last executing test programs: 19m8.517553362s ago: executing program 0 (id=1): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2a, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x3, 0x3, 0xa, 0x9e, 0x0, 0x0, 0x8200, 0x8, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xffff, 0x2, @perf_bp={&(0x7f0000000180), 0x8}, 0x4000, 0xa3, 0x9, 0x3, 0x401, 0xf6a, 0x9, 0x0, 0x80000000}, 0x0, 0xe, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f00000001c0)='\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 19m7.913100756s ago: executing program 0 (id=9): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYRES64=r3, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000070000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r6}, &(0x7f0000000180)=0x20000, &(0x7f00000001c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r6}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r6, &(0x7f0000000100)="d0af02", &(0x7f0000000180)=""/238}, 0x20) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) r8 = perf_event_open(&(0x7f0000000680)={0x3, 0x80, 0x4c, 0xf5, 0x6, 0x8, 0x0, 0x9, 0x8a, 0x2, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x7fff, 0x5}, 0x118000, 0x0, 0x7, 0x1, 0x4, 0x8, 0xf, 0x0, 0xffffffff, 0x0, 0x4}, 0xffffffffffffffff, 0x8, r0, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x7, 0x7f, 0x6, 0x7, 0x0, 0x9, 0x10210, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x10, 0x0, @perf_config_ext={0xffffffffffffffff, 0xffffffffffffffff}, 0x20b4, 0x4, 0x3, 0x2, 0x7, 0x1, 0x200, 0x0, 0x9, 0x0, 0xfff}, 0x0, 0x7, r8, 0x1) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x3d, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108802, 0x7ff, 0x6, 0x0, 0x40, 0x2, 0x1ff, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = openat$cgroup(r7, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) mkdirat$cgroup(r9, &(0x7f0000000340)='syz0\x00', 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8905, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000120000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0xd18c9b60, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f03002a000b05d25a806c8c6f94f90524fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 19m6.588242105s ago: executing program 0 (id=13): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0xf, 0x0, 0x7, 0x0, 0x0, 0x5a1c, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0x4) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000015c0)=""/210, 0x73, 0xd2, 0x1, 0x186}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYBLOB="01deff000018000000f1ffffff00000000000000", @ANYRES32=r7, @ANYBLOB="03000000010000000300"/28], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 19m4.322017186s ago: executing program 0 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x4, 0x7f, 0x8, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x4, 0x4, 0x4, 0x5, @value=r0}, 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1004, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) 18m49.013723798s ago: executing program 32 (id=17): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum64={0x1, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, 0x0, 0x26, 0x0, 0x8}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001b00)=@bloom_filter={0x1e, 0x4, 0x7f, 0x8, 0x8000, 0xffffffffffffffff, 0x7, '\x00', 0x0, r0, 0x4, 0x4, 0x4, 0x5, @value=r0}, 0x50) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1004, 0x0, r4}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r5}, 0x38) 10.747666813s ago: executing program 2 (id=6966): socket$kcm(0x10, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0x0, 0xa, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x6498c2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r4 = openat$cgroup_devices(r0, &(0x7f00000001c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000000)=ANY=[@ANYBLOB='b 757'], 0xa) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000540)=0x200005) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0xffff, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, 0xffffffffffffffff) r6 = socket$kcm(0x11, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000140)=[{&(0x7f00000006c0)="62043c00920101000001ad2f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000c00)="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", 0x114}, {&(0x7f0000000a40)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb4714219a2d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xfff0}, {&(0x7f0000000840)="6f4720baeb54", 0x6}], 0x4}, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYRESDEC=r5, @ANYRESOCT=r7, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="1e0040000000000000000000", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r8 = gettid() syz_open_procfs$namespace(r8, &(0x7f0000000440)='ns/pid_for_children\x00') r9 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r9, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000001740)="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", 0x2ea}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1c00000000f400000000000008786f98e5adeb880d000000", @ANYRES32=0x0, @ANYBLOB="ac141410e00000010000000038000000000000000000000007000000441475817f00000100000006e0000001000000070094040000820c3a047e2aae56e4b9eab8000000"], 0x58}, 0x0) perf_event_open$cgroup(&(0x7f00000007c0)={0x5, 0x80, 0x9, 0xff, 0x2, 0x7, 0x0, 0x0, 0x0, 0xe8a9e4f47f50f8c9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x5984, 0x0, @perf_config_ext={0x3, 0x2}, 0x13205, 0x3, 0x9, 0x4, 0x3, 0x5, 0x5, 0x0, 0xc2e2, 0x0, 0x1}, r3, 0xc, r0, 0x8) socket$kcm(0x10, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r0}, 0x8) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x106101, 0x3, 0x0, 0x1, 0x9, 0x10000000, 0x4001}, 0xffffffffffffffff, 0x1, r1, 0x3) r10 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000300)=r0, 0xffffffffffffff6e) sendmsg$kcm(r10, &(0x7f0000000000)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7f, @mcast1, 0x3}, 0x80, &(0x7f0000000080)}, 0x0) 10.531394268s ago: executing program 2 (id=6968): r0 = socket$kcm(0x2, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0xec, 0x0, 0x1, 0x6, 0x0, 0x0, 0x80848, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x4, @perf_config_ext={0x0, 0x5}, 0x4c0e, 0x4, 0x2, 0x1, 0xff, 0x0, 0x1, 0x0, 0x1}, 0x0, 0x4, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff65, 0x0, 0x0, 0x0}, 0x94) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$kcm(0x29, 0x0, 0x0) close(r6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) close(0x3) sendmsg$kcm(r0, &(0x7f0000000800)={&(0x7f00000000c0)=@qipcrtr={0x2a, 0xfffffffd, 0xfffffffe}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000140)="cc975a5b7f77ce7f3e40cd50e3e881c63ee0cdd4b08aa149bde19c5771a583fcc6e90cf415e3dceed1ad1da2b0c5346fd11879532c01db99d2a381fd92bec53c23e1df03323e47b7144436a1cd53b37152feac9881948823924108768d6e6223536b9b776196743f25782795bac78203d03cb1f0aeb8e082096568e70e9772ec9e0536621e848a3cd4e257431b11b243b697cd8f55a7fc", 0x97}, {&(0x7f0000000200)="8c6c48b170276777e8d33a67817a146dde246c21897d2149109c5b8cc9af2ccf81dbbf569de484cb154a727fc5f1422dba82a5aaa0471fa66299f8cc9d2516880d7ac865682478f23a24a456e4dd38490b71d650679e19f4a581bd969c3053cc6aa0b8506de8afe9f944490a4599ee1c9b392fe2c986a4b951efbd2048d1754866c917a3798d00e0bdce03f9511283aa5978086704a27aebcbca6621bbf09921d05b3b06be2bf64b32f51cd34e81ee", 0xaf}, {&(0x7f0000000500)="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", 0xff}, {&(0x7f0000000600)="087d94c8dcba60d42f51fef3090d102da8df144265586f80e8", 0x19}, {&(0x7f0000000640)="16801ff95fb3fdc5f1fd0e6dd4a0716b54dd421d6c02f9b5c428733a1a3271e77ece45bf294a0f020d7560e10a1977500da029eeb845ed75086de28faecb700e43daae440aaa8518d960e9bac7deaf84d81944435498a74bbc3ed500076cfc37751060bf7c60e29ca7562a7758518b115ee17054da34a986ac088a8d6cb55b23e511b6d3a50478ba1ccb9e3721b4153f80b276fdd5bf94246b551e90f7cf9beae7f069504d7b52cb45d4c5314e182ab42709f1410c68a77ee601ed5919ed404b73a18c7d18832f2d16104bc26a37ffdf3b11d45e9df0eb4b77224d4943f1630990a9fe04baad3ce365", 0xe9}], 0x5, &(0x7f00000007c0)}, 0x0) r7 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r9) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x375, @loopback, 0xc, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r7, 0x84, 0x64, &(0x7f0000000000)=r10, 0x1c) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x6e, &(0x7f0000000000)=r11, 0x1c) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r12, 0x1, 0x1a, &(0x7f0000000040), 0x4) 10.283153483s ago: executing program 2 (id=6969): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000f80)=ANY=[@ANYBLOB], 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x4000000}, 0x94) 10.127054637s ago: executing program 2 (id=6970): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2000000000000, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a80015000700", 0x36}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="03000303c9ff07ff000100210a9580f05dc5c94b4bfb3c56130fa5aeaadd5ded", 0x20}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) 6.482540687s ago: executing program 2 (id=6982): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @random="7c0000001000", 'veth1_vlan\x00'}}, 0x80, 0x0}, 0x40000) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0xc0045878, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x42) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) close(r2) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) 5.839500521s ago: executing program 2 (id=6990): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000e, 0x95c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_bp={0x0}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xf7fff271, 0xffff, 0x0, 0x0, 0x0, 0x8000000020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8912, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x2000000, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x84) (async) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e44b904021d08000b000000e8fe55a11800150006", 0x1d}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e44b904021d08000b000000e8fe55a11800150006", 0x1d}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0xa1}, [@call]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="140000002d000b63d25a00648c2594f90424f3db", 0x14}], 0x1}, 0x4000800) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000003000000003800000700000011"], 0x48) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="ed", 0x1}], 0x1}, 0xe0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) (async) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd055, 