last executing test programs: 23.599944316s ago: executing program 2 (id=7561): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) r1 = syz_clone(0xa000000, &(0x7f00000001c0)="6e95e7ce72b837064c8c47ef62df2320c24ca7c8e8472f21607522f4af32de9502fbf316c7bb0b25914ff9661ca01cf8b104901d3177379c8a077984793051c5cae582e7946325f74022e03eea12adeeef469cfb69cf660e6b90a8f2f775249a9014828029b20b6fe51a4bc48d0a4b25c1d4f2e6ad4cd0fbb2bdbfb5cea7be43029f6980eccc62fdb77962f376d91af03b92eb26a026a8c68d4353b0f7a48da2d0c8cb53800cbe2747071cf8b83897b9e16373ebd4cb2206f1e49cb7dd205c1df84e78", 0xc3, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001140)="6e9931300c6dca1ead4f2b90ae472fcce787be90ef73dda75fafa9d22549adc29e10e142f11c384859457d57a003a751166676a0c4e76ec591f070bcbb2552f25bf773f9c51bdcaf0abcd171a50fdb2ef72f3122a380de92b562a7446bfce84656bba72311d2480acaea5e90c86d506f353ee9e6e4d3b6d7b6e372c8a7d24d599aac1392a259c7856d6c2760b82074dfcefe2c7fa1f22059d909bdab41979c86b19fc6bdf2b73c76e70ef4f22221b6c1b162aed43630234751246c7d2841211d99901938abb538fdf4b5e39f75ef9955bfa177a222c557dff1ddab0029a043edfa24a69a94112c66f104fb942eed461d4009662e5fb9aa41794b0b5bea260b4cdd348022f9534cf2eb15d3516cb89c1efb9ebc927424e7f0e933982540c782748578cd99bcfc026696ddffa9a171ff623c92879f0f843a0bfa41975d89b829c7ce0e9df4c47010898ae2cb79936e73cc416614c8feac9ddc0e2608e34497ea481036c31d23c7775c2d09e3b8ea88fc346c9676d163fd9fdb56b99c9ebc094bbf051c0d5b9f1cd90363fdd2d4a8caf210a64175fbdad27a28fa8f61d79397b576dac115f33bac18b2a9d370d94b5e904d8a41bdf8342954c77d60936d2273e680a7334942385c27646a3263568fd5301064368c830811c4a48e9ca8da15998a2a6a4221a1542d353df93da2390a74c604c2ed0a53e7650ddf23b0baca3bed3149bca98952fac1b661badc3e8134051646dec95a2048a219da353ec6cbf5fa5a6de6c6f13d9e324c2ef8062c515ed88164d7f863a264de02f34b3395dccafd8ff8b0b4d396aacefa13a6205c3ab59154b723e3747bf29057561ad517f91a527de16573962135c9cb4a2c39b7b62b7364d1d0cec7b391016ed60bd7db0801984a9b444ed967ed9b46f821d4113da2645a61257cbdd1420de16bf3d4ba8efafabd4e081a3b3a17b68184e4cc0007e66ec6ada60ce4b874193fce145017dbd634a5e7083265ceca7d331eb1dcf15cdb73e31bbf901a2e15ef33dd47dcfb0a29dd2fcbbd77c92fdcd0973111b5fd61fb8a79582897c2c29475870f46b6e8e4d1a6fb77a488aafd0b24dbf4ed17a2dcebf2aee2ac6b7ec0821e090886275a66c35523b0d7f80105d6819f0e8f19de3bbb8f501a0f5e681302f6113d0ca30656f1a1c67c887d92f8b49144f3f846c8c3ca111bcf0116e33250550f745fb17b4760c0dd32eba4056ece3f83426cee2783b1b771798022050b451cb9b57ec45ff87eaee8e9499e6884af936705b40b817d7a01fa872ecceee8eb27a7403ab8319af5cb2c296fc370824253976c4dbf4d4efc6dc7ffb41de23ae7b59390abedb0459ed1b7d7e36a2a077feb756dd8f7080264d369127e7e03c8cc6a5989d84e7aae652632e938ccebb94aeff397db19b1a3d51ceed50c3273a30156f892c0738d90f8b100541a3d8bfd6fac2730e2b690344262f386b96181df275feb59558085c550d1735516f5adb71ca982733ae97ee93cf46687e7637b0a179b252dab38f4f3d545b9bb5d30ffbd4138330b7aaedd10cbb8a6886993d17a5dc17068a3b21003b1fc5bd7798b69def407b7c9509e32af4d7706bcfb46c54e10e819b88032b91d7e0c25583f715fa43e924bb2bbab15bdd10012bfe1ad41cc62b287b23849e74c7a09f9ab3c016398b6e53b4d6097f2e62c4a83500ce43e621299aab24264b867a07a4f2c724b3e1804b200bfc963a3dbb902a288a5ab1dbb09eec18145b3000a9baf6fae6057e6f16412627a5eea8b1c12bf885865f59e2ec72c5be76b96a7ab9e936af7ef486c8a5a83dadc5ec17a73febf5ea760fef5ff17af7b3b81fa926768e849fcb81e304c5c5a7d9d3546dd603833ed33e63124c3a65087ca5036f4a7c76bbf23ffb09258daafcc37e3a899ef7d4f9ee2521ff39333c8477ac26392aeb7c6304a111490dd9e39b65d80468ffcf660de0742f74bebfdfd0f3df0aa04f6057128ddb4fd4b9ccfaff7a9d15e6e74acce2734b6a785629b50d05755c101075f977c9b3d74a6f55ea7a680f9000db15d96d9fbc11f33b3edc6599bfedbde53a6097d6ff412530da196dc16a069e86a1f12f3cf4f78568435bd677f84295b2289a1ecec260d30cd4f70f3758cc6307a0b96369d7a4e40d1190b529d338f8581e83ee8f81cd577e0825f98a8a6b9e4a41965921e14d282543fed1386ca0f061844b69642118a0675ea8c1d533389fcf63ad2fac87bbce7fcb6b5e456ebb0f442876b1d25ffd2ea6fb39ae863e401d9c9c3b641cc55725493aed2418daa703892a17ea3b81fdd1c63405af929305298d510ab4ceaac92f3b73c8a920cde050bdfce69b6f5fdf0ae689580714a276e9441ea6bf80f4030076337f5dda3e1c55244ba66898464b665c69ace5b4a0633d2ccc0051fe62e0fef04b7ce104a330a04beadb96d52862bfe28baa490aa39318b2ccbadc678b5ba6063f6ba4e5d495a876677446b3241af1d9516806f222a9ae62d229c60ce9a68da927fd6232cbe7413ab840541729edde7f6b75459b2342675b1cc6c8ef5dd5a378a7a2c11da0d5e20851e6892056953ea860640addce96eeabf1be73e3bee2e460f64ab0e6207339498a5a9805a1f61ad4c0e1930424077cc07020fc4821b9e00b29b0e8154f98cad785d2dad3114c2fcae1689afa04f25e33751002504b715dc3312bb967a23c3b901bd5aa70508dcde4f12ba27c852bb654313bb9c9c2621b455b81d4ac1801b165cadaa8ef7c0d388e212042dc04c7bb5d0945848dca35749988fe1481dae99e18a93f15030fabfec8d3d6e2c9090c206fa1e8cc0b049d216fc25cae281553e28909df38b7a7501563013ee6320bbb8cf34359e7821dac611b8e5e6d8c5e42ca245c49f389d42415d383a25571c2dcb2671415d010392d290d5bd11ef578e13791cbb49db83073068d9205643b244f6c940971238e17ec0d820446dbf32064590746108d465491efc958058219b2938aea02edc46faa95f32c75861b663d1c5f8b545ea08e057927e831133b7270dde30c6ddef4cc20397163c9c290f79af553d28eee842378fbe8bc7c0300fc90320baf4d3b72222c1f0d89505f710137847feedaf30e19c6e119067efa0802ec35ae5da12ee77e46a146636b45492d830850e564e371068b9c0bb89f3880b7970466ef235dfdbfdc3ed772817d07a0b959ba2d464d482bea0f83aac7c971409f0e97f12fb9603cbaa7d648e26f09145e50efd899abe23ddd8408dac874031def8b6f9624be38566ac314514074a6f8a26318ad42aafaf882e90fa4b794dbb2988193f45c981c2903d67945f946fb38d0ccb5c4084034579909b55eea0b490eaccec72b311c1d66fcd24b17b6ca484e00f3ce432a66f4ee5d79056ea1cb114eb894777c521d4dfe63b8f1df8b0230ec4862e634f2f70f5b515ee1d1d7c4a06f9e79a1559102d243166d5ceef73cf9216fc98b85f9d531242846f3ce7ae3539508a454e00fd73b2fc3a6fc32c7570f57aba71d34208bf1f8ca666c27cc064f4e1fd14bd6056743cc87d96f4cd4589022f3d2a472c4ddde4e3d9a13d8ae23f99cdc6fbdfb6900070a9e0544ef3c9c759952406452cbd8a8ec39f325f779353b0ddc19ade91e2e39ac73521d81d8ed05ee077da418d549c14802699bf838233daff4d2d2ca861ea60f95a458c20155cce1167b1a9dd3854fb37919498a74df88f6f45dcff91dffd251f40a2533ad5797a75176f323752495f18b02b5deba0c3c0b1ac36ad268fa772e0b8686513fb0c08a2fe03") perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000", @ANYBLOB="0000000000000000000000002ce4b1234cb20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, 0x0}, 0x20) perf_event_open$cgroup(&(0x7f0000000300)={0x5cfa2c3a365f2bf9, 0x80, 0x4a, 0x9, 0x1, 0x0, 0x0, 0x2, 0xd6008, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x200, 0x7, 0x7, 0x6, 0x2, 0x400, 0x5, 0x0, 0x8000, 0x0, 0x3}, r2, 0xb, 0xffffffffffffffff, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="850f8f90c1ec2207fa930374c6c469bd37b2cb3f481e22c0fd9fda074ef8bff1a9f0679848ff6c41f65cf2bd01c7474e90cc970d2eb2d016c35ab09568ff331eb5181983659b21d6313f5159656b2e4e28696bc0265d0e792e6dce3545c3bb5ca8abb10900000000000000612786588de30c594b6f7044f37e775ef69f1bdc7585573369d3b74800fa256ffd7dc3bb8b8eb976785190690ddc4e94a700faa04d7cde717ea46ed21ca19aaba271d528de8663139bc415aec44b05", @ANYRES32=r5, @ANYRES64=0x0], 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)='\x00'}, 0x30) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 22.407030294s ago: executing program 2 (id=7568): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000002001000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b408b721beab4915fe4e3492a9efe6b3cadf00000000000073119a00000100008510000002000000b700000000d049009500c2000000000095000012000000006f2035c252335cab6ed6148aefe2e3722cf49591acf5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x12) r3 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x64}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000100)=r3, 0x12) r6 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1, 0x12) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x4000000000}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 21.448041598s ago: executing program 4 (id=7570): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 21.294222161s ago: executing program 0 (id=7572): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x3, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42712, 0x0, 0x4, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) 21.151031233s ago: executing program 2 (id=7574): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) close(r0) 20.545357342s ago: executing program 3 (id=7575): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5", 0x4f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe6fa26bc6d06f6f8d6ff18ba969b1e5c167cd266dbccf4c178105eb249b49e1a5727ddad0766d80d9ebf58028892c5656e9ca94b154ff1d08e950b52a5032cfde1ec184e85c0ad04ae11401429ca28ddec7793c0a136348fe1f207271f01b73f8e7", 0xa2, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000940)="19cbfdadb2f1504b037dd97423d8fb26f36d53ed4dd078e4031081734b3cc39b29e2487d9afcb8cd579dd707a8e9e4cf9c9026de5189326efbfa2b38d8b191fc5932794125dfd9014373a652ee1c4b50d52b8b9a328e035e14d86049c077677127081d0ed366920823b8fe9902eaa5f67e6e233e9a4328699788bcab5f646715c173c6056a1e36dfde8a89f800ee647b1f90c94b610af7") recvmsg(r0, 0x0, 0x40000020) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7", 0x94}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badf", 0x43}], 0x2}, 0x20000050) 20.505979263s ago: executing program 4 (id=7576): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 20.274938736s ago: executing program 1 (id=7577): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f00000003c0)='syzkaller\x00'}, 0x51) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200002, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0xc0}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888100", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.271458466s ago: executing program 0 (id=7578): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x2, [{0xa, 0x3, 0x1000000}]}, @fwd={0x1}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x30, 0x2e, 0x61, 0x30, 0x61, 0x61, 0x61, 0x61]}}, 0x0, 0x54}, 0x28) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080201000000120000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fffffe100004000632f77fb080600017f020001be3e7d2a182f", 0x0, 0x104, 0x6000000000000000, 0x31, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2", 0x0}, 0x50) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x4, 0x0, 0x1000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000b00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 19.240740511s ago: executing program 3 (id=7579): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 17.057507704s ago: executing program 1 (id=7581): perf_event_open$cgroup(&(0x7f0000000040)={0x4, 0x80, 0xb2, 0xe0, 0x3, 0xb, 0x0, 0x9, 0x1c440, 0x9, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x405, 0x2, @perf_config_ext={0x1000, 0x6ba3b737}, 0x100708, 0x8, 0x2, 0x8, 0x10001, 0x6, 0xdb7d, 0x0, 0x7, 0x0, 0x8000}, 0xffffffffffffffff, 0x400000000004, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000100)) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB='8-N:0/2'], 0x6a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xbc}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="54ae1f8219560625baa794a469ce", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b400", 0x28}], 0x1}, 0x0) mkdirat$cgroup(r1, &(0x7f0000000200)='syz0\x00', 0x1ff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) 17.057292034s ago: executing program 2 (id=7582): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 16.912464397s ago: executing program 4 (id=7583): r0 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}, 0x86) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x0, 0xe40, 0xfffffe6d, &(0x7f0000000100)="5c71f91b05c413550230b4c817a628", 0x0, 0x1, 0x0, 0x302, 0x0, &(0x7f0000000180)='\x00', 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00Y'], 0xfe33) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x60}, 0x40002002) r4 = socket$kcm(0xa, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305839, &(0x7f0000000040)=0x14b) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x14, &(0x7f0000000100)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x4}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x1a}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @ldst={0x2, 0x0, 0x3, 0x466dc408061b462c, 0x4, 0x50, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x100, 0x4b, &(0x7f0000000200)=""/75, 0x40f00, 0x4, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x3, 0x4, 0x6, 0xa}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000300)=[r2], &(0x7f0000000340)=[{0x5, 0x3, 0x9, 0x9}, {0x3, 0x5, 0x9, 0x1}, {0x4, 0x2, 0x0, 0x5}, {0x4, 0x3, 0x8, 0x8}, {0x5, 0x4, 0x2, 0x2}, {0x2, 0x3, 0xe, 0x2}, {0x1, 0x1, 0x1, 0x2}, {0x1, 0x3, 0x8, 0x9}], 0x10, 0x3}, 0x94) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x28, 0x4}, 0x80, 0x0}, 0x24044051) 16.893751057s ago: executing program 3 (id=7584): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe6fa26bc6d06f6f8d6ff18ba969b1e5c167cd266dbccf4c178105eb249b49e1a5727ddad0766d80d9ebf58028892c5656e9ca94b154ff1d08e950b52a5032cfde1ec184e85c0ad04ae11401429ca28ddec7793c0a136348fe1f207271f01b73f8e7", 0xa2, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000940)="19cbfdadb2f1504b037dd97423d8fb26f36d53ed4dd078e4031081734b3cc39b29e2487d9afcb8cd579dd707a8e9e4cf9c9026de5189326efbfa2b38d8b191fc5932794125dfd9014373a652ee1c4b50d52b8b9a328e035e14d86049c077677127081d0ed366920823b8fe9902eaa5f67e6e233e9a4328699788bcab5f646715c173c6056a") recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000600)=""/198, 0xc6}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000000540)=""/92, 0x5c}], 0x8}, 0x40000020) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7", 0x94}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badf", 0x43}], 0x2}, 0x20000050) 16.768427239s ago: executing program 1 (id=7585): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0xffffffffffffffff, 0x1, 0x2000}}, 0x10, 0x0}, 0x4040000) r3 = socket$kcm(0x2, 0x922000000001, 0x106) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40) r4 = socket$kcm(0x2, 0x200000000000003, 0x106) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$SIOCSIFHWADDR(r5, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) setsockopt$sock_attach_bpf(r4, 0x0, 0x3, 0x0, 0x0) 16.767451559s ago: executing program 0 (id=7586): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f00000002c0)}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0xffffffffffffffff, 0x7, r2, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 16.381620154s ago: executing program 1 (id=7587): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 16.360286294s ago: executing program 4 (id=7588): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 16.351527885s ago: executing program 0 (id=7589): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x16, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x801, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0xca, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socket$kcm(0x10, 0x2, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10090, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x3, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x4044}, 0x0, 0x1, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x71, 0x5, 0x8, 0x8, 0x0, 0x1f, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_bp={0x0, 0x1}, 0xb06, 0x3, 0x8, 0x1, 0x7f, 0x800, 0x5, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x1}, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) socket$kcm(0x2, 0x1000000000000002, 0x0) socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/uts\x00') recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8], 0x12) 16.340253565s ago: executing program 2 (id=7590): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe6fa26bc6d06f6f8d6ff18ba969b1e5c167cd266dbccf4c178105eb249b49e1a5727ddad0766d80d9ebf58028892c5656e9ca94b154ff1d08e950b52a5032cfde1ec184e85c0ad04ae11401429ca28ddec7793c0a136348fe1f207271f01b73f8e7", 0xa2, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000940)="19cbfdadb2f1504b037dd97423d8fb26f36d53ed4dd078e4031081734b3cc39b29e2487d9afcb8cd579dd707a8e9e4cf9c9026de5189326efbfa2b38d8b191fc5932794125dfd9014373a652ee1c4b50d52b8b9a328e035e14d86049c077677127081d0ed366920823b8fe9902eaa5f67e6e233e9a4328699788bcab5f646715c173c6056a1e36dfde8a89f800ee647b1f90c94b610a") recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000600)=""/198, 0xca}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000000540)=""/92, 0xa3}], 0x9}, 0x40000020) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d800000010008104687da3aa7143a0b8c81f080b21000000e8fe55a19c9d8714060014000000001208000a0043000040a80012001600054006000d000360107134cf6ee08000a0e408e8d8ef52a9d765dd11683296b7947968c7c0b7a196e6f66100000000000000000000003a17b259b640cce85107000014bbba2379bdbb26887321ace48051f2373a24cbd99f0c59b23c28b7", 0x94}, {&(0x7f0000000bc0)="aa581ff83dac4a519b67538bfa897e210c31e1c78d2d8de1498e01601b446808358248cf2d795634b12c4ce81c38765fa04eaab78e0d3122d0db5efb9428a0e5c5badf", 0x43}], 0x2}, 0x20000050) 15.869819952s ago: executing program 3 (id=7591): socketpair(0x1, 0x5, 0x0, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00'}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r0, r2}, 0xc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x880) close(r2) sendmsg$kcm(r1, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) r3 = socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x604, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg(r3, &(0x7f0000002d40)={0x0, 0x0, &(0x7f0000001780)}, 0x44010) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x5, [{0xa, 0x4}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x5f, 0x61]}}, 0x0, 0x37}, 0x28) 15.861156632s ago: executing program 1 (id=7592): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) close(r0) 15.632263236s ago: executing program 3 (id=7593): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 15.612504756s ago: executing program 0 (id=7594): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x200, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x5}, 0x21, 0x0, 0x0, 0x8, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 15.584608686s ago: executing program 4 (id=7595): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) r1 = syz_clone(0xa000000, &(0x7f00000001c0)="6e95e7ce72b837064c8c47ef62df2320c24ca7c8e8472f21607522f4af32de9502fbf316c7bb0b25914ff9661ca01cf8b104901d3177379c8a077984793051c5cae582e7946325f74022e03eea12adeeef469cfb69cf660e6b90a8f2f775249a9014828029b20b6fe51a4bc48d0a4b25c1d4f2e6ad4cd0fbb2bdbfb5cea7be43029f6980eccc62fdb77962f376d91af03b92eb26a026a8c68d4353b0f7a48da2d0c8cb53800cbe2747071cf8b83897b9e16373ebd4cb2206f1e49cb7dd205c1df84e78", 0xc3, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000001140)="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") perf_event_open(&(0x7f00000003c0)={0x3, 0x80, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x7}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b0000000000000000"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000000400000008000000ff07000000000000", @ANYBLOB="0000000000000000000000002ce4b1234cb20000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x27) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000240)={r3, 