last executing test programs: 5.79582118s ago: executing program 1 (id=8776): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) 5.45943021s ago: executing program 0 (id=8777): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 5.234855537s ago: executing program 3 (id=8778): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40814) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006400)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000005380)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000002540)=""/156, 0x9c}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/178, 0xb2}, {&(0x7f00000038c0)=""/11, 0xb}, {&(0x7f0000003900)=""/5, 0x5}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)}], 0x8, &(0x7f0000005400)=""/4096, 0x1000}, 0x40010021) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003c00)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003d80)={0x1e, 0x17, &(0x7f0000002600)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0x198, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd26}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}], &(0x7f00000026c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000003b80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003bc0)={0x3, 0xd, 0xa, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000003c80)=[r2], &(0x7f0000003cc0)=[{0x0, 0x5, 0x6, 0x2}, {0x0, 0x4, 0xf, 0x157e5ec9e75c0d8c}, {0x1, 0x1, 0x0, 0x9}, {0x0, 0x1, 0x10, 0x6}, {0x4, 0x5, 0x3, 0xb}, {0x5, 0x4, 0x0, 0x8}, {0x3, 0x1, 0xe, 0x5}, {0x3, 0x5, 0x7, 0x9}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0xff0b}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x4000004) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f00000100000000000011000000000000000000000001000000000000000000000014"], 0xf8}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) 4.483276081s ago: executing program 1 (id=8779): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 4.430589052s ago: executing program 3 (id=8781): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 4.376395284s ago: executing program 0 (id=8782): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 4.365014004s ago: executing program 2 (id=8783): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 3.350059996s ago: executing program 2 (id=8784): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r1, 0x0, 0x1f00) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x0) 3.316827387s ago: executing program 3 (id=8785): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 3.125039893s ago: executing program 2 (id=8786): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x420}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x4, 0xa, 0x8, 0xc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, 0x1], &(0x7f0000000940)=[{0x3, 0x1, 0x10, 0x6}, {0x2, 0x1, 0xf, 0x6}, {0x1, 0x1, 0xd, 0xa}, {0x4, 0x1, 0x4, 0x2}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x4, 0x9}, {0x1, 0x2, 0x7, 0x8}, {0x3, 0x1, 0xf, 0x2}, {0x5, 0x2, 0x9, 0xc}]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r2) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 3.123534513s ago: executing program 0 (id=8794): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x10006, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r2, 0x0, 0x1f00) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f926a3c92b", 0x14}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x40000) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000300), 0x2, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f0000000000)=@in6={0xa, 0x4e21, 0x0, @remote}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000002900000043"], 0x18}, 0xc) 2.806719673s ago: executing program 1 (id=8787): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x40814) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f0000000200), &(0x7f0000000300)=r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c00)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003d80)={0x1e, 0x0, &(0x7f0000002600), &(0x7f00000026c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000003b80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003bc0)={0x3, 0xd, 0xa, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000003c80)=[r1], &(0x7f0000003cc0)=[{0x0, 0x5, 0x6, 0x2}, {0x0, 0x4, 0xf, 0x157e5ec9e75c0d8c}, {0x1, 0x1, 0x0, 0x9}, {0x0, 0x1, 0x10, 0x6}, {0x4, 0x5, 0x3, 0xb}, {0x5, 0x4, 0x0, 0x8}, {0x3, 0x1, 0xe, 0x5}, {0x3, 0x5, 0x7, 0x9}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0xff0b}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4000004) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x20) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f00000100000000000011000000000000000000000001000000000000000000000014"], 0xf8}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) 2.742665525s ago: executing program 0 (id=8788): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 2.365350696s ago: executing program 1 (id=8789): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x40814) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000006400)={&(0x7f0000000180)=@qipcrtr, 0x80, &(0x7f0000005380)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000002540)=""/156, 0x9c}, {&(0x7f0000002800)=""/4096, 0x1000}, {&(0x7f0000003800)=""/178, 0xb2}, {&(0x7f00000038c0)=""/11, 0xb}, {&(0x7f0000003900)=""/5, 0x5}, {&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)}], 0x8, &(0x7f0000005400)=""/4096, 0x1000}, 0x40010021) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000300)=r0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003c00)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003d80)={0x1e, 0x17, &(0x7f0000002600)=@raw=[@cb_func={0x18, 0x8, 0x4, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x7, 0x5, 0x2, 0x198, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd26}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, @exit, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x7}], &(0x7f00000026c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000003b80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003bc0)={0x3, 0xd, 0xa, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000003c80)=[r2], &(0x7f0000003cc0)=[{0x0, 0x5, 0x6, 0x2}, {0x0, 0x4, 0xf, 0x157e5ec9e75c0d8c}, {0x1, 0x1, 0x0, 0x9}, {0x0, 0x1, 0x10, 0x6}, {0x4, 0x5, 0x3, 0xb}, {0x5, 0x4, 0x0, 0x8}, {0x3, 0x1, 0xe, 0x5}, {0x3, 0x5, 0x7, 0x9}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0xff0b}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015400100142603600e120800060000000401a8001600040001", 0x37}], 0x1}, 0x4000004) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x20) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f00000100000000000011000000000000000000000001000000000000000000000014"], 0xf8}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) 2.322504588s ago: executing program 2 (id=8790): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r5, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)=r3}, 0x20) sendmsg$inet(r2, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) 1.999211627s ago: executing program 3 (id=8791): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 1.637238149s ago: executing program 1 (id=8792): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x420}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x4, 0xa, 0x8, 0xc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, 0x1], &(0x7f0000000940)=[{0x3, 0x1, 0x10, 0x6}, {0x1, 0x2, 0x2, 0xa}, {0x2, 0x1, 0xf, 0x6}, {0x1, 0x1, 0xd, 0xa}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x4, 0x9}, {0x1, 0x2, 0x7, 0x8}, {0x3, 0x1, 0xf, 0x2}, {0x5, 0x2, 0x9, 0xc}]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r2) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 1.542540392s ago: executing program 0 (id=8793): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 1.167137863s ago: executing program 2 (id=8795): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 735.228567ms ago: executing program 1 (id=8796): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 535.941373ms ago: executing program 3 (id=8797): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x440}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff00000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000085000000a000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x20242, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 245.889852ms ago: executing program 3 (id=8798): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r6, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) 210.560603ms ago: executing program 0 (id=8799): r0 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000080), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0x58, &(0x7f0000000540)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x420}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x4, 0xa, 0x8, 0xc, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000840)={0x3, 0xf, 0x3, 0x8}, 0x10, 0x0, 0x0, 0x9, &(0x7f0000000880)=[0xffffffffffffffff, 0x1], &(0x7f0000000940)=[{0x3, 0x1, 0x10, 0x6}, {0x2, 0x1, 0xf, 0x6}, {0x1, 0x1, 0xd, 0xa}, {0x4, 0x1, 0x4, 0x2}, {0x4, 0x2, 0xe, 0x8}, {0x4, 0x5, 0x4, 0x9}, {0x1, 0x2, 0x7, 0x8}, {0x3, 0x1, 0xf, 0x2}, {0x5, 0x2, 0x9, 0xc}]}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0), 0x4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x2000000000000063, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000fc07ffff0000000000000000850000004100000085000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @remote, 0x5, 0x3}, 0x80, 0x0}, 0x2600c055) close(r2) socket$kcm(0xa, 0x922000000003, 0x11) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) 0s ago: executing program 2 (id=8800): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x40814) recvmsg(0xffffffffffffffff, &(0x7f0000004300)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x61, &(0x7f00000027c0)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, &(0x7f0000000200), &(0x7f0000000300)=r0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003c00)=@bloom_filter={0x1e, 0x0, 0xa, 0x9, 0x5, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000003d80)={0x1e, 0x0, &(0x7f0000002600), &(0x7f00000026c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, &(0x7f0000003b80)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000003bc0)={0x3, 0xd, 0xa, 0x5}, 0x10, 0xffffffffffffffff, r0, 0x9, &(0x7f0000003c80)=[r1], &(0x7f0000003cc0)=[{0x0, 0x5, 0x6, 0x2}, {0x0, 0x4, 0xf, 0x157e5ec9e75c0d8c}, {0x1, 0x1, 0x0, 0x9}, {0x0, 0x1, 0x10, 0x6}, {0x4, 0x5, 0x3, 0xb}, {0x5, 0x4, 0x0, 0x8}, {0x3, 0x1, 0xe, 0x5}, {0x3, 0x5, 0x7, 0x9}, {0x0, 0x1, 0x5, 0xb}], 0x10, 0xff0b}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb0105", 0x1e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b00000005000000010001000a00afcb25c4d627079d178e0914050001000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$kcm(0x10, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x115905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x1, 0xffffffffffffffff, 0x1) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8b15, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x4000004) socket$kcm(0x10, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x10009e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000800000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x20) r3 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800020007000200060001c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f700000001", 0x18}], 0x1}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="110000000000000000000000010000000100000000000000ac0000000000000000000000070000000083078f64010102444c7401ac1e0101000000047f000001000000007f00000100000005ac1414aa000000bcffffffff0000000700000000000000070a01010100000007ac1414aa00000006ffffffff00000007440b45dbd0b8be05dd02c389232364010101ffffffffac1414aaac1e0101ac1e0101e00000027f000001ac1e0101830c92bf5f2199e286a39e5b01830b7f7f0000017f00000100000000000011000000000000000000000001000000000000000000000014"], 0xf8}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x12, 0x0, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b3114", 0x0, 0x0, 0x3}, 0x50) kernel console output (not intermixed with test programs): .2.4885': attribute type 1 has an invalid length. [ 1579.405291][T22757] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.4885'. [ 1579.429339][T22764] netlink: 'syz.1.4893': attribute type 9 has an invalid length. [ 1579.468484][T22764] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.4893'. [ 1580.121211][T22770] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.4887'. [ 1580.157055][T22765] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1580.345526][ T5085] Bluetooth: hci3: unexpected event 0x18 length: 151 > 23 [ 1580.413274][T22785] netlink: 'syz.1.4891': attribute type 10 has an invalid length. [ 1580.563165][T22780] netlink: 'syz.1.4891': attribute type 9 has an invalid length. [ 1580.604123][T22780] __nla_validate_parse: 2 callbacks suppressed [ 1580.604209][T22780] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.4891'. [ 1580.886370][T22793] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4895'. [ 1582.955585][T22789] netlink: 'syz.3.4895': attribute type 39 has an invalid length. [ 1584.944114][T22811] netlink: 'syz.2.4900': attribute type 10 has an invalid length. [ 1584.963090][T22812] netlink: 'syz.2.4900': attribute type 9 has an invalid length. [ 1584.979394][T22812] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4900'. [ 1585.188428][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4909'. [ 1586.086968][T22826] netlink: 'syz.0.4909': attribute type 39 has an invalid length. [ 1586.096157][T22821] netlink: 'syz.2.4901': attribute type 10 has an invalid length. [ 1586.106467][T22821] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4901'. [ 1588.019152][ T5085] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1588.029493][T22835] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4905'. [ 1588.525927][T22848] netlink: 'syz.2.4910': attribute type 9 has an invalid length. [ 1588.545006][T22848] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4910'. [ 1590.238711][T22845] netlink: 'syz.2.4910': attribute type 10 has an invalid length. [ 1590.248096][T22852] netlink: 'syz.0.4911': attribute type 10 has an invalid length. [ 1590.408484][T22853] netlink: 'syz.0.4911': attribute type 9 has an invalid length. [ 1590.421943][T22853] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4911'. [ 1590.517574][T22860] sctp: [Deprecated]: syz.2.4912 (pid 22860) Use of int in max_burst socket option deprecated. [ 1590.517574][T22860] Use struct sctp_assoc_value instead [ 1590.862021][T22864] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4920'. [ 1590.951521][T22867] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4912'. [ 1593.099722][T22867] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1593.282847][T22878] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4914'. [ 1593.296990][T22880] netlink: 'syz.0.4914': attribute type 39 has an invalid length. [ 1593.338641][T22885] netlink: 'syz.3.4916': attribute type 10 has an invalid length. [ 1593.346830][T22885] netlink: 2 bytes leftover after parsing attributes in process `syz.3.4916'. [ 1593.748873][T22900] netlink: 'syz.2.4921': attribute type 9 has an invalid length. [ 1593.757271][T22900] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4921'. [ 1595.800167][T22893] netlink: 'syz.3.4919': attribute type 10 has an invalid length. [ 1595.813835][T22899] netlink: 'syz.2.4921': attribute type 10 has an invalid length. [ 1595.895990][T22902] sock: sock_set_timeout: `syz.3.4922' (pid 22902) tries to set negative timeout [ 1595.928776][T22902] netlink: 'syz.3.4922': attribute type 4 has an invalid length. [ 1595.954284][T22902] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.4922'. [ 1596.115184][T22910] netlink: 'syz.1.4923': attribute type 10 has an invalid length. [ 1596.171334][T22912] netlink: 'syz.0.4924': attribute type 10 has an invalid length. [ 1596.186304][T22910] netlink: 'syz.1.4923': attribute type 9 has an invalid length. [ 1596.213928][T22910] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.4923'. [ 1596.674610][T22912] netlink: 'syz.0.4924': attribute type 9 has an invalid length. [ 1596.694306][T22912] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4924'. [ 1597.328192][T22921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4927'. [ 1599.874015][T22938] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4931'. [ 1600.036881][T22941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4932'. [ 1600.073150][T22942] netlink: 'syz.1.4932': attribute type 39 has an invalid length. [ 1600.145980][ T5085] Bluetooth: hci2: unexpected event 0x16 length: 15 > 6 [ 1600.159818][T22947] netlink: 'syz.0.4933': attribute type 10 has an invalid length. [ 1600.321688][T22947] netlink: 'syz.0.4933': attribute type 9 has an invalid length. [ 1600.350359][T22947] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4933'. [ 1600.768294][T22962] sock: sock_set_timeout: `syz.1.4937' (pid 22962) tries to set negative timeout [ 1600.790877][T22962] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.4937'. [ 1600.986392][T22957] validate_nla: 1 callbacks suppressed [ 1600.986411][T22957] netlink: 'syz.2.4936': attribute type 10 has an invalid length. [ 1601.019380][T22965] netlink: 'syz.3.4938': attribute type 10 has an invalid length. [ 1601.048596][T22960] netlink: 'syz.2.4936': attribute type 9 has an invalid length. [ 1601.064108][T22960] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1601.255356][T22967] netlink: 'syz.3.4938': attribute type 9 has an invalid length. [ 1601.263339][T22967] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.4938'. [ 1601.909956][T22978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4943'. [ 1602.071804][T22981] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4942'. [ 1603.057795][T22982] netlink: 'syz.0.4941': attribute type 33 has an invalid length. [ 1603.065960][T22982] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4941'. [ 1603.077849][T22982] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1603.094769][T22986] netlink: 'syz.3.4943': attribute type 39 has an invalid length. [ 1605.683361][T23001] sock: sock_set_timeout: `syz.0.4948' (pid 23001) tries to set negative timeout [ 1605.702014][T23001] netlink: 'syz.0.4948': attribute type 4 has an invalid length. [ 1605.772247][T23001] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.4948'. [ 1605.901002][T22997] netlink: 'syz.2.4947': attribute type 10 has an invalid length. [ 1605.965884][T23002] netlink: 'syz.1.4955': attribute type 10 has