last executing test programs: 5.682080008s ago: executing program 1 (id=3086): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa7, &(0x7f0000000280)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000002c0), &(0x7f0000000500), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b40200000000f21f61118c000000000085000000ce0000009500000000000000"], &(0x7f0000000380)='GPL\x00', 0x4, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', r0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.758752108s ago: executing program 1 (id=3090): r0 = socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="1400000037000b0fd25a806c8c6f94f90524fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x200000c0) close(r0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000003a00)}, 0x48000) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x890c, 0x0) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}], 0x20}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000080)={r2}) r5 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x64, &(0x7f0000000000)=r7, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) 4.211833695s ago: executing program 3 (id=3094): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='blkio.bfq.dequeue\x00', 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/166}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x1000}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000040)=r8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0x1b, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xf9}, [@map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x6, 0x4, 0x5, 0x6, 0x10001}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @alu={0x7, 0x0, 0xa, 0x0, 0x5, 0x8, 0x10}, @generic={0x6, 0x3, 0x6, 0x9, 0x5}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='syzkaller\x00', 0xb6, 0xb, &(0x7f0000000340)=""/11, 0x21600, 0xb, '\x00', 0x0, @fallback=0x29, r2, 0x8, &(0x7f00000003c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, r4, r5, 0x3, &(0x7f0000000400)=[r8], &(0x7f0000000440)=[{0x3, 0x3, 0x5, 0xc}, {0x0, 0x1, 0x6}, {0x0, 0x2, 0x6, 0xf}], 0x10, 0x910a}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffe24, &(0x7f0000000000)='/proc/3\x00\xff\xff\xffat\x00AE\xf44.\xab%j'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0), 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x61, 0x61, 0x61]}}, &(0x7f0000000480)=""/2, 0x1d, 0x2, 0x1, 0x6}, 0x28) 3.963152063s ago: executing program 3 (id=3098): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x80000000}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f00000003c0)='syzkaller\x00', 0x4}, 0x94) 3.74243541s ago: executing program 3 (id=3100): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r0 = socket$kcm(0x2, 0x5, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x13, &(0x7f0000000040)=r1, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x9, 0x7, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) (async) r4 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r4, 0x0, 0xa, 0x0, 0x12) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1d, 0x4, 0x8fdda04, 0x6, 0x10, r2, 0x6, '\x00', 0x0, r1, 0x3, 0x0, 0x3}, 0x50) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001f40)={r1, 0xe0, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001c40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001c80)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001cc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe2, &(0x7f0000001d00)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000001d80), &(0x7f0000001dc0), 0x8, 0x78, 0x8, 0x8, &(0x7f0000001e00)}}, 0x10) (async, rerun: 64) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002200)={r1, 0x20, &(0x7f00000021c0)={&(0x7f0000002000)=""/233, 0xe9, 0x0, &(0x7f0000002100)=""/152, 0x98}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000002280)={0x7, 0x9, &(0x7f0000000540)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, r5}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f00000005c0)='GPL\x00', 0x759, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x40, '\x00', r6, @fallback=0x14, 0xffffffffffffffff, 0x8, &(0x7f0000001f80)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001fc0)={0x5, 0x10, 0xffffffff, 0x6}, 0x10, r7, r1, 0x1, 0x0, &(0x7f0000002240)=[{0x2, 0x5, 0x8, 0x4}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r11}, &(0x7f0000000280), &(0x7f0000000240)=r8}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f00000000c0)=r12, 0x4) (async) sendmsg$inet(r10, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.674859843s ago: executing program 1 (id=3101): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x4c6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = socket$kcm(0x11, 0xa, 0x300) sendmsg$kcm(r1, &(0x7f0000005840)={&(0x7f0000000300)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @multicast2}, 0x1, 0x1, 0x0, 0x1}}, 0x80, 0x0}, 0x4040850) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) socketpair(0x26, 0x80000, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = perf_event_open$cgroup(&(0x7f0000000240)={0x2, 0x80, 0x8, 0x69, 0x8, 0xbf, 0x0, 0x9, 0x28000, 0xb, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x4, 0x2, @perf_config_ext={0x3e10a212, 0x7}, 0x8, 0x7, 0xff, 0x3, 0x0, 0x3, 0x8, 0x0, 0x800, 0x0, 0x6}, r0, 0xe, r0, 0x1a) (async) socketpair(0xa, 0x2, 0xffff2f90, &(0x7f00000002c0)={0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='freezer.state\x00', 0x0, 0x0) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x19, 0x4, 0x8, 0x2}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r9}, 0xc) (async) r10 = perf_event_open(&(0x7f0000000500)={0x0, 0x80, 0x1, 0x0, 0x5, 0x7, 0x0, 0x2, 0x8100, 0x4, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xe3, 0x2, @perf_config_ext={0x1, 0x2e866fb3}, 0x104000, 0x4, 0xffff, 0x6, 0x8, 0x81, 0xe, 0x0, 0xb5f, 0x0, 0x3}, 0x0, 0x9, 0xffffffffffffffff, 0xb) (async) r11 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000580)='cgroup.max.depth\x00', 0x2, 0x0) sendmsg$unix(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="e3930ea20d182966f12d3294ec4aff2045d0c5f6226de9bc68efb4409ff63641a51d267bd837846dc66bd309201205021e6b811ccd9b42c7dfa3f9", 0x3b}, {&(0x7f0000000100)="5765437045cc8090a4934afb38c2a3c091e15de164c04dc91c1eaf28554d5687eebb49ec3e1b0f68ab653a438e6eb2eb2b8c217d1dad382ac3143c5fa4cc0fdfd9b0c3c1e178a3d2a80c2184ab0c7355a10a6a6892f9e69844cb102e237d01718e1068cc7ebdde720ac4fd05bbf1b19fb6d93fd97252a99c35f0467031feaad549d7989ce539971a436fe12d547e427dee619862760907be17e681ce9b7e0911ed03ce01780d", 0xa6}, {&(0x7f00000001c0)="1d0355fd3f36487b4570e64cb0f7d6c798e1a2d9a8", 0x15}], 0x3, &(0x7f0000000640)=[@rights={{0x28, 0x1, 0x1, [r1, r4, r2, r2, r5, r0]}}, @rights={{0x38, 0x1, 0x1, [r0, r2, r2, r2, r1, r6, r0, r2, r7, r9]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x28, 0x1, 0x1, [r10, r11, r0, r1, r0, r0]}}], 0xa0, 0x8000}, 0x850) 3.643793083s ago: executing program 2 (id=3102): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0xd54b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0, 0xc}, 0x16efa, 0x100000000, 0x298, 0x0, 0x2, 0x2c, 0xfffd, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1d, 0x4, 0x0, &(0x7f0000000380)) 3.522796807s ago: executing program 3 (id=3103): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) (async) r0 = socket$kcm(0xa, 0x2, 0x88) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x242b9, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x1, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = socket$kcm(0xa, 0x2, 0x73) (rerun: 64) setsockopt$sock_attach_bpf(r1, 0x29, 0x1e, &(0x7f0000000040), 0x4) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfb6}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x4000, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0), 0x0, 0x0, 0xad, &(0x7f0000001980)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0x60, 0x8, 0x0, 0x0}}, 0x10) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=r3, 0x4) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0x0, 0x0, 0x0}, 0x40) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8", 0x58}], 0x1}, 0x4) (rerun: 64) sendmsg$kcm(r0, 0x0, 0x200ce0c0) (async, rerun: 64) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="7f0000017f000001000000001c000000000000000000000008", @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000001c00000000000000000000004700000044aa00210a2101"], 0x230}, 0x0) (async, rerun: 64) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.368559772s ago: executing program 2 (id=3105): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x98}, @ldst={0x2, 0x3, 0x2, 0x9, 0x2, 0x1, 0xffffffffffffffff}, @tail_call, @ldst={0x0, 0x1, 0x3, 0xa, 0x9, 0x80, 0x4}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xb5}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x34, &(0x7f0000000140)=""/52, 0x40f00, 0x12, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000200)=[{0x0, 0x1, 0x3, 0x8}, {0x5, 0x1, 0x7, 0x1}, {0x2, 0x2, 0x8, 0xa}, {0x2, 0x3, 0x7, 0x5}, {0x4, 0x2, 0x0, 0x9}], 0x10, 0x1}, 0x94) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x2, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000b7080000000000007b8af8ff00000000b7080000000100007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES8=0x0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x58, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r8, 0x400454cd, 0x339) close(r8) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@map=0x1, 0x24, 0x1, 0xc, &(0x7f0000000480)=[0x0], 0x1, 0x0, &(0x7f00000004c0)=[0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], &(0x7f0000000540)=[0x0, 0x0], 0x0}, 0x40) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESHEX, @ANYRES32=r10, @ANYRES8=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000600), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r10, @ANYRES32=r4, @ANYBLOB="120000001a000000", @ANYRES32=r7, @ANYBLOB, @ANYRES32=r11, @ANYBLOB="70d1da", @ANYRES64=r9], 0x20) getpid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x408) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000700)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x43, '\x00', 0x0, r12}, 0x50) write$cgroup_type(r12, &(0x7f0000000180), 0x40001) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x3, &(0x7f0000001500)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x12, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x81e1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x62}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xf7}, 0x39) sendmsg$unix(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) 3.331401863s ago: executing program 3 (id=3106): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x480283, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xf, 0x0, 0xfffffff6, 0x9, 0x12, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) write$cgroup_subtree(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="33fe0000660091ef"], 0xfe33) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001860000000000000e9ff00000400000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000200000000004000000850000002a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, &(0x7f0000000380)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 3.1388628s ago: executing program 1 (id=3107): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000300)={0x2, 0x88, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) (async) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) 2.980227505s ago: executing program 2 (id=3109): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000007c0)}, 0x20) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000029c0)={0xffffffffffffffff, 0x1}, 0xc) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.663199585s ago: executing program 0 (id=3111): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x6, 0x640b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0, 0xd}, 0x10320, 0xc79}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x18}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4d}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.160017821s ago: executing program 1 (id=3112): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20008000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4840) r2 = socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x25, 0x5, 0x0) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000004e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) sendmsg$sock(r4, &(0x7f0000001880)={&(0x7f00000004c0)=@un=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000540)="c88f15c4bcb03961fd7fa6c52c3f486e8eb6875adc1c31159aa8dfaa86845cfda2e84f352082", 0x26}], 0x1, &(0x7f0000001840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}], 0x18}, 0x8000) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 2.054810134s ago: executing program 0 (id=3113): socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000042) (async) recvmsg$kcm(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x40000042) socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000b80)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) (async) sendmsg$kcm(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x24004001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0)=r3, 0x8) socket$kcm(0xa, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r4, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x5}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) close(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r7}, &(0x7f00000014c0), &(0x7f0000001500)=r6}, 0x20) socket$kcm(0x11, 0x3, 0x0) r8 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) socket$kcm(0x2a, 0x2, 0x0) (async) r10 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x8917, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r10, 0x8917, 0x0) 1.901069219s ago: executing program 2 (id=3114): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x18, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}, @alu={0x4, 0x1, 0x9, 0x3, 0x1, 0xfffffffffffffff4, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0x63, &(0x7f00000005c0)=""/99, 0x41000, 0x48, '\x00', 0x0, 0x25, r1, 0x8, &(0x7f0000000640)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000680)={0x1, 0x9, 0xfad, 0x7}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r2, 0x1, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000800)=[{0x5, 0x2, 0x3, 0x3}, {0x2, 0x3, 0xf, 0xc}, {0x1, 0x3, 0x0, 0x1}, {0x1, 0x3, 0x2, 0xb}, {0x4, 0x5, 0xc, 0xb}, {0x0, 0x2, 0xb, 0x2}], 0x10, 0x800}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000940)=r3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000fcff8ff3e88928ddeff9ff2000000080000bcb6c5e0000d800000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1c0000001e007f109e", 0x9}, {&(0x7f0000000700)="78cafb73fc02010700200000ef000000000000", 0x13}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={&(0x7f0000000280)='./file0\x00', r2, 0x4000, r7}, 0x18) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e6}, 0x94) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000200142603600e1208000f0000000401a8001600a400014005000200036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xa000000}, 0x0) recvmsg(r8, &(0x7f0000002100)={0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001040)=""/4096, 0x1000}], 0x1, &(0x7f0000002080)=""/102, 0x66}, 0x40000040) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x12, 0x2}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071127f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.865044581s ago: executing program 0 (id=3115): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4135, 0x1027}], 0x1}, 0x42) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xf0, 0x5f, 0x9f, 0x4, 0x0, 0x6, 0x30531, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800009, 0x2, @perf_config_ext={0x1, 0x8}, 0x10002, 0x9dd, 0x80000020, 0x6, 0x400, 0x0, 0x8, 0x0, 0x100, 0x0, 0x201}, 0x0, 0x8, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f90524fc6004", 0x15}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="3640000049009125745c7388641f9c0e0a"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000030"], 0xfe33) 290.674581ms ago: executing program 0 (id=3116): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x2b, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x53, 0x0, 0x0, 0x0, 0x3}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x56}, 0x28) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, &(0x7f0000000040)) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x74, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x6, 0x4000000000}, 0x624d, 0x0, 0x80000000, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x16}}, &(0x7f0000000480)='GPL\x00'}, 0x80) r1 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r1, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @local}, 0x10, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000880)="90e6", 0x2}], 0x2}, 0x900000000000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x5, 0x7ff}, 0x104101, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x200}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x8, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x69, 0x2, @perf_bp={0x0, 0x3}, 0xc1, 0x4, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r3 = socket$kcm(0x2, 0x200000000000001, 0x0) (rerun: 32) setsockopt$sock_attach_bpf(r3, 0x1, 0x9, &(0x7f0000000040), 0x4) (async) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, 0x0, 0xe8001, 0x0) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8b26, &(0x7f0000000280)={'wlan1\x00'}) (rerun: 64) 290.017881ms ago: executing program 2 (id=3117): perf_event_open(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0x4, 0xa, 0x40}, 0x50) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000005600)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000002c80)='d', 