0x200}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0xf}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x220, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="b700000012000000bfa30000000000007603000028feffff7a0af0fff8ffffff61a4f0ff000000005d040000000000007f000000000000002704000001ed0a002500000041806aa13e040000000000007b0300fe000000002d03000000000000c600f9ffffff00009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efd2a102ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef7054803d0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc532ef58de3c1b7646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff095edc710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf28bf6d8e8afcb913466aaa7f6df70252e79166d85827513acd02b5a655a314d31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f08050e46850600000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040b96e37c4f46010400000000c3da29faf75ddd1aa96960bca97af133824b881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf8707f0d5217e9bb5a05d9e22ce67f1231bd236ed200073826593c4e1a0f50a74bb482e486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e9978931485747292c6fe6e188750cf4f87cce2aa7d67c6133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc1caa80e64461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325ab4c5530dd6ee9fffc00000000000000d7c5af73c683625aaad5fea5004a76c9f8975ed4c5e4eb3e77e9885f69754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8264f7b029b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e8faec5f1b16b2014f6952ce7d6be12c6bdb9651ca6fc907061be311d1354e6295698594a73136237bee068d3819400e43544830a3f74b7942f22336953978a5b2032da4238cc61162c04c1297395b73e18c9387615a2bc87d9e2445f3d323d3fac347926a4bac694c55fe9d145906d410f58f1951405d10504efe402cae085afef5dbd617e87dd4a50d7eb8e327fb5db12cbd6a9efe8e671c4f251cabdfe3400a670d14b9b3cd8d86e492997a0168c022ef3536bd1dc731f4f9f8cb6c3857fb8aaaa95024f8da775f72950212b84fc6133ae14d1429cd4905dabb52e43af7e65acf97b4951fa1e967d16a5ed642efc855a4a46b85cd079934ad3188276efae9387eaa232697526e24b5d4fded86c3811ccd00520150b16000080122965558074956da5e4c3bbefcb64aa8be4456ed2caf0f467b6bbf3aa4371f5e76ab3f60afea80bb066aafb7517f787b090f419a20278a3c779e03afd9a6af6fd518e5dce030f88ec5a5cb7601a161da0f8089322d84ac523040d13e1f1300c2c6555bce60d95dd3288e53435713f03add23f14c8db5555c62de4f6260a483632a2ab447f88dd6efec73a0271a19ca3aa860aa4dcaeebe3d53040b853a7c02a5fcc08b3a572969bbe91c921ac1476027772c87d172ab29967e38ba49e3e57fafea83e495a6a1d1a4ebf83434986091dd66ffe3ffed0c39552a312e2db596d9c827e02f6fc13c8ddbb50bfd7dd8aa2f35f259fc83e007fe79d2d25e30830b92fca00a292dd3b856faa4b7e66e1b64505f65900839df71a97d4d07d37f7ecf8ed9a22da26ae674bba16c204f6b2f8f74fc56b7126d7c11ece6e88ec41192aaee75415c58d264a2b6adae02c821b62428902aad499825ab85a348638384cd12e61dbde5c47056f0a20b4e2a2328d5db5cfe56557a129e6be231acf5f57995c60d9fca5f63a0dfd18054717120bda466d04774b53208ad8b022719ca77a4e0a66b4708f791d849a5e2aaa0074a9560ede2600df5a5c41392fe9460080fcb1e65233fb8dbeec4c86dbcf6a0673e38d2d3615e5bfbde44afe0fa7564231fff7e7f1f3ad68492dd2ccb1decb15b5d7d3e37e8b7d28921c4b9280979521173f522df408d9818b6cc400098abb869921911480a876fbba698801937e8b4264eb6f5137bdaa075fdd88d22230592a790000000000000000000000003527dfd01b47000000000000000000000000000000000000000000000000000000000000000000000000000000000000002f316aa0886c174b73decb46c1c85edf50d8fcbac5ff76b365611666da86a8e65b308706bd7c000000000000003f7c54d5cb9076b81b7741ec03877afb520400000000000000c3ae49f88c462ea2050acf2d9a97d3be29a5614d1eba2c98cf0236401e02d7c445e50f76419ab4f78f67a09e63dd4faa2e7b59399fa5ee0b41e14a6fe6894e901a523fcbadfeff535f2514bc834e876810d9a6a78e70a9e22860c36a724770b4185de44db6bf21fef32a8d5b36d9014fa841061e63d40f4e536314beda5738fee012365f963b2a85e7d8075c333475b9f0284405e30700000041285fbe0bdd37220e31d4731614a50c16c6a41744c3d24eab511317f97b7b4a1c2ec33fedc46e9bf0fa640eebd3d58f0ebdb7cb8ccffd6d6ab7e0e843591d2618e2d2cdc7081c8fafffe8c350a5c554a387de4ee7aac6478d99de7dd82bef044a6d33c789d566c90c46ad581aa22f910547a77d55e26bf19f1d4661550b177ef53933a305e69b8a95119dcf5bda599d625054776151b2cd1fcde238bdc527594a6c17aa9728af24e2bb7a3830e7092b01b119ea4e7e7f0e21527d622cc29c9f0c8720195368f8374337ab4d130619d93c5ef37e7ddd0b2da147e6e513455b88753452de959a6cbfa1ffbc7ad5d8c3b48017fd31dcf72f337b639253f44cb27a12174bc4c191e21015d0c431a71906eb9c6a14c8a060459ef26787ce3d1cbfd5cc459f0048b5d06f6cbd3e9b34c89f3fb2f951ae81d7fcc8bc0000000000000000000000000000000000000000009231feef3117197c7963c2ba910969f776c8b2ea3970f358107945d9e74e9bdfa58e68b65a9201bc4b73b431df96d49f363917f90e3fa1eaf553db1c761dd9b634a9c4d7c21da4fe6d953ed9438cad0f8dfe03e5e2f73019352f1fb682a5a6ebbf24ebc49e3d7058e696ebc2ab3f4b642f36c9006c0067e24a64aa8c53df824a4ee271e35ed90000800847683c08bfda74a143c855030ae004ac797c575c202d8091eb77565212548ead770d68ad9fa2b2528798df1c36fc438d9c98f168490b41e158bb2e2d8ed19d44b9cce67c9c522b5136be09ed1b97ea3d5b317508df23e92c56fc2eb74d27d3861d91745b8fb9f6cc20e9f8b174000c62c4a2b212332a073fc5d0be7347e41454cb27e081c43e92ae7f9f046600db85d945a4666b588629ce0809d5c8506308688db21ec04d365497bf900600"/2767], &(0x7f00000001c0)='GPL\x00'}, 0x48) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\xeb$:+\\::\x00') (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)='\xeb$:+\\::\x00') close(r2) 5.133290677s ago: executing program 3 (id=6994): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x2, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x4000, 0x2, 0x0, 0x0, 0xf6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000001361109c0000000000180000000000000000000000000000409500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 4.815331664s ago: executing program 3 (id=6997): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x20}]}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r3, 0x0, 0x0, 0x0}, 0x30) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x809a}, 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @generic={0x1, 0x7, 0x2, 0x5, 0x2cb8}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x100080a}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x17, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010588188e6b62aa73f72cc9f0ba1f8481a0000005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) 4.483374391s ago: executing program 3 (id=6999): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000008018000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x66}, 0x94) 4.187518848s ago: executing program 3 (id=7000): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x600, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.877366984s ago: executing program 3 (id=7004): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000040)) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000001580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffde5, 0x0, 0xffffffffffffffff, 0x39}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0xf, 0x0, 0x7, 0x0, 0x0, 0x5a1c, 0xa0000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) r4 = bpf$ITER_CREATE(0xb, 0x0, 0x0) close(0x4) r5 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r6 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB], &(0x7f00000015c0)=""/210, 0x73, 0xd2, 0x1, 0x186}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001780)=ANY=[@ANYRES32=r4, @ANYBLOB="01deff000018000000f1ffffff00000000000000", @ANYRES32=r7, @ANYBLOB="03000000010000000300"/28], 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) 2.542234554s ago: executing program 1 (id=7007): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x3000000}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe25, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000013006bcd9e3fe3d46e48aa31086b87031300fffd1f000000000000000800030018000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c902d1938037e73f07d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.291422999s ago: executing program 1 (id=7009): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x42) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x2c, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00ee0000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c000c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05af3a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e4e4e29d8b33fbdd02e86a6432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3ce8f530ffff19a6471bf5abc742d9cbcfb964b13831034694a6aad84cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df871a8e782339bc424d1bafe5725c8a404724f8a4f1cda7997b65954f74097579b91da309b887af2485c2d9ab09b506000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb78183e7e68de9dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbefd9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d85618ba2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009de2323f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e75fa39643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2df636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978addf2f2a29a387c6f0576b36038f819286eea99a6a434811cf2a117d775fe986a49fb82cf5f15972d55185ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e671d305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a540f64000000000000fbb4c256409e54daefbb107c381fa729ff5fe607d93430da178d685d7730f5e129438a5214f722096d2986334c25e454474f92e65828b018174a9f4738b8c71fbdead06ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a379ed4c6267965af78b861bd335312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68ffce8d141e8960ef790fb0078215d65f96eb55db8cbcb060000000d988374e45451a694ffe38a1d03912b31c98d42e1a1bda1290de1a499a5d6849914c1788a7aca37177cc34102f44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553ecece78d4c1541c70f5d81e0725d5b273755c0000000000000000aa4234e282182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a7d72fcdb0a11993d54d97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a9236558fea2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574ea68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa1ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8edc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a41b315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f24bb68f486e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e8d5bc5642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f0cf74f845d1cc9ec4eee79c290fb0ba939b13707004e2e9cc0d350538c1c8c6bb9a38c6ac5ca07df32601240ea3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4055f05558ab31f339f6a4caf2ee2fd01f34dca330000000000000000000000000000000000000000000000000000000000000000000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c5954d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd6f7fd7f8898c70b5c65f2e28f22e983892c383882809f557affbda5e1850d66a4a1ee73b2084681f880a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae9052be8eec1e95f6ad8d41dd34829504ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b06a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd31091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a474bd16b8f7e6aed12a305366599f5f029a7b24558c02750500002f1c19d16a6f391906000000cc03bbfb8c698ecc137d96711100e01031aa74fad86b99eebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc86784c9f940d9fb0464a72ce635e14b80dc5c1c64e8f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f938ad16eeb8342278f1c1cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706e587f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2cc0e7c207b8942fafd70530a0fc4622ecf132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af999dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2be0d1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bff348229fa84034faf8421a22c4b4c17a3d24a4aeee0d0850371feefd77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2b59654d49a11c6736ac63e8eb383760fc2b5c976dacf3dda7191c757f28e44f6a5f95db7055f7ed983f5665210f20a494fabb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a5826fdbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193ad0438cdef7a98a1671a1918df310dc4bfd61c3db3c22673884dca370558936b85737e14819ab1c57b348a8ff16d36364a20fe846d11d045de81f069bac8425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb251ab9eefc8e400191f0f0f8c679b0000000000000000000000b41b0ae67d9351c49e1ff285d05a3cc39a5b0cd20afe0a00086650f8fad20c0e1e7131836c85b2cbacd41593928207312189fdd66abc45a139f0c9dbcc58237cec5bd56ffe0c6de23254a7951a298501ca04ab30b5723df6dd01d0b1a87c197b83b286374ba9a9dd1bd09ea1b71b24a1f527bf59d9633e3d15ed3757acc494f464482e49884c13780cc392bfe67b5d91e5b513daea48cac7645db35f07ba41aa187f65c5344717d7a0ee353a7e36b14fdce5898a613cef224d3addb3d2de74cef73f7520dc8cc8ffaa62cbd25e691ef4c45fdd25675b32c129a8464f08c4da9c08713b54416f3b56a04086dab1d196884e062287ad4758e883d2f99833d8aaf0c56718f6b0434740900faf4ab824662a719bf370fd0b2de04c1455ec14908ce5cbec79466f2f2cc337c53437d626254e00000000000000000000000000000000c34646f8ae68c095e7298300feab8a3dfe2c43fc971385b13b4f3b61ddbf5044ff572defcc67930f0e715774e1e970751534398faf79350255cfa9021378f10c2043e7ecd5649c9720530da7ea227b792f31cb5d688b5f1eba9ff5f85c97b35e00ecf76282912b483e31c76e303e527e98a9ca14f718d495ad45db16c4500011de506f0ca35f7ea96ed1831e3c1219f985b26cb8a70e7c8efcb287984871e0fed3f1985cf63f00289292b378188ad0dfae12c265b88961a9223b48cf7055d641595e0cb926d63c1f8a207f48bd482290b79867285c2155e655e017bca6cbba43f9b49042fb2fb390c436b3306e8a0800000090d159004da838a50235b91f5273c1fe083067ce1e2d8011c9e2b6d3ea69df"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x20e, 