an invalid length. [ 1606.001483][T22997] netlink: 'syz.2.4947': attribute type 9 has an invalid length. [ 1606.071721][T22997] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4947'. [ 1606.271533][T23002] wg1: entered promiscuous mode [ 1606.281333][T23002] wg1: entered allmulticast mode [ 1606.290195][T23002] team0: Device wg1 is of different type [ 1607.055561][T23019] netlink: 194236 bytes leftover after parsing attributes in process `syz.1.4952'. [ 1607.065569][T23019] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1607.098380][T23023] netlink: 'syz.0.4951': attribute type 10 has an invalid length. [ 1607.229202][T23021] netlink: 'syz.0.4951': attribute type 9 has an invalid length. [ 1607.238755][T23021] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4951'. [ 1607.279878][T23028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4956'. [ 1607.337136][T23029] netlink: 'syz.2.4954': attribute type 33 has an invalid length. [ 1607.362255][T23029] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4954'. [ 1607.375015][T23029] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1607.776539][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.783027][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.055983][T23030] netlink: 'syz.3.4956': attribute type 39 has an invalid length. [ 1608.486480][ T5085] Bluetooth: hci1: unexpected event 0x16 length: 15 > 6 [ 1609.178232][T23058] netlink: 'syz.1.4963': attribute type 9 has an invalid length. [ 1609.203860][T23058] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.4963'. [ 1609.604934][T23063] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.4966'. [ 1609.615749][T23063] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1611.044863][T23053] netlink: 'syz.1.4963': attribute type 10 has an invalid length. [ 1611.052833][T23055] netlink: 'syz.0.4964': attribute type 10 has an invalid length. [ 1611.076056][T23055] team0: Device wg1 is of different type [ 1611.380670][T23071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4967'. [ 1611.394569][T23074] netlink: 'syz.0.4968': attribute type 10 has an invalid length. [ 1611.436985][T23074] netlink: 'syz.0.4968': attribute type 9 has an invalid length. [ 1611.464683][T23074] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.4968'. [ 1612.129299][T23079] netlink: 'syz.3.4970': attribute type 33 has an invalid length. [ 1612.137870][T23079] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4970'. [ 1612.150338][T23079] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 1612.211713][ T5085] Bluetooth: hci0: unexpected event 0x16 length: 15 > 6 [ 1612.637492][T23097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4977'. [ 1612.748841][T23097] netlink: 'syz.2.4977': attribute type 39 has an invalid length. [ 1612.843721][T23102] netlink: 194236 bytes leftover after parsing attributes in process `syz.3.4976'. [ 1612.865395][T23102] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1613.215721][T23105] netlink: 'syz.2.4979': attribute type 10 has an invalid length. [ 1613.279209][T23105] team0: Device wg1 is of different type [ 1613.367027][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4987'. [ 1613.410432][T23111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4980'. [ 1613.581962][T23106] netlink: 'syz.1.4987': attribute type 39 has an invalid length. [ 1613.618031][T23116] netlink: 'syz.3.4981': attribute type 9 has an invalid length. [ 1613.664210][T23116] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.4981'. [ 1613.901008][T23115] netlink: 'syz.3.4981': attribute type 10 has an invalid length. [ 1617.452235][T23123] netlink: 'syz.2.4983': attribute type 10 has an invalid length. [ 1617.714623][T23124] netlink: 'syz.2.4983': attribute type 9 has an invalid length. [ 1617.725276][T23124] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4983'. [ 1617.852751][ T5085] Bluetooth: hci3: unexpected event 0x16 length: 15 > 6 [ 1618.112432][T23132] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.4985'. [ 1618.776444][T23145] netlink: 'syz.1.4990': attribute type 10 has an invalid length. [ 1619.018803][T23142] netlink: 'syz.1.4990': attribute type 9 has an invalid length. [ 1619.054295][T23142] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.4990'. [ 1621.114387][T23150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4993'. [ 1621.516024][T23159] netlink: 'syz.2.4996': attribute type 10 has an invalid length. [ 1621.704183][T23161] netlink: 'syz.3.4997': attribute type 10 has an invalid length. [ 1621.719022][T23159] netlink: 'syz.2.4996': attribute type 9 has an invalid length. [ 1621.748745][T23159] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.4996'. [ 1622.398666][T23161] netlink: 'syz.3.4997': attribute type 9 has an invalid length. [ 1622.407701][T23161] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.4997'. [ 1622.789334][T23179] netlink: 'syz.0.5003': attribute type 10 has an invalid length. [ 1622.875701][T23176] netlink: 'syz.0.5003': attribute type 9 has an invalid length. [ 1622.904187][T23176] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5003'. [ 1623.100365][T23183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5004'. [ 1628.813792][T23198] netlink: 'syz.0.5015': attribute type 10 has an invalid length. [ 1628.832406][T23198] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1628.902653][T23198] team0: Port device wlan1 added [ 1628.909737][ T5085] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1628.917228][ T5085] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 1628.938159][T23201] netlink: 'syz.3.5007': attribute type 10 has an invalid length. [ 1629.062028][T23205] netlink: 'syz.2.5009': attribute type 9 has an invalid length. [ 1629.089902][T23205] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5009'. [ 1629.203094][T23201] team0: Device wg1 is of different type [ 1629.330790][T23199] netlink: 'syz.2.5009': attribute type 10 has an invalid length. [ 1630.036512][T23213] netlink: 'syz.0.5012': attribute type 10 has an invalid length. [ 1630.191574][T23213] netlink: 'syz.0.5012': attribute type 9 has an invalid length. [ 1630.200869][T23213] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5012'. [ 1630.553045][T23224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5016'. [ 1631.216072][T20131] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1631.223659][T20131] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1631.272343][T23235] netlink: 'syz.1.5020': attribute type 10 has an invalid length. [ 1631.284548][T23235] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 1631.342955][T23235] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1631.352445][T23235] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 1631.369817][T23235] team0: Port device wlan1 added [ 1631.382175][T23237] netlink: 'syz.2.5021': attribute type 10 has an invalid length. [ 1631.410966][T23237] team0: Device wg1 is of different type [ 1631.538417][T23243] netlink: 'syz.0.5022': attribute type 9 has an invalid length. [ 1631.553546][T23243] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5022'. [ 1633.482971][T23242] netlink: 'syz.0.5022': attribute type 10 has an invalid length. [ 1633.494265][T23253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5025'. [ 1633.842354][T23261] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5034'. [ 1635.200860][T23279] validate_nla: 1 callbacks suppressed [ 1635.200874][T23279] netlink: 'syz.0.5030': attribute type 9 has an invalid length. [ 1635.216280][T23279] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5030'. [ 1636.743692][T23278] netlink: 'syz.0.5030': attribute type 10 has an invalid length. [ 1636.968130][T23239] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1636.975870][T23239] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1637.007838][T23287] netlink: 'syz.3.5032': attribute type 10 has an invalid length. [ 1637.017554][T23287] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1637.050196][T23287] team0: Port device wlan1 added [ 1637.067085][T23289] netlink: 'syz.1.5033': attribute type 10 has an invalid length. [ 1637.110254][T23289] team0: Device wg1 is of different type [ 1637.241198][T23295] netlink: 'syz.3.5036': attribute type 2 has an invalid length. [ 1637.260771][T23295] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5036'. [ 1637.479361][T23293] netlink: 'syz.2.5035': attribute type 9 has an invalid length. [ 1637.489029][T23293] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5035'. [ 1638.575047][T23307] netlink: 'syz.0.5046': attribute type 10 has an invalid length. [ 1638.589735][T23307] netlink: 'syz.0.5046': attribute type 9 has an invalid length. [ 1638.597790][T23307] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5046'. [ 1639.949814][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1640.202428][T23320] netlink: 'syz.0.5043': attribute type 10 has an invalid length. [ 1640.316006][T23320] netlink: 'syz.0.5043': attribute type 9 has an invalid length. [ 1640.334231][T23320] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1640.414591][T23325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5055'. [ 1640.927484][T23330] netlink: 'syz.1.5047': attribute type 10 has an invalid length. [ 1640.948425][T23330] team0: Device wg1 is of different type [ 1641.172536][T23337] netlink: 'syz.0.5049': attribute type 2 has an invalid length. [ 1641.215104][T23337] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5049'. [ 1641.281425][ T5085] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1641.290349][ T5085] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1641.379262][T23335] netlink: 'syz.2.5048': attribute type 10 has an invalid length. [ 1641.421276][T23335] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1641.448971][T23335] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1641.659759][T23335] team0: Port device wlan1 added [ 1641.793540][T23346] netlink: 'syz.3.5053': attribute type 10 has an invalid length. [ 1641.959966][T23345] netlink: 'syz.3.5053': attribute type 9 has an invalid length. [ 1641.981181][T23345] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1642.006986][T23348] netlink: 'syz.0.5054': attribute type 10 has an invalid length. [ 1642.983483][T23348] netlink: 'syz.0.5054': attribute type 9 has an invalid length. [ 1642.997804][T23348] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5054'. [ 1643.511950][T23365] netlink: 'syz.1.5060': attribute type 10 has an invalid length. [ 1643.632560][T23365] netlink: 'syz.1.5060': attribute type 9 has an invalid length. [ 1643.663147][T23365] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1644.991595][T23381] bridge0: port 2(team0) entered blocking state [ 1645.024007][T23381] bridge0: port 2(team0) entered disabled state [ 1645.030536][T23381] team0: entered allmulticast mode [ 1645.053860][T23381] team_slave_1: entered allmulticast mode [ 1645.061341][T23381] hsr_slave_0: entered allmulticast mode [ 1645.073221][T23381] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1645.114402][T23381] team0: entered promiscuous mode [ 1645.146888][T23381] team_slave_1: entered promiscuous mode [ 1645.152914][T23381] hsr_slave_0: entered promiscuous mode [ 1645.174810][T23381] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1645.213362][T23239] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1645.221689][T23239] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1645.442077][T23388] validate_nla: 1 callbacks suppressed [ 1645.442217][T23388] netlink: 'syz.0.5066': attribute type 10 has an invalid length. [ 1645.585147][T23388] netlink: 'syz.0.5066': attribute type 9 has an invalid length. [ 1645.594083][T23388] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5066'. [ 1646.569136][T23394] netlink: 'syz.3.5070': attribute type 10 has an invalid length. [ 1646.627207][T23395] netlink: 'syz.1.5076': attribute type 10 has an invalid length. [ 1646.643426][T23394] netlink: 'syz.3.5070': attribute type 9 has an invalid length. [ 1646.652199][T23394] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5070'. [ 1647.765778][T23395] netlink: 'syz.1.5076': attribute type 9 has an invalid length. [ 1647.784202][T23395] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5076'. [ 1648.851872][ T5085] Bluetooth: hci1: unexpected subevent 0x0a length: 150 > 30 [ 1648.859549][ T5085] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1649.332475][T23421] netlink: 'syz.1.5077': attribute type 10 has an invalid length. [ 1650.347898][T23434] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.5080'. [ 1651.976314][T23453] netlink: 'syz.1.5084': attribute type 10 has an invalid length. [ 1652.009931][T23455] netlink: 'syz.3.5085': attribute type 10 has an invalid length. [ 1652.077237][T23453] netlink: 'syz.1.5084': attribute type 9 has an invalid length. [ 1652.122492][T23453] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5084'. [ 1655.656915][T23455] netlink: 'syz.3.5085': attribute type 9 has an invalid length. [ 1655.674873][T23455] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5085'. [ 1656.067672][T23239] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1656.075397][T23239] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1656.235021][T23479] netlink: 'syz.2.5090': attribute type 10 has an invalid length. [ 1656.580800][T23490] À: port 1(vlan0) entered blocking state [ 1656.588916][T23490] À: port 1(vlan0) entered disabled state [ 1656.596391][T23490] vlan0: entered allmulticast mode [ 1656.617735][T23490] vlan0: entered promiscuous mode [ 1657.304582][T23496] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5097'. [ 1657.522229][T23489] delete_channel: no stack [ 1658.127829][T23512] netlink: 'syz.2.5099': attribute type 10 has an invalid length. [ 1658.607406][T23512] netlink: 'syz.2.5099': attribute type 9 has an invalid length. [ 1658.670317][T23512] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5099'. [ 1662.478777][T23534] delete_channel: no stack [ 1662.483408][T23534] delete_channel: no stack [ 1662.521670][T23528] netlink: 'syz.0.5104': attribute type 10 has an invalid length. [ 1662.702186][T23528] netlink: 'syz.0.5104': attribute type 9 has an invalid length. [ 1662.743117][T23528] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5104'. [ 1662.820885][T23542] netlink: 'syz.2.5108': attribute type 10 has an invalid length. [ 1663.015727][T23544] netlink: 'syz.3.5109': attribute type 2 has an invalid length. [ 1663.141367][T23544] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1663.287565][T23546] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5109'. [ 1663.914393][T23542] netlink: 'syz.2.5108': attribute type 9 has an invalid length. [ 1663.922208][T23542] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5108'. [ 1664.310688][T23554] netlink: 'syz.0.5120': attribute type 10 has an invalid length. [ 1664.345312][T23559] netlink: 'syz.1.5113': attribute type 10 has an invalid length. [ 1664.427316][T23564] netlink: 'syz.1.5113': attribute type 9 has an invalid length. [ 1664.453940][T23564] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5113'. [ 1664.698138][T23554] netlink: 'syz.0.5120': attribute type 9 has an invalid length. [ 1664.722799][T23554] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1665.069945][T23572] netlink: 'syz.2.5118': attribute type 21 has an invalid length. [ 1665.087936][T23572] netlink: 'syz.2.5118': attribute type 1 has an invalid length. [ 1665.116019][T23572] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.5118'. [ 1665.703898][T23576] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5119'. [ 1666.002570][T23586] netlink: 'syz.0.5121': attribute type 2 has an invalid length. [ 1666.014688][T23586] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5121'. [ 1666.446443][T23586] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5121'. [ 1668.474931][T23594] netlink: 'syz.2.5123': attribute type 10 has an invalid length. [ 1668.638914][T23592] netlink: 'syz.2.5123': attribute type 9 has an invalid length. [ 1668.681104][T23592] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5123'. [ 1669.227927][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.234496][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.529863][ T5085] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1669.538757][T23601] netlink: 'syz.3.5126': attribute type 10 has an invalid length. [ 1669.568948][T23604] netlink: 'syz.3.5126': attribute type 9 has an invalid length. [ 1669.621135][T23604] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5126'. [ 1669.995458][T23610] netlink: 'syz.2.5129': attribute type 10 has an invalid length. [ 1670.012653][T23612] netlink: 'syz.0.5136': attribute type 10 has an invalid length. [ 1670.105278][T23610] netlink: 'syz.2.5129': attribute type 9 has an invalid length. [ 1670.115406][T23610] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5129'. [ 1670.885214][T23623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5131'. [ 1671.248920][T23612] netlink: 'syz.0.5136': attribute type 9 has an invalid length. [ 1671.266606][T23612] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5136'. [ 1671.543374][ T5085] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1671.634287][T23636] netlink: 'syz.3.5138': attribute type 21 has an invalid length. [ 1671.663538][T23636] netlink: 'syz.3.5138': attribute type 1 has an invalid length. [ 1671.674005][T23636] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.5138'. [ 1672.079126][T23645] netlink: 'syz.2.5139': attribute type 10 has an invalid length. [ 1672.298252][T23645] netlink: 'syz.2.5139': attribute type 9 has an invalid length. [ 1672.365725][T23645] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5139'. [ 1674.069719][T23665] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1674.171360][T23659] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5143'. [ 1674.659008][T23665] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5145'. [ 1674.922341][T23663] validate_nla: 4 callbacks suppressed [ 1674.922409][T23663] netlink: 'syz.2.5144': attribute type 9 has an invalid length. [ 1674.941980][T23663] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5144'. [ 1675.077328][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1675.222124][T23678] netlink: 'syz.0.5155': attribute type 10 has an invalid length. [ 1675.318889][T23673] netlink: 'syz.0.5155': attribute type 9 has an invalid length. [ 1675.330466][T23673] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5155'. [ 1675.370322][T23682] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5150'. [ 1675.406735][T23682] netlink: 'syz.1.5150': attribute