0x1}], 0x1}, 0x11) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0xf, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8914, &(0x7f0000000080)) socket$kcm(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) r4 = socket$kcm(0x23, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000000c0)=r5, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000940)={r5, r5}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) 289.422981ms ago: executing program 1 (id=3118): bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1e00000008000000070000000000010038200000", @ANYRES32=0x1, @ANYBLOB="090000000000000000000000000000000000000061bb8141bb146869c7a01d5a61d5f9e099883b4394bdbe91cd04992eb0c09a6b8d060d24fc632f3f4cf668ba01fc108bbd8a7e79c401dac8b0c8448894407b8efef22f81", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000001000000030000000c00"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7ff, 0x72}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000000)={0x0, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1044200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) close(0x3) socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000b80)={&(0x7f0000000580)=@abs, 0x6e, &(0x7f0000000a00)=[{&(0x7f0000000600)=""/103, 0x67}, {&(0x7f0000000680)=""/33, 0x21}, {&(0x7f00000006c0)=""/37, 0x25}, {&(0x7f0000000700)=""/54, 0x36}, {&(0x7f0000000740)=""/41, 0x29}, {&(0x7f0000000780)=""/31, 0x1f}, {&(0x7f00000007c0)=""/82, 0x52}, {&(0x7f0000000840)=""/218, 0xda}, {&(0x7f0000000940)=""/173, 0xad}], 0x9, &(0x7f0000000ac0)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa0}, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@decl_tag={0x3, 0x0, 0x0, 0x11, 0x1, 0x2}]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)) socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/27], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x6, 0x25, &(0x7f0000000200)=r9, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000040)={'hsr0\x00', @random="e8f77eab7873"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018000000000000000000000000000002650000000000000018000000000000200000000000000000950000000000000001980400070000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, r5}, 0x94) 222.929963ms ago: executing program 3 (id=3119): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x9080, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r0, 0xa) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3a, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x40047459, &(0x7f0000000180)) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) r4 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x2f9}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x842}, 0x114905, 0x4, 0x0, 0x1, 0x3, 0xffffffff, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') ioctl$TUNSETFILTEREBPF(r6, 0xb702, 0x0) r7 = bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r0}, 0x8) write$cgroup_subtree(r7, &(0x7f0000000240)={[{0x2d, 'net_cls'}, {0x2d, 'hugetlb'}, {0x2b, 'blkio'}]}, 0x19) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x9}, [@generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) 171.861064ms ago: executing program 0 (id=3120): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x7, 0x34328, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x2}, 0x11278e, 0x10003, 0xfffffff8, 0x3, 0x100008, 0x20006, 0x9, 0x0, 0x8, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000000)) 46.415669ms ago: executing program 0 (id=3121): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x21) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}) perf_event_open(&(0x7f0000000040)={0x2, 0xc0, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x2115, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x88a8, 0x0, 0x200, 0x9, 0x9, 0x800000, 0x0, 0x0, 0xa7, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x9, 0x1, 0x7fe2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x9, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r5) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000033c0)={r2, 0x20, &(0x7f0000003380)={&(0x7f0000000780)=""/168, 0xa8, 0x0, &(0x7f0000002380)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000003400)=r6, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x3}, 0x10, r6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000008c0)={0x0, 0x7, 0x0, 0x3}, 0x10}, 0x94) r7 = socket$kcm(0x1e, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) recvmsg(r7, &(0x7f0000000300)={0x0, 0x4c, &(0x7f00000004c0)=[{&(0x7f0000000340)=""/108, 0x6c}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0xd, 0x10, &(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYBLOB="0000000002000000b705000008000000850000005d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 0s ago: executing program 2 (id=3122): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x46, 0x0, 0xf0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x480, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4ac269b8, 0xaea}, 0x4010, 0x30, 0x10000, 0x8, 0x3, 0x90000000, 0x6, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x2, 0x200000000000003, 0x106) syz_open_procfs$namespace(0x0, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r4, &(0x7f0000006480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000034c0)=""/4092, 0xffc}, {&(0x7f0000000640)=""/129, 0x81}, {&(0x7f00000008c0)=""/200, 0xc8}, {&(0x7f0000000c00)=""/4088, 0xff8}, {&(0x7f0000000480)=""/66, 0x42}, {&(0x7f00000002c0)=""/35, 0x23}], 0x6}, 0x0) recvmsg$kcm(r4, &(0x7f00000030c0)={0x0, 0x0, 0x0}, 0x2000) socket$kcm(0x2, 0x200000000000001, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/32], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r7, 0x110, 0x4, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r8, 0x161) kernel console output (not intermixed with test programs): 50 > 9 [ 253.744809][ T5774] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 253.752173][ T5774] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 253.759592][ T5774] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 253.767357][ T5774] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 253.775009][ T5774] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 253.949112][ T9917] netlink: 'syz.1.1120': attribute type 10 has an invalid length. [ 255.743290][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.749831][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.796970][ T9963] netlink: 'syz.3.1133': attribute type 21 has an invalid length. [ 258.036736][ T9970] netlink: 'syz.2.1135': attribute type 2 has an invalid length. [ 258.049028][ T9970] netlink: 'syz.2.1135': attribute type 8 has an invalid length. [ 258.057631][ T9970] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1135'. [ 258.169165][ T9976] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1135'. [ 258.199023][ T9976] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1135'. [ 258.257739][ T9980] syzkaller0: entered promiscuous mode [ 258.265581][ T9980] syzkaller0: entered allmulticast mode [ 260.004233][T10013] bridge_slave_1: left allmulticast mode [ 260.010203][T10013] bridge_slave_1: left promiscuous mode [ 260.118272][T10013] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.182033][T10013] bridge_slave_0: left allmulticast mode [ 260.202825][T10013] bridge_slave_0: left promiscuous mode [ 260.216245][T10013] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.547873][T10026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1150'. [ 260.574396][T10013] .`: (slave bridge0): Releasing backup interface [ 260.644960][T10026] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1150'. [ 260.661183][T10027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1150'. [ 260.750789][T10027] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1150'. [ 262.222611][T10056] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1160'. [ 262.238548][T10056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.361172][T10057] syzkaller0: entered promiscuous mode [ 262.367654][T10057] syzkaller0: entered allmulticast mode [ 262.643329][ T5774] Bluetooth: hci2: ISO packet for unknown connection handle 2622 [ 264.345372][T10096] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1168'. [ 264.569143][T10104] syzkaller0: entered promiscuous mode [ 264.576724][T10104] syzkaller0: entered allmulticast mode [ 266.335712][T10130] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 266.618616][T10153] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1179'. [ 266.869685][T10170] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1185'. [ 268.178489][T10205] netlink: 'syz.1.1197': attribute type 21 has an invalid length. [ 268.202347][T10205] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1197'. [ 268.207628][T10207] netlink: 'syz.2.1198': attribute type 29 has an invalid length. [ 268.230380][T10207] netlink: 'syz.2.1198': attribute type 29 has an invalid length. [ 268.248593][T10207] netlink: 'syz.2.1198': attribute type 29 has an invalid length. [ 268.258328][T10207] netlink: 'syz.2.1198': attribute type 29 has an invalid length. [ 268.267617][T10207] netlink: 'syz.2.1198': attribute type 29 has an invalid length. [ 268.287629][T10207] netlink: 'syz.2.1198': attribute type 29 has an invalid length. [ 269.112352][T10232] netlink: 'syz.1.1205': attribute type 17 has an invalid length. [ 269.388925][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1206'. [ 270.072161][T10260] syzkaller0: entered promiscuous mode [ 270.108446][T10260] syzkaller0: entered allmulticast mode [ 270.733442][T10273] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 270.773499][T10273] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.1213'. [ 270.975770][T10282] netlink: 'syz.0.1217': attribute type 21 has an invalid length. [ 271.572889][T10300] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.1221'. [ 272.170310][T10319] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1227'. [ 272.197425][T10319] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 274.172985][T10389] syzkaller0: left promiscuous mode [ 274.192644][T10389] syzkaller0: left allmulticast mode [ 274.744117][T10399] validate_nla: 5 callbacks suppressed [ 274.744133][T10399] netlink: 'syz.2.1248': attribute type 21 has an invalid length. [ 274.998609][T10408] netlink: 157140 bytes leftover after parsing attributes in process `syz.1.1252'. [ 275.220113][T10412] netlink: set zone limit has 8 unknown bytes [ 275.383283][T10415] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1256'. [ 275.498930][T10419] netlink: 'syz.0.1257': attribute type 29 has an invalid length. [ 275.538550][T10419] netlink: 'syz.0.1257': attribute type 29 has an invalid length. [ 275.566116][T10419] netlink: 'syz.0.1257': attribute type 29 has an invalid length. [ 275.594457][T10419] netlink: 'syz.0.1257': attribute type 29 has an invalid length. [ 275.629574][T10419] netlink: 'syz.0.1257': attribute type 29 has an invalid length. [ 279.072525][T10459] netlink: 'syz.0.1271': attribute type 10 has an invalid length. [ 279.093296][T10459] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1271'. [ 279.147520][T10459] hsr0: entered promiscuous mode [ 279.189465][T10459] bridge0: port 3(hsr0) entered blocking state [ 279.235056][T10459] bridge0: port 3(hsr0) entered disabled state [ 279.242435][T10459] hsr0: entered allmulticast mode [ 279.249099][T10459] hsr_slave_0: entered allmulticast mode [ 279.259189][T10459] hsr_slave_1: entered allmulticast mode [ 279.295924][T10459] bridge0: port 3(hsr0) entered blocking state [ 279.302934][T10459] bridge0: port 3(hsr0) entered forwarding state [ 279.718493][T10490] netlink: 'syz.0.1278': attribute type 3 has an invalid length. [ 279.733525][T10490] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 279.741291][T10490] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.1278'. [ 279.793173][T10493] netlink: 'syz.1.1279': attribute type 3 has an invalid length. [ 279.806432][T10493] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1279'. [ 281.451617][T10534] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1288'. [ 282.199960][T10555] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 282.212364][T10555] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 283.083031][T10568] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 283.109992][T10568] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1299'. [ 283.131017][T10568] hsr0: entered promiscuous mode [ 283.173713][T10577] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1300'. [ 283.197882][T10568] bridge0: port 3(hsr0) entered blocking state [ 283.216907][T10568] bridge0: port 3(hsr0) entered disabled state [ 283.247057][T10568] hsr0: entered allmulticast mode [ 283.264164][T10568] hsr_slave_0: entered allmulticast mode [ 283.282761][T10568] hsr_slave_1: entered allmulticast mode [ 283.352384][T10568] bridge0: port 3(hsr0) entered blocking state [ 283.359393][T10568] bridge0: port 3(hsr0) entered forwarding state [ 283.745791][T10584] bridge0: port 4(syz_tun) entered blocking state [ 283.769343][T10584] bridge0: port 4(syz_tun) entered disabled state [ 283.780817][T10584] syz_tun: entered allmulticast mode [ 283.792936][T10584] syz_tun: entered promiscuous mode [ 283.801406][T10584] bridge0: port 4(syz_tun) entered blocking state [ 283.808267][T10584] bridge0: port 4(syz_tun) entered forwarding state [ 283.827266][T10590] netlink: 'syz.1.1305': attribute type 10 has an invalid length. [ 283.839697][T10590] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 283.961479][T10587] netlink: 'syz.3.1304': attribute type 10 has an invalid length. [ 284.318422][T10604] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 284.335225][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.360835][T10587] bridge_slave_1: left allmulticast mode [ 284.372280][T10587] bridge_slave_1: left promiscuous mode [ 284.401341][T10587] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.593210][T10587] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 284.630694][T10604] netlink: 'syz.1.1310': attribute type 29 has an invalid length. [ 284.654427][T10594] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1307'. [ 284.678728][T10609] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1309'. [ 285.337519][T10628] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 285.433475][T10628] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1314'. [ 286.136411][T10659] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1321'. [ 286.501987][T10671] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1324'. [ 286.556603][T10667] netlink: 'syz.1.1325': attribute type 10 has an invalid length. [ 286.602330][T10675] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1328'. [ 286.688485][T10671] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1324'. [ 286.899899][T10679] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1329'. [ 287.194905][T10687] netlink: 'syz.3.1333': attribute type 29 has an invalid length. [ 287.234969][T10687] netlink: 'syz.3.1333': attribute type 29 has an invalid length. [ 287.395322][T10687] netlink: 'syz.3.1333': attribute type 29 has an invalid length. [ 287.441210][T10695] netlink: 'syz.3.1333': attribute type 29 has an invalid length. [ 287.707706][T10702] netlink: 'syz.1.1336': attribute type 10 has an invalid length. [ 287.730090][T10702] macvlan0: entered promiscuous mode [ 287.742476][T10702] macvlan0: entered allmulticast mode [ 288.162198][T10723] netlink: 'syz.3.1343': attribute type 27 has an invalid length. [ 288.231393][T10723] netlink: 'syz.3.1343': attribute type 4 has an invalid length. [ 288.248265][T10723] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1343'. [ 288.450311][T10725] syzkaller0: left promiscuous mode [ 288.495236][T10725] syzkaller0: left allmulticast mode [ 288.638670][T10736] netlink: 'syz.2.1345': attribute type 153 has an invalid length. [ 288.771480][T10742] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1347'. [ 288.791453][T10736] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1345'. [ 288.824016][T10742] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 288.872883][T10744] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1347'. [ 289.010214][T10736] tap0: tun_chr_ioctl cmd 1074025681 [ 289.468260][T10757] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1350'. [ 289.496720][T10757] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 289.735709][T10766] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1353'. [ 290.235942][T10782] team0: Device vxcan0 is of different type [ 290.301197][T10783] delete_channel: no stack [ 290.590588][ T5774] Bluetooth: hci2: unexpected event 0x05 length: 151 > 4 [ 290.962687][T10804] syzkaller0: entered promiscuous mode [ 291.953140][T10825] validate_nla: 15 callbacks suppressed [ 291.953157][T10825] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 292.032015][T10825] team0: Port device dummy0 added [ 292.074313][T10831] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 292.139216][T10831] team0: Port device dummy0 removed [ 292.165146][T10831] .