0xe3, 0x0, &(0x7f00000004c0)="b9180bb7600a070c009e40f086dd1fff310005e03300ff3a0010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d74733e0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863", 0x0, 0x31, 0x6000000000000000}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r3}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000200000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xf7e5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@base={0x4, 0x4, 0x4, 0x1}, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0xee, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0xb}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x4, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x75324cc7ada9, 0x0) 1.971474237s ago: executing program 1 (id=7012): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x2000000000000, 0x20}, 0x0, 0x1, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a80015000700", 0x36}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="97d9deabea352018000000000000006761110000", @ANYRES32, @ANYBLOB="0000000000000000b708000000"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)="03000303c9ff07ff000100210a9580f05dc5c94b4bfb3c56130fa5aeaadd5dedd1e8", 0x22}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3504000040000511d25a35400c0002000200002037153e370c040180060410", 0x1f}], 0x1}, 0x10049014) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0xc, 0x4, 0x7cb4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x300, 0x2}, 0x50) 1.953712617s ago: executing program 4 (id=7013): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xc220, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000000000}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x400001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x0, 0x43, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x40}, 0x40000002) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5, 0x400100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000d802f950000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000040b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r2, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a}, 0x94) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) bpf$OBJ_PIN_MAP(0x9, &(0x7f0000000040)=@generic={0x0, r3}, 0x18) 1.480001837s ago: executing program 4 (id=7014): ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0x53, &(0x7f00000002c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x1f, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@decl_tag={0x9, 0x0, 0x0, 0x11, 0x4, 0xffffffffffffffff}]}, {0x0, [0x30, 0x61, 0x61, 0x68, 0x7f, 0x61]}}, &(0x7f0000000540)=""/187, 0x30, 0xbb, 0x1, 0x2}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x1, 0x1ff, 0xa59, 0x0, 0x1, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x2, 0x4}, 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3e0b, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x2}, 0x50) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x5}, 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x11, 0x6, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0xa0, &(0x7f0000000140)=""/160, 0x40f00, 0x33, '\x00', r1, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x4, 0x5, 0x51, 0x2400000}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000008c0)=[r4, r5, r6, 0x1, r7], &(0x7f0000000900)=[{0x2, 0x2, 0xf, 0x4}, {0x2, 0x5, 0x8, 0xa}, {0x5, 0x2, 0xf, 0x6}, {0x0, 0x4, 0xa, 0x1}, {0x1, 0x5, 0xf, 0x6}, {0x1, 0x3, 0x2, 0x9}], 0x10, 0x5}, 0x94) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a40)='syz0\x00', 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000a80)='memory.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={r8, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0], 0x0, 0xc5, &(0x7f0000000b80)=[{}, {}], 0x10, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x8, 0xcd, 0x8, 0x8, &(0x7f0000000c40)}}, 0x10) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000dc0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x3, '\x00', r11, 0xffffffffffffffff, 0x4, 0x0, 0x2}, 0x50) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001000)=@o_path={&(0x7f0000000fc0)='./file0\x00', 0x0, 0x4010, r8}, 0x18) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001040)={0xffffffffffffffff, 0x6c52}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x17, 0x10, &(0x7f0000000e40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @generic={0x9, 0x2, 0x7, 0x2a9, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x80000001}], &(0x7f0000000ec0)='GPL\x00', 0x8, 0x1f, &(0x7f0000000f00)=""/31, 0x41000, 0x3a, '\x00', r1, @cgroup_sysctl, r10, 0x8, &(0x7f0000000f40)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000f80)={0x3, 0x9, 0x401, 0x3}, 0x10, r2, r10, 0x9, &(0x7f0000001080)=[r6, r8, r12, r13, r14], &(0x7f00000010c0)=[{0x5, 0x4, 0x0, 0x7}, {0x2, 0x4, 0x8, 0x1}, {0x5, 0x5, 0x2, 0x6}, {0x1, 0x3, 0x10, 0x9}, {0x4, 0x3, 0x0, 0xc}, {0x1, 0x5, 0xc, 0x8}, {0x1, 0x2, 0x3, 0x6}, {0x3, 0x5, 0xa, 0x7}, {0x5, 0x3, 0x7, 0xc}], 0x10, 0x101}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001380)={{r14, 0xffffffffffffffff}, &(0x7f0000001300), &(0x7f0000001340)='%-010d \x00'}, 0x20) r16 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000013c0)={0x0, 0x80000001}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0x16, 0x5, &(0x7f0000001240)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0x5c00}, @map_idx={0x18, 0x4}, @exit], &(0x7f0000001280)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x22, '\x00', r11, @flow_dissector, r3, 0x8, &(0x7f00000012c0)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, &(0x7f0000001400)=[r5, r15, r10, r6, r4, r16], &(0x7f0000001440)}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000001580)=@o_path={&(0x7f0000001540)='./file0\x00', 0x0, 0x4000, r13}, 0x18) socket$kcm(0x29, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r10, 0x40082406, &(0x7f00000015c0)='memory.stat\x00') r17 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000026c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7fffffff, '\x00', r11, r10, 0x0, 0x4, 0x3}, 0x50) r18 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000027c0)=@bpf_lsm={0x1d, 0x4, &(0x7f0000001600)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @func, @generic={0x9, 0x7, 0x2, 0x7, 0x3}], &(0x7f0000001640)='GPL\x00', 0x6, 0x1000, &(0x7f0000001680)=""/4096, 0x41100, 0x34, '\x00', 0x0, 0x1b, r3, 0x8, &(0x7f0000002680)={0x1, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000002740)=[r4, r4, r16, r17], &(0x7f0000002780)=[{0x5, 0x2, 0x6, 0xa}], 0x10, 0x80000001}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002900)={{r14, 0xffffffffffffffff}, &(0x7f0000002880), &(0x7f00000028c0)=r18}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002bc0)={0x6, 0xb, &(0x7f0000002940)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda61, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r19}}, @alu={0x4, 0x0, 0x7, 0x4, 0xb, 0xfffffffffffffff8, 0xfffffffffffffff0}, @alu={0x7, 0x1, 0x0, 0x8, 0x7, 0x118, 0x10}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}]}, &(0x7f00000029c0)='syzkaller\x00', 0x0, 0xb7, &(0x7f0000002a00)=""/183, 0x41100, 0x20, '\x00', r1, 0x25, r10, 0x8, &(0x7f0000002ac0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000002b00)={0x5, 0x9, 0x2, 0xf2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000002b40)=[r7, r10], &(0x7f0000002b80)=[{0x1, 0x1, 0x7, 0x6}], 0x10, 0x3}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000002c80)='./cgroup.net/syz1\x00', 0x200002, 0x0) recvmsg$kcm(r10, &(0x7f0000003100)={&(0x7f0000002cc0)=@sco={0x1f, @none}, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000002d40)=""/240, 0xf0}, {&(0x7f0000002e40)=""/229, 0xe5}, {&(0x7f0000002f40)=""/79, 0x4f}], 0x3, &(0x7f0000003000)=""/230, 0xe6}, 0x2022) 1.101919236s ago: executing program 4 (id=7015): perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x3a, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000000000000000000000000f0095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 905.99496ms ago: executing program 4 (id=7016): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x400300}, 0x4040000) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x42}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1ab92b}, {0x85, 0x0, 0x0, 0x8}, {0x4}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x203f}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x0, 0xb, 0x9, 0x0, 0xd0, 0x10000000}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x2}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0xc, 0x7}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xffef, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x9, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 840.478801ms ago: executing program 1 (id=7017): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x0, 0x0, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 690.596665ms ago: executing program 4 (id=7018): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x2, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x0, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x3, @random="7c0000001000", 'veth1_vlan\x00'}}, 0x80, 0x0}, 0x40000) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0x6a0a1, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff, 0x1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0xc0045878, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a00913a09b51bcb3cc5a05f0a"], 0xfe33) recvmsg$kcm(r3, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x42) ioctl$TUNSETLINK(r2, 0x400454cd, 0x339) close(r2) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0a00000001000000dd00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020205d0af8ff00000000bea100000000000007010000f8ffffffb702000008000000b7030000ffee0000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz0\x00', 0x200002, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) 539.297938ms ago: executing program 3 (id=7019): perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x400000002, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000040)={r0}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="130300005400911fdabcf8b30771a54a0740ba796b"], 0xfe33) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x31, 0xfffffffffffffff8}, 0x3542, 0x1ff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 492.658999ms ago: executing program 1 (id=7020): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10, 0x0}, 0xe900) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) close(r1) r2 = socket$kcm(0x2, 0x3, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={&(0x7f00000004c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0}, 0x48000) sendmsg$inet(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1800000000000000000000000000000061198800000000009500000000000000611d84d2f04e31f7316fc8882727e09b50ce3a17cdc4cd3f17f410e4a0520db00b8e8ade1a62a15f7ab4f3d534c16a4d7b005c5f174625511b1ef8f731d6c7f8376f86af007d9714308e47ce6e402add88399648a1cdd9e171af2443535dd24840468fbc9552288a982a27dfa3aa2424e58e78f332d6d020747e0632be9b091de95b5740b35eae746b83f73ae122350419c85ee7f64c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff90}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) socket$kcm(0x2, 0x200000000000003, 0x106) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2004d, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8009, 0x2, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x1001, 0x0, 0xfffffffe, 0x5, 0x0, 0xffffff77, 0xbe, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff1}, 0x0, 0x20000000000, 0xffffffffffffffff, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) 186.881946ms ago: executing program 1 (id=7021): socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xcc, 0xc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x1c, &(0x7f0000000300)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x1019}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x1, 0x9, 0x0, 0x4000}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 4 (id=7022): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffd}, 0x2020}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x0, 0x7, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x20}]}]}}, 0x0, 0x32, 0x0, 0xa}, 0x28) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d8000000180081034ef0f206b74cb9040a1d080006007c06e8fc55a10a0015000600142603600e1208000f0000000401a8000100df80ffff00000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b31627ffe06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a468eb4edbb57a5025ccca9e00360db798262f3dcace0d0bdb8e73ece0b42a9ecbee12cf1de59bf09ebc62e9b6e6bf545de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000680)={r4, r3, 0x0, 0x0, 0x0}, 0x30) socket$kcm(0x10, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x809a}, 0x48) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x7, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @generic={0x1, 0x7, 0x2, 0x5, 0x2cb8}, @call={0x85, 0x0, 0x0, 0x35}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x10, 0x100080a}, 0x94) setsockopt$sock_attach_bpf(r5, 0x1, 0x24, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x17, 0x50}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0x27}]}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) sendmsg$kcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8481a1100005e140602000000000e000a00100000000a8000001294", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 1_vlan: entered promiscuous mode [ 864.053612][T18884] veth0_macvtap: entered promiscuous mode [ 864.115088][T18884] veth1_macvtap: entered promiscuous mode [ 864.178015][T18884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.199323][T18884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.240735][T18884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.266903][T18884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.318529][T18884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.392556][T18884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.420910][T18884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.467371][T18884] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.488329][T18884] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.510416][T18884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.521978][T19042] netlink: 'syz.4.4672': attribute type 22 has an invalid length. [ 864.533834][T19042] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4672'. [ 864.657524][T18884] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.684355][T18884] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.694987][T18884] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.705314][T18884] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 865.097325][T17123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.130729][T17123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.194884][T17117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 865.207783][T17117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 865.231728][T19069] netlink: 'syz.3.4680': attribute type 21 has an invalid length. [ 865.248451][T19069] IPv6: Can't replace route, no match found [ 865.290875][T19069] netlink: 'syz.3.4680': attribute type 10 has an invalid length. [ 865.356165][T19069] team0: Device wg1 is of different type [ 865.638264][T19081] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4683'. [ 866.118094][T19083] netlink: 'syz.1.4684': attribute type 22 has an invalid length. [ 866.152373][T19083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4684'. [ 867.088312][T19101] netlink: 'syz.2.4691': attribute type 21 has an invalid length. [ 867.131784][T19101] IPv6: NLM_F_CREATE should be specified when creating new route [ 867.150146][T19101] IPv6: Can't replace route, no match found [ 867.164934][T19104] netlink: 'syz.2.4691': attribute type 10 has an invalid length. [ 867.244213][T19104] team0: Device wg1 is of different type [ 867.596887][T19113] netlink: 'syz.1.4695': attribute type 22 has an invalid length. [ 867.645985][T19116] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.4697'. [ 867.718820][T19113] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4695'. [ 868.572257][T19123] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4700'. [ 868.616664][T19123] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4700'. [ 868.646325][T19128] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.4700'. [ 868.731566][T19128] netlink: 'syz.3.4700': attribute type 10 has an invalid length. [ 868.760526][T19128] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4700'. [ 868.804756][T19128] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 868.840005][T19128] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 868.878532][T19128] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 869.171639][T19149] netlink: 22 bytes leftover after parsing attributes in process `syz.2.4707'. [ 869.511998][T19151] netlink: 'syz.3.4708': attribute type 22 has an invalid length. [ 869.520894][T19151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4708'. [ 870.879422][T19169] netlink: 'syz.2.4715': attribute type 10 has an invalid length. [ 870.964374][T19169] team0: Port device syz_tun added [ 871.140012][T19171] netlink: 'syz.3.4716': attribute type 8 has an invalid length. [ 871.154846][T19171] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4716'. [ 871.217984][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.236561][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.849260][T19183] netlink: 'syz.1.4719': attribute type 22 has an invalid length. [ 871.873572][T19183] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4719'. [ 873.292503][T12473] team0: Port device syz_tun removed [ 873.425144][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 873.437314][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 873.493138][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 873.512714][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 873.524922][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 873.533012][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 873.889532][T17116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.126444][T17116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.371818][T17116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 874.716287][T17116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.130829][T19224] netlink: 'syz.1.4734': attribute type 21 has an invalid length. [ 875.142737][T19224] IPv6: Can't replace route, no match found [ 875.280120][T19224] netlink: 'syz.1.4734': attribute type 10 has an invalid length. [ 875.364888][T19224] team0: Device wg1 is of different type [ 875.513296][T19214] chnl_net:caif_netlink_parms(): no params data found [ 875.621910][ T5083] Bluetooth: hci0: command tx timeout [ 875.880957][T19229] netlink: 'syz.4.4735': attribute type 22 has an invalid length. [ 875.888955][T19229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4735'. [ 877.708679][ T5083] Bluetooth: hci0: command tx timeout [ 878.343509][T19248] netlink: 'syz.1.4738': attribute type 21 has an invalid length. [ 878.385016][T19247] netlink: 'syz.4.4739': attribute type 21 has an invalid length. [ 878.468682][T19247] IPv6: Can't replace route, no match found [ 878.481681][T19252] netlink: 'syz.4.4739': attribute type 10 has an invalid length. [ 878.549821][T19252] team0: Device wg1 is of different type [ 878.786489][T19214] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.809879][T19214] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.843064][T19214] bridge_slave_0: entered allmulticast mode [ 878.886122][T19214] bridge_slave_0: entered promiscuous mode [ 878.903212][T19214] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.930719][T19214] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.938277][T19214] bridge_slave_1: entered allmulticast mode [ 878.955931][T19214] bridge_slave_1: entered promiscuous mode [ 878.998303][T19279] netlink: 'syz.4.4745': attribute type 21 has an invalid length. [ 879.009695][T19279] IPv6: Can't replace route, no match found [ 879.069870][T19282] netlink: 'syz.4.4745': attribute type 10 has an invalid length. [ 879.104989][T19282] team0: Device wg1 is of different type [ 879.223381][T19214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 879.262001][T19281] netlink: 'syz.1.4746': attribute type 22 has an invalid length. [ 879.277214][T19281] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4746'. [ 879.298902][T19214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 879.490129][T19214] team0: Port device team_slave_0 added [ 879.514698][T19214] team0: Port device team_slave_1 added [ 879.786151][ T5083] Bluetooth: hci0: command tx timeout [ 880.310136][T19214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.338134][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.386081][T19214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.435280][T19304] netlink: 'syz.4.4751': attribute type 21 has an invalid length. [ 880.461452][T19304] IPv6: Can't replace route, no match found [ 880.480216][T19309] netlink: 'syz.4.4751': attribute type 10 has an invalid length. [ 880.524385][T19309] team0: Device wg1 is of different type [ 880.599841][T19214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 880.640736][T19214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 