last executing test programs: 20.379138s ago: executing program 4 (id=8599): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x0, 0x9b, 0x1, 0x5}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(0x3) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x1, 0x4, 0x0, 0x0, 0x200020000003, 0x198a9, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x0, 0x72}, 0x40, 0x5, 0x0, 0x0, 0x3, 0x7, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, 0x0, 0xc000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={0xffffffffffffffff, r6}, 0xc) 19.686932025s ago: executing program 4 (id=8601): socketpair$unix(0x1, 0x1, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6e8, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00', 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.net/syz1\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000000001, 0x8}, 0x7602, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(r4, &(0x7f0000000080), 0x12) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000012000000000000000000"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x441a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x6}, 0x2000, 0x3, 0xffbffffe, 0x9, 0x2, 0x2, 0x40, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0xa, 0x300) r6 = socket$kcm(0x2, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={&(0x7f00000017c0)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x19}, @empty}}}], 0x20}, 0x8000) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000940)='E', 0x1}], 0x1, &(0x7f00000011c0)=ANY=[], 0x368}, 0x20044000) 19.337484582s ago: executing program 4 (id=8607): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000072"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=""/288, 0x120}], 0x1}, 0x40001012) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2c}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000000)='Gb', 0x5dc}], 0x1}, 0x480c0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x2}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r5, 0x0, 0x0}, 0x10) 19.124493437s ago: executing program 4 (id=8609): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x13, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x18, 0x35}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd0c}, 0x64) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000a80)="692b167f78d8d7bdf71c734183bd973a577b1aaa6c77cb6b1327e38b8c362455b8ba40cf3fa8ed5959b5b36ef43b7a2f5cfcfb8b4b366bb22591a3c4c495ad4d8e1e7d190f06b64137c7cafa4b57c947f8ebc8367537f6843477e847dfcebf691a6f7e45767ae698e2c837bbf04068a54f3079c7349e520aae2c3503e51784470eba8071", 0x84}, {&(0x7f0000000c40)="fa8da64ba287515d3509a84df403c0d068030f10fc5de77de05fc3b801f2572498f5b0384f58787ab1af5e77aa6aeb25654469b8de6be825eb2038b7b921d164180be9d52287b89ee4eead6d39d4f647973cec7c6ee06ac4c82a373b8db5e2deeb2a4f27904ef2f6db2fe3ca7aa662b8048c5e87bbeb2a892ffe11a08f3774192f8f2329cf63bd33894d4b92988e315fc2fe93d1b064c57e5e8ae9f4b5baeb4cf11bc3e845cf25ed65e1038a3a7d097510d484f4a418abf28095b646c0faae49dd11769da3b573c23a9c67756e0063fe1a5e9f81a8899bfdfcdf6ac699c424654180377c848d7b1027e873f077353149d2949a70", 0xf4}], 0x2}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x6, 0x7fff}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x20000002, 0xfffffffe}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x4000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200), 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000070000000000000000000047858c9699390200f045f6a74c0800851000000200000085000000050000009500b8a8fd918779cdb0e0254eaa0c2ab09bcca7c1c09dba150227ceb2c78bd63e5c9a1be0111141f7d42374da69fc0ccd7c29dc43109570f2f142a7516d26db354fab932e5f694d621e017feeb80e17995c62df08c23f2a17f2"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x4010, r2}, 0xfffffeb3) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0xe0, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000440)=[0x0, 0x0], 0x0, 0x5a, &(0x7f0000000600)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000100), &(0x7f0000000680), 0x8, 0x10d8, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) r5 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r5, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/241, 0xf1}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000000480)=""/113, 0x71}, {&(0x7f0000000540)=""/152, 0x98}], 0x4, &(0x7f00000006c0)=""/51, 0x33}, 0x10002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x200, 0x0, r3, 0x3, '\x00', r4, 0xffffffffffffffff, 0x0, 0x5, 0x1}, 0x50) 18.097240978s ago: executing program 4 (id=8614): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000440)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) r1 = socket$kcm(0x10, 0x3, 0x10) (async) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffffffffffff, 0x8001}, 0x0, 0x0, 0xc2ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000}, 0x0, 0x11, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4a, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x60, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x38}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000480)='\\:&*!\'/\x00') (async) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000980)="1400000036000b63717abc0d0ed898000500cf77", 0x14}], 0x1}, 0x0) 17.910547402s ago: executing program 4 (id=8615): socket$kcm(0x10, 0x2, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000410000000000000", @ANYRES32=r7, @ANYBLOB="00001400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r7, 0x11, 0x0, 0x6, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback=r0, r1, 0x20, 0x8, r5, @void, @value=r5, @void, @void, r11}, 0x20) r12 = openat$cgroup_int(r10, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="010000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000e12cf43c235f02b48b93691732d4ea0000000000000600000018120002d364516e0db4f62cd207a811954e8c54f030e2c61f4c0f8e01bd10d9a46be565f93e4d217cd4bfb528194ddf6397178e47afc636174a8d18c3b6670b2f0afe2d01000000a5df4e348833b313fb83d1d8498417a7404a710f4eef1ce465dad8a5a9f6f4b1e1121126774bf6f3dfc362fca880", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$inet(r9, &(0x7f0000000b40)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="45362c7d61a89fdfb2eb8015", 0xc}], 0x1}, 0xc8d0) 14.859319707s ago: executing program 0 (id=8633): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x9}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="d80000001d0081044e81f782db4400000000000002000000000000a1180015000600142603600e1208000f0000000401a80016002000014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985", 0x5c}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001600)="5c00000014006b03000000d86e6c1d0002840900000000000000822be3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bfd367b47e51f60a64c9f4d4938037e784f869526f9aff94880f4c4a6a639086a6", 0x5a}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$TUNGETFEATURES(r5, 0x5452, &(0x7f0000000000)) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f93d24fc", 0x13}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(r7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) r8 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) close(r9) 13.253739941s ago: executing program 2 (id=8634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000008000000000000000000097c5a39a233c634e2967d3eb030000000a8e0e5351107fedb058fe16e3f11cd96dded091a4a71f0bdb6884d12fca11bc5f594bd7424f740b358130569e236aeb42a8ffae76a65813b0a95b2cd5fd35c11f23cf92ed8c06e93140df70171124622ad60eaeeee4d185a159baae9ab4df1c14753ee68b7a838880066ff82301dd73835e977ad7e1f4799feb62dba8cf8d2cf1a5ff0b616cbfd0e0d38847e271aad6f6eaadc1f981e72178bd"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000008c0)={r0}, 0x4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x2, 0x30000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0xa}, 0x10b44b, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x1, 0x4004, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x8000000000000000}, 0x5000, 0x80, 0x0, 0x5, 0x1000000000000000, 0xa}, 0xffffffffffffffff, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000940)=@generic={0xa, "8ab77fa26849ff263ef30c98b353011a5990650042e2dacdc165ececece6be1862e2adacd2737d00ad6f9fa9f3d7145e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f5849f260c603dbc317f54b901ee80ea6132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x44063400, 0x0, 0x3, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x4, @perf_config_ext={0x2, 0x830d}, 0x0, 0x2, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80204d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5411, &(0x7f0000000100)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x88ddb67, 0xdb}, 0x8114, 0x0, 0x20000094, 0x0, 0xdf65, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x25, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000880)}], 0x1}, 0x4000) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000000c0)="180000003a000517d25a80648c63940d0324fc600b020000", 0x18}], 0x1, 0x0, 0x0, 0x6c000000}, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000000c0), 0x8) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r5, 0x89e1, &(0x7f0000000000)={r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000008007b6af8ff00000000b50902000f0000007b00f0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffff6f) 12.837447689s ago: executing program 0 (id=8639): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002000000000000", @ANYRES32=r0], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 12.410795998s ago: executing program 1 (id=8640): r0 = socket$kcm(0x11, 0x2, 0x300) r1 = socket$kcm(0x21, 0x2, 0x2) (async) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000100)=ANY=[@ANYRESHEX=r0, @ANYRESOCT=r1, @ANYRESHEX=r2], 0x0, 0xc3, 0x0, 0x1, 0x3, 0x10000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8", 0x0, 0x0, 0x0}, 0x38) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) (rerun: 64) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a"], 0xfe33) (async) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) (async) socket$kcm(0x10, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xfffffffffffffe00}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x0, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = socket$kcm(0x23, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c250000000000588ada"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000006000000040000000000000e0300"/45], 0x0, 0x46}, 0x28) (async) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x400c84c) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89ed, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0xfffffffffffffd53) (async) socket$kcm(0x2, 0x3, 0x84) (async) socket$kcm(0xf, 0x3, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400300}, 0x4040000) (async) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000001280)=ANY=[@ANYBLOB="620ac4ff00000000711053000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 12.408942498s ago: executing program 0 (id=8641): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0, 0x4}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x2, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181b230000000000100000010e61e0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) 9.712434145s ago: executing program 1 (id=8642): socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e25, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x48}, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) close(0x3) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100), 0x120) recvmsg$kcm(r0, &(0x7f0000001780)={0x0, 0xb0, &(0x7f0000001640), 0xb0}, 0x0) r2 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x29, 0x21, &(0x7f0000000200), 0x4) socket$kcm(0x29, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @remote}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x29, 0xb, '1'}], 0x18}, 0x0) sendmsg$inet(r2, &(0x7f0000001440)={&(0x7f00000000c0)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000180)}, {&(0x7f0000001300)="10fdc17d4f8ce0e6af68b8cbe1cce94952c52417b03eb5ec22981a565fdec584088418e8d5eabfcee1012becceb71eae9aa7dff5a6031cc18f7f89d2cb81cb95922addc50f394100aa7960b167f6610690274825b201abb60bbdc4f761f02c0ed372500761d5429a30aaf76d49cb0080ebf0e2697299c158d45caa9c6c6586f2e433d06cf6120477546055b487466ab7da29c70ab5d7ed99249e301b1ef53c3ab02f8dff2b34b5a5c74707e5cd66c626fb720ca50cb4c960510d267efc3eb251a4bb083b6ff5aa9ad3d410eed0cac838db66b35f59d7ad8d874bda3933dd721e12e6bfb8ce5e5620d12341a02855037ac0dd24ac00"/255, 0xff}], 0x2}, 0x8000) socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket$kcm(0x2, 0x922000000001, 0x106) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r3, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) 9.544050479s ago: executing program 0 (id=8644): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0, 0x5}, 0x104943, 0x400ac5d, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x7, &(0x7f0000000000), 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001f7ff04b7050000200000006a0a00fe00000000850000000b000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c5258735b467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1080084c46ea7e2b347a36f5662403e1b2be4284322a4908a0d41649872971c7c56f0979bd10b97163c066d0e1903002f46c7953ab1abdaf9de9ca3c00cb9bf4e418d07fa22f0610a70f2bdf4000200000000b0c2c125080963f63223b7b80197aa3161f45346b100000000000000000089e399f6609876b588743794298b79dc192dff048fc207c81f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be06000000000000005064caec04a367c23d9fb6a6991ddb737d527d6acb15426406991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a313e3b3ca5d3393404029e98fa883c71949a34d84030323e3d54fc5b29d27643453ad9211e3550ee5520211d9370175133f260c6882a1173ba09087f1beb5418618bc83a3becf9bb5d80efd7da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000209a028044ede964362cfb2f30a246c3b2f60000fc4ddd91da1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e58219bc54f6ad5679e7f430e6960ed048c46e1dccca05bfab6b39baf879a14d4172f1d67c83795eae0d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7073be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d7fd45e3620c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc348ef2ac3781b847611fcb0a26acafdd6d9a1b17dcb9f7c401d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb0200000000000000cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d2d8f7e1d24cabe17ad4135d8872935ceac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c106beb49a71c62df5544ef22b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f481112ab8a82247e927fb6f256830dab3671f00500d36a17790bab7d0e89e6c15314f2b963bfc8679534f6b0505c7d728326d666f39e82cfcf7e7a85df288529c349923f9a4fb882310391dd58b4cbd8def239a227724d39c3e6c40e20e07e68a22888a5c3941b7a765b92bcb37f302487bcbd93ccf3a104021ff34ddf7ffcca1a04eae963e25516a114573779b24a341dfb2e80f1f345c6d96493ffc2a18478b5bf3aab2ea59c51cf0678e1a57d0ea042d911548ff612002ddb2d54d42fbdde42b56887003d27468225b2594a05044baf314113e889468cf13dd92aa0d7744db6b56557a5adad95cb9a69d4dd60642b4b9d6d3ba7eb534b00d0fea62f0a61535dfc4da06e7f8695be614c557caed7eb0120516e1351fed7d8ffa31c8f4be364185469cfc5f25c90d71bce745dd2d58a30e0844f12c4cbbdd7a08465e665c2620d78673dfb6d9263ed7def8924cfcd48a8a3534f1a3eac9ee9f18a18106ba3d7c7a62330f5c0e98cb7982dd7bad02c8dba9c13894185bfc4bd2520b6e2043fcb3fc5eb55ecf9e6e363ea2ac40a14a6f00f0ffffa0fdb6487c51ef12c27b30255bc4f8813be88beeb5aa6f6a4151cfb90644e50630ed474df7d1635afcb1ea3f6c47b5acbba2ce5099a9387c7acb9bbd1da497611ceda25049e48ddacccbb58dddaf9a3510d65383829a51e0f41e661fa80ca1eaaa6cf0824305ba4ec80400c50ffe83ccb0e6fef321190c58aca8c7c8c6d26ff5cbc2cadebda8e1219e04f8dacffd33db1a0a2e74c9eb978d80a12d0b5327bfd053000000000000000000be0d02a14708504412fa93d335992b2983c5addc191b4a21c7b340d0536b01958e15315eb5f3f9f4992c18f666359f40295fa73284c4b607669bae75bd68c3e2b770c324a0ab26b6065d7e95a7bd80052db57506ec7cc861bf3998d07484c66630ca8173fea3f06ed1dfc70a8b90418e2dc76137e0f68cb1c8a908aef9f0f85647dba54e05028c33d94d463fb20d2e7547184b8d3611e45dff02144387f342ef9b9bf650e9d049bf65258a7bc094a6965e24611c077e1ca0891362a9d68f3ec7610c0449acf18459500f024f9b75885cd79ba32776e4a511c8a4ad922b00000000000000a9241220dfbf7d02ef507ec6fc7f5d37d835f7bed71283c431b9d8cbd9003972bf1dc6a71bedad8e19efc3edd2a7a7e555d5f3176af69920471e6e5bcb8966c813c132d65e2b99d3015e06b372e1aefaae14ee3fbc6349af362c19b59c214de66912d1a9a98d92dc197a51c29443de62caca334c46d110e50896fe50d0477771d387f40c8ef05750ca651e6e69a237dcf78666d6ab2bda1f853525494e4efdd93be38bb5fc671f8794002d7a951fd336aaf4ed1166cb459df70218c571ba1c40b028234505e5477e268326af8812c2fbb8785a223fce0a0601c2a3b58bea8c6216eadabcabe86ab46e4cd3d58ef7ce8d3c4b0bc5952e81dfc0a490d8568db6f9c51fe703c6864fae0053d2f91f49e977cdc1962dbc28c29471a72199862bc8fc6e211d13d8579cab4fba94b2b613c9b8148d05e0690a4c4ab35aabc45801d2b82081e62b23a01b58b1ffb624f63ad2246796796160cd3682374364edac52f1becb7c6eff50823b75fb2ef516ec4ec1cb20a2535b504502d744f2099674e58f2c117c980cf0d041c8ea5c4f166bab4aa5ed200ef4dcff96f7c9c1ab8c22db0f439b23b04bcd41ffc3a0e01976ca1cf43e12d7d72f3faa4979faabd62e2dc54a980eae4d5e8c6498de331c3aba1144ef1190ea6cda649d9416c4560cab2d819eac7b04c70f141754c3ffd79da363fe8859afee531710caf1b2bf5a51142f4755cbb700c28083525a9093790096cb93417f1216000000000000000000000000000040ceb244e4cae2b65a76d41793aabccd3d0c50486eae6793e1f54814a8ee2779c14ca94759266200229b58c12279817869e831cade7b09ddffffff9d93e2ad25eed43c0b9ee4fd209b5b919a42f676b9d7236fc8dd5040899d0676291407ce9ac8101dd3512f5b3ac8cf8179d1749de324000030d0f942ec4604c28d5c287d1435956784003a53eb5fe535ead8857acf0166dbd9f30a9b9c8a9b9faf1356faf269cded935b07863e4fdad8aab52686c81babd1c08f58d419b3f4687bf0c06700a2fadd413443022ea5c774ffefdd426abed08d437a4db48611fc82a18ab9f54758a1aad86d95cd186ceb55fafa3930090467b8b7bb8ae7e1c8b4b4106a381cb65fda86def4de2076dc538bb97502b4b4350e633dc0a53c2fc9a01bc5cfae0245f1fab843c633446f5f3a43226109b7dafe7815773bd6969f04cbe15236b90000000000000000000000000000000000000000000000000000ff0779b9c005da21073c6d9680d4e547cb727addb2efe11b8b3a706569f1522b57d71bb0beccab7c8fe9e1330b2f501b2ac3cf4eba7ceda6ff8a0c8b18c5e9e2f505e833217557abb257d61af8e8c473a7585436730db75da167481ab8921fe051b250f8d8ef9c8481bb28a137d15040b0181c28dfad7c17b30c452a64c43a117cb948247c33abc765a6ba695c3cea5e32a4d1ae2dcbec2ff4268e03aad15efc6004e6b3d7f0edf8b5d4ae7846a6d43c16c90b7c5dc13ac2ff0439ab693498964cad2bb533bcd25e778b7e49145c48efde42b44c01517f1a7c7707b4c4fc0900e7086e76bfe3174e808abd82286db9030f0320e2fcba8723939005347b3f744ff1973431000000000000000000000000000000000000003495d69aaf9a1d83e83511a3bf44fe753b8ad83bc34ea4d46b397e000ff267c50122aa5aaf8474ec2e57d960d963900bef84a4b3c7dd01ae4d6b5522aa8a35ae7996e298bcfe3f31a34e3e12c58cf172a4d3677a67b52041ec21ae8003aa1c9969178b1b00e4d12ac9741fd788fb6260ec043c013907523c77f8ecc20b9e2fd224ca8f21fab2b10991881e0a12f4e1c4f54b9ca7c9a0c8298d60b8b6eaa023418992d6d62b0e9faca4a3b3a805e859137cd933ef5eb8db16f159f32505725da51414562d064b551246dacd586f42d04d3fed3c087bb52ae4bc09f3846c785d1b278e661ed01fbc2415288bc9c808c4aef648d431b3029da0dec8886c3ee9cad996843d00a3b5eb54e270dd2e96c8f2fdb4c27c2d1bd467f2a14867dec67730d8a68329839d9feff688dfbe25c73f936338e7b057980da58a6303d95f17712d667d5a1066ae457ae32925ce658b559c1182a74e267da57fe25b19153f1cdebaddf3f7a3479c09f2303dff449c0513b552a75ed48215cc31264a6ff648a95daa0d599dbce303b3b5307572df30429a3b4b115cab0a018f2501272048dd9e69877535e20078e7c28a98f26ace2f6396a2398d7a266bdc15ce904f25ec7fb2434ee7b5b69bed702ba1e7ed72942f452f1a98a2d949450091075efa823b11f5f5eccd921c04c7c15a5a05750cd85b1300fc00ce275de7559e117f87cb6c3c9a000000000000"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x3f, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x48) r2 = socket$kcm(0x2, 0x5, 0x84) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040)={0xfffffff7, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080)=r3, 0x4) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r2, 0x84, 0x75, &(0x7f0000000000), 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1}, &(0x7f00000001c0), &(0x7f00000003c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0x1}, &(0x7f0000000440), &(0x7f0000000500)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x58, &(0x7f00000007c0)}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x110c230000) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x110c230005) close(r7) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r4, 0x4) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff2) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r8, r8}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="000000d2393b983f52513f000800000085000000a50000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@bloom_filter={0x1e, 0x0, 0x100008, 0x253}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001980)={r9, 0x0, 0x0}, 0x20) 9.278600465s ago: executing program 2 (id=8646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000ffffffff6111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 8.138088528s ago: executing program 3 (id=8647): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x7, 0x4, 0x12}, 0x50) r0 = socket$kcm(0x2, 0x3, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2f, 0x0, 0x0, 0x0, 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, 0x0}, 0x41) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) r2 = socket$kcm(0x2, 0x200000000000003, 0x106) setsockopt$sock_attach_bpf(r2, 0x0, 0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8916, 0x0) 8.094671369s ago: executing program 1 (id=8648): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000002f000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) 8.08909198s ago: executing program 2 (id=8649): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1e}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r0, 0x4) 7.855349344s ago: executing program 0 (id=8650): r0 = syz_clone(0x8808400, &(0x7f00000000c0)="a2c303922ca01bb98554f24a7ba753fc55613a587dcc3aa3d766ec1339611e65fd3e816cad338f0bf70550ebde7482df53ef35f5dba0d246946b300cec593cb9674b6c3411fc18682436d2b6872e03b007dafa2ff74361bc120a6f8ac2beeed461e3cdc72f7cc73d35f6bddc44a89f507642100aa68f2b1eeaff101033e1d27523ea14317fa4abf85e9f65793be4f9b87cc7935962227bab669dae9c91865ff73089744bc3e767357ceb56eda990662def4ede3c30840baeca78a8c1bb19a5ff944a9e86e5326dccc1be1a3800d603019e03c1ea3e2894dfd70d639a1023ae374e5fe42d1c6fd0f902c73494", 0xec, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000280)="3608a9edc330172e03ac34335cd2114191163d772413453cd0297bc0043823c74571c8d6d339614e3d3098177a41ea56d5") perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb8, 0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xc, 0x9}, 0x8601, 0x2000000, 0x0, 0x0, 0x8, 0x0, 0x80}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0xc0126080, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x40000140) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r5, 0x40305829, &(0x7f0000000040)) write$cgroup_pid(r5, &(0x7f0000000380)=r0, 0x12) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 7.852794815s ago: executing program 2 (id=8651): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0x6}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x18000000000002a0, 0x8, 0x0, &(0x7f0000000000)="b9ff03316844268c", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB='.'], 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000001000400850000001100000095"], &(0x7f0000002400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$TOKEN_CREATE(0x24, &(0x7f00000003c0)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000b11106488f4af24bf22e13abcd1467c53215dc807afd9294201a5244579aa79821e36b19434a98b71c2dffe3e69d4af516e8ed4ae1d7d90045af6392a378e2b9bb584817bcd1db24e60132057b1a8207506ca14cfe37163322c4ebd9283cefa87f8bd4ce2a706cf0e9e88faeda196bfffb1b01d2d8812e", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000300"/28], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x13, &(0x7f0000000600)=ANY=[], 0x0, 0x2, 0xdf, &(0x7f0000000780)=""/223, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r4}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="f7000000000001000000000000000000"], 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x0, 0x4}, 0x7603, 0x5, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x1, 0xffffffffffffffff, 0x2) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f00000001c0)={0x5, 0x3a, 0x1, 0x0, 0x41, 0x8, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x6, @perf_config_ext={0xc, 0x5}, 0x0, 0x1, 0x0, 0x4, 0x9, 0x5, 0xe, 0x0, 0x4, 0x0, 0x3ffffffffffffffc}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89f1, &(0x7f0000000080)) 7.069574651s ago: executing program 3 (id=8652): r0 = socket$kcm(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002000000000000", @ANYRES32=r0], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r0}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8936, &(0x7f0000000000)={r3}) 7.053554301s ago: executing program 1 (id=8653): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r1) r2 = socket$kcm(0x1e, 0x4, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f0000000300)={0x5, 0x80, 0x81, 0x28, 0x7f, 0x9, 0x0, 0x1b, 0x400, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0xffffde3e, 0x4, @perf_bp={&(0x7f0000000240)}, 0x100c10, 0x6e71938c, 0x1ff, 0xb, 0x4, 0xfffffffc, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffe3e}, r0, 0x9, r0, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000ffffffff6111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x9d, 0xfffffffffffffffb}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4e3f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/cgroup\x00') ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair(0x14, 0x800, 0x8, &(0x7f0000000100)) socketpair(0x1, 0x1, 0x100, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000002a00)={&(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002940)=[{&(0x7f00000003c0)="7a05f8a8528e2082ded52d90c206fff067e52eabd7af9da2c3f61bf8899a9eb2cfcb0bf5a10097edeb9bf992296f3907edbfd0a006899aaf27c36cf0b0f7828c2dd9102a82a331ce7dc045502c94e4dd1df4f7da765222e37cd250e38ac7723e1da94174ed6817d7c79a52d096078717354f68b2feec", 0x76}, {&(0x7f0000000500)="2f2e6b21506276961328c39b7c1a7087bd254905df9d5a71dbb5b9061477f18a2a9a61242650f815233acdc816b52c490fd80d95bb8d70c5ca77e2bc13ea569643bedc51cb5e6325c1a7a6c9df715c2573fdec3e11db1911a78b58ba9dee00f4491aa948df7d9c851a24a87463197e8845fce1d59979baa85a3a67a716d650c56086913b74ee18c6", 0x88}, {&(0x7f00000005c0)="7dff9595786c008bd4c182a78aff14f31b1394208d39b0d41b04e8df4ad7ddabf21a4d86631e1f016dc93bd43f60ba56166f671ca5e6f35f5711ea89c9bd0bec3c8b67ac9bd92d721c7da04e8d1f2050475c7e998c47f2d6f8a6adc8d1e67c21a55009bcae130cb38e8aaebf392240d2af", 0x71}, {&(0x7f0000000640)="1ffef3fb52372d752eb46a7a2b544a7c97031b8d80563a36d402cca13e4b4abe7714f7e5c8b3853fed97434acd9e2e6ac06819410ba1f835a780bd0b551c488f945f0fb269adacee4415765d0aa7c7145172aea06e1c88e319342acabf0f2d5a46585cb65b3d1de1166b12807b3298d732bd0022f19f259a28204e9f2d046ae3795d35ab709b6abbafdcea238e6cc3219bd0dd990de2266e67fff452d533b342020e4f9a088499685f649a669f0f8e84860387054f3458b0c0b5917f1c95fdc968659c754b", 0xc5}, {&(0x7f0000000740)="15d37d7724fba181bd0a06518934bf496a9502c468d91103dcf046bce3fbf31a5386c873de68de5c6fb9d7b5dcf79715ad009153d042f3ccb2c90c964d2c3c7e8b4517e1d347833e6019911d6b8b3f1b34ff557003c604723f03f3cc8402e3680fe52c4e456f1ac87fbd64237aac91a334e471b99df082aa3c104ca3097de016dee9f5aa746cf30f29e630a6b9f0c5e13dadc775490fc8504480ddd0f0d1931ff741f8c646d980b5176ca16295f8978fbdcb251894f2232202cc1e254942973bbd63ee16b5e231b3f2526acb67fe0c", 0xcf}, {&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000002840)="dca9ba78427412fd219a657d609abf2ccd1d6c43dcf0b3fd7028f3ce7753d96363932db0bf688b40cb9944aa3f3d880e962d448cfba7cc95d8c839333b8331b165fd8b402c6f80420f1fa2dfe8c06f33be78860781231d6a254aaab5698693508bb29edd49232858833473642081dc765dd79e8857af52f3f4dece214d", 0x7d}, {&(0x7f00000028c0)="43ac413c2c681f653cb73bd7f4c35cf735746f9c9eb1abb7eb303977a2683c5750447cd71793d635b6c1bc4b46255f43b0ad2fd7e76871a92ce59b599c99179c5cf4bd5b219bdb8f8b0a34f60cd90ab20aef5da47ccfbfabe1a47ab7670bb41eea584432a5befe7b5b13e79b", 0x6c}], 0x9}, 0x20000000) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @random="f7172475a6fd"}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r4}) 6.967274723s ago: executing program 2 (id=8654): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000a80)=ANY=[@ANYBLOB="63202a3a2a209a6d00c3dbd54fe550323e992e2876ff91035196c862972f6099ab1ae9935d44741183e513c3eba0bc07a1e410a39b3b7ffdd11449c9b3551d60bd371600fc8c959e1d03f150c380a79ee3739f7fcf74082c51a4085e18192605232b4fc049fc93c4268076f32000000000000085e69a341c602c39b9"], 0x9) (async) r2 = socket$kcm(0x2, 0x1, 0x84) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x22, &(0x7f0000000080), 0x4) (async) getpid() (async) sendmsg$unix(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x4040800) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x24, 0x0, 0x0, &(0x7f0000002d00)=""/78, 0x4e}, 0x142) (async) r5 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x9c, @mcast1, 0x4, 0xffffffff}, 0x80, 0x0}, 0x0) (async) r6 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x541b, &(0x7f0000000240)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r8 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r8, 0x40042408, r9) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000140)=[{&(0x7f00000005c0)="df", 0x34000}], 0x1}, 0x0) 6.710951719s ago: executing program 3 (id=8655): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) (async) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xe, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r3}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000000c0)={'c', ' *:* ', 'r\x00'}, 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x35}}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x37) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x16, 0xd, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) (async) sendmsg$inet(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e1f, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xe}, @multicast2}}}], 0x20}, 0x7000000) 6.609680201s ago: executing program 1 (id=8656): recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r1 = socket$kcm(0xa, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x41, &(0x7f0000000040)=r0, 0x4) (async) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x800, 0x0, 0xc2ba, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b000000000100000811000009"], 0x50) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r3}, 0x38) (async) r4 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x4, 0x3, 0x8, 0x81, 0x0, 0x7, 0x4022, 0x4, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x2}, 0x8, 0x200, 0x2, 0x5, 0xc29, 0x43a, 0x8, 0x0, 0xea40, 0x0, 0x7}, 0xffffffffffffffff, 0xf, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r4) (async) r5 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r0, 0x4000, r2}, 0x18) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) 6.407198885s ago: executing program 3 (id=8657): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r0 = socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x0, 0x9b, 0x1, 0x5}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x5}, {0x2, 0x0, 0x0, 0x8}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xd, 0x0, 0x0, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1, 0x0, 0x7}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(0x3) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x7, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0x3, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, 0x24}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, 0x0, 0xc000) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000"], 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={0xffffffffffffffff, r6}, 0xc) 4.368242018s ago: executing program 2 (id=8658): syz_clone(0x4080b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={&(0x7f0000000240), 0x6}, 0x0, 0x0, 0xc2ba, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x10001}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x30000000}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x50, 0x6000000}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x20}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0x2, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x3, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000000)=0x818) syz_clone(0x50205100, 0x0, 0x0, 0x0, 0x0, 0x0) 4.356888308s ago: executing program 3 (id=8659): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a0000ffffffff6111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 3.251250862s ago: executing program 3 (id=8660): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, @perf_config_ext, 0x10c082, 0xac5d, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000000000000000000000400000000005f00b4a56d1a641afb47a5548d0d7a2d4c9d0396db6bed09472c81cd5b59229cd3958ffea447c6d801e3c168e9134716611aee5ea8ca1a9d52ca13cb7a8d4bc1298be9bf72d9b980db271bc7e118884971d6c8e12b687a1efedb7b47379b3c369a351881049107f767f2429ea01121a0fe93f1ae8a97b2408d518bbd579842ed6f48c1d146a4519004e41e533ee2b6311ec915c38c8bfbb277b3fd8615ad4c2587925f4cfb2c58916032e5fed9a8dbb9a035ed85c3047648c38963fedecfdfa2d2a721a43c29bef1d8db5bc9a642cb"], 0x0, 0x1c, 0x0, 0x0, 0x8, 0x10000, @value=r1}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000005c9cb20800"/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x17, &(0x7f0000000840)=ANY=[@ANYBLOB="18001a9ca2aa04fc171100"/26, @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000e7ffff07850000001700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000001d00008500000086000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="240000001e006bcd9e3fe3dc6e08000007000000000000007ea60864160af36504005425", 0x24}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x102) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0xe, 0x0, &(0x7f00000002c0)="b8010045c72ce8558525bceb691f", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x25, 0x0, 0x3, 0xfffffffe}, {0x20}]}) socket$kcm(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x0, 0x20000}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x6eab22e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200002, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x11cd2d, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r5, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0xad}, 0x4400, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x31}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) close(r7) 3.001316947s ago: executing program 1 (id=8661): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) (async) socket$kcm(0x21, 0x2, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) close(r2) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) (async) ioctl$TUNGETVNETLE(r2, 0x40047459, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r2, 0x40047459, 0x0) (async) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000a00), 0x8) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a0000000b0000000080000005"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002280)={r6, &(0x7f0000001200), 0x0}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="d7000000fd40000000000000101c000000000000a0e3183ef2ac2076f59007ded99429ad1586cbd236c1d2f3a6907773a6830077c1c23de257e7d3a8e74c56c88cfe02c1dbf7793907005b9f118d68caea2dd8ac4e0500000000000000d271cf267b63f399a6dea4f4fbc484f3441d01813bbe07cd588de3a2564df1a7945060790cce9f423cdf21b89b81e320d36867004615ad04c69799f258378d6a94a6f139bd9a45440747", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="00000000020000000100"/28], 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000b40)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c80)={{r0, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c40)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ec0)={0x6, 0xf, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff8}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='syzkaller\x00', 0x8, 0x6a, &(0x7f0000000980)=""/106, 0x41000, 0x61, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000a40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000a80)={0x1, 0x6, 0x1, 0x1ff}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000cc0)=[r6, r7, r8, r9], &(0x7f0000000d00)=[{0x3, 0x5, 0xe, 0x3}, {0x0, 0x3, 0x2}, {0x3, 0x5, 0xb, 0x3}, {0x3, 0x2, 0x2, 0x1}, {0x2, 0x2, 0x8, 0x1}, {0x4, 0x1, 0x8}, {0x4, 0x4, 0x9, 0xa}, {0x1, 0x5, 0xa, 0x7}, {0x5, 0x5, 0xc, 0xc}], 0x10, 0x2}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x20e, 0x0, 0x0, 0x0, 0x0, 0x31, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x5e0}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184"], 0xfdef) (async) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000e00)=ANY=[@ANYBLOB="180500000000000000000000000000008510000006000000181000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000a60a000000000000180000002020782500000000002020207b0af8ff00000000cf510000000000000701000000feffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@bloom_filter={0x1e, 0x7, 0xffff, 0x1, 0x3000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x9}, 0x50) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xcfa4) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xcd4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000040), 0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x8000000000000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.939221829s ago: executing program 32 (id=8615): socket$kcm(0x10, 0x2, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000700)='blkio.bfq.io_service_bytes_recursive\x00', 0x26e1, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000fcfeffff8500000013000000850000005000000095"], 0x0, 0x423, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1805000000000000000000000000000085000000a8"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c00000004000000040000000410000000000000", @ANYRES32=r7, @ANYBLOB="00001400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8}, 0x38) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x3e, &(0x7f00000002c0)=r1, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r7, 0x11, 0x0, 0x6, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@fallback=r0, r1, 0x20, 0x8, r5, @void, @value=r5, @void, @void, r11}, 0x20) r12 = openat$cgroup_int(r10, &(0x7f0000000080)='cpu.weight.nice\x00', 0x2, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0100000004000000080000000100000001000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00', @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="010000000300"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x8, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000e12cf43c235f02b48b93691732d4ea0000000000000600000018120002d364516e0db4f62cd207a811954e8c54f030e2c61f4c0f8e01bd10d9a46be565f93e4d217cd4bfb528194ddf6397178e47afc636174a8d18c3b6670b2f0afe2d01000000a5df4e348833b313fb83d1d8498417a7404a710f4eef1ce465dad8a5a9f6f4b1e1121126774bf6f3dfc362fca880", @ANYRES32=r14, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r9, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) sendmsg$inet(r9, &(0x7f0000000b40)={&(0x7f0000000040)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="45362c7d61a89fdfb2eb8015", 0xc}], 0x1}, 0xc8d0) 0s ago: executing program 0 (id=8663): setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040), 0x4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001f80)=r0, 0x4) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000002f000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000040)}, 0x20) kernel console output (not intermixed with test programs): 1(veth0_to_team) entered blocking state [ 1397.396001][T29436] Ÿë: port 1(veth0_to_team) entered disabled state [ 1397.429981][T29436] device veth0_to_team entered promiscuous mode [ 1397.781070][T29458] netlink: 192 bytes leftover after parsing attributes in process `syz.3.6609'. [ 1398.188268][T29469] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1400.417668][T29512] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6627'. [ 1401.326529][T29531] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.6630'. [ 1401.437679][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1401.479758][T29536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1401.493973][T29536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1401.534412][T29536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1401.574134][T29538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1401.949568][T29553] netlink: 'syz.0.6634': attribute type 2 has an invalid length. [ 1402.012495][T29531] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6630'. [ 1402.095781][T29538] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1402.163516][T29553] device 1 entered promiscuous mode [ 1402.189255][T29542] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1402.204689][T29545] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6634'. [ 1402.392184][T29559] netlink: 'syz.3.6638': attribute type 2 has an invalid length. [ 1402.408945][T29559] netlink: 'syz.3.6638': attribute type 1 has an invalid length. [ 1402.419623][T29559] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.6638'. [ 1402.591760][T29568] netlink: 143932 bytes leftover after parsing attributes in process `syz.4.6640'. [ 1402.622262][T29571] netlink: 48100 bytes leftover after parsing attributes in process `syz.4.6640'. [ 1402.705726][T29568] netlink: zone id is out of range [ 1402.750454][T29568] netlink: zone id is out of range [ 1402.776791][T29568] netlink: zone id is out of range [ 1402.806859][T29568] netlink: zone id is out of range [ 1402.838337][T29568] netlink: zone id is out of range [ 1402.844657][T29568] netlink: zone id is out of range [ 1402.867813][T29568] netlink: zone id is out of range [ 1402.898270][T29568] netlink: zone id is out of range [ 1402.922795][T29568] netlink: zone id is out of range [ 1404.044543][T29593] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6647'. [ 1404.079011][T29593] net_ratelimit: 3544 callbacks suppressed [ 1404.079030][T29593] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1404.515194][T29609] netlink: 'syz.1.6655': attribute type 21 has an invalid length. [ 1404.736448][T29614] device ipvlan1 left promiscuous mode [ 1405.593974][T29633] netlink: 'syz.4.6660': attribute type 1 has an invalid length. [ 1405.627164][T29633] netlink: 'syz.4.6660': attribute type 1 has an invalid length. [ 