0x0}, 0x20) perf_event_open$cgroup(&(0x7f0000000300)={0x5cfa2c3a365f2bf9, 0x80, 0x4a, 0x9, 0x1, 0x0, 0x0, 0x2, 0xd6008, 0x4, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0xfffffff8, 0x2, @perf_bp={&(0x7f00000002c0)}, 0x200, 0x7, 0x7, 0x6, 0x2, 0x400, 0x5, 0x0, 0x8000, 0x0, 0x3}, r2, 0xb, 0xffffffffffffffff, 0x4) r4 = socket$kcm(0x10, 0x3, 0x10) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000940)={0x9, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="850f8f90c1ec2207fa930374c6c469bd37b2cb3f481e22c0fd9fda074ef8bff1a9f0679848ff6c41f65cf2bd01c7474e90cc970d2eb2d016c35ab09568ff331eb5181983659b21d6313f5159656b2e4e28696bc0265d0e792e6dce3545c3bb5ca8abb10900000000000000612786588de30c594b6f7044f37e775ef69f1bdc7585573369d3b74800fa256ffd7dc3bb8b8eb976785190690ddc4e94a700faa04d7cde717ea46ed21ca19aaba271d528de8663139bc415aec44b05", @ANYRES32=r5, @ANYRES64=0x0], 0x20) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={r1, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000500)='\x00'}, 0x30) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15.106035193s ago: executing program 4 (id=7596): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x4000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x7, 0x7, 0x8, 0x3, 0x0, 0xe7d, 0xa04, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x400, 0x1, @perf_bp={0x0, 0x8}, 0x8000, 0x1, 0x60c42712, 0x0, 0x4, 0xeeb1, 0x0, 0x0, 0x5, 0x0, 0x8}, 0x0, 0x1, r1, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000800), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) 15.105279053s ago: executing program 0 (id=7606): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) 15.104648953s ago: executing program 1 (id=7597): r0 = socket$kcm(0x10, 0x3, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00-\x00Y'], 0xfe33) socket$kcm(0x18, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000380), 0xa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000003c0)='cpuset.cpu_exclusive\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000002c0)=0x3, 0x12) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0700000004000000180000008e02000000000000eace20de2f02fb4c99ce962c38a1cec2189f49bee2efe8a4270420ce2e8140546745cd403c72d282737b3c4f269bdc883a5bba3187f28b2bba2c638369a5ab5aa424e03ec9f53ea940756903395d059bc4a85582de928b34c31737a93ebfbb59fde2b2aebaec11446d89a351448f78063f3fe4bdad72614ae9179ae3be4b30920e8f1a000000", @ANYRES32, @ANYRES32=0x0], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f0000000180)=r3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x29, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d815000100fe80000000000000080005007a010401a80016002000104004000000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e", 0xd8}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x21, &(0x7f0000000040)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e100602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 15.104436263s ago: executing program 2 (id=7598): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000, 0x6}, 0x4000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) syz_clone(0x9b001000, 0x0, 0x0, &(0x7f0000000380), 0x0, 0x0) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, r0}, 0x10) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7fff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, 0x0, 0x5}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 15.104284503s ago: executing program 3 (id=7599): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xfdef) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x61, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="5c00000012006b000040017ea608601602f3650400010008000000000002009ee517c356a7b0251e616859ad3a78a76e807c857e21bea297bff435cf01c937e786a6d0bdc7fcf50e4509c5cc68b7ed9c232d786c3500000000000074", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) 0s ago: executing program 32 (id=7606): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc60", 0x14}], 0x1}, 0x0) socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(0xffffffffffffffff, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000022850000009400000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r0) kernel console output (not intermixed with test programs): 263'. [ 995.317531][T16232] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4271'. [ 995.396210][T16232] device batadv_slave_1 entered promiscuous mode [ 996.180377][T16248] netlink: 'syz.1.4279': attribute type 1 has an invalid length. [ 997.808599][T16273] netlink: 'syz.4.4283': attribute type 2 has an invalid length. [ 997.833994][T16273] netlink: 'syz.4.4283': attribute type 8 has an invalid length. [ 997.873761][T16273] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4283'. [ 997.914523][T16274] netlink: 'syz.4.4283': attribute type 2 has an invalid length. [ 997.922345][T16274] netlink: 'syz.4.4283': attribute type 8 has an invalid length. [ 998.016333][T16274] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4283'. [ 999.768513][T16308] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4300'. [ 999.797045][T16310] sctp: [Deprecated]: syz.0.4299 (pid 16310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 999.797045][T16310] Use struct sctp_sack_info instead [ 1002.062426][T16363] netlink: 'syz.2.4317': attribute type 10 has an invalid length. [ 1002.076964][T16363] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1002.568743][T16363] device vlan0 left promiscuous mode [ 1002.575026][T16363] À: port 1(vlan0) entered disabled state [ 1002.619563][T16364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4317'. [ 1002.629012][T16370] netlink: 'syz.4.4320': attribute type 10 has an invalid length. [ 1002.639678][T16370] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4320'. [ 1002.650474][T16370] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1005.519382][T16422] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.4340'. [ 1005.557046][T16422] device bridge_slave_1 entered promiscuous mode [ 1008.129737][T16487] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4362'. [ 1008.158116][T16487] netlink: 10 bytes leftover after parsing attributes in process `syz.0.4362'. [ 1008.206375][T16487] bond0: (slave bond_slave_0): Releasing backup interface [ 1008.237276][T16487] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1009.529206][T16504] netlink: 'syz.3.4368': attribute type 19 has an invalid length. [ 1009.553009][T16504] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.4368'. [ 1009.843280][T16518] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.4372'. [ 1011.177530][T16545] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4379'. [ 1011.891340][T16559] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4390'. [ 1011.945988][T16559] device batadv_slave_1 entered promiscuous mode [ 1013.089545][T16583] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4399'. [ 1013.781781][T16601] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4401'. [ 1015.625850][T16634] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.4415'. [ 1016.292192][T16654] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4423'. [ 1016.604209][T16663] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4437'. [ 1016.644275][T16663] device batadv_slave_1 entered promiscuous mode [ 1016.806197][T16669] device sit0 left promiscuous mode [ 1017.034611][T16671] device sit0 entered promiscuous mode [ 1017.846098][T16700] Ÿë: port 1(gretap0) entered blocking state [ 1017.858679][T16700] Ÿë: port 1(gretap0) entered disabled state [ 1017.869408][T16700] device gretap0 entered promiscuous mode [ 1017.885001][T16702] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4442'. [ 1018.936773][T16729] netlink: 140 bytes leftover after parsing attributes in process `syz.4.4447'. [ 1019.593213][T16744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1019.610340][T16744] device batadv_slave_1 entered promiscuous mode [ 1020.166912][T16761] device sit0 left promiscuous mode [ 1020.384471][T16762] device sit0 entered promiscuous mode [ 1021.152588][T16783] netlink: 'syz.0.4472': attribute type 39 has an invalid length. [ 1021.652963][T16786] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4473'. [ 1021.936778][T16793] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4476'. [ 1023.103302][T16828] Ÿë: port 1(gretap0) entered blocking state [ 1023.153565][T16828] Ÿë: port 1(gretap0) entered disabled state [ 1023.170112][T16828] device gretap0 entered promiscuous mode [ 1023.328529][T16832] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4491'. [ 1025.136246][T16865] Ÿë: port 1(gretap0) entered blocking state [ 1025.147067][T16865] Ÿë: port 1(gretap0) entered disabled state [ 1025.169782][T16865] device gretap0 entered promiscuous mode [ 1026.334474][T16897] device sit0 left promiscuous mode [ 1026.436555][T16898] device sit0 entered promiscuous mode [ 1026.929380][T16909] netlink: 'syz.1.4518': attribute type 3 has an invalid length. [ 1026.995222][T16908] Ÿë: port 1(gretap0) entered blocking state [ 1027.001437][T16908] Ÿë: port 1(gretap0) entered disabled state [ 1027.040890][T16909] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1027.061840][T16908] device gretap0 entered promiscuous mode [ 1027.110819][T16905] netlink: 'syz.1.4518': attribute type 3 has an invalid length. [ 1027.155172][T16905] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4518'. [ 1027.730453][T16928] netlink: 'syz.4.4523': attribute type 39 has an invalid length. [ 1028.013915][T16930] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4525'. [ 1031.639662][T17013] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4557'. [ 1032.033542][T17024] device sit0 left promiscuous mode [ 1032.552404][T17027] device sit0 entered promiscuous mode [ 1033.735753][T17061] netlink: 'syz.1.4580': attribute type 39 has an invalid length. [ 1033.991378][T17068] netlink: 'syz.4.4579': attribute type 3 has an invalid length. [ 1034.056649][T17068] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1034.421085][T17065] netlink: 'syz.4.4579': attribute type 3 has an invalid length. [ 1034.470280][T17065] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4579'. [ 1034.719606][T17077] netlink: 'syz.0.4584': attribute type 29 has an invalid length. [ 1034.757853][T17077] netlink: 'syz.0.4584': attribute type 29 has an invalid length. [ 1034.769541][T17078] netlink: 'syz.0.4584': attribute type 29 has an invalid length. [ 1034.797290][T17077] netlink: 'syz.0.4584': attribute type 29 has an invalid length. [ 1034.867559][T17077] netlink: 'syz.0.4584': attribute type 29 has an invalid length. [ 1035.597603][T17100] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4594'. [ 1036.662599][T17120] netlink: 'syz.1.4611': attribute type 1 has an invalid length. [ 1036.688297][T17120] netlink: 83992 bytes leftover after parsing attributes in process `syz.1.4611'. [ 1037.079686][T17129] netlink: 'syz.3.4601': attribute type 3 has an invalid length. [ 1037.187249][T17129] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1037.509876][T17122] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4601'. [ 1038.090964][T17143] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4609'. [ 1038.905151][T17159] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4613'. [ 1039.667076][T17167] validate_nla: 1 callbacks suppressed [ 1039.667140][T17167] netlink: 'syz.0.4618': attribute type 1 has an invalid length. [ 1039.715365][T17167] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.4618'. [ 1041.279122][T17198] netlink: 'syz.4.4627': attribute type 3 has an invalid length. [ 1041.357227][T17198] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4627'. [ 1041.782623][T17204] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4631'. [ 1042.170762][T17212] netlink: 'syz.4.4636': attribute type 1 has an invalid length. [ 1042.202780][T17212] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.4636'. [ 1045.696228][T17263] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.4656'. [ 1045.776190][T17273] netlink: 'syz.2.4656': attribute type 10 has an invalid length. [ 1046.027279][T17273] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1047.613269][T17300] netlink: 'syz.3.4665': attribute type 1 has an invalid length. [ 1047.621789][T17300] netlink: 83992 bytes leftover after parsing attributes in process `syz.3.4665'. [ 1047.818265][T17309] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4668'. [ 1048.948816][T17320] netlink: 'syz.0.4673': attribute type 10 has an invalid length. [ 1049.233798][T17320] device geneve1 entered promiscuous mode [ 1049.287265][T17320] team0: Port device geneve1 added [ 1050.707170][T17351] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4682'. [ 1050.978905][T17355] netlink: 'syz.2.4683': attribute type 3 has an invalid length. [ 1051.016338][T17355] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4683'. [ 1051.043279][T17358] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4684'. [ 1051.100371][T17358] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1051.620648][T17367] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.4689'. [ 1051.658694][T17373] netlink: 'syz.3.4689': attribute type 10 has an invalid length. [ 1051.848578][T17373] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1053.012575][T17389] netlink: 'syz.2.4695': attribute type 1 has an invalid length. [ 1053.051756][T17389] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.4695'. [ 1053.737026][T17401] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4700'. [ 1053.768409][T17401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1054.416615][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.423032][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.625019][T17411] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4713'. [ 1055.715077][T17420] netlink: 'syz.1.4707': attribute type 3 has an invalid length. [ 1055.755189][T17420] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4707'. [ 1056.392901][T17430] netlink: 'syz.1.4711': attribute type 10 has an invalid length. [ 1056.872602][T17442] netlink: 'syz.4.4714': attribute type 3 has an invalid length. [ 1056.937262][T17442] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1057.020710][T17445] netlink: 'syz.4.4714': attribute type 3 has an invalid length. [ 1057.165778][T17445] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4714'. [ 1057.352569][T17446] netlink: 'syz.0.4715': attribute type 1 has an invalid length. [ 1057.370049][T17446] netlink: 83992 bytes leftover after parsing attributes in process `syz.0.4715'. [ 1057.553183][T17453] netlink: 'syz.1.4717': attribute type 3 has an invalid length. [ 1057.562582][T17453] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4717'. [ 1059.359109][T17483] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4729'. [ 1059.455967][T17483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1059.564211][T17490] netlink: 'syz.4.4730': attribute type 3 has an invalid length. [ 1059.613704][T17490] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4730'. [ 1059.978394][T17486] netlink: 'syz.4.4730': attribute type 3 has an invalid length. [ 1060.055488][T17486] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4730'. [ 1062.421697][T17526] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.4743'. [ 1062.586151][T17532] netlink: 'syz.1.4743': attribute type 10 has an invalid length. [ 1064.573049][T17556] device team_slave_0 left promiscuous mode [ 1065.065671][T17556] team0: Port device team_slave_0 removed [ 1065.215471][T17555] delete_channel: no stack [ 1065.459120][T17565] netlink: 'syz.4.4757': attribute type 10 has an invalid length. [ 1065.869839][T17565] device geneve1 entered promiscuous mode [ 1065.951669][T17565] team0: Port device geneve1 added [ 1066.658837][T17590] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.4761'. [ 1066.794891][T17593] netlink: 'syz.4.4761': attribute type 10 has an invalid length. [ 1067.038385][T17593] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1067.798281][T17605] device syzkaller0 left promiscuous mode [ 1068.567418][T17624] netlink: 'syz.3.4773': attribute type 10 has an invalid length. [ 1069.008793][T17624] device geneve1 entered promiscuous mode [ 1069.089594][T17624] team0: Port device geneve1 added [ 1069.158626][T17633] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4776'. [ 1069.227140][T17634] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4774'. [ 1069.368921][T17634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1070.567842][T17660] netlink: 'syz.0.4781': attribute type 10 has an invalid length. [ 1070.817290][T17660] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1071.015346][T17652] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.4781'. [ 1071.587368][T17669] device team_slave_0 left promiscuous mode [ 1071.599525][T17673] netlink: 'syz.3.4791': attribute type 2 has an invalid length. [ 1072.044562][T17669] team0: Port device team_slave_0 removed [ 1072.075342][T17674] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4790'. [ 1072.226759][T17668] delete_channel: no stack [ 1072.241796][T17673] device 1 entered promiscuous mode [ 1072.291705][T17679] netlink: 'syz.2.4792': attribute type 10 has an invalid length. [ 1072.719376][T17679] device geneve1 entered promiscuous mode [ 1072.886361][T17679] team0: Port device geneve1 added [ 1073.563930][T17693] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4796'. [ 1074.409423][T17708] delete_channel: no stack [ 1074.465690][T17714] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4804'. [ 1074.638366][T17719] netlink: 'syz.0.4805': attribute type 9 has an invalid length. [ 1074.702509][T17725] netlink: 'syz.4.4809': attribute type 2 has an invalid length. [ 1074.717143][T17719] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.4805'. [ 1074.998316][T17725] device 2 entered promiscuous mode [ 1075.268676][T17727] netlink: 'syz.1.4808': attribute type 3 has an invalid length. [ 1075.315563][T17727] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4808'. [ 1075.429854][T17733] netlink: 'syz.4.4811': attribute type 10 has an invalid length. [ 1076.736242][T17750] netlink: 'syz.2.4815': attribute type 3 has an invalid length. [ 1076.794413][T17750] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4815'. [ 1077.400223][T17767] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4820'. [ 1077.510801][T17767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1077.601878][T17768] device team_slave_0 left promiscuous mode [ 1077.789347][T17768] team0: Port device team_slave_0 removed [ 1077.951662][T17760] delete_channel: no stack [ 1078.089018][T17778] netlink: 'syz.2.4822': attribute type 2 has an invalid length. [ 