`: (slave dummy0): Enslaving as an active interface with an up link [ 292.605579][T10850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.588398][T10918] __nla_validate_parse: 7 callbacks suppressed [ 293.588414][T10918] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1385'. [ 294.378541][T10933] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1389'. [ 294.673008][T10947] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.471452][T10980] syzkaller0: left promiscuous mode [ 295.621294][T10982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.026654][T11000] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 297.047592][T11000] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 297.092524][T11000] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 297.137733][T11006] netlink: 'syz.3.1410': attribute type 2 has an invalid length. [ 297.155919][T11006] netlink: 'syz.3.1410': attribute type 1 has an invalid length. [ 297.170112][T11006] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1410'. [ 297.575493][T11025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1416'. [ 297.611736][T11025] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1416'. [ 298.210568][T11032] syzkaller0: entered promiscuous mode [ 298.229981][T11032] syzkaller0: entered allmulticast mode [ 300.760332][T11054] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 300.768358][T11054] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.778777][T11054] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 300.795257][T11053] netlink: 'syz.0.1422': attribute type 10 has an invalid length. [ 300.803120][T11053] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1422'. [ 300.815289][T11053] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 301.102603][T11080] delete_channel: no stack [ 301.718845][T11102] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.1438'. [ 301.843856][T11109] netlink: 'syz.1.1441': attribute type 21 has an invalid length. [ 301.855198][T11109] netlink: 'syz.1.1441': attribute type 11 has an invalid length. [ 301.935531][T11111] netlink: 'syz.1.1441': attribute type 10 has an invalid length. [ 302.131180][T11124] netlink: 'syz.0.1446': attribute type 12 has an invalid length. [ 302.179315][T11124] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1446'. [ 302.260411][T11126] netlink: 'syz.3.1444': attribute type 2 has an invalid length. [ 302.270917][T11126] netlink: 'syz.3.1444': attribute type 8 has an invalid length. [ 302.278743][T11126] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1444'. [ 302.458307][T11132] netlink: 'syz.1.1449': attribute type 26 has an invalid length. [ 302.476289][T11132] netlink: 62827 bytes leftover after parsing attributes in process `syz.1.1449'. [ 302.492434][T11134] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1450'. [ 302.913171][T11159] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1456'. [ 304.043131][T11194] netlink: 'syz.0.1468': attribute type 10 has an invalid length. [ 304.167343][T11200] netlink: 'syz.0.1468': attribute type 9 has an invalid length. [ 304.213592][T11200] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.1468'. [ 305.609682][T11252] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1485'. [ 306.040018][T11260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 308.171339][T11335] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1508'. [ 308.491345][T11340] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 308.578834][T11340] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 308.654455][T11343] netlink: 'syz.2.1511': attribute type 10 has an invalid length. [ 308.737896][T11343] team0: Port device macvlan0 added [ 308.804007][T11340] netlink: 'syz.3.1510': attribute type 39 has an invalid length. [ 309.774963][T11371] netlink: 'syz.3.1518': attribute type 27 has an invalid length. [ 309.825483][T11371] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1518'. [ 309.903514][T11371] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.006407][T11377] netlink: 'syz.2.1520': attribute type 2 has an invalid length. [ 310.021859][T11372] netlink: 'syz.3.1518': attribute type 27 has an invalid length. [ 310.050253][T11372] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1518'. [ 310.053446][T11377] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1520'. [ 310.085858][T11372] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 310.651428][T11383] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1523'. [ 310.772387][T11389] lo: left promiscuous mode [ 310.801970][T11389] lo: entered allmulticast mode [ 310.829804][T11394] lo: entered promiscuous mode [ 310.843530][T11394] lo: left allmulticast mode [ 311.758555][T11415] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1531'. [ 311.842260][T11415] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1531'. [ 313.763676][T11441] syzkaller0: entered promiscuous mode [ 313.792311][T11441] syzkaller0: entered allmulticast mode [ 314.556729][T11470] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1544'. [ 315.025033][T11475] netlink: 'syz.3.1545': attribute type 21 has an invalid length. [ 315.100731][T11475] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1545'. [ 315.625759][T11507] netlink: 'syz.3.1554': attribute type 21 has an invalid length. [ 315.634794][T11507] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1554'. [ 316.700189][T11551] netlink: 'syz.1.1565': attribute type 3 has an invalid length. [ 316.759728][T11551] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1565'. [ 316.810759][T11554] netlink: 191416 bytes leftover after parsing attributes in process `syz.1.1565'. [ 317.061864][T11546] netlink: 'syz.0.1567': attribute type 2 has an invalid length. [ 317.072527][T11546] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1567'. [ 317.211857][T11555] netlink: 'syz.2.1569': attribute type 9 has an invalid length. [ 317.224311][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.233587][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.255008][T11555] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1569'. [ 317.697605][T11572] pim6reg1: tun_chr_ioctl cmd 1074025677 [ 317.703946][T11572] pim6reg1: linktype set to 776 [ 317.712118][T11574] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1573'. [ 317.725185][T11571] mac80211_hwsim hwsim9 .3ãc¤±: renamed from wlan1 [ 318.111874][T11591] netlink: 'syz.2.1576': attribute type 2 has an invalid length. [ 318.151175][T11591] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1576'. [ 318.243078][T11591] .`: (slave dummy0): Releasing backup interface [ 318.598821][T11602] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 318.748680][T11611] Ÿë: port 1(gretap0) entered blocking state [ 318.765191][T11611] Ÿë: port 1(gretap0) entered disabled state [ 318.781694][T11611] gretap0: entered allmulticast mode [ 318.808828][T11611] gretap0: entered promiscuous mode [ 319.681712][T11640] netlink: 'syz.2.1586': attribute type 3 has an invalid length. [ 319.703764][T11640] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1586'. [ 320.106600][T11654] syzkaller0: left promiscuous mode [ 320.111867][T11654] syzkaller0: left allmulticast mode [ 320.378143][T11664] netlink: 'syz.3.1595': attribute type 20 has an invalid length. [ 320.395332][T11664] netlink: 'syz.3.1595': attribute type 21 has an invalid length. [ 320.410402][T11664] netlink: 'syz.3.1595': attribute type 23 has an invalid length. [ 320.428031][T11664] netlink: 'syz.3.1595': attribute type 25 has an invalid length. [ 320.458917][T11664] netlink: 'syz.3.1595': attribute type 27 has an invalid length. [ 320.487366][T11664] netlink: 'syz.3.1595': attribute type 28 has an invalid length. [ 320.499171][T11668] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1596'. [ 320.514075][T11664] netlink: 'syz.3.1595': attribute type 29 has an invalid length. [ 320.521905][T11664] netlink: 'syz.3.1595': attribute type 30 has an invalid length. [ 320.585812][T11670] netlink: 'syz.2.1597': attribute type 29 has an invalid length. [ 320.606027][T11670] netlink: 'syz.2.1597': attribute type 29 has an invalid length. [ 321.634204][T11695] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 321.785553][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1604'. [ 321.931839][T11693] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1605'. [ 321.983094][T11696] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1604'. [ 322.211123][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 322.240945][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 322.274523][T11710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 322.307906][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1609'. [ 322.448007][T11714] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1610'. [ 322.906593][T11705] bridge_slave_1: default FDB implementation only supports local addresses [ 326.602585][T11819] validate_nla: 4 callbacks suppressed [ 326.602599][T11819] netlink: 'syz.0.1638': attribute type 25 has an invalid length. [ 326.634653][T11819] netlink: 'syz.0.1638': attribute type 3 has an invalid length. [ 326.662903][T11819] __nla_validate_parse: 8 callbacks suppressed [ 326.662918][T11819] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1638'. [ 326.993626][T11830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1642'. [ 327.587327][T11856] netlink: 'syz.1.1649': attribute type 10 has an invalid length. [ 327.626192][T11866] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 327.900542][T11874] netlink: 'syz.0.1654': attribute type 9 has an invalid length. [ 327.925365][T11876] wlan0: mtu greater than device maximum [ 327.951499][T11874] netlink: 'syz.0.1654': attribute type 27 has an invalid length. [ 327.965259][T11874] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1654'. [ 328.333800][T11878] wlan0: mtu greater than device maximum [ 328.615363][T11883] netlink: 'syz.2.1656': attribute type 21 has an invalid length. [ 328.623309][T11883] netlink: 'syz.2.1656': attribute type 6 has an invalid length. [ 328.677770][T11883] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1656'. [ 328.818558][T11885] IPv6: Can't replace route, no match found [ 329.255518][T11894] netlink: 'syz.2.1658': attribute type 21 has an invalid length. [ 329.263356][T11894] netlink: 'syz.2.1658': attribute type 1 has an invalid length. [ 329.291402][T11894] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1658'. [ 329.313443][T11896] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1660'. [ 329.346229][T11892] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1658'. [ 329.411020][T11895] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.1660'. [ 329.434653][T11894] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.1658'. [ 329.774472][T11909] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1664'. [ 331.952883][T11967] validate_nla: 1 callbacks suppressed [ 331.952899][T11967] netlink: 'syz.1.1681': attribute type 21 has an invalid length. [ 331.972957][T11967] __nla_validate_parse: 3 callbacks suppressed [ 331.972970][T11967] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1681'. [ 331.988765][T11967] netlink: 'syz.1.1681': attribute type 5 has an invalid length. [ 331.996766][T11967] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1681'. [ 333.141942][T11976] netlink: 'syz.3.1683': attribute type 10 has an invalid length. [ 333.197838][T11976] veth0_macvtap: left promiscuous mode [ 333.338092][T11978] netlink: 'syz.3.1683': attribute type 7 has an invalid length. [ 333.398324][T11981] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1684'. [ 333.456970][T11984] ref_ctr_offset mismatch. inode: 0x55 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0xfe [ 333.506265][T11978] netlink: 'syz.3.1683': attribute type 9 has an invalid length. [ 333.525762][T11978] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1683'. [ 333.981673][T11988] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 333.993053][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1686'. [ 334.143171][T11991] netlink: 'syz.0.1687': attribute type 10 has an invalid length. [ 334.155325][T11991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1687'. [ 334.300606][T12001] netlink: 'syz.0.1690': attribute type 10 has an invalid length. [ 334.308760][T12001] netlink: 'syz.0.1690': attribute type 19 has an invalid length. [ 334.323486][T12001] netlink: 6344 bytes leftover after parsing attributes in process `syz.0.1690'. [ 334.488773][T12008] netlink: 209588 bytes leftover after parsing attributes in process `syz.3.1693'. [ 334.495072][T12007] netlink: 'syz.0.1691': attribute type 10 has an invalid length. [ 334.724783][T12015] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1694'. [ 334.750488][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.763505][T12015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.865323][T12015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.894635][T12015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.945353][T12015] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 334.954912][T12015] batman_adv: batadv0: Removing interface: veth0_vlan [ 335.044193][T12015] batman_adv: batadv0: Removing interface: ÿÿÿÿÿÿ [ 336.194485][T12043] mac80211_hwsim hwsim33 wlan1: entered allmulticast mode [ 336.515973][T12062] netlink: 'syz.1.1707': attribute type 9 has an invalid length. [ 340.741722][T12121] syzkaller0: entered promiscuous mode [ 340.757612][T12121] syzkaller0: entered allmulticast mode [ 340.812591][T12124] validate_nla: 2 callbacks suppressed [ 340.812605][T12124] netlink: 'syz.0.1728': attribute type 13 has an invalid length. [ 340.861278][T12124] syz.0.1728 (12124) used greatest stack depth: 16168 bytes left [ 345.388775][T12132] __nla_validate_parse: 3 callbacks suppressed [ 345.388785][T12132] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1731'. [ 345.428931][T12132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.442405][T12132] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 345.454699][T12132] veth1_vlan: left allmulticast mode [ 345.469136][T12132] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 345.485759][T12132] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 345.510590][T12132] bond0 (unregistering): Released all slaves [ 345.522540][T12140] netlink: 'syz.1.1733': attribute type 21 has an invalid length. [ 345.667692][T12151] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1736'. [ 345.701216][T12153] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1738'. [ 345.831365][T12157] netlink: 'syz.1.1740': attribute type 3 has an invalid length. [ 345.840552][T12157] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1740'. [ 346.845832][T12188] netlink: 'syz.3.1747': attribute type 22 has an invalid length. [ 346.911079][T12192] netlink: 'syz.0.1749': attribute type 17 has an invalid length. [ 346.922829][T12192] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 347.042880][T12195] netlink: 'syz.3.1750': attribute type 11 has an invalid length. [ 347.071525][T12195] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1750'. [ 348.702985][T12250] netlink: 'syz.1.1765': attribute type 5 has an invalid length. [ 348.830140][T12254] netlink: 'syz.2.1766': attribute type 9 has an invalid length. [ 348.848235][T12254] netlink: 243 bytes leftover after parsing attributes in process `syz.2.1766'. [ 349.441602][T12292] pim6reg1: entered promiscuous mode [ 349.457580][T12292] pim6reg1: entered allmulticast mode [ 349.936029][T12321] netlink: 'syz.2.1778': attribute type 2 has an invalid length. [ 349.948132][T12326] syzkaller0: entered promiscuous mode [ 349.955868][T12326] syzkaller0: entered allmulticast mode [ 350.004444][T12321] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1778'. [ 350.116890][T12320] netlink: 'syz.2.1778': attribute type 2 has an invalid length. [ 350.136886][T12320] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1778'. [ 350.528352][T12349] netlink: 'syz.2.1784': attribute type 11 has an invalid length. [ 350.543434][T12349] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.1784'. [ 350.823155][T12349] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 350.838177][T12349] CPU: 0 PID: 12349 Comm: syz.2.1784 Not tainted syzkaller #0 [ 350.845644][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.855700][T12349] Call Trace: [ 350.858972][T12349] [ 350.861888][T12349] dump_stack_lvl+0x18c/0x250 [ 350.866559][T12349] ? show_regs_print_info+0x20/0x20 [ 350.871742][T12349] ? load_image+0x420/0x420 [ 350.876236][T12349] sysfs_warn_dup+0x8e/0xa0 [ 350.880726][T12349] sysfs_do_create_link_sd+0xc0/0x110 [ 350.886100][T12349] device_add_class_symlinks+0x1cf/0x240 [ 350.891749][T12349] device_add+0x507/0xc50 [ 350.896070][T12349] wiphy_register+0x1dad/0x2ae0 [ 350.900920][T12349] ? cfg80211_event_work+0x40/0x40 [ 350.906018][T12349] ? minstrel_ht_alloc+0x88a/0x990 [ 350.911119][T12349] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 350.917176][T12349] ieee80211_register_hw+0x3464/0x4250 [ 350.922637][T12349] ? ieee80211_tasklet_handler+0x20/0x20 [ 350.928253][T12349] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 350.934156][T12349] ? __debug_object_init+0xec/0x450 [ 350.939387][T12349] ? __asan_memset+0x22/0x40 [ 350.944006][T12349] ? __hrtimer_init+0x186/0x270 [ 350.948882][T12349] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 350.954651][T12349] ? mac80211_hwsim_free+0x220/0x220 [ 350.959966][T12349] ? rcu_is_watching+0x15/0xb0 [ 350.964759][T12349] ? kstrndup+0xbd/0x140 [ 350.969040][T12349] hwsim_new_radio_nl+0xdc9/0x1a90 [ 350.974185][T12349] ? __nla_validate+0x50/0x50 [ 350.978882][T12349] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 350.985210][T12349] ? __nla_parse+0x40/0x50 [ 350.989617][T12349] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 350.995936][T12349] genl_family_rcv_msg_doit+0x211/0x310 [ 351.001471][T12349] ? end_current_label_crit_section+0x170/0x170 [ 351.007703][T12349] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 351.013589][T12349] ? bpf_lsm_capable+0x9/0x10 [ 351.018253][T12349] ? security_capable+0x89/0xb0 [ 351.023095][T12349] genl_rcv_msg+0x619/0x7a0 [ 351.027590][T12349] ? genl_bind+0x360/0x360 [ 351.032002][T12349] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 351.038331][T12349] netlink_rcv_skb+0x241/0x4d0 [ 351.043087][T12349] ? genl_bind+0x360/0x360 [ 351.047490][T12349] ? netlink_ack+0x1180/0x1180 [ 351.052252][T12349] ? __lock_acquire+0x7d40/0x7d40 [ 351.057270][T12349] ? down_read+0x1ac/0x2e0 [ 351.061675][T12349] genl_rcv+0x28/0x40 [ 351.065648][T12349] netlink_unicast+0x751/0x8d0 [ 351.070400][T12349] netlink_sendmsg+0x8d0/0xbf0 [ 351.075155][T12349] ? netlink_getsockopt+0x590/0x590 [ 351.080337][T12349] ? aa_sock_msg_perm+0x94/0x150 [ 351.085284][T12349] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 351.090555][T12349] ? security_socket_sendmsg+0x80/0xa0 [ 351.095998][T12349] ? netlink_getsockopt+0x590/0x590 [ 351.101180][T12349] ____sys_sendmsg+0x5ba/0x960 [ 351.105934][T12349] ? __asan_memset+0x22/0x40 [ 351.110511][T12349] ? __sys_sendmsg_sock+0x30/0x30 [ 351.115524][T12349] ? __import_iovec+0x5f2/0x850 [ 351.120363][T12349] ? import_iovec+0x73/0xa0 [ 351.124851][T12349] ___sys_sendmsg+0x2a6/0x360 [ 351.129514][T12349] ? __sys_sendmsg+0x2a0/0x2a0 [ 351.134296][T12349] __se_sys_sendmsg+0x1c2/0x2b0 [ 351.139134][T12349] ? __x64_sys_sendmsg+0x80/0x80 [ 351.144069][T12349] ? lockdep_hardirqs_on+0x98/0x150 [ 351.149254][T12349] do_syscall_64+0x55/0xb0 [ 351.153653][T12349] ? clear_bhb_loop+0x40/0x90 [ 351.158316][T12349] ? clear_bhb_loop+0x40/0x90 [ 351.162977][T12349] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.168858][T12349] RIP: 0033:0x7f1c3ed9ce59 [ 351.173273][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.192883][T12349] RSP: 002b:00007f1c3fb71028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.201284][T12349] RAX: ffffffffffffffda RBX: 00007f1c3f016090 RCX: 00007f1c3ed9ce59 [ 351.209244][T12349] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 351.217200][T12349] RBP: 00007f1c3ee32d6f R08: 0000000000000000 R09: 0000000000000000 [ 351.225154][T12349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.233106][T12349] R13: 00007f1c3f016128 R14: 00007f1c3f016090 R15: 00007ffeb0c7e898 [ 351.241074][T12349] [ 351.535620][T12362] syzkaller0: entered promiscuous mode [ 351.551180][T12362] syzkaller0: entered allmulticast mode [ 351.576684][T12376] netlink: 'syz.2.1794': attribute type 33 has an invalid length. [ 351.591741][T12376] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1794'. [ 351.957992][T12393] netlink: 'syz.2.1799': attribute type 2 has an invalid length. [ 352.000744][T12396] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1798'. [ 354.543905][T12382] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.856901][T12420] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 355.876306][T12420] syzkaller0: entered promiscuous mode [ 355.881863][T12420] syzkaller0: entered allmulticast mode [ 356.404161][T12434] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1807'. [ 357.887305][T12444] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1819'. [ 357.968047][T12453] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1813'. [ 358.020156][T12451] netlink: 'syz.3.1812': attribute type 10 has an invalid length. [ 358.565200][T12468] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1816'. [ 358.614366][T12471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.629372][T12468] netlink: 'syz.1.1816': attribute type 7 has an invalid length. [ 359.028588][T12481] netlink: 'syz.3.1821': attribute type 25 has an invalid length. [ 359.043506][T12481] netlink: 'syz.3.1821': attribute type 9 has an invalid length. [ 359.333999][T12498] netlink: 'syz.3.1825': attribute type 10 has an invalid length. [ 360.878417][T12539] netlink: 'syz.3.1838': attribute type 6 has an invalid length. [ 360.938911][T12539] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1838'. [ 361.277212][T12562] netlink: 'syz.0.1843': attribute type 21 has an invalid length. [ 361.290926][T12559] mac80211_hwsim hwsim37 wlan1: entered promiscuous mode [ 361.299379][T12559] mac80211_hwsim hwsim37 wlan1: entered allmulticast mode [ 361.555093][T12568] netlink: 'syz.2.1845': attribute type 1 has an invalid length. [ 361.579855][T12568] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1845'. [ 362.240291][T12594] netlink: set zone limit has 8 unknown bytes [ 364.817022][T12611] netlink: 'syz.1.1855': attribute type 10 has an invalid length. [ 367.506816][T12640] team0: Port device C removed [ 368.309834][T12639] delete_channel: no stack [ 368.578398][T12663] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.1872'. [ 368.618416][T12663] openvswitch: netlink: Key type 4112 is out of range max 32 [ 368.802152][T12677] netlink: 'syz.0.1878': attribute type 9 has an invalid length. [ 368.811163][T12677] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1878'. [ 369.706528][T12721] netlink: 'syz.1.1888': attribute type 10 has an invalid length. [ 369.716643][T12721] netdevsim netdevsim1 ÿÿÿÿÿÿ: entered promiscuous mode [ 370.691607][T12742] netlink: 'syz.2.1894': attribute type 21 has an invalid length. [ 371.016117][T12755] netlink: 'syz.2.1897': attribute type 29 has an invalid length. [ 371.038131][T12752] syzkaller0: entered promiscuous mode [ 371.050349][T12752] syzkaller0: entered allmulticast mode [ 371.068434][T12755] netlink: 'syz.2.1897': attribute type 29 has an invalid length. [ 371.085629][T12758] netlink: 'syz.2.1897': attribute type 29 has an invalid length. [ 371.119681][T12752] netlink: 'syz.2.1897': attribute type 29 has an invalid length. [ 371.472852][T12774] netlink: 'syz.1.1903': attribute type 10 has an invalid length. [ 371.503493][T12774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1903'. [ 371.582121][T12774] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1903'. [ 371.613506][T12774] openvswitch: netlink: Key type 4112 is out of range max 32 [ 374.305759][T12793] netlink: 'syz.3.1909': attribute type 3 has an invalid length. [ 374.315087][T12793] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1909'. [ 375.213913][T12803] tap0: tun_chr_ioctl cmd 1074025672 [ 375.219256][T12803] tap0: ignored: set checksum enabled [ 375.237301][T12803] tap0: tun_chr_ioctl cmd 1074025681 [ 376.208629][T12824] netlink: 'syz.2.1913': attribute type 29 has an invalid length. [ 376.251074][T12824] netlink: 'syz.2.1913': attribute type 29 has an invalid length. [ 376.290994][T12821] netlink: 'syz.2.1913': attribute type 29 has an invalid length. [ 376.335052][T12823] sctp: [Deprecated]: syz.3.1915 (pid 12823) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.335052][T12823] Use struct sctp_sack_info instead [ 376.373565][T12824] netlink: 'syz.2.1913': attribute type 29 has an invalid length. [ 376.456968][T12821] netlink: 'syz.2.1913': attribute type 29 has an invalid length. [ 376.802722][T12834] delete_channel: no stack [ 376.839321][T12834] delete_channel: no stack [ 377.644392][T12853] netlink: 'syz.3.1923': attribute type 10 has an invalid length. [ 377.675034][T12853] hsr_slave_0: left promiscuous mode [ 377.681313][T12853] hsr_slave_1: left promiscuous mode [ 377.698267][T12854] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1923'. [ 377.742067][T12853] bridge0: port 3(hsr0) entered disabled state [ 377.855551][T12853] hsr0 (unregistering): left allmulticast mode [ 377.867613][T12853] bridge0: port 3(hsr0) entered disabled state [ 377.900985][T12857] netlink: 'syz.1.1924': attribute type 10 has an invalid length. [ 378.336797][T12873] netlink: 'syz.0.1930': attribute type 21 has an invalid length. [ 378.363525][T12873] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1930'. [ 378.372642][T12873] netlink: 'syz.0.1930': attribute type 4 has an invalid length. [ 378.607173][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610159][T12868] sctp: [Deprecated]: syz.2.1926 (pid 12868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 378.610159][T12868] Use struct sctp_sack_info instead [ 378.613642][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.954007][T12887] bridge_slave_0: left allmulticast mode [ 378.968847][T12887] bridge_slave_0: left promiscuous mode [ 378.983868][T12887] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.724210][T12908] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1939'. [ 380.308879][T12921] netlink: 'syz.2.1945': attribute type 10 has an invalid length. [ 380.395120][T12921] team0: Device hsr_slave_0 failed to register rx_handler [ 380.471337][T12924] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.1945'. [ 380.830249][T12943] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1950'. [ 381.855961][T12956] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1955'. [ 381.874904][T12955] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1955'. [ 382.761087][T12993] validate_nla: 3 callbacks suppressed [ 382.761131][T12993] netlink: 'syz.2.1963': attribute type 21 has an invalid length. [ 382.832328][T12993] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1963'. [ 384.558440][T13038] netlink: 15487 bytes leftover after parsing attributes in process `syz.2.1978'. [ 384.846719][T13048] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1981'. [ 384.896694][T13052] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.1980'. [ 384.945615][T13046] mac80211_hwsim hwsim18 ..ãc¤±: renamed from wlan1 [ 385.181486][T13067] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1986'. [ 385.192620][T13067] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1986'. [ 385.216109][T13065] ±ÿÿÿÿa–ïD: renamed from lo (while UP) [ 385.411472][T13077] netlink: 'syz.0.1990': attribute type 10 has an invalid length. [ 385.436598][T13077] bond0: (slave ..ãc¤±): Releasing backup interface [ 385.481676][T13076] netlink: 'syz.1.1989': attribute type 9 has an invalid length. [ 385.493997][T13076] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1989'. [ 385.546871][T13066] delete_channel: no stack [ 386.276010][T13111] netlink: 'syz.1.1999': attribute type 1 has an invalid length. [ 386.285229][T13113] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2000'. [ 386.299063][T13111] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1999'. [ 386.929904][T13142] netlink: 'syz.2.2006': attribute type 8 has an invalid length. [ 386.952017][T13144] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.2008'. [ 386.953890][T13142] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2006'. [ 387.610628][ T5774] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 387.615316][T13178] netlink: 'syz.3.2019': attribute type 10 has an invalid length. [ 387.626666][T13178] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2019'. [ 387.636517][T13178] team0: entered promiscuous mode [ 387.641771][T13178] team_slave_1: entered promiscuous mode [ 387.649448][T13178] team0: entered allmulticast mode [ 387.655304][T13178] team_slave_1: entered allmulticast mode [ 387.662091][T13178] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 387.942412][T13188] netlink: 'syz.3.2022': attribute type 13 has an invalid length. [ 388.301238][T13207] netlink: 'syz.1.2029': attribute type 10 has an invalid length. [ 388.325209][T13206] delete_channel: no stack [ 389.340982][T13249] netlink: 'syz.0.2039': attribute type 10 has an invalid length. [ 389.364127][T13249] bridge0: port 4(syz_tun) entered disabled state [ 389.372405][T13249] bridge0: port 3(hsr0) entered disabled state [ 389.379470][T13249] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.388535][T13249] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.429670][T13249] bond0: (slave bridge0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 389.461177][T13249] bridge0: port 4(syz_tun) entered blocking state [ 389.468269][T13249] bridge0: port 4(syz_tun) entered forwarding state [ 389.476112][T13249] bridge0: port 3(hsr0) entered blocking state [ 389.482912][T13249] bridge0: port 3(hsr0) entered forwarding state [ 389.490263][T13249] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.498062][T13249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.506535][T13249] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.514433][T13249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.549494][T13249] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 389.570424][T13254] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 389.980716][T13271] netlink: 'syz.0.2044': attribute type 3 has an invalid length. [ 390.014876][T13271] __nla_validate_parse: 5 callbacks suppressed [ 390.014890][T13271] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2044'. [ 390.512562][T13287] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2051'. [ 390.579650][T13287] bond0: (slave dummy0): Releasing backup interface [ 390.904256][T13311] netlink: 'syz.3.2058': attribute type 21 has an invalid length. [ 390.912194][T13311] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2058'. [ 390.931632][T13311] netlink: 'syz.3.2058': attribute type 4 has an invalid length. [ 390.941399][T13311] netlink: 'syz.3.2058': attribute type 5 has an invalid length. [ 390.949487][T13311] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2058'. [ 392.222151][T13346] tap0: tun_chr_ioctl cmd 1074025694 [ 392.277171][T13346] netlink: 'syz.1.2067': attribute type 21 has an invalid length. [ 392.296962][T13346] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2067'. [ 392.453892][T13354] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2071'. [ 392.680659][T13360] sit0: entered allmulticast mode [ 392.758137][T13368] netlink: 'syz.2.2075': attribute type 16 has an invalid length. [ 392.774722][T13368] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2075'. [ 392.794986][T13368] veth1_macvtap: entered allmulticast mode [ 393.179471][T13385] ªªªªªª: renamed from vlan0 (while UP) [ 393.196382][T13390] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.2081'. [ 393.211087][T13390] netlink: 'syz.2.2081': attribute type 21 has an invalid length. [ 393.219035][T13390] netlink: 'syz.2.2081': attribute type 20 has an invalid length. [ 393.781793][T13405] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2086'. [ 394.476825][T13422] netlink: 'syz.0.2091': attribute type 41 has an invalid length. [ 394.500351][T13422] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2091'. [ 395.189759][T13447] netlink: 'syz.2.2097': attribute type 2 has an invalid length. [ 395.265546][T13447] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2097'. [ 398.455456][T13461] netlink: 'syz.1.2105': attribute type 3 has an invalid length. [ 398.481247][T13461] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.2105'. [ 398.580335][T13469] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.2107'. [ 398.686040][T13467] netlink: 'syz.3.2106': attribute type 21 has an invalid length. [ 398.698020][T13467] netlink: 'syz.3.2106': attribute type 6 has an invalid length. [ 398.713916][T13467] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2106'. [ 398.739234][T13469] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 398.940348][T13481] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 398.962773][T13481] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 399.045274][T13482] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 399.065549][T13481] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 399.104140][T13487] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 399.132797][T13482] netlink: 'syz.3.2110': attribute type 29 has an invalid length. [ 399.735626][T13502] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.2117'. [ 399.932689][T13510] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2120'. [ 400.086632][T13517] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2124'. [ 400.296705][T13526] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2127'. [ 400.884939][T13540] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2131'. [ 400.917398][T13543] netlink: 'syz.0.2131': attribute type 1 has an invalid length. [ 400.928825][T13543] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.2131'. [ 401.214319][T13557] netlink: 'syz.0.2135': attribute type 11 has an invalid length. [ 401.223102][T13557] netlink: 212832 bytes leftover after parsing attributes in process `syz.0.2135'. [ 401.349401][T13561] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.2137'. [ 401.806045][T13575] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2141'. [ 401.854788][T13575] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 401.863085][T13575] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 401.918514][T13578] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2142'. [ 402.492341][T13596] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2146'. [ 402.534475][T13596] hsr_slave_0: left promiscuous mode [ 402.546028][T13596] hsr_slave_1: left promiscuous mode [ 402.565514][T13596] bridge0: port 3(hsr0) entered disabled state [ 402.617131][T13596] hsr0 (unregistering): left allmulticast mode [ 402.623437][T13596] bridge0: port 3(hsr0) entered disabled state [ 403.289018][T13620] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2151'. [ 403.330853][T13620] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 403.407448][T13624] netlink: 209588 bytes leftover after parsing attributes in process `syz.1.2154'. [ 405.309789][T13668] validate_nla: 1 callbacks suppressed [ 405.309803][T13668] netlink: 'syz.2.2165': attribute type 1 has an invalid length. [ 405.334010][T13668] netlink: 'syz.2.2165': attribute type 3 has an invalid length. [ 405.341831][T13668] __nla_validate_parse: 2 callbacks suppressed [ 405.341842][T13668] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2165'. [ 405.853941][T13680] netlink: 'syz.2.2167': attribute type 17 has an invalid length. [ 405.861996][T13680] netlink: 'syz.2.2167': attribute type 16 has an invalid length. [ 405.913579][T13680] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2167'. [ 406.326580][T13687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2170'. [ 406.528333][T13694] netlink: 'syz.2.2171': attribute type 10 has an invalid length. [ 406.578382][T13694] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.613494][T13694] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.642486][T13694] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.652294][T13694] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.685143][T13694] geneve0: entered promiscuous mode [ 406.726996][T13694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.762098][T13694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.778961][T13694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.795014][T13694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.823308][T13694] .