type 39 has an invalid length. [ 1676.196501][T23694] netlink: 'syz.0.5152': attribute type 21 has an invalid length. [ 1676.213903][T23694] netlink: 'syz.0.5152': attribute type 1 has an invalid length. [ 1676.223803][T23694] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.5152'. [ 1676.335678][T23693] netlink: 'syz.2.5153': attribute type 10 has an invalid length. [ 1676.415485][T23693] netlink: 'syz.2.5153': attribute type 9 has an invalid length. [ 1676.428253][T23693] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5153'. [ 1676.953761][T23698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5156'. [ 1677.535612][ T5085] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1677.947829][T23722] netlink: 'syz.3.5168': attribute type 10 has an invalid length. [ 1678.040523][T23721] netlink: 'syz.0.5162': attribute type 10 has an invalid length. [ 1678.154296][T23721] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.5162'. [ 1679.000629][T23718] delete_channel: no stack [ 1679.169328][T23717] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1679.470734][T23737] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5166'. [ 1679.510965][T23738] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5174'. [ 1679.642287][ T5085] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1680.007207][T23748] validate_nla: 5 callbacks suppressed [ 1680.007251][T23748] netlink: 'syz.0.5170': attribute type 2 has an invalid length. [ 1680.034785][T23748] netlink: 164 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1680.230028][T23746] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5170'. [ 1680.453092][T23756] netlink: 'syz.1.5181': attribute type 10 has an invalid length. [ 1680.547761][T23756] netlink: 'syz.1.5181': attribute type 9 has an invalid length. [ 1680.564453][T23756] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5181'. [ 1681.298138][T23761] delete_channel: no stack [ 1681.511879][T23772] netlink: 'syz.1.5177': attribute type 10 has an invalid length. [ 1681.536916][T23773] netlink: 'syz.2.5185': attribute type 10 has an invalid length. [ 1681.620220][T23773] netlink: 'syz.2.5185': attribute type 9 has an invalid length. [ 1681.634341][T23773] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.5185'. [ 1681.863795][ T5085] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1682.599084][T23783] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5182'. [ 1682.644637][T23784] netlink: 'syz.0.5182': attribute type 39 has an invalid length. [ 1683.310057][T23803] netlink: 'syz.1.5189': attribute type 10 has an invalid length. [ 1684.570537][T23814] netlink: 'syz.0.5194': attribute type 10 has an invalid length. [ 1684.944696][T23800] delete_channel: no stack [ 1685.407372][T23825] netlink: 'syz.0.5204': attribute type 10 has an invalid length. [ 1685.905019][T23841] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5200'. [ 1685.967529][T23839] netlink: 'syz.0.5209': attribute type 10 has an invalid length. [ 1685.985329][T23837] netlink: 'syz.2.5201': attribute type 10 has an invalid length. [ 1686.005745][T23841] netlink: 'syz.3.5200': attribute type 39 has an invalid length. [ 1686.540691][T23852] netlink: 60 bytes leftover after parsing attributes in process `syz.0.5207'. [ 1687.008128][T23863] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.5212'. [ 1687.097866][T23847] delete_channel: no stack [ 1687.203457][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5214'. [ 1687.283219][T23865] netlink: 'syz.0.5213': attribute type 10 has an invalid length. [ 1687.557862][T23869] netlink: 'syz.2.5215': attribute type 10 has an invalid length. [ 1687.911273][T23881] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5221'. [ 1688.030723][T23881] netlink: 'syz.2.5221': attribute type 39 has an invalid length. [ 1688.127385][T23885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5223'. [ 1688.315911][T23888] netlink: 'syz.0.5224': attribute type 10 has an invalid length. [ 1688.833460][T23899] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5228'. [ 1689.764622][T23894] delete_channel: no stack [ 1690.398389][T23910] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.5232'. [ 1691.288402][T23901] netlink: 'syz.0.5229': attribute type 10 has an invalid length. [ 1691.485217][T23913] netlink: 'syz.2.5233': attribute type 10 has an invalid length. [ 1691.509355][T23917] netlink: 'syz.1.5242': attribute type 10 has an invalid length. [ 1691.592616][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5243'. [ 1691.975081][T23930] netlink: 'syz.1.5236': attribute type 27 has an invalid length. [ 1691.988547][T23930] netlink: 'syz.1.5236': attribute type 4 has an invalid length. [ 1692.000668][T23930] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5236'. [ 1693.181281][T23939] delete_channel: no stack [ 1694.943458][T23949] netlink: 'syz.2.5245': attribute type 10 has an invalid length. [ 1694.953893][T23951] netlink: 'syz.0.5246': attribute type 10 has an invalid length. [ 1695.756068][T23977] sctp: [Deprecated]: syz.3.5255 (pid 23977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1695.756068][T23977] Use struct sctp_sack_info instead [ 1695.780038][ T5085] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1695.869049][T23982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5258'. [ 1695.944860][T23984] netlink: 'syz.1.5259': attribute type 10 has an invalid length. [ 1696.300933][T23988] netlink: 'syz.0.5260': attribute type 10 has an invalid length. [ 1697.181211][T23992] delete_channel: no stack [ 1698.849387][T24007] sctp: [Deprecated]: syz.1.5268 (pid 24007) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1698.849387][T24007] Use struct sctp_sack_info instead [ 1698.891351][ T5085] Bluetooth: hci1: unexpected event 0x05 length: 15 > 4 [ 1699.010557][T24012] netlink: 'syz.3.5270': attribute type 10 has an invalid length. [ 1699.370939][T24017] netlink: 'syz.0.5272': attribute type 10 has an invalid length. [ 1699.775723][T24035] netlink: 'syz.1.5275': attribute type 10 has an invalid length. [ 1699.855563][T24035] team0: left allmulticast mode [ 1699.873803][T24035] team_slave_1: left allmulticast mode [ 1699.887993][T24035] hsr_slave_0: left allmulticast mode [ 1699.904812][T24035] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 1699.912077][T24035] team0: left promiscuous mode [ 1699.926451][T24035] team_slave_1: left promiscuous mode [ 1699.942655][T24035] hsr_slave_0: left promiscuous mode [ 1699.963078][T24035] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 1699.972518][T24035] bridge0: port 3(team0) entered disabled state [ 1700.027344][T24036] Ÿë: port 2(gretap0) entered blocking state [ 1700.040208][T24036] Ÿë: port 2(gretap0) entered disabled state [ 1700.050683][T24036] gretap0: entered allmulticast mode [ 1700.060520][T24036] gretap0: entered promiscuous mode [ 1700.074732][T24038] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5278'. [ 1700.805362][T24048] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5283'. [ 1700.819951][T24045] netlink: 'syz.1.5282': attribute type 10 has an invalid length. [ 1700.849438][T24050] netlink: 'syz.3.5285': attribute type 10 has an invalid length. [ 1700.989048][T24056] netlink: 'syz.0.5283': attribute type 10 has an invalid length. [ 1701.437277][T24059] delete_channel: no stack [ 1701.731002][T24068] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5292'. [ 1702.282744][T24076] netlink: 'syz.2.5291': attribute type 10 has an invalid length. [ 1702.301859][T24076] team0: left allmulticast mode [ 1702.307296][T24076] team_slave_1: left allmulticast mode [ 1702.312865][T24076] hsr_slave_0: left allmulticast mode [ 1702.319679][T24076] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1702.326924][T24076] team0: left promiscuous mode [ 1702.332265][T24076] team_slave_1: left promiscuous mode [ 1702.351969][T24076] hsr_slave_0: left promiscuous mode [ 1702.369698][T24076] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1702.382488][T24076] bridge0: port 2(team0) entered disabled state [ 1702.415377][T24070] Ÿë: port 2(veth0_to_team) entered blocking state [ 1702.482052][T24070] Ÿë: port 2(veth0_to_team) entered disabled state [ 1702.523642][T24070] veth0_to_team: entered allmulticast mode [ 1702.595888][T24070] veth0_to_team: entered promiscuous mode [ 1704.550891][T24083] netlink: 'syz.2.5294': attribute type 10 has an invalid length. [ 1704.559004][T24090] netlink: 'syz.0.5296': attribute type 10 has an invalid length. [ 1705.925307][T24117] netlink: 'syz.1.5306': attribute type 10 has an invalid length. [ 1706.107019][T24125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5308'. [ 1706.121117][T24122] netlink: 'syz.3.5307': attribute type 10 has an invalid length. [ 1706.604070][T24132] Ÿë: port 1(veth0_to_team) entered blocking state [ 1706.610849][T24132] Ÿë: port 1(veth0_to_team) entered disabled state [ 1706.628911][T24132] veth0_to_team: entered allmulticast mode [ 1706.661626][T24132] veth0_to_team: entered promiscuous mode [ 1708.754647][T24149] sit0: left allmulticast mode [ 1709.520163][T24155] netlink: 'syz.3.5317': attribute type 10 has an invalid length. [ 1709.537197][T24157] netlink: 'syz.2.5318': attribute type 10 has an invalid length. [ 1709.787894][T24183] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5322'. [ 1709.899607][T24183] netlink: 'syz.2.5322': attribute type 3 has an invalid length. [ 1709.908792][T24183] netlink: 146772 bytes leftover after parsing attributes in process `syz.2.5322'. [ 1710.120117][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5324'. [ 1710.622188][T24197] Ÿë: port 2(gretap0) entered blocking state [ 1710.631156][T24197] Ÿë: port 2(gretap0) entered disabled state [ 1710.643112][T24197] gretap0: entered allmulticast mode [ 1710.662516][T24197] gretap0: entered promiscuous mode [ 1711.312752][T24211] netlink: 'syz.0.5329': attribute type 10 has an invalid length. [ 1711.660152][T24220] netlink: 'syz.2.5330': attribute type 10 has an invalid length. [ 1711.872689][T24222] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5333'. [ 1712.466836][T24234] netlink: 'syz.1.5337': attribute type 1 has an invalid length. [ 1712.474920][T24234] netlink: 'syz.1.5337': attribute type 3 has an invalid length. [ 1712.497734][T24234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5337'. [ 1714.354118][T24239] netlink: 'syz.3.5339': attribute type 21 has an invalid length. [ 1714.805745][T24247] netlink: 'syz.1.5340': attribute type 10 has an invalid length. [ 1714.835025][T24250] netlink: 'syz.0.5342': attribute type 10 has an invalid length. [ 1715.144215][T24261] netlink: 'syz.1.5344': attribute type 10 has an invalid length. [ 1715.604911][T24265] sit0: left allmulticast mode [ 1716.436866][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5350'. [ 1718.464887][T24292] netlink: 'syz.3.5352': attribute type 10 has an invalid length. [ 1718.472889][T24295] netlink: 'syz.1.5353': attribute type 10 has an invalid length. [ 1718.772137][T24307] netlink: 'syz.2.5354': attribute type 10 has an invalid length. [ 1718.805526][T24306] netlink: 'syz.3.5355': attribute type 10 has an invalid length. [ 1719.368410][T24320] netlink: 'syz.2.5361': attribute type 1 has an invalid length. [ 1719.483569][T24320] netlink: 'syz.2.5361': attribute type 3 has an invalid length. [ 1719.513872][T24320] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5361'. [ 1719.781567][T24325] netlink: 'syz.2.5365': attribute type 10 has an invalid length. [ 1719.841517][T24326] sctp: [Deprecated]: syz.0.5364 (pid 24326) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1719.841517][T24326] Use struct sctp_sack_info instead [ 1719.950293][ T5085] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1720.390029][T24340] netlink: 'syz.3.5370': attribute type 10 has an invalid length. [ 1720.536187][T24346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5372'. [ 1723.604914][T24366] netlink: 'syz.2.5376': attribute type 10 has an invalid length. [ 1724.392516][T24384] netlink: 'syz.2.5383': attribute type 10 has an invalid length. [ 1724.480992][T24382] sit0: entered promiscuous mode [ 1724.896378][T24388] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5385'. [ 1725.186317][T24399] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5389'. [ 1725.819241][T24409] sctp: [Deprecated]: syz.2.5391 (pid 24409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1725.819241][T24409] Use struct sctp_sack_info instead [ 1725.946986][ T5085] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 1727.805467][T24419] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1727.831016][T24420] netlink: 'syz.1.5394': attribute type 10 has an invalid length. [ 1728.056070][T24431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1728.117912][T24429] sit0: left allmulticast mode [ 1728.120062][T24435] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5397'. [ 1728.248669][T24435] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1728.515756][T24433] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5398'. [ 1728.536665][T24435] netlink: 'syz.2.5397': attribute type 10 has an invalid length. [ 1728.555335][T24435] bridge0: left allmulticast mode [ 1729.530684][T24452] netlink: 'syz.3.5404': attribute type 10 has an invalid length. [ 1730.650329][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.663419][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.716192][T24469] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5410'. [ 1730.740091][T24471] netlink: 'syz.0.5417': attribute type 10 has an invalid length. [ 1731.043665][T24476] netlink: 'syz.1.5421': attribute type 10 has an invalid length. [ 1731.917848][T24499] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5423'. [ 1732.127127][T24503] netlink: 'syz.0.5425': attribute type 10 has an invalid length. [ 1732.571620][T24509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1733.136390][T24530] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5435'. [ 1733.147394][T24528] netlink: 'syz.0.5436': attribute type 10 has an invalid length. [ 1733.988499][T24551] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5446'. [ 1734.076555][T24556] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1734.391076][T24564] netlink: 'syz.2.5448': attribute type 10 has an invalid length. [ 1734.930124][T24576] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1734.939902][T24576] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1735.184309][T24584] netlink: 'syz.2.5460': attribute type 10 has an invalid length. [ 1735.381592][T24591] netlink: 'syz.0.5455': attribute type 10 has an invalid length. [ 1735.426560][T24578] netlink: 198584 bytes leftover after parsing attributes in process `syz.0.5455'. [ 1735.441402][T24578] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1736.731238][T24626] netlink: 'syz.3.5472': attribute type 10 has an invalid length. [ 1736.788413][T24630] netlink: 39 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1736.807972][T24630] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5474'. [ 1737.021173][T24637] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5476'. [ 1737.128450][T24637] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1737.279864][T24637] netlink: 'syz.1.5476': attribute type 10 has an invalid length. [ 1737.303812][T24637] bridge0: left allmulticast mode [ 1737.670214][T24643] sctp: [Deprecated]: syz.3.5479 (pid 24643) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1737.670214][T24643] Use struct sctp_sack_info instead [ 1738.096870][T24650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5482'. [ 1738.562570][T24659] netlink: 'syz.2.5485': attribute type 10 has an invalid length. [ 1740.534269][T24661] netlink: 'syz.0.5486': attribute type 10 has an invalid length. [ 1740.542541][T24666] netlink: 'syz.2.5488': attribute type 2 has an invalid length. [ 1740.563106][T24666] netlink: 'syz.2.5488': attribute type 8 has an invalid length. [ 1740.573274][T24666] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5488'. [ 1740.778026][T24676] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5492'. [ 1740.783427][T24674] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1740.811020][T24677] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5489'. [ 1740.814200][T24674] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 1740.840184][T24677] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1740.923412][T24677] netlink: 'syz.3.5489': attribute type 10 has an invalid length. [ 1741.509095][T24689] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 1741.529509][T24689] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5495'. [ 1741.818676][T24699] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5499'. [ 1741.878691][T24702] netlink: 'syz.1.5498': attribute type 10 has an invalid length. [ 1742.419177][T24710] netlink: 'syz.2.5503': attribute type 2 has an invalid length. [ 1742.430571][T24710] netlink: 'syz.2.5503': attribute type 8 has an invalid length. [ 1742.474354][T24710] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5503'. [ 1742.487738][T24711] netlink: 'syz.1.5502': attribute type 2 has an invalid length. [ 1742.496309][T24711] netlink: 'syz.1.5502': attribute type 8 has an invalid length. [ 1742.504720][T24711] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5502'. [ 1742.713369][T24718] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5507'. [ 1742.839611][T24724] sctp: [Deprecated]: syz.1.5508 (pid 24724) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1742.839611][T24724] Use struct sctp_sack_info instead [ 1742.890536][T24729] netlink: 39 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1742.912508][T24729] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5510'. [ 1743.821186][T24750] validate_nla: 1 callbacks suppressed [ 1743.821256][T24750] netlink: 'syz.1.5523': attribute type 10 has an invalid length. [ 1744.116596][T24762] netlink: 'syz.3.5517': attribute type 2 has an invalid length. [ 1744.140073][T24762] netlink: 'syz.3.5517': attribute type 8 has an invalid length. [ 1744.148088][T24762] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5517'. [ 1744.235409][T24761] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5518'. [ 1744.462325][T24767] netlink: 'syz.2.5520': attribute type 10 has an invalid length. [ 1744.840727][T24779] netlink: 39 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1744.850882][T24779] netlink: 160 bytes leftover after parsing attributes in process `syz.1.5527'. [ 1744.990533][T24782] netlink: 'syz.0.5528': attribute type 10 has an invalid length. [ 1745.813853][T24798] netlink: 'syz.2.5534': attribute