1078.240755][T17778] device 1 entered promiscuous mode [ 1078.435941][T17785] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4825'. [ 1078.539535][T17787] netlink: 'syz.2.4827': attribute type 2 has an invalid length. [ 1078.814993][T17787] device 2 entered promiscuous mode [ 1078.862359][T17790] netlink: 'syz.0.4826': attribute type 10 has an invalid length. [ 1078.891038][T17790] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4826'. [ 1079.517198][T17798] netlink: 'syz.2.4832': attribute type 3 has an invalid length. [ 1079.529984][T17798] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4832'. [ 1079.681705][T17790] team0: Port device virt_wifi0 removed [ 1079.924669][T17804] netlink: 'syz.3.4834': attribute type 9 has an invalid length. [ 1079.942574][T17804] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.4834'. [ 1080.877913][T17818] device team_slave_0 left promiscuous mode [ 1081.157179][T17825] netlink: 'syz.4.4841': attribute type 29 has an invalid length. [ 1081.186380][T17823] netlink: 'syz.4.4841': attribute type 1 has an invalid length. [ 1081.229455][T17823] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.4841'. [ 1081.368828][T17827] netlink: 'syz.1.4840': attribute type 2 has an invalid length. [ 1081.521449][T17818] team0: Port device team_slave_0 removed [ 1081.558250][T17819] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4839'. [ 1081.612553][T17817] delete_channel: no stack [ 1081.627490][T17825] netlink: 'syz.4.4841': attribute type 29 has an invalid length. [ 1081.771795][T17827] device 2 entered promiscuous mode [ 1082.144890][T17840] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4844'. [ 1083.236253][T17857] netlink: 'syz.2.4851': attribute type 9 has an invalid length. [ 1083.266797][T17857] netlink: 61951 bytes leftover after parsing attributes in process `syz.2.4851'. [ 1083.311888][T17849] netlink: 'syz.0.4846': attribute type 3 has an invalid length. [ 1083.354927][T17849] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4846'. [ 1083.786635][T17861] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4854'. [ 1083.804239][T17861] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1083.877751][T17865] delete_channel: no stack [ 1084.149656][T17871] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4856'. [ 1084.351348][T17873] netlink: 'syz.2.4857': attribute type 1 has an invalid length. [ 1084.389553][T17873] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1084.465670][T17875] netlink: 'syz.2.4857': attribute type 29 has an invalid length. [ 1084.503975][T17875] netlink: 'syz.2.4857': attribute type 29 has an invalid length. [ 1085.496418][T17891] netlink: 'syz.4.4866': attribute type 3 has an invalid length. [ 1085.548027][T17891] __nla_validate_parse: 1 callbacks suppressed [ 1085.548356][T17891] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4866'. [ 1085.639448][T17883] netlink: 'syz.0.4861': attribute type 3 has an invalid length. [ 1085.706962][T17883] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4861'. [ 1085.993903][T17895] delete_channel: no stack [ 1086.139023][T17900] netlink: 'syz.4.4880': attribute type 3 has an invalid length. [ 1086.216925][T17900] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.4880'. [ 1086.233966][ T47] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 1086.254704][ T47] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1086.921400][T17908] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4873'. [ 1087.076087][T17914] netlink: 'syz.0.4871': attribute type 2 has an invalid length. [ 1087.259540][T17914] device 2 entered promiscuous mode [ 1087.301681][T17917] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4875'. [ 1087.830040][T17934] netlink: 'syz.1.4877': attribute type 29 has an invalid length. [ 1088.024991][T17934] netlink: 'syz.1.4877': attribute type 29 has an invalid length. [ 1088.459189][T17938] netlink: 'syz.3.4883': attribute type 2 has an invalid length. [ 1088.595203][T17945] netlink: 'syz.0.4893': attribute type 3 has an invalid length. [ 1088.603305][T17945] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4893'. [ 1088.645409][T17938] device 2 entered promiscuous mode [ 1088.655108][T17943] netlink: 'syz.1.4882': attribute type 9 has an invalid length. [ 1088.684090][T17943] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.4882'. [ 1088.960832][T17940] netlink: 'syz.0.4893': attribute type 3 has an invalid length. [ 1088.977608][T17940] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4893'. [ 1089.152641][T17951] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.4896'. [ 1090.003546][T17966] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4888'. [ 1090.655827][T17974] __nla_validate_parse: 1 callbacks suppressed [ 1090.655866][T17974] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4891'. [ 1090.678044][T17977] validate_nla: 2 callbacks suppressed [ 1090.678085][T17977] netlink: 'syz.0.4894': attribute type 2 has an invalid length. [ 1090.775188][T17974] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1090.921878][T17977] device 3 entered promiscuous mode [ 1091.286239][T17991] netlink: 'syz.0.4899': attribute type 2 has an invalid length. [ 1091.339217][T17993] netlink: 'syz.3.4901': attribute type 1 has an invalid length. [ 1091.376569][T17993] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.4901'. [ 1091.409568][T17995] netlink: 'syz.3.4901': attribute type 29 has an invalid length. [ 1091.482964][T17991] device 4 entered promiscuous mode [ 1091.502326][T17995] netlink: 'syz.3.4901': attribute type 29 has an invalid length. [ 1091.565056][T17998] netlink: 'syz.1.4902': attribute type 10 has an invalid length. [ 1091.582468][T17998] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4902'. [ 1091.716991][T17994] netlink: 'syz.4.4898': attribute type 9 has an invalid length. [ 1091.803909][T17994] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.4898'. [ 1093.024850][T18011] netlink: 'syz.0.4907': attribute type 3 has an invalid length. [ 1093.093955][T18011] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.4907'. [ 1093.290444][T18015] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4906'. [ 1093.400144][T18020] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1093.432318][T18020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1093.496209][T18026] netlink: 'syz.0.4914': attribute type 2 has an invalid length. [ 1093.785352][T18026] device 5 entered promiscuous mode [ 1094.097859][T18032] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4928'. [ 1094.255804][T18037] netlink: 'syz.0.4920': attribute type 1 has an invalid length. [ 1094.267657][T18037] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.4920'. [ 1094.471933][T18038] device 3 entered promiscuous mode [ 1094.528677][T18044] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4921'. [ 1095.366004][T18061] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1095.831176][T18068] __nla_validate_parse: 3 callbacks suppressed [ 1095.831221][T18068] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4933'. [ 1096.137266][T18076] validate_nla: 5 callbacks suppressed [ 1096.137328][T18076] netlink: 'syz.1.4936': attribute type 1 has an invalid length. [ 1096.152069][T18076] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4936'. [ 1096.177971][T18076] netlink: 'syz.1.4936': attribute type 29 has an invalid length. [ 1096.189142][T18076] netlink: 'syz.1.4936': attribute type 29 has an invalid length. [ 1096.261357][T18078] netlink: 'syz.2.4935': attribute type 29 has an invalid length. [ 1096.319671][T18078] netlink: 'syz.2.4935': attribute type 29 has an invalid length. [ 1096.381585][T18082] netlink: 'syz.2.4935': attribute type 29 has an invalid length. [ 1096.426228][T18083] netlink: 'syz.2.4935': attribute type 29 has an invalid length. [ 1096.478071][T18086] netlink: 'syz.1.4938': attribute type 2 has an invalid length. [ 1096.701906][T18086] device 3 entered promiscuous mode [ 1097.227862][T18100] netlink: 'syz.1.4944': attribute type 3 has an invalid length. [ 1097.263664][T18100] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4944'. [ 1098.174776][T18118] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4949'. [ 1098.352487][T18123] netlink: 'syz.1.4950': attribute type 3 has an invalid length. [ 1098.423539][T18123] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4950'. [ 1099.018122][T18132] device 4 entered promiscuous mode [ 1099.239351][T18137] device 4 entered promiscuous mode [ 1099.908648][T18158] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4963'. [ 1100.330389][T18162] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.4965'. [ 1100.738866][T18160] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4964'. [ 1101.066269][T18175] netlink: 2 bytes leftover after parsing attributes in process `syz.1.4979'. [ 1101.326228][T18184] validate_nla: 6 callbacks suppressed [ 1101.326269][T18184] netlink: 'syz.0.4973': attribute type 2 has an invalid length. [ 1101.474896][T18184] device 6 entered promiscuous mode [ 1101.488083][T18188] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4970'. [ 1102.237621][T18201] netlink: 2 bytes leftover after parsing attributes in process `syz.4.4977'. [ 1102.772935][T18198] netlink: 'syz.2.4976': attribute type 3 has an invalid length. [ 1102.781127][T18198] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.4976'. [ 1103.000151][T18216] netlink: 'syz.1.4982': attribute type 3 has an invalid length. [ 1103.048316][T18216] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.4982'. [ 1103.188010][T18218] netlink: 2 bytes leftover after parsing attributes in process `syz.0.4983'. [ 1104.657478][T18252] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4996'. [ 1105.352726][T18265] netlink: 'syz.4.5000': attribute type 1 has an invalid length. [ 1105.375249][T18266] netlink: 'syz.4.5000': attribute type 29 has an invalid length. [ 1105.392063][T18265] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5000'. [ 1105.415542][T18266] netlink: 'syz.4.5000': attribute type 29 has an invalid length. [ 1106.945210][T18311] netlink: 'syz.4.5015': attribute type 29 has an invalid length. [ 1106.988718][T18311] netlink: 'syz.4.5015': attribute type 29 has an invalid length. [ 1106.989019][T18308] netlink: 'syz.4.5015': attribute type 1 has an invalid length. [ 1107.089813][T18308] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.5015'. [ 1108.633113][T18347] netlink: 'syz.0.5026': attribute type 3 has an invalid length. [ 1108.684522][T18347] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5026'. [ 1109.707991][T18366] netlink: 'syz.1.5036': attribute type 2 has an invalid length. [ 1109.785401][T18369] netlink: 'syz.4.5034': attribute type 3 has an invalid length. [ 1109.794948][T18369] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5034'. [ 1109.865224][T18366] device 5 entered promiscuous mode [ 1110.047125][T18374] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5038'. [ 1110.417430][T18384] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5042'. [ 1110.450734][T18386] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5043'. [ 1111.275115][T18408] netlink: 'syz.4.5051': attribute type 2 has an invalid length. [ 1111.435502][T18408] device 5 entered promiscuous mode [ 1111.517931][T18412] netlink: 140 bytes leftover after parsing attributes in process `syz.0.5052'. [ 1111.670648][T18416] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5055'. [ 1111.791292][T18423] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5056'. [ 1112.093123][T18430] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5069'. [ 1112.809724][T18453] netlink: 'syz.1.5067': attribute type 2 has an invalid length. [ 1112.882448][T18453] device 6 entered promiscuous mode [ 1113.492601][T18459] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1113.504779][T18459] dvmrp1: ignored: set checksum disabled [ 1113.537286][T18461] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5070'. [ 1113.552126][T18463] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5071'. [ 1113.588037][T18456] netlink: 140 bytes leftover after parsing attributes in process `syz.3.5068'. [ 1114.450526][T18491] netlink: 'syz.0.5083': attribute type 2 has an invalid length. [ 1114.471517][T18491] device 7 entered promiscuous mode [ 1114.562319][T18493] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1114.663258][T18495] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5085'. [ 1114.694307][T18497] netlink: 'syz.0.5086': attribute type 1 has an invalid length. [ 1114.703040][T18497] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.5086'. [ 1114.735992][T18497] netlink: 'syz.0.5086': attribute type 29 has an invalid length. [ 1114.758758][T18497] netlink: 'syz.0.5086': attribute type 29 has an invalid length. [ 1114.828174][T18499] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5087'. [ 1115.696525][T18520] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5096'. [ 1115.783011][T18523] netlink: 'syz.0.5097': attribute type 2 has an invalid length. [ 1115.850717][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.857315][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.898975][T18523] device 8 entered promiscuous mode [ 1116.261643][T18538] netlink: 'syz.3.5101': attribute type 1 has an invalid length. [ 1116.271526][T18538] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.5101'. [ 1116.289541][T18538] netlink: 'syz.3.5101': attribute type 29 has an invalid length. [ 1116.298915][T18538] netlink: 'syz.3.5101': attribute type 29 has an invalid length. [ 1116.961403][T18556] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5109'. [ 1116.986972][T18558] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1116.993783][T18558] dvmrp1: ignored: set checksum disabled [ 1117.078528][T18561] netlink: 'syz.1.5111': attribute type 2 has an invalid length. [ 1117.199101][T18561] device 7 entered promiscuous mode [ 1118.850580][T18608] __nla_validate_parse: 1 callbacks suppressed [ 1118.850623][T18608] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5126'. [ 1118.941473][T18610] netlink: 'syz.1.5128': attribute type 2 has an invalid length. [ 1119.064631][T18610] device 8 entered promiscuous mode [ 1119.781911][T18635] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 1119.789953][T18635] dvmrp1: ignored: set checksum disabled [ 1120.214953][T18648] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5143'. [ 1120.278702][T18650] netlink: 'syz.0.5144': attribute type 2 has an invalid length. [ 1120.360639][T18650] device 9 entered promiscuous mode [ 1121.259174][T18677] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5155'. [ 1121.689051][T18697] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5162'. [ 1121.868363][T18701] netlink: 'syz.2.5164': attribute type 3 has an invalid length. [ 1121.876489][T18701] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5164'. [ 1121.967114][T18703] netlink: 'syz.2.5165': attribute type 2 has an invalid length. [ 1121.989318][T18703] device 3 entered promiscuous mode [ 1122.582182][T18719] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5171'. [ 1122.763064][T18722] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5173'. [ 1122.850748][T18727] netlink: 'syz.3.5175': attribute type 3 has an invalid length. [ 1122.860521][T18727] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5175'. [ 1122.920365][T18728] netlink: 'syz.2.5176': attribute type 2 has an invalid length. [ 1122.987311][T18728] device 4 entered promiscuous mode [ 1123.099202][T18733] netlink: 'syz.1.5179': attribute type 2 has an invalid length. [ 1123.153759][T18733] device 9 entered promiscuous mode [ 1123.163938][T18732] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5187'. [ 1123.680625][T18754] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1123.861703][T18759] netlink: 'syz.4.5188': attribute type 3 has an invalid length. [ 1123.870533][T18759] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5188'. [ 1124.008514][T18761] netlink: 'syz.2.5189': attribute type 2 has an invalid length. [ 1124.078413][T18761] device 5 entered promiscuous mode [ 1124.313233][T18770] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5192'. [ 1124.840964][T18783] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5197'. [ 1125.270295][T18796] netlink: 'syz.0.5201': attribute type 10 has an invalid length. [ 1125.307927][T18796] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5201'. [ 1125.383432][T18792] can: request_module (can-proto-0) failed. [ 1125.426949][T18802] netlink: 'syz.4.5204': attribute type 2 has an invalid length. [ 1125.513746][T18802] device 6 entered promiscuous mode [ 1125.708669][T18809] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5206'. [ 1126.197196][T18821] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5210'. [ 1126.378859][T18826] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5222'. [ 1126.924987][T18842] netlink: 'syz.4.5218': attribute type 2 has an invalid length. [ 1127.042930][T18842] device 7 entered promiscuous mode [ 1127.148564][T18846] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5219'. [ 1127.936818][T18865] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5227'. [ 1128.216607][T18869] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5239'. [ 1129.677083][T18904] __nla_validate_parse: 1 callbacks suppressed [ 1129.677112][T18904] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5242'. [ 1130.362283][T18918] netlink: 'syz.4.5247': attribute type 2 has an invalid length. [ 1130.575695][T18918] device 8 entered promiscuous mode [ 1130.907533][T18924] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5249'. [ 1131.180866][T18935] netlink: 'syz.1.5252': attribute type 3 has an invalid length. [ 1131.205782][T18930] netlink: 'syz.1.5252': attribute type 3 has an invalid length. [ 1131.242269][T18933] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5254'. [ 1131.276821][T18930] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1131.299051][T18935] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5252'. [ 1132.318650][T18962] netlink: 'syz.1.5262': attribute type 2 has an invalid length. [ 1132.493136][T18962] device 10 entered promiscuous mode [ 1135.082990][T18970] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5267'. [ 1135.167625][T18973] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5265'. [ 1135.306048][T18978] netlink: 'syz.0.5269': attribute type 3 has an invalid length. [ 1135.312577][T18979] netlink: 'syz.0.5269': attribute type 3 has an invalid length. [ 1135.342825][T18978] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1135.377444][T18979] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5269'. [ 1136.020231][T19002] netlink: 'syz.4.5278': attribute type 2 has an invalid length. [ 1136.201685][T19002] device 9 entered promiscuous mode [ 