880.699821][T19214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.976697][T19301] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4750'. [ 881.160157][T19214] hsr_slave_0: entered promiscuous mode [ 881.211568][T19214] hsr_slave_1: entered promiscuous mode [ 881.230812][T19214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 881.255997][T19214] Cannot create hsr debugfs directory [ 881.355345][T19301] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.4750'. [ 881.383820][T19320] netlink: 'syz.2.4750': attribute type 10 has an invalid length. [ 881.401354][T19320] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4750'. [ 881.412687][T19320] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 881.419978][T19320] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 881.459618][T19320] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 881.859123][ T5083] Bluetooth: hci0: command tx timeout [ 881.898109][T17116] hsr_slave_0: left promiscuous mode [ 881.916627][T17116] hsr_slave_1: left promiscuous mode [ 881.947304][T17116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.967245][T17116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 881.997536][T17116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.026465][T17116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.049067][T17116] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 882.080928][T17116] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 882.095190][T17116] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 882.115490][T17116] batman_adv: batadv0: Removing interface: veth0_vlan [ 882.234557][T17116] batadv0: left allmulticast mode [ 882.260532][T17116] batadv0: left promiscuous mode [ 882.271297][T17116] bridge0: port 3(batadv0) entered disabled state [ 882.303584][T17116] bridge_slave_1: left allmulticast mode [ 882.309602][T17116] bridge_slave_1: left promiscuous mode [ 882.321354][T17116] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.340125][T17116] bridge_slave_0: left allmulticast mode [ 882.347572][T17116] bridge_slave_0: left promiscuous mode [ 882.361110][T17116] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.426290][T17116] veth1_macvtap: left promiscuous mode [ 882.432964][T17116] veth0_macvtap: left promiscuous mode [ 882.446845][T17116] veth1_vlan: left promiscuous mode [ 882.461023][T17116] veth0_vlan: left promiscuous mode [ 883.917530][T17116] team0 (unregistering): Port device team_slave_1 removed [ 884.008101][T17116] team0 (unregistering): Port device team_slave_0 removed [ 884.100336][T17116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 884.192157][T17116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 884.659953][T17116] bond0 (unregistering): Released all slaves [ 884.781540][T19331] netlink: 'syz.2.4755': attribute type 22 has an invalid length. [ 884.789502][T19331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4755'. [ 885.114620][T19357] netlink: 'syz.2.4760': attribute type 21 has an invalid length. [ 885.129017][T19357] IPv6: Can't replace route, no match found [ 885.197644][T19357] netlink: 'syz.2.4760': attribute type 10 has an invalid length. [ 885.241456][T19357] team0: Device wg1 is of different type [ 886.157891][T19214] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 886.192967][T19377] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.4763'. [ 886.216309][T19214] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 886.231324][T19377] netlink: 'syz.2.4763': attribute type 1 has an invalid length. [ 886.242035][T19377] netlink: 16520 bytes leftover after parsing attributes in process `syz.2.4763'. [ 886.270807][T19214] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 886.309981][T19214] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 886.551153][T19385] netlink: 'syz.2.4765': attribute type 10 has an invalid length. [ 886.559934][T19385] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4765'. [ 886.573770][T19385] caif0: entered promiscuous mode [ 886.579389][T19385] caif0: entered allmulticast mode [ 886.631056][T19385] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 886.695911][T19214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.735458][T19214] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.774762][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.782180][T17117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.806656][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.813967][T17123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 886.974710][T19387] netlink: 'syz.1.4766': attribute type 22 has an invalid length. [ 887.005309][T19387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4766'. [ 887.037230][T19392] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4774'. [ 887.083507][T19393] netlink: 'syz.2.4767': attribute type 21 has an invalid length. [ 887.109854][T19393] IPv6: Can't replace route, no match found [ 887.140230][T19396] netlink: 'syz.2.4767': attribute type 10 has an invalid length. [ 887.265832][T19396] team0: Device wg1 is of different type [ 888.064516][T19214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 888.308890][T19214] veth0_vlan: entered promiscuous mode [ 888.377279][T19214] veth1_vlan: entered promiscuous mode [ 888.408421][T19429] netlink: 'syz.1.4775': attribute type 10 has an invalid length. [ 888.462914][T19429] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4775'. [ 888.557806][T19429] caif0: entered promiscuous mode [ 888.567570][T19429] caif0: entered allmulticast mode [ 888.576811][T19429] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 888.808242][T19214] veth0_macvtap: entered promiscuous mode [ 888.854735][T19214] veth1_macvtap: entered promiscuous mode [ 888.930424][T19214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 888.979878][T19214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.000718][T19214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 889.023962][T19214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.036563][T19214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 889.155988][T19440] netlink: 'syz.1.4777': attribute type 21 has an invalid length. [ 889.180566][T19440] IPv6: Can't replace route, no match found [ 889.260759][T19438] netlink: 'syz.2.4776': attribute type 22 has an invalid length. [ 889.307476][T19438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4776'. [ 889.323298][T19440] netlink: 'syz.1.4777': attribute type 10 has an invalid length. [ 889.366933][T19440] team0: Device wg1 is of different type [ 889.447522][T19214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.470701][T19214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.496230][T19214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 889.524350][T19214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 889.554997][T19214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 889.587195][T19214] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.613409][T19214] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.643142][T19214] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.670783][T19214] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 889.738303][T19447] netlink: 'syz.4.4785': attribute type 21 has an invalid length. [ 889.766299][T19447] IPv6: Can't replace route, no match found [ 889.800523][T19450] IPv6: NLM_F_CREATE should be specified when creating new route [ 889.822325][T19450] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4778'. [ 889.973502][T19447] netlink: 'syz.4.4785': attribute type 10 has an invalid length. [ 890.129389][T19447] team0: Device wg1 is of different type [ 890.403005][T17101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.471250][T17101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.608316][T17122] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 890.656182][T17122] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 890.918170][T19482] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.4784'. [ 891.406531][T19496] IPv6: NLM_F_CREATE should be specified when creating new route [ 891.437907][T19496] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4790'. [ 892.113617][T12474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 892.124812][T12474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 892.135891][T12474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 892.147095][T12474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 892.168369][T12474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 892.200859][T12474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 892.322355][T12736] team0: Port device syz_tun removed [ 892.819087][T17123] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.044229][T19518] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4792'. [ 893.078149][T19514] validate_nla: 2 callbacks suppressed [ 893.078191][T19514] netlink: 'syz.2.4793': attribute type 21 has an invalid length. [ 893.133816][T19514] IPv6: Can't replace route, no match found [ 893.149316][T19522] netlink: 'syz.2.4793': attribute type 10 has an invalid length. [ 893.267590][T19522] team0: Device wg1 is of different type [ 893.480202][T17123] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.623538][T17123] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.782997][T19530] netlink: 'syz.2.4794': attribute type 17 has an invalid length. [ 893.833187][T19535] netlink: 'syz.3.4795': attribute type 29 has an invalid length. [ 893.847268][T17123] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 893.913312][T19535] netlink: 'syz.3.4795': attribute type 29 has an invalid length. [ 894.127940][T19543] netlink: 'syz.3.4795': attribute type 10 has an invalid length. [ 894.169961][T19543] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 894.244983][T19505] chnl_net:caif_netlink_parms(): no params data found [ 894.253006][ T5083] Bluetooth: hci1: command tx timeout [ 894.860442][T19556] netlink: 'syz.2.4796': attribute type 21 has an invalid length. [ 894.909720][T19556] IPv6: Can't replace route, no match found [ 895.116655][T19505] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.132091][T19505] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.149587][T19505] bridge_slave_0: entered allmulticast mode [ 895.163437][T19505] bridge_slave_0: entered promiscuous mode [ 895.189387][T19556] netlink: 'syz.2.4796': attribute type 10 has an invalid length. [ 895.314881][T19556] team0: Device wg1 is of different type [ 895.523679][T19505] bridge0: port 2(bridge_slave_1) entered blocking state [ 895.541013][T19505] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.549311][T19505] bridge_slave_1: entered allmulticast mode [ 895.577049][T19505] bridge_slave_1: entered promiscuous mode [ 895.599312][T19567] netlink: 'syz.3.4798': attribute type 21 has an invalid length. [ 895.616731][T19567] IPv6: NLM_F_CREATE should be specified when creating new route [ 895.641943][T19567] IPv6: Can't replace route, no match found [ 895.658223][T19570] netlink: 'syz.3.4798': attribute type 10 has an invalid length. [ 896.083545][T19570] team0: Device wg1 is of different type [ 896.191296][T19573] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4800'. [ 896.331154][T12474] Bluetooth: hci1: command tx timeout [ 896.592949][T19587] IPv6: Can't replace