type 10 has an invalid length. [ 1745.826145][T24796] netlink: 'syz.3.5533': attribute type 3 has an invalid length. [ 1746.373076][T24809] netlink: 'syz.2.5539': attribute type 10 has an invalid length. [ 1746.426646][T24811] netlink: 'syz.0.5540': attribute type 2 has an invalid length. [ 1746.455868][T24811] netlink: 'syz.0.5540': attribute type 8 has an invalid length. [ 1746.955215][T24823] __nla_validate_parse: 3 callbacks suppressed [ 1746.955238][T24823] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5544'. [ 1747.260886][T24835] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.5548'. [ 1747.287358][T24833] netlink: 39 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1747.335615][T24833] netlink: 160 bytes leftover after parsing attributes in process `syz.0.5545'. [ 1747.397560][T24839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5549'. [ 1750.115148][T24858] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5553'. [ 1750.269774][T24864] validate_nla: 3 callbacks suppressed [ 1750.269814][T24864] netlink: 'syz.0.5556': attribute type 2 has an invalid length. [ 1750.293637][T24864] netlink: 'syz.0.5556': attribute type 8 has an invalid length. [ 1750.302481][T24864] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5556'. [ 1750.386772][T24866] netlink: 'syz.3.5558': attribute type 10 has an invalid length. [ 1750.871054][T24876] netlink: 'syz.3.5561': attribute type 10 has an invalid length. [ 1751.021512][T24879] netlink: 'syz.0.5560': attribute type 10 has an invalid length. [ 1751.068546][T24879] geneve0: entered promiscuous mode [ 1751.092493][T24882] netlink: 'syz.2.5562': attribute type 10 has an invalid length. [ 1751.524715][T24892] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5567'. [ 1751.614446][T24890] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1751.715198][T24890] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5566'. [ 1751.948875][T24890] syz.2.5566 (24890) used greatest stack depth: 18408 bytes left [ 1752.039981][T24896] netlink: 'syz.1.5569': attribute type 10 has an invalid length. [ 1753.982046][T24907] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.5571'. [ 1753.991745][T24910] netlink: 'syz.1.5572': attribute type 10 has an invalid length. [ 1754.198185][T24914] netlink: 'syz.1.5574': attribute type 10 has an invalid length. [ 1754.227877][T24918] netlink: 196 bytes leftover after parsing attributes in process `syz.3.5575'. [ 1754.276204][T24921] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5584'. [ 1755.139143][T24922] netlink: 'syz.2.5576': attribute type 10 has an invalid length. [ 1755.149052][T24922] geneve0: entered promiscuous mode [ 1757.314768][T24934] validate_nla: 1 callbacks suppressed [ 1757.314786][T24934] netlink: 'syz.1.5578': attribute type 25 has an invalid length. [ 1757.329212][T24934] netlink: 'syz.1.5578': attribute type 9 has an invalid length. [ 1757.339260][T24939] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5579'. [ 1757.348724][T24938] netlink: 'syz.2.5580': attribute type 10 has an invalid length. [ 1757.591554][T24943] netlink: 'syz.2.5582': attribute type 10 has an invalid length. [ 1757.955310][T24952] netlink: 'syz.0.5595': attribute type 10 has an invalid length. [ 1758.008348][T24947] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1758.248629][T24961] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1758.324619][T24963] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5589'. [ 1760.025949][T24971] netlink: 196 bytes leftover after parsing attributes in process `syz.0.5591'. [ 1760.041416][T24973] netlink: 'syz.2.5592': attribute type 25 has an invalid length. [ 1760.053221][T24973] netlink: 'syz.2.5592': attribute type 9 has an invalid length. [ 1760.137169][T24975] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5593'. [ 1760.248278][T24980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5594'. [ 1760.328614][T24969] netlink: 'syz.3.5600': attribute type 10 has an invalid length. [ 1760.387376][T24969] geneve0: entered promiscuous mode [ 1760.933639][T24987] netlink: 'syz.1.5598': attribute type 10 has an invalid length. [ 1760.968718][T24987] netlink: 164 bytes leftover after parsing attributes in process `syz.1.5598'. [ 1761.698662][T24997] netlink: 'syz.2.5599': attribute type 3 has an invalid length. [ 1761.706613][T24997] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5599'. [ 1762.491090][T25003] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5605'. [ 1766.111139][T25020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5608'. [ 1766.402788][T25027] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5609'. [ 1766.982465][T25045] netlink: 196 bytes leftover after parsing attributes in process `syz.1.5624'. [ 1767.036740][T25041] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5615'. [ 1767.324797][T25049] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5617'. [ 1770.378214][T25063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5621'. [ 1771.241649][T25072] bridge0: entered allmulticast mode [ 1771.331285][T25077] netlink: 'syz.3.5627': attribute type 10 has an invalid length. [ 1771.416431][T25077] netlink: 'syz.3.5627': attribute type 9 has an invalid length. [ 1771.428889][T25077] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5627'. [ 1772.714193][T25080] netlink: 'syz.0.5628': attribute type 4 has an invalid length. [ 1772.732384][T25080] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5628'. [ 1772.775150][T25080] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1772.822530][T25089] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5626'. [ 1772.901524][T25093] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5630'. [ 1773.065569][T25101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5633'. [ 1773.094812][T25095] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1773.139049][T25104] netlink: 'syz.1.5634': attribute type 25 has an invalid length. [ 1773.149314][T25104] netlink: 'syz.1.5634': attribute type 9 has an invalid length. [ 1773.164498][T25095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5631'. [ 1773.360728][T25109] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.5635'. [ 1773.388348][T25109] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5635'. [ 1777.287625][T25132] netlink: 'syz.1.5641': attribute type 9 has an invalid length. [ 1777.295956][T25132] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5641'. [ 1779.199476][T25131] netlink: 'syz.1.5641': attribute type 10 has an invalid length. [ 1779.208441][T25135] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5642'. [ 1779.547782][T25141] netlink: 196 bytes leftover after parsing attributes in process `syz.2.5644'. [ 1779.557467][T25143] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1779.574031][T25143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5646'. [ 1780.146137][T25147] syzkaller0: entered promiscuous mode [ 1780.151909][T25147] syzkaller0: entered allmulticast mode [ 1780.166563][T25156] netlink: 'syz.3.5650': attribute type 21 has an invalid length. [ 1780.184081][T25156] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1780.201737][T25157] netlink: 'syz.2.5649': attribute type 2 has an invalid length. [ 1780.209896][T25157] netlink: 'syz.2.5649': attribute type 8 has an invalid length. [ 1780.226339][T25157] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5649'. [ 1780.236586][T25160] netlink: 184 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1780.248431][T25163] netlink: 'syz.3.5650': attribute type 10 has an invalid length. [ 1780.257590][T25163] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5650'. [ 1780.612692][T25171] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5653'. [ 1780.683116][T25169] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1780.801875][T25166] netlink: 'syz.2.5651': attribute type 10 has an invalid length. [ 1780.846232][T25166] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1780.864827][T25176] syzkaller0: left promiscuous mode [ 1780.870115][T25176] syzkaller0: left allmulticast mode [ 1781.202063][T25183] netlink: 'syz.1.5656': attribute type 10 has an invalid length. [ 1781.296601][T25183] netlink: 'syz.1.5656': attribute type 9 has an invalid length. [ 1782.254233][T25193] netlink: 'syz.3.5660': attribute type 2 has an invalid length. [ 1782.416839][T25200] validate_nla: 1 callbacks suppressed [ 1782.416878][T25200] netlink: 'syz.1.5662': attribute type 21 has an invalid length. [ 1782.443026][T25200] __nla_validate_parse: 8 callbacks suppressed [ 1782.443068][T25200] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1782.582746][T25209] netlink: 'syz.1.5662': attribute type 10 has an invalid length. [ 1782.592737][T25209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5662'. [ 1782.625245][T25210] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5663'. [ 1783.943148][T25213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5665'. [ 1784.010513][T25206] netlink: 'syz.2.5664': attribute type 4 has an invalid length. [ 1784.064107][T25206] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5664'. [ 1784.163350][T25206] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1784.582744][T25224] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5669'. [ 1786.454054][T25222] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1786.462318][T25216] netlink: 'syz.0.5666': attribute type 10 has an invalid length. [ 1786.470877][T25216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5666'. [ 1786.494277][T25216] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1786.701140][T25230] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5670'. [ 1786.736024][T25234] netlink: 'syz.1.5671': attribute type 10 has an invalid length. [ 1786.817435][T25234] netlink: 'syz.1.5671': attribute type 9 has an invalid length. [ 1786.832159][T25234] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5671'. [ 1787.543476][T25243] netlink: 'syz.0.5673': attribute type 2 has an invalid length. [ 1787.552623][T25243] netlink: 'syz.0.5673': attribute type 8 has an invalid length. [ 1787.561167][T25243] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5673'. [ 1787.573644][T25242] netlink: 'syz.3.5674': attribute type 10 has an invalid length. [ 1787.620145][T25245] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1787.679144][T25245] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5675'. [ 1787.709068][T25247] netlink: 'syz.3.5674': attribute type 9 has an invalid length. [ 1787.720339][T25247] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.5674'. [ 1788.076480][T25256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5679'. [ 1788.104605][T25251] netlink: 'syz.1.5677': attribute type 4 has an invalid length. [ 1788.126330][T25251] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5677'. [ 1788.230133][T25251] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1788.265913][T25253] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5678'. [ 1789.054897][T24437] syzkaller0: tun_net_xmit 76 [ 1789.081772][T25268] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 1789.089321][T25268] syzkaller0: group set to 4 [ 1789.124147][T24437] syzkaller0: tun_net_xmit 76 [ 1789.226174][T24437] syzkaller0: tun_net_xmit 76 [ 1789.228847][T25280] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5683'. [ 1789.259818][T25276] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1789.271817][T25276] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1789.415227][T25281] netlink: 'syz.1.5685': attribute type 10 has an invalid length. [ 1789.532385][T25281] netlink: 'syz.1.5685': attribute type 9 has an invalid length. [ 1789.561496][T25283] netlink: 10 bytes leftover after parsing attributes in process `syz.2.5687'. [ 1789.568072][T25281] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.5685'. [ 1790.403022][T25289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5689'. [ 1790.447446][T25301] netlink: 'syz.3.5692': attribute type 4 has an invalid length. [ 1790.467238][T25301] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1791.786565][T25312] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1791.830476][T25312] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1792.048313][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.055092][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.239468][T25322] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 1792.479714][T25322] syz.3.5699 (25322) used greatest stack depth: 18216 bytes left [ 1792.683461][T25336] __nla_validate_parse: 6 callbacks suppressed [ 1792.683482][T25336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5703'. [ 1793.099687][T25345] netlink: 'syz.2.5709': attribute type 2 has an invalid length. [ 1793.140482][T25345] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5709'. [ 1793.213316][T25338] netlink: 'syz.1.5702': attribute type 10 has an invalid length. [ 1793.234200][T25338] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5702'. [ 1793.255756][T25338] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1793.718541][T25355] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1793.791022][T25355] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1793.845854][T25359] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 1793.892070][T25359] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5712'. [ 1794.038979][ T5085] Bluetooth: hci3: unexpected event 0x12 length: 15 > 8 [ 1794.161565][T25371] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5714'. [ 1794.212451][T25365] netlink: 'syz.2.5715': attribute type 25 has an invalid length. [ 1794.227861][T25365] netlink: 'syz.2.5715': attribute type 9 has an invalid length. [ 1794.261277][T25369] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5716'. [ 1794.285871][T25374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5717'. [ 1794.734034][T25382] netlink: 76 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1794.977671][T25382] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5720'. [ 1795.812427][T25393] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1795.834410][ T5085] Bluetooth: hci0: unexpected event 0x12 length: 15 > 8 [ 1796.116223][T25406] netlink: 'syz.1.5727': attribute type 25 has an invalid length. [ 1796.157448][T25406] netlink: 'syz.1.5727': attribute type 9 has an invalid length. [ 1796.689732][T25414] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1796.868947][ T5085] Bluetooth: hci2: unexpected event 0x12 length: 15 > 8 [ 1797.021542][T25428] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1797.641097][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1797.896102][T25449] __nla_validate_parse: 4 callbacks suppressed [ 1797.896148][T25449] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5747'. [ 1798.130075][T25457] netlink: 'syz.0.5752': attribute type 2 has an invalid length. [ 1798.138335][T25457] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5752'. [ 1798.163600][T25461] netlink: 'syz.2.5753': attribute type 25 has an invalid length. [ 1798.193039][T25461] netlink: 'syz.2.5753': attribute type 9 has an invalid length. [ 1798.557400][T25471] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5757'. [ 1798.611438][T25471] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1798.672080][T25472] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1798.884220][T25468] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5756'. [ 1799.136231][T25478] netlink: 'syz.2.5760': attribute type 10 has an invalid length. [ 1799.166086][T25478] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5760'. [ 1799.605401][T25482] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 1799.687280][T25482] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5762'. [ 1799.709961][T25494] netlink: 'syz.1.5765': attribute type 25 has an invalid length. [ 1799.725284][T25494] netlink: 'syz.1.5765': attribute type 9 has an invalid length. [ 1800.417444][T25514] netlink: 'syz.0.5777': attribute type 10 has an invalid length. [ 1800.443067][T25518] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5779'. [ 1800.462332][T25518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1800.554523][T25516] netlink: 'syz.2.5778': attribute type 25 has an invalid length. [ 1800.565621][T25516] netlink: 'syz.2.5778': attribute type 9 has an invalid length. [ 1800.731994][T25520] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 1800.781917][T25520] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5780'. [ 1801.061659][T25539] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5788'. [ 1801.095636][T25539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1801.422086][T25543] netlink: 'syz.2.5790': attribute type 10 has an invalid length. [ 1801.627423][T25550] netlink: 10 bytes leftover after parsing attributes in process `syz.3.5794'. [ 1801.701276][T25558] bridge_slave_1: default FDB implementation only supports local addresses [ 1802.521276][T25580] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 1802.692567][T25580] syz.1.5807 (25580) used greatest stack depth: 18152 bytes left [ 1803.573245][T25600] validate_nla: 2 callbacks suppressed [ 1803.573329][T25600] netlink: 'syz.0.5816': attribute type 10 has an invalid length. [ 1803.623742][T25602] __nla_validate_parse: 2 callbacks suppressed [ 1803.645406][T25602] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5818'. [ 1804.585977][T25612] netlink: 'syz.2.5823': attribute type 29 has an invalid length. [ 1804.610169][T25612] netlink: 'syz.2.5823': attribute type 29 has an invalid length. [ 1804.621117][T25612] netlink: 'syz.2.5823': attribute type 29 has an invalid length. [ 1804.873949][T25622] netlink: 'syz.2.5828': attribute type 25 has an invalid length. [ 1804.894068][T25622] netlink: 'syz.2.5828': attribute type 9 has an invalid length. [ 1804.996558][T25624] netlink: 'syz.1.5829': attribute type 10 has an invalid length. [ 1805.400271][T25630] netlink: 'syz.2.5831': attribute type 25 has an invalid length. [ 1805.454600][T25630] netlink: 'syz.2.5831': attribute type 9 has an invalid length. [ 1805.964171][ T5085] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1806.183693][T25648] netlink: 'syz.3.5840': attribute type 10 has an invalid length. [ 1806.837474][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1808.444539][ T5085] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 1808.666613][T25705] validate_nla: 9 callbacks suppressed [ 1808.666695][T25705] netlink: 'syz.0.5864': attribute type 10 has an invalid length. [ 1808.888588][T25718] netlink: 'syz.1.5871': attribute type 25 has an invalid length. [ 1808.945612][T25718] netlink: 