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.414743][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.443508][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.473226][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.496557][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.506027][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.519914][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.539730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.556535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.627343][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.657060][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.681116][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.774983][ T4346] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.852617][ T4346] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.904994][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.195094][ T4382] netlink: 'syz.2.3': attribute type 4 has an invalid length. [ 93.225691][ T4382] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.3'. [ 93.539433][ T4390] netlink: 'syz.3.10': attribute type 10 has an invalid length. [ 94.042036][ T4390] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 94.164695][ T4379] syz.2.3 (4379) used greatest stack depth: 16608 bytes left [ 96.115134][ T4412] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.13'. [ 96.731366][ T4429] Zero length message leads to an empty skb [ 97.790301][ T4423] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 97.864562][ T4423] team0 (unregistering): Port device team_slave_0 removed [ 97.895424][ T4423] team0 (unregistering): Port device team_slave_1 removed [ 98.646668][ T4450] syz.3.24 uses obsolete (PF_INET,SOCK_PACKET) [ 99.109722][ T4438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22'. [ 103.116142][ T4461] netlink: 'syz.2.27': attribute type 10 has an invalid length. [ 103.137406][ T4461] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.805058][ T4485] netlink: 'syz.1.36': attribute type 10 has an invalid length. [ 103.886701][ T4485] team0 (unregistering): Port device team_slave_0 removed [ 103.909947][ T4485] team0 (unregistering): Port device team_slave_1 removed [ 105.395173][ T4493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40'. [ 111.955588][ T4538] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.55'. [ 112.049453][ T4536] netlink: 'syz.2.53': attribute type 10 has an invalid length. [ 112.569885][ T4536] team0 (unregistering): Port device team_slave_0 removed [ 112.628500][ T4536] team0 (unregistering): Port device team_slave_1 removed [ 112.937077][ T4558] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.75'. [ 118.958291][ T4598] netlink: 'syz.0.93': attribute type 10 has an invalid length. [ 119.157341][ T4616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.85'. [ 119.307245][ T4618] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.96'. [ 121.548252][ T4652] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.109'. [ 122.472640][ T4655] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 124.624670][ T4662] netlink: 132 bytes leftover after parsing attributes in process `syz.2.103'. [ 125.890833][ T4687] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.114'. [ 128.977318][ T4700] netlink: 'syz.1.118': attribute type 10 has an invalid length. [ 129.008398][ T4700] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.022666][ T4700] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.591225][ T4721] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 130.607773][ T4721] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.125'. [ 130.622300][ T4721] netlink: 'syz.2.125': attribute type 29 has an invalid length. [ 130.649383][ T4721] netlink: 'syz.2.125': attribute type 29 has an invalid length. [ 132.255279][ T4734] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.129'. [ 132.717513][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.724476][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.803875][ T4745] netlink: 'syz.3.135': attribute type 10 has an invalid length. [ 132.816814][ T4745] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.827557][ T4745] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.235061][ T4754] netlink: 72 bytes leftover after parsing attributes in process `syz.4.139'. [ 134.979698][ T4790] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.151'. [ 136.220679][ T4813] netlink: 72 bytes leftover after parsing attributes in process `syz.1.158'. [ 136.262046][ T4815] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 136.268143][ T4815] dvmrp1: ignored: set checksum disabled [ 139.468857][ T4846] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.172'. [ 142.052958][ T4860] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.190'. [ 144.628778][ T4896] delete_channel: no stack [ 144.636944][ T4896] delete_channel: no stack [ 146.947424][ T4922] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.201'. [ 147.292311][ T4929] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.205'. [ 152.339102][ T4993] netlink: 'syz.4.228': attribute type 25 has an invalid length. [ 152.383327][ T4993] netlink: 'syz.4.228': attribute type 29 has an invalid length. [ 152.456508][ T4995] netlink: 5 bytes leftover after parsing attributes in process `syz.4.228'. [ 152.808870][ T5004] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.229'. [ 155.143647][ T5016] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 155.160713][ T5011] netlink: 'syz.4.236': attribute type 1 has an invalid length. [ 155.190620][ T5011] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.236'. [ 155.213571][ T5016] netlink: 'syz.4.236': attribute type 29 has an invalid length. [ 156.261954][ T5038] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.248'. [ 156.410595][ T5046] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.251'. [ 160.108938][ T5089] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.264'. [ 160.188864][ T5090] delete_channel: no stack [ 160.250375][ T5090] delete_channel: no stack [ 163.682087][ T5110] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.275'. [ 164.416813][ T5126] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.280'. [ 164.526764][ T5132] netlink: 'syz.1.283': attribute type 10 has an invalid length. [ 166.219695][ T5160] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.296'. [ 167.256552][ T5173] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.311'. [ 167.617303][ T5180] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.313'. [ 172.945316][ T5230] netlink: 'syz.0.332': attribute type 25 has an invalid length. [ 172.970397][ T5230] netlink: 'syz.0.332': attribute type 29 has an invalid length. [ 173.012489][ T5230] netlink: 5 bytes leftover after parsing attributes in process `syz.0.332'. [ 173.096827][ T5233] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.321'. [ 177.171841][ T5269] netlink: 'syz.1.338': attribute type 25 has an invalid length. [ 177.240620][ T5269] netlink: 'syz.1.338': attribute type 29 has an invalid length. [ 177.268541][ T5273] netlink: 5 bytes leftover after parsing attributes in process `syz.1.338'. [ 178.173683][ T5275] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.340'. [ 180.604044][ T5296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.347'. [ 180.676107][ T5296] netlink: 'syz.2.347': attribute type 12 has an invalid length. [ 180.721468][ T5296] netlink: 132 bytes leftover after parsing attributes in process `syz.2.347'. [ 181.384247][ T5319] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.355'. [ 184.026597][ T5328] netlink: 'syz.3.357': attribute type 10 has an invalid length. [ 184.437184][ T5338] netlink: 'syz.1.361': attribute type 1 has an invalid length. [ 184.561230][ T5338] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.361'. [ 184.713181][ T5339] netlink: 'syz.1.361': attribute type 29 has an invalid length. [ 185.014340][ T5339] netlink: 'syz.1.361': attribute type 29 has an invalid length. [ 187.294790][ T5388] netlink: 'syz.0.378': attribute type 1 has an invalid length. [ 187.342679][ T5388] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.378'. [ 187.410523][ T5391] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 189.458798][ T5391] netlink: 'syz.0.378': attribute type 29 has an invalid length. [ 189.468811][ T5398] netlink: 'syz.2.381': attribute type 10 has an invalid length. [ 189.895212][ T5404] netlink: 128 bytes leftover after parsing attributes in process `syz.0.383'. [ 189.936714][ T5404] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 189.995836][ T5404] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.063048][ T5414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.397'. [ 191.137705][ T5414] netlink: 'syz.3.397': attribute type 12 has an invalid length. [ 191.170809][ T5414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.397'. [ 192.944352][ T5447] netlink: 'syz.3.400': attribute type 13 has an invalid length. [ 192.958592][ T5447] netlink: 172 bytes leftover after parsing attributes in process `syz.3.400'. [ 193.786826][ T5468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.408'. [ 193.841405][ T5468] netlink: 'syz.1.408': attribute type 12 has an invalid length. [ 193.860358][ T5468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.408'. [ 194.159886][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.166392][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.750542][ T5478] netlink: 'syz.4.413': attribute type 13 has an invalid length. [ 197.766174][ T5478] netlink: 172 bytes leftover after parsing attributes in process `syz.4.413'. [ 199.869687][ T5491] netlink: 'syz.3.415': attribute type 10 has an invalid length. [ 200.260522][ T5504] netlink: 15866 bytes leftover after parsing attributes in process `syz.2.433'. [ 200.273165][ T5502] Ÿë: port 1(veth0_to_team) entered blocking state [ 200.283023][ T5502] Ÿë: port 1(veth0_to_team) entered disabled state [ 200.292190][ T5502] device veth0_to_team entered promiscuous mode [ 201.279116][ T5514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.424'. [ 201.303874][ T5517] netlink: 'syz.0.424': attribute type 12 has an invalid length. [ 201.314922][ T5517] netlink: 132 bytes leftover after parsing attributes in process `syz.0.424'. [ 202.430218][ T5534] netlink: 'syz.0.431': attribute type 13 has an invalid length. [ 202.460401][ T5534] netlink: 172 bytes leftover after parsing attributes in process `syz.0.431'. [ 204.181916][ T5550] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 204.915734][ T5550] team0: Device nlmon0 is of different type [ 205.055327][ T5556] Ÿë: port 1(veth0_to_team) entered blocking state [ 205.080244][ T5556] Ÿë: port 1(veth0_to_team) entered disabled state [ 205.128690][ T5556] device veth0_to_team entered promiscuous mode [ 205.253346][ T5566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.445'. [ 205.267103][ T5566] netlink: 'syz.3.445': attribute type 12 has an invalid length. [ 205.282200][ T5566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.445'. [ 206.460122][ T4278] Bluetooth: hci0: command 0x0406 tx timeout [ 206.460469][ T49] Bluetooth: hci4: command 0x0406 tx timeout [ 206.466680][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 206.466722][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 206.466761][ T4278] Bluetooth: hci2: command 0x0406 tx timeout [ 206.970606][ T5599] netlink: 'syz.0.458': attribute type 10 has an invalid length. [ 207.012347][ T5597] Ÿë: port 1(veth0_to_team) entered blocking state [ 207.043664][ T5597] Ÿë: port 1(veth0_to_team) entered disabled state [ 207.067660][ T5597] device veth0_to_team entered promiscuous mode [ 207.329522][ T5607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.462'. [ 207.370683][ T5607] netlink: 'syz.0.462': attribute type 12 has an invalid length. [ 207.387314][ T5607] netlink: 132 bytes leftover after parsing attributes in process `syz.0.462'. [ 208.062149][ T4346] tipc: Subscription rejected, illegal request [ 209.227736][ T5643] netlink: 'syz.2.473': attribute type 10 has an invalid length. [ 209.813866][ T5659] netlink: 132 bytes leftover after parsing attributes in process `syz.4.479'. [ 209.876868][ T5662] netlink: 'syz.4.479': attribute type 12 has an invalid length. [ 209.927072][ T5662] netlink: 132 bytes leftover after parsing attributes in process `syz.4.479'. [ 211.633304][ T5681] netlink: 'syz.2.485': attribute type 25 has an invalid length. [ 211.646530][ T5681] netlink: 'syz.2.485': attribute type 29 has an invalid length. [ 211.712754][ T5685] netlink: 5 bytes leftover after parsing attributes in process `syz.2.485'. [ 221.536772][ T41] tipc: Subscription rejected, illegal request [ 222.111021][ T5707] netlink: 132 bytes leftover after parsing attributes in process `syz.3.502'. [ 222.145256][ T5712] netlink: 'syz.3.502': attribute type 12 has an invalid length. [ 222.158333][ T5712] netlink: 132 bytes leftover after parsing attributes in process `syz.3.502'. [ 222.589744][ T5741] netlink: 'syz.3.514': attribute type 10 has an invalid length. [ 223.067608][ T5750] netlink: 'syz.2.519': attribute type 7 has an invalid length. [ 223.102571][ T5750] netlink: 191184 bytes leftover after parsing attributes in process `syz.2.519'. [ 226.428631][ T5785] netlink: 'syz.0.533': attribute type 10 has an invalid length. [ 227.060773][ T5796] netlink: 'syz.4.538': attribute type 7 has an invalid length. [ 227.090756][ T5796] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.538'. [ 230.930842][ T49] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 231.779812][ T5828] netlink: 'syz.3.552': attribute type 7 has an invalid length. [ 231.805908][ T5828] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.552'. [ 231.859367][ T5830] netlink: 'syz.1.553': attribute type 2 has an invalid length. [ 231.907768][ T5830] netlink: 'syz.1.553': attribute type 1 has an invalid length. [ 232.223954][ T5838] netlink: 830 bytes leftover after parsing attributes in process `syz.0.556'. [ 232.302856][ T49] Bluetooth: hci1: unexpected event 0x3b length: 15 > 10 [ 234.426047][ T5872] netlink: 'syz.0.579': attribute type 10 has an invalid length. [ 234.538505][ T5881] netlink: 'syz.1.568': attribute type 7 has an invalid length. [ 234.619663][ T5881] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.568'. [ 234.799935][ T5885] netlink: 830 bytes leftover after parsing attributes in process `syz.4.572'. [ 234.824524][ T5883] netlink: 'syz.2.571': attribute type 2 has an invalid length. [ 234.847238][ T5883] netlink: 'syz.2.571': attribute type 1 has an invalid length. [ 235.282971][ T5900] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.581'. [ 235.677017][ T5912] netlink: 'syz.2.585': attribute type 10 has an