1136.487114][T19013] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5281'. [ 1136.512511][T19012] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5280'. [ 1136.786532][T19023] netlink: 'syz.3.5283': attribute type 3 has an invalid length. [ 1136.804806][T19018] netlink: 'syz.3.5283': attribute type 3 has an invalid length. [ 1136.839472][T19018] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5283'. [ 1136.939192][T19023] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5283'. [ 1138.648039][T19055] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5294'. [ 1139.054441][T19058] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5295'. [ 1139.265607][T19068] netlink: 'syz.1.5298': attribute type 3 has an invalid length. [ 1139.284287][T19065] netlink: 'syz.1.5298': attribute type 3 has an invalid length. [ 1140.329403][T19089] __nla_validate_parse: 2 callbacks suppressed [ 1140.329466][T19089] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5306'. [ 1140.851490][T19101] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5310'. [ 1141.124168][T19112] netlink: 'syz.2.5312': attribute type 3 has an invalid length. [ 1141.136796][T19108] netlink: 'syz.2.5312': attribute type 3 has an invalid length. [ 1141.155978][T19108] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5312'. [ 1141.222946][T19112] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5312'. [ 1141.694474][T19125] netlink: 'syz.2.5317': attribute type 2 has an invalid length. [ 1141.850661][T19125] device 6 entered promiscuous mode [ 1141.887658][T19130] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5319'. [ 1142.813909][T19152] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5324'. [ 1142.895709][T19154] netlink: 'syz.1.5326': attribute type 3 has an invalid length. [ 1142.912239][T19151] netlink: 'syz.1.5326': attribute type 3 has an invalid length. [ 1142.955645][T19151] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5326'. [ 1143.063434][T19154] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5326'. [ 1143.571514][T19166] netlink: 'syz.3.5331': attribute type 2 has an invalid length. [ 1143.802438][T19166] device 3 entered promiscuous mode [ 1145.021488][T19196] netlink: 'syz.2.5339': attribute type 3 has an invalid length. [ 1145.043489][T19196] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5339'. [ 1145.088812][T19196] netlink: 'syz.2.5339': attribute type 3 has an invalid length. [ 1145.115371][T19196] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5339'. [ 1145.849311][T19220] netlink: 'syz.0.5347': attribute type 2 has an invalid length. [ 1145.990153][T19220] device 10 entered promiscuous mode [ 1146.761011][T19240] netlink: 'syz.1.5353': attribute type 3 has an invalid length. [ 1146.788401][T19240] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1146.815910][T19240] netlink: 'syz.1.5353': attribute type 3 has an invalid length. [ 1146.835024][T19240] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5353'. [ 1147.999661][T19269] netlink: 'syz.2.5361': attribute type 2 has an invalid length. [ 1148.129253][T19269] device 7 entered promiscuous mode [ 1148.761836][T19283] netlink: 'syz.3.5366': attribute type 3 has an invalid length. [ 1148.810693][T19283] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1148.844691][T19284] netlink: 'syz.3.5366': attribute type 3 has an invalid length. [ 1148.909755][T19284] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5366'. [ 1150.667184][T19320] netlink: 'syz.2.5379': attribute type 3 has an invalid length. [ 1150.701393][T19320] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1150.757216][T19320] netlink: 'syz.2.5379': attribute type 3 has an invalid length. [ 1150.796093][T19320] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5379'. [ 1152.587199][T19354] netlink: 'syz.4.5392': attribute type 3 has an invalid length. [ 1152.665165][T19354] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5392'. [ 1153.465322][T19369] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5394'. [ 1154.598152][T19392] netlink: 'syz.0.5405': attribute type 3 has an invalid length. [ 1154.609153][T19392] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5405'. [ 1154.622908][T19392] netlink: 'syz.0.5405': attribute type 3 has an invalid length. [ 1154.633091][T19392] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5405'. [ 1155.171955][T19409] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5411'. [ 1155.735178][T19425] netlink: 'syz.3.5418': attribute type 3 has an invalid length. [ 1155.750549][T19423] netlink: 'syz.3.5418': attribute type 3 has an invalid length. [ 1155.777468][T19423] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1155.856255][T19425] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5418'. [ 1156.700656][T19449] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5425'. [ 1157.776047][T19471] netlink: 'syz.3.5433': attribute type 3 has an invalid length. [ 1157.825690][T19471] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5433'. [ 1158.127406][T19474] netlink: 'syz.2.5435': attribute type 2 has an invalid length. [ 1158.266408][T19474] device 8 entered promiscuous mode [ 1158.440326][T19485] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5439'. [ 1159.712381][T19520] netlink: 'syz.2.5453': attribute type 2 has an invalid length. [ 1159.779314][T19520] device 9 entered promiscuous mode [ 1159.894374][T19525] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5454'. [ 1160.794446][T19554] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.5467'. [ 1160.804890][T19554] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1161.075398][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1161.562421][T19576] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5474'. [ 1161.652629][T19576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1161.696186][T19576] bond0 (unregistering): Released all slaves [ 1162.479163][T19604] netlink: 154020 bytes leftover after parsing attributes in process `syz.4.5484'. [ 1162.503038][T19604] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1164.761965][T19662] netlink: 'syz.1.5508': attribute type 2 has an invalid length. [ 1164.782121][T19662] device 11 entered promiscuous mode [ 1165.058733][T19668] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.5511'. [ 1165.069435][T19668] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1165.889738][T19684] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5518'. [ 1165.949238][T19690] netlink: 'syz.4.5520': attribute type 2 has an invalid length. [ 1166.064712][T19690] device 10 entered promiscuous mode [ 1166.181862][T19694] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5533'. [ 1166.527758][T19708] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.5523'. [ 1166.543894][T19708] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1167.659784][T19733] netlink: 'syz.0.5536': attribute type 2 has an invalid length. [ 1167.946625][T19733] device 11 entered promiscuous mode [ 1168.532155][T19748] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5538'. [ 1168.943749][T19763] netlink: 'syz.1.5542': attribute type 3 has an invalid length. [ 1168.963177][T19763] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1168.976165][T19759] netlink: 'syz.1.5542': attribute type 3 has an invalid length. [ 1168.991559][T19759] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5542'. [ 1169.231728][T19768] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.5547'. [ 1169.243082][T19768] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1170.599483][T19805] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1170.619756][T19805] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1171.696993][T19841] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5578'. [ 1174.435045][T19841] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1174.458762][T19841] bond0 (unregistering): Released all slaves [ 1174.653122][T19850] sock: sock_timestamping_bind_phc: sock not bind to device [ 1175.693085][T19876] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5602'. [ 1177.286582][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.293055][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.506347][T19919] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5607'. [ 1178.475480][T19950] netlink: 'syz.1.5619': attribute type 3 has an invalid length. [ 1178.575294][T19950] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5619'. [ 1178.671992][T19947] netlink: 'syz.1.5619': attribute type 3 has an invalid length. [ 1178.691783][T19947] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5619'. [ 1178.930752][T19956] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5622'. [ 1179.452886][T19968] sock: sock_timestamping_bind_phc: sock not bind to device [ 1179.981568][T19987] netlink: 'syz.1.5635': attribute type 3 has an invalid length. [ 1180.020294][T19987] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1180.089328][T19983] netlink: 'syz.1.5635': attribute type 3 has an invalid length. [ 1180.116120][T19983] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5635'. [ 1180.229051][T19993] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5637'. [ 1180.672107][T20008] netlink: 'syz.3.5645': attribute type 2 has an invalid length. [ 1180.697528][T20008] device 4 entered promiscuous mode [ 1181.240960][T20018] netlink: 'syz.2.5649': attribute type 3 has an invalid length. [ 1181.275532][T20019] netlink: 'syz.2.5649': attribute type 3 has an invalid length. [ 1181.290209][T20018] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1181.304772][T20019] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1181.482615][T20021] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5652'. [ 1181.856558][T20030] sock: sock_timestamping_bind_phc: sock not bind to device [ 1183.345372][T20063] netlink: 'syz.0.5665': attribute type 3 has an invalid length. [ 1183.368872][T20061] netlink: 'syz.0.5665': attribute type 3 has an invalid length. [ 1183.409733][T20061] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5665'. [ 1183.522306][T20069] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5667'. [ 1183.543459][T20063] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5665'. [ 1184.262865][T20087] netlink: 'syz.0.5686': attribute type 2 has an invalid length. [ 1184.507768][T20087] device 12 entered promiscuous mode [ 1185.120399][T20106] netlink: 'syz.1.5683': attribute type 3 has an invalid length. [ 1185.217648][T20102] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5682'. [ 1185.233752][T20106] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5683'. [ 1185.282036][T20104] netlink: 'syz.1.5683': attribute type 3 has an invalid length. [ 1185.292697][T20104] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5683'. [ 1186.036228][T20124] netlink: 'syz.1.5690': attribute type 2 has an invalid length. [ 1186.219048][T20124] device 12 entered promiscuous mode [ 1187.229759][T20142] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5697'. [ 1187.457986][T20150] netlink: 'syz.4.5700': attribute type 3 has an invalid length. [ 1187.469930][T20150] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5700'. [ 1187.490992][T20150] netlink: 'syz.4.5700': attribute type 3 has an invalid length. [ 1187.499584][T20150] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5700'. [ 1187.805667][T20159] netlink: 'syz.2.5704': attribute type 2 has an invalid length. [ 1187.865589][T20159] device 10 entered promiscuous mode [ 1189.220088][T20168] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5710'. [ 1189.598272][T20184] netlink: 'syz.1.5713': attribute type 3 has an invalid length. [ 1189.607291][T20180] netlink: 'syz.1.5713': attribute type 3 has an invalid length. [ 1189.616214][T20180] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5713'. [ 1189.642021][T20184] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5713'. [ 1189.804538][T20188] tipc: Started in network mode [ 1189.809850][T20188] tipc: Node identity 9215a268, cluster identity 4711 [ 1189.823633][T20188] tipc: Node number set to 2450891368 [ 1190.501385][T20212] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5724'. [ 1191.126241][T20226] netlink: 'syz.0.5729': attribute type 3 has an invalid length. [ 1191.154287][T20225] netlink: 'syz.0.5729': attribute type 3 has an invalid length. [ 1191.183192][T20226] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5729'. [ 1191.199571][T20225] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5729'. [ 1191.915839][T20245] netlink: 'syz.4.5739': attribute type 2 has an invalid length. [ 1192.081109][T20245] device 11 entered promiscuous mode [ 1192.233562][T20252] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5738'. [ 1192.746780][T20263] netlink: 'syz.0.5742': attribute type 3 has an invalid length. [ 1192.784758][T20262] netlink: 'syz.0.5742': attribute type 3 has an invalid length. [ 1192.788926][T20263] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1192.920119][T20262] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5742'. [ 1193.454012][T20280] tipc: Started in network mode [ 1193.459875][T20280] tipc: Node identity 9215a268, cluster identity 4711 [ 1193.503569][T20280] tipc: Node number set to 2450891368 [ 1194.284245][T20299] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5752'. [ 1194.620418][T20305] netlink: 'syz.0.5756': attribute type 2 has an invalid length. [ 1194.771472][T20311] netlink: 'syz.2.5758': attribute type 3 has an invalid length. [ 1194.812139][T20305] device 13 entered promiscuous mode [ 1194.898504][T20311] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1194.916230][T20308] netlink: 'syz.2.5758': attribute type 3 has an invalid length. [ 1194.945128][T20308] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5758'. [ 1195.336840][T20325] Ÿë: port 1(veth0_to_team) entered blocking state [ 1195.433693][T20325] Ÿë: port 1(veth0_to_team) entered disabled state [ 1195.469739][T20325] device veth0_to_team entered promiscuous mode [ 1196.722631][T20356] netlink: 'syz.4.5773': attribute type 3 has an invalid length. [ 1196.774905][T20355] netlink: 'syz.4.5773': attribute type 3 has an invalid length. [ 1196.812090][T20356] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1196.832594][T20355] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1197.932431][T20383] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5783'. [ 1198.119310][T20387] netlink: 'syz.4.5786': attribute type 3 has an invalid length. [ 1198.129866][T20387] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5786'. [ 1199.420158][T20425] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5799'. [ 1199.684736][T20433] netlink: 'syz.1.5801': attribute type 3 has an invalid length. [ 1199.708261][T20432] netlink: 'syz.1.5801': attribute type 3 has an invalid length. [ 1199.750793][T20432] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5801'. [ 1199.766710][T20433] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5801'. [ 1199.790357][T20435] Ÿë: port 2(veth0_to_team) entered blocking state [ 1199.804135][T20435] Ÿë: port 2(veth0_to_team) entered disabled state [ 1199.828264][T20435] device veth0_to_team entered promiscuous mode [ 1200.647028][T20461] netlink: 'syz.2.5812': attribute type 39 has an invalid length. [ 1200.835438][T20464] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5813'. [ 1201.209255][T20473] netlink: 'syz.1.5815': attribute type 3 has an invalid length. [ 1201.219434][T20469] netlink: 'syz.1.5815': attribute type 3 has an invalid length. [ 1201.232450][T20473] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1201.243216][T20469] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5815'. [ 1201.561161][T20479] Ÿë: port 2(veth0_to_team) entered blocking state [ 1201.577557][T20479] Ÿë: port 2(veth0_to_team) entered disabled state [ 1201.607064][T20479] device veth0_to_team entered promiscuous mode [ 1202.396415][T20500] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5826'. [ 1202.807872][T20512] netlink: 'syz.2.5828': attribute type 3 has an invalid length. [ 1202.821914][T20509] netlink: 'syz.2.5828': attribute type 3 has an invalid length. [ 1202.832402][T20509] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5828'. [ 1202.871678][T20511] netlink: 'syz.1.5829': attribute type 13 has an invalid length. [ 1202.956279][T20511] syz_tun: refused to change device tx_queue_len [ 1202.963025][T20511] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1203.407772][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1203.821417][T20538] __nla_validate_parse: 3 callbacks suppressed [ 1203.821458][T20538] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5839'. [ 1204.302555][T20560] netlink: 'syz.2.5843': attribute type 3 has an invalid length. [ 1204.364346][T20557] netlink: 'syz.2.5843': attribute type 3 has an invalid length. [ 1204.381367][T20560] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5843'. [ 1204.437859][T20557] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5843'. [ 1204.630280][T20565] device 13 entered promiscuous mode [ 1208.016284][T20590] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5853'. [ 1208.297838][T20599] validate_nla: 1 callbacks suppressed [ 1208.297896][T20599] netlink: 'syz.4.5858': attribute type 3 has an invalid length. [ 1208.318715][T20603] netlink: 'syz.4.5858': attribute type 3 has an invalid length. [ 1208.325449][T20599] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1208.326628][T20603] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1209.119356][T20629] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5868'. [ 1209.386487][T20634] netlink: 'syz.0.5870': attribute type 3 has an invalid length. [ 1209.490254][T20632] netlink: 'syz.0.5870': attribute type 3 has an invalid length. [ 1209.510021][T20634] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5870'. [ 1209.530792][T20632] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5870'. [ 1210.525241][T20658] netlink: 'syz.4.5877': attribute type 39 has an invalid length. [ 1210.857678][T20669] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5881'. [ 1211.127606][T20674] netlink: 'syz.4.5883': attribute type 3 has an invalid length. [ 1211.138980][T20677] netlink: 'syz.4.5883': attribute type 3 has an invalid length. [ 1211.153692][T20674] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5883'. [ 1211.186435][T20677] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5883'. [ 1211.482756][T20684] netlink: 'syz.0.5885': attribute type 3 has an invalid length. [ 1211.516672][T20684] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5885'. [ 1212.921057][T20725] netlink: 'syz.3.5900': attribute type 3 has an invalid length. [ 1212.929435][T20725] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1212.950083][T20725] netlink: 'syz.3.5900': attribute type 3 has an invalid length. [ 1212.968277][T20725] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5900'. [ 