'syz.1.5871': attribute type 9 has an invalid length. [ 1809.304431][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1809.685703][T25740] netlink: 'syz.3.5881': attribute type 10 has an invalid length. [ 1810.186463][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1811.666250][T25795] netlink: 'syz.0.5907': attribute type 29 has an invalid length. [ 1811.683146][T25795] netlink: 'syz.0.5907': attribute type 29 has an invalid length. [ 1811.696205][T25795] netlink: 'syz.0.5907': attribute type 29 has an invalid length. [ 1811.710211][ T5085] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1811.714617][T25795] netlink: 'syz.0.5907': attribute type 29 has an invalid length. [ 1811.972140][T25792] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5906'. [ 1812.449276][T25821] netlink: 'syz.1.5916': attribute type 25 has an invalid length. [ 1812.488607][T25821] netlink: 'syz.1.5916': attribute type 9 has an invalid length. [ 1812.549109][ T5085] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1812.858544][ T5085] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1813.096808][T25847] tap0: tun_chr_ioctl cmd 1074025673 [ 1813.190509][T25851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1813.210411][T25851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1813.236337][T25851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1813.265056][T25851] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5929'. [ 1813.569231][ T5085] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1813.864407][T25876] validate_nla: 4 callbacks suppressed [ 1813.864426][T25876] netlink: 'syz.0.5942': attribute type 29 has an invalid length. [ 1813.941714][T25876] netlink: 'syz.0.5942': attribute type 29 has an invalid length. [ 1813.953454][T25877] netlink: 'syz.0.5942': attribute type 29 has an invalid length. [ 1813.980776][T25876] netlink: 'syz.0.5942': attribute type 29 has an invalid length. [ 1814.097557][T25885] netlink: 'syz.1.5945': attribute type 29 has an invalid length. [ 1814.195045][T25885] netlink: 'syz.1.5945': attribute type 29 has an invalid length. [ 1814.203627][T25890] netlink: 'syz.1.5945': attribute type 29 has an invalid length. [ 1814.285738][T25891] netlink: 'syz.1.5945': attribute type 29 has an invalid length. [ 1814.395408][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1814.612942][ T5085] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1814.738526][T25913] netlink: 'syz.3.5957': attribute type 29 has an invalid length. [ 1814.774743][T25913] netlink: 'syz.3.5957': attribute type 29 has an invalid length. [ 1815.357921][T25929] netlink: 10 bytes leftover after parsing attributes in process `syz.0.5961'. [ 1820.809254][T26001] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.5995'. [ 1821.018979][T26003] validate_nla: 11 callbacks suppressed [ 1821.019020][T26003] netlink: 'syz.1.5996': attribute type 25 has an invalid length. [ 1821.035215][T26003] netlink: 'syz.1.5996': attribute type 9 has an invalid length. [ 1821.504141][T26029] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6007'. [ 1821.797149][T26035] netlink: 'syz.2.6011': attribute type 25 has an invalid length. [ 1821.809379][T26035] netlink: 'syz.2.6011': attribute type 9 has an invalid length. [ 1821.846653][T26040] netlink: 16278 bytes leftover after parsing attributes in process `syz.1.6013'. [ 1822.093501][T26051] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6018'. [ 1822.102346][T26053] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1822.114838][T26053] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1822.140880][T26053] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1822.151845][T26053] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1822.172813][T26053] netlink: 'syz.3.6019': attribute type 29 has an invalid length. [ 1822.485381][T26060] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6022'. [ 1822.534258][T26064] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6023'. [ 1823.271184][T26091] netlink: 'syz.2.6042': attribute type 25 has an invalid length. [ 1823.439949][T26097] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6034'. [ 1825.907619][T26164] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.6067'. [ 1826.966859][T26176] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 1826.980805][T26176] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6073'. [ 1827.792950][T26210] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6087'. [ 1827.832088][T26209] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6086'. [ 1827.849508][T26209] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1828.625581][T26237] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6099'. [ 1829.188769][T26249] validate_nla: 12 callbacks suppressed [ 1829.188814][T26249] netlink: 'syz.2.6104': attribute type 25 has an invalid length. [ 1829.215601][T26249] netlink: 'syz.2.6104': attribute type 9 has an invalid length. [ 1829.935587][T26269] netlink: 'syz.0.6113': attribute type 10 has an invalid length. [ 1831.348230][T26300] netlink: 'syz.2.6129': attribute type 9 has an invalid length. [ 1831.367645][T26300] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.6129'. [ 1831.629285][T26308] netlink: 'syz.2.6131': attribute type 25 has an invalid length. [ 1831.638689][T26308] netlink: 'syz.2.6131': attribute type 9 has an invalid length. [ 1831.735691][ T5085] Bluetooth: Unexpected start frame (len 149) [ 1831.743128][ T5085] Bluetooth: Frame is too long (len 149, expected len 4) [ 1832.585736][T26334] netlink: 'syz.2.6143': attribute type 25 has an invalid length. [ 1832.595106][T26334] netlink: 'syz.2.6143': attribute type 9 has an invalid length. [ 1833.311978][T26353] netlink: 'syz.2.6153': attribute type 25 has an invalid length. [ 1833.321675][T26353] netlink: 'syz.2.6153': attribute type 9 has an invalid length. [ 1833.434965][T26358] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6154'. [ 1834.229522][T26380] netlink: 'syz.2.6165': attribute type 25 has an invalid length. [ 1834.253962][T26380] netlink: 'syz.2.6165': attribute type 9 has an invalid length. [ 1834.316902][T26390] netlink: 135856 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1834.326847][T26390] netlink: 8442 bytes leftover after parsing attributes in process `syz.0.6169'. [ 1834.558407][T26394] netlink: 'syz.2.6170': attribute type 25 has an invalid length. [ 1834.568414][T26394] netlink: 'syz.2.6170': attribute type 9 has an invalid length. [ 1834.680409][ T5085] Bluetooth: Frame is too long (len 149, expected len 4) [ 1836.138270][T26423] netlink: 'syz.2.6185': attribute type 25 has an invalid length. [ 1836.151784][T26423] netlink: 'syz.2.6185': attribute type 9 has an invalid length. [ 1836.189570][ T5085] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 1836.766334][T26452] netlink: 'syz.1.6198': attribute type 25 has an invalid length. [ 1836.774548][T26452] netlink: 'syz.1.6198': attribute type 9 has an invalid length. [ 1839.257635][T26501] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6220'. [ 1840.146977][T26541] netlink: 'syz.3.6238': attribute type 9 has an invalid length. [ 1840.155651][T26541] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1840.468005][T26544] netlink: 'syz.3.6238': attribute type 9 has an invalid length. [ 1840.478970][T26544] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6238'. [ 1841.930574][T26570] netlink: 'syz.1.6249': attribute type 25 has an invalid length. [ 1841.938979][T26570] netlink: 'syz.1.6249': attribute type 9 has an invalid length. [ 1842.996024][T26596] netlink: 'syz.2.6259': attribute type 25 has an invalid length. [ 1843.005481][T26596] netlink: 'syz.2.6259': attribute type 9 has an invalid length. [ 1843.502369][T26612] netlink: 'syz.1.6265': attribute type 9 has an invalid length. [ 1843.535633][T26612] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6265'. [ 1843.872306][T26615] netlink: 'syz.1.6265': attribute type 9 has an invalid length. [ 1843.885518][T26615] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.6265'. [ 1845.436442][T26632] netlink: 'syz.0.6273': attribute type 9 has an invalid length. [ 1845.444403][T26632] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.6273'. [ 1846.222019][T26660] netlink: 'syz.3.6284': attribute type 1 has an invalid length. [ 1846.243835][T26660] netlink: 'syz.3.6284': attribute type 4 has an invalid length. [ 1846.263890][T26660] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.6284'. [ 1846.687496][T26680] netlink: 'syz.2.6291': attribute type 25 has an invalid length. [ 1846.695492][T26680] netlink: 'syz.2.6291': attribute type 9 has an invalid length. [ 1847.377940][T26690] netlink: 'syz.2.6303': attribute type 25 has an invalid length. [ 1847.414228][T26690] netlink: 'syz.2.6303': attribute type 9 has an invalid length. [ 1848.105833][T26702] netlink: 'syz.2.6301': attribute type 25 has an invalid length. [ 1848.133821][T26702] netlink: 'syz.2.6301': attribute type 9 has an invalid length. [ 1849.943803][T26732] netlink: 'syz.1.6314': attribute type 25 has an invalid length. [ 1850.482500][T26747] validate_nla: 1 callbacks suppressed [ 1850.482519][T26747] netlink: 'syz.2.6322': attribute type 1 has an invalid length. [ 1850.550438][T26747] netlink: 'syz.2.6322': attribute type 4 has an invalid length. [ 1850.558515][T26747] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6322'. [ 1853.195421][T26791] __sock_release: fasync list not empty! [ 1853.496018][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.502674][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.062458][T26796] netlink: 'syz.2.6340': attribute type 25 has an invalid length. [ 1854.084009][T26796] netlink: 'syz.2.6340': attribute type 9 has an invalid length. [ 1855.709389][T26829] netlink: 'syz.1.6354': attribute type 25 has an invalid length. [ 1855.733979][T26829] netlink: 'syz.1.6354': attribute type 9 has an invalid length. [ 1855.760862][ T5085] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1855.806984][T26831] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6355'. [ 1856.800000][T26867] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6370'. [ 1857.005819][T26876] netlink: 'syz.2.6372': attribute type 25 has an invalid length. [ 1857.025874][T26876] netlink: 'syz.2.6372': attribute type 9 has an invalid length. [ 1857.899008][T26897] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6381'. [ 1858.506617][ T5085] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 1858.847341][T26937] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6397'. [ 1859.059551][T26939] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6398'. [ 1861.443834][T26955] netlink: 'syz.1.6404': attribute type 25 has an invalid length. [ 1861.451729][T26955] netlink: 'syz.1.6404': attribute type 9 has an invalid length. [ 1861.517180][T26957] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6405'. [ 1862.551945][T26969] netlink: 'syz.1.6418': attribute type 25 has an invalid length. [ 1862.596574][T26969] netlink: 'syz.1.6418': attribute type 9 has an invalid length. [ 1862.772288][T26972] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6410'. [ 1862.913555][T26982] netlink: 'syz.1.6413': attribute type 29 has an invalid length. [ 1862.952834][T26982] netlink: 'syz.1.6413': attribute type 29 has an invalid length. [ 1863.214065][T26990] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6420'. [ 1863.426267][T26998] netlink: 'syz.1.6423': attribute type 25 has an invalid length. [ 1863.443739][T26998] netlink: 'syz.1.6423': attribute type 9 has an invalid length. [ 1863.921738][T27000] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6424'. [ 1864.639787][T27008] netlink: 'syz.2.6427': attribute type 29 has an invalid length. [ 1864.752663][T27008] netlink: 'syz.2.6427': attribute type 29 has an invalid length. [ 1865.357231][T27030] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1866.985391][T27060] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1867.119362][T27068] netlink: 'syz.0.6452': attribute type 10 has an invalid length. [ 1868.770779][T27100] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.6462'. [ 1868.967387][T27098] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6461'. [ 1869.469385][T27117] syzkaller0: entered promiscuous mode [ 1869.483905][T27117] syzkaller0: entered allmulticast mode [ 1869.855675][T27126] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.6476'. [ 1870.122406][ T5085] Bluetooth: hci1: unexpected event 0x09 length: 15 > 3 [ 1871.018532][T27158] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.6488'. [ 1871.419939][T27168] netlink: 'syz.2.6493': attribute type 25 has an invalid length. [ 1871.443193][T27168] netlink: 'syz.2.6493': attribute type 9 has an invalid length. [ 1871.864254][T27185] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.6501'. [ 1872.169945][T27196] netlink: 'syz.1.6506': attribute type 25 has an invalid length. [ 1872.184349][T27196] netlink: 'syz.1.6506': attribute type 9 has an invalid length. [ 1872.248769][T27200] syzkaller0: entered promiscuous mode [ 1872.254597][T27200] syzkaller0: entered allmulticast mode [ 1872.477484][T27205] netlink: 'syz.1.6511': attribute type 25 has an invalid length. [ 1872.499912][T27205] netlink: 'syz.1.6511': attribute type 9 has an invalid length. [ 1872.607813][T27210] netlink: 'syz.3.6513': attribute type 29 has an invalid length. [ 1872.636631][T27215] netlink: 'syz.3.6513': attribute type 29 has an invalid length. [ 1872.674800][T27210] netlink: 'syz.3.6513': attribute type 29 has an invalid length. [ 1872.708396][T27216] netlink: 'syz.3.6513': attribute type 21 has an invalid length. [ 1872.739086][T27216] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6513'. [ 1874.060208][T27235] TCP: TCP_TX_DELAY enabled [ 1874.214011][T27245] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.6525'. [ 1874.447554][ T5085] Bluetooth: hci0: unexpected event 0x09 length: 15 > 3 [ 1875.159070][T27272] netlink: 'syz.2.6537': attribute type 25 has an invalid length. [ 1875.201226][T27272] netlink: 'syz.2.6537': attribute type 9 has an invalid length. [ 1875.957650][T27281] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.6543'. [ 1876.304298][T27289] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6545'. [ 1876.677946][T27300] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6558'. [ 1877.150054][T27319] syzkaller0: entered promiscuous mode [ 1877.155728][T27319] syzkaller0: entered allmulticast mode [ 1877.529143][T27328] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6563'. [ 1877.580398][T27332] netlink: 38831 bytes leftover after parsing attributes in process `syz.1.6564'. [ 1877.795917][T27336] netlink: 184 bytes leftover after parsing attributes in process `syz.0.6567'. [ 1877.826212][T27339] netlink: 'syz.2.6569': attribute type 25 has an invalid length. [ 1877.834359][T27339] netlink: 'syz.2.6569': attribute type 9 has an invalid length. [ 1878.249073][T27354] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6575'. [ 1878.298833][T27358] syzkaller0: entered promiscuous mode [ 1878.304577][T27358] syzkaller0: entered allmulticast mode [ 1878.591615][T27366] netlink: 'syz.1.6587': attribute type 25 has an invalid length. [ 1878.609741][T27366] netlink: 'syz.1.6587': attribute type 9 has an invalid length. [ 1878.620812][T27368] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.6579'. [ 1878.972636][T27380] netlink: 'syz.1.6582': attribute type 25 has an invalid length. [ 1878.981164][T27380] netlink: 'syz.1.6582': attribute type 9 has an invalid length. [ 1879.612865][T27395] syzkaller0: entered promiscuous mode [ 1879.620597][T27395] syzkaller0: entered allmulticast mode [ 1879.627565][T27393] netlink: 'syz.2.6591': attribute type 25 has an invalid length. [ 1879.644189][T27393] netlink: 'syz.2.6591': attribute type 9 has an invalid length. [ 1880.057632][T27411] netlink: 38831 bytes leftover after parsing attributes in process `syz.0.6596'. [ 1880.445208][T27421] netlink: 'syz.1.6604': attribute type 25 has an invalid length. [ 1880.456626][T27421] netlink: 'syz.1.6604': attribute type 9 has an invalid length. [ 1882.156205][T27456] syzkaller0: tun_chr_ioctl cmd 2147767520 [ 1882.165824][T27456] syzkaller0: tun_net_xmit 1280 [ 1882.171291][ T5817] syzkaller0: tun_net_xmit 76 [ 1882.850604][ T5816] syzkaller0: tun_net_xmit 76 [ 1885.269140][T27489] validate_nla: 2 callbacks suppressed [ 1885.269159][T27489] netlink: 'syz.2.6627': attribute type 25 has an invalid length. [ 1885.282711][T27489] netlink: 'syz.2.6627': attribute type 9 has an invalid length. [ 1885.504864][ T5817] syzkaller0: tun_net_xmit 76 [ 1885.512616][T27497] syzkaller0: tun_chr_ioctl cmd 2147767521 [ 1885.525890][T27497] syzkaller0: tun_net_xmit 1280 [ 1885.567324][T27502] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6629'. [ 1886.221634][T27520] netlink: 'syz.1.6642': attribute type 25 has an invalid length. [ 1886.247177][T27520] netlink: 'syz.1.6642': attribute type 9 has an invalid length. [ 1886.558023][T27526] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6645'. [ 1887.065303][T27546] netlink: 'syz.3.6653': attribute type 29 has an invalid length. [ 1887.087547][T27546] netlink: 'syz.3.6653': attribute type 29 has an invalid length. [ 1887.119494][T27546] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6653'. [ 1887.146199][T27546] netlink: 'syz.3.6653': attribute type 29 has an invalid length. [ 1887.155392][T27546] netlink: 'syz.3.6653': attribute type 29 has an invalid length. [ 1888.174708][T27566] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6661'. [ 1888.565033][T27579] netlink: 'syz.1.6666': attribute type 25 has an invalid length. [ 1888.572957][T27579] netlink: 'syz.1.6666': attribute type 9 has an invalid length. [ 1889.256816][T27597] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.6672'. [ 1889.733210][T27605] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6675'. [ 1890.616544][T27618] validate_nla: 4 callbacks suppressed [ 1890.616561][T27618] netlink: 'syz.1.6681': attribute type 4 has an invalid length. [ 1890.725983][T27618] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6681'. [ 1891.068277][T27626] netlink: 'syz.1.6684': attribute type 25 has an invalid length. [ 1891.077556][T27626] netlink: 'syz.1.6684': attribute type 9 has an invalid length. [ 1891.304589][T27632] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6686'. [ 1891.658890][T27639] netlink: 'syz.2.6688': attribute type 25 has an invalid length. [ 1891.675074][T27639] netlink: 'syz.2.6688': attribute type 9 has an invalid length. [ 1894.577770][T27705] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6706'. [ 