invalid length. [ 236.524480][ T5930] netlink: 'syz.2.590': attribute type 19 has an invalid length. [ 236.534477][ T5930] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.590'. [ 236.545704][ T5932] netlink: 'syz.3.591': attribute type 2 has an invalid length. [ 236.557140][ T5932] netlink: 132 bytes leftover after parsing attributes in process `syz.3.591'. [ 236.583865][ T5934] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 236.599774][ T5937] netlink: 132 bytes leftover after parsing attributes in process `syz.3.591'. [ 237.711458][ T5944] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.596'. [ 237.817016][ T5947] validate_nla: 3 callbacks suppressed [ 237.817054][ T5947] netlink: 'syz.3.595': attribute type 2 has an invalid length. [ 237.841208][ T5947] netlink: 'syz.3.595': attribute type 1 has an invalid length. [ 238.363299][ T5963] netlink: 'syz.2.604': attribute type 10 has an invalid length. [ 239.140851][ T5976] netlink: 5 bytes leftover after parsing attributes in process `syz.0.609'. [ 239.170926][ T5978] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.613'. [ 239.571274][ T5989] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.628'. [ 239.994548][ T6004] netlink: 'syz.0.622': attribute type 2 has an invalid length. [ 240.096201][ T6004] netlink: 'syz.0.622': attribute type 1 has an invalid length. [ 240.556383][ T6013] netlink: 'syz.3.627': attribute type 10 has an invalid length. [ 241.379234][ T6031] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.635'. [ 241.986095][ T6047] netlink: 'syz.4.642': attribute type 2 has an invalid length. [ 242.044474][ T6047] netlink: 'syz.4.642': attribute type 1 has an invalid length. [ 244.858902][ T6068] netlink: 5 bytes leftover after parsing attributes in process `syz.2.648'. [ 244.900715][ T6066] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.651'. [ 244.916826][ T6072] netlink: 'syz.3.649': attribute type 19 has an invalid length. [ 244.950791][ T6072] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.649'. [ 247.816411][ T6093] netlink: 'syz.1.658': attribute type 2 has an invalid length. [ 247.849487][ T6093] netlink: 'syz.1.658': attribute type 1 has an invalid length. [ 248.719843][ T6107] netlink: 5 bytes leftover after parsing attributes in process `syz.4.667'. [ 248.729344][ T6117] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.669'. [ 253.820155][ T6121] netlink: 'syz.2.670': attribute type 10 has an invalid length. [ 253.943673][ T6138] netlink: 'syz.1.674': attribute type 19 has an invalid length. [ 253.951905][ T6138] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.674'. [ 253.962586][ T6148] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 255.583178][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.589556][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.158010][ T6162] netlink: 5 bytes leftover after parsing attributes in process `syz.0.685'. [ 257.642624][ T6173] netlink: 16170 bytes leftover after parsing attributes in process `syz.4.692'. [ 257.718127][ T6178] netlink: 'syz.3.693': attribute type 7 has an invalid length. [ 257.750485][ T6178] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.693'. [ 257.902447][ T6181] netlink: 'syz.1.691': attribute type 13 has an invalid length. [ 257.963788][ T6181] netlink: 172 bytes leftover after parsing attributes in process `syz.1.691'. [ 258.019790][ T6188] netlink: 'syz.3.696': attribute type 3 has an invalid length. [ 258.029503][ T6188] netlink: 'syz.3.696': attribute type 1 has an invalid length. [ 258.045932][ T6188] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.696'. [ 258.106225][ T6185] netlink: 'syz.0.695': attribute type 2 has an invalid length. [ 258.123481][ T6185] netlink: 'syz.0.695': attribute type 1 has an invalid length. [ 258.681014][ T6196] netlink: 'syz.3.701': attribute type 10 has an invalid length. [ 258.924356][ T6205] netlink: 5 bytes leftover after parsing attributes in process `syz.4.703'. [ 260.702856][ T47] wlan1: Trigger new scan to find an IBSS to join [ 260.840573][ T6217] netlink: 16170 bytes leftover after parsing attributes in process `syz.1.709'. [ 261.143800][ T6230] netlink: 'syz.4.712': attribute type 7 has an invalid length. [ 261.190399][ T6230] netlink: 191184 bytes leftover after parsing attributes in process `syz.4.712'. [ 261.226417][ T6235] netlink: 'syz.2.714': attribute type 2 has an invalid length. [ 261.237934][ T6235] netlink: 'syz.2.714': attribute type 1 has an invalid length. [ 262.138695][ T6255] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 262.171359][ T6257] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 262.232748][ T6258] Driver unsupported XDP return value 0 on prog (id 395) dev N/A, expect packet loss! [ 262.246787][ T6255] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 262.407505][ T6255] netlink: 'syz.3.725': attribute type 29 has an invalid length. [ 263.322283][ T6266] netlink: 'syz.3.728': attribute type 10 has an invalid length. [ 263.348566][ T6266] netlink: 2 bytes leftover after parsing attributes in process `syz.3.728'. [ 263.385821][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.393324][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.401825][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.409038][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.452769][ T6266] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 263.558041][ T6276] netlink: 'syz.2.730': attribute type 13 has an invalid length. [ 263.588737][ T6276] netlink: 172 bytes leftover after parsing attributes in process `syz.2.730'. [ 264.790480][ T9] wlan1: Trigger new scan to find an IBSS to join [ 264.801361][ T47] wlan1: Trigger new scan to find an IBSS to join [ 264.892070][ T57] wlan1: Creating new IBSS network, BSSID 3e:f1:a8:da:aa:81 [ 266.584928][ T6289] netlink: 'syz.1.737': attribute type 39 has an invalid length. [ 266.638000][ T6302] netlink: 'syz.2.739': attribute type 2 has an invalid length. [ 266.645863][ T6302] netlink: 'syz.2.739': attribute type 8 has an invalid length. [ 266.657281][ T6302] netlink: 132 bytes leftover after parsing attributes in process `syz.2.739'. [ 266.667236][ T6301] netlink: 'syz.2.739': attribute type 2 has an invalid length. [ 266.675232][ T6301] netlink: 'syz.2.739': attribute type 8 has an invalid length. [ 266.684272][ T6301] netlink: 132 bytes leftover after parsing attributes in process `syz.2.739'. [ 267.692963][ T6324] netlink: 'syz.0.748': attribute type 10 has an invalid length. [ 267.726774][ T6324] netlink: 2 bytes leftover after parsing attributes in process `syz.0.748'. [ 267.751262][ T6324] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.787421][ T6324] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.106332][ T6324] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.116864][ T6324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.131859][ T6324] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.142536][ T6324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.279350][ T6324] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 268.294624][ T6331] netlink: 'syz.4.752': attribute type 9 has an invalid length. [ 268.310628][ T6331] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.752'. [ 268.668159][ T6337] netlink: 'syz.4.755': attribute type 29 has an invalid length. [ 268.702743][ T4346] wlan1: Trigger new scan to find an IBSS to join [ 268.722813][ T6337] netlink: 'syz.4.755': attribute type 29 has an invalid length. [ 269.139286][ T6340] netlink: 'syz.4.755': attribute type 29 has an invalid length. [ 270.782388][ T70] wlan1: Creating new IBSS network, BSSID f2:da:b2:11:ef:4e [ 271.710342][ T6361] validate_nla: 1 callbacks suppressed [ 271.710358][ T6361] netlink: 'syz.1.772': attribute type 29 has an invalid length. [ 272.508307][ T6380] netlink: 'syz.2.766': attribute type 10 has an invalid length. [ 272.544788][ T6380] netlink: 2 bytes leftover after parsing attributes in process `syz.2.766'. [ 272.584004][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.610780][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.978240][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.988447][ T6380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.006214][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.017255][ T6380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.325662][ T6380] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 273.366519][ T6391] netlink: 'syz.0.768': attribute type 9 has an invalid length. [ 273.379385][ T6391] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.768'. [ 273.401135][ T6394] netlink: 188 bytes leftover after parsing attributes in process `syz.3.770'. [ 273.970318][ T6399] netlink: 'syz.2.786': attribute type 10 has an invalid length. [ 273.999920][ T6399] netlink: 2 bytes leftover after parsing attributes in process `syz.2.786'. [ 274.080462][ T6399] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.093962][ T6399] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.349416][ T6418] netlink: 'syz.3.777': attribute type 10 has an invalid length. [ 274.385022][ T6418] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 274.441502][ T6419] netlink: 40 bytes leftover after parsing attributes in process `syz.3.777'. [ 274.493074][ T6419] netlink: 'syz.3.777': attribute type 11 has an invalid length. [ 275.094611][ T6418] device caif0 entered promiscuous mode [ 275.103196][ T6418] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 275.150438][ T6416] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 275.200188][ T6416] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 275.632530][ T6432] hsr0: VLAN not yet supported [ 275.835833][ T6443] netlink: 188 bytes leftover after parsing attributes in process `syz.2.787'. [ 279.143553][ T6456] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 279.174266][ T6456] netlink: 40 bytes leftover after parsing attributes in process `syz.4.790'. [ 279.231824][ T6456] batman_adv: batadv0: Adding interface: vlan1 [ 279.250850][ T6456] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.413570][ T6456] batman_adv: batadv0: Interface activated: vlan1 [ 279.711965][ T6466] netlink: 'syz.2.793': attribute type 3 has an invalid length. [ 279.719806][ T6466] netlink: 'syz.2.793': attribute type 1 has an invalid length. [ 279.745411][ T6466] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.793'. [ 280.414730][ T6468] netlink: 'syz.3.794': attribute type 10 has an invalid length. [ 280.430800][ T6468] netlink: 2 bytes leftover after parsing attributes in process `syz.3.794'. [ 280.486924][ T6468] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.505654][ T6468] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.733403][ T6480] netlink: 'syz.0.799': attribute type 10 has an invalid length. [ 280.770157][ T6480] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 280.783453][ T6477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.799'. [ 280.826594][ T6480] device caif0 entered promiscuous mode [ 280.836319][ T6477] netlink: 'syz.0.799': attribute type 11 has an invalid length. [ 280.867090][ T6480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 280.925346][ T57] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 280.946938][ T57] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 281.293535][ T6487] netlink: 'syz.1.814': attribute type 10 has an invalid length. [ 281.308440][ T6487] netlink: 2 bytes leftover after parsing attributes in process `syz.1.814'. [ 281.447603][ T6487] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.459024][ T6487] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.472279][ T6487] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.483193][ T6487] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.532610][ T6487] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 281.547169][ T6490] netlink: 188 bytes leftover after parsing attributes in process `syz.0.803'. [ 281.976720][ T6506] netlink: 'syz.0.808': attribute type 3 has an invalid length. [ 282.048320][ T6506] netlink: 'syz.0.808': attribute type 1 has an invalid length. [ 282.110605][ T6506] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.808'. [ 287.182512][ T6509] netlink: 'syz.0.809': attribute type 10 has an invalid length. [ 287.190781][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.809'. [ 287.200940][ T6509] batman_adv: batadv0: Adding interface: vlan1 [ 287.207175][ T6509] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.239283][ T6509] batman_adv: batadv0: Interface activated: vlan1 [ 287.248924][ T6513] netlink: 'syz.1.822': attribute type 10 has an invalid length. [ 287.260708][ T6513] netlink: 2 bytes leftover after parsing attributes in process `syz.1.822'. [ 287.280459][ T6513] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.287749][ T6513] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.388351][ T6516] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 288.958147][ T6537] netlink: 'syz.1.818': attribute type 10 has an invalid length. [ 288.980229][ T6537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'. [ 289.018025][ T6539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.818'. [ 289.053602][ T6539] netlink: 'syz.1.818': attribute type 11 has an invalid length. [ 291.486586][ T6537] device caif0 entered promiscuous mode [ 291.520059][ T6537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 291.751257][ T6543] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.821'. [ 292.045700][ T6550] netlink: 152 bytes leftover after parsing attributes in process `syz.0.825'. [ 296.865337][ T6567] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 297.528555][ T6580] netlink: 'syz.4.837': attribute type 11 has an invalid length. [ 297.543555][ T6580] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.837'. [ 297.947992][ T6582] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.838'. [ 298.187893][ T6588] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.842'. [ 298.218304][ T6587] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.238021][ T6592] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.850'. [ 300.095168][ T6618] netlink: 'syz.2.853': attribute type 11 has an invalid length. [ 300.124240][ T6618] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.853'. [ 300.537615][ T6624] netlink: 'syz.3.856': attribute type 3 has an invalid length. [ 300.552782][ T6624] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.856'. [ 302.230071][ T6626] netlink: 152 bytes leftover after parsing attributes in process `syz.3.857'. [ 302.498434][ T6635] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.859'. [ 303.045865][ T6656] netlink: 'syz.2.867': attribute type 3 has an invalid length. [ 303.077736][ T6656] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.867'. [ 303.473176][ T6660] netlink: 'syz.4.880': attribute type 3 has an invalid length. [ 303.507334][ T6660] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.880'. [ 303.610684][ T6663] netlink: 152 bytes leftover after parsing attributes in process `syz.2.870'. [ 303.843854][ T6670] netlink: 'syz.1.871': attribute type 3 has an invalid length. [ 303.980956][ T6670] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.871'. [ 304.111920][ T6671] netlink: 'syz.1.871': attribute type 21 has an invalid length. [ 304.161149][ T6671] netlink: 128 bytes leftover after parsing attributes in process `syz.1.871'. [ 304.282712][ T6671] netlink: 'syz.1.871': attribute type 4 has an invalid length. [ 304.423846][ T6671] netlink: 3 bytes leftover after parsing attributes in process `syz.1.871'. [ 304.781218][ T6674] netlink: 'syz.0.884': attribute type 3 has an invalid length. [ 304.789027][ T6674] netlink: 'syz.0.884': attribute type 1 has an invalid length. [ 304.825427][ T6674] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.884'. [ 305.102305][ T6681] netlink: 'syz.1.887': attribute type 3 has an invalid length. [ 305.180362][ T6681] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 305.225472][ T6681] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.887'. [ 305.828044][ T6697] netlink: 196 bytes leftover after parsing attributes in process `syz.0.881'. [ 305.883245][ T6697] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 306.485251][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.537576][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.065382][ T6702] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.092088][ T6702] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.521696][ T6723] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.890'. [ 310.573699][ T6726] netlink: 'syz.1.893': attribute type 3 has an invalid length. [ 310.660235][ T6726] netlink: 'syz.1.893': attribute type 1 has an invalid length. [ 310.779102][ T6726] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.893'. [ 310.939799][ T6735] netlink: 'syz.4.892': attribute type 25 has an invalid length. [ 310.991560][ T6735] netlink: 'syz.4.892': attribute type 28 has an invalid length. [ 313.981634][ T6748] netlink: 152 bytes leftover after parsing attributes in process `syz.1.897'. [ 314.917090][ T6758] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.912'. [ 314.985052][ T6760] netlink: 196 bytes leftover after parsing attributes in process `syz.2.902'. [ 315.008460][ T6760] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 315.287383][ T6771] netlink: 'syz.1.905': attribute type 3 has an invalid length. [ 315.295528][ T6771] netlink: 'syz.1.905': attribute type 1 has an invalid length. [ 315.324479][ T6771] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.905'. [ 317.023842][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.030351][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.756170][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.937700][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.119329][ T6801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.140271][ T6801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.168190][ T6801] batman_adv: batadv0: Interface deactivated: vlan1 [ 320.208740][ T6801] batman_adv: batadv0: Removing interface: vlan1 [ 320.479416][ T6810] netlink: 'syz.3.920': attribute type 3 has an invalid length. [ 320.568825][ T6810] netlink: 'syz.3.920': attribute type 1 has an invalid length. [ 320.629291][ T6810] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.920'. [ 320.638732][ T6812] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.921'. [ 321.864252][ T6832] netlink: 'syz.2.926': attribute type 25 has an invalid length. [ 321.890775][ T6832] netlink: 'syz.2.926': attribute type 28 has an invalid length. [ 322.900676][ T6849] netlink: 'syz.0.933': attribute type 3 has an invalid length. [ 322.908907][ T6849] netlink: 'syz.0.933': attribute type 1 has an invalid length. [ 322.947601][ T6849] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.933'. [ 324.039362][ T49] Bluetooth: hci2: unexpected subevent 0x12 length: 150 > 5 [ 325.408766][ T6893] netlink: 'syz.1.943': attribute type 25 has an invalid length. [ 325.441392][ T6893] netlink: 'syz.1.943': attribute type 28 has an invalid length. [ 325.604397][ T6898] netlink: 'syz.3.947': attribute type 3 has an invalid length. [ 325.630205][ T6898] netlink: 'syz.3.947': attribute type 1 has an invalid length. [ 325.659628][ T6898] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.947'. [ 326.697479][ T6914] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.952'. [ 326.748721][ T6914] netlink: 52477 bytes leftover after parsing attributes in process `syz.0.952'. [ 326.784560][ T6914] netlink: 71676 bytes leftover after parsing attributes in process `syz.0.952'. [ 327.737546][ T49] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 327.769508][ T6919] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.967'. [ 327.785181][ T6919] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.967'. [ 327.854905][ T6919] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.967'. [ 328.327815][ T6934] sctp: [Deprecated]: syz.2.961 (pid 6934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 328.327815][ T6934] Use struct sctp_sack_info instead [ 328.844726][ T6954] netlink: 'syz.2.981': attribute type 10 has an invalid length. [ 328.946959][ T6954] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 329.513407][ T6968] netlink: 'syz.3.973': attribute type 3 has an invalid length. [ 329.633264][ T6968] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.973'. [ 330.154260][ T6966] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 330.172022][ T6966] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.974'. [ 332.260777][ T6972] netlink: 'syz.2.975': attribute type 10 has an invalid length. [ 332.268889][ T6972] netlink: 2 bytes leftover after parsing attributes in process `syz.2.975'. [ 332.290897][ T6972] device hsr0 entered promiscuous mode [ 332.304565][ T6972] bridge0: port 3(hsr0) entered blocking state [ 332.320989][ T6972] bridge0: port 3(hsr0) entered disabled state [ 335.596016][ T6993] sctp: [Deprecated]: syz.1.980 (pid 6993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 335.596016][ T6993] Use struct sctp_sack_info instead [ 338.895009][ T7022] netlink: 'syz.2.989': attribute type 3 has an invalid length. [ 339.018319][ T7028] netlink: 'syz.3.987': attribute type 10 has an invalid length. [ 339.040867][ T7022] netlink: 'syz.2.989': attribute type 1 has an invalid length. [ 339.081525][ T7022] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.989'. [ 339.112709][ T7021] netlink: 'syz.0.1001': attribute type 10 has an invalid length. [ 339.134729][ T7021] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1001'. [ 339.184642][ T7021] device hsr0 entered promiscuous mode [ 339.266027][ T7021] bridge0: port 3(hsr0) entered blocking state [ 339.282230][ T7021] bridge0: port 3(hsr0) entered disabled state [ 339.420280][ T7021] bridge0: port 3(hsr0) entered blocking state [ 339.428587][ T7021] bridge0: port 3(hsr0) entered forwarding state [ 339.592990][ T7031] netlink: 'syz.3.990': attribute type 10 has an invalid length. [ 339.621793][ T7031] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 341.049571][ T7051] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.998'. [ 344.042996][ T7068] netlink: 'syz.3.1003': attribute type 10 has an invalid length. [ 344.520998][ T7070] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 344.529201][ T7070] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 344.557655][ T7070] device caif0 entered promiscuous mode [ 344.582612][ T7070] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 344.599443][ T7075] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 344.628420][ T7075] netlink: 'syz.2.1020': attribute type 11 has an invalid length. [ 344.815008][ T7081] netlink: 'syz.1.1008': attribute type 10 has an invalid length. [ 345.039784][ T7086] netlink: 'syz.4.1009': attribute type 10 has an invalid length. [ 345.073804][ T7086] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1009'. [ 345.105875][ T7086] device hsr0 entered promiscuous mode [ 345.137408][ T7086] bridge0: port 3(hsr0) entered blocking state [ 345.173742][ T7086] bridge0: port 3(hsr0) entered disabled state [ 345.352428][ T7086] bridge0: port 3(hsr0) entered blocking state [ 345.359987][ T7086] bridge0: port 3(hsr0) entered forwarding state [ 345.889123][ T7094] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1017'. [ 345.902903][ T7094] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 345.915722][ T7094] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 346.769776][ T7108] netlink: 'syz.0.1024': attribute type 10 has an invalid length. [ 346.813358][ T7108] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 346.847090][ T7108] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 346.874369][ T7115] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1024'. [ 346.887705][ T7115] netlink: 'syz.0.1024': attribute type 11 has an invalid length. [ 346.908399][ T7114] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.961179][ T7114] ÿÿÿÿÿÿ: renamed from bridge_slave_0 [ 347.268798][ T7128] netlink: 'syz.4.1028': attribute type 10 has an invalid length. [ 347.504414][ T7128] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 347.616832][ T7130] netlink: 'syz.2.1031': attribute type 10 has an invalid length. [ 347.660478][ T7130] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1031'. [ 348.373851][ T7149] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1036'. [ 348.404764][ T7149] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 348.436967][ T7149] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 348.999182][ T7158] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1039'. [ 349.059655][ T7159] netlink: 'syz.4.1039': attribute type 11 has an invalid length. [ 349.755624][ T7174] netlink: 'syz.1.1047': attribute type 10 has an invalid length. [ 349.776790][ T7174] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1047'. [ 349.836434][ T7174] device hsr0 entered promiscuous mode [ 349.848840][ T7174] bridge0: port 3(hsr0) entered blocking state [ 349.857591][ T7174] bridge0: port 3(hsr0) entered disabled state [ 350.608793][ T7184] netlink: 'syz.1.1061': attribute type 10 has an invalid length. [ 350.617967][ T7184] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1061'. [ 350.668730][ T7182] netlink: 'syz.2.1050': attribute type 10 has an invalid length. [ 351.969099][ T7206] netlink: 'syz.3.1069': attribute type 10 has an invalid length. [ 352.637728][ T7211] netlink: 'syz.2.1058': attribute type 10 has an invalid length. [ 352.744739][ T7211] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1058'. [ 352.857687][ T7219] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1058'. [ 352.997329][ T7225] netlink: 'syz.2.1058': attribute type 11 has an invalid length. [ 353.020013][ T7211] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 353.056989][ T7213] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1059'. [ 353.737295][ T7237] netlink: 'syz.3.1070': attribute type 10 has an invalid length. [ 353.770228][ T7237] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1070'. [ 353.779576][ T7237] device hsr0 entered promiscuous mode [ 353.806627][ T7237] bridge0: port 3(hsr0) entered blocking state [ 353.824324][ T7237] bridge0: port 3(hsr0) entered disabled state [ 354.876174][ T7267] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1078'. [ 354.912132][ T7267] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 354.966256][ T7267] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 355.219650][ T7272] netlink: 'syz.0.1089': attribute type 3 has an invalid length. [ 355.247335][ T7273] netlink: 'syz.1.1080': attribute type 10 has an invalid length. [ 355.261031][ T7272] netlink: 'syz.0.1089': attribute type 1 has an invalid length. [ 355.261062][ T7272] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1089'. [ 355.324401][ T7276] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'. [ 355.406789][ T7273] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1080'. [ 355.432421][ T7273] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 355.453026][ T7276] netlink: 'syz.1.1080': attribute type 11 has an invalid length. [ 355.850187][ T7285] netlink: 'syz.0.1082': attribute type 10 has an invalid length. [ 356.137748][ T7289] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.1095'. [ 356.448974][ T7294] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1085'. [ 356.476492][ T7292] delete_channel: no stack [ 357.778398][ T7316] netlink: 'syz.4.1093': attribute type 3 has an invalid length. [ 357.824310][ T7316] netlink: 'syz.4.1093': attribute type 1 has an invalid length. [ 357.879297][ T7316] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1093'. [ 357.886987][ T7315] netlink: 'syz.0.1091': attribute type 10 has an invalid length. [ 357.949706][ T7315] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1091'. [ 358.456944][ T7328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1097'. [ 358.477415][ T7328] netlink: 'syz.3.1097': attribute type 11 has an invalid length. [ 361.120549][ T7327] netlink: 'syz.3.1097': attribute type 10 has an invalid length. [ 361.128428][ T7327] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1097'. [ 361.144517][ T7327] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 361.482622][ T7336] netlink: 'syz.1.1100': attribute type 10 has an invalid length. [ 362.108947][ T7350] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1104'. [ 362.145203][ T7349] delete_channel: no stack [ 362.150207][ T7352] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1106'. [ 362.159870][ T7352] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 362.185943][ T7352] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 362.532894][ T7357] netlink: 'syz.4.1108': attribute type 3 has an invalid length. [ 362.548515][ T7357] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 362.568303][ T7357] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1108'. [ 363.193203][ T7373] netlink: 'syz.3.1116': attribute type 10 has an invalid length. [ 363.971267][ T7392] netlink: 'syz.4.1126': attribute type 3 has an invalid length. [ 364.017837][ T7392] netlink: 'syz.4.1126': attribute type 1 has an invalid length. [ 364.054296][ T7392] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1126'. [ 364.321907][ T7397] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1129'. [ 364.366964][ T7400] netlink: 'syz.0.1137': attribute type 3 has an invalid length. [ 364.378890][ T7400] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 364.387624][ T7400] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1137'. [ 364.460522][ T7403] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1127'. [ 364.582426][ T7402] delete_channel: no stack [ 367.538774][ T7413] netlink: 'syz.3.1135': attribute type 39 has an invalid length. [ 368.149324][ T7434] netlink: 'syz.0.1142': attribute type 3 has an invalid length. [ 368.202671][ T7434] netlink: 'syz.0.1142': attribute type 1 has an invalid length. [ 368.225863][ T7434] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1142'. [ 368.435233][ T7441] netlink: 65185 bytes leftover after parsing attributes in process `syz.3.1144'. [ 368.615228][ T7446] netlink: 'syz.0.1155': attribute type 3 has an invalid length. [ 368.632618][ T7446] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 368.670625][ T7446] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1155'. [ 368.913887][ T7451] netlink: 'syz.2.1147': attribute type 10 has an invalid length. [ 368.934721][ T7451] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1147'. [ 368.967130][ T7451] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 369.982675][ T7460] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.1163'. [ 370.032355][ T7460] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 370.047750][ T7460] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 370.134943][ T7464] netlink: 'syz.1.1162': attribute type 10 has an invalid length. [ 370.173211][ T7464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1162'. [ 371.218981][ T7485] netlink: 'syz.2.1159': attribute type 3 has an invalid length. [ 371.305422][ T7485] netlink: 'syz.2.1159': attribute type 1 has an invalid length. [ 371.387940][ T7485] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1159'. [ 371.721119][ T7488] netlink: 'syz.1.1160': attribute type 39 has an invalid length. [ 372.203679][ T7501] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1164'. [ 372.234726][ T7501] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 372.562057][ T7506] validate_nla: 1 callbacks suppressed [ 372.562174][ T7506] netlink: 'syz.4.1169': attribute type 10 has an invalid length. [ 372.577106][ T7506] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1169'. [ 372.592960][ T7512] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1172'. [ 372.615369][ T7512] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 372.633837][ T7512] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 372.887560][ T7521] netlink: 'syz.4.1176': attribute type 3 has an invalid length. [ 373.298952][ T7521] netlink: 'syz.4.1176': attribute type 21 has an invalid length. [ 373.318315][ T7521] __nla_validate_parse: 1 callbacks suppressed [ 373.318357][ T7521] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1176'. [ 373.392875][ T7521] netlink: 'syz.4.1176': attribute type 4 has an invalid length. [ 373.420356][ T7521] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1176'. [ 373.719235][ T7538] netlink: 65185 bytes leftover after parsing attributes in process `syz.0.1188'. [ 373.744254][ T7538] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:0) [ 373.785338][ T7538] bridge0: received packet on bridge_slave_1 with own address as source address (addr:0a:0a:da:1b:40:d8, vlan:1) [ 374.185242][ T7549] netlink: 'syz.2.1178': attribute type 39 has an invalid length. [ 374.588944][ T7555] netlink: 'syz.3.1183': attribute type 10 has an invalid length. [ 374.615156][ T7555] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1183'. [ 374.663367][ T7555] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 374.828119][ T7559] netlink: 'syz.1.1185': attribute type 10 has an invalid length. [ 374.836541][ T7559] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1185'. [ 374.997139][ T7566] netlink: 'syz.3.1198': attribute type 10 has an invalid length. [ 375.030392][ T7566] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1198'. [ 375.064389][ T7566] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 375.108557][ T7567] netlink: 'syz.4.1199': attribute type 39 has an invalid length. [ 375.578488][ T7572] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1189'. [ 375.633550][ T7571] delete_channel: no stack [ 376.115876][ T7586] netlink: 'syz.4.1196': attribute type 3 has an invalid length. [ 376.147158][ T7586] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1196'. [ 376.446381][ T7596] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1210'. [ 376.822038][ T7603] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1203'. [ 377.002023][ T7608] delete_channel: no stack [ 378.469051][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.475500][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.442992][ T7655] validate_nla: 8 callbacks suppressed [ 380.443014][ T7655] netlink: 'syz.3.1222': attribute type 3 has an invalid length. [ 380.535739][ T7655] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 380.578500][ T7655] __nla_validate_parse: 3 callbacks suppressed [ 380.578519][ T7655] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1222'. [ 380.619026][ T7645] netlink: 'syz.4.1220': attribute type 10 has an invalid length. [ 383.316055][ T7665] netlink: 'syz.2.1228': attribute type 10 has an invalid length. [ 383.340314][ T7665] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1228'. [ 383.361425][ T7665] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 384.084229][ T7684] netlink: 'syz.2.1235': attribute type 3 has an invalid length. [ 384.100553][ T7684] netlink: 'syz.2.1235': attribute type 1 has an invalid length. [ 384.150023][ T7684] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.1235'. [ 388.556793][ T7699] sctp: [Deprecated]: syz.1.1240 (pid 7699) Use of int in max_burst socket option deprecated. [ 388.556793][ T7699] Use struct sctp_assoc_value instead [ 388.995981][ T7713] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 389.015195][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1246'. [ 389.043260][ T7713] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 389.075391][ T7712] netlink: 'syz.1.1244': attribute type 39 has an invalid length. [ 392.390633][ T7742] sctp: [Deprecated]: syz.3.1256 (pid 7742) Use of int in max_burst socket option deprecated. [ 392.390633][ T7742] Use struct sctp_assoc_value instead [ 392.751801][ T7755] netlink: 'syz.3.1263': attribute type 39 has an invalid length. [ 392.842884][ T7757] netlink: 'syz.2.1264': attribute type 10 has an invalid length. [ 392.852319][ T7757] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1264'. [ 392.863950][ T7757] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 393.939532][ T49] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 397.155835][ T7806] netlink: 'syz.4.1279': attribute type 39 has an invalid length. [ 397.514002][ T7814] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 397.528679][ T7814] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 397.559785][ T7814] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 399.242253][ T7850] netlink: 'syz.1.1292': attribute type 1 has an invalid length. [ 399.297701][ T7850] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1292'. [ 399.343455][ T7841] netlink: 'syz.1.1292': attribute type 29 has an invalid length. [ 399.374659][ T7841] netlink: 'syz.1.1292': attribute type 29 has an invalid length. [ 402.357537][ T7874] netlink: 'syz.0.1304': attribute type 10 has an invalid length. [ 405.218693][ T7874] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 406.109954][ T7894] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 406.603477][ T7894] netlink: 'syz.0.1311': attribute type 29 has an invalid length. [ 408.232276][ T7940] netlink: 'syz.1.1322': attribute type 3 has an invalid length. [ 408.266949][ T7940] netlink: 'syz.1.1322': attribute type 1 has an invalid length. [ 408.280911][ T7940] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1322'. [ 408.319712][ T7937] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 408.330477][ T7937] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 408.494230][ T7946] netlink: 'syz.0.1337': attribute type 3 has an invalid length. [ 408.538571][ T7946] netlink: 'syz.0.1337': attribute type 1 has an invalid length. [ 408.600192][ T7946] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1337'. [ 409.250659][ T7962] netlink: 'syz.2.1328': attribute type 29 has an invalid length. [ 409.259610][ T7962] netlink: 'syz.2.1328': attribute type 29 has an invalid length. [ 409.374664][ T7959] netlink: 'syz.2.1328': attribute type 1 has an invalid length. [ 409.385005][ T7961] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 409.399551][ T7961] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 409.408727][ T7959] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1328'. [ 409.459047][ T7961] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 409.992749][ T7977] netlink: 'syz.3.1341': attribute type 3 has an invalid length. [ 410.038405][ T7977] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 410.058379][ T7977] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1341'. [ 410.733658][ T7994] netlink: 'syz.2.1348': attribute type 1 has an invalid length. [ 410.801082][ T7994] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1348'. [ 411.212202][ T8006] syzkaller0: create flow: hash 4056199142 index 1 [ 411.257038][ T8005] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 411.257008][ T4262] syzkaller0: tun_net_xmit 76 [ 411.279346][ T4262] syzkaller0: tun_net_xmit 48 [ 411.298006][ T8005] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 411.311484][ T4333] syzkaller0: tun_net_xmit 76 [ 411.354303][ T8003] syzkaller0: delete flow: hash 4056199142 index 1 [ 411.376477][ T8008] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1352'. [ 411.617112][ T8015] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1363'. [ 413.281367][ T8025] validate_nla: 6 callbacks suppressed [ 413.281386][ T8025] netlink: 'syz.1.1356': attribute type 10 has an invalid length. [ 413.356521][ T8025] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 417.430848][ T8060] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 417.440395][ T8060] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 417.694954][ T8067] netlink: 'syz.4.1369': attribute type 1 has an invalid length. [ 417.715852][ T8067] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1369'. [ 417.737278][ T8068] netlink: 'syz.4.1369': attribute type 29 has an invalid length. [ 417.764237][ T8068] netlink: 'syz.4.1369': attribute type 29 has an invalid length. [ 417.876584][ T8072] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1371'. [ 418.198621][ T8080] netlink: 'syz.4.1375': attribute type 3 has an invalid length. [ 418.236185][ T8080] netlink: 'syz.4.1375': attribute type 1 has an invalid length. [ 418.246735][ T8080] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1375'. [ 418.698794][ T8072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.753189][ T8072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.782115][ T8072] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 418.795904][ T8072] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 418.805209][ T8072] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 418.820911][ T8072] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 418.831205][ T8072] bond0 (unregistering): Released all slaves [ 418.850972][ T8074] netlink: 'syz.3.1373': attribute type 10 has an invalid length. [ 418.870914][ T8087] netlink: 'syz.4.1379': attribute type 10 has an invalid length. [ 418.880793][ T8087] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1379'. [ 419.877644][ T8111] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 419.900479][ T8111] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 420.016553][ T8121] netlink: 'syz.3.1389': attribute type 3 has an invalid length. [ 420.042376][ T8121] netlink: 'syz.3.1389': attribute type 1 has an invalid length. [ 420.059401][ T8121] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1389'. [ 420.258040][ T8127] netlink: 'syz.1.1403': attribute type 3 has an invalid length. [ 420.278885][ T8127] netlink: 'syz.1.1403': attribute type 1 has an invalid length. [ 420.289222][ T8127] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1403'. [ 420.861167][ T8140] netlink: 'syz.2.1394': attribute type 10 has an invalid length. [ 422.135976][ T8162] netlink: 'syz.0.1408': attribute type 3 has an invalid length. [ 422.161861][ T8162] netlink: 'syz.0.1408': attribute type 1 has an invalid length. [ 422.169820][ T8162] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1408'. [ 422.253131][ T8166] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 422.278356][ T8166] syzkaller1: group set to 778 [ 422.291002][ T8159] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 422.461482][ T8176] netlink: 'syz.0.1420': attribute type 3 has an invalid length. [ 422.469264][ T8176] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1420'. [ 422.555580][ T8173] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 422.610194][ T8173] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 423.639437][ T8196] device syzkaller0 entered promiscuous mode [ 425.442849][ T8205] validate_nla: 1 callbacks suppressed [ 425.442887][ T8205] netlink: 'syz.2.1433': attribute type 10 has an invalid length. [ 425.496957][ T8213] netlink: 'syz.4.1424': attribute type 3 has an invalid length. [ 425.505393][ T8213] netlink: 'syz.4.1424': attribute type 1 has an invalid length. [ 425.510738][ T8205] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1433'. [ 425.524443][ T8213] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1424'. [ 431.485369][ T8253] netlink: 'syz.3.1438': attribute type 3 has an invalid length. [ 431.494812][ T8253] netlink: 'syz.3.1438': attribute type 1 has an invalid length. [ 431.504204][ T8253] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1438'. [ 431.759627][ T8261] netlink: 'syz.0.1437': attribute type 3 has an invalid length. [ 431.892940][ T8266] netlink: 'syz.1.1441': attribute type 29 has an invalid length. [ 431.919520][ T8261] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1437'. [ 431.973105][ T8263] netlink: 'syz.1.1441': attribute type 1 has an invalid length. [ 432.039662][ T8265] netlink: 'syz.0.1437': attribute type 21 has an invalid length. [ 432.082610][ T8263] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.1441'. [ 432.125804][ T8265] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1437'. [ 432.426392][ T8265] netlink: 'syz.0.1437': attribute type 4 has an invalid length. [ 432.479554][ T8265] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1437'. [ 432.546517][ T8266] netlink: 'syz.1.1441': attribute type 29 has an invalid