`: (slave geneve0): Enslaving as an active interface with an up link [ 406.844092][T13695] netlink: 'syz.2.2171': attribute type 10 has an invalid length. [ 406.854857][T13695] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.881551][T13695] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.936692][T13695] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.963665][T13695] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.016897][T13713] syzkaller0: left promiscuous mode [ 407.065903][T13716] netlink: 'syz.3.2177': attribute type 46 has an invalid length. [ 407.075337][T13713] syzkaller0: left allmulticast mode [ 407.099466][T13716] netlink: 'syz.3.2177': attribute type 46 has an invalid length. [ 407.291831][T13726] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.2180'. [ 407.364192][T13730] netlink: 'syz.3.2181': attribute type 13 has an invalid length. [ 407.382344][T13730] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2181'. [ 407.397298][T13730] syz_tun: refused to change device tx_queue_len [ 407.409615][T13730] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 410.302677][T13735] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2182'. [ 410.331479][T13735] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2182'. [ 410.350621][T13733] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2182'. [ 410.388037][T13739] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.2185'. [ 410.397603][T13739] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 410.405830][T13739] netlink: 16520 bytes leftover after parsing attributes in process `syz.3.2185'. [ 410.446443][T13743] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2186'. [ 410.462785][T13743] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2186'. [ 410.904733][T13769] netlink: 'syz.0.2193': attribute type 11 has an invalid length. [ 410.913022][T13769] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2193'. [ 411.182231][T13787] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2200'. [ 411.195940][T13787] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.2200'. [ 412.543256][T13828] netlink: 'syz.1.2212': attribute type 2 has an invalid length. [ 412.562158][T13836] netlink: 'syz.2.2214': attribute type 3 has an invalid length. [ 412.611539][T13828] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2212'. [ 412.633471][T13836] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2214'. [ 413.581288][T13857] netlink: 'syz.0.2220': attribute type 10 has an invalid length. [ 415.820288][T13860] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.827862][T13860] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.835335][T13860] bridge0: entered allmulticast mode [ 415.853189][T13865] bridge_slave_1: left allmulticast mode [ 415.859036][T13865] bridge_slave_1: left promiscuous mode [ 415.865641][T13865] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.874857][T13865] bridge_slave_0: left allmulticast mode [ 415.880519][T13865] bridge_slave_0: left promiscuous mode [ 415.887677][T13865] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.978548][T13872] mac80211_hwsim hwsim37 wlan1: left promiscuous mode [ 415.997634][T13884] netlink: 'syz.2.2227': attribute type 19 has an invalid length. [ 416.495698][T13906] __nla_validate_parse: 4 callbacks suppressed [ 416.495712][T13906] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2236'. [ 416.625606][T13908] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 416.640308][T13911] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2237'. [ 416.715753][T13911] openvswitch: netlink: Tunnel attr 2548 out of range max 16 [ 417.468654][T13960] netlink: 'syz.1.2253': attribute type 21 has an invalid length. [ 417.477237][T13960] netlink: 'syz.1.2253': attribute type 6 has an invalid length. [ 419.056221][T14010] netlink: 207496 bytes leftover after parsing attributes in process `syz.0.2269'. [ 419.067965][T14010] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.2269'. [ 419.534332][T14033] netlink: 21 bytes leftover after parsing attributes in process `syz.0.2276'. [ 419.544475][T14033] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 419.846231][T14047] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.2280'. [ 419.882702][T14050] netlink: 'syz.2.2281': attribute type 23 has an invalid length. [ 420.277370][T14069] delete_channel: no stack [ 420.599898][T14093] netlink: 'syz.1.2294': attribute type 3 has an invalid length. [ 420.608934][T14093] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2294'. [ 420.618813][T14093] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 420.640454][T14093] netlink: 'syz.1.2294': attribute type 3 has an invalid length. [ 420.648923][T14093] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2294'. [ 420.658360][T14093] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 420.797104][T14101] netlink: 'syz.0.2297': attribute type 10 has an invalid length. [ 420.986819][T14105] netlink: 'syz.2.2298': attribute type 10 has an invalid length. [ 421.007882][T14105] team0: Device hsr_slave_0 failed to register rx_handler [ 421.355183][T14119] dummy0: entered promiscuous mode [ 421.360352][T14119] dummy0: entered allmulticast mode [ 423.294451][T14148] netlink: 'syz.2.2311': attribute type 41 has an invalid length. [ 425.054478][ T5776] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 425.072957][ T5776] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 425.085916][ T5776] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 425.107284][ T5776] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 425.115800][ T5776] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 425.133622][ T5776] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 425.527314][T14162] chnl_net:caif_netlink_parms(): no params data found [ 425.612231][T14174] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.2319'. [ 425.712001][T14162] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.719515][T14162] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.728788][T14162] bridge_slave_0: entered allmulticast mode [ 425.736655][T14162] bridge_slave_0: entered promiscuous mode [ 425.748351][T14162] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.755758][T14162] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.763019][T14162] bridge_slave_1: entered allmulticast mode [ 425.777000][T14162] bridge_slave_1: entered promiscuous mode [ 425.822718][T14162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 425.837856][T14162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 425.889248][T14162] team0: Port device team_slave_0 added [ 425.900770][T14162] team0: Port device team_slave_1 added [ 425.938072][T14162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 425.946991][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 425.978100][T14162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.994363][T14162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.001457][T14162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.032458][T14162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.146649][T14162] hsr_slave_0: entered promiscuous mode [ 426.177044][T14162] hsr_slave_1: entered promiscuous mode [ 426.193319][T14162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.201404][T14162] Cannot create hsr debugfs directory [ 426.332659][ T6589] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.416759][T14194] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2323'. [ 426.442586][ T6589] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.538917][ T6589] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.640738][ T6589] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.958668][T14219] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2329'. [ 427.097304][T14219] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.2329'. [ 427.145532][T14220] netlink: 192188 bytes leftover after parsing attributes in process `syz.2.2328'. [ 427.163995][ T5774] Bluetooth: hci4: command tx timeout [ 427.211751][T14220] openvswitch: netlink: Key 9 has unexpected len 3064 expected 4 [ 427.360444][T14225] netlink: 'syz.0.2331': attribute type 29 has an invalid length. [ 427.372631][T14225] netlink: 'syz.0.2331': attribute type 29 has an invalid length. [ 427.445710][T14225] netlink: 'syz.0.2331': attribute type 29 has an invalid length. [ 427.465262][T14230] netlink: 'syz.0.2331': attribute type 29 has an invalid length. [ 427.482284][T14229] netlink: 'syz.3.2332': attribute type 9 has an invalid length. [ 427.504090][T14229] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2332'. [ 427.983672][T14250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2337'. [ 428.223598][T14162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 429.255223][ T5774] Bluetooth: hci4: command tx timeout [ 431.156348][T14162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 431.168418][T14162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 431.215641][T14162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 431.324238][ T5774] Bluetooth: hci4: command tx timeout [ 431.368303][T14284] delete_channel: no stack [ 431.425678][T14284] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.432917][T14284] IPv6: NLM_F_CREATE should be set when creating new route [ 431.440212][T14284] IPv6: NLM_F_CREATE should be set when creating new route [ 431.447471][T14284] IPv6: NLM_F_CREATE should be set when creating new route [ 431.454938][T14281] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2344'. [ 431.623986][T14291] netlink: 'syz.2.2346': attribute type 21 has an invalid length. [ 431.643698][T14291] netlink: 'syz.2.2346': attribute type 1 has an invalid length. [ 431.678666][T14291] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2346'. [ 431.877916][T14310] netlink: 'syz.3.2349': attribute type 3 has an invalid length. [ 431.896593][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.903653][T14310] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2349'. [ 431.983265][T14162] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.082962][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.090146][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.133225][T14317] netlink: 'syz.2.2351': attribute type 1 has an invalid length. [ 432.219690][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.227399][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.376329][T14328] netlink: 'syz.0.2355': attribute type 10 has an invalid length. [ 432.401343][T14328] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 432.779243][T14328] netlink: 'syz.0.2355': attribute type 39 has an invalid length. [ 433.151693][ T6589] veth1_vlan: left promiscuous mode [ 433.157493][ T6589] veth0_vlan: left promiscuous mode [ 433.413485][ T5774] Bluetooth: hci4: command tx timeout [ 436.254560][T14375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2365'. [ 436.265241][T14381] netlink: 'syz.2.2367': attribute type 13 has an invalid length. [ 436.273080][T14381] netlink: 24643 bytes leftover after parsing attributes in process `syz.2.2367'. [ 436.368914][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.397089][T14386] netlink: 'syz.0.2368': attribute type 10 has an invalid length. [ 436.421293][T14389] netlink: 'syz.3.2369': attribute type 10 has an invalid length. [ 436.455137][T14389] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2369'. [ 436.616714][T14398] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2371'. [ 436.628125][T14397] netlink: 'syz.2.2372': attribute type 9 has an invalid length. [ 436.636511][T14397] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2372'. [ 436.722990][T14162] veth0_vlan: entered promiscuous mode [ 436.797853][T14399] netlink: 'syz.2.2372': attribute type 9 has an invalid length. [ 436.812578][T14162] veth1_vlan: entered promiscuous mode [ 436.830528][T14399] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2372'. [ 436.885756][T14401] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2373'. [ 436.928243][T14162] veth0_macvtap: entered promiscuous mode [ 436.992903][T14162] veth1_macvtap: entered promiscuous mode [ 437.038788][T14162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.062338][T14162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.089327][T14162] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.105395][T14162] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.121182][T14162] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.142652][T14162] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.359689][ T6558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.390180][ T6558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.459418][T14416] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.2379'. [ 437.476873][T14418] netlink: 'syz.2.2380': attribute type 22 has an invalid length. [ 437.491077][ T6558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.524939][ T6558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.134912][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 439.148345][ T5776] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 439.164090][ T5776] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 439.172230][ T5776] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 439.179990][ T5776] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 439.189055][ T5776] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 439.194371][T14433] delete_channel: no stack [ 439.515705][T14463] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2390'. [ 439.678997][T14444] chnl_net:caif_netlink_parms(): no params data found [ 439.835047][ T5771] bridge0: port 4(syz_tun) entered disabled state [ 439.997951][ T5771] syz_tun (unregistering): left allmulticast mode [ 440.021237][ T5771] syz_tun (unregistering): left promiscuous mode [ 440.046331][T14484] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2395'. [ 440.056489][T14484] netlink: get zone limit has 4 unknown bytes [ 440.068978][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.075745][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.084622][ T5771] bridge0: port 4(syz_tun) entered disabled state [ 440.330166][T14444] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.358957][T14444] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.407685][T14444] bridge_slave_0: entered allmulticast mode [ 440.448127][T14444] bridge_slave_0: entered promiscuous mode [ 440.619108][T14444] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.650340][T14444] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.670236][T14444] bridge_slave_1: entered allmulticast mode [ 440.680419][T14444] bridge_slave_1: entered promiscuous mode [ 440.903323][T14499] veth0_vlan: entered allmulticast mode [ 440.979011][T14495] veth0_vlan: left promiscuous mode [ 440.991537][T14495] veth0_vlan: entered promiscuous mode [ 441.005226][T14444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.136406][T14498] netlink: 'syz.3.2398': attribute type 10 has an invalid length. [ 441.150300][T14444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.252863][T14444] team0: Port device team_slave_0 added [ 441.259677][ T5774] Bluetooth: hci0: command tx timeout [ 441.268586][T14444] team0: Port device team_slave_1 added [ 441.299900][T14444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.307014][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.333101][T14444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.346556][T14444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.353815][T14444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.382093][T14444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.621446][T14444] hsr_slave_0: entered promiscuous mode [ 441.717227][T14444] hsr_slave_1: entered promiscuous mode [ 441.824716][T14444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.840383][T14444] Cannot create hsr debugfs directory [ 442.619755][T14529] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2409'. [ 442.999656][T14529] sit0: entered promiscuous mode [ 443.323947][ T5774] Bluetooth: hci0: command tx timeout [ 444.054879][T14580] netlink: 'syz.2.2417': attribute type 2 has an invalid length. [ 444.062668][T14580] netlink: 184 bytes leftover after parsing attributes in process `syz.2.2417'. [ 444.756447][T14444] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 444.838280][T14444] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 444.957563][T14444] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.026085][T14444] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.414452][ T5774] Bluetooth: hci0: command tx timeout [ 445.986177][T14609] netlink: 'syz.2.2423': attribute type 3 has an invalid length. [ 446.000802][T14609] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2423'. [ 446.046163][T14609] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2423'. [ 446.225685][T14444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 446.266924][T14617] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.2426'. [ 446.339657][T14444] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.412876][ T6571] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.420077][ T6571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 