1894.997507][T27710] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6709'. [ 1895.046341][T27714] netlink: 'syz.3.6710': attribute type 21 has an invalid length. [ 1895.291255][T27721] netlink: 'syz.0.6711': attribute type 19 has an invalid length. [ 1895.309575][T27721] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.6711'. [ 1896.094580][T27739] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1896.102452][T27739] IPv6: NLM_F_CREATE should be set when creating new route [ 1896.111828][T27739] IPv6: NLM_F_CREATE should be set when creating new route [ 1896.120011][T27739] IPv6: NLM_F_CREATE should be set when creating new route [ 1897.228775][T27745] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6718'. [ 1897.962456][ T5085] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 1898.537596][T27782] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1898.552504][T27782] IPv6: NLM_F_CREATE should be set when creating new route [ 1898.561214][T27782] IPv6: NLM_F_CREATE should be set when creating new route [ 1898.569445][T27782] IPv6: NLM_F_CREATE should be set when creating new route [ 1898.746293][T27785] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6731'. [ 1899.715506][ T5085] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 1899.738820][T27801] syzkaller0: entered promiscuous mode [ 1899.751555][T27801] syzkaller0: entered allmulticast mode [ 1902.935594][T27810] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1902.942837][T27810] IPv6: NLM_F_CREATE should be set when creating new route [ 1902.950196][T27810] IPv6: NLM_F_CREATE should be set when creating new route [ 1902.957465][T27810] IPv6: NLM_F_CREATE should be set when creating new route [ 1903.088607][T27825] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1903.539776][T27830] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6746'. [ 1904.958933][T27867] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6758'. [ 1905.305075][T27877] netlink: 'syz.2.6761': attribute type 2 has an invalid length. [ 1905.312849][T27877] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6761'. [ 1905.685969][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1906.955110][ T5085] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 1908.503466][ T5085] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 1910.316381][T27984] netlink: 'syz.0.6795': attribute type 2 has an invalid length. [ 1910.344716][T27984] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.6795'. [ 1910.479436][T27990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1910.508549][ T5085] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 1912.938107][T28024] netlink: 'syz.3.6808': attribute type 2 has an invalid length. [ 1912.958037][T28024] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.6808'. [ 1913.000672][ T5085] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 1913.043171][T28031] netlink: 'syz.1.6811': attribute type 25 has an invalid length. [ 1913.060570][T28031] netlink: 'syz.1.6811': attribute type 9 has an invalid length. [ 1914.925965][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.932299][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.442028][T28041] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1917.323123][T28060] netlink: 14078 bytes leftover after parsing attributes in process `syz.2.6823'. [ 1917.420712][T28065] netlink: 'syz.1.6824': attribute type 1 has an invalid length. [ 1917.429028][T28065] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.6824'. [ 1917.612826][T28067] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1917.623195][T28067] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1917.636809][T28067] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1917.769527][T28071] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6834'. [ 1917.810635][T28073] netlink: 'syz.1.6827': attribute type 1 has an invalid length. [ 1917.835246][T28073] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.6827'. [ 1918.182426][T28086] netlink: 176 bytes leftover after parsing attributes in process `syz.2.6830'. [ 1918.582009][T28089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1918.908687][T28096] netlink: 'syz.3.6833': attribute type 21 has an invalid length. [ 1918.945072][T28096] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6833'. [ 1919.006337][T28096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6833'. [ 1921.930628][T28125] tc_dump_action: action bad kind [ 1922.632866][T28130] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1922.744315][T28136] netlink: 'syz.3.6850': attribute type 10 has an invalid length. [ 1922.754419][ T5085] Bluetooth: hci2: unexpected subevent 0x0a length: 150 > 30 [ 1922.762021][ T5085] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 1922.763462][T28136] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1923.807048][T28151] netlink: 'syz.1.6852': attribute type 2 has an invalid length. [ 1923.822088][T28151] __nla_validate_parse: 2 callbacks suppressed [ 1923.822110][T28151] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.6852'. [ 1924.157968][T28162] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1924.284666][T28169] netlink: 'syz.0.6862': attribute type 10 has an invalid length. [ 1924.457462][T28173] netlink: 'syz.2.6864': attribute type 2 has an invalid length. [ 1924.486179][T28173] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.6864'. [ 1924.984608][T28185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6866'. [ 1926.118113][T28212] netlink: 'syz.2.6875': attribute type 10 has an invalid length. [ 1926.128244][T28212] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 1926.150908][T23239] Bluetooth: hci0: unexpected subevent 0x0a length: 150 > 30 [ 1926.158762][T23239] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 1927.310916][T28229] netlink: 'syz.1.6882': attribute type 25 has an invalid length. [ 1927.353821][T28229] netlink: 'syz.1.6882': attribute type 9 has an invalid length. [ 1928.136351][T28241] netlink: 61211 bytes leftover after parsing attributes in process `syz.2.6886'. [ 1928.567017][T28247] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6889'. [ 1931.908799][T28285] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6902'. [ 1932.916410][T28299] netlink: 'syz.0.6909': attribute type 10 has an invalid length. [ 1932.955260][T28299] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 1932.966369][ T5085] Bluetooth: hci3: unexpected subevent 0x0a length: 150 > 30 [ 1933.364981][T28313] sctp: [Deprecated]: syz.3.6914 (pid 28313) Use of int in maxseg socket option. [ 1933.364981][T28313] Use struct sctp_assoc_value instead [ 1933.796813][T28318] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6915'. [ 1934.325719][T28330] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1934.378560][T28330] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1934.465520][T28320] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1934.553919][T28332] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1934.651701][T28332] netlink: 'syz.3.6916': attribute type 10 has an invalid length. [ 1934.670070][T28332] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1934.690437][T28332] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1937.603551][T28357] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6928'. [ 1937.955320][T28360] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1938.001667][T28360] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1938.114115][T28367] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1938.132553][T28355] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1938.186106][T28360] netlink: 'syz.0.6930': attribute type 10 has an invalid length. [ 1938.209082][T28360] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6930'. [ 1938.310464][T28360] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 1939.248873][T28383] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6939'. [ 1939.893580][T28402] netlink: 'syz.2.6946': attribute type 25 has an invalid length. [ 1939.908242][T28402] netlink: 'syz.2.6946': attribute type 9 has an invalid length. [ 1940.021008][T28411] netlink: 'syz.0.6947': attribute type 10 has an invalid length. [ 1940.030780][T28411] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6947'. [ 1941.517309][T28435] netlink: 'syz.2.6957': attribute type 25 has an invalid length. [ 1941.525543][T28435] netlink: 'syz.2.6957': attribute type 9 has an invalid length. [ 1942.381630][T28451] sctp: [Deprecated]: syz.0.6961 (pid 28451) Use of int in maxseg socket option. [ 1942.381630][T28451] Use struct sctp_assoc_value instead [ 1942.725444][T23239] Bluetooth: hci1: unexpected event 0x0f length: 15 > 4 [ 1942.824248][T28453] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6963'. [ 1943.233535][T28467] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6974'. [ 1943.313496][T28466] netlink: 'syz.2.6968': attribute type 25 has an invalid length. [ 1943.343812][T28466] netlink: 'syz.2.6968': attribute type 9 has an invalid length. [ 1943.701106][ T787] syzkaller0: tun_net_xmit 76 [ 1943.747697][T28470] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6978'. [ 1944.701529][T28489] netlink: 10 bytes leftover after parsing attributes in process `syz.0.6983'. [ 1944.787159][T28494] sctp: [Deprecated]: syz.1.6975 (pid 28494) Use of int in maxseg socket option. [ 1944.787159][T28494] Use struct sctp_assoc_value instead [ 1944.866144][T28487] netlink: 'syz.2.6973': attribute type 10 has an invalid length. [ 1944.901291][T28487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6973'. [ 1945.126286][T28501] netlink: 'syz.1.6980': attribute type 25 has an invalid length. [ 1945.139768][T28501] netlink: 'syz.1.6980': attribute type 9 has an invalid length. [ 1945.569519][T28506] netlink: 'syz.3.6982': attribute type 1 has an invalid length. [ 1945.601959][T28506] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6982'. [ 1946.346624][T28518] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6987'. [ 1946.766170][T23239] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1946.775026][T23239] Bluetooth: hci1: Injecting HCI hardware error event [ 1946.785510][T23239] Bluetooth: hci1: hardware error 0x00 [ 1947.320386][T28521] Bluetooth: hci2: unexpected event 0x0f length: 15 > 4 [ 1948.447945][T28529] sctp: [Deprecated]: syz.2.6990 (pid 28529) Use of int in maxseg socket option. [ 1948.447945][T28529] Use struct sctp_assoc_value instead [ 1948.756127][T28537] netlink: 'syz.1.6992': attribute type 25 has an invalid length. [ 1948.764475][T28537] netlink: 'syz.1.6992': attribute type 9 has an invalid length. [ 1949.547194][T23239] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1950.074689][T28567] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1950.223100][T28567] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1950.983294][T28552] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.6997'. [ 1951.287264][T28578] netlink: 'syz.2.7005': attribute type 25 has an invalid length. [ 1951.303743][T28578] netlink: 'syz.2.7005': attribute type 9 has an invalid length. [ 1951.335037][T23239] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1951.343547][T23239] Bluetooth: hci2: Injecting HCI hardware error event [ 1951.352646][T28521] Bluetooth: hci2: hardware error 0x00 [ 1953.484213][T28521] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1954.694510][T28596] bridge0: port 2(team0) entered blocking state [ 1954.700951][T28596] bridge0: port 2(team0) entered disabled state [ 1954.710197][T28596] team0: entered allmulticast mode [ 1954.715899][T28596] team_slave_1: entered allmulticast mode [ 1954.721891][T28596] hsr_slave_0: entered allmulticast mode [ 1954.731005][T28596] team0: entered promiscuous mode [ 1954.736234][T28596] team_slave_1: entered promiscuous mode [ 1954.742592][T28596] hsr_slave_0: entered promiscuous mode [ 1954.749369][T28596] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 1956.696820][T28626] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7020'. [ 1957.133953][T28634] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7019'. [ 1958.953058][T28658] netlink: 'syz.1.7029': attribute type 25 has an invalid length. [ 1958.988221][T28658] netlink: 'syz.1.7029': attribute type 9 has an invalid length. [ 1959.592973][T28663] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1959.775144][T28670] netlink: 'syz.3.7035': attribute type 12 has an invalid length. [ 1959.988007][T28679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1960.194642][T28681] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7037'. [ 1962.499206][T28700] netlink: 64799 bytes leftover after parsing attributes in process `syz.3.7045'. [ 1964.349516][T28709] netlink: 'syz.1.7046': attribute type 2 has an invalid length. [ 1964.456600][T28709] netlink: 'syz.1.7046': attribute type 8 has an invalid length. [ 1964.543905][T28709] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7046'. [ 1969.044355][T28745] bridge0: port 2(team0) entered blocking state [ 1969.052005][T28745] bridge0: port 2(team0) entered disabled state [ 1969.058677][T28745] team0: entered allmulticast mode [ 1969.064112][T28745] team_slave_1: entered allmulticast mode [ 1969.069995][T28745] hsr_slave_0: entered allmulticast mode [ 1969.076265][T28745] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1969.085362][T28745] team0: entered promiscuous mode [ 1969.092855][T28745] team_slave_1: entered promiscuous mode [ 1969.113966][T28745] hsr_slave_0: entered promiscuous mode [ 1969.125709][T28745] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1970.863017][T28751] netlink: 'syz.0.7058': attribute type 2 has an invalid length. [ 1970.883907][T28751] netlink: 'syz.0.7058': attribute type 8 has an invalid length. [ 1970.895165][T28751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7058'. [ 1971.114070][T28764] netlink: 'syz.1.7061': attribute type 27 has an invalid length. [ 1971.125817][T28764] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.7061'. [ 1971.444545][T28775] delete_channel: no stack [ 1971.474248][T28775] delete_channel: no stack [ 1971.531418][T28771] netlink: 64799 bytes leftover after parsing attributes in process `syz.0.7063'. [ 1971.566639][T28772] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.7062'. [ 1972.106559][T28785] netlink: 'syz.1.7077': attribute type 25 has an invalid length. [ 1972.115732][T28785] netlink: 'syz.1.7077': attribute type 9 has an invalid length. [ 1972.371165][T28787] netlink: 'syz.0.7068': attribute type 2 has an invalid length. [ 1972.387286][T28787] netlink: 'syz.0.7068': attribute type 8 has an invalid length. [ 1972.398702][T28787] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1972.525595][T28792] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7072'. [ 1972.662479][T28794] netlink: 'syz.3.7073': attribute type 10 has an invalid length. [ 1972.704486][T28794] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7073'. [ 1972.872422][T28794] A link change request failed with some changes committed already. Interface ªªªªªª may have been left with an inconsistent configuration, please check. [ 1976.460368][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.466886][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.127389][T28829] netlink: 64799 bytes leftover after parsing attributes in process `syz.1.7078'. [ 1978.285288][T28834] netlink: 'syz.3.7080': attribute type 2 has an invalid length. [ 1978.293613][T28834] netlink: 'syz.3.7080': attribute type 8 has an invalid length. [ 1978.347948][T28834] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7080'. [ 1979.103373][T28842] netlink: 'syz.2.7081': attribute type 2 has an invalid length. [ 1979.151017][T28842] netlink: 'syz.2.7081': attribute type 8 has an invalid length. [ 1979.166104][T28842] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7081'. [ 1979.188245][T28851] netlink: 'syz.3.7084': attribute type 27 has an invalid length. [ 1979.206915][T28851] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.7084'. [ 1979.632617][T28856] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.7088'. [ 1981.148979][T28882] netlink: 64799 bytes leftover after parsing attributes in process `syz.2.7094'. [ 1981.324888][T28878] netlink: 'syz.3.7095': attribute type 27 has an invalid length. [ 1981.364744][T28878] netlink: 'syz.3.7095': attribute type 4 has an invalid length. [ 1981.423971][T28878] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7095'. [ 1981.509864][T28880] netlink: 'syz.1.7096': attribute type 2 has an invalid length. [ 1981.536119][T28880] netlink: 'syz.1.7096': attribute type 8 has an invalid length. [ 1981.577367][T28880] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7096'. [ 1982.183227][T28899] netlink: 'syz.0.7098': attribute type 27 has an invalid length. [ 1982.198268][T28899] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.7098'. [ 1982.589893][T28909] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7103'. [ 1982.689882][T28909] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1985.605890][T28938] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7112'. [ 1985.852100][T28941] validate_nla: 1 callbacks suppressed [ 1985.852145][T28941] netlink: 'syz.2.7113': attribute type 27 has an invalid length. [ 1985.929668][T28941] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.7113'. [ 1986.008907][T28946] netlink: 'syz.0.7115': attribute type 1 has an invalid length. [ 1986.034705][T28946] netlink: 'syz.0.7115': attribute type 3 has an invalid length. [ 1986.093516][T28946] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7115'. [ 1986.213046][T28951] netlink: 196 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1986.420163][T28951] netlink: 'syz.2.7117': attribute type 3 has an invalid length. [ 1986.459582][T28951] netlink: 146772 bytes leftover after parsing attributes in process `syz.2.7117'. [ 1986.561858][T28949] netlink: 'syz.1.7116': attribute type 21 has an invalid length. [ 1987.540080][T28968] netlink: 'syz.3.7121': attribute type 1 has an invalid length. [ 1987.548158][T28968] netlink: 'syz.3.7121': attribute type 3 has an invalid length. [ 1987.558952][T28968] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7121'. [ 1988.356931][T28981] netlink: 'syz.0.7127': attribute type 27 has an invalid length. [ 1988.378711][T28981] netlink: 'syz.0.7127': attribute type 4 has an invalid length. [ 1988.395382][T28981] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7127'. [ 1988.514110][T28989] netlink: 196 bytes leftover after parsing attributes in process `syz.3.7130'. [ 