length. [ 436.115756][ T8298] netlink: 'syz.1.1453': attribute type 3 has an invalid length. [ 436.228121][ T8298] netlink: 'syz.1.1453': attribute type 1 has an invalid length. [ 436.299763][ T8298] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1453'. [ 437.747595][ T47] wlan1: Trigger new scan to find an IBSS to join [ 439.902550][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.909343][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.254541][ T8325] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 440.264659][ T8325] syzkaller1: group set to 778 [ 440.269540][ T8327] syzkaller1: tun_chr_ioctl cmd 1074025692 [ 440.566023][ T8340] netlink: 'syz.0.1464': attribute type 3 has an invalid length. [ 440.609348][ T8340] netlink: 'syz.0.1464': attribute type 1 has an invalid length. [ 440.674852][ T8340] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1464'. [ 443.872589][ T8361] netlink: 'syz.4.1471': attribute type 1 has an invalid length. [ 443.891629][ T8361] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1471'. [ 443.939926][ T8361] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 443.960509][ T8361] netlink: 'syz.4.1471': attribute type 29 has an invalid length. [ 444.453697][ T8376] netlink: 'syz.1.1477': attribute type 3 has an invalid length. [ 444.488659][ T8376] netlink: 'syz.1.1477': attribute type 1 has an invalid length. [ 444.526173][ T8376] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1477'. [ 444.700666][ T70] wlan1: Trigger new scan to find an IBSS to join [ 445.174074][ T8392] netlink: 'syz.0.1482': attribute type 21 has an invalid length. [ 445.290733][ T8392] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1482'. [ 446.202611][ T8412] netlink: 'syz.3.1492': attribute type 3 has an invalid length. [ 446.231108][ T8412] netlink: 'syz.3.1492': attribute type 1 has an invalid length. [ 446.272024][ T8412] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1492'. [ 446.438793][ T8419] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 447.740339][ T9] wlan1: Trigger new scan to find an IBSS to join [ 448.700569][ T70] wlan1: Trigger new scan to find an IBSS to join [ 449.349381][ T9] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 449.604663][ T8445] netlink: 'syz.4.1503': attribute type 21 has an invalid length. [ 449.620963][ T8445] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1503'. [ 449.694787][ T8451] netlink: 'syz.1.1506': attribute type 3 has an invalid length. [ 449.725838][ T8452] netlink: 'syz.2.1504': attribute type 16 has an invalid length. [ 449.738492][ T8451] netlink: 'syz.1.1506': attribute type 1 has an invalid length. [ 449.747334][ T8452] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1504'. [ 449.758441][ T8451] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1506'. [ 451.008413][ T8483] netlink: 'syz.4.1517': attribute type 3 has an invalid length. [ 451.028902][ T8483] netlink: 'syz.4.1517': attribute type 1 has an invalid length. [ 451.038265][ T8483] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1517'. [ 451.084849][ T8485] netlink: 'syz.2.1519': attribute type 21 has an invalid length. [ 451.097754][ T8485] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1519'. [ 451.311755][ T8490] netlink: 'syz.4.1532': attribute type 3 has an invalid length. [ 451.360060][ T8490] netlink: 'syz.4.1532': attribute type 1 has an invalid length. [ 451.375751][ T8490] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1532'. [ 451.749391][ T8501] netlink: 'syz.3.1524': attribute type 2 has an invalid length. [ 451.765299][ T8501] netlink: 'syz.3.1524': attribute type 8 has an invalid length. [ 451.789815][ T8501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1524'. [ 451.818009][ T8508] netlink: 'syz.3.1524': attribute type 2 has an invalid length. [ 451.837415][ T8508] netlink: 'syz.3.1524': attribute type 8 has an invalid length. [ 451.858149][ T8508] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1524'. [ 451.890821][ T8505] netlink: 'syz.1.1528': attribute type 10 has an invalid length. [ 452.797358][ T8525] netlink: 'syz.0.1536': attribute type 3 has an invalid length. [ 452.809430][ T8525] netlink: 'syz.0.1536': attribute type 1 has an invalid length. [ 452.817821][ T8525] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1536'. [ 453.062714][ T8533] netlink: 'syz.0.1548': attribute type 3 has an invalid length. [ 453.110003][ T8533] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1548'. [ 454.768963][ T8574] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1553'. [ 454.836531][ T8578] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1554'. [ 454.848470][ T8574] : renamed from caif0 [ 455.458666][ T8574] device  left promiscuous mode [ 455.464941][ T8574] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 456.730822][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1562'. [ 457.124116][ T8617] validate_nla: 4 callbacks suppressed [ 457.124133][ T8617] netlink: 'syz.3.1566': attribute type 3 has an invalid length. [ 457.166487][ T8617] netlink: 'syz.3.1566': attribute type 1 has an invalid length. [ 457.189941][ T8617] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1566'. [ 459.178204][ T8658] Ÿë: port 1(gretap0) entered blocking state [ 459.193232][ T8660] netlink: 'syz.3.1583': attribute type 3 has an invalid length. [ 459.231269][ T8658] Ÿë: port 1(gretap0) entered disabled state [ 459.237648][ T8660] netlink: 'syz.3.1583': attribute type 1 has an invalid length. [ 459.267570][ T8660] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1583'. [ 459.278663][ T8658] device gretap0 entered promiscuous mode [ 459.447439][ T8661] Ÿë: port 2(veth0_to_team) entered blocking state [ 459.493485][ T8661] Ÿë: port 2(veth0_to_team) entered disabled state [ 459.549335][ T8661] device veth0_to_team entered promiscuous mode [ 460.812378][ T49] Bluetooth: hci2: unexpected subevent 0x19 length: 150 > 28 [ 460.820214][ T49] Bluetooth: hci2: Unable to find connection with handle 0x0000 [ 460.942561][ T8697] netlink: 'syz.3.1599': attribute type 3 has an invalid length. [ 460.989972][ T8697] netlink: 'syz.3.1599': attribute type 1 has an invalid length. [ 461.038622][ T8694] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1598'. [ 461.058066][ T8697] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1599'. [ 461.434118][ T8709] netlink: 'syz.1.1613': attribute type 3 has an invalid length. [ 461.572467][ T8709] netlink: 'syz.1.1613': attribute type 1 has an invalid length. [ 461.647645][ T8709] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1613'. [ 462.284139][ T8716] netlink: 'syz.1.1605': attribute type 21 has an invalid length. [ 462.344208][ T8716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1605'. [ 465.266168][ T8742] netlink: 'syz.1.1617': attribute type 3 has an invalid length. [ 465.291535][ T8742] netlink: 'syz.1.1617': attribute type 1 has an invalid length. [ 465.319180][ T8742] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1617'. [ 466.717895][ T49] Bluetooth: hci1: unexpected subevent 0x19 length: 150 > 28 [ 466.725549][ T49] Bluetooth: hci1: Unable to find connection with handle 0x0000 [ 466.915570][ T8764] netlink: 'syz.3.1623': attribute type 21 has an invalid length. [ 466.938845][ T8764] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1623'. [ 467.687756][ T8787] netlink: 'syz.1.1631': attribute type 3 has an invalid length. [ 467.706818][ T8787] netlink: 'syz.1.1631': attribute type 1 has an invalid length. [ 467.727671][ T8787] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.1631'. [ 470.240435][ T49] Bluetooth: hci0: unexpected subevent 0x19 length: 150 > 28 [ 470.248145][ T49] Bluetooth: hci0: Unable to find connection with handle 0x0000 [ 473.765341][ T8822] netlink: 'syz.4.1644': attribute type 3 has an invalid length. [ 473.845098][ T8822] netlink: 'syz.4.1644': attribute type 1 has an invalid length. [ 473.913560][ T8822] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1644'. [ 475.678652][ T8855] sock: sock_set_timeout: `syz.0.1656' (pid 8855) tries to set negative timeout [ 476.151848][ T8867] netlink: 'syz.4.1661': attribute type 3 has an invalid length. [ 476.230558][ T8867] netlink: 'syz.4.1661': attribute type 1 has an invalid length. [ 476.250140][ T8867] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.1661'. [ 479.121627][ T8902] sock: sock_set_timeout: `syz.4.1672' (pid 8902) tries to set negative timeout [ 480.385603][ T8906] netlink: 'syz.0.1675': attribute type 3 has an invalid length. [ 480.393993][ T8906] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.1675'. [ 480.473813][ T8904] C: renamed from team_slave_0 [ 480.583235][ T8904] netlink: 'syz.3.1673': attribute type 2 has an invalid length. [ 480.624113][ T8904] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1673'. [ 480.655653][ T8904] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 480.769564][ T8909] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.1676'. [ 481.919668][ T8929] netlink: 'syz.4.1685': attribute type 13 has an invalid length. [ 481.936104][ T8929] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1685'. [ 483.163684][ T8945] netlink: 'syz.2.1690': attribute type 3 has an invalid length. [ 483.181606][ T8943] sock: sock_set_timeout: `syz.1.1689' (pid 8943) tries to set negative timeout [ 483.191434][ T8945] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1690'. [ 483.518723][ T8951] C: renamed from team_slave_0 [ 483.611532][ T8951] netlink: 'syz.0.1692': attribute type 2 has an invalid length. [ 483.619563][ T8951] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1692'. [ 483.630649][ T8951] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 484.218897][ T8958] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1695'. [ 485.227031][ T8983] netlink: 'syz.0.1703': attribute type 1 has an invalid length. [ 485.798044][ T8990] sock: sock_set_timeout: `syz.2.1705' (pid 8990) tries to set negative timeout [ 488.493874][ T9033] netlink: 'syz.0.1729': attribute type 13 has an invalid length. [ 488.573434][ T9033] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1729'. [ 488.591656][ T9033] @: renamed from C [ 488.839822][ T9036] C: renamed from team_slave_0 [ 488.871890][ T9036] netlink: 'syz.1.1718': attribute type 2 has an invalid length. [ 488.881090][ T9036] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1718'. [ 488.891698][ T9036] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 489.425569][ T9053] netlink: 'syz.2.1724': attribute type 3 has an invalid length. [ 489.437114][ T9053] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1724'. [ 489.809269][ T9061] netlink: 'syz.2.1739': attribute type 3 has an invalid length. [ 489.869067][ T9061] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1739'. [ 490.258076][ T9074] netlink: 'syz.1.1742': attribute type 3 has an invalid length. [ 490.419214][ T9074] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1742'. [ 490.458359][ T49] Bluetooth: hci1: Malformed Event: 0x13 [ 490.549095][ T9073] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1728'. [ 490.745670][ T9080] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 490.789480][ T9084] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1734'. [ 490.958767][ T9087] netlink: 'syz.2.1735': attribute type 13 has an invalid length. [ 491.024389][ T9087] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1735'. [ 491.108682][ T9087] @: renamed from team_slave_0 [ 492.109386][ T9112] netlink: 'syz.1.1745': attribute type 3 has an invalid length. [ 492.139263][ T9112] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1745'. [ 492.245394][ T9114] netlink: 'syz.2.1757': attribute type 3 has an invalid length. [ 492.256800][ T9114] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1757'. [ 492.554507][ T49] Bluetooth: hci3: Malformed Event: 0x13 [ 493.858329][ T9143] __nla_validate_parse: 1 callbacks suppressed [ 493.858366][ T9143] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1753'. [ 494.530592][ T9145] netlink: 'syz.1.1759': attribute type 13 has an invalid length. [ 494.560271][ T9145] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1759'. [ 494.595143][ T9152] netlink: 'syz.2.1761': attribute type 3 has an invalid length. [ 494.621055][ T9145] @: renamed from C [ 494.668469][ T9152] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.1761'. [ 495.458019][ T9173] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1766'. [ 495.833784][ T9183] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1771'. [ 496.337499][ T9190] netlink: 'syz.4.1774': attribute type 3 has an invalid length. [ 496.368488][ T9192] netlink: 22 bytes leftover after parsing attributes in process `syz.0.1775'. [ 496.377171][ T9190] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1774'. [ 499.916071][ T9235] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1786'. [ 499.942652][ T9237] netlink: 'syz.4.1787': attribute type 3 has an invalid length. [ 499.985535][ T9237] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1787'. [ 500.005751][ T9239] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1790'. [ 500.133796][ T9241] netlink: 'syz.2.1788': attribute type 1 has an invalid length. [ 500.294530][ T9247] netlink: 'syz.4.1802': attribute type 3 has an invalid length. [ 500.377565][ T9247] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.1802'. [ 501.343545][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.350048][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.637037][ T9283] netlink: 'syz.1.1809': attribute type 1 has an invalid length. [ 502.666069][ T9279] netlink: 'syz.3.1800': attribute type 21 has an invalid length. [ 502.822129][ T9288] netlink: 'syz.0.1799': attribute type 10 has an invalid length. [ 502.836118][ T9288] bridge0: port 3(hsr0) entered disabled state [ 502.844195][ T9288] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.853114][ T9288] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.113572][ T9295] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1804'. [ 506.708418][ T9324] netlink: 'syz.3.1815': attribute type 1 has an invalid length. [ 506.864223][ T9328] netlink: 'syz.4.1817': attribute type 10 has an invalid length. [ 506.874511][ T9328] bridge0: port 3(hsr0) entered disabled state [ 506.881249][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.955163][ T9328] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 507.018625][ T9328] bridge0: port 3(hsr0) entered blocking state [ 507.025497][ T9328] bridge0: port 3(hsr0) entered listening state [ 507.032553][ T9328] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.040012][ T9328] bridge0: port 2(bridge_slave_1) entered listening state [ 507.072173][ T9328] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 