446.529929][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.537132][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.729026][ T6535] hsr_slave_0: left promiscuous mode [ 446.763530][ T6535] hsr_slave_1: left promiscuous mode [ 446.780580][ T6535] hsr0: left allmulticast mode [ 446.792359][ T6535] bridge0: port 3(hsr0) entered disabled state [ 446.886309][ T6535] bridge_slave_1: left allmulticast mode [ 446.902536][ T6535] bridge_slave_1: left promiscuous mode [ 446.911487][T14642] netlink: 'syz.2.2430': attribute type 2 has an invalid length. [ 446.923931][ T6535] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.948773][T14642] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.2430'. [ 446.963146][ T6535] bridge_slave_0: left allmulticast mode [ 446.976680][ T6535] bridge_slave_0: left promiscuous mode [ 446.988241][ T6535] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.025984][ T6535] veth1_macvtap: left promiscuous mode [ 447.031747][ T6535] veth1_vlan: left promiscuous mode [ 447.500831][ T5774] Bluetooth: hci0: command tx timeout [ 447.583245][ T6535] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.628014][ T6535] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.875388][ T6535] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 447.884377][ T6535] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 447.900055][ T6535] bond0 (unregistering): Released all slaves [ 448.208783][T14643] netlink: 'syz.1.2429': attribute type 2 has an invalid length. [ 448.994975][T14444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.358569][T14444] veth0_vlan: entered promiscuous mode [ 449.428974][T14444] veth1_vlan: entered promiscuous mode [ 449.481699][T14676] netlink: 763 bytes leftover after parsing attributes in process `syz.2.2438'. [ 449.568921][T14444] veth0_macvtap: entered promiscuous mode [ 449.596441][T14444] veth1_macvtap: entered promiscuous mode [ 449.664700][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.690357][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.707940][T14689] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2440'. [ 449.719437][T14444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.768949][T14444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.793069][T14444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.827059][T14444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.851928][T14444] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.876394][T14444] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.909028][T14444] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.925870][T14444] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.947496][T14701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 449.981077][T14701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 450.015766][T14701] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2444'. [ 450.102040][ T6587] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.112438][ T6587] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.084812][T14716] netlink: 'syz.3.2448': attribute type 3 has an invalid length. [ 452.092600][T14716] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.2448'. [ 452.117674][ T6591] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.133413][ T6591] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.249915][T14723] netlink: 'syz.1.2449': attribute type 10 has an invalid length. [ 452.278551][T14723] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2449'. [ 452.299295][T14723] bond0: entered promiscuous mode [ 452.308810][T14723] bond_slave_0: entered promiscuous mode [ 452.316286][T14723] bond_slave_1: entered promiscuous mode [ 452.324116][T14723] bridge0: port 3(bond0) entered blocking state [ 452.330905][T14723] bridge0: port 3(bond0) entered disabled state [ 452.344368][T14723] bond0: entered allmulticast mode [ 452.361633][T14723] bond_slave_0: entered allmulticast mode [ 452.377417][T14723] bond_slave_1: entered allmulticast mode [ 452.401439][T14723] bridge0: port 3(bond0) entered blocking state [ 452.408325][T14723] bridge0: port 3(bond0) entered forwarding state [ 452.447349][T14724] delete_channel: no stack [ 452.830830][T14749] netlink: 'syz.1.2457': attribute type 10 has an invalid length. [ 453.071437][ T5776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 453.080689][ T5776] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 453.099900][ T5776] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 453.115079][ T5776] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 453.127134][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 453.137770][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 453.167114][T14749] team0: Port device netdevsim0 added [ 453.173123][T14750] tap0: tun_chr_ioctl cmd 1074025675 [ 453.183456][T14750] tap0: persist enabled [ 453.203352][T14753] tap0: tun_chr_ioctl cmd 21731 [ 453.483152][T14762] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 453.536962][T14762] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 453.581175][T14756] chnl_net:caif_netlink_parms(): no params data found [ 453.599490][T14769] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 453.658590][T14762] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 453.770849][T14769] netlink: 'syz.0.2459': attribute type 29 has an invalid length. [ 453.826698][T14775] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2461'. [ 453.836608][T14775] bridge_slave_1: default FDB implementation only supports local addresses [ 453.963079][T14784] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2462'. [ 454.008553][T14756] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.048227][T14756] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.056643][T14756] bridge_slave_0: entered allmulticast mode [ 454.077667][T14756] bridge_slave_0: entered promiscuous mode [ 454.141570][ T6580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.170786][T14756] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.183259][T14756] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.192712][T14756] bridge_slave_1: entered allmulticast mode [ 454.200686][T14756] bridge_slave_1: entered promiscuous mode [ 454.242160][T14788] netlink: 668 bytes leftover after parsing attributes in process `syz.1.2465'. [ 454.265039][ T6580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.273331][T14788] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 454.287264][T14788] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 454.335871][T14756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.354612][T14756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.377851][ T6580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.540843][ T5776] Bluetooth: hci0: unexpected subevent 0x04 length: 150 > 11 [ 454.552865][ T6580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.589003][T14756] team0: Port device team_slave_0 added [ 454.598480][T14756] team0: Port device team_slave_1 added [ 454.641351][T14756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.658999][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.712528][T14756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.727448][T14756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.734534][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.779803][T14756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.816297][T14809] netlink: 'syz.0.2470': attribute type 9 has an invalid length. [ 454.843292][T14809] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2470'. [ 454.899739][T14756] hsr_slave_0: entered promiscuous mode [ 454.912434][T14756] hsr_slave_1: entered promiscuous mode [ 454.915836][T14811] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2470'. [ 454.928675][T14756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.937164][T14756] Cannot create hsr debugfs directory [ 455.179713][T14815] syzkaller0: entered promiscuous mode [ 455.185513][T14815] syzkaller0: entered allmulticast mode [ 455.254157][ T5776] Bluetooth: hci2: command tx timeout [ 455.522490][T14826] netlink: 'syz.0.2476': attribute type 10 has an invalid length. [ 455.541618][T14826] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2476'. [ 455.584168][T14826] team0: entered promiscuous mode [ 455.617772][T14826] team_slave_0: entered promiscuous mode [ 455.630931][T14826] team_slave_1: entered promiscuous mode [ 455.637900][T14826] bridge0: port 3(team0) entered blocking state [ 455.645292][T14826] bridge0: port 3(team0) entered disabled state [ 455.652352][T14826] team0: entered allmulticast mode [ 455.658080][T14826] team_slave_0: entered allmulticast mode [ 455.663992][T14826] team_slave_1: entered allmulticast mode [ 455.673029][T14826] bridge0: port 3(team0) entered blocking state [ 455.679499][T14826] bridge0: port 3(team0) entered forwarding state [ 457.127477][T14756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 457.155165][T14756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 457.231911][ T6580] gretap0 (unregistering): left allmulticast mode [ 457.246718][ T6580] gretap0 (unregistering): left promiscuous mode [ 457.270690][ T6580] Ÿë: port 1(gretap0) entered disabled state [ 457.307097][T14756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 457.330222][T14756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 457.334259][ T5776] Bluetooth: hci2: command tx timeout [ 457.443155][T14894] netlink: 'syz.0.2491': attribute type 28 has an invalid length. [ 457.486599][T14894] netlink: 'syz.0.2491': attribute type 3 has an invalid length. [ 457.508589][T14894] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2491'. [ 457.518020][T14898] netlink: 'syz.1.2492': attribute type 9 has an invalid length. [ 457.545410][T14898] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2492'. [ 457.781247][T14902] netlink: 'syz.1.2492': attribute type 9 has an invalid length. [ 457.820868][T14902] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2492'. [ 458.755174][T14756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.098580][T14756] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.220118][ T6593] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.227341][ T6593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.269659][T14930] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.2498'. [ 459.336541][ T6587] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.343739][ T6587] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.403939][ T5776] Bluetooth: hci2: command tx timeout [ 460.127901][ T6580] veth0_vlan: left promiscuous mode [ 460.656179][ T6580] team_slave_1 (unregistering): left promiscuous mode [ 460.665686][ T6580] team_slave_1 (unregistering): left allmulticast mode [ 460.675530][ T6580] team0 (unregistering): Port device team_slave_1 removed [ 460.978100][T14970] €: renamed from virt_wifi0 [ 460.986673][T14979] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2511'. [ 461.070186][T14756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.149243][T14984] netlink: 'syz.0.2512': attribute type 64 has an invalid length. [ 461.217932][T14756] veth0_vlan: entered promiscuous mode [ 461.239760][T14756] veth1_vlan: entered promiscuous mode [ 461.281503][T14987] netlink: 'syz.2.2514': attribute type 46 has an invalid length. [ 461.312639][T14987] netlink: 'syz.2.2514': attribute type 46 has an invalid length. [ 461.351637][T14756] veth0_macvtap: entered promiscuous mode [ 461.357621][T14988] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2513'. [ 461.379114][T14988] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2513'. [ 461.391568][T14990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.398888][T14990] IPv6: NLM_F_CREATE should be set when creating new route [ 461.406412][T14990] IPv6: NLM_F_CREATE should be set when creating new route [ 461.413832][T14990] IPv6: NLM_F_CREATE should be set when creating new route [ 461.442161][T14988] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2513'. [ 461.459391][T14756] veth1_macvtap: entered promiscuous mode [ 461.486002][ T5776] Bluetooth: hci2: command tx timeout [ 461.493182][T14993] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2513'. [ 461.538299][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.582998][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.600488][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.612935][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.636725][T14756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.669505][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.681195][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.697054][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.710237][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.727559][T14756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.748494][T14756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.759130][T14756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.769867][T14756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.780202][T14756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.930299][ T6593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.940804][ T6593] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 461.968666][ T6580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 461.982190][ T6580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.564630][T15015] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2519'. [ 463.370754][T15057] netlink: 830 bytes leftover after parsing attributes in process `syz.2.2531'. [ 464.051070][T15064] mac80211_hwsim hwsim52 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 464.410502][ T5776] Bluetooth: hci1: ISO packet for unknown connection handle 62 [ 464.590347][T15090] netlink: set zone limit has 8 unknown bytes [ 464.804650][T15099] netlink: 'syz.2.2542': attribute type 1 has an invalid length. [ 464.812537][T15099] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.2542'. [ 465.120385][T15115] netlink: 1772 bytes leftover after parsing attributes in process `syz.2.2547'. [ 466.225593][T15135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2551'. [ 467.894125][ T6588] wlan1: Trigger new scan to find an IBSS to join [ 467.939336][T15132] veth0_vlan: entered allmulticast mode [ 467.975732][T15135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2551'. [ 467.993685][T15136] veth0_vlan: left promiscuous mode [ 468.000504][T15136] veth0_vlan: entered promiscuous mode [ 468.198439][T15144] netlink: 'syz.1.2554': attribute type 10 has an invalid length. [ 468.238267][T15144] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2554'. [ 468.266506][T15144] ipvlan1: entered promiscuous mode [ 468.273853][T15144] ipvlan1: entered allmulticast mode [ 468.300660][T15144] veth0_vlan: entered allmulticast mode [ 468.348841][T15144] bridge0: port 4(ipvlan1) entered blocking state [ 468.383928][T15144] bridge0: port 4(ipvlan1) entered disabled state [ 468.407117][T15144] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 468.565100][T15163] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 468.681744][T15163] veth0_vlan: left promiscuous mode [ 468.707908][T15163] veth0_vlan: entered promiscuous mode [ 468.768717][T15163] team0: Device veth0_vlan failed to register rx_handler [ 470.100557][T15233] netlink: 'syz.0.2574': attribute type 21 has an invalid length. [ 470.109633][T15233] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2574'. [ 470.122897][T15233] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 470.139048][T15233] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.2574'. [ 470.201901][T15236] netlink: 'syz.3.2575': attribute type 10 has an invalid length. [ 470.278451][T15236] macvlan0: entered promiscuous mode [ 470.286891][T15236] macvlan0: entered allmulticast mode [ 470.320886][T15236] veth1_vlan: entered allmulticast mode [ 470.347059][T15236] team0: Port device macvlan0 added [ 470.923586][ T6554] wlan1: Trigger new scan to find an IBSS to join [ 471.614763][T15249] netlink: 'syz.1.2579': attribute type 2 has an invalid length. [ 471.642953][T15251] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2580'. [ 471.792039][T15261] netlink: 'syz.0.2582': attribute type 10 has an invalid length. [ 471.826104][T15261] geneve1: entered promiscuous mode [ 471.831692][T15261] geneve1: entered allmulticast mode [ 471.837842][T15261] team0: Port device geneve1 added [ 471.895249][ T6591] wlan1: Creating new IBSS network, BSSID 02:cd:e5:51:bf:39 [ 471.986587][T15265] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2584'. [ 472.369746][T15247] delete_channel: no stack [ 472.638747][T15285] syzkaller0: entered promiscuous mode [ 472.663641][T15285] syzkaller0: entered allmulticast mode [ 475.410196][T15347] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.2606'. [ 475.441524][T15349] netlink: 'syz.3.2607': attribute type 21 has an invalid length. [ 475.449607][T15349] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2607'. [ 475.459230][T15349] netlink: 'syz.3.2607': attribute type 5 has an invalid length. [ 475.467342][T15349] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2607'. [ 475.539800][T15351] netlink: 'syz.3.2608': attribute type 21 has an invalid length. [ 475.547832][T15351] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2608'. [ 476.056446][T15374] syzkaller0: entered promiscuous mode [ 476.062016][T15374] syzkaller0: entered allmulticast mode [ 477.786837][T15381] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2614'. [ 477.799402][T15387] netlink: 'syz.2.2615': attribute type 2 has an invalid length. [ 477.807682][T15387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2615'. [ 478.062918][T15405] netlink: 'syz.3.2620': attribute type 1 has an invalid length. [ 478.109388][T15405] netlink: 'syz.3.2620': attribute type 3 has an invalid length. [ 