1988.746775][T28987] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7129'. [ 1988.763182][T28987] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1988.777874][T28993] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7131'. [ 1988.784423][T28989] netlink: 'syz.3.7130': attribute type 3 has an invalid length. [ 1988.808757][T28989] netlink: 146772 bytes leftover after parsing attributes in process `syz.3.7130'. [ 1992.943218][T29031] validate_nla: 2 callbacks suppressed [ 1992.943272][T29031] netlink: 'syz.2.7141': attribute type 27 has an invalid length. [ 1992.960691][T29031] netlink: 'syz.2.7141': attribute type 4 has an invalid length. [ 1993.024253][T29031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7141'. [ 1994.484984][T29057] netlink: 'syz.0.7155': attribute type 2 has an invalid length. [ 1994.492824][T29057] netlink: 'syz.0.7155': attribute type 8 has an invalid length. [ 1994.535512][T29057] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7155'. [ 1994.552735][T29050] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7149'. [ 1994.572769][T29050] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1994.977256][T29071] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7152'. [ 1995.955190][T29077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7154'. [ 1996.463849][T29089] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7158'. [ 1997.514997][T29111] netlink: 'syz.1.7164': attribute type 25 has an invalid length. [ 1997.544028][T29111] netlink: 'syz.1.7164': attribute type 9 has an invalid length. [ 1997.640123][T29109] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7163'. [ 1997.673736][T29109] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1997.859751][T29113] netlink: 'syz.3.7166': attribute type 1 has an invalid length. [ 1997.881020][T29113] netlink: 'syz.3.7166': attribute type 3 has an invalid length. [ 1997.893700][T29113] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7166'. [ 2000.313357][T29151] netlink: 'syz.1.7179': attribute type 1 has an invalid length. [ 2000.435173][T29151] netlink: 'syz.1.7179': attribute type 3 has an invalid length. [ 2000.442965][T29151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7179'. [ 2001.326903][T29155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7181'. [ 2001.810152][T29161] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7180'. [ 2001.835439][T29167] netlink: 'syz.0.7184': attribute type 39 has an invalid length. [ 2001.844378][T29161] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2004.244549][T29208] netlink: set zone limit has 8 unknown bytes [ 2004.569451][T29211] netlink: 'syz.3.7200': attribute type 39 has an invalid length. [ 2004.578279][T29205] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7199'. [ 2004.578330][T29205] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2005.604295][T29223] netlink: 194236 bytes leftover after parsing attributes in process `syz.2.7204'. [ 2005.655675][T29223] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 2005.860741][T29225] netlink: 'syz.3.7205': attribute type 10 has an invalid length. [ 2005.884133][T29225] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7205'. [ 2007.155324][T29234] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7209'. [ 2007.276100][T29238] netlink: 'syz.2.7210': attribute type 10 has an invalid length. [ 2009.700582][T29271] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7216'. [ 2010.036805][T29271] bridge_slave_1: default FDB implementation only supports local addresses [ 2010.213320][T29277] netlink: 'syz.2.7218': attribute type 10 has an invalid length. [ 2010.263663][T29277] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7218'. [ 2010.272848][T29277] team0: left allmulticast mode [ 2010.332333][T29277] team_slave_1: left allmulticast mode [ 2010.373816][T29277] hsr_slave_0: left allmulticast mode [ 2010.379299][T29277] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 2010.406142][T29277] team0: left promiscuous mode [ 2010.410994][T29277] team_slave_1: left promiscuous mode [ 2010.454040][T29277] hsr_slave_0: left promiscuous mode [ 2010.459599][T29277] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 2010.504238][T29277] bridge0: port 2(team0) entered disabled state [ 2011.321196][T29283] netlink: 'syz.2.7219': attribute type 39 has an invalid length. [ 2012.109873][T29299] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7226'. [ 2012.723624][T29291] netlink: set zone limit has 8 unknown bytes [ 2013.392916][T29317] netlink: 'syz.3.7229': attribute type 10 has an invalid length. [ 2013.518979][T29320] netlink: 'syz.3.7229': attribute type 9 has an invalid length. [ 2013.703686][T29320] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.7229'. [ 2015.355964][T29336] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7241'. [ 2015.429626][T29337] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.7232'. [ 2015.551177][T29337] bridge_slave_1: default FDB implementation only supports local addresses [ 2015.958410][T29343] netlink: 'syz.2.7234': attribute type 10 has an invalid length. [ 2015.983925][T29343] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7234'. [ 2016.181207][T29349] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7236'. [ 2016.388810][T29355] netlink: 'syz.0.7237': attribute type 10 has an invalid length. [ 2016.399067][T29355] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7237'. [ 2016.590908][T29361] netlink: 'syz.3.7238': attribute type 10 has an invalid length. [ 2016.616959][T29363] netlink: 'syz.2.7240': attribute type 10 has an invalid length. [ 2016.725077][T29363] netlink: 'syz.2.7240': attribute type 9 has an invalid length. [ 2016.747607][T29363] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.7240'. [ 2016.779896][T29361] netlink: set zone limit has 8 unknown bytes [ 2017.120780][T29369] netlink: 'syz.1.7242': attribute type 2 has an invalid length. [ 2017.140514][T29369] netlink: 'syz.1.7242': attribute type 8 has an invalid length. [ 2017.150165][T29369] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7242'. [ 2017.724187][T29383] netlink: 'syz.1.7247': attribute type 25 has an invalid length. [ 2017.752918][T29383] netlink: 'syz.1.7247': attribute type 9 has an invalid length. [ 2017.790905][T29382] netlink: 'syz.0.7249': attribute type 10 has an invalid length. [ 2017.818720][T29382] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7249'. [ 2017.838950][T29387] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7252'. [ 2017.895048][T29389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7254'. [ 2020.262161][T29429] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7268'. [ 2020.291145][T29422] netlink: 'syz.3.7265': attribute type 10 has an invalid length. [ 2020.351500][T29422] netlink: 2 bytes leftover after parsing attributes in process `syz.3.7265'. [ 2020.920648][T29447] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7274'. [ 2021.126768][T29447] bridge_slave_1: default FDB implementation only supports local addresses [ 2022.055989][T29465] validate_nla: 2 callbacks suppressed [ 2022.056054][T29465] netlink: 'syz.1.7281': attribute type 10 has an invalid length. [ 2022.075546][T29465] netlink: 2 bytes leftover after parsing attributes in process `syz.1.7281'. [ 2022.236249][T29468] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7282'. [ 2022.777839][T29473] netlink: 'syz.2.7293': attribute type 10 has an invalid length. [ 2022.848327][T29473] netlink: 2 bytes leftover after parsing attributes in process `syz.2.7293'. [ 2022.882133][T29477] netlink: 'syz.1.7283': attribute type 10 has an invalid length. [ 2022.961408][T29477] netlink: 'syz.1.7283': attribute type 9 has an invalid length. [ 2022.977870][T29477] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.7283'. [ 2024.070472][T29501] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7297'. [ 2024.233284][T29505] netlink: 'syz.0.7299': attribute type 10 has an invalid length. [ 2024.241971][T29505] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7299'. [ 2024.398757][T29517] netlink: 'syz.0.7304': attribute type 10 has an invalid length. [ 2024.436895][T29517] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7304'. [ 2024.809826][T29526] netlink: 'syz.2.7307': attribute type 25 has an invalid length. [ 2024.827309][T29526] netlink: 'syz.2.7307': attribute type 9 has an invalid length. [ 2025.356075][T29538] netlink: 'syz.3.7313': attribute type 10 has an invalid length. [ 2025.364385][T29538] veth1_vlan: entered allmulticast mode [ 2025.372178][T29538] team0: Port device macvlan0 added [ 2025.444259][T29544] netlink: 'syz.0.7316': attribute type 39 has an invalid length. [ 2026.693009][T29578] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7332'. [ 2026.705683][T29578] bridge_slave_1: default FDB implementation only supports local addresses [ 2027.108109][T29599] validate_nla: 4 callbacks suppressed [ 2027.108129][T29599] netlink: 'syz.1.7341': attribute type 10 has an invalid length. [ 2027.444726][T29615] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7347'. [ 2027.454629][T29612] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7347'. [ 2029.742518][T29682] netlink: 'syz.1.7376': attribute type 25 has an invalid length. [ 2029.771994][T29682] netlink: 'syz.1.7376': attribute type 9 has an invalid length. [ 2030.531778][T29694] netlink: 'syz.0.7379': attribute type 10 has an invalid length. [ 2030.581318][T29694] netlink: 'syz.0.7379': attribute type 9 has an invalid length. [ 2030.590065][T29694] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.7379'. [ 2031.456450][T29705] netlink: 164 bytes leftover after parsing attributes in process `syz.2.7387'. [ 2031.468460][T29707] netlink: 'syz.3.7388': attribute type 10 has an invalid length. [ 2031.476777][T29707] netlink: 152 bytes leftover after parsing attributes in process `syz.3.7388'. [ 2031.695453][T29721] netlink: 'syz.1.7393': attribute type 29 has an invalid length. [ 2031.726322][T29721] netlink: 'syz.1.7393': attribute type 29 has an invalid length. [ 2031.765695][T29721] netlink: 'syz.1.7393': attribute type 29 has an invalid length. [ 2031.791688][T29721] netlink: 'syz.1.7393': attribute type 29 has an invalid length. [ 2031.982059][T29719] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.7400'. [ 2032.825571][T29736] IPv6: Can't replace route, no match found [ 2032.933430][T29740] validate_nla: 2 callbacks suppressed [ 2032.933449][T29740] netlink: 'syz.1.7399': attribute type 29 has an invalid length. [ 2032.948573][T29740] netlink: 'syz.1.7399': attribute type 29 has an invalid length. [ 2032.974054][T29740] netlink: 'syz.1.7399': attribute type 29 has an invalid length. [ 2032.989837][T29740] netlink: 'syz.1.7399': attribute type 29 has an invalid length. [ 2033.005587][T29742] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 2033.011475][T29742] syzkaller0: Linktype set failed because interface is up [ 2033.032417][T29744] netlink: 164 bytes leftover after parsing attributes in process `syz.0.7401'. [ 2033.278500][T29758] netlink: 'syz.0.7410': attribute type 21 has an invalid length. [ 2033.286720][T29758] netlink: 'syz.0.7410': attribute type 1 has an invalid length. [ 2033.502457][T29763] netlink: 'syz.2.7412': attribute type 10 has an invalid length. [ 2033.632719][T29763] netlink: 'syz.2.7412': attribute type 9 has an invalid length. [ 2033.652682][T29763] netlink: 184904 bytes leftover after parsing attributes in process `syz.2.7412'. [ 2033.719846][T29770] netlink: 'syz.1.7415': attribute type 2 has an invalid length. [ 2034.391676][T29777] netlink: 'syz.3.7417': attribute type 29 has an invalid length. [ 2034.537636][T29773] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7416'. [ 2035.112786][T29806] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.7431'. [ 2035.330243][T29814] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7436'. [ 2035.353705][T29814] openvswitch: netlink: Key type 29 is not supported [ 2037.807065][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.813507][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2038.052753][T29915] netlink: 164 bytes leftover after parsing attributes in process `syz.1.7475'. [ 2047.276438][T30054] syz.1.7535: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz1,mems_allowed=0-1 [ 2047.426882][T30054] CPU: 0 PID: 30054 Comm: syz.1.7535 Not tainted syzkaller #0 [ 2047.434452][T30054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2047.444566][T30054] Call Trace: [ 2047.447855][T30054] [ 2047.450799][T30054] dump_stack_lvl+0x18c/0x250 [ 2047.455499][T30054] ? show_regs_print_info+0x20/0x20 [ 2047.460710][T30054] ? load_image+0x420/0x420 [ 2047.465226][T30054] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2047.471658][T30054] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2047.478186][T30054] warn_alloc+0x246/0x340 [ 2047.482555][T30054] ? stack_trace_save+0xaa/0x100 [ 2047.487529][T30054] ? zone_watermark_ok_safe+0x230/0x230 [ 2047.493122][T30054] ? kasan_set_track+0x5f/0x70 [ 2047.497915][T30054] ? kasan_set_track+0x4e/0x70 [ 2047.502700][T30054] ? __kasan_kmalloc+0x8f/0xa0 [ 2047.507513][T30054] ? xsk_init_queue+0xad/0x100 [ 2047.512295][T30054] ? xsk_setsockopt+0x4e5/0x760 [ 2047.517162][T30054] ? do_sock_setsockopt+0x175/0x1a0 [ 2047.522383][T30054] ? __x64_sys_setsockopt+0x182/0x200 [ 2047.527793][T30054] __vmalloc_node_range+0x126/0x1330 [ 2047.533157][T30054] ? free_vm_area+0x50/0x50 [ 2047.537707][T30054] vmalloc_user+0x74/0x80 [ 2047.542063][T30054] ? xskq_create+0xbf/0x170 [ 2047.546595][T30054] xskq_create+0xbf/0x170 [ 2047.550951][T30054] xsk_init_queue+0xad/0x100 [ 2047.555571][T30054] xsk_setsockopt+0x4e5/0x760 [ 2047.560274][T30054] ? xsk_poll+0x680/0x680 [ 2047.564629][T30054] ? __fget_files+0x28/0x4b0 [ 2047.569245][T30054] ? __fget_files+0x28/0x4b0 [ 2047.573866][T30054] ? aa_sock_opt_perm+0x74/0x100 [ 2047.578842][T30054] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 2047.584424][T30054] ? security_socket_setsockopt+0x7e/0xa0 [ 2047.590162][T30054] ? xsk_poll+0x680/0x680 [ 2047.594516][T30054] do_sock_setsockopt+0x175/0x1a0 [ 2047.599575][T30054] ? __fdget+0x180/0x210 [ 2047.603851][T30054] __x64_sys_setsockopt+0x182/0x200 [ 2047.609087][T30054] do_syscall_64+0x55/0xb0 [ 2047.613531][T30054] ? clear_bhb_loop+0x40/0x90 [ 2047.618234][T30054] ? clear_bhb_loop+0x40/0x90 [ 2047.622934][T30054] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2047.628856][T30054] RIP: 0033:0x7ff678d9ce59 [ 2047.633296][T30054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2047.652932][T30054] RSP: 002b:00007ff679ccb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2047.661377][T30054] RAX: ffffffffffffffda RBX: 00007ff679015fa0 RCX: 00007ff678d9ce59 [ 2047.669403][T30054] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000005 [ 2047.677423][T30054] RBP: 00007ff678e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 2047.685425][T30054] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 2047.693426][T30054] R13: 00007ff679016038 R14: 00007ff679015fa0 R15: 00007ffe6df02ee8 [ 2047.701455][T30054] [ 2047.733016][T30054] Mem-Info: [ 2047.738125][T30054] active_anon:7390 inactive_anon:0 isolated_anon:0 [ 2047.738125][T30054] active_file:18492 inactive_file:40688 isolated_file:0 [ 2047.738125][T30054] unevictable:768 dirty:84 writeback:0 [ 2047.738125][T30054] slab_reclaimable:37976 slab_unreclaimable:320278 [ 2047.738125][T30054] mapped:24061 shmem:1361 pagetables:532 [ 2047.738125][T30054] sec_pagetables:0 bounce:0 [ 2047.738125][T30054] kernel_misc_reclaimable:0 [ 2047.738125][T30054] free:1091501 free_pcp:4175 free_cma:0 [ 2047.786738][T30054] Node 0 active_anon:29560kB inactive_anon:0kB active_file:73968kB inactive_file:162548kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96244kB dirty:336kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:9596kB pagetables:2128kB sec_pagetables:0kB all_unreclaimable? no [ 2047.822473][T30054] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2047.911207][T30054] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2047.944172][T30054] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2047.987522][T30054] Node 0 DMA32 free:443076kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:29420kB inactive_anon:0kB active_file:73968kB inactive_file:161724kB unevictable:1536kB writepending:336kB present:3129332kB managed:2586928kB mlocked:0kB bounce:0kB free_pcp:7584kB local_pcp:1956kB free_cma:0kB [ 2048.035695][T30054] lowmem_reserve[]: 0 0 0 0 0 [ 2048.040691][T30054] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2048.069274][T30054] lowmem_reserve[]: 0 0 0 0 0 [ 2048.074707][T30054] Node 1 Normal free:3907308kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:9504kB local_pcp:6912kB free_cma:0kB [ 2048.146188][T30069] syzkaller0: tun_chr_ioctl cmd 1074025678 [ 2048.152227][T30069] syzkaller0: group set to 0 [ 2048.157206][T24437] syzkaller0: tun_net_xmit 76 [ 2048.164559][T30054] lowmem_reserve[]: 0 0 0 0 0 [ 2048.193995][ T23] syzkaller0: tun_net_xmit 76 [ 2048.211079][T30054] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2048.263851][T30054] Node 0 DMA32: 1946*4kB (UME) 1198*8kB (UME) 901*16kB (UME) 1029*32kB (UME) 424*64kB (UME) 120*128kB (UM) 75*256kB (UM) 62*512kB (UME) 46*1024kB (UME) 16*2048kB (UM) 50*4096kB (UM) = 442824kB [ 2048.313650][T30054] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2048.333761][T30054] Node 1 Normal: 255*4kB (UME) 62*8kB (UME) 32*16kB (UME) 198*32kB (UME) 61*64kB (UME) 14*128kB (UE) 2*256kB (UE) 1*512kB (M) 1*1024kB (E) 2*2048kB (UE) 949*4096kB (M) = 3907308kB [ 2048.363811][T30054] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.382723][T30054] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2048.423705][T30054] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2048.433339][T30054] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 2048.472998][T30054] 60543 total pagecache pages [ 2048.480617][T30054] 0 pages in swap cache [ 2048.486967][T30054] Free swap = 124996kB [ 2048.491331][T30054] Total swap = 124996kB [ 2048.498492][T30054] 2097051 pages RAM [ 2048.502535][T30054] 0 pages HighMem/MovableOnly [ 2048.509356][T30054] 416933 pages reserved [ 2048.514063][T30054] 0 pages cma reserved [ 2052.349737][T30179] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.7592'. [ 2053.089102][T30199] validate_nla: 19 callbacks suppressed [ 2053.089121][T30199] netlink: 'syz.3.7600': attribute type 21 has an invalid length. [ 2053.103274][T30199] netlink: 'syz.3.7600': attribute type 19 has an invalid length. [ 2053.111891][T30199] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.7600'. [ 