1214.035076][T20737] netlink: 184 bytes leftover after parsing attributes in process `syz.0.5904'. [ 1214.372229][T20754] netlink: 'syz.0.5911': attribute type 2 has an invalid length. [ 1214.545588][T20754] device 14 entered promiscuous mode [ 1215.417918][T20781] netlink: 'syz.4.5920': attribute type 3 has an invalid length. [ 1215.431913][T20781] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5920'. [ 1216.100862][T20805] netlink: 'syz.1.5929': attribute type 3 has an invalid length. [ 1216.135341][T20802] netlink: 'syz.1.5929': attribute type 3 has an invalid length. [ 1216.186905][T20805] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5929'. [ 1216.194718][T20802] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5929'. [ 1216.581802][T20821] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.5936'. [ 1216.602310][T20826] netlink: 'syz.3.5936': attribute type 13 has an invalid length. [ 1216.638417][T20826] netlink: 152 bytes leftover after parsing attributes in process `syz.3.5936'. [ 1216.655924][T20830] netlink: 'syz.1.5937': attribute type 3 has an invalid length. [ 1216.673386][T20830] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5937'. [ 1216.689610][T20826] syz_tun: refused to change device tx_queue_len [ 1216.709330][T20826] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1217.726707][T20858] netlink: 'syz.1.5947': attribute type 3 has an invalid length. [ 1217.778981][T20854] netlink: 'syz.1.5947': attribute type 3 has an invalid length. [ 1217.828682][T20858] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1217.874118][T20854] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1218.459241][T20872] netlink: 'syz.3.5950': attribute type 3 has an invalid length. [ 1218.476960][T20872] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5950'. [ 1219.417256][T20906] netlink: 'syz.3.5962': attribute type 3 has an invalid length. [ 1219.431293][T20903] netlink: 'syz.3.5962': attribute type 3 has an invalid length. [ 1219.434427][T20906] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5962'. [ 1219.666987][T20912] netlink: 'syz.0.5964': attribute type 4 has an invalid length. [ 1220.062352][T20919] netlink: 'syz.2.5968': attribute type 3 has an invalid length. [ 1220.656078][T20936] netlink: 'syz.4.5975': attribute type 3 has an invalid length. [ 1220.687175][T20936] __nla_validate_parse: 3 callbacks suppressed [ 1220.687293][T20936] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5975'. [ 1220.738564][T20941] netlink: 'syz.4.5975': attribute type 3 has an invalid length. [ 1220.763448][T20941] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.5975'. [ 1221.270416][T20958] IPv6: pim6reg1: Disabled Multicast RS [ 1221.319799][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1221.599820][T20968] netlink: 'syz.3.5987': attribute type 2 has an invalid length. [ 1221.611519][T20966] netlink: 'syz.1.5986': attribute type 3 has an invalid length. [ 1221.620635][T20966] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.5986'. [ 1221.720823][T20968] device 5 entered promiscuous mode [ 1221.862264][T20975] netlink: 'syz.2.5989': attribute type 3 has an invalid length. [ 1221.886642][T20973] netlink: 'syz.2.5989': attribute type 3 has an invalid length. [ 1221.896818][T20973] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1221.908029][T20975] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.5989'. [ 1223.379779][T21026] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1223.388437][T21021] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6006'. [ 1224.082629][T21038] netlink: 184 bytes leftover after parsing attributes in process `syz.3.6014'. [ 1224.235034][T21045] device 14 entered promiscuous mode [ 1224.368157][T21054] device 6 entered promiscuous mode [ 1224.607788][T21064] validate_nla: 4 callbacks suppressed [ 1224.607809][T21064] netlink: 'syz.1.6021': attribute type 3 has an invalid length. [ 1224.651048][T21061] netlink: 'syz.1.6021': attribute type 3 has an invalid length. [ 1224.694275][T21061] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6021'. [ 1224.738527][T21064] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6021'. [ 1225.286215][T21089] netlink: 'syz.1.6031': attribute type 4 has an invalid length. [ 1225.375422][T21091] netlink: 'syz.2.6034': attribute type 2 has an invalid length. [ 1225.416900][T21093] netlink: 'syz.0.6035': attribute type 2 has an invalid length. [ 1225.495167][T21091] device 11 entered promiscuous mode [ 1225.630495][T21093] device 15 entered promiscuous mode [ 1225.946002][T21104] netlink: 'syz.0.6038': attribute type 3 has an invalid length. [ 1226.017810][T21104] __nla_validate_parse: 2 callbacks suppressed [ 1226.017838][T21104] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6038'. [ 1227.137600][T21131] netlink: 'syz.3.6048': attribute type 2 has an invalid length. [ 1227.525418][T21131] device 7 entered promiscuous mode [ 1227.733866][T21144] netlink: 'syz.4.6052': attribute type 3 has an invalid length. [ 1227.748886][T21139] netlink: 'syz.4.6052': attribute type 3 has an invalid length. [ 1227.803865][T21139] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6052'. [ 1227.856107][T21144] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6052'. [ 1228.781087][T21164] netlink: 184 bytes leftover after parsing attributes in process `syz.4.6058'. [ 1228.937280][T21177] netlink: 'syz.2.6062': attribute type 2 has an invalid length. [ 1229.092850][T21177] device 12 entered promiscuous mode [ 1229.361964][T21187] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1230.389558][T21219] validate_nla: 1 callbacks suppressed [ 1230.389627][T21219] netlink: 'syz.2.6077': attribute type 2 has an invalid length. [ 1231.003494][T21226] netlink: 'syz.0.6079': attribute type 3 has an invalid length. [ 1231.011347][T21226] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1231.349290][T21225] netlink: 'syz.0.6079': attribute type 3 has an invalid length. [ 1231.373825][T21225] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6079'. [ 1231.427804][T21219] device 13 entered promiscuous mode [ 1232.279075][T21257] netlink: 'syz.0.6090': attribute type 2 has an invalid length. [ 1232.446957][T21257] device 16 entered promiscuous mode [ 1232.779452][T21268] netlink: 'syz.0.6093': attribute type 2 has an invalid length. [ 1233.207151][T21272] netlink: 'syz.2.6094': attribute type 3 has an invalid length. [ 1233.301648][T21272] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1233.477467][T21271] netlink: 'syz.2.6094': attribute type 3 has an invalid length. [ 1233.498740][T21271] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6094'. [ 1233.616726][T21268] device 17 entered promiscuous mode [ 1234.306047][T21291] netdevsim netdevsim2: Direct firmware load for .net/syz1 failed with error -2 [ 1234.352288][T21291] netdevsim netdevsim2: Falling back to sysfs fallback for: .net/syz1 [ 1234.788193][T21304] netlink: 'syz.4.6108': attribute type 2 has an invalid length. [ 1234.856003][T21304] device 12 entered promiscuous mode [ 1235.463067][T21329] netlink: 'syz.4.6114': attribute type 2 has an invalid length. [ 1235.527831][T21331] netlink: 'syz.1.6115': attribute type 2 has an invalid length. [ 1235.541886][T21329] device 13 entered promiscuous mode [ 1235.682821][T21331] device 15 entered promiscuous mode [ 1235.749123][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1235.819348][T21339] netlink: 'syz.4.6119': attribute type 2 has an invalid length. [ 1235.906830][T21339] device 14 entered promiscuous mode [ 1238.715387][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.721884][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.931679][T21378] netlink: 'syz.2.6131': attribute type 2 has an invalid length. [ 1239.203811][T21378] device 14 entered promiscuous mode [ 1239.836025][T21389] netlink: 'syz.2.6135': attribute type 2 has an invalid length. [ 1240.088041][T21389] device 15 entered promiscuous mode [ 1240.696277][T21413] netlink: 'syz.3.6143': attribute type 1 has an invalid length. [ 1241.125867][T21424] netlink: 'syz.2.6147': attribute type 2 has an invalid length. [ 1241.152667][T21424] device 16 entered promiscuous mode [ 1241.236699][T21426] netlink: 'syz.2.6148': attribute type 2 has an invalid length. [ 1241.294640][T21426] device 17 entered promiscuous mode [ 1242.075174][T21444] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 1242.086860][T21444] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 1242.355431][T21456] netlink: 'syz.4.6160': attribute type 2 has an invalid length. [ 1242.455731][T21456] device 15 entered promiscuous mode [ 1242.471268][T21459] netlink: 'syz.2.6158': attribute type 1 has an invalid length. [ 1242.627913][T21462] netlink: 'syz.4.6161': attribute type 2 has an invalid length. [ 1242.690065][T21462] device 16 entered promiscuous mode [ 1242.903987][T21467] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1242.989900][T21467] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.881737][T21494] netlink: 'syz.0.6174': attribute type 2 has an invalid length. [ 1243.896995][T21492] netlink: 'syz.3.6173': attribute type 2 has an invalid length. [ 1243.977472][T21494] device 18 entered promiscuous mode [ 1244.057206][T21492] device 8 entered promiscuous mode [ 1245.079815][T21529] netlink: 'syz.0.6187': attribute type 2 has an invalid length. [ 1245.259767][T21529] device 19 entered promiscuous mode [ 1245.397581][T21534] netlink: 'syz.3.6189': attribute type 2 has an invalid length. [ 1245.527507][T21534] device 9 entered promiscuous mode [ 1245.728732][T21541] validate_nla: 4 callbacks suppressed [ 1245.728770][T21541] netlink: 'syz.0.6190': attribute type 29 has an invalid length. [ 1246.382689][T21570] netlink: 'syz.3.6200': attribute type 2 has an invalid length. [ 1246.673862][T21570] device 10 entered promiscuous mode [ 1246.870724][T21581] netlink: 'syz.0.6212': attribute type 2 has an invalid length. [ 1247.067746][T21581] device 20 entered promiscuous mode [ 1247.271955][T21592] netlink: 'syz.2.6204': attribute type 2 has an invalid length. [ 1247.410858][T21592] device 18 entered promiscuous mode [ 1248.572472][T21633] netlink: 'syz.0.6219': attribute type 2 has an invalid length. [ 1248.657959][T21633] device 21 entered promiscuous mode [ 1252.137419][T21661] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1252.205928][T21661] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1252.441968][T21668] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 1252.454741][T21668] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 1256.699645][T21708] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1256.785986][T21708] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1256.856590][T21717] netlink: 'syz.1.6246': attribute type 3 has an invalid length. [ 1256.915531][T21717] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1256.961391][T21719] netlink: 'syz.1.6246': attribute type 3 has an invalid length. [ 1257.038365][T21719] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1257.307125][T21728] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1257.313717][ T47] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1257.333550][ T47] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1257.416163][T10214] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 1257.447325][T10214] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1257.462458][T21726] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 1257.486485][T21726] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 1257.553226][T21737] netlink: 'syz.2.6254': attribute type 21 has an invalid length. [ 1257.569548][T21737] netlink: 'syz.2.6254': attribute type 12 has an invalid length. [ 1257.585801][T21737] netlink: 'syz.2.6254': attribute type 13 has an invalid length. [ 1257.605555][T21737] netlink: 'syz.2.6254': attribute type 14 has an invalid length. [ 1257.630469][T21737] netlink: 'syz.2.6254': attribute type 15 has an invalid length. [ 1257.639168][T21737] netlink: 'syz.2.6254': attribute type 16 has an invalid length. [ 1257.658696][T21737] netlink: 'syz.2.6254': attribute type 19 has an invalid length. [ 1257.672209][T21737] netlink: 'syz.2.6254': attribute type 6 has an invalid length. [ 1257.680965][T21737] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1258.442124][T21756] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1258.674396][T21756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1258.790422][T21762] device sit0 left promiscuous mode [ 1259.134127][T21774] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6264'. [ 1259.148633][T21769] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6264'. [ 1259.633119][T21785] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 1259.645941][T21785] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 1260.413531][T21801] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1260.479599][T21801] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1260.575139][T21811] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1260.609337][T21808] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6279'. [ 1261.503764][T21835] team0: Device hsr_slave_0 failed to register rx_handler [ 1261.526999][T21836] device sit0 left promiscuous mode [ 1261.891663][T21842] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 1261.913465][T21842] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 1262.126690][T21850] validate_nla: 5 callbacks suppressed [ 1262.126717][T21850] netlink: 'syz.1.6296': attribute type 3 has an invalid length. [ 1262.146619][T21850] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1262.189063][T21852] netlink: 'syz.1.6296': attribute type 3 has an invalid length. [ 1262.203021][T21852] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6296'. [ 1262.349939][T21855] netlink: 'syz.4.6297': attribute type 2 has an invalid length. [ 1262.415393][T21855] device 17 entered promiscuous mode [ 1262.776814][T21869] netlink: 'syz.4.6303': attribute type 21 has an invalid length. [ 1262.805046][T21869] netlink: 'syz.4.6303': attribute type 12 has an invalid length. [ 1262.836918][T21869] netlink: 'syz.4.6303': attribute type 13 has an invalid length. [ 1262.872895][T21869] netlink: 'syz.4.6303': attribute type 14 has an invalid length. [ 1262.894882][T21869] netlink: 'syz.4.6303': attribute type 15 has an invalid length. [ 1262.944471][T21869] netlink: 'syz.4.6303': attribute type 16 has an invalid length. [ 1262.957175][T21869] netlink: 'syz.4.6303': attribute type 19 has an invalid length. [ 1262.977789][T21869] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.6303'. [ 1263.016085][T21871] mac80211_hwsim hwsim14 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1263.409903][T21886] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6308'. [ 1263.492344][T21886] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6308'. [ 1263.612140][T21891] device 22 entered promiscuous mode [ 1264.351363][T21913] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1264.351423][T10188] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 1264.374979][T10188] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1264.803423][T21929] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6323'. [ 1265.145333][T21940] team0: Device hsr_slave_0 failed to register rx_handler [ 1265.484895][T21945] device sit0 left promiscuous mode [ 1266.285234][T21964] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1266.322121][T21971] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6336'. [ 1266.748927][T21986] team0: Device hsr_slave_0 failed to register rx_handler [ 1267.666360][T22011] validate_nla: 9 callbacks suppressed [ 1267.666379][T22011] netlink: 'syz.4.6352': attribute type 3 has an invalid length. [ 1267.692433][T22008] netlink: 'syz.4.6352': attribute type 3 has an invalid length. [ 1267.724705][T22008] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6352'. [ 1267.777479][T22011] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6352'. [ 1267.952221][T22020] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1268.071094][T22019] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 1268.101418][T22019] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 1269.185249][T22055] netlink: 'syz.0.6369': attribute type 3 has an invalid length. [ 1269.209997][T22052] netlink: 'syz.0.6369': attribute type 3 has an invalid length. [ 1269.229724][T22052] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1269.249479][T22055] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6369'. [ 1269.351147][T22059] netlink: 'syz.4.6371': attribute type 2 has an invalid length. [ 1269.384202][T22059] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6371'. [ 1269.757856][T22072] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1269.907546][T22074] netlink: 'syz.0.6382': attribute type 3 has an invalid length. [ 1269.949474][T22074] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1269.961874][T22066] netlink: 'syz.0.6382': attribute type 3 has an invalid length. [ 1269.985686][T22078] netlink: 'syz.2.6376': attribute type 2 has an invalid length. [ 1270.012522][T22066] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6382'. [ 1270.039488][T22078] device 19 entered promiscuous mode [ 1270.264545][T22084] netdevsim netdevsim3: Direct firmware load for .net/syz1 failed with error -2 [ 1270.281645][T22084] netdevsim netdevsim3: Falling back to sysfs fallback for: .net/syz1 [ 1270.927668][T22107] mac80211_hwsim hwsim18 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1270.937111][ T47] wlan1: Created IBSS using preconfigured BSSID 00:00:00:08:00:00 [ 1270.947384][ T47] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 1270.959639][T22109] netlink: 'syz.4.6390': attribute type 2 has an invalid length. [ 1270.988358][T22109] device 18 entered promiscuous mode [ 1271.214313][T22116] netlink: 'syz.1.6391': attribute type 3 has an invalid length. [ 1271.222142][T22116] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1271.244034][T22112] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6391'. [ 1272.000993][T22136] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6401'. [ 1272.149205][T22139] device 23 entered promiscuous mode [ 1273.310663][T22182] validate_nla: 6 callbacks suppressed [ 1273.310698][T22182] netlink: 'syz.3.6422': attribute type 3 has an invalid length. [ 1273.336513][T22182] __nla_validate_parse: 2 callbacks suppressed [ 1273.336571][T22182] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6422'. [ 1273.372966][T22183] netlink: 'syz.3.6422': attribute type 3 has an invalid length. [ 1273.381137][T22183] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6422'. [ 1273.791120][T22190] device syzkaller0 entered promiscuous mode [ 1274.367662][T22208] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 1274.400584][T22208] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 