478.140881][T15405] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2620'. [ 478.475506][T15425] netlink: 'syz.2.2626': attribute type 10 has an invalid length. [ 478.505059][T15425] hsr0: left promiscuous mode [ 478.529280][T15425] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 478.910417][T15439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 478.918050][T15439] IPv6: NLM_F_CREATE should be set when creating new route [ 478.925661][T15439] IPv6: NLM_F_CREATE should be set when creating new route [ 478.932961][T15439] IPv6: NLM_F_CREATE should be set when creating new route [ 478.976927][T15439] netlink: 'syz.1.2631': attribute type 9 has an invalid length. [ 478.993843][T15439] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2631'. [ 479.005831][T15444] netlink: 'syz.3.2633': attribute type 10 has an invalid length. [ 479.124486][T15444] veth0_vlan: left promiscuous mode [ 479.132968][T15444] veth0_vlan: entered promiscuous mode [ 479.150873][T15444] team0: Device veth0_vlan failed to register rx_handler [ 479.356312][T15453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2635'. [ 479.531840][T15456] netlink: 'syz.2.2636': attribute type 29 has an invalid length. [ 479.572224][T15449] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2631'. [ 479.854494][T15470] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2640'. [ 480.441342][T15480] syzkaller0: entered promiscuous mode [ 480.448787][T15480] syzkaller0: entered allmulticast mode [ 480.459672][T15492] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.2647'. [ 482.886443][T15496] validate_nla: 7 callbacks suppressed [ 482.886455][T15496] netlink: 'syz.1.2648': attribute type 2 has an invalid length. [ 482.907920][T15513] netlink: 'syz.0.2651': attribute type 21 has an invalid length. [ 482.919404][T15513] netlink: 'syz.0.2651': attribute type 1 has an invalid length. [ 482.927687][T15513] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2651'. [ 482.939630][T15514] netlink: 'syz.0.2651': attribute type 21 has an invalid length. [ 482.947642][T15514] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2651'. [ 482.957275][T15514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2651'. [ 483.015274][T15518] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2652'. [ 483.458117][T15526] delete_channel: no stack [ 483.462754][T15526] delete_channel: no stack [ 483.890619][T15541] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2661'. [ 484.775323][T15556] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.2665'. [ 485.076485][T15561] netlink: 'syz.2.2659': attribute type 10 has an invalid length. [ 485.583208][T15568] netlink: 'syz.3.2668': attribute type 9 has an invalid length. [ 486.853232][T15603] netlink: 'syz.0.2677': attribute type 5 has an invalid length. [ 487.844135][T15628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 487.972092][T15628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.497709][T15628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.672083][T15628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.642689][T15647] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 491.658642][T15647] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 492.298965][T15661] netlink: 'syz.1.2691': attribute type 3 has an invalid length. [ 492.323671][T15661] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2691'. [ 492.530254][T15667] netlink: 'syz.0.2692': attribute type 9 has an invalid length. [ 492.548649][T15667] netlink: 379 bytes leftover after parsing attributes in process `syz.0.2692'. [ 492.679684][T15674] netlink: 'syz.2.2696': attribute type 10 has an invalid length. [ 492.687948][T15674] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 494.216057][T15729] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2713'. [ 494.216472][T15728] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2713'. [ 494.258146][T15729] openvswitch: netlink: Key type 4112 is out of range max 32 [ 494.283502][T15728] openvswitch: netlink: Key type 4112 is out of range max 32 [ 494.353023][T15732] netlink: 199816 bytes leftover after parsing attributes in process `syz.1.2710'. [ 494.459612][T15743] netlink: 'syz.0.2714': attribute type 1 has an invalid length. [ 495.885038][T15769] netlink: 'syz.1.2721': attribute type 21 has an invalid length. [ 495.913649][T15769] IPv6: NLM_F_CREATE should be specified when creating new route [ 498.300691][T15781] netlink: 'syz.2.2724': attribute type 2 has an invalid length. [ 498.354579][T15781] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2724'. [ 499.598137][T15794] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2729'. [ 499.643760][T15794] netlink: 'syz.1.2729': attribute type 21 has an invalid length. [ 499.673893][T15794] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2729'. [ 499.683031][T15794] netlink: 'syz.1.2729': attribute type 5 has an invalid length. [ 499.712894][T15794] netlink: 'syz.1.2729': attribute type 6 has an invalid length. [ 499.736961][T15804] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2731'. [ 499.739280][T15794] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2729'. [ 499.888617][T15809] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2732'. [ 500.139170][T15811] netlink: 197276 bytes leftover after parsing attributes in process `syz.0.2733'. [ 500.442246][T15836] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2741'. [ 500.911987][T15848] netlink: 'syz.2.2744': attribute type 29 has an invalid length. [ 500.925914][T15848] netlink: 'syz.2.2744': attribute type 29 has an invalid length. [ 500.944905][T15849] netlink: 'syz.2.2744': attribute type 29 has an invalid length. [ 500.963516][T15848] netlink: 'syz.2.2744': attribute type 29 has an invalid length. [ 501.004646][T15848] netlink: 'syz.2.2744': attribute type 21 has an invalid length. [ 501.024811][T15848] netlink: 'syz.2.2744': attribute type 19 has an invalid length. [ 501.032656][T15848] netlink: 14536 bytes leftover after parsing attributes in process `syz.2.2744'. [ 501.229525][T15860] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2747'. [ 501.256136][T15860] openvswitch: netlink: Key type 29 is not supported [ 501.501890][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.508797][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.925735][ T6554] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 501.997454][T15868] syzkaller0: entered promiscuous mode [ 502.019457][ T5776] Bluetooth: hci0: unexpected event 0x17 length: 15 > 6 [ 502.019951][T15868] syzkaller0: entered allmulticast mode [ 502.087148][ T5774] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.104567][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.112664][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.129426][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.143568][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 502.152098][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 504.204246][ T5776] Bluetooth: hci1: command tx timeout [ 504.940775][T15888] validate_nla: 1 callbacks suppressed [ 504.940790][T15888] netlink: 'syz.0.2756': attribute type 2 has an invalid length. [ 505.341501][T15891] syzkaller0: entered promiscuous mode [ 505.349253][T15891] syzkaller0: entered allmulticast mode [ 506.287667][ T5776] Bluetooth: hci1: command tx timeout [ 507.308117][T15873] chnl_net:caif_netlink_parms(): no params data found [ 507.834962][T15916] mac80211_hwsim hwsim56 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 508.004116][T15873] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.011211][T15873] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.050775][T15873] bridge_slave_0: entered allmulticast mode [ 508.062358][T15924] netlink: 'syz.1.2762': attribute type 1 has an invalid length. [ 508.090441][T15873] bridge_slave_0: entered promiscuous mode [ 508.117407][T15873] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.125301][T15924] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2762'. [ 508.139253][T15873] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.153650][T15873] bridge_slave_1: entered allmulticast mode [ 508.161725][T15873] bridge_slave_1: entered promiscuous mode [ 508.171098][T15924] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2762'. [ 508.363758][ T5776] Bluetooth: hci1: command tx timeout [ 508.626184][T15873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 508.689174][T15873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 508.874057][T15942] sit0: entered allmulticast mode [ 508.985039][T15873] team0: Port device team_slave_0 added [ 509.096751][T15873] team0: Port device team_slave_1 added [ 509.301710][T15873] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.327541][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.377099][T15873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.395732][T15873] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.404760][T15873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.431520][T15965] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2768'. [ 509.444384][T15873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.581009][T15965] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2768'. [ 509.882173][T15961] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2768'. [ 509.884937][ T6593] wlan1: Trigger new scan to find an IBSS to join [ 509.960180][T15967] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.2768'. [ 510.326454][T15873] hsr_slave_0: entered promiscuous mode [ 510.352636][T15873] hsr_slave_1: entered promiscuous mode [ 510.366324][T15873] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 510.384932][T15873] Cannot create hsr debugfs directory [ 510.454868][ T5776] Bluetooth: hci1: command tx timeout [ 511.875777][T16027] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.2781'. [ 512.057988][T16031] netlink: 'syz.1.2782': attribute type 9 has an invalid length. [ 512.071312][T16031] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2782'. [ 512.405399][T16035] netlink: 'syz.1.2782': attribute type 9 has an invalid length. [ 512.494453][T16035] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.2782'. [ 512.752505][T15873] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 512.827879][T15873] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 512.891547][T15873] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 512.924840][ T6566] wlan1: Trigger new scan to find an IBSS to join [ 513.270218][T16064] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2788'. [ 513.557992][T15873] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 513.573137][T16067] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2788'. [ 513.667365][T16075] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.2791'. [ 513.753874][T16075] netlink: 'syz.0.2791': attribute type 29 has an invalid length. [ 513.800833][T16075] netlink: 'syz.0.2791': attribute type 29 has an invalid length. [ 513.823201][T16080] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2792'. [ 513.925791][T16080] openvswitch: netlink: Key type 29 is not supported [ 514.183728][T16089] netlink: 'syz.0.2791': attribute type 39 has an invalid length. [ 514.480225][T16101] netlink: 'syz.1.2794': attribute type 28 has an invalid length. [ 514.513534][T16101] netlink: 'syz.1.2794': attribute type 4 has an invalid length. [ 514.550686][T16101] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2794'. [ 515.037628][T15873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.161687][T16117] syzkaller0: entered promiscuous mode [ 515.172170][T16117] syzkaller0: entered allmulticast mode [ 515.885752][ T6594] wlan1: Creating new IBSS network, BSSID 96:2f:e6:a1:e5:6d [ 516.811756][T16131] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.2801'. [ 517.105752][T16131] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.2801'. [ 517.180485][T15873] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.213123][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.220298][ T6569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.288798][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.296015][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.442341][T16142] netlink: 'syz.3.2804': attribute type 1 has an invalid length. [ 517.462490][T16142] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.2804'. [ 517.530636][ T6554] hsr_slave_0: left promiscuous mode [ 517.557543][ T6554] hsr_slave_1: left promiscuous mode [ 517.601437][ T6554] veth1_macvtap: left promiscuous mode [ 517.617022][ T6554] veth0_macvtap: left promiscuous mode [ 517.880950][ T6554] team0 (unregistering): Port device geneve1 removed [ 517.922244][ T6554] .` (unregistering): (slave geneve0): Releasing backup interface [ 518.166719][ T6554] team0 (unregistering): Port device macvlan0 removed [ 518.438325][T16160] netlink: 'syz.1.2809': attribute type 29 has an invalid length. [ 518.641154][ T6554] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 518.680058][ T6554] team0 (unregistering): Port device team_slave_1 removed [ 518.720900][ T6554] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 518.757787][ T6554] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 518.997526][ T6554] .` (unregistering): Released all slaves [ 519.036109][T16151] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2806'. [ 519.046847][T16153] netlink: 'syz.3.2806': attribute type 6 has an invalid length. [ 519.056704][T16153] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2806'. [ 519.083827][T16160] netlink: 'syz.1.2809': attribute type 29 has an invalid length. [ 519.270917][T16168] netlink: 'syz.1.2811': attribute type 3 has an invalid length. [ 519.279618][T16168] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2811'. [ 519.325585][T16170] netlink: 'syz.1.2811': attribute type 3 has an invalid length. [ 519.337655][T16170] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2811'. [ 519.398456][T15873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.502982][T15873] veth0_vlan: entered promiscuous mode [ 519.531308][T15873] veth1_vlan: entered promiscuous mode [ 519.574689][T15873] veth0_macvtap: entered promiscuous mode [ 519.602748][T15873] veth1_macvtap: entered promiscuous mode [ 519.669106][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.682005][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.692463][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.702995][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.726798][T15873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.740319][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.751701][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.762873][T15873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.775722][T15873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.787289][T15873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.807492][T15873] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.817499][T15873] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.826495][T15873] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.836011][T15873] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.952210][ T6566] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.968148][ T6566] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.986051][T16178] netlink: 'syz.3.2813': attribute type 10 has an invalid length. [ 519.994722][T16178] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2813'. [ 520.001552][ T6566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 520.023976][ T6566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 520.242911][T16196] wlan0: mtu greater than device maximum [ 520.593931][T16220] raw_sendmsg: syz.0.2821 forgot to set AF_INET. Fix it! [ 521.075770][T16237] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 521.103765][T16237] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.2829'. [ 522.664426][T16254] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.2834'. [ 523.148548][T16260] netlink: 'syz.3.2835': attribute type 13 has an invalid length. [ 523.173589][T16260] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2835'. [ 523.204703][T16260] erspan0: refused to change device tx_queue_len [ 523.232857][T16260] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 523.324154][T16265] netlink: 'syz.2.2838': attribute type 1 has an invalid length. [ 523.351897][T16269] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 523.452206][T16269] team0: Device hsr_slave_0 failed to register rx_handler [ 523.550299][T16269] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2837'. [ 524.440249][T16321] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2853'. [ 524.855322][T16346] sit0: entered promiscuous mode [ 526.578073][T16377] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.2865'. [ 526.844021][T16389] batman_adv: batadv0: adding TT local entry 06:e1:05:00:07:00 to non-existent VLAN 5 [ 527.128799][T16401] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2872'. [ 528.699279][T16458] netlink: 'syz.1.2889': attribute type 1 has an invalid length. [ 528.711399][T16458] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.2889'. [ 532.952540][ T6570] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 534.360321][T16479] netlink: 'syz.2.2894': attribute type 7 has an invalid length. [ 534.370176][T16479] netlink: 'syz.2.2894': attribute type 1 has an invalid length. [ 534.388759][T16479] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2894'. [ 538.226410][T16520] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2909'. [ 538.811901][ T5776] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 539.312504][T16545] netlink: 'syz.2.2918': attribute type 12 has an invalid length. [ 539.324241][T16545] netlink: 172344 bytes leftover after parsing