2053.238852][T30185] netlink: 'syz.1.7594': attribute type 9 has an invalid length. [ 2053.246748][T30185] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.7594'. [ 2056.617954][T30254] netlink: 'syz.0.7622': attribute type 29 has an invalid length. [ 2056.627438][T30254] netlink: 'syz.0.7622': attribute type 29 has an invalid length. [ 2056.646870][T30254] netlink: 'syz.0.7622': attribute type 29 has an invalid length. [ 2056.661082][T30254] netlink: 'syz.0.7622': attribute type 29 has an invalid length. [ 2056.673349][T30254] netlink: 'syz.0.7622': attribute type 29 has an invalid length. [ 2056.729427][T30254] netlink: 'syz.0.7622': attribute type 29 has an invalid length. [ 2059.411326][T30333] syzkaller0: left allmulticast mode [ 2059.460591][T30335] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7658'. [ 2062.534629][T30392] netlink: 'syz.1.7683': attribute type 10 has an invalid length. [ 2062.593426][T30398] netlink: 'syz.1.7685': attribute type 10 has an invalid length. [ 2064.136248][T28521] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 2065.014285][T30440] netlink: 'syz.3.7703': attribute type 29 has an invalid length. [ 2065.037957][T30442] netlink: 'syz.3.7703': attribute type 29 has an invalid length. [ 2065.079606][T30440] netlink: 'syz.3.7703': attribute type 29 has an invalid length. [ 2065.110178][T30443] netlink: 'syz.3.7703': attribute type 21 has an invalid length. [ 2065.132146][T30443] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7703'. [ 2066.438240][T30467] netlink: 'syz.3.7713': attribute type 49 has an invalid length. [ 2066.732419][T30473] syzkaller0: entered promiscuous mode [ 2066.743649][T30473] syzkaller0: entered allmulticast mode [ 2069.861634][T30500] netlink: 184 bytes leftover after parsing attributes in process `syz.0.7724'. [ 2070.935696][T30515] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2072.022252][T28521] Bluetooth: Frame is too long (len 149, expected len 4) [ 2073.055335][T30568] netlink: 'syz.0.7752': attribute type 29 has an invalid length. [ 2073.065810][T30568] netlink: 'syz.0.7752': attribute type 29 has an invalid length. [ 2073.095855][T30568] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7752'. [ 2073.124274][T30568] netlink: 'syz.0.7752': attribute type 29 has an invalid length. [ 2073.135801][T30568] netlink: 'syz.0.7752': attribute type 29 has an invalid length. [ 2073.847224][T30592] netlink: 'syz.2.7762': attribute type 4 has an invalid length. [ 2073.863840][T30592] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7762'. [ 2081.077345][T30630] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2081.456482][T30642] bridge_slave_0: left allmulticast mode [ 2081.538953][T30642] bridge_slave_0: left promiscuous mode [ 2081.600976][T30642] bridge0: port 1(bridge_slave_0) entered disabled state [ 2082.801965][T30678] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 2082.826416][ T5817] syzkaller0: tun_net_xmit 76 [ 2082.834983][T30678] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 2088.357476][T30726] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7810'. [ 2088.369078][T30727] netlink: 'syz.2.7810': attribute type 12 has an invalid length. [ 2088.385335][T30727] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7810'. [ 2089.225727][T30748] bridge0: entered allmulticast mode [ 2089.235161][T30748] team0: left allmulticast mode [ 2089.240276][T30748] team_slave_1: left allmulticast mode [ 2089.246444][T30748] hsr_slave_0: left allmulticast mode [ 2089.252120][T30748] team0: left promiscuous mode [ 2089.257454][T30748] team_slave_1: left promiscuous mode [ 2089.263244][T30748] hsr_slave_0: left promiscuous mode [ 2089.269310][T30748] mac80211_hwsim hwsim8 wlan1: left promiscuous mode [ 2089.277674][T30748] bridge0: port 2(team0) entered disabled state [ 2089.288208][T30748] bridge_slave_0: left allmulticast mode [ 2089.294205][T30748] bridge_slave_0: left promiscuous mode [ 2089.300197][T30748] bridge0: port 1(bridge_slave_0) entered disabled state [ 2089.738155][T30763] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7824'. [ 2089.987364][T30765] netlink: 'syz.1.7825': attribute type 1 has an invalid length. [ 2090.007376][T30765] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.7825'. [ 2090.117447][T30770] netlink: 'syz.3.7826': attribute type 29 has an invalid length. [ 2090.142904][T30770] netlink: 'syz.3.7826': attribute type 29 has an invalid length. [ 2090.162072][T30774] netlink: 'syz.3.7826': attribute type 29 has an invalid length. [ 2090.188805][T30770] netlink: 'syz.3.7826': attribute type 29 has an invalid length. [ 2091.001306][T30798] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7835'. [ 2091.349487][T30809] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.7840'. [ 2091.363437][T30809] tc_dump_action: action bad kind [ 2091.523527][T30813] netlink: 'syz.3.7843': attribute type 2 has an invalid length. [ 2091.532512][T30813] netlink: 'syz.3.7843': attribute type 1 has an invalid length. [ 2091.540940][T30813] netlink: 'syz.3.7843': attribute type 2 has an invalid length. [ 2091.562008][T30813] netlink: 199672 bytes leftover after parsing attributes in process `syz.3.7843'. [ 2092.199635][T30819] netlink: 'syz.1.7846': attribute type 3 has an invalid length. [ 2092.231519][T30819] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7846'. [ 2096.266759][T30860] validate_nla: 1 callbacks suppressed [ 2096.266780][T30860] netlink: 'syz.3.7859': attribute type 10 has an invalid length. [ 2096.553256][T30872] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7864'. [ 2097.039620][T30888] netlink: 'syz.2.7868': attribute type 2 has an invalid length. [ 2097.048063][T30888] netlink: 'syz.2.7868': attribute type 1 has an invalid length. [ 2097.056311][T30888] netlink: 'syz.2.7868': attribute type 2 has an invalid length. [ 2097.064644][T30888] netlink: 199672 bytes leftover after parsing attributes in process `syz.2.7868'. [ 2098.034576][T30882] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7869'. [ 2099.283100][T30913] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.7878'. [ 2099.341360][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2099.348892][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2102.870234][T30940] netlink: 'syz.0.7884': attribute type 2 has an invalid length. [ 2102.880356][T30940] netlink: 'syz.0.7884': attribute type 1 has an invalid length. [ 2102.890397][T30940] netlink: 'syz.0.7884': attribute type 2 has an invalid length. [ 2102.915389][T30940] netlink: 199672 bytes leftover after parsing attributes in process `syz.0.7884'. [ 2103.182066][T30949] netlink: 'syz.2.7888': attribute type 10 has an invalid length. [ 2103.223777][T30949] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7888'. [ 2108.234200][T30983] netlink: 'syz.1.7897': attribute type 2 has an invalid length. [ 2108.242021][T30983] netlink: 'syz.1.7897': attribute type 1 has an invalid length. [ 2108.250256][T30983] netlink: 'syz.1.7897': attribute type 2 has an invalid length. [ 2108.259698][T30983] netlink: 199672 bytes leftover after parsing attributes in process `syz.1.7897'. [ 2108.568841][T30988] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.7901'. [ 2108.610167][T30988] IPv6: NLM_F_CREATE should be specified when creating new route [ 2108.628770][T30988] netlink: 1 bytes leftover after parsing attributes in process `syz.3.7901'. [ 2108.846875][T30999] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.7904'. [ 2111.433246][T31023] netlink: 'syz.3.7911': attribute type 2 has an invalid length. [ 2111.451550][T31023] netlink: 'syz.3.7911': attribute type 1 has an invalid length. [ 2111.471099][T31023] netlink: 'syz.3.7911': attribute type 2 has an invalid length. [ 2111.494211][T31023] netlink: 199672 bytes leftover after parsing attributes in process `syz.3.7911'. [ 2113.910042][T31054] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.7919'. [ 2118.175048][T31098] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7932'. [ 2118.276990][T31096] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.7931'. [ 2118.425461][T31106] netlink: 'syz.2.7933': attribute type 153 has an invalid length. [ 2118.462744][T31106] netlink: 'syz.2.7933': attribute type 1 has an invalid length. [ 2118.492570][T31105] netlink: 'syz.0.7935': attribute type 1 has an invalid length. [ 2118.506220][T31105] netlink: 'syz.0.7935': attribute type 2 has an invalid length. [ 2118.516513][T31106] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.7933'. [ 2118.525845][T31105] netlink: 'syz.0.7935': attribute type 2 has an invalid length. [ 2118.525994][T31105] netlink: 'syz.0.7935': attribute type 3 has an invalid length. [ 2118.554596][T31105] netlink: 'syz.0.7935': attribute type 4 has an invalid length. [ 2118.574136][T31105] netlink: 'syz.0.7935': attribute type 5 has an invalid length. [ 2118.582389][T31105] netlink: 'syz.0.7935': attribute type 6 has an invalid length. [ 2118.600072][T31105] netlink: 'syz.0.7935': attribute type 7 has an invalid length. [ 2118.623828][T31105] netlink: 126304 bytes leftover after parsing attributes in process `syz.0.7935'. [ 2118.981870][T31119] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2122.920867][T31140] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7945'. [ 2123.068859][T31142] netlink: 126304 bytes leftover after parsing attributes in process `syz.2.7946'. [ 2126.534571][T31161] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7954'. [ 2126.646550][T31166] netlink: 65051 bytes leftover after parsing attributes in process `syz.0.7961'. [ 2127.281466][T31180] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.7958'. [ 2127.943096][T31190] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7959'. [ 2128.102758][T31196] delete_channel: no stack [ 2128.106903][T31194] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7962'. [ 2128.117127][T31196] delete_channel: no stack [ 2128.192676][T31192] validate_nla: 17 callbacks suppressed [ 2128.192704][T31192] netlink: 'syz.3.7960': attribute type 1 has an invalid length. [ 2128.207027][T31192] netlink: 'syz.3.7960': attribute type 2 has an invalid length. [ 2128.215348][T31192] netlink: 'syz.3.7960': attribute type 2 has an invalid length. [ 2128.230810][T31192] netlink: 'syz.3.7960': attribute type 3 has an invalid length. [ 2128.239871][T31192] netlink: 'syz.3.7960': attribute type 4 has an invalid length. [ 2128.248174][T31192] netlink: 'syz.3.7960': attribute type 5 has an invalid length. [ 2128.256817][T31192] netlink: 'syz.3.7960': attribute type 6 has an invalid length. [ 2128.266586][T31192] netlink: 'syz.3.7960': attribute type 7 has an invalid length. [ 2128.275738][T31192] netlink: 'syz.3.7960': attribute type 9 has an invalid length. [ 2128.284776][T31192] netlink: 'syz.3.7960': attribute type 10 has an invalid length. [ 2128.305427][T31192] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.7960'. [ 2128.881063][T31207] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.7966'. [ 2131.930809][T31213] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.7969'. [ 2131.980891][T31227] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7974'. [ 2132.825732][T31244] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7979'. [ 2132.854140][T31246] delete_channel: no stack [ 2132.858760][T31246] delete_channel: no stack [ 2133.644796][T31253] validate_nla: 5 callbacks suppressed [ 2133.644814][T31253] netlink: 'syz.1.7983': attribute type 21 has an invalid length. [ 2134.264897][T31263] netlink: 'syz.0.7984': attribute type 29 has an invalid length. [ 2134.283852][T31263] netlink: 'syz.0.7984': attribute type 29 has an invalid length. [ 2134.302559][T31262] netlink: 'syz.0.7984': attribute type 29 has an invalid length. [ 2134.353166][T31263] netlink: 'syz.0.7984': attribute type 29 has an invalid length. [ 2134.385893][T31262] netlink: 763 bytes leftover after parsing attributes in process `syz.0.7984'. [ 2134.847477][T31267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7985'. [ 2135.051947][T31277] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7996'. [ 2135.358655][T31285] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.7988'. [ 2135.705014][T31290] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.7990'. [ 2135.974689][T31292] netlink: 'syz.0.7992': attribute type 10 has an invalid length. [ 2136.417172][T31299] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.7994'. [ 2136.437126][T31297] netlink: 'syz.2.7995': attribute type 29 has an invalid length. [ 2136.504351][T31297] netlink: 'syz.2.7995': attribute type 29 has an invalid length. [ 2136.599885][T31304] netlink: 'syz.2.7995': attribute type 29 has an invalid length. [ 2136.608936][T31305] netlink: 'syz.2.7995': attribute type 29 has an invalid length. [ 2136.752184][T31297] netlink: 763 bytes leftover after parsing attributes in process `syz.2.7995'. [ 2138.426745][T31329] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8004'. [ 2138.953105][T31342] netlink: 65051 bytes leftover after parsing attributes in process `syz.3.8006'. [ 2138.975549][T31339] validate_nla: 1 callbacks suppressed [ 2138.975570][T31339] netlink: 'syz.0.8014': attribute type 21 has an invalid length. [ 2139.129801][T31337] netlink: 'syz.2.8005': attribute type 10 has an invalid length. [ 2140.986834][T31374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8016'. [ 2141.057444][T31372] netlink: 'syz.3.8017': attribute type 10 has an invalid length. [ 2141.166546][T31372] netlink: 'syz.3.8017': attribute type 9 has an invalid length. [ 2141.178910][T31372] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.8017'. [ 2141.793845][T31379] netlink: 'syz.0.8018': attribute type 1 has an invalid length. [ 2141.823659][T31379] netlink: 'syz.0.8018': attribute type 3 has an invalid length. [ 2141.831449][T31379] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8018'. [ 2142.080053][T31384] netlink: 'syz.1.8019': attribute type 29 has an invalid length. [ 2142.185734][T31384] netlink: 'syz.1.8019': attribute type 29 has an invalid length. [ 2142.228395][T31386] netlink: 'syz.1.8019': attribute type 29 has an invalid length. [ 2142.237478][T31387] netlink: 'syz.1.8019': attribute type 29 has an invalid length. [ 2142.345365][T31384] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8019'. [ 2145.208152][T31434] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8042'. [ 2145.291105][T31438] validate_nla: 1 callbacks suppressed [ 2145.291148][T31438] netlink: 'syz.3.8033': attribute type 29 has an invalid length. [ 2145.313192][T31434] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8042'. [ 2145.347669][T31438] netlink: 'syz.3.8033': attribute type 29 has an invalid length. [ 2145.359839][T31440] netlink: 'syz.3.8033': attribute type 29 has an invalid length. [ 2145.399850][T31438] netlink: 'syz.3.8033': attribute type 29 has an invalid length. [ 2145.451626][T31438] netlink: 763 bytes leftover after parsing attributes in process `syz.3.8033'. [ 2145.613439][T31450] netlink: 'syz.3.8038': attribute type 21 has an invalid length. [ 2145.640398][T31446] netlink: 'syz.1.8037': attribute type 10 has an invalid length. [ 2145.941825][T31458] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8043'. [ 2147.099553][T31470] netlink: 'syz.3.8045': attribute type 1 has an invalid length. [ 2147.182426][T31470] netlink: 'syz.3.8045': attribute type 3 has an invalid length. [ 2147.240742][T31470] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8045'. [ 2147.395196][T31477] netlink: 'syz.2.8048': attribute type 29 has an invalid length. [ 2147.443832][T31477] netlink: 'syz.2.8048': attribute type 29 has an invalid length. [ 2147.460026][T31481] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8049'. [ 2147.502055][T31481] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8049'. [ 2147.583036][T31477] netlink: 763 bytes leftover after parsing attributes in process `syz.2.8048'. [ 2148.096151][T31487] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8059'. [ 2149.048094][T31515] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8061'. [ 2149.057759][T31511] netlink: 763 bytes leftover after parsing attributes in process `syz.1.8060'. [ 2149.085868][T31515] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8061'. [ 2150.724532][T31540] validate_nla: 9 callbacks suppressed [ 2150.724553][T31540] netlink: 'syz.3.8068': attribute type 1 has an invalid length. [ 2150.752210][T31540] netlink: 'syz.3.8068': attribute type 3 has an invalid length. [ 2150.792681][T31540] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8068'. [ 2151.450072][T31555] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8074'. [ 2153.328734][T31599] __nla_validate_parse: 1 callbacks suppressed [ 2153.328754][T31599] netlink: 76 bytes leftover after parsing attributes in process `syz.2.8091'. [ 2153.455811][T31599] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8091'. [ 2157.318996][T31655] netlink: 12518 bytes leftover after parsing attributes in process `syz.0.8108'. [ 2158.317157][T31693] netlink: 12518 bytes leftover after parsing attributes in process `syz.0.8120'. [ 2159.597333][T31737] netlink: 12518 bytes leftover after parsing attributes in process `syz.2.8136'. [ 2160.729435][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.737896][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 2160.970814][T31786] netlink: 12518 bytes leftover after parsing attributes in process `syz.0.8155'. [ 2222.151010][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 2222.160904][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 Stopping sshd: stopped /usr/sbin/sshd (pid 5531) OK Stopping crond: stopped /usr/sbin/crond (pid 5514) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 5434) Stopping network: OK Stopping iptables: OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 5122) OK umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes [ 2276.035561][ T1326] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.115361][ T1326] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.181442][ T1326] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 2276.238828][ T1326] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2276.391697][ T1326]  (unregistering): left allmulticast mode [ 2276.397889][ T1326]  (unregistering): left promiscuous mode [ 2276.405413][ T1326] Ÿë: port 1(c) entered disabled state [ 2277.255027][ T1373] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 2277.266732][ T1373] ACPI: PM: Preparing to enter system sleep state S5 [ 2277.276911][ T1373] kvm: exiting hardware virtualization [ 2277.282531][ T1373] reboot: Power down serialport: VM disconnected.