1274.508435][T22215] netlink: 'syz.1.6434': attribute type 3 has an invalid length. [ 1274.578717][T22210] netlink: 'syz.1.6434': attribute type 3 has an invalid length. [ 1274.619610][T22215] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1274.631393][T22210] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6434'. [ 1275.812753][T22256] netlink: 'syz.3.6449': attribute type 3 has an invalid length. [ 1275.830582][T22253] netlink: 'syz.3.6449': attribute type 3 has an invalid length. [ 1275.844354][T22253] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6449'. [ 1275.913788][T22256] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6449'. [ 1276.320116][T22263] netlink: 'syz.0.6464': attribute type 2 has an invalid length. [ 1276.641675][T22263] device 24 entered promiscuous mode [ 1277.209795][T22279] netlink: 'syz.1.6456': attribute type 2 has an invalid length. [ 1277.233471][T22279] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6456'. [ 1277.906981][T22287] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1277.931734][T22297] netlink: 'syz.2.6465': attribute type 3 has an invalid length. [ 1277.949737][T22292] netlink: 'syz.2.6465': attribute type 3 has an invalid length. [ 1277.966449][T22292] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6465'. [ 1278.014292][T22297] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6465'. [ 1278.080209][T22287] device syzkaller0 entered promiscuous mode [ 1280.811588][T22303] device 11 entered promiscuous mode [ 1281.119732][T22332] validate_nla: 1 callbacks suppressed [ 1281.119751][T22332] netlink: 'syz.0.6472': attribute type 2 has an invalid length. [ 1281.175308][T22332] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1281.766656][T22346] netlink: 'syz.0.6480': attribute type 10 has an invalid length. [ 1281.875267][T22346] team0: Device wg1 is of different type [ 1282.630100][T22360] device syzkaller0 entered promiscuous mode [ 1283.688639][T22383] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 1283.733799][T22383] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 1285.349501][T22425] netlink: 'syz.1.6510': attribute type 10 has an invalid length. [ 1285.760500][T22434] netlink: 'syz.2.6513': attribute type 29 has an invalid length. [ 1286.056295][T22428] device syzkaller0 entered promiscuous mode [ 1286.088736][T22434] netlink: 'syz.2.6513': attribute type 29 has an invalid length. [ 1286.106094][T22436] netlink: 'syz.2.6513': attribute type 29 has an invalid length. [ 1286.120040][T22437] netlink: 'syz.2.6513': attribute type 29 has an invalid length. [ 1286.130862][T22440] netlink: 'syz.2.6513': attribute type 29 has an invalid length. [ 1286.443171][T22446] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 1286.463974][T22446] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 1287.823423][T22483] netlink: 'syz.1.6528': attribute type 29 has an invalid length. [ 1287.835525][T22484] netlink: 'syz.0.6537': attribute type 3 has an invalid length. [ 1287.875550][T22483] netlink: 'syz.1.6528': attribute type 29 has an invalid length. [ 1287.892245][T22480] netlink: 'syz.0.6537': attribute type 3 has an invalid length. [ 1287.912429][T22484] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1287.964447][T22486] netlink: 'syz.1.6528': attribute type 29 has an invalid length. [ 1287.972800][T22480] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1288.020177][T22488] netlink: 'syz.1.6528': attribute type 29 has an invalid length. [ 1288.118113][T22483] netlink: 'syz.1.6528': attribute type 29 has an invalid length. [ 1288.486535][T22497] delete_channel: no stack [ 1289.938181][T22518] delete_channel: no stack [ 1290.589934][T22546] netlink: 'syz.4.6548': attribute type 3 has an invalid length. [ 1290.622325][T22546] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.6548'. [ 1291.183059][T22560] netlink: 'syz.4.6554': attribute type 29 has an invalid length. [ 1291.257449][T22560] netlink: 'syz.4.6554': attribute type 29 has an invalid length. [ 1291.294261][T22565] netlink: 'syz.4.6554': attribute type 29 has an invalid length. [ 1291.316283][T22560] netlink: 'syz.4.6554': attribute type 29 has an invalid length. [ 1291.370137][T22560] netlink: 'syz.4.6554': attribute type 29 has an invalid length. [ 1292.175859][T22587] netlink: 'syz.4.6561': attribute type 3 has an invalid length. [ 1292.314926][T22587] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6561'. [ 1292.330706][T22581] netlink: 'syz.4.6561': attribute type 3 has an invalid length. [ 1292.342002][T22581] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6561'. [ 1293.055010][T22604] netlink: 'syz.3.6568': attribute type 29 has an invalid length. [ 1293.086407][T22604] netlink: 'syz.3.6568': attribute type 29 has an invalid length. [ 1293.107610][T22606] netlink: 'syz.3.6568': attribute type 29 has an invalid length. [ 1295.569550][T22673] delete_channel: no stack [ 1296.814103][T22708] validate_nla: 2 callbacks suppressed [ 1296.814143][T22708] netlink: 'syz.0.6601': attribute type 29 has an invalid length. [ 1296.907236][T22708] netlink: 'syz.0.6601': attribute type 29 has an invalid length. [ 1296.987311][T22710] netlink: 'syz.0.6601': attribute type 29 has an invalid length. [ 1297.118190][T22713] netlink: 'syz.0.6601': attribute type 29 has an invalid length. [ 1297.195041][T22708] netlink: 'syz.0.6601': attribute type 29 has an invalid length. [ 1297.389231][T22719] delete_channel: no stack [ 1299.267634][T22767] netlink: 188 bytes leftover after parsing attributes in process `syz.3.6624'. [ 1300.018986][T22785] netlink: 'syz.1.6630': attribute type 3 has an invalid length. [ 1300.028487][T22785] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6630'. [ 1300.155854][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.162282][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.512812][T22806] netlink: 'syz.3.6637': attribute type 2 has an invalid length. [ 1300.570415][T22806] device 12 entered promiscuous mode [ 1301.982062][T22829] netlink: 'syz.0.6645': attribute type 3 has an invalid length. [ 1301.999386][T22829] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6645'. [ 1302.307867][T22838] netlink: 'syz.3.6648': attribute type 29 has an invalid length. [ 1302.307945][T22841] netlink: 'syz.0.6651': attribute type 2 has an invalid length. [ 1302.492243][T22841] device 25 entered promiscuous mode [ 1302.501747][T22838] netlink: 'syz.3.6648': attribute type 29 has an invalid length. [ 1302.530453][T22845] netlink: 'syz.3.6648': attribute type 29 has an invalid length. [ 1302.567168][T22847] netlink: 'syz.3.6648': attribute type 29 has an invalid length. [ 1302.603411][T22849] netlink: 'syz.3.6648': attribute type 29 has an invalid length. [ 1303.469436][T22873] netlink: 'syz.2.6662': attribute type 3 has an invalid length. [ 1303.484806][T22873] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6662'. [ 1303.680756][T22882] netlink: 'syz.3.6664': attribute type 2 has an invalid length. [ 1303.765847][T22882] device 13 entered promiscuous mode [ 1304.547844][T22899] netlink: 'syz.1.6671': attribute type 10 has an invalid length. [ 1304.576044][T22899] device dummy0 left promiscuous mode [ 1305.311245][T22917] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6677'. [ 1305.471999][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1305.504300][T22922] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6678'. [ 1305.587017][T22925] device 20 entered promiscuous mode [ 1306.651543][T22952] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6689'. [ 1306.698978][T22955] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1306.830271][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1307.013654][T22957] validate_nla: 5 callbacks suppressed [ 1307.013677][T22957] netlink: 'syz.1.6689': attribute type 10 has an invalid length. [ 1307.301840][T22971] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6694'. [ 1307.321182][T22974] netlink: 'syz.1.6695': attribute type 2 has an invalid length. [ 1307.422789][T22974] device 16 entered promiscuous mode [ 1308.550351][T23003] netlink: 'syz.2.6706': attribute type 3 has an invalid length. [ 1308.563926][T23003] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6706'. [ 1309.062537][T23021] netlink: 'syz.1.6711': attribute type 2 has an invalid length. [ 1309.098927][T23013] netlink: 'syz.4.6707': attribute type 2 has an invalid length. [ 1309.132567][T23023] netlink: 'syz.4.6707': attribute type 10 has an invalid length. [ 1309.189173][T23023] team0: Port device bridge_slave_1 added [ 1309.215238][T23019] netlink: 'syz.4.6707': attribute type 10 has an invalid length. [ 1309.270639][T23021] device 17 entered promiscuous mode [ 1309.418612][T23031] netlink: 188 bytes leftover after parsing attributes in process `syz.4.6712'. [ 1309.875743][T23046] raw_sendmsg: syz.3.6718 forgot to set AF_INET. Fix it! [ 1310.358918][T23056] netlink: 'syz.1.6721': attribute type 3 has an invalid length. [ 1310.368027][T23056] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6721'. [ 1310.809986][T23075] netlink: 'syz.1.6729': attribute type 6 has an invalid length. [ 1311.063184][T23083] netlink: 'syz.4.6728': attribute type 10 has an invalid length. [ 1311.073074][T23083] device dummy0 left promiscuous mode [ 1312.791840][T23123] netlink: 'syz.4.6743': attribute type 6 has an invalid length. [ 1313.963564][T23154] netlink: 'syz.2.6754': attribute type 1 has an invalid length. [ 1313.990116][T23154] netlink: 'syz.2.6754': attribute type 3 has an invalid length. [ 1314.015120][T23154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6754'. [ 1314.088902][T23153] delete_channel: no stack [ 1314.130108][T23165] netlink: 'syz.3.6758': attribute type 2 has an invalid length. [ 1314.337449][T23165] device 14 entered promiscuous mode [ 1314.687172][T23170] netlink: 'syz.0.6760': attribute type 2 has an invalid length. [ 1314.731766][T23173] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6760'. [ 1314.943657][T23182] netlink: 'syz.0.6760': attribute type 10 has an invalid length. [ 1314.990417][T23182] team0: Port device bridge_slave_1 added [ 1315.219035][T23186] netlink: 'syz.3.6765': attribute type 3 has an invalid length. [ 1315.260014][T23186] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6765'. [ 1316.202386][T23215] netlink: 'syz.0.6773': attribute type 2 has an invalid length. [ 1316.288146][T23215] device 26 entered promiscuous mode [ 1317.776423][T23257] netlink: 'syz.0.6788': attribute type 1 has an invalid length. [ 1317.813622][T23257] netlink: 'syz.0.6788': attribute type 3 has an invalid length. [ 1317.838963][T23257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6788'. [ 1317.927158][T23256] delete_channel: no stack [ 1318.213061][T23263] netlink: 'syz.0.6789': attribute type 10 has an invalid length. [ 1318.487536][T23275] netlink: 'syz.1.6792': attribute type 29 has an invalid length. [ 1318.934391][T23285] netlink: 'syz.3.6797': attribute type 2 has an invalid length. [ 1318.956366][T23285] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1319.228534][T23291] netlink: 'syz.3.6797': attribute type 10 has an invalid length. [ 1319.289757][T23291] team0: Port device bridge_slave_1 added [ 1319.726083][T23309] netlink: 'syz.1.6804': attribute type 1 has an invalid length. [ 1319.763836][T23309] netlink: 'syz.1.6804': attribute type 3 has an invalid length. [ 1319.771948][T23309] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6804'. [ 1319.948069][T23308] delete_channel: no stack [ 1320.731488][T23336] netlink: 'syz.4.6826': attribute type 1 has an invalid length. [ 1320.763642][T23336] netlink: 'syz.4.6826': attribute type 3 has an invalid length. [ 1320.785217][T23336] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6826'. [ 1321.055564][T23333] delete_channel: no stack [ 1321.088973][T23338] netlink: 'syz.2.6813': attribute type 2 has an invalid length. [ 1321.112410][T23349] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6813'. [ 1321.266742][T23351] team0: Port device bridge_slave_1 added [ 1321.922419][T23371] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6822'. [ 1322.391049][T23382] device 19 entered promiscuous mode [ 1323.269270][T23406] validate_nla: 4 callbacks suppressed [ 1323.269345][T23406] netlink: 'syz.1.6836': attribute type 29 has an invalid length. [ 1323.359697][T23404] device veth1_macvtap left promiscuous mode [ 1323.461567][T23406] netlink: 'syz.1.6836': attribute type 29 has an invalid length. [ 1323.481496][T23412] device veth1_macvtap entered promiscuous mode [ 1323.503360][T23412] device macsec0 entered promiscuous mode [ 1323.514050][T23413] netlink: 'syz.1.6836': attribute type 29 has an invalid length. [ 1323.911469][T23418] netlink: 'syz.4.6838': attribute type 3 has an invalid length. [ 1323.934025][T23418] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1326.827908][T23431] device wg2 entered promiscuous mode [ 1327.509646][T23454] netlink: 'syz.3.6852': attribute type 29 has an invalid length. [ 1327.535163][T23454] netlink: 'syz.3.6852': attribute type 29 has an invalid length. [ 1327.571584][T23458] netlink: 'syz.3.6852': attribute type 29 has an invalid length. [ 1328.182396][T23460] netlink: 'syz.0.6853': attribute type 3 has an invalid length. [ 1328.192181][T23460] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.6853'. [ 1328.592761][T23473] netlink: 'syz.0.6857': attribute type 19 has an invalid length. [ 1328.611975][T23473] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.6857'. [ 1328.706541][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1329.146349][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1329.458790][T23497] netlink: 'syz.2.6863': attribute type 29 has an invalid length. [ 1329.604977][T23501] netlink: 'syz.4.6865': attribute type 1 has an invalid length. [ 1329.613823][T23501] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1330.268221][T23513] netlink: 'syz.0.6870': attribute type 2 has an invalid length. [ 1330.345105][T23513] device 27 entered promiscuous mode [ 1330.558621][T23515] netlink: 'syz.1.6869': attribute type 3 has an invalid length. [ 1330.584417][T23515] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6869'. [ 1332.550751][T23564] netlink: 'syz.3.6884': attribute type 29 has an invalid length. [ 1332.832625][T23569] netlink: 'syz.4.6886': attribute type 2 has an invalid length. [ 1333.054394][T23572] netlink: 'syz.1.6887': attribute type 2 has an invalid length. [ 1333.118719][T23569] device 20 entered promiscuous mode [ 1333.237282][T23572] device 18 entered promiscuous mode [ 1333.536168][T23589] netlink: 'syz.2.6892': attribute type 29 has an invalid length. [ 1336.085347][T23589] netlink: 'syz.2.6892': attribute type 29 has an invalid length. [ 1336.107115][T23597] netlink: 'syz.2.6892': attribute type 29 has an invalid length. [ 1336.435054][T23608] netlink: 154788 bytes leftover after parsing attributes in process `syz.2.6897'. [ 1336.460911][T23608] openvswitch: netlink: Message has 48126 unknown bytes. [ 1336.850830][T23613] device wg2 entered promiscuous mode [ 1337.156890][T23625] netlink: 'syz.2.6903': attribute type 2 has an invalid length. [ 1337.316862][T23625] device 21 entered promiscuous mode [ 1337.476053][T23630] netlink: 'syz.0.6902': attribute type 29 has an invalid length. [ 1337.669784][T23634] netlink: 'syz.2.6904': attribute type 2 has an invalid length. [ 1337.779862][T23634] device 22 entered promiscuous mode [ 1338.080875][T23639] netlink: 'syz.3.6906': attribute type 21 has an invalid length. [ 1338.103842][T23639] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1338.135035][T23641] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.6907'. [ 1338.212869][T23644] netlink: 'syz.2.6909': attribute type 3 has an invalid length. [ 1338.226749][T23644] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6909'. [ 1338.277575][T23641] netlink: 'syz.1.6907': attribute type 10 has an invalid length. [ 1338.397149][T23641] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6907'. [ 1339.107425][T23671] netlink: 'syz.0.6915': attribute type 2 has an invalid length. [ 1339.125442][T23669] netlink: 'syz.3.6916': attribute type 29 has an invalid length. [ 1339.227356][T23671] device 28 entered promiscuous mode [ 1339.746465][T23682] device wg2 entered promiscuous mode [ 1340.060374][T23689] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6921'. [ 1340.258904][T23700] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6923'. [ 1340.819081][T23709] device 23 entered promiscuous mode [ 1340.919256][T23712] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1340.959144][T23712] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6928'. [ 1341.190173][T23717] validate_nla: 9 callbacks suppressed [ 1341.190201][T23717] netlink: 'syz.0.6929': attribute type 29 has an invalid length. [ 1341.655812][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1341.664579][T23731] netlink: 'syz.1.6935': attribute type 3 has an invalid length. [ 1341.672972][T23731] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.6935'. [ 1342.020666][T23743] netlink: 'syz.1.6938': attribute type 21 has an invalid length. [ 1342.031135][T23743] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6938'. [ 1342.346305][T23752] netlink: 'syz.3.6940': attribute type 29 has an invalid length. [ 1342.356879][T23751] netlink: 'syz.2.6941': attribute type 2 has an invalid length. [ 1342.431010][T23751] device 24 entered promiscuous mode [ 1342.749818][T23759] device veth1_macvtap left promiscuous mode [ 1342.767842][T23760] netlink: 'syz.2.6953': attribute type 2 has an invalid length. [ 1342.784570][T23759] device macsec0 left promiscuous mode [ 1342.881205][T23760] device 25 entered promiscuous mode [ 1342.904430][T23759] device veth1_macvtap entered promiscuous mode [ 1342.911197][T23759] device macsec0 entered promiscuous mode [ 1343.158582][T23768] device wg2 entered promiscuous mode [ 1343.368067][T23778] netlink: 'syz.2.6946': attribute type 19 has an invalid length. [ 1343.383963][T23778] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.6946'. [ 1344.132528][T23782] netlink: 'syz.4.6948': attribute type 3 has an invalid length. [ 1344.145180][T23782] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1344.302920][T12486] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 1346.187080][T23806] netlink: 'syz.4.6957': attribute type 2 has an invalid length. [ 1346.332235][T23806] device 21 entered promiscuous mode [ 1346.426343][T23815] netlink: 154788 bytes leftover after parsing attributes in process `syz.3.6958'. [ 1346.436166][T23815] openvswitch: netlink: Message has 48126 unknown bytes. [ 1346.659834][T23821] netlink: 'syz.1.6962': attribute type 2 has an invalid length. [ 1346.829302][T23821] device 19 entered promiscuous mode [ 1346.889326][T23826] netlink: 'syz.3.6960': attribute type 29 has an invalid length. [ 1346.921927][T23823] netlink: 