1406.024327][T29642] openvswitch: netlink: Message has 6 unknown bytes. [ 1406.092706][T29643] netlink: 'syz.4.6662': attribute type 3 has an invalid length. [ 1406.110356][T29643] netlink: 'syz.4.6662': attribute type 29 has an invalid length. [ 1406.133367][T29643] netlink: 'syz.4.6662': attribute type 29 has an invalid length. [ 1406.143865][T29643] netlink: 'syz.4.6662': attribute type 29 has an invalid length. [ 1406.736874][T29651] device dummy0 entered promiscuous mode [ 1406.839571][T29651] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1409.955548][T29688] validate_nla: 2 callbacks suppressed [ 1409.955568][T29688] netlink: 'syz.2.6675': attribute type 16 has an invalid length. [ 1409.994606][T29688] __nla_validate_parse: 3 callbacks suppressed [ 1409.994626][T29688] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6675'. [ 1410.037739][T29688] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1411.126535][T29707] netlink: 'syz.2.6679': attribute type 10 has an invalid length. [ 1411.187803][T29707] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6679'. [ 1411.238391][T29707] device veth0_vlan left promiscuous mode [ 1411.268788][T29707] device veth0_vlan entered promiscuous mode [ 1411.297501][T29707] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1411.343130][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1411.367711][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1411.391562][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1411.759211][T29718] netlink: 144 bytes leftover after parsing attributes in process `syz.1.6682'. [ 1413.265725][T29728] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6685'. [ 1413.602912][T29750] netlink: 'syz.4.6693': attribute type 1 has an invalid length. [ 1413.618482][T29750] netlink: 'syz.4.6693': attribute type 3 has an invalid length. [ 1413.627142][T29750] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6693'. [ 1413.866884][T29756] delete_channel: no stack [ 1413.900478][T29758] netlink: 'syz.4.6696': attribute type 10 has an invalid length. [ 1413.961201][T29758] device wlan1 entered promiscuous mode [ 1413.999310][T29758] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1414.063530][T29758] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6696'. [ 1414.464807][T29774] netlink: 'syz.0.6700': attribute type 16 has an invalid length. [ 1414.498738][T29774] netlink: 'syz.0.6700': attribute type 3 has an invalid length. [ 1414.544736][T29774] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6700'. [ 1415.614170][T29802] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.6704'. [ 1416.483715][T29819] netlink: 'syz.1.6712': attribute type 2 has an invalid length. [ 1416.607119][T29819] netlink: 'syz.1.6712': attribute type 8 has an invalid length. [ 1416.705522][T29819] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6712'. [ 1416.827545][T29820] netlink: 'syz.1.6712': attribute type 2 has an invalid length. [ 1416.839280][T29820] netlink: 'syz.1.6712': attribute type 8 has an invalid length. [ 1416.907764][T29820] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6712'. [ 1417.889355][T23850] wlan1: Trigger new scan to find an IBSS to join [ 1418.396970][T29856] netlink: 'syz.3.6719': attribute type 10 has an invalid length. [ 1418.414472][T29856] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1418.426274][T29856] device dummy0 entered promiscuous mode [ 1418.468321][T29856] bridge0: port 3(dummy0) entered blocking state [ 1418.502746][T29856] bridge0: port 3(dummy0) entered disabled state [ 1418.555649][T29856] bridge0: port 3(dummy0) entered blocking state [ 1418.563687][T29856] bridge0: port 3(dummy0) entered forwarding state [ 1418.782844][T29862] netlink: 'syz.1.6721': attribute type 27 has an invalid length. [ 1419.163508][T29862] bond0: (slave bond_slave_0): Releasing backup interface [ 1419.788764][T29886] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6727'. [ 1420.919169][T23867] wlan1: Trigger new scan to find an IBSS to join [ 1421.832102][T23867] wlan1: Creating new IBSS network, BSSID 62:13:8b:89:f5:95 [ 1423.082771][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.089810][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.571294][T29926] netlink: 'syz.2.6737': attribute type 10 has an invalid length. [ 1423.595457][T29926] team0: Port device netdevsim0 added [ 1423.884741][T29941] netlink: 'syz.3.6739': attribute type 1 has an invalid length. [ 1424.031200][T29947] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6741'. [ 1424.556401][T29970] netlink: 'syz.1.6744': attribute type 10 has an invalid length. [ 1424.596930][T29970] team0: Cannot enslave team device to itself [ 1424.651599][T29970] netlink: 'syz.1.6744': attribute type 16 has an invalid length. [ 1424.660782][T29970] netlink: 'syz.1.6744': attribute type 25 has an invalid length. [ 1424.670346][T29970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6744'. [ 1424.738798][T29976] netlink: 'syz.4.6745': attribute type 2 has an invalid length. [ 1424.756796][T29976] netlink: 'syz.4.6745': attribute type 8 has an invalid length. [ 1424.772148][T29976] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1424.783947][T29974] netlink: 'syz.4.6745': attribute type 2 has an invalid length. [ 1424.809027][T29974] netlink: 'syz.4.6745': attribute type 8 has an invalid length. [ 1424.829723][T29974] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6745'. [ 1426.525617][T30012] netlink: 'syz.3.6755': attribute type 21 has an invalid length. [ 1426.563036][T30012] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1426.598544][T30012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6755'. [ 1427.654464][T30035] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.6760'. [ 1430.178994][T30084] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6772'. [ 1430.239466][T30085] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6772'. [ 1431.171774][T30106] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1431.177856][T30106] syzkaller1: linktype set to 786 [ 1433.888812][T30132] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.6783'. [ 1434.208434][T30148] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6786'. [ 1434.305888][T30145] IPv6: Can't replace route, no match found [ 1434.323944][T30151] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.6789'. [ 1434.534162][T30164] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1434.633655][T30164] device hsr_slave_0 left promiscuous mode [ 1434.684784][T30164] device hsr_slave_1 left promiscuous mode [ 1434.856784][T30176] validate_nla: 1 callbacks suppressed [ 1434.856839][T30176] netlink: 'syz.4.6794': attribute type 2 has an invalid length. [ 1434.879041][T30176] netlink: 10 bytes leftover after parsing attributes in process `syz.4.6794'. [ 1435.239706][ T4288] Bluetooth: hci5: ISO packet for unknown connection handle 5 [ 1436.368299][T30220] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6806'. [ 1436.449903][T30220] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6806'. [ 1438.546587][T30242] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.6817'. [ 1438.896270][T30254] netlink: 'syz.2.6819': attribute type 2 has an invalid length. [ 1438.949740][T30254] netlink: 'syz.2.6819': attribute type 9 has an invalid length. [ 1441.263395][T30291] netlink: 'syz.4.6827': attribute type 29 has an invalid length. [ 1444.230638][T30275] ªªªªª6: renamed from veth0_vlan [ 1444.238214][T30291] netlink: 'syz.4.6827': attribute type 29 has an invalid length. [ 1444.356216][T30304] ¥: port 1(bond0) entered blocking state [ 1444.378937][T30304] ¥: port 1(bond0) entered disabled state [ 1444.386339][T30304] device bond0 entered promiscuous mode [ 1444.422769][T30304] device bond_slave_1 entered promiscuous mode [ 1445.393771][T30339] netlink: 'syz.1.6837': attribute type 1 has an invalid length. [ 1445.431736][T30339] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1445.927364][T30342] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6839'. [ 1445.981112][T30346] netlink: 'syz.4.6838': attribute type 4 has an invalid length. [ 1446.003560][T30348] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 1446.011694][T30346] netlink: 'syz.4.6838': attribute type 1 has an invalid length. [ 1446.020375][T30346] netlink: 'syz.4.6838': attribute type 26 has an invalid length. [ 1446.028389][T30346] netlink: 60519 bytes leftover after parsing attributes in process `syz.4.6838'. [ 1446.038467][T30348] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 1446.047671][T30348] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 1446.076939][T30350] netlink: 'syz.2.6842': attribute type 29 has an invalid length. [ 1449.114497][T30403] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.6855'. [ 1449.186533][T30408] netlink: 16054 bytes leftover after parsing attributes in process `syz.4.6856'. [ 1450.077805][T30422] validate_nla: 1 callbacks suppressed [ 1450.077826][T30422] netlink: 'syz.3.6858': attribute type 10 has an invalid length. [ 1450.103763][T30422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.120580][T30422] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.132764][T30422] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1450.163853][T30420] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.6862'. [ 1451.071760][T30435] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6864'. [ 1452.415629][T30460] netlink: 'syz.3.6871': attribute type 29 has an invalid length. [ 1452.455022][T30460] netlink: 'syz.3.6871': attribute type 29 has an invalid length. [ 1452.487862][T30462] netlink: 'syz.3.6871': attribute type 8 has an invalid length. [ 1452.503814][T30462] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6871'. [ 1454.356413][T30479] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6878'. [ 1454.440040][T23855] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1457.127879][T30471] netlink: 'syz.1.6875': attribute type 21 has an invalid length. [ 1457.153737][T30482] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6879'. [ 1457.457307][T30504] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6882'. [ 1457.543259][T30504] bridge0: port 1(bridge_slave_0) entered disabled state [ 1458.825982][T30521] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.6887'. [ 1459.434994][T30526] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6888'. [ 1459.756888][T30537] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.6892'. [ 1459.823120][T30541] netlink: 'syz.0.6893': attribute type 27 has an invalid length. [ 1460.313908][T30522] delete_channel: no stack [ 1461.505276][T30564] netlink: 14560 bytes leftover after parsing attributes in process `syz.1.6900'. [ 1461.571656][T30563] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6899'. [ 1464.475120][T30580] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.6903'. [ 1465.015132][ T4288] Bluetooth: hci4: unexpected event 0x10 length: 151 > 1 [ 1465.016808][ T4288] Bluetooth: hci4: hardware error 0x00 [ 1465.328195][T30613] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 1465.346174][T30614] netlink: 'syz.1.6912': attribute type 1 has an invalid length. [ 1465.374803][T30613] netlink: 'syz.1.6912': attribute type 3 has an invalid length. [ 1465.404831][T30614] netlink: 'syz.1.6912': attribute type 3 has an invalid length. [ 1465.438088][T30613] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1465.467871][T30614] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6912'. [ 1465.860451][T30629] netlink: 15999 bytes leftover after parsing attributes in process `syz.4.6914'. [ 1467.078805][ T4288] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1467.554670][T30647] device syzkaller0 entered promiscuous mode [ 1468.238209][T30655] delete_channel: no stack [ 1470.811581][T30703] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.6933'. [ 1470.979070][T30705] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6934'. [ 1476.334314][T30743] netlink: 'syz.4.6941': attribute type 22 has an invalid length. [ 1476.360519][T30743] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6941'. [ 1477.084701][T30768] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1477.154447][T30768] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1477.182658][T30769] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1477.254899][T30768] netlink: 9087 bytes leftover after parsing attributes in process `syz.4.6948'. [ 1478.878946][T30788] netlink: 'syz.4.6952': attribute type 3 has an invalid length. [ 1478.887020][T30788] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1478.994814][T30788] netlink: 'syz.4.6952': attribute type 21 has an invalid length. [ 1479.011158][T30788] netlink: 'syz.4.6952': attribute type 6 has an invalid length. [ 1479.042276][T30788] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6952'. [ 1482.154889][T30812] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6956'. [ 1483.074958][T30855] netlink: 14 bytes leftover after parsing attributes in process `syz.4.6967'. [ 1483.276633][T30855] device hsr_slave_0 left promiscuous mode [ 1483.481552][T30855] device hsr_slave_1 left promiscuous mode [ 1483.800584][T30861] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1483.825748][T30861] syzkaller1: linktype set to 773 [ 1483.917770][T30862] Q±6ã×\b‹¡Y­4��: renamed from lo [ 1483.940059][T30875] netlink: 128 bytes leftover after parsing attributes in process `syz.4.6967'. [ 1483.971553][T30875] A link change request failed with some changes committed already. Interface Q±6ã×\b‹¡Y­4�� may have been left with an inconsistent configuration, please check. [ 1484.233940][T30885] netlink: 'syz.0.6972': attribute type 10 has an invalid length. [ 1484.249797][T30885] device team0 left promiscuous mode [ 1484.255642][T30885] device team_slave_1 left promiscuous mode [ 1484.267121][T30885] device geneve1 left promiscuous mode [ 1484.281947][T30885] ¥: port 1(team0) entered disabled state [ 1484.401726][T30885] 8021q: adding VLAN 0 to HW filter on device team0 [ 1484.459636][T30885] bond0: (slave team0): Enslaving as an active interface with an up link [ 1484.521353][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.527930][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.731484][T30901] netlink: 'syz.0.6977': attribute type 1 has an invalid length. [ 1484.795204][T30899] netlink: 'syz.0.6977': attribute type 10 has an invalid length. [ 1484.834468][T30899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6977'. [ 1484.896356][T30899] device dummy0 entered promiscuous mode [ 1484.928312][T30899] bridge0: port 3(dummy0) entered blocking state [ 1484.943031][T30899] bridge0: port 3(dummy0) entered disabled state [ 1484.963065][T30899] bridge0: port 3(dummy0) entered blocking state [ 1484.969698][T30899] bridge0: port 3(dummy0) entered forwarding state [ 1486.317351][T30922] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1486.481313][ T4288] Bluetooth: hci0: unexpected event 0x08 length: 15 > 4 [ 1486.586641][T30935] device syzkaller0 entered promiscuous mode [ 1487.153605][T30960] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6993'. [ 1488.375240][ T5014] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1488.524723][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 1490.403872][T30961] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6990'. [ 1490.439368][T30960] netlink: 'syz.2.6993': attribute type 10 has an invalid length. [ 1490.525506][T30974] netlink: 'syz.0.6995': attribute type 10 has an invalid length. [ 1490.722229][T30978] netlink: 'syz.3.6997': attribute type 3 has an invalid length. [ 1490.770510][T30978] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1491.877488][T31013] netlink: 'syz.4.7006': attribute type 21 has an invalid length. [ 1491.968738][T31013] netlink: 'syz.4.7006': attribute type 12 has an invalid length. [ 1492.004893][T31013] netlink: 'syz.4.7006': attribute type 13 has an invalid length. [ 1492.038778][T31013] netlink: 'syz.4.7006': attribute type 14 has an invalid length. [ 1492.046969][T31013] netlink: 'syz.4.7006': attribute type 15 has an invalid length. [ 1492.062028][T31013] netlink: 'syz.4.7006': attribute type 16 has an invalid length. [ 1492.070386][T31013] netlink: 12926 bytes leftover after parsing attributes in process `syz.4.7006'. [ 1492.087734][T31006] tipc: Started in network mode [ 1492.095670][T31006] tipc: Node identity 9215a268, cluster identity 4711 [ 1492.117857][T31006] tipc: Node number set to 2450891368 [ 1492.152189][T31017] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7007'. [ 1492.566348][T31029] netlink: 'syz.4.7009': attribute type 16 has an invalid length. [ 1492.610623][T31029] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1492.969807][T31043] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7011'. [ 1493.093593][ T4289] Bluetooth: hci2: unexpected event 0x03 length: 15 > 11 [ 1493.122928][T31046] ¥: port 1(team0) entered blocking state [ 1493.146673][T31046] ¥: port 1(team0) entered disabled state [ 1493.160570][T31046] device team0 entered promiscuous mode [ 1493.178689][T31046] device team_slave_0 entered promiscuous mode [ 1493.185176][T31046] device team_slave_1 entered promiscuous mode [ 1493.242909][T31052] device team0 left promiscuous mode [ 1493.268752][T31052] device team_slave_0 left promiscuous mode [ 1493.275659][T31052] device team_slave_1 left promiscuous mode [ 1493.311973][T31052] ¥: port 1(team0) entered disabled state [ 1493.843900][T31070] netlink: 100120 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1494.464429][T31075] tun0: tun_chr_ioctl cmd 2148553947 [ 1494.531210][T31075] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.7021'. [ 1494.672525][T31083] delete_channel: no stack [ 1494.695154][T31083] delete_channel: no stack [ 1494.717611][T31083] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7024'. [ 1494.760001][T31083] netlink: zone id is out of range [ 1494.765297][T31083] netlink: zone id is out of range [ 1494.802721][T31083] netlink: get zone limit has 8 unknown bytes [ 1494.970884][T31097] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7027'. [ 1495.410718][T31107] team0: Device wg1 is of different type [ 1495.483728][T31114] __nla_validate_parse: 2 callbacks suppressed [ 1495.483750][T31114] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7033'. [ 1495.571564][T31113] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7033'. [ 1495.962276][T31126] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7037'. [ 1496.032404][T31126] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.7037'. [ 1497.072498][T31150] netlink: 212940 bytes leftover after parsing attributes in process `syz.2.7043'. [ 1498.835475][T31178] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7052'. [ 1499.291658][T31199] validate_nla: 4 callbacks suppressed [ 1499.291679][T31199] netlink: 'syz.0.7058': attribute type 3 has an invalid length. [ 1499.359033][T31199] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1499.946206][T31196] delete_channel: no stack [ 1499.964461][T31214] netlink: 192 bytes leftover after parsing attributes in process `syz.3.7060'. [ 1500.313059][T31224] netlink: 'syz.4.7064': attribute type 3 has an invalid length. [ 1500.370602][T31223] netlink: 'syz.3.7063': attribute type 10 has an invalid length. [ 1500.411077][T31224] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.7064'. [ 1501.974579][T31251] tipc: Started in network mode [ 1501.998825][T31251] tipc: Node identity 9215a268, cluster identity 4711 [ 1502.022181][T31251] tipc: Node number set to 2450891368 [ 1502.478553][T31271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7078'. [ 1505.248204][T31291] netlink: 'syz.2.7083': attribute type 10 has an invalid length. [ 1505.341834][T31291] team0: Device nlmon0 is of different type [ 1505.939067][T31312] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7088'. [ 1506.327242][T31298] device syzkaller0 entered promiscuous mode [ 1506.353858][T31301] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7086'. [ 1507.566300][T31336] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.7090'. [ 1510.289308][T31335] tun0: tun_chr_ioctl cmd 2148553947 [ 1510.298326][T31339] netlink: 64019 bytes leftover after parsing attributes in process `syz.1.7091'. [ 1511.315261][T31365] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.7099'. [ 1511.989647][T31369] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.7101'. [ 1512.022247][T31369] netlink: zone id is out of range [ 1512.027650][T31369] netlink: zone id is out of range [ 1512.566770][T31384] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.7105'. [ 1512.864679][T31390] netlink: 'syz.0.7107': attribute type 3 has an invalid length. [ 1512.897003][T31390] netlink: 'syz.0.7107': attribute type 153 has an invalid length. [ 1512.931499][T31390] netlink: 85736 bytes leftover after parsing attributes in process `syz.0.7107'. [ 1513.488232][T31408] netlink: 'syz.3.7110': attribute type 2 has an invalid length. [ 1513.578974][T31408] netlink: 'syz.3.7110': attribute type 8 has an invalid length. [ 1513.586868][T31408] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7110'. [ 