507.270570][ T9337] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1818'. [ 507.998409][ T9351] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.1827'. [ 508.276861][ T9357] netlink: 'syz.1.1825': attribute type 15 has an invalid length. [ 508.289300][ T9357] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1825'. [ 508.999995][ T9371] netlink: 'syz.4.1829': attribute type 1 has an invalid length. [ 509.524146][ T9379] netlink: 'syz.3.1833': attribute type 10 has an invalid length. [ 510.120369][ T9391] netlink: 'syz.2.1836': attribute type 21 has an invalid length. [ 511.114796][ T9402] raw_sendmsg: syz.0.1842 forgot to set AF_INET. Fix it! [ 513.653685][ T9433] bond0: (slave bridge0): Error: Slave device does not support XDP [ 513.683158][ T9434] netlink: 'syz.1.1850': attribute type 10 has an invalid length. [ 513.763381][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.783494][ T9434] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 514.012693][ T9437] netlink: 'syz.3.1854': attribute type 10 has an invalid length. [ 514.679276][ T9443] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1856'. [ 515.401848][ T9466] netlink: 'syz.2.1861': attribute type 15 has an invalid length. [ 515.469729][ T9466] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1861'. [ 516.088660][ T9469] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1863'. [ 517.038979][ T9475] netlink: 'syz.2.1865': attribute type 1 has an invalid length. [ 518.924691][ T9500] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 519.567395][ T9516] netlink: 'syz.3.1878': attribute type 15 has an invalid length. [ 519.680187][ T9516] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1878'. [ 520.392665][ T9526] netlink: 'syz.2.1883': attribute type 1 has an invalid length. [ 521.474820][ T9543] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1900'. [ 522.007383][ T9554] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 522.460570][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 522.469113][ C0] bridge0: port 3(hsr0) entered learning state [ 524.235998][ T9593] netlink: 'syz.1.1901': attribute type 10 has an invalid length. [ 524.594074][ T9598] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 524.892253][ T9609] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.1910'. [ 529.111398][ T9652] netlink: 'syz.4.1935': attribute type 3 has an invalid length. [ 529.163155][ T9652] netlink: 61155 bytes leftover after parsing attributes in process `syz.4.1935'. [ 529.283252][ T9653] netlink: 'syz.2.1924': attribute type 10 has an invalid length. [ 532.038271][ T9661] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 532.321948][ T9670] netlink: 'syz.0.1928': attribute type 15 has an invalid length. [ 532.372993][ T9670] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1928'. [ 533.165956][ T9688] netlink: 'syz.4.1939': attribute type 3 has an invalid length. [ 533.194455][ T9688] netlink: 61155 bytes leftover after parsing attributes in process `syz.4.1939'. [ 536.608244][ T9699] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 536.652247][ T9704] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1942'. [ 536.944531][ T9700] netlink: 'syz.4.1943': attribute type 10 has an invalid length. [ 537.820923][ C0] bridge0: port 3(hsr0) entered forwarding state [ 537.827381][ C0] bridge0: topology change detected, propagating [ 537.834946][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.842228][ C0] bridge0: topology change detected, propagating [ 538.711628][ T9700] team0: Device wg1 is of different type [ 538.916177][ T49] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 539.009711][ T9725] netlink: 'syz.4.1948': attribute type 15 has an invalid length. [ 539.062827][ T9725] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1948'. [ 540.153654][ T9738] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1955'. [ 543.843967][ T9754] netlink: 'syz.0.1961': attribute type 10 has an invalid length. [ 543.934564][ T9765] device sit0 entered promiscuous mode [ 544.109933][ T49] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 544.468255][ T9775] netlink: 'syz.4.1968': attribute type 15 has an invalid length. [ 544.585081][ T9775] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1968'. [ 545.389039][ T9789] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1972'. [ 545.676277][ T9794] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.1976'. [ 546.946816][ T49] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5 [ 547.203678][ T9826] netlink: 'syz.2.1987': attribute type 15 has an invalid length. [ 547.328992][ T9826] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1987'. [ 547.524941][ T9822] netlink: 71 bytes leftover after parsing attributes in process `syz.3.1985'. [ 548.308105][ T9841] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1992'. [ 548.827102][ T49] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 549.307092][ T9858] batman_adv: batadv0: Interface deactivated: vlan1 [ 550.003219][ T9858] batman_adv: batadv0: Removing interface: vlan1 [ 551.180061][ T9866] device sit0 entered promiscuous mode [ 551.248137][ T9868] netlink: 'syz.0.2003': attribute type 15 has an invalid length. [ 551.280108][ T9868] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2003'. [ 551.333930][ T9882] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2006'. [ 551.874036][ T9888] bridge0: port 3(hsr0) entered disabled state [ 551.935614][ T9888] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.996933][ T9888] device bridge_slave_0 left promiscuous mode [ 552.020937][ T9888] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.560079][ T9884] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2007'. [ 555.267784][ T9936] device sit0 entered promiscuous mode [ 555.281346][ T9939] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2022'. [ 555.453449][ T9937] netlink: 'syz.4.2021': attribute type 15 has an invalid length. [ 555.492388][ T9937] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2021'. [ 555.965852][ T9949] bridge0: port 3(hsr0) entered disabled state [ 556.013404][ T9949] device bridge_slave_1 left promiscuous mode [ 556.039083][ T9949] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.088847][ T9949] device bridge_slave_0 left promiscuous mode [ 556.104342][ T9949] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.276672][ T9949] bond0: (slave bridge0): Releasing backup interface [ 556.304001][ T9949] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 556.626687][ T9957] bridge0: port 3(hsr0) entered disabled state [ 556.633371][ T9957] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.786361][ T9999] netlink: 'syz.2.2041': attribute type 15 has an invalid length. [ 558.816069][ T9999] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2041'. [ 559.830459][T10010] bridge0: port 3(hsr0) entered disabled state [ 559.855451][T10010] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.911060][T10010] device ÿÿÿÿÿÿ left promiscuous mode [ 559.929237][T10010] bridge0: port 1(ÿÿÿÿÿÿ) entered disabled state [ 559.982025][T10010] bond0: (slave bridge0): Releasing backup interface [ 559.998160][T10010] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 560.048834][T10011] netlink: 'syz.0.2054': attribute type 15 has an invalid length. [ 560.062808][T10011] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2054'. [ 560.165478][T10018] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2047'. [ 560.194104][T10018] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 560.212575][T10018] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.426863][ T49] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 562.179024][T10064] device sit0 entered promiscuous mode [ 562.711022][T10066] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2065'. [ 562.764634][T10066] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 562.814859][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.821294][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.867947][T10066] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 562.927764][T10073] bridge0: port 3(hsr0) entered disabled state [ 562.981641][T10073] device bridge_slave_1 left promiscuous mode [ 563.005079][T10073] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.076138][T10073] device bridge_slave_0 left promiscuous mode [ 563.103511][T10073] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.252235][T10073] bond0: (slave bridge0): Releasing backup interface [ 563.274319][T10073] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 564.909436][ T49] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 565.511100][T10120] netlink: 'syz.0.2090': attribute type 9 has an invalid length. [ 565.544772][T10120] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2090'. [ 566.084357][T10129] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2079'. [ 566.113310][T10129] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 566.231321][T10129] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 567.650330][T10152] netlink: 'syz.0.2088': attribute type 15 has an invalid length. [ 567.801020][T10152] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2088'. [ 568.138706][ T49] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 570.167143][T10177] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2098'. [ 570.252911][T10177] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 570.287086][T10177] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 572.425482][T10201] bridge0: port 3(hsr0) entered disabled state [ 572.719364][T10201] device bridge_slave_0 left promiscuous mode [ 572.731354][T10201] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.884822][T10201] bond0: (slave bridge0): Releasing backup interface [ 572.973225][T10201] bond0: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 573.839649][T10225] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2111'. [ 574.284915][T10237] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2113'. [ 574.299502][T10237] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 574.358537][T10237] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 576.360510][T10277] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2126'. [ 578.794278][T10288] netlink: 'syz.0.2131': attribute type 10 has an invalid length. [ 578.906757][T10288] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 579.948452][T10317] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2140'. [ 583.684833][T10364] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2152'. [ 587.520957][T10409] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2169'. [ 587.929189][T10419] netlink: 'syz.4.2171': attribute type 10 has an invalid length. [ 588.511269][T10419] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 591.212991][ T49] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 591.285388][T10459] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.2183'. [ 591.722999][T10475] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.2199'. [ 591.817876][T10473] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 597.407343][ T49] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 597.717858][T10519] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.2202'. [ 597.764976][T10524] netlink: 'syz.3.2204': attribute type 10 has an invalid length. [ 597.959439][T10524] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 601.613374][ T49] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 601.670082][T10560] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2216'. [ 602.108524][T10568] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.2229'. [ 602.785587][T10577] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 603.096198][T10577] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 603.963091][T10595] netdevsim netdevsim2: Firmware load for '/../file0' refused, path contains '..' component [ 607.364268][T10623] netlink: 64847 bytes leftover after parsing attributes in process `syz.3.2232'. [ 607.402896][ T49] Bluetooth: hci0: unexpected event 0x12 length: 151 > 8 [ 611.476236][T10645] netlink: 'syz.4.2238': attribute type 10 has an invalid length. [ 616.323063][T10712] netlink: 64847 bytes leftover after parsing attributes in process `syz.0.2262'. [ 619.552329][T10743] netlink: 64847 bytes leftover after parsing attributes in process `syz.4.2274'. [ 622.238164][T10775] netlink: 'syz.3.2287': attribute type 1 has an invalid length. [ 622.285905][T10775] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2287'. [ 624.228847][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.235597][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.566528][T10812] netlink: 'syz.4.2298': attribute type 1 has an invalid length. [ 625.574500][T10812] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2298'. [ 629.275059][T10849] netlink: 'syz.0.2309': attribute type 1 has an invalid length. [ 629.283462][T10849] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2309'. [ 631.705184][T10885] netlink: 'syz.1.2320': attribute type 3 has an invalid length. [ 631.769972][T10885] netlink: 'syz.1.2320': attribute type 1 has an invalid length. [ 631.777781][T10885] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2320'. [ 633.556758][T10893] netlink: 'syz.0.2323': attribute type 10 has an invalid length. [ 635.094614][T10922] netlink: 'syz.0.2333': attribute type 3 has an invalid length. [ 635.169594][T10922] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 635.211432][T10922] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2333'. [ 637.379941][T10956] netlink: 'syz.0.2344': attribute type 3 has an invalid length. [ 637.477952][T10956] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 637.549253][T10956] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2344'. [ 638.874829][T10979] netlink: 'syz.2.2352': attribute type 10 has an invalid length. [ 640.547318][T10989] netlink: 'syz.3.2356': attribute type 3 has an invalid length. [ 640.555264][T10989] netlink: 'syz.3.2356': attribute type 1 has an invalid length. [ 640.578738][T10989] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2356'. [ 642.254755][T11021] netlink: 'syz.4.2367': attribute type 10 has an invalid length. [ 645.048340][T11037] netlink: 'syz.0.2370': attribute type 3 has an invalid length. [ 645.070609][T11037] netlink: 'syz.0.2370': attribute type 1 has an invalid length. [ 645.078406][T11037] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2370'. [ 647.297836][T11082] netlink: 'syz.3.2387': attribute type 3 has an invalid length. [ 647.313633][T11082] netlink: 'syz.3.2387': attribute type 1 has an invalid length. [ 647.325569][T11082] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2387'. [ 647.417958][T11088] netlink: 