'syz.2.6961': attribute type 3 has an invalid length. [ 1346.932822][T23823] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6961'. [ 1347.318404][T23838] netlink: 'syz.4.6966': attribute type 19 has an invalid length. [ 1347.327961][T23838] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.6966'. [ 1347.373853][T23840] netlink: 'syz.2.6976': attribute type 3 has an invalid length. [ 1347.382587][T23840] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6976'. [ 1347.659673][T23850] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1347.669653][T23850] openvswitch: netlink: Message has 48126 unknown bytes. [ 1347.698095][T23851] netlink: 'syz.3.6969': attribute type 2 has an invalid length. [ 1347.836425][T23851] device 15 entered promiscuous mode [ 1348.190049][T23860] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.6972'. [ 1348.213946][T23864] netlink: 'syz.0.6972': attribute type 10 has an invalid length. [ 1348.221852][T23864] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6972'. [ 1348.341237][T23869] netlink: 'syz.2.6986': attribute type 2 has an invalid length. [ 1348.350890][T23870] netlink: 'syz.3.6977': attribute type 2 has an invalid length. [ 1348.381189][T23872] netlink: 'syz.4.6975': attribute type 29 has an invalid length. [ 1348.444498][T23870] device 16 entered promiscuous mode [ 1348.521227][T23869] device 26 entered promiscuous mode [ 1348.827695][T23881] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.6979'. [ 1349.029604][T23886] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.6981'. [ 1349.558422][T23901] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6989'. [ 1349.613973][T23906] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6989'. [ 1349.830145][T23912] device 27 entered promiscuous mode [ 1349.870288][T23914] device 20 entered promiscuous mode [ 1350.982932][T23940] delete_channel: no stack [ 1351.265678][T23951] device 17 entered promiscuous mode [ 1351.381343][T23958] device 28 entered promiscuous mode [ 1351.737425][T23968] validate_nla: 15 callbacks suppressed [ 1351.737479][T23968] netlink: 'syz.1.7011': attribute type 29 has an invalid length. [ 1351.739115][T23970] delete_channel: no stack [ 1351.766919][T23970] delete_channel: no stack [ 1351.876649][T23968] netlink: 'syz.1.7011': attribute type 29 has an invalid length. [ 1352.036297][T23975] netlink: 'syz.2.7015': attribute type 3 has an invalid length. [ 1352.045303][T23975] __nla_validate_parse: 2 callbacks suppressed [ 1352.045340][T23975] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7015'. [ 1352.187219][T23980] netlink: 'syz.0.7014': attribute type 3 has an invalid length. [ 1352.212511][T23980] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7014'. [ 1352.429101][T23986] netlink: 'syz.1.7018': attribute type 19 has an invalid length. [ 1352.437892][T23986] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.7018'. [ 1353.822465][T24016] netlink: 'syz.3.7027': attribute type 3 has an invalid length. [ 1353.838849][T24016] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7027'. [ 1354.633016][T24040] netlink: 'syz.1.7038': attribute type 1 has an invalid length. [ 1354.652219][T24040] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.7038'. [ 1355.567050][T24063] netlink: 'syz.3.7043': attribute type 3 has an invalid length. [ 1355.632163][T24063] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7043'. [ 1356.471801][T24092] netlink: 'syz.3.7054': attribute type 1 has an invalid length. [ 1356.529777][T24092] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.7054'. [ 1357.126277][T24107] netlink: 'syz.0.7059': attribute type 3 has an invalid length. [ 1357.145383][T24107] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7059'. [ 1357.409674][T24117] -: renamed from syzkaller0 [ 1357.956830][T24132] netlink: 'syz.3.7071': attribute type 29 has an invalid length. [ 1357.990569][T24132] netlink: 'syz.3.7071': attribute type 29 has an invalid length. [ 1358.067272][T24132] netlink: 'syz.3.7071': attribute type 29 has an invalid length. [ 1358.100707][T24136] device macsec0 left promiscuous mode [ 1358.267540][T24136] device macsec0 entered promiscuous mode [ 1361.295735][T24145] netlink: 'syz.0.7074': attribute type 3 has an invalid length. [ 1361.334853][T24145] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7074'. [ 1361.418089][T24149] delete_channel: no stack [ 1361.596290][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.602719][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.756016][T24161] delete_channel: no stack [ 1361.794625][T24161] delete_channel: no stack [ 1362.873967][T24188] device veth1_macvtap left promiscuous mode [ 1362.880168][T24188] device macsec0 left promiscuous mode [ 1362.969007][T24188] device veth1_macvtap entered promiscuous mode [ 1362.976396][T24188] device macsec0 entered promiscuous mode [ 1366.022175][T24204] delete_channel: no stack [ 1366.041613][T24204] delete_channel: no stack [ 1366.087736][T24201] netlink: 'syz.1.7093': attribute type 3 has an invalid length. [ 1366.144855][T24201] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.7093'. [ 1367.462382][T24234] netlink: 'syz.1.7103': attribute type 10 has an invalid length. [ 1367.536392][T24234] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1368.632527][T24250] delete_channel: no stack [ 1368.644234][T24250] delete_channel: no stack [ 1369.826942][T24286] netlink: 'syz.3.7118': attribute type 3 has an invalid length. [ 1369.854655][T24290] netlink: 'syz.4.7121': attribute type 2 has an invalid length. [ 1369.873652][T24286] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7118'. [ 1369.892260][T24289] device veth1_macvtap left promiscuous mode [ 1369.913798][T24289] device macsec0 left promiscuous mode [ 1369.994181][T24290] device 22 entered promiscuous mode [ 1370.031603][T24289] device veth1_macvtap entered promiscuous mode [ 1370.050568][T24289] device macsec0 entered promiscuous mode [ 1373.050573][T24299] netlink: 'syz.3.7125': attribute type 10 has an invalid length. [ 1373.059442][T24299] device netdevsim0 entered promiscuous mode [ 1373.317425][T24305] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1374.779939][T24341] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.7139'. [ 1375.162822][T24350] netlink: 'syz.2.7154': attribute type 10 has an invalid length. [ 1375.437382][T24350] device team_slave_1 left promiscuous mode [ 1375.572515][T24350] team0 (unregistering): Port device team_slave_1 removed [ 1375.586116][T24350] device virt_wifi0 left promiscuous mode [ 1375.649673][T24350] team0 (unregistering): Port device virt_wifi0 removed [ 1375.675701][T24350] device geneve1 left promiscuous mode [ 1375.739615][T24350] team0 (unregistering): Port device geneve1 removed [ 1375.867543][T24350] team0 (unregistering): Port device bridge_slave_1 removed [ 1376.137730][T24366] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1379.660185][T24406] netlink: 'syz.4.7158': attribute type 10 has an invalid length. [ 1379.669131][T24409] netlink: 'syz.1.7156': attribute type 2 has an invalid length. [ 1379.683344][T24406] device netdevsim0 entered promiscuous mode [ 1379.748315][T24409] device 21 entered promiscuous mode [ 1380.957249][T24417] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1381.099836][T24415] netlink: 'syz.0.7160': attribute type 3 has an invalid length. [ 1381.113450][T24415] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7160'. [ 1381.261800][T24425] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1381.874200][T24436] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.7164'. [ 1382.574199][T24452] netlink: 'syz.1.7172': attribute type 2 has an invalid length. [ 1382.711584][T24452] device 22 entered promiscuous mode [ 1382.721606][T24454] netlink: 'syz.0.7173': attribute type 10 has an invalid length. [ 1382.740415][T24454] device netdevsim0 entered promiscuous mode [ 1382.932656][T24460] netlink: 'syz.2.7176': attribute type 3 has an invalid length. [ 1382.994533][T24460] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7176'. [ 1383.190032][T24469] netlink: 'syz.0.7179': attribute type 21 has an invalid length. [ 1383.205896][T24469] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1383.225190][T24469] netlink: 'syz.0.7179': attribute type 4 has an invalid length. [ 1383.244748][T24469] netlink: 'syz.0.7179': attribute type 5 has an invalid length. [ 1383.252578][T24469] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7179'. [ 1384.462061][T24497] netlink: 'syz.1.7188': attribute type 2 has an invalid length. [ 1384.636221][T24497] device 23 entered promiscuous mode [ 1384.689753][T24499] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.7189'. [ 1384.765523][T24502] netlink: 'syz.3.7191': attribute type 10 has an invalid length. [ 1385.049825][T24505] netlink: 'syz.2.7190': attribute type 3 has an invalid length. [ 1385.106728][T24505] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7190'. [ 1385.132600][T24502] device team_slave_1 left promiscuous mode [ 1385.399548][T24502] team0 (unregistering): Port device team_slave_1 removed [ 1385.410557][T24502] device geneve1 left promiscuous mode [ 1385.558267][T24502] team0 (unregistering): Port device geneve1 removed [ 1385.590690][T24502] team0 (unregistering): Port device bridge_slave_1 removed [ 1385.960485][T24529] netlink: 'syz.1.7199': attribute type 29 has an invalid length. [ 1385.972017][T24529] netlink: 'syz.1.7199': attribute type 29 has an invalid length. [ 1386.009301][T24529] netlink: 'syz.1.7199': attribute type 29 has an invalid length. [ 1386.059118][T24529] netlink: 'syz.1.7199': attribute type 29 has an invalid length. [ 1386.462406][T24540] netlink: 'syz.2.7202': attribute type 2 has an invalid length. [ 1386.570704][T24540] device 29 entered promiscuous mode [ 1386.679633][T24547] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1386.689065][T24547] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1386.700250][T24547] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1386.949241][T24551] netlink: 'syz.0.7216': attribute type 2 has an invalid length. [ 1387.002636][T24551] device 29 entered promiscuous mode [ 1387.358486][T24559] netlink: 'syz.1.7208': attribute type 10 has an invalid length. [ 1387.897087][T24580] netlink: 'syz.4.7215': attribute type 29 has an invalid length. [ 1388.401731][T24595] device 30 entered promiscuous mode [ 1389.459490][T24608] device team_slave_1 left promiscuous mode [ 1389.690765][T24608] team0 (unregistering): Port device team_slave_1 removed [ 1389.714267][T24608] device geneve1 left promiscuous mode [ 1389.814933][T24608] team0 (unregistering): Port device geneve1 removed [ 1389.842654][T24608] team0 (unregistering): Port device bridge_slave_1 removed [ 1390.275397][T24630] validate_nla: 5 callbacks suppressed [ 1390.275439][T24630] netlink: 'syz.3.7232': attribute type 29 has an invalid length. [ 1390.343553][T24630] netlink: 'syz.3.7232': attribute type 29 has an invalid length. [ 1390.380866][T24631] netlink: 'syz.3.7232': attribute type 29 has an invalid length. [ 1390.426780][T24630] netlink: 'syz.3.7232': attribute type 29 has an invalid length. [ 1390.584712][T24637] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 1390.612364][T24642] netlink: 'syz.2.7235': attribute type 2 has an invalid length. [ 1390.619432][T24637] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 1390.652755][T24637] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 1390.685849][T24642] device 31 entered promiscuous mode [ 1390.880086][T24651] device macsec0 left promiscuous mode [ 1390.982285][T24654] device macsec0 entered promiscuous mode [ 1391.014680][T10216] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1391.892168][T24664] netlink: 'syz.4.7241': attribute type 10 has an invalid length. [ 1392.122849][T24664] device team_slave_1 left promiscuous mode [ 1392.294913][T24664] team0 (unregistering): Port device team_slave_1 removed [ 1392.308837][T24664] device virt_wifi0 left promiscuous mode [ 1392.466753][T24664] team0 (unregistering): Port device virt_wifi0 removed [ 1392.530899][T24664] device geneve1 left promiscuous mode [ 1392.779106][T24664] team0 (unregistering): Port device geneve1 removed [ 1392.796402][T24664] team0 (unregistering): Port device bridge_slave_1 removed [ 1393.128954][T24680] netlink: 'syz.3.7247': attribute type 3 has an invalid length. [ 1393.174454][T24680] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7247'. [ 1393.577123][T24694] netlink: 'syz.1.7253': attribute type 2 has an invalid length. [ 1393.695852][T24694] device 24 entered promiscuous mode [ 1393.714974][T24703] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7254'. [ 1394.117094][T24706] device veth1_macvtap left promiscuous mode [ 1394.132088][T24706] device macsec0 left promiscuous mode [ 1394.205438][T24711] device veth1_macvtap entered promiscuous mode [ 1394.215303][T24711] device macsec0 entered promiscuous mode [ 1397.500643][T24734] netlink: 'syz.2.7263': attribute type 3 has an invalid length. [ 1397.525542][T24734] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.7263'. [ 1397.714643][T24746] netlink: 'syz.4.7266': attribute type 2 has an invalid length. [ 1397.797696][T24746] device 23 entered promiscuous mode [ 1398.689632][T24769] netlink: 'syz.4.7272': attribute type 10 has an invalid length. [ 1398.948355][T24781] netlink: 'syz.4.7277': attribute type 3 has an invalid length. [ 1398.957878][T24781] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7277'. [ 1399.172601][T24789] netlink: 'syz.0.7279': attribute type 2 has an invalid length. [ 1399.223163][T24789] device 30 entered promiscuous mode [ 1400.293041][T24818] netlink: 'syz.2.7287': attribute type 29 has an invalid length. [ 1400.318843][T24818] netlink: 'syz.2.7287': attribute type 29 has an invalid length. [ 1400.330286][T24819] netlink: 'syz.2.7287': attribute type 29 has an invalid length. [ 1400.396976][T24818] netlink: 'syz.2.7287': attribute type 29 has an invalid length. [ 1400.472407][T24816] netlink: 'syz.3.7288': attribute type 3 has an invalid length. [ 1400.486526][T24816] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7288'. [ 1401.115857][T24834] device 31 entered promiscuous mode [ 1401.539287][T24844] device 32 entered promiscuous mode [ 1401.598463][T24847] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1401.611414][T24847] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1401.628773][T24847] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1401.928565][T24856] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7300'. [ 1401.973721][T24856] netlink: 3 bytes leftover after parsing attributes in process `syz.4.7300'. [ 1402.330029][T24861] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7301'. [ 1403.171003][T24876] validate_nla: 8 callbacks suppressed [ 1403.171112][T24876] netlink: 'syz.3.7307': attribute type 10 has an invalid length. [ 1403.550500][T24888] netlink: 'syz.3.7311': attribute type 2 has an invalid length. [ 1403.737090][T24888] device 18 entered promiscuous mode [ 1404.305676][T24908] netlink: 'syz.3.7317': attribute type 21 has an invalid length. [ 1404.327227][T24908] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7317'. [ 1404.349785][T24908] netlink: 'syz.3.7317': attribute type 4 has an invalid length. [ 1404.368425][T24908] netlink: 'syz.3.7317': attribute type 5 has an invalid length. [ 1404.394226][T24908] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7317'. [ 1404.492489][T24910] netlink: 'syz.4.7318': attribute type 3 has an invalid length. [ 1404.506158][T24910] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7318'. [ 1404.727019][T24917] netlink: 'syz.3.7320': attribute type 10 has an invalid length. [ 1406.106325][T24947] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7330'. [ 1406.141554][T24947] device hsr_slave_0 left promiscuous mode [ 1406.241542][T24947] device hsr_slave_1 left promiscuous mode [ 1406.554365][T24953] netlink: 'syz.0.7333': attribute type 3 has an invalid length. [ 1406.576647][T24953] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7333'. [ 1406.637846][T24957] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1406.658177][T24957] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1406.680037][T24957] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1406.786917][T24961] netlink: 'syz.0.7335': attribute type 10 has an invalid length. [ 1407.412625][T24973] netlink: 'syz.1.7339': attribute type 2 has an invalid length. [ 1407.607838][T24973] device 25 entered promiscuous mode [ 1408.028863][T24985] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7344'. [ 1408.058746][T24983] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7345'. [ 1411.220392][T24994] validate_nla: 1 callbacks suppressed [ 1411.220469][T24994] netlink: 'syz.0.7347': attribute type 29 has an invalid length. [ 1411.253464][T25000] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7359'. [ 1411.272071][T24994] netlink: 'syz.0.7347': attribute type 29 has an invalid length. [ 1411.306855][T25000] netlink: 'syz.4.7359': attribute type 2 has an invalid length. [ 1411.340277][T25001] netlink: 'syz.0.7347': attribute type 29 has an invalid length. [ 1411.373916][T25002] netlink: 'syz.0.7347': attribute type 29 has an invalid length. [ 1411.382726][T25003] netlink: 'syz.1.7348': attribute type 10 has an invalid length. [ 1411.622822][T25009] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7351'. [ 1411.685334][T25009] device hsr_slave_0 left promiscuous mode [ 1411.754023][T25009] device hsr_slave_1 left promiscuous mode [ 1412.628880][T25029] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.7358'. [ 1413.185282][T25038] netlink: 'syz.2.7363': attribute type 10 has an invalid length. [ 1413.266699][T25040] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7364'. [ 1413.334717][T25040] netlink: 'syz.0.7364': attribute type 2 has an invalid length. [ 1413.728011][T25052] netlink: 'syz.0.7369': attribute type 2 has an invalid length. [ 1413.875318][T25052] device 33 entered promiscuous mode [ 1415.655087][T25076] netlink: 'syz.4.7377': attribute type 10 has an invalid length. [ 1415.770862][T25081] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1415.793802][T25081] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1415.830480][T25081] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1416.189334][T25093] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7380'. [ 1416.209955][T25093] device hsr_slave_0 left promiscuous mode [ 1416.235732][T25093] device hsr_slave_1 left promiscuous mode [ 1416.288991][T25099] netlink: 'syz.3.7381': attribute type 2 has an invalid length. [ 1416.341279][T25098] @: port 1(netdevsim3) entered blocking state [ 1416.351074][T25098] @: port 1(netdevsim3) entered disabled state [ 1416.358602][T25098] device netdevsim3 entered promiscuous mode [ 