1513.777315][T31412] netlink: 183836 bytes leftover after parsing attributes in process `syz.4.7106'. [ 1514.573256][T31435] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7121'. [ 1514.635422][T31431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7115'. [ 1515.122383][T31443] netlink: 'syz.4.7123': attribute type 49 has an invalid length. [ 1515.628911][T31451] netlink: 'syz.0.7126': attribute type 2 has an invalid length. [ 1517.660083][T31479] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.7133'. [ 1517.670175][T31479] netlink: zone id is out of range [ 1517.675393][T31479] netlink: zone id is out of range [ 1517.681455][T31479] netlink: get zone limit has 8 unknown bytes [ 1520.198966][T31493] netlink: 'syz.1.7137': attribute type 10 has an invalid length. [ 1520.206874][T31493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1520.375500][ T4991] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1520.421095][T31468] netlink: 'syz.2.7131': attribute type 19 has an invalid length. [ 1520.429463][T31468] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7131'. [ 1520.449871][T31474] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7130'. [ 1520.463682][T31477] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7132'. [ 1520.474280][T31493] netlink: 'syz.1.7137': attribute type 10 has an invalid length. [ 1520.490810][T31493] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1520.539784][T31494] netlink: 'syz.1.7137': attribute type 21 has an invalid length. [ 1520.568811][T31494] netlink: 'syz.1.7137': attribute type 12 has an invalid length. [ 1520.576711][T31494] netlink: 'syz.1.7137': attribute type 13 has an invalid length. [ 1520.624787][T31494] netlink: 'syz.1.7137': attribute type 14 has an invalid length. [ 1520.633183][T31494] netlink: 'syz.1.7137': attribute type 15 has an invalid length. [ 1520.641655][T31494] netlink: 'syz.1.7137': attribute type 16 has an invalid length. [ 1520.650044][T31494] netlink: 12926 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1520.668905][T31495] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.7137'. [ 1520.695510][T31492] delete_channel: no stack [ 1520.894903][T31508] netlink: 'syz.4.7140': attribute type 10 has an invalid length. [ 1520.979414][T31508] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7140'. [ 1521.297347][T31519] netlink: 198452 bytes leftover after parsing attributes in process `syz.1.7145'. [ 1523.157999][T31578] netlink: 763 bytes leftover after parsing attributes in process `syz.1.7158'. [ 1527.701481][T31639] device 0 entered promiscuous mode [ 1527.892734][T31662] can: request_module (can-proto-0) failed. [ 1529.298107][T31691] validate_nla: 7 callbacks suppressed [ 1529.308693][T31691] netlink: 'syz.2.7188': attribute type 10 has an invalid length. [ 1529.338255][T31691] __nla_validate_parse: 3 callbacks suppressed [ 1529.338277][T31691] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7188'. [ 1529.424359][T31691] device hsr0 entered promiscuous mode [ 1529.449839][T31702] netlink: 'syz.4.7189': attribute type 10 has an invalid length. [ 1529.476255][T31702] bridge0: port 1(bridge_slave_0) entered blocking state [ 1529.483579][T31702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1529.517059][T31702] device bridge0 entered promiscuous mode [ 1529.545184][T31702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1529.927410][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1529.974254][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1529.983543][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1529.992794][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1530.002020][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1530.011402][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1530.020638][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1530.029878][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1530.039275][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1530.048424][T31719] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1531.257627][T31736] netlink: 10750 bytes leftover after parsing attributes in process `syz.1.7196'. [ 1531.659269][T31751] netlink: 'syz.0.7200': attribute type 29 has an invalid length. [ 1531.801196][T31751] netlink: 'syz.0.7200': attribute type 29 has an invalid length. [ 1534.619939][T31753] netlink: 'syz.0.7200': attribute type 29 has an invalid length. [ 1534.637723][T31755] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7202'. [ 1534.895874][T31778] netlink: 'syz.3.7208': attribute type 9 has an invalid length. [ 1534.905903][T31778] netlink: 21747 bytes leftover after parsing attributes in process `syz.3.7208'. [ 1535.127748][T31786] netlink: 'syz.2.7210': attribute type 29 has an invalid length. [ 1535.142231][T31786] netlink: 'syz.2.7210': attribute type 29 has an invalid length. [ 1535.583423][T31794] IPv6: pim6reg1: Disabled Multicast RS [ 1536.042967][T31805] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7216'. [ 1536.139722][T31808] netlink: 'syz.4.7213': attribute type 29 has an invalid length. [ 1536.199021][T31808] netlink: 'syz.4.7213': attribute type 29 has an invalid length. [ 1536.256434][T31808] netlink: 'syz.4.7213': attribute type 29 has an invalid length. [ 1536.323613][T31813] netlink: 'syz.4.7213': attribute type 29 has an invalid length. [ 1536.366097][T31808] netlink: 'syz.4.7213': attribute type 29 has an invalid length. [ 1537.107029][T31839] netlink: 'syz.1.7225': attribute type 22 has an invalid length. [ 1537.126125][T31839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7225'. [ 1537.456315][T31853] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.7228'. [ 1538.399014][T31858] netlink: 14 bytes leftover after parsing attributes in process `syz.4.7230'. [ 1538.604925][T31858] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1538.645292][T31858] device bond_slave_0 left promiscuous mode [ 1538.711451][T31858] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1538.756134][T31858] device bond_slave_1 left promiscuous mode [ 1539.392460][T31858] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1539.415757][T31858] device netdevsim0 left promiscuous mode [ 1539.426584][T31858] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1539.468296][T31858] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 1539.479540][T31858] device wlan1 left promiscuous mode [ 1539.521175][T31858] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1539.534134][T31858] device bridge0 left promiscuous mode [ 1539.542519][T31858] bridge0: port 1(bridge_slave_0) entered disabled state [ 1539.570810][T31858] bond0 (unregistering): Released all slaves [ 1540.047885][T31898] validate_nla: 1 callbacks suppressed [ 1540.047905][T31898] netlink: 'syz.1.7239': attribute type 7 has an invalid length. [ 1540.232231][T31898] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.7239'. [ 1540.576989][T31910] netlink: 'syz.1.7242': attribute type 2 has an invalid length. [ 1540.631198][T31910] netlink: 199848 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1540.751517][T31910] netlink: 'syz.1.7242': attribute type 2 has an invalid length. [ 1540.849240][T31916] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7242'. [ 1541.240028][T31917] netlink: 'syz.3.7243': attribute type 10 has an invalid length. [ 1541.651273][T31917] team0: Port device geneve1 added [ 1542.785347][T31934] netlink: 'syz.4.7248': attribute type 10 has an invalid length. [ 1543.038772][T31956] netlink: 'syz.2.7254': attribute type 2 has an invalid length. [ 1543.087992][T31956] netlink: 'syz.2.7254': attribute type 8 has an invalid length. [ 1543.148677][T31956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1543.176744][T31958] netlink: 'syz.2.7254': attribute type 2 has an invalid length. [ 1543.280899][T31958] netlink: 'syz.2.7254': attribute type 8 has an invalid length. [ 1543.309272][T31958] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1543.363553][T31974] netlink: 'syz.4.7258': attribute type 6 has an invalid length. [ 1543.398902][T31974] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7258'. [ 1543.661514][T31987] team0: Device vxcan1 is of different type [ 1543.680985][T31982] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7261'. [ 1543.864864][T31991] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7263'. [ 1543.882262][T31991] net_ratelimit: 3256 callbacks suppressed [ 1543.882300][T31991] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1544.496415][T32005] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7266'. [ 1545.163722][T32029] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.7273'. [ 1545.237366][T32023] sctp: [Deprecated]: syz.2.7270 (pid 32023) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1545.237366][T32023] Use struct sctp_sack_info instead [ 1545.271365][T32031] validate_nla: 11 callbacks suppressed [ 1545.271407][T32031] netlink: 'syz.4.7271': attribute type 16 has an invalid length. [ 1545.300416][T32031] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7271'. [ 1545.319223][T32032] delete_channel: no stack [ 1545.349024][T32032] delete_channel: no stack [ 1545.353844][T32032] delete_channel: no stack [ 1545.401180][T32032] delete_channel: no stack [ 1545.405975][T32032] delete_channel: no stack [ 1545.440381][T32032] delete_channel: no stack [ 1545.445138][T32032] delete_channel: no stack [ 1545.500129][T32032] delete_channel: no stack [ 1545.520332][T32032] delete_channel: no stack [ 1545.531722][T32032] delete_channel: no stack [ 1545.551385][T32032] delete_channel: no stack [ 1545.556177][T32032] delete_channel: no stack [ 1545.580277][T32032] delete_channel: no stack [ 1545.601417][T32032] delete_channel: no stack [ 1545.620448][T32032] delete_channel: no stack [ 1545.636009][T32032] delete_channel: no stack [ 1545.644386][T32032] delete_channel: no stack [ 1545.653763][T32032] delete_channel: no stack [ 1545.659750][T32032] delete_channel: no stack [ 1545.664535][T32032] delete_channel: no stack [ 1545.692963][T32032] delete_channel: no stack [ 1545.697558][T32032] delete_channel: no stack [ 1545.734746][T32032] delete_channel: no stack [ 1545.753786][T32032] delete_channel: no stack [ 1545.777297][T32032] delete_channel: no stack [ 1545.792707][T32032] delete_channel: no stack [ 1545.797441][T32032] delete_channel: no stack [ 1545.812385][T32032] delete_channel: no stack [ 1545.817361][T32032] delete_channel: no stack [ 1545.827277][T32032] delete_channel: no stack [ 1545.852524][T32032] delete_channel: no stack [ 1545.857210][T32032] delete_channel: no stack [ 1545.909903][T32032] delete_channel: no stack [ 1545.914638][T32032] delete_channel: no stack [ 1545.939097][T32032] delete_channel: no stack [ 1545.943839][T32032] delete_channel: no stack [ 1545.962589][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1545.970735][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.000174][T32032] delete_channel: no stack [ 1546.019926][T32032] delete_channel: no stack [ 1548.508225][T32099] netlink: 144 bytes leftover after parsing attributes in process `syz.2.7288'. [ 1549.209731][T32102] netlink: 'syz.0.7289': attribute type 3 has an invalid length. [ 1549.217564][T32102] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.7289'. [ 1549.415503][T32104] netlink: 'syz.1.7285': attribute type 3 has an invalid length. [ 1549.433671][T32110] netlink: 'syz.4.7290': attribute type 13 has an invalid length. [ 1549.478752][T32104] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7285'. [ 1549.540197][T32110] netlink: 24859 bytes leftover after parsing attributes in process `syz.4.7290'. [ 1549.625119][T32116] netlink: 'syz.2.7291': attribute type 2 has an invalid length. [ 1550.321090][T32123] netlink: 'syz.4.7294': attribute type 2 has an invalid length. [ 1550.336437][T32123] netlink: 'syz.4.7294': attribute type 8 has an invalid length. [ 1550.351796][T32123] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7294'. [ 1550.470557][T32130] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.7295'. [ 1550.678017][T32135] netlink: 'syz.3.7297': attribute type 14 has an invalid length. [ 1550.701247][T32135] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7297'. [ 1550.855521][T32139] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1550.872411][T32139] netlink: 6955 bytes leftover after parsing attributes in process `syz.4.7298'. [ 1551.602939][T32149] netlink: 'syz.1.7301': attribute type 10 has an invalid length. [ 1551.684220][T32149] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7301'. [ 1551.816229][ T4289] Bluetooth: hci5: ISO packet for unknown connection handle 55 [ 1551.855743][T32149] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1551.890421][T32149] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1551.991574][T32149] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1553.668046][T32175] netlink: 'syz.2.7306': attribute type 3 has an invalid length. [ 1553.703719][T32175] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.7306'. [ 1554.553311][T32196] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.7308'. [ 1554.638990][T32196] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1554.677304][T32195] netlink: 10 bytes leftover after parsing attributes in process `syz.4.7309'. [ 1555.867469][T32214] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7314'. [ 1556.184500][T32231] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.7319'. [ 1556.194291][T32231] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1556.236064][T32229] device syzkaller0 entered promiscuous mode [ 1558.557966][T32260] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.7328'. [ 1558.567694][T32260] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16) [ 1563.765101][T32218] device hsr0 entered promiscuous mode [ 1564.318456][T32305] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.7337'. [ 1569.728917][T32288] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1569.738276][T32287] mac80211_hwsim hwsim75 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1569.754797][T32305] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1569.797988][T32305] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1569.828664][T32305] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1569.900205][T32323] netlink: 'syz.2.7341': attribute type 10 has an invalid length. [ 1570.242048][T32323] device bridge_slave_1 entered promiscuous mode [ 1570.343132][T32323] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1570.399996][T32324] netlink: 'syz.4.7342': attribute type 10 has an invalid length. [ 1570.429278][T32324] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7342'. [ 1570.619495][T32324] team0: Port device virt_wifi0 removed [ 1570.647709][T32324] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1570.713425][T32328] netlink: 40227 bytes leftover after parsing attributes in process `syz.2.7341'. [ 1572.403514][T32387] netlink: 'syz.3.7355': attribute type 3 has an invalid length. [ 1572.509982][T32387] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7355'. [ 1572.739181][T32394] device vxcan1 entered promiscuous mode [ 1572.745146][T32394] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1573.272511][T32420] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7362'. [ 1573.854582][T32437] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1573.892274][T32437] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1573.901304][T32437] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1573.930074][T32437] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1573.940064][T32437] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1573.972545][T32437] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1574.412122][T32440] netlink: 'syz.2.7365': attribute type 10 has an invalid length. [ 1574.589858][T23867] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.783352][T23867] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.827409][T32447] netlink: 'syz.3.7368': attribute type 21 has an invalid length. [ 1574.858945][T32447] IPv6: NLM_F_CREATE should be specified when creating new route [ 1574.889513][T32447] IPv6: Can't replace route, no match found [ 1574.958174][T23867] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.996272][T32448] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7368'. [ 1575.006816][T32453] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1575.101875][T32453] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1575.117638][T32456] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1575.252427][T23867] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1575.323564][T32457] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1575.341101][T32453] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1575.373789][T32456] netlink: 'syz.4.7369': attribute type 29 has an invalid length. [ 1575.727839][T23867] device 0 left promiscuous mode [ 1575.782943][T23867] device 1 left promiscuous mode [ 1575.897656][T32436] chnl_net:caif_netlink_parms(): no params data found [ 1576.038759][T32437] Bluetooth: hci1: command 0x0409 tx timeout [ 1577.337712][T32436] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.387160][T32436] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.423992][T32436] device bridge_slave_0 entered promiscuous mode [ 1578.019070][T32436] bridge0: port 2(bridge_slave_1) entered blocking state [ 1578.033644][T32436] bridge0: port 2(bridge_slave_1) entered disabled state [ 1578.053571][T32436] device bridge_slave_1 entered promiscuous mode [ 1578.074375][T32518] netlink: 10 bytes leftover after parsing attributes in process `syz.1.7379'. [ 1578.118686][T32437] Bluetooth: hci1: command 0x041b tx timeout [ 1578.306363][T32436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1578.400020][T32436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1578.637733][T32436] team0: Port device team_slave_0 added [ 1578.791436][T32436] team0: Port device team_slave_1 added [ 1579.059477][T32436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1579.066510][T32436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1579.181291][T32436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1580.231698][T32437] Bluetooth: hci1: command 0x040f tx timeout [ 1581.050566][T32436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1581.057629][T32436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1581.097661][T32436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1581.247348][T32575] sctp: [Deprecated]: syz.1.7390 (pid 32575) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1581.247348][T32575] Use struct sctp_sack_info instead [ 1581.303062][T32436] device hsr_slave_0 entered promiscuous mode [ 1581.326040][T32436] device hsr_slave_1 entered promiscuous mode [ 1581.354220][T32575] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7390'. [ 1581.375153][T32575] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1581.408468][T32575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1581.593895][T32579] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7390'. [ 1581.610552][T32579] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1581.651048][T32579] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1582.092028][T23867] device hsr_slave_0 left promiscuous mode [ 1582.112121][T23867] device hsr_slave_1 left promiscuous mode [ 1582.148180][T23867] bridge0: port 3(dummy0) entered disabled state [ 1582.187757][T23867] bridge0: port 2(hsr0) entered disabled state [ 1582.288662][T32437] Bluetooth: hci1: command 0x0419 tx timeout [ 1582.438291][T32616] netlink: 'syz.1.7398': attribute type 3 has an invalid length. [ 1582.457132][T32616] netlink: 13435 bytes leftover after parsing attributes in process `syz.1.7398'. [ 1582.752778][T23867] device bridge_slave_0 left promiscuous mode [ 1582.764836][T23867] bridge0: port 1(bridge_slave_0) entered disabled state [ 1582.839403][T23867] device veth1_macvtap left promiscuous mode [ 1582.854582][T23867] device veth0_macvtap left promiscuous mode [ 1582.995150][T23867] team0 (unregistering): Port device geneve1 removed [ 1583.117356][T32629] netlink: 'syz.3.7402': attribute type 2 has an invalid length. [ 1583.128830][T32629] netlink: 10 bytes leftover after parsing attributes in process `syz.3.7402'. [ 1583.414282][T23867] team0 (unregistering): Port device team_slave_1 removed [ 1583.465559][T23867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1583.521382][T23867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1583.573753][T23867] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1583.803208][T23867] bond0 (unregistering): (slave team0): Releasing backup interface [ 1583.844654][T23867] bond0 (unregistering): Released all slaves [ 1583.941232][T32620] netlink: 'syz.1.7399': attribute type 21 has an invalid length. [ 1583.957345][T32626] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1583.979323][T32626] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1584.012349][T32626] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1584.113792][T32632] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1584.168885][T32633] netlink: 152 