route, no match found [ 896.716068][T19587] team0: Device wg1 is of different type [ 896.828992][T19505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 896.854930][T19505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 896.945745][T19596] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4804'. [ 896.956141][T19597] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.4805'. [ 897.324297][T19505] team0: Port device team_slave_0 added [ 897.336827][T19505] team0: Port device team_slave_1 added [ 897.763411][T19505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 897.770459][T19505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.850065][T19505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 897.868911][T19505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 897.878100][T19505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 897.907632][T19505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 898.036679][T19505] hsr_slave_0: entered promiscuous mode [ 898.053633][T19505] hsr_slave_1: entered promiscuous mode [ 898.062624][T19505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 898.070258][T19505] Cannot create hsr debugfs directory [ 898.252091][T19628] validate_nla: 2 callbacks suppressed [ 898.252109][T19628] netlink: 'syz.3.4811': attribute type 21 has an invalid length. [ 898.266640][T19628] IPv6: Can't replace route, no match found [ 898.329656][T19623] netlink: 'syz.3.4811': attribute type 10 has an invalid length. [ 898.358952][T19623] team0: Device wg1 is of different type [ 898.411348][T12474] Bluetooth: hci1: command tx timeout [ 898.430298][T19630] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4812'. [ 898.897301][T17123] hsr_slave_0: left promiscuous mode [ 898.934656][T17123] hsr_slave_1: left promiscuous mode [ 898.964784][T17123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 898.991082][T17123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 899.026304][T17123] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 899.053238][T17123] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 899.078127][T17123] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 899.094870][T17123] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 899.114793][T17123] hsr0: left allmulticast mode [ 899.120263][T17123] bridge0: port 3(hsr0) entered disabled state [ 899.144833][T17123] bridge_slave_1: left allmulticast mode [ 899.158991][T17123] bridge_slave_1: left promiscuous mode [ 899.179868][T17123] bridge0: port 2(bridge_slave_1) entered disabled state [ 899.217182][T17123] bridge_slave_0: left allmulticast mode [ 899.225044][T17123] bridge_slave_0: left promiscuous mode [ 899.250049][T17123] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.388925][T17123] veth1_macvtap: left promiscuous mode [ 899.405923][T17123] veth0_macvtap: left promiscuous mode [ 899.414736][T17123] veth1_vlan: left promiscuous mode [ 899.422200][T17123] veth0_vlan: left promiscuous mode [ 899.914486][T17123] team0 (unregistering): Port device geneve1 removed [ 900.011351][T19652] netlink: set zone limit has 8 unknown bytes [ 900.501145][T12474] Bluetooth: hci1: command tx timeout [ 900.917402][T17123] team0 (unregistering): Port device team_slave_1 removed [ 900.996664][T17123] team0 (unregistering): Port device team_slave_0 removed [ 901.079042][T17123] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 901.149233][T17123] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 901.873760][T17123] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 901.888244][T17123] bond0 (unregistering): (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 901.912495][T17123] bond0 (unregistering): Released all slaves [ 902.113960][T19640] netlink: 'syz.3.4814': attribute type 10 has an invalid length. [ 902.143292][T19640] team0: Port device syz_tun added [ 902.207835][T19660] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4817'. [ 903.130069][T19685] netlink: 'syz.2.4824': attribute type 21 has an invalid length. [ 903.159392][T19685] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4824'. [ 903.201795][T19684] netlink: 'syz.2.4824': attribute type 21 has an invalid length. [ 903.219886][T19684] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4824'. [ 903.598832][T19505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 903.627623][T19505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 903.655017][T19505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 903.683739][T19505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 903.849044][T19705] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4827'. [ 903.907837][T19505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.979277][T19505] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.033280][T17114] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.040985][T17114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.147642][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.156373][T17123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 905.058561][T19505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 905.197151][T19505] veth0_vlan: entered promiscuous mode [ 905.288983][T19505] veth1_vlan: entered promiscuous mode [ 905.422858][T19505] veth0_macvtap: entered promiscuous mode [ 905.474946][T19505] veth1_macvtap: entered promiscuous mode [ 905.522306][T19505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.548809][T19505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.565934][T19505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 905.577371][T19505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.621073][T19505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.705607][T19505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.722318][T19505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.738467][T19505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.749890][T19505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.788614][T19505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.824437][T19505] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.844202][T19505] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.863775][T19505] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.883197][T19505] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.324780][T17123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.373256][T17123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.478518][T17115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.519464][T17115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.721683][T19763] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4839'. [ 907.355099][T19765] netlink: 'syz.1.4786': attribute type 22 has an invalid length. [ 907.407653][T19765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4786'. [ 907.498631][T19774] netlink: 'syz.2.4842': attribute type 21 has an invalid length. [ 907.541519][T19774] IPv6: Can't replace route, no match found [ 907.646504][T19774] netlink: 'syz.2.4842': attribute type 10 has an invalid length. [ 907.796350][T19774] team0: Device wg1 is of different type [ 908.606383][T19807] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4853'. [ 908.993942][T19812] IPv6: Can't replace route, no match found [ 910.130471][T19821] netlink: 'syz.2.4859': attribute type 10 has an invalid length. [ 910.433856][T19834] netlink: 180 bytes leftover after parsing attributes in process `syz.2.4864'. [ 910.559622][T19836] netlink: 'syz.4.4865': attribute type 21 has an invalid length. [ 910.581406][T19836] IPv6: Can't replace route, no match found [ 910.588409][T19838] IPv6: NLM_F_CREATE should be specified when creating new route [ 910.611458][T19838] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4866'. [ 910.634153][T19840] netlink: 'syz.2.4864': attribute type 1 has an invalid length. [ 910.655584][T19836] netlink: 'syz.4.4865': attribute type 10 has an invalid length. [ 910.722708][T19836] team0: Device wg1 is of different type [ 910.722864][T19840] netlink: 'syz.2.4864': attribute type 2 has an invalid length. [ 910.722885][T19840] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4864'. [ 912.712254][T19873] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4876'. [ 914.534096][T19910] netlink: 'syz.2.4891': attribute type 21 has an invalid length. [ 914.551863][T19910] IPv6: Can't replace route, no match found [ 914.558866][T19912] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4892'. [ 914.591214][T19910] netlink: 'syz.2.4891': attribute type 10 has an invalid length. [ 914.644911][T19910] team0: Device wg1 is of different type [ 915.438790][T19922] netlink: 'syz.2.4895': attribute type 22 has an invalid length. [ 915.478616][T19922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 915.886182][T19938] netlink: 'syz.1.4903': attribute type 21 has an invalid length. [ 915.925319][T19938] IPv6: NLM_F_CREATE should be specified when creating new route [ 915.952750][T19938] IPv6: Can't replace route, no match found [ 916.094502][T19944] netlink: 'syz.4.4905': attribute type 46 has an invalid length. [ 916.122909][T19938] netlink: 'syz.1.4903': attribute type 10 has an invalid length. [ 916.300257][T19938] team0: Device wg1 is of different type [ 916.399770][T19952] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4908'. [ 917.802357][T12474] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 918.050265][T19989] netlink: 'syz.4.4920': attribute type 21 has an invalid length. [ 918.111871][T19989] IPv6: Can't replace route, no match found [ 918.177249][T19989] netlink: 'syz.4.4920': attribute type 10 has an invalid length. [ 918.217882][T19989] team0: Device wg1 is of different type [ 918.289606][T19995] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4923'. [ 919.188827][T20006] netlink: 'syz.3.4927': attribute type 10 has an invalid length. [ 919.644227][T20019] netlink: 'syz.3.4933': attribute type 21 has an invalid length. [ 919.661389][T20019] IPv6: Can't replace route, no match found [ 919.730419][T20019] netlink: 'syz.3.4933': attribute type 10 has an invalid length. [ 919.768484][T20019] team0: Device wg1 is of different type [ 919.938728][T20025] netlink: 'syz.4.4935': attribute type 21 has an invalid length. [ 919.961325][T20025] IPv6: Can't replace route, no match found [ 919.975257][T20027] netlink: 'syz.2.4936': attribute type 21 has an invalid length. [ 919.990181][T20027] IPv6: Can't replace route, no match found [ 920.006271][T20029] netlink: 'syz.4.4935': attribute type 10 has an invalid length. [ 920.071215][T20029] team0: Device wg1 is of different type [ 920.172743][T20030] netlink: 'syz.2.4936': attribute type 10 has an invalid length. [ 920.315147][T20030] team0: Device wg1 is of different type [ 920.400538][T20028] netlink: 'syz.1.4934': attribute type 22 has an invalid length. [ 920.421141][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4934'. [ 920.432392][T20035] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4938'. [ 921.309111][T20053] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4946'. [ 921.432302][T12474] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 922.122925][T20066] netlink: 'syz.2.4959': attribute type 21 has an invalid length. [ 922.184204][T20066] IPv6: Can't replace route, no match found [ 922.225592][T20068] netlink: 'syz.4.4951': attribute