'syz.2.2388': attribute type 2 has an invalid length. [ 647.442162][T11088] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2388'. [ 649.650728][T11101] netlink: 'syz.2.2393': attribute type 7 has an invalid length. [ 650.860376][T11126] netlink: 'syz.1.2402': attribute type 3 has an invalid length. [ 650.868217][T11126] netlink: 'syz.1.2402': attribute type 1 has an invalid length. [ 650.950023][T11126] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2402'. [ 652.104683][T11132] device syzkaller0 entered promiscuous mode [ 652.805259][T11167] netlink: 'syz.0.2415': attribute type 3 has an invalid length. [ 652.819939][T11167] netlink: 'syz.0.2415': attribute type 1 has an invalid length. [ 652.828406][T11167] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2415'. [ 654.434359][T11164] tun0: tun_chr_ioctl cmd 1074025675 [ 654.439727][T11164] tun0: persist enabled [ 655.612833][T11198] netlink: 'syz.2.2426': attribute type 3 has an invalid length. [ 655.632694][T11198] netlink: 'syz.2.2426': attribute type 1 has an invalid length. [ 655.656513][T11198] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2426'. [ 656.585731][T11214] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 656.630624][T11214] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 656.665285][T11219] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 656.741946][T11218] IPv6: NLM_F_CREATE should be specified when creating new route [ 657.135762][T11228] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 657.169094][T11224] can: request_module (can-proto-0) failed. [ 657.216149][T11230] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 657.228780][T11224] netlink: 'syz.0.2432': attribute type 29 has an invalid length. [ 657.489270][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2437'. [ 657.564367][T11235] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2437'. [ 657.583901][T11241] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2438'. [ 657.641827][T11240] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2439'. [ 660.212541][T11236] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2437'. [ 660.365891][T11246] validate_nla: 2 callbacks suppressed [ 660.365910][T11246] netlink: 'syz.2.2437': attribute type 10 has an invalid length. [ 660.881380][T11274] tun0: tun_chr_ioctl cmd 2148553947 [ 660.889655][T11280] netlink: 'syz.0.2451': attribute type 3 has an invalid length. [ 660.946070][T11280] netlink: 'syz.0.2451': attribute type 1 has an invalid length. [ 660.954392][T11274] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2450'. [ 660.999671][T11280] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2451'. [ 661.066817][T11286] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.2452'. [ 662.031229][T11293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2456'. [ 662.052112][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 662.080548][T11293] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2456'. [ 662.110548][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 662.140546][T11293] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2456'. [ 662.174272][T11293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2456'. [ 664.858140][T11316] netlink: 'syz.4.2464': attribute type 3 has an invalid length. [ 664.882553][T11316] netlink: 'syz.4.2464': attribute type 1 has an invalid length. [ 669.022886][T11353] netlink: 'syz.2.2479': attribute type 3 has an invalid length. [ 669.041171][T11353] netlink: 'syz.2.2479': attribute type 1 has an invalid length. [ 669.048977][T11353] __nla_validate_parse: 3 callbacks suppressed [ 669.048993][T11353] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2479'. [ 669.135432][T11356] netlink: 'syz.3.2480': attribute type 10 has an invalid length. [ 669.164402][T11356] device veth0_macvtap left promiscuous mode [ 669.934186][T11374] netlink: 'syz.4.2488': attribute type 21 has an invalid length. [ 669.964095][T11374] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2488'. [ 670.028342][T11374] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2488'. [ 673.161634][T11395] netlink: 'syz.0.2495': attribute type 3 has an invalid length. [ 673.169620][T11395] netlink: 'syz.0.2495': attribute type 1 has an invalid length. [ 673.180590][T11395] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2495'. [ 673.777421][T11412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2501'. [ 673.898412][T11412] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2501'. [ 673.989358][T11419] syz.0.2500 (11419) used obsolete PPPIOCDETACH ioctl [ 674.604873][T11431] netlink: 'syz.1.2506': attribute type 3 has an invalid length. [ 674.688295][T11431] netlink: 'syz.1.2506': attribute type 1 has an invalid length. [ 674.698308][T11431] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2506'. [ 674.799026][ T49] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 675.976883][T11454] syz.1.2514[11454] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 676.529720][T11461] netlink: 'syz.3.2517': attribute type 10 has an invalid length. [ 676.913624][T11476] netlink: 'syz.3.2520': attribute type 3 has an invalid length. [ 676.945061][T11476] netlink: 'syz.3.2520': attribute type 1 has an invalid length. [ 676.989472][T11476] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2520'. [ 678.436412][T11507] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.053276][T11512] netlink: 'syz.2.2530': attribute type 10 has an invalid length. [ 679.067256][T11510] netlink: 'syz.1.2531': attribute type 3 has an invalid length. [ 679.253324][T11510] netlink: 'syz.1.2531': attribute type 1 has an invalid length. [ 679.265944][T11510] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2531'. [ 682.986754][T11541] netlink: 'syz.2.2541': attribute type 39 has an invalid length. [ 683.193682][T11549] netlink: 'syz.4.2545': attribute type 3 has an invalid length. [ 683.205505][T11549] netlink: 'syz.4.2545': attribute type 1 has an invalid length. [ 683.214982][T11549] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2545'. [ 683.593894][T11556] tipc: Started in network mode [ 683.619966][T11556] tipc: Node identity 9215a268, cluster identity 4711 [ 683.676443][T11556] tipc: Node number set to 2450891368 [ 683.775686][T11562] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.2548'. [ 685.114907][T11586] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2554'. [ 685.277059][T11589] netlink: 'syz.1.2557': attribute type 1 has an invalid length. [ 685.290869][T11589] netlink: 131740 bytes leftover after parsing attributes in process `syz.1.2557'. [ 685.675707][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.682307][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.817119][T11601] IPv6: NLM_F_CREATE should be specified when creating new route [ 689.525915][T11643] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2574'. [ 689.537138][T11633] : port 1(syz_tun) entered blocking state [ 689.550119][T11633] : port 1(syz_tun) entered disabled state [ 689.560139][T11633] device syz_tun entered promiscuous mode [ 691.089762][T11691] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 691.283570][T11695] netlink: 'syz.2.2594': attribute type 3 has an invalid length. [ 691.294588][T11695] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 691.306244][T11695] netlink: 12611 bytes leftover after parsing attributes in process `syz.2.2594'. [ 691.336263][ T49] Bluetooth: hci3: unexpected subevent 0x1a length: 150 > 6 [ 692.516199][T11720] netlink: 'syz.1.2603': attribute type 2 has an invalid length. [ 692.536985][T11720] netlink: 'syz.1.2603': attribute type 8 has an invalid length. [ 692.545571][T11720] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2603'. [ 692.898184][T11734] netlink: 'syz.1.2608': attribute type 3 has an invalid length. [ 692.975172][T11734] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 693.001568][T11734] netlink: 12611 bytes leftover after parsing attributes in process `syz.1.2608'. [ 693.006610][T11729] netlink: 65185 bytes leftover after parsing attributes in process `syz.4.2606'. [ 693.065235][T11735] IPv6: NLM_F_CREATE should be specified when creating new route [ 693.115020][T11735] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2604'. [ 693.259415][T11743] tap0: tun_chr_ioctl cmd 1074025675 [ 693.265397][T11743] tap0: persist disabled [ 694.565179][T11769] netlink: 'syz.2.2620': attribute type 3 has an invalid length. [ 694.599467][T11769] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 694.635566][T11769] netlink: 12611 bytes leftover after parsing attributes in process `syz.2.2620'. [ 694.935485][T11779] device sit0 left promiscuous mode [ 695.029837][T11787] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.2624'. [ 695.688270][T11784] device sit0 entered promiscuous mode [ 696.024921][T11806] netlink: 'syz.0.2631': attribute type 2 has an invalid length. [ 696.096029][T11806] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2631'. [ 697.180193][T11819] netlink: 'syz.2.2635': attribute type 10 has an invalid length. [ 697.209318][T11825] netlink: 'syz.0.2636': attribute type 3 has an invalid length. [ 697.246956][T11825] netlink: 'syz.0.2636': attribute type 1 has an invalid length. [ 697.265303][T11825] netlink: 12611 bytes leftover after parsing attributes in process `syz.0.2636'. [ 697.465594][T11829] netlink: 'syz.3.2639': attribute type 3 has an invalid length. [ 697.498087][T11829] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.2639'. [ 698.453359][T11855] netlink: 'syz.2.2646': attribute type 10 has an invalid length. [ 698.654963][T11862] netlink: 'syz.0.2651': attribute type 3 has an invalid length. [ 698.683183][T11862] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 698.723960][T11862] netlink: 12611 bytes leftover after parsing attributes in process `syz.0.2651'. [ 698.859504][T11865] netlink: 'syz.1.2653': attribute type 10 has an invalid length. [ 698.889519][T11865] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 698.972316][T11865] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 699.048491][T11865] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 699.229675][T11876] netlink: 'syz.2.2656': attribute type 21 has an invalid length. [ 699.242809][T11876] netlink: 'syz.2.2656': attribute type 1 has an invalid length. [ 699.254131][T11876] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2656'. [ 699.640927][T11886] : port 1(ip6gretap0) entered blocking state [ 699.657025][T11886] : port 1(ip6gretap0) entered disabled state [ 699.669825][T11886] device ip6gretap0 entered promiscuous mode [ 702.444752][T11893] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.2662'. [ 702.584145][T11900] netlink: 'syz.2.2664': attribute type 3 has an invalid length. [ 702.657510][T11900] netlink: 'syz.2.2664': attribute type 1 has an invalid length. [ 702.716989][T11900] netlink: 12611 bytes leftover after parsing attributes in process `syz.2.2664'. [ 705.847936][T11930] netlink: 'syz.0.2671': attribute type 39 has an invalid length. [ 706.504577][T11944] netlink: 'syz.0.2679': attribute type 3 has an invalid length. [ 706.529864][T11944] netlink: 'syz.0.2679': attribute type 1 has an invalid length. [ 706.537663][T11944] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2679'. [ 707.284409][T11952] bond0: (slave dummy0): Error: Slave device does not support XDP [ 707.359270][T11952] netlink: 'syz.0.2682': attribute type 10 has an invalid length. [ 707.534601][T11952] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 707.937652][T11977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2686'. [ 707.989647][T11976] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2687'. [ 708.125186][T11979] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.2689'. [ 708.718241][T11989] netlink: 'syz.4.2692': attribute type 3 has an invalid length. [ 708.737197][T11989] netlink: 'syz.4.2692': attribute type 1 has an invalid length. [ 708.745386][T11989] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.2692'. [ 709.835135][T12012] netlink: 'syz.0.2700': attribute type 2 has an invalid length. [ 710.620987][T12029] netlink: 'syz.1.2706': attribute type 3 has an invalid length. [ 710.628885][T12029] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 710.691223][T12029] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2706'. [ 711.066707][T12012] device .*! entered promiscuous mode [ 712.057041][T12056] netlink: 'syz.2.2717': attribute type 3 has an invalid length. [ 712.087415][T12056] netlink: 'syz.2.2717': attribute type 1 has an invalid length. [ 712.098840][T12056] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2717'. [ 714.442587][T12066] netlink: 'syz.1.2719': attribute type 11 has an invalid length. [ 714.461829][T12066] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2719'. [ 714.488396][T12067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 714.566043][T12069] netlink: 'syz.4.2720': attribute type 10 has an invalid length. [ 716.238512][T12091] netlink: 'syz.3.2728': attribute type 3 has an invalid length. [ 716.265327][T12091] netlink: 'syz.3.2728': attribute type 1 has an invalid length. [ 716.299134][T12091] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.2728'. [ 716.919320][ T49] Bluetooth: hci4: unexpected event 0x1d length: 151 > 5 [ 717.104040][T12117] netlink: 'syz.0.2739': attribute type 10 has an invalid length. [ 717.915260][T12117] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 717.942659][T12120] netlink: 'syz.4.2741': attribute type 21 has an invalid length. [ 717.960249][T12120] netlink: 'syz.4.2741': attribute type 1 has an invalid length. [ 717.982919][T12120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2741'. [ 718.107390][ T49] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 718.183820][T12134] netlink: 'syz.0.2744': attribute type 3 has an invalid length. [ 718.189680][T12133] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2745'. [ 718.210204][T12134] netlink: 'syz.0.2744': attribute type 1 has an invalid length. [ 718.221705][T12134] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2744'. [ 718.231418][T12133] device hsr_slave_0 left promiscuous mode [ 718.244630][T12133] device hsr_slave_1 left promiscuous mode [ 718.687578][ T49] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 719.573305][T12168] netlink: 'syz.4.2756': attribute type 10 has an invalid length. [ 719.618702][T12168] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 720.066648][T12168] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 720.139512][T12168] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 720.165408][T12170] netlink: 'syz.1.2754': attribute type 10 has an invalid length. [ 720.221852][T12170] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.255226][ T49] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 720.293827][T12170] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.315172][T12170] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.383897][T12170] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 720.470421][T12176] netlink: 'syz.0.2758': attribute type 21 has an invalid length. [ 720.478417][T12176] netlink: 'syz.0.2758': attribute type 1 has an invalid length. [ 720.487058][T12176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2758'. [ 721.984417][ T49] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 723.566947][T12225] netlink: 'syz.2.2778': attribute type 10 has an invalid length. [ 723.640822][T12225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 724.490986][T12225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 724.570655][T12238] netlink: 'syz.4.2777': attribute type 10 has an invalid length. [ 724.715181][T12238] team0: Port device geneve1 added [ 725.708984][T12260] : port 1(ip6gretap0) entered blocking state [ 725.720467][T12260] : port 1(ip6gretap0) entered disabled state [ 725.753244][ T49] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 725.778266][T12260] device ip6gretap0 entered promiscuous mode [ 726.129232][ T49] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 726.355832][T12273] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2791'. [ 729.178476][ T49] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 729.343940][T12288] netlink: 'syz.3.2794': attribute type 10 has an invalid length. [ 729.498210][T12288] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 730.785921][T12308] netlink: 'syz.3.2803': attribute type 10 has an invalid length. [ 730.804824][T12308] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.839896][T12308] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 730.921088][T12308] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.040473][T12308] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.521959][T12324] : port 1(ip6gretap0) entered blocking state [ 731.557089][T12324] : port 1(ip6gretap0) entered disabled state [ 731.578495][T12324] device ip6gretap0 entered promiscuous mode [ 731.620985][T12327] netlink: 14975 bytes leftover after parsing attributes in process `syz.4.2811'. [ 734.870779][T12349] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.2820'. [ 735.127263][T12353] device sit0 left promiscuous mode [ 735.383311][T12360] netlink: 'syz.0.2823': attribute type 3 has an invalid length. [ 735.458307][T12360] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2823'. [ 736.343694][T12364] device sit0 entered promiscuous mode [ 736.664057][T12383] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.2831'. [ 736.728314][T12385] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2832'. [ 736.766880][T12386] : port 1(syz_tun) entered blocking state [ 736.805219][T12386] : port 1(syz_tun) entered disabled state [ 736.827838][T12386] device syz_tun entered promiscuous mode [ 737.315312][T12402] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.2839'. [ 737.466804][T12394] IPv6: NLM_F_CREATE should be specified when creating new route [ 738.738847][T12432] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.2847'. [ 738.998385][T12437] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2848'. [ 739.225839][T12446] netlink: 'syz.3.2852': attribute type 39 has an invalid length. [ 739.966351][T12469] syz.0.2862[12469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 740.096327][T12471] tipc: Started in network mode [ 740.152388][T12471] tipc: Node identity 9215a268, cluster identity 4711 [ 740.171548][T12471] tipc: Node number set to 2450891368 [ 740.765083][T12477] netlink: 'syz.2.2863': attribute type 10 has an invalid length. [ 741.597304][T12502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2874'. [ 742.540446][T12502] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2874'. [ 743.002244][T12516] netlink: 'syz.1.2876': attribute type 21 has an invalid length. [ 743.017745][T12516] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2876'. [ 743.028325][T12516] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2876'. [ 743.375846][ T49] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 744.442770][T12552] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2890'. [ 745.089466][T12571] tun1: tun_chr_ioctl cmd 2148553947 [ 745.236137][T12568] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.2893'. [ 745.452935][T12572] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2894'. [ 745.494456][T12572] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 747.103163][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.109570][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.719235][T12624] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 747.745356][T12624] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 747.788117][T12625] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 747.905540][T12625] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 747.959187][T12633] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 747.991099][T12625] netlink: 'syz.2.2909': attribute type 29 has an invalid length. [ 748.085181][T12624] can: request_module (can-proto-0) failed. [ 748.111970][T12638] IPv6: NLM_F_CREATE should be specified when creating new route [ 748.735450][T12645] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2917'. [ 749.977342][T12668] netdevsim netdevsim3: Firmware load for '/../file0' refused, path contains '..' component [ 750.182870][T12676] netlink: 'syz.1.2931': attribute type 29 has an invalid length. [ 750.252520][T12676] netlink: 'syz.1.2931': attribute type 29 has an invalid length. [ 750.290415][T12680] netlink: 'syz.1.2931': attribute type 29 has an invalid length. [ 750.441519][T12680] netlink: 'syz.1.2931': attribute type 29 has an invalid length. [ 750.632763][T12676] can: request_module (can-proto-0) failed. [ 751.005529][T12700] tun0: tun_chr_ioctl cmd 2148553947 [ 751.031977][T12700] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.2937'. [ 751.117359][T12704] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2939'. [ 751.733168][ T49] Bluetooth: hci1: unexpected event 0x12 length: 151 > 8 [ 752.859835][T12749] validate_nla: 3 callbacks suppressed [ 752.859854][T12749] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 752.887649][T12749] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 752.900236][T12749] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 753.015451][T12753] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 753.063479][T12751] tun0: tun_chr_ioctl cmd 2148553947 [ 753.089356][T12753] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 753.113625][T12753] netlink: 'syz.3.2955': attribute type 29 has an invalid length. [ 753.114138][T12751] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.2957'. [ 753.195656][T12749] can: request_module (can-proto-0) failed. [ 757.283410][T12840] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2992'. [ 758.386395][T12862] netlink: 'syz.4.3000': attribute type 10 has an invalid length. [ 758.412435][T12862] device veth0_macvtap left promiscuous mode [ 759.440302][T12887] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.3009'. [ 760.286124][T12906] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3015'. [ 760.299065][T12911] netlink: 'syz.2.3016': attribute type 10 has an invalid length. [ 760.317917][T12911] device veth0_macvtap left promiscuous mode [ 761.185715][T12906] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 761.556752][T12925] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.3026'. [ 763.157255][T12961] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3040'. [ 763.199855][T12961] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3040'. [ 763.235847][ T49] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 763.582454][T12968] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.3042'. [ 763.611995][T12973] netlink: 'syz.0.3043': attribute type 21 has an invalid length. [ 763.659237][T12973] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3043'. [ 763.679941][T12973] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3043'. [ 767.260906][ T49] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 767.437699][T13013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3061'. [ 767.531050][T13013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3061'. [ 769.196255][ T49] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 770.496801][T13090] netlink: 'syz.3.3093': attribute type 21 has an invalid length. [ 770.507538][T13090] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3093'. [ 770.526705][T13090] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3093'. [ 770.878632][T13105] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3096'. [ 770.905366][T13105] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 772.526479][T13138] syz.4.3105[13138] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 773.705045][T13149] netlink: 'syz.2.3109': attribute type 21 has an invalid length. [ 773.737068][T13149] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3109'. [ 773.807364][T13149] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3109'. [ 776.504571][ T49] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 776.868641][T13179] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 776.876529][T13179] #PF: supervisor instruction fetch in kernel mode [ 776.883058][T13179] #PF: error_code(0x0010) - not-present page [ 776.889070][T13179] PGD 25c22067 P4D 25c22067 PUD 0 [ 776.894271][T13179] Oops: 0010 [#1] PREEMPT SMP KASAN [ 776.899760][T13179] CPU: 0 PID: 13179 Comm: syz.0.3120 Not tainted syzkaller #0 [ 776.907263][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 776.917360][T13179] RIP: 0010:0x0 [ 776.920914][T13179] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 776.928346][T13179] RSP: 0018:ffffc90005937498 EFLAGS: 00010246 [ 776.934505][T13179] RAX: 1ffffffff162a0a7 RBX: 1ffff92000b26ea4 RCX: 0000000000000001 [ 776.942553][T13179] RDX: ffffc90005937540 RSI: 0000000000000001 RDI: ffff88807478a000 [ 776.950600][T13179] RBP: ffffc900059375b0 R08: ffff88807478a03f R09: 1ffff1100e8f1407 [ 776.958634][T13179] R10: dffffc0000000000 R11: ffffed100e8f1408 R12: ffffe8ffffc46910 [ 776.966664][T13179] R13: ffffffff8b150538 R14: 0000000000000000 R15: ffff88807478a000 [ 776.974700][T13179] FS: 00007fe1360326c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 776.983681][T13179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 776.990313][T13179] CR2: ffffffffffffffd6 CR3: 000000007cbf5000 CR4: 00000000003506f0 [ 776.998334][T13179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.006345][T13179] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000010602 [ 777.014356][T13179] Call Trace: [ 777.017742][T13179] [ 777.020869][T13179] bond_xdp_xmit+0x31e/0x550 [ 777.025642][T13179] ? bond_xdp_xmit+0x94/0x550 [ 777.030478][T13179] ? bond_xdp+0x8c0/0x8c0 [ 777.034889][T13179] bq_xmit_all+0xca9/0x1120 [ 777.039518][T13179] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 777.045385][T13179] ? ct_nmi_exit+0x145/0x1c0 [ 777.050098][T13179] ? ct_irq_exit_irqson+0x113/0x170 [ 777.055404][T13179] ? __dev_flush+0x1b0/0x1b0 [ 777.060052][T13179] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 777.066111][T13179] ? lock_chain_count+0x20/0x20 [ 777.071018][T13179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 777.077299][T13179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 777.083530][T13179] ? lockdep_hardirqs_on+0x94/0x140 [ 777.088803][T13179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 777.095016][T13179] ? __dev_flush+0x32/0x1b0 [ 777.099577][T13179] __dev_flush+0xbf/0x1b0 [ 777.103990][T13179] xdp_do_flush+0xa/0x20 [ 777.108372][T13179] bpf_test_run_xdp_live+0x1549/0x1a90 [ 777.113969][T13179] ? bpf_test_run_xdp_live+0x515/0x1a90 [ 777.119581][T13179] ? xdp_convert_md_to_buff+0x330/0x330 [ 777.125210][T13179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 777.131440][T13179] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 777.137749][T13179] bpf_prog_test_run_xdp+0x757/0xf80 [ 777.143179][T13179] ? __lock_acquire+0x7ea0/0x7ea0 [ 777.148268][T13179] ? dev_put+0x80/0x80 [ 777.152392][T13179] ? dev_put+0x80/0x80 [ 777.156509][T13179] bpf_prog_test_run+0x31c/0x390 [ 777.161583][T13179] __sys_bpf+0x62b/0x780 [ 777.165885][T13179] ? bpf_link_show_fdinfo+0x380/0x380 [ 777.171313][T13179] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 777.177524][T13179] __x64_sys_bpf+0x78/0x90 [ 777.182066][T13179] do_syscall_64+0x4c/0xa0 [ 777.186533][T13179] ? clear_bhb_loop+0x60/0xb0 [ 777.191273][T13179] ? clear_bhb_loop+0x60/0xb0 [ 777.196000][T13179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 777.202052][T13179] RIP: 0033:0x7fe13519e1d9 [ 777.206552][T13179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.226364][T13179] RSP: 002b:00007fe136032028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 777.234834][T13179] RAX: ffffffffffffffda RBX: 00007fe135425fa0 RCX: 00007fe13519e1d9 [ 777.243028][T13179] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 777.251037][T13179] RBP: 00007fe135235888 R08: 0000000000000000 R09: 0000000000000000 [ 777.259053][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.267062][T13179] R13: 00007fe135426038 R14: 00007fe135425fa0 R15: 00007ffec9a256f8 [ 777.275085][T13179] [ 777.278155][T13179] Modules linked in: [ 777.282118][T13179] CR2: 0000000000000000 [ 777.286325][T13179] ---[ end trace 0000000000000000 ]--- [ 777.291810][T13179] RIP: 0010:0x0 [ 777.295348][T13179] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 777.302775][T13179] RSP: 0018:ffffc90005937498 EFLAGS: 00010246 [ 777.308928][T13179] RAX: 1ffffffff162a0a7 RBX: 1ffff92000b26ea4 RCX: 0000000000000001 [ 777.316952][T13179] RDX: ffffc90005937540 RSI: 0000000000000001 RDI: ffff88807478a000 [ 777.324975][T13179] RBP: ffffc900059375b0 R08: ffff88807478a03f R09: 1ffff1100e8f1407 [ 777.332993][T13179] R10: dffffc0000000000 R11: ffffed100e8f1408 R12: ffffe8ffffc46910 [ 777.341009][T13179] R13: ffffffff8b150538 R14: 0000000000000000 R15: ffff88807478a000 [ 777.349027][T13179] FS: 00007fe1360326c0(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 777.358016][T13179] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 777.364641][T13179] CR2: ffffffffffffffd6 CR3: 000000007cbf5000 CR4: 00000000003506f0 [ 777.372677][T13179] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 777.380695][T13179] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000010602 [ 777.388716][T13179] Kernel panic - not syncing: Fatal exception in interrupt [ 777.396544][T13179] Kernel Offset: disabled [ 777.400892][T13179] Rebooting in 86400 seconds..