bytes leftover after parsing attributes in process `syz.4.7403'. [ 1584.866336][T32651] netlink: 'syz.3.7409': attribute type 3 has an invalid length. [ 1584.971536][T32651] netlink: 13435 bytes leftover after parsing attributes in process `syz.3.7409'. [ 1585.515938][T32436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1585.547364][T32669] netlink: 'syz.3.7412': attribute type 3 has an invalid length. [ 1585.575986][T32669] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.7412'. [ 1585.580340][T32436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1585.639499][T32436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1585.705345][T32436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1585.854979][T32676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1585.896362][T32678] netlink: 'syz.4.7415': attribute type 4 has an invalid length. [ 1586.151571][T32436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1586.266627][T23868] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1586.287959][T23868] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1586.328175][T32436] 8021q: adding VLAN 0 to HW filter on device team0 [ 1586.371994][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1586.393935][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1586.437027][T32695] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.7418'. [ 1586.450529][T23852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1586.457779][T23852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1586.522254][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1586.543434][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1586.553690][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1586.563240][T23852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1586.570466][T23852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1586.580733][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1586.608824][T32695] netlink: 'syz.1.7418': attribute type 25 has an invalid length. [ 1586.626120][T32695] netlink: 'syz.1.7418': attribute type 25 has an invalid length. [ 1586.664921][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1586.696428][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1586.748308][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1586.787972][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1586.832329][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1586.912780][T32436] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1586.951741][T32436] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1586.977081][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1586.989229][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1587.010236][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1587.030004][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1587.049217][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1587.069717][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1587.256523][T32718] netlink: 'syz.2.7422': attribute type 1 has an invalid length. [ 1587.292431][T32718] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1587.988009][T23868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1588.014950][T23868] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1588.053186][T32436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1588.145676][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1588.178863][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1588.239001][T32747] device wlan1 entered promiscuous mode [ 1588.277494][T32436] device veth0_vlan entered promiscuous mode [ 1588.300544][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1588.319987][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1588.358143][T32436] device veth1_vlan entered promiscuous mode [ 1588.382882][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1588.401580][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1588.427202][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1588.505287][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1588.534158][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1588.558276][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1588.591622][T32436] device veth0_macvtap entered promiscuous mode [ 1588.646613][T32436] device veth1_macvtap entered promiscuous mode [ 1588.693130][T32436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.709249][T32436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.723563][T32436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.735696][T32436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.778607][T32436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1588.818933][T32436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1588.857001][T32436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1588.870317][T32765] netlink: 'syz.1.7432': attribute type 3 has an invalid length. [ 1588.878158][T32765] netlink: 'syz.1.7432': attribute type 1 has an invalid length. [ 1588.901831][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1588.911644][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1588.930614][T32765] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7432'. [ 1588.940970][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1588.963491][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1588.997686][T32436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.014731][T32436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.040475][T32436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.071527][T32436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.079747][ T4289] Bluetooth: hci2: ISO packet for unknown connection handle 4 [ 1589.141472][T32436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1589.185089][T32436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1589.217360][T32436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1589.263520][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1589.278104][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1589.312399][ T311] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1589.350045][T32436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.383562][T32436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.409849][T32436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.430595][T32436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1589.454325][ T312] netlink: 'syz.3.7434': attribute type 27 has an invalid length. [ 1589.467183][ T312] netlink: 'syz.3.7434': attribute type 4 has an invalid length. [ 1589.484948][ T312] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7434'. [ 1589.843950][T23852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.862353][T23852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.967784][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1590.165389][ T332] netlink: 'syz.3.7438': attribute type 1 has an invalid length. [ 1590.235293][ T338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7438'. [ 1590.295677][ T332] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.7438'. [ 1590.319264][ T338] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7438'. [ 1590.516542][T14422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1590.538299][T14422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1590.584167][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1590.838845][T14422] wlan1: Trigger new scan to find an IBSS to join [ 1590.885531][ T350] netlink: 'syz.0.7359': attribute type 10 has an invalid length. [ 1590.911511][ T350] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7359'. [ 1590.983464][ T350] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1591.000638][ T350] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1591.062979][ T350] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1591.204140][ T365] netlink: 'syz.3.7443': attribute type 21 has an invalid length. [ 1592.155133][ T403] sock: sock_set_timeout: `syz.4.7451' (pid 403) tries to set negative timeout [ 1592.657298][ T410] netlink: 'syz.3.7452': attribute type 10 has an invalid length. [ 1592.696646][ T410] netlink: 'syz.3.7452': attribute type 4 has an invalid length. [ 1592.732146][ T410] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7452'. [ 1592.751820][ T410] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1592.789770][ T416] netlink: 'syz.3.7452': attribute type 10 has an invalid length. [ 1592.798915][ T416] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7452'. [ 1592.825491][ T416] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1592.865479][ T418] netlink: 463 bytes leftover after parsing attributes in process `syz.1.7453'. [ 1594.091091][ T455] validate_nla: 1 callbacks suppressed [ 1594.091110][ T455] netlink: 'syz.2.7460': attribute type 21 has an invalid length. [ 1594.114608][ T455] __nla_validate_parse: 2 callbacks suppressed [ 1594.114626][ T455] netlink: 176 bytes leftover after parsing attributes in process `syz.2.7460'. [ 1594.429782][ T470] netlink: 'syz.3.7464': attribute type 28 has an invalid length. [ 1594.851683][T23848] wlan1: Trigger new scan to find an IBSS to join [ 1596.816797][T23852] wlan1: Creating new IBSS network, BSSID d6:af:5c:4f:02:52 [ 1596.856217][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1597.234426][ T519] netlink: 'syz.4.7475': attribute type 10 has an invalid length. [ 1597.265898][ T519] bridge0: port 1(bridge_slave_0) entered blocking state [ 1597.273743][ T519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1597.376049][ T519] team0: Port device bridge0 added [ 1597.402752][T23852] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1598.959834][ T562] netlink: 'syz.0.7484': attribute type 10 has an invalid length. [ 1599.046299][ T562] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7484'. [ 1599.115935][ T562] device team0 entered promiscuous mode [ 1599.173157][ T562] device team_slave_0 entered promiscuous mode [ 1599.285577][ T562] device team_slave_1 entered promiscuous mode [ 1599.297613][ T562] bridge0: port 3(team0) entered blocking state [ 1599.304436][ T562] bridge0: port 3(team0) entered disabled state [ 1599.322895][ T562] bridge0: port 3(team0) entered blocking state [ 1599.329401][ T562] bridge0: port 3(team0) entered forwarding state [ 1599.361767][ T559] netlink: 'syz.0.7484': attribute type 10 has an invalid length. [ 1599.397241][ T559] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7484'. [ 1599.443947][ T564] netlink: 'syz.0.7484': attribute type 12 has an invalid length. [ 1599.482881][ T564] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7484'. [ 1600.205885][ T584] netlink: 'syz.4.7487': attribute type 28 has an invalid length. [ 1600.381996][ T600] netlink: 'syz.3.7490': attribute type 1 has an invalid length. [ 1600.442842][ T600] netlink: 'syz.3.7490': attribute type 3 has an invalid length. [ 1600.518750][ T600] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7490'. [ 1600.562790][ T606] netlink: 'syz.0.7491': attribute type 29 has an invalid length. [ 1600.683837][ T610] netlink: 'syz.0.7491': attribute type 3 has an invalid length. [ 1600.744535][ T610] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1601.337683][ T606] netlink: 'syz.0.7491': attribute type 29 has an invalid length. [ 1601.728619][ T635] netlink: 35347 bytes leftover after parsing attributes in process `syz.4.7497'. [ 1602.101630][ T644] netlink: 'syz.0.7499': attribute type 3 has an invalid length. [ 1602.129445][ T644] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7499'. [ 1602.894061][ T653] netlink: 'syz.3.7501': attribute type 2 has an invalid length. [ 1602.915643][ T653] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.7501'. [ 1603.411015][ T667] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7505'. [ 1603.458970][ T4289] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1604.146695][ T682] device syzkaller0 entered promiscuous mode [ 1604.241993][ T682] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.7508'. [ 1607.403024][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.409473][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.648284][ T700] validate_nla: 1 callbacks suppressed [ 1608.648302][ T700] netlink: 'syz.3.7510': attribute type 10 has an invalid length. [ 1609.490891][ T722] device sit0 entered promiscuous mode [ 1610.517269][ T749] netlink: 'syz.0.7521': attribute type 2 has an invalid length. [ 1611.945874][ T762] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.7523'. [ 1612.067300][ T762] netlink: zone id is out of range [ 1612.088805][ T762] netlink: zone id is out of range [ 1612.094114][ T762] netlink: zone id is out of range [ 1612.111297][ T762] netlink: zone id is out of range [ 1612.132220][ T762] netlink: zone id is out of range [ 1612.171781][ T762] netlink: zone id is out of range [ 1612.176995][ T762] netlink: zone id is out of range [ 1612.195332][ T762] netlink: zone id is out of range [ 1612.208448][ T762] netlink: zone id is out of range [ 1612.221625][ T762] netlink: zone id is out of range [ 1612.442147][ T765] netlink: 'syz.1.7525': attribute type 21 has an invalid length. [ 1612.480906][ T765] IPv6: NLM_F_CREATE should be specified when creating new route [ 1612.516191][ T765] IPv6: Can't replace route, no match found [ 1613.558394][ T799] netlink: 'syz.2.7531': attribute type 10 has an invalid length. [ 1613.941655][ T799] device syz_tun entered promiscuous mode [ 1614.023943][ T799] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1615.373722][ T835] netlink: 'syz.3.7543': attribute type 21 has an invalid length. [ 1615.383941][ T835] netlink: 'syz.3.7543': attribute type 4 has an invalid length. [ 1615.759089][ T845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7545'. [ 1615.899199][ T845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7545'. [ 1615.927559][ T853] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7545'. [ 1616.629485][ T851] : port 1(ip6gretap0) entered blocking state [ 1616.683745][ T851] : port 1(ip6gretap0) entered disabled state [ 1616.716196][ T851] device ip6gretap0 entered promiscuous mode [ 1616.753441][ T861] device ip6gretap0 left promiscuous mode [ 1616.783397][ T861] : port 1(ip6gretap0) entered disabled state [ 1617.739298][ T874] device lo entered promiscuous mode [ 1617.786366][ T874] net_ratelimit: 572 callbacks suppressed [ 1617.786406][ T874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1617.847589][ T879] netlink: 'syz.2.7553': attribute type 10 has an invalid length. [ 1617.916918][ T879] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7553'. [ 1622.204266][ T996] netlink: 'syz.3.7581': attribute type 21 has an invalid length. [ 1622.229170][ T996] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7581'. [ 1622.266091][ T1010] netlink: 'syz.2.7584': attribute type 21 has an invalid length. [ 1622.288859][ T1010] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1622.298011][ T1010] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7584'. [ 1626.207135][ T1064] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7593'. [ 1627.729799][ T1070] sctp: [Deprecated]: syz.3.7595 (pid 1070) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1627.729799][ T1070] Use struct sctp_sack_info instead [ 1628.132279][ T1080] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7598'. [ 1628.858948][ T1098] netlink: 'syz.2.7600': attribute type 21 has an invalid length. [ 1628.878782][ T1098] netlink: 'syz.2.7600': attribute type 1 has an invalid length. [ 1628.907079][ T1098] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7600'. [ 1629.170825][T23868] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1629.386098][ T1085] netlink: 'syz.3.7599': attribute type 28 has an invalid length. [ 1629.394386][ T1085] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7599'. [ 1630.259302][ T1115] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7605'. [ 1632.552153][ T1159] netlink: 'syz.2.7618': attribute type 29 has an invalid length. [ 1632.561135][ T1159] netlink: 'syz.2.7618': attribute type 29 has an invalid length. [ 1632.571821][ T1159] netlink: 'syz.2.7618': attribute type 29 has an invalid length. [ 1632.592458][ T1160] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.7616'. [ 1633.823233][ T1195] netlink: 'syz.2.7627': attribute type 10 has an invalid length. [ 1633.843700][ T1195] netlink: 65015 bytes leftover after parsing attributes in process `syz.2.7627'. [ 1634.727973][ T1227] sock: sock_timestamping_bind_phc: sock not bind to device [ 1635.630016][ T1210] device syzkaller0 entered promiscuous mode [ 1636.341567][ T1236] netlink: 'syz.0.7638': attribute type 7 has an invalid length. [ 1636.384708][ T1236] netlink: 208404 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1636.541573][ T1239] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1636.847904][T32437] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1636.871310][T32437] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1636.893440][T32437] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1636.923433][T32437] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1636.942271][T32437] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1636.958187][T32437] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1638.851363][ T1238] netlink: 'syz.3.7639': attribute type 1 has an invalid length. [ 1638.862603][ T1239] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.7638'. [ 1638.998860][ T4289] Bluetooth: hci3: command 0x0409 tx timeout [ 1639.354922][T23861] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.491346][ T1258] netlink: 'syz.0.7644': attribute type 4 has an invalid length. [ 1639.552316][ T1258] netlink: 'syz.0.7644': attribute type 3 has an invalid length. [ 1639.566362][ T1258] netlink: 153952 bytes leftover after parsing attributes in process `syz.0.7644'. [ 1639.581521][T23861] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.693686][T23861] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.911069][T23861] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.078652][T32437] Bluetooth: hci3: command 0x041b tx timeout [ 1641.101109][ T1283] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1641.124274][ T1242] chnl_net:caif_netlink_parms(): no params data found [ 1641.219693][ T1283] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.7648'. [ 1641.406945][ T1293] netlink: 'syz.1.7650': attribute type 4 has an invalid length. [ 1641.475633][ T1242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1641.490343][ T1242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1641.560789][ T1242] device bridge_slave_0 entered promiscuous mode [ 1641.642968][ T1242] bridge0: port 2(bridge_slave_1) entered blocking state [ 1641.690290][ T1242] bridge0: port 2(bridge_slave_1) entered disabled state [ 1641.757649][ T1242] device bridge_slave_1 entered promiscuous mode [ 1641.783854][ T1302] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7653'. [ 1641.925629][ T1242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1641.982577][ T1242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1642.472436][T23861] device ip6gretap0 left promiscuous mode [ 1642.488735][T23861] : port 1(ip6gretap0) entered disabled state [ 1642.507216][ T1317] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.7656'. [ 1642.602658][ T1242] team0: Port device team_slave_0 added [ 1642.961631][ T1242] team0: Port device team_slave_1 added [ 1643.158679][T32437] Bluetooth: hci3: command 0x040f tx timeout [ 1643.647436][ T1351] netlink: 'syz.1.7660': attribute type 29 has an invalid length. [ 1645.259348][T32437] Bluetooth: hci3: command 0x0419 tx timeout [ 1645.358982][ T1242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1645.366067][ T1242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.433003][ T1242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1645.461056][ T1351] netlink: 'syz.1.7660': attribute type 29 has an invalid length. [ 1645.664980][ T1242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1645.687961][ T1242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1645.760970][ T1242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1645.977607][ T1368] netlink: 184 bytes leftover after parsing attributes in process `syz.3.7663'. [ 1647.007013][ T1242] device hsr_slave_0 entered promiscuous mode [ 1647.149394][ T1242] device hsr_slave_1 entered promiscuous mode [ 1647.250691][ T1242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1647.306810][ T1242] Cannot create hsr debugfs directory [ 1647.476959][ T1390] tun0: tun_chr_ioctl cmd 2147767507 [ 1647.694554][ T1395] netlink: 'syz.2.7669': attribute type 10 has an invalid length. [ 1649.544708][ T1424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7675'. [ 1649.876296][ T1433] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.7679'. [ 1649.913220][ T1436] netlink: 'syz.0.7678': attribute type 10 has an invalid length. [ 1652.242643][ T1242] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1652.407956][ T1242] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1652.439451][ T1242] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1652.614884][T23861] device