type 21 has an invalid length. [ 922.250351][T20068] IPv6: Can't replace route, no match found [ 922.302989][T20063] netlink: 'syz.3.4950': attribute type 22 has an invalid length. [ 922.325808][T20063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4950'. [ 922.403655][T20068] team0: Device wg1 is of different type [ 922.545240][T20066] team0: Device wg1 is of different type [ 923.040435][T20075] syzkaller0: entered promiscuous mode [ 923.091171][T20075] syzkaller0: entered allmulticast mode [ 923.143473][T20082] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4956'. [ 923.589718][T12474] Bluetooth: hci4: unexpected event 0x1d length: 15 > 5 [ 926.501725][T20096] validate_nla: 2 callbacks suppressed [ 926.501744][T20096] netlink: 'syz.3.4962': attribute type 22 has an invalid length. [ 926.568778][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4962'. [ 926.756322][T20100] netlink: 'syz.1.4963': attribute type 21 has an invalid length. [ 926.772365][T20100] IPv6: Can't replace route, no match found [ 926.831550][T20100] netlink: 'syz.1.4963': attribute type 10 has an invalid length. [ 926.858308][T20100] team0: Device wg1 is of different type [ 927.146428][T20114] netlink: 'syz.4.4965': attribute type 22 has an invalid length. [ 927.179136][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4965'. [ 927.583717][T20125] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4972'. [ 929.508735][T20157] netlink: 'syz.2.4981': attribute type 22 has an invalid length. [ 929.521324][T20157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4981'. [ 929.714476][T20160] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4983'. [ 931.074694][T20179] netlink: 'syz.2.4990': attribute type 10 has an invalid length. [ 931.097046][T20179] team0: Device ipvlan1 failed to register rx_handler [ 931.375669][T20178] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4989'. [ 932.019308][T20191] netlink: 'syz.1.4992': attribute type 22 has an invalid length. [ 932.096028][T20191] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4992'. [ 932.528233][T20197] netlink: 'syz.3.4996': attribute type 21 has an invalid length. [ 932.542339][T20198] netlink: 'syz.2.4997': attribute type 3 has an invalid length. [ 932.561683][T20198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4997'. [ 932.578336][T20197] IPv6: Can't replace route, no match found [ 932.661650][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.668064][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.880590][T20195] netlink: 'syz.3.4996': attribute type 10 has an invalid length. [ 933.085432][T20195] team0: Device wg1 is of different type [ 933.604240][T20218] netlink: 10 bytes leftover after parsing attributes in process `syz.1.5004'. [ 934.372360][T20223] netlink: 'syz.3.5006': attribute type 22 has an invalid length. [ 934.407975][T20223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5006'. [ 934.802673][T20226] netlink: 'syz.2.5015': attribute type 21 has an invalid length. [ 934.821614][T20226] IPv6: Can't replace route, no match found [ 934.864874][T20226] netlink: 'syz.2.5015': attribute type 10 has an invalid length. [ 934.904774][T20226] team0: Device wg1 is of different type [ 935.658071][T20236] netlink: 'syz.4.5008': attribute type 3 has an invalid length. [ 935.700963][T20236] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5008'. [ 936.339398][T20246] netlink: 'syz.4.5012': attribute type 21 has an invalid length. [ 937.408943][T20258] netlink: 'syz.3.5016': attribute type 22 has an invalid length. [ 937.470764][T20258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5016'. [ 937.558129][T20261] netlink: 'syz.4.5017': attribute type 21 has an invalid length. [ 937.602522][T20261] IPv6: Can't replace route, no match found [ 937.609624][T20264] netlink: 'syz.4.5017': attribute type 10 has an invalid length. [ 937.782335][T20264] team0: Device wg1 is of different type [ 938.269404][T20268] netlink: 'syz.4.5019': attribute type 21 has an invalid length. [ 938.300420][T20268] IPv6: Can't replace route, no match found [ 938.363748][T20268] netlink: 'syz.4.5019': attribute type 10 has an invalid length. [ 938.395687][T20268] team0: Device wg1 is of different type [ 939.560803][T20285] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5025'. [ 940.434260][T20302] netlink: 'syz.4.5032': attribute type 21 has an invalid length. [ 940.454694][T20302] IPv6: Can't replace route, no match found [ 940.514483][T20302] netlink: 'syz.4.5032': attribute type 10 has an invalid length. [ 940.550591][T20302] team0: Device wg1 is of different type [ 940.633130][T20297] netlink: 'syz.1.5029': attribute type 22 has an invalid length. [ 940.671281][T20297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5029'. [ 941.965418][T20327] netlink: 'syz.1.5043': attribute type 21 has an invalid length. [ 942.001543][T20327] IPv6: Can't replace route, no match found [ 942.099582][T20327] netlink: 'syz.1.5043': attribute type 10 has an invalid length. [ 942.109845][T20330] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.5042'. [ 942.168041][T20327] team0: Device wg1 is of different type [ 942.295311][T20332] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5044'. [ 942.391990][T20330] netlink: 21820 bytes leftover after parsing attributes in process `syz.2.5042'. [ 943.207249][T20340] validate_nla: 2 callbacks suppressed [ 943.207271][T20340] netlink: 'syz.1.5046': attribute type 22 has an invalid length. [ 943.250777][T20340] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5046'. [ 943.791571][T20357] netlink: 'syz.1.5053': attribute type 10 has an invalid length. [ 943.888425][T20357] team0: Port device syz_tun added [ 944.307066][T20364] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5056'. [ 944.885128][T20371] netlink: 'syz.2.5058': attribute type 29 has an invalid length. [ 945.217530][T20371] netlink: 'syz.2.5058': attribute type 29 has an invalid length. [ 945.904425][T20387] netlink: 'syz.1.5062': attribute type 22 has an invalid length. [ 945.940034][T20387] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5062'. [ 947.324307][T20403] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.5070'. [ 948.876056][T20422] netlink: 'syz.1.5075': attribute type 22 has an invalid length. [ 948.910813][T20422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5075'. [ 949.404524][T20432] netlink: 'syz.2.5081': attribute type 10 has an invalid length. [ 949.450484][T20433] netlink: 'syz.4.5080': attribute type 10 has an invalid length. [ 949.475696][T20433] team0: Device vxcan0 is of different type [ 951.012635][T20450] netlink: 'syz.2.5087': attribute type 22 has an invalid length. [ 951.065798][T20450] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5087'. [ 951.163452][T20465] netlink: 'syz.1.5090': attribute type 10 has an invalid length. [ 951.610464][T20470] netlink: 'syz.4.5092': attribute type 21 has an invalid length. [ 951.630502][T20470] IPv6: Can't replace route, no match found [ 951.717037][T20470] netlink: 'syz.4.5092': attribute type 10 has an invalid length. [ 951.803943][T20470] team0: Device wg1 is of different type [ 953.309030][ T5083] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 953.320481][ T5083] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 953.331955][ T5083] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 953.358907][ T5083] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 953.377878][ T5083] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 953.386395][ T5083] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 953.885153][T13181] team0: Port device syz_tun removed [ 953.989079][T20487] chnl_net:caif_netlink_parms(): no params data found [ 954.367290][T17101] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.864997][T17101] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.949105][T20504] netlink: 'syz.2.5102': attribute type 10 has an invalid length. [ 955.074618][T20504] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 955.219249][T17101] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.531184][ T5083] Bluetooth: hci2: command tx timeout [ 955.643656][T20513] netlink: 'syz.3.5104': attribute type 22 has an invalid length. [ 955.670994][T20513] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5104'. [ 955.724118][T20487] bridge0: port 1(bridge_slave_0) entered blocking state [ 955.737207][T20487] bridge0: port 1(bridge_slave_0) entered disabled state [ 955.751362][T20487] bridge_slave_0: entered allmulticast mode [ 955.769771][T20487] bridge_slave_0: entered promiscuous mode [ 955.847084][T17101] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.900801][T20487] bridge0: port 2(bridge_slave_1) entered blocking state [ 955.921130][T20487] bridge0: port 2(bridge_slave_1) entered disabled state [ 955.928693][T20487] bridge_slave_1: entered allmulticast mode [ 955.990076][T20487] bridge_slave_1: entered promiscuous mode [ 956.004517][T20518] netlink: 'syz.2.5105': attribute type 22 has an invalid length. [ 956.015232][T20518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5105'. [ 956.116183][T20517] sit0: entered allmulticast mode [ 956.264271][T20521] sit0: entered promiscuous mode [ 956.507145][T20520] netlink: 'syz.1.5107': attribute type 21 has an invalid length. [ 956.517882][T20520] IPv6: Can't replace route, no match found [ 956.539595][T20487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 956.564356][T20487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 956.588754][T20525] netlink: 'syz.1.5107': attribute type 10 has an invalid length. [ 956.665362][T20525] team0: Device wg1 is of different type [ 956.977584][T20487] team0: Port device team_slave_0 added [ 957.018164][T20487] team0: Port device team_slave_1 added [ 957.239449][T20487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 957.281774][T20487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.348572][T20487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 957.366765][T20487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 957.408282][T20487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 957.505031][T20487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 957.616004][ T5083] Bluetooth: hci2: command tx timeout [ 957.917761][T20543] netlink: 'syz.1.5114': attribute type 29 has an invalid length. [ 957.954073][T20487] hsr_slave_0: entered promiscuous mode [ 957.974692][T20487] hsr_slave_1: entered promiscuous mode [ 958.014060][T20543] netlink: 'syz.1.5114': attribute type 29 has an invalid length. [ 958.179029][T20548] netlink: 'syz.2.5113': attribute type 22 has an invalid length. [ 958.200866][T20548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5113'. [ 958.220740][T20546] netlink: 'syz.1.5114': attribute type 29 has an invalid length. [ 958.548382][T20543] netlink: 'syz.1.5114': attribute type 29 has an invalid length. [ 959.692078][ T5083] Bluetooth: hci2: command tx timeout [ 959.898882][T20580] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 959.909060][T20580] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 960.227082][T20588] validate_nla: 1 callbacks suppressed [ 960.227101][T20588] netlink: 'syz.1.5121': attribute type 22 has an invalid length. [ 960.269031][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5121'. [ 960.765013][T20591] netlink: 'syz.2.5122': attribute type 22 has an invalid length. [ 960.787430][T20591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5122'. [ 961.097259][T20609] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 961.111744][T20609] syzkaller1: linktype set to 805 [ 961.789016][ T5083] Bluetooth: hci2: command tx timeout [ 962.329069][T17101] hsr_slave_0: left promiscuous mode [ 962.372352][T17101] bridge_slave_1: left allmulticast mode [ 962.378691][T17101] bridge_slave_1: left promiscuous mode [ 962.399088][T17101] bridge0: port 2(bridge_slave_1) entered disabled state [ 962.425546][T17101] bridge_slave_0: left promiscuous mode [ 962.442822][T17101] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.487437][T17101] veth1_macvtap: left promiscuous mode [ 962.496389][T17101] veth0_macvtap: left promiscuous mode [ 962.503090][T17101] veth1_vlan: left promiscuous mode [ 962.508768][T17101] veth0_vlan: left promiscuous mode [ 962.940189][T17101] team0 (unregistering): Port device geneve1 removed [ 963.952838][T17101] team0 (unregistering): Port device team_slave_1 removed [ 964.036720][T17101] team0 (unregistering): Port device team_slave_0 removed [ 964.109331][T17101] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.178355][T17101] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.606045][T17101] .