attributes in process `syz.2.2918'. [ 539.425774][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2919'. [ 540.549430][T16559] netlink: 'syz.3.2922': attribute type 2 has an invalid length. [ 540.575890][T16559] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2922'. [ 540.615478][T16553] syzkaller0: entered promiscuous mode [ 540.621997][T16553] syzkaller0: entered allmulticast mode [ 540.748869][T16569] netlink: 'syz.0.2924': attribute type 10 has an invalid length. [ 540.849303][ T5774] Bluetooth: hci0: command tx timeout [ 542.695698][T16578] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2926'. [ 543.049416][T16588] mac80211_hwsim hwsim56 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 543.268236][T16595] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2931'. [ 543.752691][T16611] netlink: 'syz.2.2939': attribute type 21 has an invalid length. [ 543.787334][T16611] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2939'. [ 543.816905][T16611] netlink: 'syz.2.2939': attribute type 5 has an invalid length. [ 543.831469][T16611] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2939'. [ 544.464341][T16626] netlink: 'syz.3.2944': attribute type 29 has an invalid length. [ 544.512405][T16626] netlink: 'syz.3.2944': attribute type 3 has an invalid length. [ 544.548535][T16626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2944'. [ 544.605470][T16629] netlink: 'syz.0.2937': attribute type 10 has an invalid length. [ 545.019314][T16632] netlink: 'syz.2.2946': attribute type 10 has an invalid length. [ 545.046377][T16632] geneve0: entered promiscuous mode [ 545.163009][T16632] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 546.481330][T16655] syzkaller0: entered promiscuous mode [ 546.504373][T16655] syzkaller0: entered allmulticast mode [ 546.850055][ T6569] wlan1: Trigger new scan to find an IBSS to join [ 549.643935][ T5776] Bluetooth: hci4: command 0x0406 tx timeout [ 550.533819][T16683] syzkaller0: entered promiscuous mode [ 550.541607][T16683] syzkaller0: entered allmulticast mode [ 550.572170][T16692] bridge_slave_1: left allmulticast mode [ 550.582204][T16692] bridge_slave_1: left promiscuous mode [ 550.593286][T16692] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.645171][T16692] bridge_slave_0: left allmulticast mode [ 550.660993][T16692] bridge_slave_0: left promiscuous mode [ 550.694691][T16692] bridge0: port 1(bridge_slave_0) entered disabled state [ 550.849818][ T6566] wlan1: Trigger new scan to find an IBSS to join [ 550.954135][ T1096] wlan1: Creating new IBSS network, BSSID 32:b3:b1:8e:bd:77 [ 551.028448][T16701] netlink: 'syz.1.2965': attribute type 39 has an invalid length. [ 551.221807][T16701] hsr_slave_1 (unregistering): left promiscuous mode [ 551.356356][T16706] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.2966'. [ 554.040402][T16704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2966'. [ 554.289712][T16722] netlink: 763 bytes leftover after parsing attributes in process `syz.3.2971'. [ 555.276252][T16733] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2973'. [ 555.659156][T16745] netlink: 'syz.0.2974': attribute type 3 has an invalid length. [ 555.679903][T16745] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2974'. [ 556.572632][T16733] veth0_macvtap: left promiscuous mode [ 556.653317][T16734] sit0: entered allmulticast mode [ 556.703542][T16738] sit0: entered promiscuous mode [ 557.765116][T16778] mac80211_hwsim hwsim56 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 558.220516][T16789] mac80211_hwsim hwsim55 wlan0: left promiscuous mode [ 558.232849][T16789] mac80211_hwsim hwsim55 wlan0: left allmulticast mode [ 558.270827][T16790] mac80211_hwsim hwsim55 wlan0: entered promiscuous mode [ 558.310923][T16790] mac80211_hwsim hwsim55 wlan0: entered allmulticast mode [ 558.365875][T16795] netlink: 'syz.1.2992': attribute type 10 has an invalid length. [ 558.383696][T16795] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2992'. [ 558.413430][T16795] batman_adv: batadv0: Adding interface: veth0_vlan [ 558.420172][T16795] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.482224][T16795] batman_adv: batadv0: Interface activated: veth0_vlan [ 558.679386][T16815] netlink: 'syz.1.2997': attribute type 19 has an invalid length. [ 558.690281][T16815] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2997'. [ 558.708059][T16815] netlink: 'syz.1.2997': attribute type 3 has an invalid length. [ 558.718730][T16815] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.2997'. [ 559.236878][T16834] syzkaller0: entered promiscuous mode [ 559.242786][T16834] syzkaller0: entered allmulticast mode [ 559.761161][T16844] netlink: 'syz.2.3007': attribute type 12 has an invalid length. [ 559.947773][ T1096] wlan1: Trigger new scan to find an IBSS to join [ 561.322312][T16859] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.3010'. [ 562.725516][T16883] netlink: 'syz.2.3016': attribute type 8 has an invalid length. [ 562.733317][T16883] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3016'. [ 562.803191][T16887] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.3020'. [ 562.876216][T16890] netlink: 'syz.0.3021': attribute type 21 has an invalid length. [ 562.884865][T16890] netlink: 14544 bytes leftover after parsing attributes in process `syz.0.3021'. [ 563.027269][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.034436][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.073390][ T60] wlan1: Trigger new scan to find an IBSS to join [ 563.124677][T16892] netlink: 'syz.1.3022': attribute type 3 has an invalid length. [ 563.132577][T16892] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.3022'. [ 563.183728][T16860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.383901][T16902] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 563.395454][T16902] netlink: 21 bytes leftover after parsing attributes in process `syz.3.3025'. [ 563.405127][T16902] ksmbd: Unknown IPC event: 0, ignore. [ 563.447937][T16903] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3025'. [ 563.467368][T16902] netlink: 56863 bytes leftover after parsing attributes in process `syz.3.3025'. [ 564.185524][T16936] netlink: 'syz.2.3036': attribute type 10 has an invalid length. [ 564.308436][T16936] team0: Port device virt_wifi0 added [ 564.431913][T16951] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3040'. [ 564.582307][T16951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 564.618041][T16951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 564.657800][T16951] bond0 (unregistering): Released all slaves [ 564.941178][T16971] netlink: 'syz.0.3045': attribute type 10 has an invalid length. [ 564.961997][T16971] bridge0: port 3(team0) entered disabled state [ 564.968826][T16971] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.976652][T16971] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.086084][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 565.884787][ T6592] wlan1: Trigger new scan to find an IBSS to join [ 565.977255][ T1096] wlan1: Creating new IBSS network, BSSID d6:fe:68:5d:e0:81 [ 566.221049][T17006] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3055'. [ 566.601365][T17016] netlink: 'syz.0.3057': attribute type 10 has an invalid length. [ 566.758296][T17016] wg1: entered promiscuous mode [ 566.786070][T17016] wg1: entered allmulticast mode [ 566.791030][T17016] team0: Device wg1 is of different type [ 566.939645][T17021] netlink: 'syz.1.3059': attribute type 10 has an invalid length. [ 566.970609][T17021] team0: Device nlmon0 is of different type [ 567.006962][T17022] syzkaller0: entered promiscuous mode [ 567.012454][T17022] syzkaller0: entered allmulticast mode [ 567.791377][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3064'. [ 567.810702][T17040] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3064'. [ 567.830407][T17037] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3064'. [ 568.263519][T17055] Ÿë: port 1(ip6gretap0) entered blocking state [ 568.273763][T17055] Ÿë: port 1(ip6gretap0) entered disabled state [ 568.281397][T17055] ip6gretap0: entered allmulticast mode [ 568.339464][T17055] ip6gretap0: entered promiscuous mode [ 568.697872][T17071] netlink: 'syz.2.3070': attribute type 3 has an invalid length. [ 568.773224][T17071] netlink: 'syz.2.3070': attribute type 1 has an invalid length. [ 568.845027][T17071] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.3070'. [ 569.861109][T17078] netlink: 'syz.1.3074': attribute type 19 has an invalid length. [ 569.895184][T17078] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3074'. [ 570.445267][T17095] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3076'. [ 570.738241][T17102] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.3080'. [ 571.158507][T17117] netlink: 'syz.3.3084': attribute type 17 has an invalid length. [ 571.197804][T17117] netlink: 'syz.3.3084': attribute type 16 has an invalid length. [ 571.224245][T17117] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3084'. [ 571.284502][T17126] bond0: entered promiscuous mode [ 571.294097][T17126] bond_slave_0: entered promiscuous mode [ 571.312848][T17126] bond_slave_1: entered promiscuous mode [ 571.329118][T17126] bond0: entered allmulticast mode [ 571.349221][T17126] bond_slave_0: entered allmulticast mode [ 571.357291][T17126] bond_slave_1: entered allmulticast mode [ 571.368028][T17126] geneve0: entered allmulticast mode [ 571.662428][T17137] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 571.682008][T17137] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 571.703129][T17137] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 571.730180][T17137] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 571.757006][T17137] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 571.906330][T17138] netlink: 'syz.3.3087': attribute type 29 has an invalid length. [ 572.072563][T17142] netlink: 'syz.0.3089': attribute type 29 has an invalid length. [ 572.668584][T17156] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3092'. [ 573.259887][T17172] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.3099'. [ 573.527590][T17180] can: request_module (can-proto-0) failed. [ 573.804611][T17197] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3106'. [ 574.000681][T17197] syzkaller0: entered promiscuous mode [ 574.045141][T17197] syzkaller0: entered allmulticast mode [ 574.094233][T17204] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3107'. [ 574.149079][T17204] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 574.221701][T17210] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.247329][T17210] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 574.814529][T17210] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.835978][T17210] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 574.971116][T17220] validate_nla: 8 callbacks suppressed [ 574.971291][T17220] netlink: 'syz.1.3112': attribute type 9 has an invalid length. [ 574.987593][T17220] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.3112'. [ 575.224633][T17229] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3115'. [ 576.580317][T17228] netlink: 'syz.2.3114': attribute type 21 has an invalid length. [ 576.588990][T17228] netlink: 'syz.2.3114': attribute type 1 has an invalid length. [ 576.598400][T17229] netlink: 63719 bytes leftover after parsing attributes in process `syz.0.3115'. [ 576.830981][T17238] netlink: 'syz.2.3117': attribute type 3 has an invalid length. [ 576.840208][T17238] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.3117'. [ 576.933528][ C0] [ 576.933535][ C0] ================================ [ 576.933539][ C0] WARNING: inconsistent lock state [ 576.933553][ C0] syzkaller #0 Not tainted [ 576.933562][ C0] -------------------------------- [ 576.933567][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 576.933574][ C0] syz.0.3121/17246 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 576.933591][ C0] ffff888024f8dd20 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x17d/0x300 [ 576.933637][ C0] {INITIAL USE} state was registered at: [ 576.933643][ C0] lock_acquire+0x19e/0x420 [ 576.933660][ C0] _raw_spin_lock+0x2e/0x40 [ 576.933678][ C0] htab_lock_bucket+0x17d/0x300 [ 576.933693][ C0] htab_lru_map_update_elem+0x2c6/0x990 [ 576.933708][ C0] bpf_map_update_value+0x660/0x720 [ 576.933721][ C0] map_update_elem+0x57b/0x700 [ 576.933735][ C0] __sys_bpf+0x6b5/0x890 [ 576.933748][ C0] __x64_sys_bpf+0x7c/0x90 [ 576.933761][ C0] do_syscall_64+0x55/0xb0 [ 576.933777][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.933797][ C0] irq event stamp: 1344 [ 576.933802][ C0] hardirqs last enabled at (1343): [] syscall_enter_from_user_mode+0x25/0x80 [ 576.933828][ C0] hardirqs last disabled at (1344): [] exc_debug+0x73/0x140 [ 576.933847][ C0] softirqs last enabled at (1330): [] tipc_setsockopt+0x7aa/0x990 [ 576.933870][ C0] softirqs last disabled at (1328): [] release_sock+0x2f/0x1c0 [ 576.933891][ C0] [ 576.933891][ C0] other info that might help us debug this: [ 576.933896][ C0] Possible unsafe locking scenario: [ 576.933896][ C0] [ 576.933900][ C0] CPU0 [ 576.933903][ C0] ---- [ 576.933905][ C0] lock(&htab->lockdep_key); [ 576.933916][ C0] [ 576.933919][ C0] lock(&htab->lockdep_key); [ 576.933929][ C0] [ 576.933929][ C0] *** DEADLOCK *** [ 576.933929][ C0] [ 576.933931][ C0] no locks held by syz.0.3121/17246. [ 576.933938][ C0] [ 576.933938][ C0] stack backtrace: [ 576.933943][ C0] CPU: 0 PID: 17246 Comm: syz.0.3121 Not tainted syzkaller #0 [ 576.933958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 576.933967][ C0] Call Trace: [ 576.933973][ C0] <#DB> [ 576.933979][ C0] dump_stack_lvl+0x18c/0x250 [ 576.933997][ C0] ? show_regs_print_info+0x20/0x20 [ 576.934017][ C0] ? print_usage_bug+0x475/0x690 [ 576.934034][ C0] ? verify_lock_unused+0x18/0x140 [ 576.934050][ C0] lock_acquire+0x2c2/0x420 [ 576.934061][ C0] ? htab_lock_bucket+0x17d/0x300 [ 576.934070][ C0] ? read_lock_is_recursive+0x20/0x20 [ 576.934082][ C0] _raw_spin_lock+0x2e/0x40 [ 576.934093][ C0] ? htab_lock_bucket+0x17d/0x300 [ 576.934102][ C0] htab_lock_bucket+0x17d/0x300 [ 576.934111][ C0] ? htab_lru_map_delete_node+0x760/0x760 [ 576.934121][ C0] ? verify_lock_unused+0x18/0x140 [ 576.934130][ C0] ? jhash+0x34e/0x740 [ 576.934139][ C0] htab_lru_map_delete_elem+0x1a4/0x650 [ 576.934152][ C0] ? htab_lru_map_update_elem+0x990/0x990 [ 576.934161][ C0] ? perf_callchain+0x220/0x220 [ 576.934171][ C0] bpf_prog_69bf374aa003a95d+0x46/0x4a [ 576.934182][ C0] bpf_overflow_handler+0x1fc/0x510 [ 576.934194][ C0] ? perf_prepare_header+0x1e0/0x1e0 [ 576.934203][ C0] ? bpf_overflow_handler+0xde/0x510 [ 576.934214][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 576.934227][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 576.934237][ C0] __perf_event_overflow+0x447/0x630 [ 576.934247][ C0] perf_swevent_event+0x319/0x570 [ 576.934257][ C0] ? perf_tp_event+0x1520/0x1520 [ 576.934266][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 576.934278][ C0] perf_bp_event+0x319/0x430 [ 576.934287][ C0] ? look_up_lock_class+0x75/0x140 [ 576.934299][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 576.934308][ C0] ? rcu_is_watching+0x15/0xb0 [ 576.934319][ C0] ? lock_release+0xb5/0x8c0 [ 576.934333][ C0] ? lock_acquire+0x2c2/0x420 [ 576.934344][ C0] hw_breakpoint_exceptions_notify+0x2fb/0x670 [ 576.934355][ C0] notifier_call_chain+0x197/0x380 [ 576.934367][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 576.934377][ C0] atomic_notifier_call_chain+0xda/0x180 [ 576.934388][ C0] notify_die+0x145/0x1a0 [ 576.934398][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 576.934410][ C0] ? rcu_is_watching+0x15/0xb0 [ 576.934421][ C0] notify_debug+0x2e/0x50 [ 576.934429][ C0] exc_debug+0xde/0x140 [ 576.934439][ C0] asm_exc_debug+0x1e/0x40 [ 576.934450][ C0] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 576.934462][ C0] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 576.934470][ C0] RSP: 0018:ffffc9000473fbb0 EFLAGS: 00040206 [ 576.934477][ C0] RAX: 0000000000000000 RBX: 0000000000000038 RCX: 0000000000000038 [ 576.934488][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffc9000473fc40 [ 576.934494][ C0] RBP: ffffc9000473fdd0 R08: ffffc9000473fc77 R09: 1ffff920008e7f8e [ 576.934500][ C0] R10: dffffc0000000000 R11: fffff520008e7f8f R12: 0000200000000338 [ 576.934506][ C0] R13: dffffc0000000000 R14: ffffc9000473fc40 R15: 0000200000000300 [ 576.934516][ C0] [ 576.934519][ C0] [ 576.934521][ C0] _copy_from_user+0x8b/0xe0 [ 576.934533][ C0] ___sys_recvmsg+0x176/0x590 [ 576.934544][ C0] ? __sys_recvmsg+0x2a0/0x2a0 [ 576.934555][ C0] ? __local_bh_enable_ip+0x13a/0x1c0 [ 576.934566][ C0] ? __fget_files+0x43d/0x4b0 [ 576.934580][ C0] __x64_sys_recvmsg+0x20c/0x2e0 [ 576.934590][ C0] ? ___sys_recvmsg+0x590/0x590 [ 576.934602][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 576.934614][ C0] do_syscall_64+0x55/0xb0 [ 576.934622][ C0] ? clear_bhb_loop+0x40/0x90 [ 576.934633][ C0] ? clear_bhb_loop+0x40/0x90 [ 576.934645][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 576.934656][ C0] RIP: 0033:0x7f6bcc19ce59 [ 576.934663][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 576.934669][ C0] RSP: 002b:00007f6bccf95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 576.934678][ C0] RAX: ffffffffffffffda RBX: 00007f6bcc415fa0 RCX: 00007f6bcc19ce59 [ 576.934683][ C0] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000009 [ 576.934688][ C0] RBP: 00007f6bcc232d6f R08: 0000000000000000 R09: 0000000000000000 [ 576.934693][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.934698][ C0] R13: 00007f6bcc416038 R14: 00007f6bcc415fa0 R15: 00007ffcf5540a68 [ 576.934707][ C0] [ 576.941393][T17241] ªªªªªª: renamed from vlan0 [ 580.363928][ T5776] Bluetooth: hci2: command 0x0406 tx timeout