bridge_slave_0 left promiscuous mode [ 1652.621670][T23861] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.642871][T23861] device veth1_vlan left promiscuous mode [ 1653.413087][T23861] team0 (unregistering): Port device team_slave_1 removed [ 1653.494566][T23861] team0 (unregistering): Port device team_slave_0 removed [ 1654.280894][T23861] team0 (unregistering): Port device bridge0 removed [ 1654.405944][ T1242] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1654.711272][ T1516] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7695'. [ 1655.037271][ T1242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1655.109707][ T1526] netlink: 'syz.3.7696': attribute type 16 has an invalid length. [ 1655.131319][ T1526] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7696'. [ 1655.591745][ T1535] netlink: 'syz.0.7698': attribute type 3 has an invalid length. [ 1655.638296][ T1535] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7698'. [ 1656.093599][T23848] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1656.111937][T23848] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1656.165276][ T1537] netlink: 'syz.0.7698': attribute type 21 has an invalid length. [ 1656.179814][ T1537] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7698'. [ 1656.210591][ T1537] netlink: 'syz.0.7698': attribute type 4 has an invalid length. [ 1656.231922][ T1537] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7698'. [ 1656.259757][ T1242] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.351712][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1656.369866][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1656.389728][T23847] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.396984][T23847] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.472706][ T1541] netlink: 126324 bytes leftover after parsing attributes in process `syz.1.7699'. [ 1656.482953][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1656.520413][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1656.541743][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1656.571609][T23847] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.578895][T23847] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.622333][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1656.684733][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1656.705980][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1656.741529][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1656.814201][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1656.831455][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1656.850479][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1656.896592][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1656.929445][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1656.965377][ T1242] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1657.018222][ T1242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1657.060081][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1657.081894][T23847] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1657.161771][ T1556] netlink: 'syz.0.7713': attribute type 10 has an invalid length. [ 1660.147665][ T1556] team0: Device veth1_vlan failed to register rx_handler [ 1660.239323][ T1557] netlink: 'syz.0.7713': attribute type 10 has an invalid length. [ 1660.264388][ T1557] team0: Device veth1_vlan failed to register rx_handler [ 1661.439234][T23848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1661.467361][T23848] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1661.662929][ T1242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1663.497992][T23870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1663.513061][T23870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1663.613356][T23870] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1663.632413][T23870] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1663.673044][T23870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1663.706514][T23870] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1663.746901][ T1242] device veth0_vlan entered promiscuous mode [ 1663.862800][ T1242] device veth1_vlan entered promiscuous mode [ 1663.867231][ T1649] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1663.919006][ T1649] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1663.999594][ T1654] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.7721'. [ 1664.117876][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1664.130030][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1664.170732][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1664.209484][T23867] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1664.259973][ T1242] device veth0_macvtap entered promiscuous mode [ 1664.325785][ T1242] device veth1_macvtap entered promiscuous mode [ 1664.431827][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.504261][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.555914][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.638571][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.688643][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.738645][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.790395][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1664.871134][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1664.977984][ T1242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1665.007718][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1665.047914][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1665.106841][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1665.192653][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1665.256406][ T1666] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7723'. [ 1665.311542][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.396031][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.475132][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.571631][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.611519][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.660863][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.702352][ T1242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1665.749087][ T1242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1665.789333][ T1242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1665.855888][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1665.871366][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1665.931031][ T1242] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.945966][ T1691] netlink: 'syz.0.7727': attribute type 3 has an invalid length. [ 1665.960634][ T1242] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1665.978766][ T1691] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7727'. [ 1666.026851][ T1242] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.058450][ T1242] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.235906][ T1693] netlink: 'syz.3.7726': attribute type 10 has an invalid length. [ 1666.363933][ T1693] team0: Device vxcan1 is of different type [ 1666.605625][T23867] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.623224][T23867] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.653848][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1666.747389][T23861] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.773503][T23861] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.826670][T23861] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1668.251302][ T1748] netlink: 'syz.4.7736': attribute type 21 has an invalid length. [ 1668.263384][ T1748] IPv6: NLM_F_CREATE should be specified when creating new route [ 1668.290828][ T1748] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1668.298415][ T1748] IPv6: NLM_F_CREATE should be set when creating new route [ 1668.306167][ T1748] IPv6: NLM_F_CREATE should be set when creating new route [ 1668.313923][ T1748] IPv6: NLM_F_CREATE should be set when creating new route [ 1668.727935][ T1755] netlink: 'syz.2.7737': attribute type 10 has an invalid length. [ 1668.793029][ T1755] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.841443][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.847880][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1668.849956][ T1755] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.903796][ T1755] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1668.949569][ T1755] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1669.263841][ T1766] netlink: 'syz.1.7740': attribute type 21 has an invalid length. [ 1669.675338][ T1800] netlink: 'syz.0.7746': attribute type 3 has an invalid length. [ 1669.696775][ T1800] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1669.831710][ T1803] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7746'. [ 1671.337833][ T1826] netlink: 'syz.0.7753': attribute type 1 has an invalid length. [ 1671.457054][ T1834] netlink: 'syz.1.7755': attribute type 2 has an invalid length. [ 1671.505254][ T1834] device 0 entered promiscuous mode [ 1671.562929][ T1830] netlink: 'syz.4.7756': attribute type 10 has an invalid length. [ 1671.587946][ T1830] device syz_tun entered promiscuous mode [ 1671.703876][ T1830] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1671.768753][ T1845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7758'. [ 1672.843612][ T1869] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7764'. [ 1672.866934][ T1869] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7764'. [ 1672.881003][ T1869] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.7764'. [ 1673.421879][ T1878] netlink: 'syz.2.7768': attribute type 10 has an invalid length. [ 1673.633616][ T1878] device veth0_vlan left promiscuous mode [ 1673.687620][ T1878] device veth0_vlan entered promiscuous mode [ 1673.905799][ T1878] team0: Device veth0_vlan failed to register rx_handler [ 1674.317537][ T1908] netlink: 'syz.1.7774': attribute type 29 has an invalid length. [ 1674.402894][ T1889] netlink: 'syz.4.7771': attribute type 10 has an invalid length. [ 1674.438786][ T1889] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7771'. [ 1674.456353][ T1889] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1674.463128][ T1889] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1674.494960][ T1889] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1674.527359][ T1908] netlink: 'syz.1.7774': attribute type 29 has an invalid length. [ 1674.566530][ T1909] netlink: 'syz.1.7774': attribute type 29 has an invalid length. [ 1674.632347][ T1912] netlink: 'syz.1.7774': attribute type 9 has an invalid length. [ 1674.648641][ T1912] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7774'. [ 1674.667626][ T1910] netlink: 'syz.1.7774': attribute type 29 has an invalid length. [ 1674.802713][ T1915] sctp: [Deprecated]: syz.3.7776 (pid 1915) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1674.802713][ T1915] Use struct sctp_sack_info instead [ 1675.011630][ T1922] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.7779'. [ 1675.893985][ T1925] device bond0 left promiscuous mode [ 1675.912142][ T1925] device bond_slave_1 left promiscuous mode [ 1675.929946][ T1925] ¥: port 1(bond0) entered disabled state [ 1675.955940][ T1925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1675.985938][ T1925] team0: Port device bond0 added [ 1676.279843][ T1955] netlink: 76 bytes leftover after parsing attributes in process `syz.1.7786'. [ 1676.762864][ T1972] validate_nla: 1 callbacks suppressed [ 1676.762901][ T1972] netlink: 'syz.3.7792': attribute type 10 has an invalid length. [ 1676.835550][ T1972] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1676.975298][ T1972] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1677.047430][ T1972] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 1677.904944][ T2010] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.7801'. [ 1678.328759][ T2009] netlink: 76 bytes leftover after parsing attributes in process `syz.3.7802'. [ 1678.585008][ T2023] netlink: 'syz.0.7804': attribute type 21 has an invalid length. [ 1678.665019][ T2023] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7804'. [ 1678.705053][ T2023] netlink: 'syz.0.7804': attribute type 1 has an invalid length. [ 1680.486059][ T2055] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7816'. [ 1680.589244][ T2055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1681.309702][ T2082] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7820'. [ 1681.762335][ T2087] netlink: 'syz.4.7824': attribute type 10 has an invalid length. [ 1682.717291][ T2087] team0 (unregistering): Port device team_slave_0 removed [ 1682.750943][ T2087] team0 (unregistering): Port device team_slave_1 removed [ 1682.901722][ T2093] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1682.919441][ T2093] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1682.971161][ T2106] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.7826'. [ 1682.988367][ T2093] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1683.173900][ T2111] netlink: 128 bytes leftover after parsing attributes in process `syz.4.7827'. [ 1683.299035][ T2111] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1683.342604][ T2111] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1683.378657][ T2113] netlink: 'syz.2.7828': attribute type 21 has an invalid length. [ 1683.388874][ T2113] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7828'. [ 1683.758619][ T2133] netlink: 'syz.2.7831': attribute type 39 has an invalid length. [ 1683.789117][ T2131] netlink: 'syz.1.7832': attribute type 6 has an invalid length. [ 1686.361061][ T2187] netlink: 'syz.0.7842': attribute type 4 has an invalid length. [ 1686.703426][ T2195] netlink: 'syz.1.7846': attribute type 10 has an invalid length. [ 1686.763168][ T2195] device veth0_macvtap left promiscuous mode [ 1687.703863][ T2217] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1689.391059][ T2228] netlink: 'syz.2.7851': attribute type 2 has an invalid length. [ 1689.499864][ T2228] netlink: 'syz.2.7851': attribute type 3 has an invalid length. [ 1689.582630][ T2228] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7851'. [ 1692.068442][ T2211] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7850'. [ 1694.990146][ T2296] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1695.043608][ T2296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1695.058787][ T2296] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1695.123342][ T2304] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7873'. [ 1695.388764][ T2306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7877'. [ 1695.435174][ T2311] netlink: 'syz.3.7878': attribute type 4 has an invalid length. [ 1695.742777][ T2322] netlink: 'syz.1.7881': attribute type 2 has an invalid length. [ 1695.869004][ T2322] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.7881'. [ 1695.903949][ T2322] openvswitch: netlink: Key 2 has unexpected len 41210 expected 4 [ 1696.100464][ T2330] netlink: 763 bytes leftover after parsing attributes in process `syz.0.7884'. [ 1696.304100][ T2336] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1696.327621][ T2337] netlink: 64535 bytes leftover after parsing attributes in process `syz.0.7885'. [ 1696.518765][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1698.442281][ T2359] netlink: 'syz.0.7891': attribute type 10 has an invalid length. [ 1698.736787][ T2363] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7892'. [ 1699.128279][ T2375] netlink: 'syz.2.7894': attribute type 2 has an invalid length. [ 1699.527469][ T2403] netlink: 'syz.3.7900': attribute type 21 has an invalid length. [ 1700.031895][ T2415] netlink: 'syz.1.7902': attribute type 2 has an invalid length. [ 1700.169426][ T2415] __nla_validate_parse: 3 callbacks suppressed [ 1700.169491][ T2415] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7902'. [ 1700.272304][ T2419] netlink: 'syz.3.7905': attribute type 2 has an invalid length. [ 1700.339432][ T2419] netlink: 119 bytes leftover after parsing attributes in process `syz.3.7905'. [ 1700.478780][ T2423] netlink: 'syz.4.7906': attribute type 3 has an invalid length. [ 1700.486636][ T2423] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.7906'. [ 1701.570937][ T2471] netlink: 'syz.1.7917': attribute type 10 has an invalid length. [ 1701.783046][ T2488] netlink: 'syz.4.7920': attribute type 29 has an invalid length. [ 1701.895148][ T2488] netlink: 'syz.4.7920': attribute type 29 has an invalid length. [ 1701.905095][ T2491] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7920'. [ 1701.957021][ T2495] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7921'. [ 1702.939381][ T2533] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7930'. [ 1704.003953][ T2584] netlink: 'syz.0.7941': attribute type 10 has an invalid length. [ 1704.111119][ T2584] device vxcan1 entered promiscuous mode [ 1704.160442][ T2584] team0: Device vxcan1 is of different type [ 1705.212852][ T2634] delete_channel: no stack [ 1705.226730][ T2634] delete_channel: no stack [ 1705.411267][ T2639] netlink: 'syz.3.7953': attribute type 10 has an invalid length. [ 1706.463029][ T2662] netlink: 144 bytes leftover after parsing attributes in process `syz.1.7958'. [ 1706.496607][ T2662] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1706.622934][ T2662] team0: Port device team_slave_0 removed [ 1706.645826][ T2662] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1706.915143][ T4289] Bluetooth: hci3: ACL packet too small [ 1707.132319][ T2679] netlink: 'syz.0.7961': attribute type 29 has an invalid length. [ 1707.181633][ T2679] netlink: 'syz.0.7961': attribute type 29 has an invalid length. [ 1707.399946][ T2683] netlink: 'syz.1.7963': attribute type 11 has an invalid length. [ 1707.415131][ T2683] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7963'. [ 1707.445355][ T2677] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7961'. [ 1707.828010][ T4289] Bluetooth: hci0: ISO packet for unknown connection handle 3078 [ 1708.630063][ T2690] tipc: Started in network mode [ 1708.635042][ T2690] tipc: Node identity 9215a268, cluster identity 4711 [ 1708.649526][ T2690] tipc: Node number set to 2450891368 [ 1708.726594][ T2704] netlink: 'syz.3.7965': attribute type 21 has an invalid length. [ 1708.764610][ T2710] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.7968'. [ 1708.777419][ T2704] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1708.853870][ T2710] netlink: zone id is out of range [ 1708.870395][ T2704] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7965'. [ 1708.893557][ T2710] netlink: zone id is out of range [ 1708.932235][ T2710] netlink: zone id is out of range [ 1708.984564][ T2710] netlink: zone id is out of range [ 1709.032260][ T2710] netlink: zone id is out of range [ 1709.071017][ T2710] netlink: zone id is out of range [ 1709.095119][ T2710] netlink: zone id is out of range [ 1709.127413][ T2710] netlink: zone id is out of range [ 1709.815483][ T2724] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1709.884890][ T2725] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1710.885920][ T2754] netlink: 'syz.3.7978': attribute type 29 has an invalid length. [ 1710.984707][ T2754] netlink: 'syz.3.7978': attribute type 29 has an invalid length. [ 1711.208681][ T2754] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7978'. [ 1715.116927][ T2824] netlink: 'syz.0.7992': attribute type 2 has an invalid length. [ 1715.178986][ T2824] netlink: 'syz.0.7992': attribute type 1 has an invalid length. [ 1715.225264][ T2824] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.7992'. [ 1717.879638][ T2862] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7999'. [ 1718.036002][ T2852] delete_channel: no stack [ 1718.337723][ T2883] device batadv0 entered promiscuous mode [ 1720.141624][ T2923] netlink: 'syz.1.8010': attribute type 1 has an invalid length. [ 1720.173246][ T2923] netlink: 'syz.1.8010': attribute type 2 has an invalid length. [ 1720.211590][ T2923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1720.476161][ T2929] netlink: 'syz.4.8007': attribute type 2 has an invalid length. [ 1720.554267][ T2929] netlink: 'syz.4.8007': attribute type 1 has an invalid length. [ 1720.656817][ T2929] netlink: 170140 bytes leftover after parsing attributes in process `syz.4.8007'. [ 1721.236102][ T2945] syz.4.8015[2945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1721.236216][ T2945] syz.4.8015[2945] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1722.914994][ T3001] netlink: 'syz.3.8026': attribute type 2 has an invalid length. [ 1723.025155][ T3001] netlink: 'syz.3.8026': attribute type 1 has an invalid length. [ 1723.068277][ T3001] netlink: 170140 bytes leftover after parsing attributes in process `syz.3.8026'. [ 1725.766506][ T3058] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1725.869464][ T3058] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.8041'. [ 1725.914496][ T3058] netlink: zone id is out of range [ 1725.924691][ T3058] netlink: zone id is out of range [ 1725.941516][ T3058] netlink: zone id is out of range [ 1725.968553][ T3058] netlink: zone id is out of range [ 1725.974010][ T3058] netlink: zone id is out of range [ 1725.984957][ T3058] netlink: zone id is out of range [ 1726.000563][ T3058] netlink: zone id is out of range [ 1726.005767][ T3058] netlink: zone id is out of range [ 1726.072915][ T3058] netlink: zone id is out of range [ 1726.078131][ T3058] netlink: zone id is out of range [ 1726.454895][ T3090] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8046'. [ 1726.505979][ T3087] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.8046'. [ 1726.935464][ T3094] device syzkaller0 entered promiscuous mode [ 1727.142097][ T3103] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8049'. [ 1730.283444][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.290390][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.933346][ T3124] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.8058'. [ 1730.942995][ T3115] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8055'. [ 1730.973283][ T3134] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8060'. [ 1731.168744][ T3147] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1731.179072][ T3147] netlink: 'syz.1.8066': attribute type 10 has an invalid length. [ 1731.186967][ T3147] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8066'. [ 1731.219099][ T3147] device team0 entered promiscuous mode [ 1731.224747][ T3147] device team_slave_1 entered promiscuous mode [ 1731.273637][ T3147] device macvlan0 entered promiscuous mode [ 1731.347260][ T3147] device bond0 entered promiscuous mode [ 1731.391381][ T3147] device bond_slave_1 entered promiscuous mode [ 1731.411010][ T3147] 8021q: adding VLAN 0 to HW filter on device team0 [ 1731.452520][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1731.483326][ T3147] bridge0: port 3(team0) entered blocking state [ 1731.517469][ T3147] bridge0: port 3(team0) entered disabled state [ 1731.583802][ T3147] bridge0: port 3(team0) entered blocking state [ 1731.590368][ T3147] bridge0: port 3(team0) entered forwarding state [ 1731.670187][ T3147] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1731.708983][ T3155] netlink: 'syz.4.8062': attribute type 15 has an invalid length. [ 1731.727345][ T3155] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8062'. [ 1731.800054][ T3163] netlink: 'syz.4.8062': attribute type 15 has an invalid length. [ 1731.828925][ T3163] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8062'. [ 1732.019446][ T3183] netlink: 'syz.1.8069': attribute type 4 has an invalid length. [ 1732.284294][ T3191] netlink: 'syz.4.8071': attribute type 10 has an invalid length. [ 1732.854540][ T3191] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 1732.900722][ T3197] netlink: 'syz.1.8072': attribute type 2 has an invalid length. [ 1733.319941][ T3219] netlink: 'syz.0.8076': attribute type 2 has an invalid length. [ 1733.356722][ T3219] netlink: 'syz.0.8076': attribute type 11 has an invalid length. [ 1733.385679][ T3219] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8076'. [ 1734.299371][ T4289] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 1735.097069][ T3247] bridge0: port 3(dummy0) entered disabled state [ 1735.103763][ T3247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.318825][ T3250] bridge0: port 3(dummy0) entered disabled state [ 1735.396580][ T3250] device bridge_slave_0 left promiscuous mode [ 1735.446718][ T3250] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.641410][ T3250] bond0: (slave bridge0): Releasing backup interface [ 1735.677591][ T3269] netlink: 'syz.4.8087': attribute type 1 has an invalid length. [ 1735.687379][ T3269] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.8087'. [ 1736.096443][ T3274] device sit0 entered promiscuous mode [ 1736.371663][ T4289] Bluetooth: hci0: command 0x2016 tx timeout [ 1737.180191][ T3301] netlink: 'syz.1.8094': attribute type 10 has an invalid length. [ 1737.254050][ T3301] bridge0: port 3(team0) entered disabled state [ 1737.260656][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.351001][ T3301] team0: Device bridge0 is already an upper device of the team interface [ 1737.354319][ T3305] netlink: 'syz.4.8096': attribute type 2 has an invalid length. [ 1737.762973][ T3315] netlink: 'syz.1.8098': attribute type 46 has an invalid length. [ 1737.836703][ T3315] netlink: 2 bytes leftover after parsing attributes in process `syz.1.8098'. [ 1740.251969][ T3357] delete_channel: no stack [ 1741.941645][ T3401] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1742.084991][ T3402] netlink: 144 bytes leftover after parsing attributes in process `syz.4.8120'. [ 1744.366552][ T3425] netlink: 'syz.2.8125': attribute type 2 has an invalid length. [ 1744.464168][ T3425] device 0 entered promiscuous mode [ 1744.532054][ T3429] netlink: 'syz.2.8125': attribute type 21 has an invalid length. [ 1744.612536][ T3429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8125'. [ 1745.077307][ T3435] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8126'. [ 1745.087377][ T3435] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1745.126686][ T3435] net_ratelimit: 13 callbacks suppressed [ 1745.126705][ T3435] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1745.505919][ T3441] device syzkaller0 entered promiscuous mode [ 1745.524372][ T3443] netlink: 'syz.4.8128': attribute type 10 has an invalid length. [ 1745.532602][ T3443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8128'. [ 1745.542257][ T3443] device dummy0 entered promiscuous mode [ 1745.559635][ T3443] bridge0: port 3(dummy0) entered blocking state [ 1745.588716][ T3443] bridge0: port 3(dummy0) entered disabled state [ 1745.600586][ T3443] bridge0: port 3(dummy0) entered blocking state [ 1745.607190][ T3443] bridge0: port 3(dummy0) entered forwarding state [ 1750.573333][ T3510] netlink: 'syz.4.8147': attribute type 3 has an invalid length. [ 1750.607078][ T3500] netlink: 'syz.0.8153': attribute type 3 has an invalid length. [ 1750.649600][ T3510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8147'. [ 1750.691280][ T3500] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8153'. [ 1751.195877][ T3523] device syzkaller0 entered promiscuous mode [ 1751.647176][ T3515] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8149'. [ 1751.710535][ T3515] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1751.846758][ T3515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1751.913827][ T3535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8151'. [ 1758.232558][ T3570] netlink: 'syz.0.8160': attribute type 3 has an invalid length. [ 1758.268994][ T3570] netlink: 42775 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1758.663090][ T3589] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.8167'. [ 1759.713237][ T3601] netlink: 'syz.2.8166': attribute type 4 has an invalid length. [ 1759.984831][ T3619] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8169'. [ 1760.039983][ T3619] bond0: (slave bond_slave_0): Releasing backup interface [ 1760.170838][ T3619] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 1761.564156][ T3659] netlink: 26 bytes leftover after parsing attributes in process `syz.3.8181'. [ 1762.363863][ T3678] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1762.551617][ T3684] netlink: 16255 bytes leftover after parsing attributes in process `syz.4.8189'. [ 1762.709527][ T3686] bond0: (slave macvlan0): Error: Slave device does not support XDP [ 1762.844673][ T3689] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8188'. [ 1763.081092][T32437] Bluetooth: hci3: command 0x0406 tx timeout [ 1763.122110][ T3689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1763.200612][ T3689] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 1763.265668][ T3689] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1763.332527][ T3689] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1764.172994][ T3689] bond0 (unregistering): Released all slaves [ 1764.272075][ T3707] netlink: 128 bytes leftover after parsing attributes in process `syz.2.8196'. [ 1764.282146][ T3707] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1764.299084][ T3707] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1764.667278][ T3714] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1764.758976][ T3714] device hsr_slave_0 left promiscuous mode [ 1764.837087][ T3714] device hsr_slave_1 left promiscuous mode [ 1765.390075][ T3721] netlink: 10 bytes leftover after parsing attributes in process `syz.0.8199'. [ 1765.524082][ T3719] netlink: 14719 bytes leftover after parsing attributes in process `syz.4.8200'. [ 1765.789085][ T3742] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.8205'. [ 1766.203848][ T3751] netlink: 180900 bytes leftover after parsing attributes in process `syz.0.8209'. [ 1766.317441][ T3751] openvswitch: netlink: Flow actions attr not present in new flow. [ 1767.006052][ T3755] : port 1(ip6gretap0) entered blocking state [ 1767.048591][ T3755] : port 1(ip6gretap0) entered disabled state [ 1767.097144][ T3755] device ip6gretap0 entered promiscuous mode [ 1767.150067][ T3757] device ip6gretap0 left promiscuous mode [ 1767.167157][ T3757] : port 1(ip6gretap0) entered disabled state [ 1767.637550][ T3767] netlink: 'syz.0.8213': attribute type 2 has an invalid length. [ 1767.758033][ T3770] netlink: 'syz.0.8213': attribute type 2 has an invalid length. [ 1767.945030][ T3773] netlink: 'syz.0.8213': attribute type 10 has an invalid length. [ 1768.185245][ T3773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8213'. [ 1769.234069][ T3767] device 0 entered promiscuous mode [ 1769.254240][ T3773] netlink: 'syz.0.8213': attribute type 10 has an invalid length. [ 1769.268753][ T3773] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8213'. [ 1769.323863][ T3770] device 1 entered promiscuous mode [ 1769.422353][ T3786] netlink: 'syz.3.8217': attribute type 17 has an invalid length. [ 1769.461238][ T3786] netlink: 'syz.3.8217': attribute type 16 has an invalid length. [ 1769.496583][ T3786] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8217'. [ 1769.619842][ T3799] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1770.108841][ T3807] netlink: 'syz.3.8223': attribute type 15 has an invalid length. [ 1770.116795][ T3807] netlink: 'syz.3.8223': attribute type 7 has an invalid length. [ 1770.163124][ T3810] netlink: 'syz.3.8223': attribute type 15 has an invalid length. [ 1770.189643][ T3810] netlink: 'syz.3.8223': attribute type 7 has an invalid length. [ 1772.360580][ T3840] netlink: 143932 bytes leftover after parsing attributes in process `syz.0.8230'. [ 1772.481134][ T3840] netlink: zone id is out of range [ 1772.486355][ T3840] netlink: zone id is out of range [ 1772.491714][ T3840] netlink: zone id is out of range [ 1772.497136][ T3840] netlink: zone id is out of range [ 1772.528601][ T3840] netlink: zone id is out of range [ 1772.533829][ T3840] netlink: zone id is out of range [ 1772.566315][ T3840] netlink: zone id is out of range [ 1772.592552][ T3840] netlink: zone id is out of range [ 1772.597886][ T3840] netlink: zone id is out of range [ 1772.638592][ T3840] netlink: zone id is out of range [ 1774.119216][ T3873] delete_channel: no stack [ 1776.472686][ T3902] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.8246'. [ 1776.504299][ T3900] netlink: 'syz.2.8243': attribute type 10 has an invalid length. [ 1776.532855][ T3900] device vlan0 entered promiscuous mode [ 1776.597566][ T3902] sysfs: cannot create duplicate filename '/class/ieee80211/.! 5‚Á7>7H€' [ 1776.629728][ T3902] CPU: 1 PID: 3902 Comm: syz.1.8246 Not tainted syzkaller #0 [ 1776.637227][ T3902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1776.647350][ T3902] Call Trace: [ 1776.650693][ T3902] [ 1776.653683][ T3902] dump_stack_lvl+0x188/0x24e [ 1776.658443][ T3902] ? show_regs_print_info+0x12/0x12 [ 1776.663750][ T3902] ? load_image+0x410/0x410 [ 1776.668346][ T3902] sysfs_warn_dup+0x8a/0xa0 [ 1776.672957][ T3902] sysfs_do_create_link_sd+0xc0/0x110 [ 1776.678435][ T3902] device_add+0x83b/0x1050 [ 1776.682936][ T3902] wiphy_register+0x1d8b/0x2aa0 [ 1776.687935][ T3902] ? cfg80211_event_work+0x40/0x40 [ 1776.693091][ T3902] ? minstrel_ht_alloc+0x894/0xa20 [ 1776.698254][ T3902] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 1776.704377][ T3902] ieee80211_register_hw+0x2e33/0x3b00 [ 1776.709906][ T3902] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 1776.716313][ T3902] ? ieee80211_register_hw+0xf61/0x3b00 [ 1776.721911][ T3902] ? ieee80211_register_hw+0xf61/0x3b00 [ 1776.727520][ T3902] ? ieee80211_tasklet_handler+0x20/0x20 [ 1776.733191][ T3902] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1776.739115][ T3902] ? __debug_object_init+0xed/0x440 [ 1776.744436][ T3902] ? memset+0x1e/0x40 [ 1776.748454][ T3902] ? __hrtimer_init+0x189/0x270 [ 1776.753347][ T3902] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 1776.759126][ T3902] ? memcpy+0x3c/0x60 [ 1776.763140][ T3902] hwsim_new_radio_nl+0xab7/0xc90 [ 1776.768219][ T3902] genl_family_rcv_msg_doit+0x22f/0x350 [ 1776.773805][ T3902] ? end_current_label_crit_section+0x170/0x170 [ 1776.780094][ T3902] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 1776.786029][ T3902] ? bpf_lsm_capable+0x5/0x10 [ 1776.790742][ T3902] ? security_capable+0x85/0xb0 [ 1776.795636][ T3902] genl_rcv_msg+0x601/0x790 [ 1776.800179][ T3902] ? genl_bind+0x360/0x360 [ 1776.804627][ T3902] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 1776.811001][ T3902] netlink_rcv_skb+0x1ef/0x440 [ 1776.815799][ T3902] ? genl_bind+0x360/0x360 [ 1776.820253][ T3902] ? netlink_ack+0x1160/0x1160 [ 1776.825074][ T3902] ? down_read+0x1a8/0x2d0 [ 1776.829531][ T3902] genl_rcv+0x24/0x40 [ 1776.833551][ T3902] netlink_unicast+0x7ad/0x920 [ 1776.838386][ T3902] netlink_sendmsg+0x8ad/0xbd0 [ 1776.843197][ T3902] ? netlink_getsockopt+0x550/0x550 [ 1776.848455][ T3902] ? apparmor_socket_sendmsg+0x8a/0x330 [ 1776.854047][ T3902] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 1776.859363][ T3902] ? security_socket_sendmsg+0x7c/0xa0 [ 1776.864885][ T3902] ? netlink_getsockopt+0x550/0x550 [ 1776.870116][ T3902] ____sys_sendmsg+0x5ed/0x9a0 [ 1776.874921][ T3902] ? __sys_sendmsg_sock+0x30/0x30 [ 1776.879972][ T3902] ? __import_iovec+0x306/0x510 [ 1776.884953][ T3902] ? import_iovec+0x6f/0xa0 [ 1776.889503][ T3902] ___sys_sendmsg+0x2a2/0x360 [ 1776.894217][ T3902] ? __sys_sendmsg+0x2a0/0x2a0 [ 1776.899052][ T3902] __se_sys_sendmsg+0x1c3/0x2b0 [ 1776.903948][ T3902] ? __x64_sys_sendmsg+0x80/0x80 [ 1776.908943][ T3902] do_syscall_64+0x4c/0xa0 [ 1776.913390][ T3902] ? clear_bhb_loop+0x60/0xb0 [ 1776.918102][ T3902] ? clear_bhb_loop+0x60/0xb0 [ 1776.922855][ T3902] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1776.928783][ T3902] RIP: 0033:0x7f6d6379e159 [ 1776.933228][ T3902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1776.952867][ T3902] RSP: 002b:00007f6d645d0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1776.961323][ T3902] RAX: ffffffffffffffda RBX: 00007f6d63a25fa0 RCX: 00007f6d6379e159 [ 1776.969330][ T3902] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1776.977328][ T3902] RBP: 00007f6d6383506b R08: 0000000000000000 R09: 0000000000000000 [ 1776.985341][ T3902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1776.993347][ T3902] R13: 00007f6d63a26038 R14: 00007f6d63a25fa0 R15: 00007ffffe00b068 [ 1777.001375][ T3902] [ 1777.197079][ T3907] device syzkaller0 entered promiscuous mode [ 1784.365859][ T3966] netlink: 172 bytes leftover after parsing attributes in process `syz.2.8258'. [ 1784.918299][ T3988] netlink: 'syz.2.8264': attribute type 30 has an invalid length. [ 1785.116989][ T3991] netlink: 'syz.0.8265': attribute type 15 has an invalid length. [ 1785.157432][ T3991] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8265'. [ 1786.882381][ T4008] net_ratelimit: 3660 callbacks suppressed [ 1786.882429][ T4008] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1786.896721][ T4008] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1787.594534][ T4015] netlink: 'syz.2.8272': attribute type 21 has an invalid length. [ 1787.685941][ T4022] tap0: tun_chr_ioctl cmd 1074025676 [ 1787.698535][ T4022] tap0: owner set to 0 [ 1787.883958][ T4034] netlink: 'syz.1.8278': attribute type 10 has an invalid length. [ 1787.892656][ T4034] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8278'. [ 1787.910321][ T4034] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1788.146415][ T4034] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1788.723366][ T4044] netlink: 'syz.0.8281': attribute type 3 has an invalid length. [ 1788.737400][ T4044] netlink: 118424 bytes leftover after parsing attributes in process `syz.0.8281'. [ 1788.779062][ T4049] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8283'. [ 1788.989478][ T4058] netlink: 'syz.3.8286': attribute type 29 has an invalid length. [ 1789.058314][ T4058] netlink: 'syz.3.8286': attribute type 29 has an invalid length. [ 1789.153008][ T4062] netlink: 'syz.3.8286': attribute type 29 has an invalid length. [ 1790.299972][T32437] Bluetooth: hci3: unexpected event 0x03 length: 15 > 11 [ 1790.449058][ T4090] netlink: 'syz.0.8292': attribute type 3 has an invalid length. [ 1790.520378][ T4090] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.8292'. [ 1790.542689][ T4092] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8293'. [ 1791.728847][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.735342][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.712604][ T4116] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8299'. [ 1793.742726][ T4116] netlink: 'syz.4.8299': attribute type 12 has an invalid length. [ 1793.778928][ T4116] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8299'. [ 1794.112247][ T4118] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.8302'. [ 1795.611635][ T4153] netlink: 'syz.1.8308': attribute type 29 has an invalid length. [ 1795.632012][ T4152] netlink: 'syz.3.8307': attribute type 10 has an invalid length. [ 1795.717202][ T4152] team0 (unregistering): Port device team_slave_0 removed [ 1795.782938][ T4152] team0 (unregistering): Port device team_slave_1 removed [ 1795.831780][ T4152] team0 (unregistering): Port device geneve1 removed [ 1795.896246][ T4153] netlink: 'syz.1.8308': attribute type 29 has an invalid length. [ 1796.386252][ T4184] netlink: 'syz.3.8316': attribute type 29 has an invalid length. [ 1796.420501][ T4184] netlink: 'syz.3.8316': attribute type 29 has an invalid length. [ 1796.579002][ T4186] netlink: 'syz.3.8316': attribute type 29 has an invalid length. [ 1797.708907][ T4193] netlink: 'syz.2.8319': attribute type 10 has an invalid length. [ 1797.833973][ T4193] team0: Device veth1_vlan failed to register rx_handler [ 1799.156033][ T4255] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1799.218382][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1799.260374][ T4255] netlink: 33 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1799.285477][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1799.333673][ T4255] netlink: 33 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1799.370965][ T4255] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1799.393300][ T4255] netlink: 33 bytes leftover after parsing attributes in process `syz.1.8334'. [ 1800.749573][ T4284] netlink: 'syz.1.8339': attribute type 10 has an invalid length. [ 1800.919568][ T4284] device gre0 entered promiscuous mode [ 1800.925481][ T4284] team0: Device gre0 is of different type [ 1801.164524][ T4287] netlink: 'syz.1.8339': attribute type 27 has an invalid length. [ 1801.210444][ T4287] netlink: 'syz.1.8339': attribute type 4 has an invalid length. [ 1801.218270][ T4287] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8339'. [ 1801.289661][ T4293] netlink: 'syz.2.8341': attribute type 21 has an invalid length. [ 1801.305281][ T4297] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8342'. [ 1801.799090][ T4308] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8345'. [ 1803.313831][ T4338] netlink: 'syz.1.8355': attribute type 13 has an invalid length. [ 1804.216300][ T4346] netlink: 'syz.0.8357': attribute type 10 has an invalid length. [ 1804.256098][ T4350] __nla_validate_parse: 2 callbacks suppressed [ 1804.256121][ T4350] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.8359'. [ 1804.382209][ T4346] device macvlan0 entered promiscuous mode [ 1804.813039][ T4346] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 1806.110087][ T4382] netlink: 'syz.2.8364': attribute type 10 has an invalid length. [ 1806.187240][ T4382] team0: Device veth0_vlan failed to register rx_handler [ 1806.492951][ T4392] netlink: 'syz.0.8366': attribute type 2 has an invalid length. [ 1806.501498][ T4387] netlink: 'syz.3.8365': attribute type 41 has an invalid length. [ 1806.657666][ T4392] netlink: 175020 bytes leftover after parsing attributes in process `syz.0.8366'. [ 1808.540751][ T4413] netlink: 'syz.0.8372': attribute type 10 has an invalid length. [ 1808.629984][ T4413] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.658737][ T4413] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.668959][ T4413] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.706308][ T4413] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1808.768607][ T4413] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.797454][ T4413] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.816576][ T4413] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.826929][ T4413] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1808.885476][ T4413] device geneve1 entered promiscuous mode [ 1808.896532][ T4413] team0: Port device geneve1 added [ 1809.650543][ T4429] netlink: 'syz.2.8376': attribute type 10 has an invalid length. [ 1810.686202][ T4429] 8021q: adding VLAN 0 to HW filter on device team0 [ 1810.731055][ T4429] device team0 entered promiscuous mode [ 1810.757857][ T4429] device team_slave_0 entered promiscuous mode [ 1810.772575][ T4429] device team_slave_1 entered promiscuous mode [ 1810.782548][ T4429] device geneve1 entered promiscuous mode [ 1810.789342][ T4429] device netdevsim0 entered promiscuous mode [ 1810.796991][ T4429] bond0: (slave team0): Enslaving as an active interface with an up link [ 1811.266835][ T4477] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8384'. [ 1812.260649][ T4494] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1812.308556][ T4494] netlink: 6955 bytes leftover after parsing attributes in process `syz.0.8389'. [ 1812.643254][ T4509] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8393'. [ 1812.701426][ T4508] delete_channel: no stack [ 1813.291123][ T4525] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8399'. [ 1813.535283][ T4532] device syzkaller0 entered promiscuous mode [ 1817.011975][ T4543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8404'. [ 1817.507825][ T4563] netlink: 'syz.4.8406': attribute type 2 has an invalid length. [ 1817.556710][ T4571] netlink: 'syz.2.8410': attribute type 29 has an invalid length. [ 1817.562223][ T4563] netlink: 'syz.4.8406': attribute type 3 has an invalid length. [ 1817.604388][ T4563] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8406'. [ 1817.626310][ T4571] netlink: 'syz.2.8410': attribute type 29 has an invalid length. [ 1818.486305][ T4578] netlink: 'syz.2.8410': attribute type 29 has an invalid length. [ 1818.496900][ T4581] netlink: 'syz.2.8410': attribute type 29 has an invalid length. [ 1819.080682][ T4609] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8420'. [ 1819.135907][ T4613] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1819.170486][ T4614] netlink: 'syz.0.8421': attribute type 21 has an invalid length. [ 1819.185268][ T4614] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1819.228607][ T4613] netlink: zone id is out of range [ 1819.233983][ T4613] netlink: zone id is out of range [ 1819.274400][ T4613] netlink: zone id is out of range [ 1819.283699][ T4613] netlink: zone id is out of range [ 1819.298638][ T4613] netlink: zone id is out of range [ 1819.326102][ T4613] netlink: del zone limit has 4 unknown bytes [ 1820.634387][ T4648] netlink: 'syz.3.8434': attribute type 3 has an invalid length. [ 1820.672271][ T4648] netlink: 'syz.3.8434': attribute type 1 has an invalid length. [ 1820.712315][ T4648] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8434'. [ 1820.929296][ T4656] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8435'. [ 1821.162326][ T4656] device hsr_slave_0 left promiscuous mode [ 1821.204548][ T4656] device hsr_slave_1 left promiscuous mode [ 1824.585722][ T4723] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1824.637250][ T4725] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.8453'. [ 1824.677013][ T4723] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1824.753750][ T4724] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8452'. [ 1826.654949][ T4765] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8465'. [ 1826.855135][ T4765] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8465'. [ 1829.239738][ T4795] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.8474'. [ 1829.302521][ T4795] netlink: 'syz.0.8474': attribute type 2 has an invalid length. [ 1829.328611][ T4795] netlink: 'syz.0.8474': attribute type 1 has an invalid length. [ 1829.364687][ T4795] netlink: 170140 bytes leftover after parsing attributes in process `syz.0.8474'. [ 1829.931116][ T4817] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.8480'. [ 1830.054763][ T4817] netlink: zone id is out of range [ 1830.066043][ T4824] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.8481'. [ 1830.132448][ T4817] netlink: zone id is out of range [ 1830.294467][ T4817] netlink: zone id is out of range [ 1830.540437][ T4817] netlink: del zone limit has 4 unknown bytes [ 1832.027303][ T4858] netlink: 'syz.0.8492': attribute type 3 has an invalid length. [ 1832.128191][ T4858] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.8492'. [ 1832.442829][ T4871] netlink: 'syz.3.8495': attribute type 27 has an invalid length. [ 1832.539086][ T4871] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8495'. [ 1833.199686][ T4883] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1833.217458][ T4883] syzkaller1: linktype set to 786 [ 1833.294390][ T4886] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.8498'. [ 1833.409216][ T4886] netlink: 6955 bytes leftover after parsing attributes in process `syz.2.8498'. [ 1835.302100][ T4917] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8506'. [ 1835.377539][ T4923] netlink: 'syz.0.8507': attribute type 10 has an invalid length. [ 1835.394995][ T4923] team0: Device vxcan1 is of different type [ 1835.554709][ T4927] mac80211_hwsim hwsim85 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1835.645836][ T4927] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8509'. [ 1837.305463][ T4965] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8520'. [ 1837.890044][T23842] wlan1: Trigger new scan to find an IBSS to join [ 1837.906832][ T4978] netlink: 3529 bytes leftover after parsing attributes in process `syz.4.8524'. [ 1837.947824][ T4978] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.8524'. [ 1837.980850][ T4978] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.8524'. [ 1837.999798][ T4983] netlink: 14556 bytes leftover after parsing attributes in process `syz.4.8524'. [ 1838.063516][ T4984] netlink: 'syz.1.8525': attribute type 9 has an invalid length. [ 1838.078822][ T4984] netlink: 7679 bytes leftover after parsing attributes in process `syz.1.8525'. [ 1840.512640][ T5055] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1840.532014][ T5052] netlink: 'syz.3.8542': attribute type 2 has an invalid length. [ 1840.604357][ T5058] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 1840.838831][ T4991] wlan1: Trigger new scan to find an IBSS to join [ 1842.122933][ T5081] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1842.155122][ T5081] netlink: 105 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1842.185115][ T5081] netlink: 105 bytes leftover after parsing attributes in process `syz.2.8550'. [ 1843.793547][ T5114] netlink: 'syz.4.8558': attribute type 1 has an invalid length. [ 1843.820817][ T5114] netlink: 'syz.4.8558': attribute type 3 has an invalid length. [ 1843.847897][ T5114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8558'. [ 1843.864023][ T5125] netlink: 'syz.4.8558': attribute type 1 has an invalid length. [ 1843.878676][ T11] wlan1: Creating new IBSS network, BSSID 82:19:95:70:03:cb [ 1843.917930][ T5127] netlink: 'syz.1.8561': attribute type 2 has an invalid length. [ 1843.918735][ T5125] netlink: 'syz.4.8558': attribute type 3 has an invalid length. [ 1843.941076][ T5127] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8561'. [ 1843.977988][ T5125] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8558'. [ 1844.000568][ T5127] netlink: 'syz.1.8561': attribute type 21 has an invalid length. [ 1844.401318][ T5147] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8569'. [ 1844.528119][ T5150] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.8567'. [ 1845.692524][ T5162] device wlan1 entered promiscuous mode [ 1845.950013][ T5186] netlink: 'syz.1.8577': attribute type 21 has an invalid length. [ 1845.970294][ T5179] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.8575'. [ 1845.988688][ T5186] IPv6: NLM_F_CREATE should be specified when creating new route [ 1845.996589][ T5186] IPv6: Can't replace route, no match found [ 1846.238611][ T5201] netlink: 'syz.1.8577': attribute type 21 has an invalid length. [ 1846.246676][ T5201] IPv6: Can't replace route, no match found [ 1850.473313][ T5289] netlink: 'syz.2.8603': attribute type 10 has an invalid length. [ 1850.534349][ T5289] device wlan1 left promiscuous mode [ 1850.687482][ T5289] device wlan1 entered promiscuous mode [ 1850.688014][ T5301] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.8608'. [ 1850.722126][ T5289] team0: Port device wlan1 added [ 1850.784492][ T5301] openvswitch: netlink: Key type 386 is out of range max 32 [ 1850.947412][ T5306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1851.057601][ T5306] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1851.155332][ T5313] netlink: 'syz.0.8610': attribute type 21 has an invalid length. [ 1851.191905][ T5313] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1851.286142][ T5313] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1851.324975][ T5311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8610'. [ 1852.212962][ T5329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8617'. [ 1853.163735][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.170188][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.210947][ T5350] netlink: 'syz.0.8623': attribute type 1 has an invalid length. [ 1857.112241][ T5391] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8637'. [ 1857.626327][ T5404] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.8640'. [ 1857.658380][ T5401] netlink: 'syz.0.8641': attribute type 39 has an invalid length. [ 1860.114735][ T5414] netlink: 'syz.0.8641': attribute type 39 has an invalid length. [ 1860.145977][ T5427] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.8643'. [ 1863.013432][ T5461] device netdevsim0 entered promiscuous mode [ 1863.038267][ T5461] batman_adv: batadv0: Interface activated: netdevsim0 [ 1863.259356][ T5473] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8656'. [ 1863.462578][ T5473] device bond0 left promiscuous mode [ 1863.508760][ T5473] device bond_slave_1 left promiscuous mode [ 1863.547077][ T5473] team0: Port device bond0 removed [ 1863.582590][ T5473] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1863.618309][ T5473] bond0 (unregistering): Released all slaves [ 1866.969684][ T5495] netlink: 'syz.1.8661': attribute type 21 has an invalid length. [ 1868.459335][ T4289] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1868.470136][ T4289] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1868.478274][ T4289] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1868.493501][ T4289] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1868.580744][ T4289] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1868.638785][ T4289] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1870.450894][ T5502] chnl_net:caif_netlink_parms(): no params data found [ 1870.605469][ T5516] netlink: 126324 bytes leftover after parsing attributes in process `syz.1.8668'. [ 1870.695425][ T5502] bridge0: port 1(bridge_slave_0) entered blocking state [ 1870.703062][ T5502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1870.714383][ T5502] device bridge_slave_0 entered promiscuous mode [ 1870.723807][ T5502] bridge0: port 2(bridge_slave_1) entered blocking state [ 1870.731133][ T5502] bridge0: port 2(bridge_slave_1) entered disabled state [ 1870.740368][ T5502] device bridge_slave_1 entered promiscuous mode [ 1870.758772][T32437] Bluetooth: hci2: command 0x0409 tx timeout [ 1870.779884][ T5502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1870.792069][ T5502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1870.828657][ T5502] team0: Port device team_slave_0 added [ 1870.845580][ T5502] team0: Port device team_slave_1 added [ 1870.935287][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1870.951792][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1870.987017][ T5502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1871.009443][ T5502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1871.022389][ T5502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1871.067347][ T5502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1871.753239][ T5502] device hsr_slave_0 entered promiscuous mode [ 1871.890111][ T5502] device hsr_slave_1 entered promiscuous mode [ 1872.858318][T32437] Bluetooth: hci2: command 0x041b tx timeout [ 1873.403912][ T5502] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1873.417293][ T5502] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1873.430808][ T5502] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1873.442315][ T5502] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1873.580041][ T5502] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1873.604390][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1873.620922][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1873.648166][ T5502] 8021q: adding VLAN 0 to HW filter on device team0 [ 1873.678411][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1873.687523][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1873.696608][T23865] bridge0: port 1(bridge_slave_0) entered blocking state [ 1873.703936][T23865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1873.712679][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1873.726173][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1873.735057][T23865] bridge0: port 2(bridge_slave_1) entered blocking state [ 1873.742254][T23865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1873.751246][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1873.770524][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1873.779551][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1873.790339][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1873.800228][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1873.822040][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1873.830642][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1873.843443][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1873.853802][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1873.863657][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1873.883804][ T5502] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1873.895761][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1873.904241][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1873.915365][T23865] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1874.218710][ T5502] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1874.227700][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1874.236518][ T4991] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1874.821518][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1874.831537][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1874.860831][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1874.870753][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1874.882869][ T5502] device veth0_vlan entered promiscuous mode [ 1874.893693][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1874.903043][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1874.919092][T32437] Bluetooth: hci2: command 0x040f tx timeout [ 1874.931741][ T5502] device veth1_vlan entered promiscuous mode [ 1874.967662][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1874.976273][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1874.986774][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1874.996612][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1875.012213][ T5502] device veth0_macvtap entered promiscuous mode [ 1875.024168][ T5502] device veth1_macvtap entered promiscuous mode [ 1875.045199][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.056545][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.066631][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.077874][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.088162][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.100685][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.110945][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1875.123077][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.134962][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1875.146576][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1875.155282][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1875.164108][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1875.173505][T23912] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1875.184894][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.196062][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.206387][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.217404][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.227445][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.238900][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.249245][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.259997][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.269990][ T5502] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1875.280709][ T5502] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1875.293809][ T5502] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1875.302699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1875.315569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1875.337078][ T5502] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.346937][ T5502] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.355917][ T5502] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.365573][ T5502] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1875.485605][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.495890][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.511840][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1875.557281][ T4453] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1875.570619][ T4453] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1875.578379][ T4453] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1875.697107][ T5555] netlink: 194236 bytes leftover after parsing attributes in process `syz.5.8662'. [ 1875.721652][ T5555] netlink: zone id is out of range [ 1875.728301][ T5555] netlink: zone id is out of range [ 1875.735003][ T5555] netlink: get zone limit has 8 unknown bytes [ 1876.131446][ T5326] bond0: (slave syz_tun): Releasing backup interface [ 1876.214940][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1876.228854][T23912] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.321118][T23912] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.400118][T23912] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.447425][T23912] bond0: (slave netdevsim0): Releasing backup interface [ 1876.457833][T23912] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1876.626640][T23912] tipc: Left network mode [ 1876.998940][T32437] Bluetooth: hci2: command 0x0419 tx timeout [ 1877.662663][T23912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1877.670591][T23912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1877.679957][T23912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1877.687426][T23912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1877.700144][T23912] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1877.707273][T23912] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1877.715404][T23912] bridge0: port 3(dummy0) entered disabled state [ 1877.734209][T23912] device bridge_slave_1 left promiscuous mode [ 1877.741507][T23912] bridge0: port 2(bridge_slave_1) entered disabled state [ 1877.759525][T23912] device bridge_slave_0 left promiscuous mode [ 1877.765818][T23912] bridge0: port 1(bridge_slave_0) entered disabled state [ 1877.796909][T23912] device veth1_macvtap left promiscuous mode [ 1877.803413][T23912] device veth0_macvtap left promiscuous mode [ 1877.810005][T23912] device veth1_vlan left promiscuous mode [ 1877.815876][T23912] device veth0_vlan left promiscuous mode [ 1878.604881][T23912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1878.653742][T23912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1878.994702][T23912] bond0 (unregistering): Released all slaves [ 1914.600650][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.607030][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.041662][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.048132][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1993.478534][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 2037.480318][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.486846][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2098.920769][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.927158][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.360333][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.366846][ T1281] ieee802154 phy1 wpan1: encryption failed: -22