1416.366901][T25097] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1416.691764][T25105] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1416.709148][T25105] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1416.722408][T25105] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1417.778937][T25119] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.7388'. [ 1418.378276][T25135] netlink: 'syz.0.7404': attribute type 10 has an invalid length. [ 1418.606812][T25140] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7396'. [ 1418.633835][T25140] device hsr_slave_0 left promiscuous mode [ 1418.654759][T25140] device hsr_slave_1 left promiscuous mode [ 1418.913468][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7397'. [ 1418.930310][T25149] netlink: 'syz.1.7397': attribute type 2 has an invalid length. [ 1419.403148][T25162] netlink: 'syz.2.7403': attribute type 2 has an invalid length. [ 1419.486235][T25162] device 32 entered promiscuous mode [ 1419.653310][T25167] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.7405'. [ 1421.098599][T25181] netlink: 17279 bytes leftover after parsing attributes in process `syz.4.7411'. [ 1421.438400][T25190] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7412'. [ 1421.453397][T25190] device hsr_slave_0 left promiscuous mode [ 1421.476389][T25190] device hsr_slave_1 left promiscuous mode [ 1421.530273][T25192] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1421.543620][T25192] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1422.418307][T25215] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7430'. [ 1423.036227][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.042622][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.920136][T25238] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7426'. [ 1424.422968][T25246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7429'. [ 1424.455665][T25246] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7429'. [ 1424.478827][T25246] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1424.558856][T25246] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1427.087947][T25288] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1427.123536][T25288] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1427.143552][T25288] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1427.194163][T25293] netlink: 'syz.4.7447': attribute type 39 has an invalid length. [ 1428.024394][T25303] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7449'. [ 1429.874329][T25334] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 1429.893606][T25334] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 1429.902571][T25334] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 1430.514407][T25342] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.7464'. [ 1430.856149][T25354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1430.914774][T25354] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7468'. [ 1430.973517][T25354] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1431.016725][T25354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1431.718937][T25371] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.7474'. [ 1433.062302][T25394] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 1433.084935][T25394] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 1433.103551][T25394] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 1433.309939][T25401] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1433.368980][T25401] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7481'. [ 1433.424056][T25401] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1433.504061][T25401] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1433.953841][T25414] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.7487'. [ 1434.147067][T25418] netlink: 'syz.2.7489': attribute type 20 has an invalid length. [ 1434.271312][T25420] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.7489'. [ 1434.310439][T25420] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.7489'. [ 1434.356426][T25418] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.7489'. [ 1435.859664][T25434] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.7497'. [ 1436.601951][T25456] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1436.749017][T25461] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7501'. [ 1436.775105][T25461] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1436.853791][T25461] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1437.067599][T25459] netlink: 17279 bytes leftover after parsing attributes in process `syz.0.7500'. [ 1437.494276][T25480] netlink: 'syz.0.7508': attribute type 39 has an invalid length. [ 1438.886090][T25506] __nla_validate_parse: 1 callbacks suppressed [ 1438.886131][T25506] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7517'. [ 1439.062007][T25506] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7517'. [ 1439.152064][T25506] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1439.230013][T25506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1439.749112][T25519] netlink: 'syz.1.7521': attribute type 39 has an invalid length. [ 1440.900303][T25540] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.7528'. [ 1441.559371][T25558] netlink: 'syz.3.7545': attribute type 10 has an invalid length. [ 1441.994605][T25567] netlink: 'syz.3.7538': attribute type 20 has an invalid length. [ 1442.167272][T25567] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7538'. [ 1442.190581][T25567] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7538'. [ 1442.232335][T25574] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7538'. [ 1442.839360][T25589] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.7546'. [ 1444.183810][T25619] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7555'. [ 1444.443505][T25623] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7555'. [ 1444.452712][T25623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1444.531538][T25623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1445.396152][T25639] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7571'. [ 1445.487107][T25639] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7571'. [ 1445.555537][T25639] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1445.600660][T25643] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.7562'. [ 1445.698300][T25639] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1451.670049][T25699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1451.685238][T25702] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7578'. [ 1451.701995][T25702] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1451.763534][T25702] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1452.219475][T25717] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.7583'. [ 1453.856374][T25747] netlink: 'syz.1.7597': attribute type 16 has an invalid length. [ 1453.890633][T25747] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7597'. [ 1470.459963][T25778] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1472.253589][T10682] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 1472.503548][T25778] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1472.510717][T12486] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1472.517287][T25774] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 1480.653418][ T4350] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 2666 jiffies s: 139833 root: 0x1/. [ 1480.672848][ T4350] rcu: blocking rcu_node structures (internal RCU debug): [ 1480.682046][ T4350] Sending NMI from CPU 1 to CPUs 0: [ 1480.687382][ C0] NMI backtrace for cpu 0 [ 1480.687394][ C0] CPU: 0 PID: 25749 Comm: syz.3.7599 Not tainted syzkaller #0 [ 1480.687411][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1480.687434][ C0] RIP: 0010:pvclock_clocksource_read+0x78/0x770 [ 1480.687546][ C0] Code: 03 48 89 8c 24 88 00 00 00 49 8d 49 03 4c 89 c8 48 c1 e8 03 48 89 84 24 80 00 00 00 48 89 4c 24 48 48 c1 e9 03 48 89 4c 24 78 <48> 89 f0 48 c1 e8 03 48 89 44 24 70 4c 89 d0 48 c1 e8 03 48 89 44 [ 1480.687561][ C0] RSP: 0018:ffffc90000007840 EFLAGS: 00000806 [ 1480.687607][ C0] RAX: 1ffffffff1f40e03 RBX: 1ffffffff1f40e00 RCX: 1ffffffff1f40e03 [ 1480.687621][ C0] RDX: 1ffffffff1f40e00 RSI: ffffffff8fa0701c RDI: ffffffff8fa07000 [ 1480.687634][ C0] RBP: ffffc900000079d8 R08: ffffffff8fa07008 R09: ffffffff8fa07018 [ 1480.687648][ C0] R10: ffffffff8fa07010 R11: ffffffff8fa07003 R12: 1ffff92000000f28 [ 1480.687661][ C0] R13: dffffc0000000000 R14: ffff888030c55a00 R15: ffffffff8c651980 [ 1480.687674][ C0] FS: 00007fba3ac926c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1480.687690][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1480.687703][ C0] CR2: 00007f86715ea540 CR3: 000000007493b000 CR4: 00000000003506f0 [ 1480.687718][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000008d24 [ 1480.687728][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1480.687739][ C0] Call Trace: [ 1480.687745][ C0] [ 1480.687753][ C0] ? kvm_sched_clock_read+0x14/0x40 [ 1480.687770][ C0] ? sched_clock_cpu+0x6e/0x260 [ 1480.687817][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1480.687880][ C0] kvm_sched_clock_read+0x14/0x40 [ 1480.687897][ C0] sched_clock_cpu+0x6e/0x260 [ 1480.687917][ C0] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 1480.687971][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 1480.687992][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1480.688020][ C0] ? lock_chain_count+0x20/0x20 [ 1480.688045][ C0] irqtime_account_irq+0x6a/0x1b0 [ 1480.688064][ C0] sysvec_irq_work+0x45/0xc0 [ 1480.688093][ C0] asm_sysvec_irq_work+0x16/0x20 [ 1480.688148][ C0] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 1480.688208][ C0] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 e2 82 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 1480.688222][ C0] RSP: 0018:ffffc90000007ae0 EFLAGS: 00000206 [ 1480.688235][ C0] RAX: f16aa2f0f90a1c00 RBX: 1ffff92000000f64 RCX: f16aa2f0f90a1c00 [ 1480.688249][ C0] RDX: dffffc0000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adee1a0 [ 1480.688262][ C0] RBP: ffffc90000007bd0 R08: ffff8880b8e3580b R09: 1ffff110171c6b01 [ 1480.688275][ C0] R10: dffffc0000000000 R11: ffffed10171c6b02 R12: 0000000000000246 [ 1480.688287][ C0] R13: dffffc0000000000 R14: ffff8880b8e3bb00 R15: 0000000000000001 [ 1480.688309][ C0] ? asm_sysvec_error_interrupt+0x10/0x20 [ 1480.688338][ C0] ? __rcu_read_unlock+0xd0/0xd0 [ 1480.688354][ C0] ? __iterate_interfaces+0x38e/0x4c0 [ 1480.688399][ C0] ? audit_tree_destroy_watch+0x20/0x20 [ 1480.688423][ C0] __rcu_read_unlock+0x78/0xd0 [ 1480.688439][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x26/0x170 [ 1480.688458][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 1480.688513][ C0] ieee80211_iterate_active_interfaces_atomic+0x156/0x170 [ 1480.688534][ C0] mac80211_hwsim_beacon+0xb7/0x1b0 [ 1480.688555][ C0] __hrtimer_run_queues+0x522/0xc90 [ 1480.688600][ C0] ? hw_scan_work+0xf00/0xf00 [ 1480.688623][ C0] ? hrtimer_interrupt+0x980/0x980 [ 1480.688647][ C0] hrtimer_run_softirq+0x173/0x290 [ 1480.688669][ C0] handle_softirqs+0x291/0x910 [ 1480.688712][ C0] ? __irq_exit_rcu+0x13b/0x230 [ 1480.688731][ C0] ? do_softirq+0x210/0x210 [ 1480.688745][ C0] ? hrtimer_interrupt+0x775/0x980 [ 1480.688769][ C0] __irq_exit_rcu+0x13b/0x230 [ 1480.688786][ C0] ? irq_exit_rcu+0x20/0x20 [ 1480.688807][ C0] irq_exit_rcu+0x5/0x20 [ 1480.688822][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 1480.688845][ C0] [ 1480.688850][ C0] [ 1480.688855][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1480.688882][ C0] RIP: 0010:lock_release+0xe2/0x920 [ 1480.688906][ C0] Code: 00 00 00 e8 d0 d4 6e 00 4c 0f a3 35 d0 99 bb 0c 73 0d e8 81 ac 07 00 84 c0 0f 84 41 05 00 00 48 c7 c0 24 44 20 8e 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 49 05 00 00 83 3d 5e ce bb 0c 00 0f 84 [ 1480.688920][ C0] RSP: 0018:ffffc9000ef3f180 EFLAGS: 00000a07 [ 1480.688934][ C0] RAX: 1ffffffff1c40884 RBX: 0000000000000000 RCX: f16aa2f0f90a1c00 [ 1480.688946][ C0] RDX: 0000000000000000 RSI: ffffffff8adee180 RDI: ffffffff8adee140 [ 1480.688958][ C0] RBP: ffffc9000ef3f2a0 R08: ffffffff8e200f6f R09: 1ffffffff1c401ed [ 1480.688971][ C0] R10: dffffc0000000000 R11: fffffbfff1c401ee R12: 00000000000035c8 [ 1480.688984][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92001de7e3c [ 1480.689005][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1480.689034][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 1480.689071][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1480.689095][ C0] ? __lock_acquire+0x7bd0/0x7bd0 [ 1480.689126][ C0] is_bpf_text_address+0x28b/0x2a0 [ 1480.689143][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 1480.689160][ C0] kernel_text_address+0x9c/0xd0 [ 1480.689184][ C0] __kernel_text_address+0x9/0x30 [ 1480.689206][ C0] unwind_get_return_address+0x49/0x80 [ 1480.689226][ C0] ? stack_trace_save+0xf0/0xf0 [ 1480.689248][ C0] arch_stack_walk+0xf2/0x140 [ 1480.689281][ C0] stack_trace_save+0xa6/0xf0 [ 1480.689302][ C0] ? stack_trace_snprint+0xe0/0xe0 [ 1480.689329][ C0] kasan_set_track+0x4b/0x70 [ 1480.689482][ C0] ? kasan_set_track+0x4b/0x70 [ 1480.689505][ C0] ? __kasan_kmalloc+0x8e/0xa0 [ 1480.689529][ C0] ? __kmalloc_node+0xb2/0x240 [ 1480.689614][ C0] ? kvmalloc_node+0x6c/0x180 [ 1480.689661][ C0] ? bpf_int_jit_compile+0x474/0xcb70 [ 1480.689703][ C0] ? bpf_prog_select_runtime+0x48b/0x7d0 [ 1480.689720][ C0] ? bpf_prog_load+0x1039/0x1530 [ 1480.689776][ C0] ? __sys_bpf+0x5b8/0x780 [ 1480.689798][ C0] ? __x64_sys_bpf+0x78/0x90 [ 1480.689819][ C0] ? do_syscall_64+0x4c/0xa0 [ 1480.689837][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.689888][ C0] ? __kmem_cache_alloc_node+0x19d/0x270 [ 1480.689908][ C0] __kasan_kmalloc+0x8e/0xa0 [ 1480.689932][ C0] ? kvmalloc_node+0x6c/0x180 [ 1480.689956][ C0] __kmalloc_node+0xb2/0x240 [ 1480.689984][ C0] kvmalloc_node+0x6c/0x180 [ 1480.690011][ C0] bpf_int_jit_compile+0x474/0xcb70 [ 1480.690047][ C0] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 1480.690077][ C0] ? emit_bpf_dispatcher+0x1060/0x1060 [ 1480.690106][ C0] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1480.690131][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1480.690159][ C0] ? lock_chain_count+0x20/0x20 [ 1480.690185][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1480.690212][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1480.690234][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1480.690269][ C0] bpf_prog_select_runtime+0x48b/0x7d0 [ 1480.690286][ C0] ? bpf_obj_name_cpy+0x190/0x1d0 [ 1480.690310][ C0] bpf_prog_load+0x1039/0x1530 [ 1480.690340][ C0] ? map_freeze+0x390/0x390 [ 1480.690372][ C0] ? __sys_bpf+0x360/0x780 [ 1480.690396][ C0] ? __sanitizer_cov_trace_switch+0x69/0xe0 [ 1480.690419][ C0] __sys_bpf+0x5b8/0x780 [ 1480.690444][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 1480.690476][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1480.690509][ C0] __x64_sys_bpf+0x78/0x90 [ 1480.690532][ C0] do_syscall_64+0x4c/0xa0 [ 1480.690549][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1480.690564][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1480.690580][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1480.690606][ C0] RIP: 0033:0x7fba39d9ce59 [ 1480.690621][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1480.690636][ C0] RSP: 002b:00007fba3ac92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1480.690655][ C0] RAX: ffffffffffffffda RBX: 00007fba3a015fa0 RCX: 00007fba39d9ce59 [ 1480.690668][ C0] RDX: 0000000000000094 RSI: 00002000000003c0 RDI: 0000000000000005 [ 1480.690679][ C0] RBP: 00007fba39e32e6f R08: 0000000000000000 R09: 0000000000000000 [ 1480.690689][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1480.690700][ C0] R13: 00007fba3a016038 R14: 00007fba3a015fa0 R15: 00007ffedc4211f8 [ 1480.690720][ C0] [ 1484.561846][T25774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1484.581813][T25782] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1484.595008][T10682] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1484.604122][T10682] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1484.623286][T25774] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1484.633569][T25782] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1484.641602][T25782] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1484.649902][T10682] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1484.684680][T10682] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1484.703383][T25782] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1484.710887][T25782] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1484.727915][T12486] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1484.743647][T10682] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1484.751820][T25782] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1484.768124][T25774] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1484.778940][T12486] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1484.789507][T12486] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1484.797262][T25782] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1484.808271][T25782] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1484.817760][T25774] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1484.826368][T25782] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1484.833902][T12486] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1484.842536][T25774] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1484.851966][T25782] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1484.859350][T12486] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1484.867045][T10682] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1484.875954][T25782] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1484.884451][T12486] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1484.892161][T25782] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1484.900214][T12486] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1484.933586][T25782] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1485.073781][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.080158][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1486.953505][T25783] Bluetooth: hci5: command 0x0409 tx timeout [ 1486.960211][T25783] Bluetooth: hci9: command 0x0409 tx timeout [ 1487.053688][T25783] Bluetooth: hci8: command 0x0409 tx timeout [ 1487.060362][T25783] Bluetooth: hci7: command 0x0409 tx timeout [ 1487.066985][T25782] Bluetooth: hci6: command 0x0409 tx timeout [ 1489.053499][T25783] Bluetooth: hci9: command 0x041b tx timeout [ 1489.059604][T25783] Bluetooth: hci5: command 0x041b tx timeout [ 1489.153675][T25783] Bluetooth: hci7: command 0x041b tx timeout [ 1489.159813][T25783] Bluetooth: hci6: command 0x041b tx timeout [ 1489.166061][T25782] Bluetooth: hci8: command 0x041b tx timeout