` (unregistering): Released all slaves [ 964.798553][T20628] syzkaller0: entered promiscuous mode [ 964.808872][T20628] syzkaller0: entered allmulticast mode [ 964.825364][T20487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 964.852649][T20487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 964.866450][T20487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 964.891611][T20487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 968.127102][T20487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.150022][T20646] netlink: 'syz.3.5132': attribute type 21 has an invalid length. [ 968.182528][T20646] IPv6: Can't replace route, no match found [ 968.215442][T20646] netlink: 'syz.3.5132': attribute type 10 has an invalid length. [ 968.239981][T20646] team0: Device wg1 is of different type [ 968.335796][T20487] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.434036][T17117] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.441607][T17117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.577739][T17123] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.585380][T17123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.591902][T20688] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5140'. [ 969.671599][T20487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 970.966606][T20719] netlink: 'syz.2.5145': attribute type 25 has an invalid length. [ 970.991491][T20719] netlink: 'syz.2.5145': attribute type 3 has an invalid length. [ 971.008295][T20719] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5145'. [ 971.171821][T20487] veth0_vlan: entered promiscuous mode [ 971.213718][T20487] veth1_vlan: entered promiscuous mode [ 971.333976][ T5083] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 971.340367][T20487] veth0_macvtap: entered promiscuous mode [ 971.377523][T20487] veth1_macvtap: entered promiscuous mode [ 971.416322][T20487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.465480][T20487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.485625][T20487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.497233][T20487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.514611][T20487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 971.528405][T20487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.554938][T20487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 971.594294][T20487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.617784][T20487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.628478][T20487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.639964][T20487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.670699][T20487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 971.690018][T20487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 971.702715][T20487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 971.720016][T20487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.748216][T20487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.755824][T20733] netlink: 21 bytes leftover after parsing attributes in process `syz.3.5150'. [ 971.759808][T20487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.779532][T20487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.794616][T20733] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 971.829753][T20736] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 971.837930][T20736] dvmrp1: linktype set to 823 [ 972.112636][T17116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.145427][T17116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.236260][T17114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 972.292724][T17114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 972.362519][T20745] netlink: 1 bytes leftover after parsing attributes in process `syz.3.5151'. [ 973.493445][T20762] netlink: 'syz.2.5153': attribute type 22 has an invalid length. [ 973.520997][T20762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5153'. [ 973.645705][T20758] netlink: 'syz.1.5154': attribute type 22 has an invalid length. [ 973.692527][T20758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5154'. [ 973.727296][T12474] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 973.992976][T12474] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 974.527401][T20788] syzkaller0: entered promiscuous mode [ 974.562023][T20788] syzkaller0: entered allmulticast mode [ 974.668741][T20796] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5159'. [ 974.688631][T20796] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5159'. [ 974.853700][T20781] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5159'. [ 975.690864][T12474] Bluetooth: hci4: command 0x0406 tx timeout [ 976.011392][ T5083] Bluetooth: hci1: command tx timeout [ 978.423958][T20803] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.5159'. [ 978.448905][T20815] netlink: 'syz.4.5168': attribute type 22 has an invalid length. [ 978.458707][T20815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5168'. [ 978.742523][ T5083] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 978.822413][T20823] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5171'. [ 978.902616][T20822] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.5171'. [ 979.137547][T20828] netlink: 'syz.4.5170': attribute type 22 has an invalid length. [ 979.160762][T20828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5170'. [ 979.514762][T20845] netlink: 21 bytes leftover after parsing attributes in process `syz.2.5176'. [ 979.545360][T20845] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 980.362309][T20858] netlink: 'syz.3.5179': attribute type 22 has an invalid length. [ 980.370770][T20858] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5179'. [ 980.834706][T20875] netlink: 'syz.1.5186': attribute type 22 has an invalid length. [ 980.856023][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5186'. [ 982.139690][T20911] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5200'. [ 982.780470][T20913] netlink: 'syz.4.5201': attribute type 22 has an invalid length. [ 982.821177][T20913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5201'. [ 983.338759][T20933] sock: sock_set_timeout: `syz.4.5207' (pid 20933) tries to set negative timeout [ 983.348759][T20939] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.5209'. [ 983.627557][T20949] netlink: 'syz.4.5213': attribute type 21 has an invalid length. [ 983.660912][T20949] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5213'. [ 987.884042][T21047] netlink: 'syz.4.5254': attribute type 11 has an invalid length. [ 987.893440][T21047] netlink: 176 bytes leftover after parsing attributes in process `syz.4.5254'. [ 989.542134][ T5083] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5 [ 990.313319][ T5083] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 991.177120][T21122] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 991.387380][ T5083] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 992.939175][ T5083] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 993.638616][T21177] netlink: 'syz.2.5305': attribute type 10 has an invalid length. [ 993.761949][ T5083] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 993.926451][T21177] team0: Port device wlan1 added [ 994.095143][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.110465][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.238413][T12474] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 995.871498][T21224] syzkaller0: entered promiscuous mode [ 995.888277][T21224] syzkaller0: entered allmulticast mode [ 996.179319][T12474] Bluetooth: hci0: command 0x0406 tx timeout [ 996.279157][ T5083] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 999.510484][ T5083] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 999.955525][ T5083] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1001.019047][T21280] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1001.034239][T21280] IPv6: NLM_F_CREATE should be set when creating new route [ 1001.042260][T21280] IPv6: NLM_F_CREATE should be set when creating new route [ 1001.050179][T21280] IPv6: NLM_F_CREATE should be set when creating new route [ 1001.078172][T21281] netlink: 'syz.3.5341': attribute type 9 has an invalid length. [ 1001.106945][T21281] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5341'. [ 1001.255585][T21286] netlink: 'syz.3.5341': attribute type 9 has an invalid length. [ 1001.269506][T21286] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.5341'. [ 1001.665736][T21292] lo: entered promiscuous mode [ 1001.802479][ T5083] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1002.389733][T21311] netlink: 'syz.1.5353': attribute type 21 has an invalid length. [ 1002.465521][T21311] IPv6: Can't replace route, no match found [ 1003.508807][T21325] netlink: 'syz.1.5357': attribute type 1 has an invalid length. [ 1003.564480][T21325] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1003.586811][T21325] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5357'. [ 1004.176949][T21345] netlink: 'syz.2.5367': attribute type 21 has an invalid length. [ 1004.194556][T21345] IPv6: Can't replace route, no match found [ 1005.439802][T21366] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5376'. [ 1006.021168][T21378] netlink: 'syz.3.5379': attribute type 21 has an invalid length. [ 1006.046419][T21378] IPv6: Can't replace route, no match found [ 1006.833695][T21399] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 1006.860805][T21399] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 1006.927709][T21398] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1006.957177][T21398] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1007.432310][T21412] netlink: 'syz.3.5392': attribute type 10 has an invalid length. [ 1007.442566][T21412] hsr_slave_0: left promiscuous mode [ 1007.457396][T21412] hsr_slave_1: left promiscuous mode [ 1007.496482][T21417] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5392'. [ 1007.763861][T21419] netlink: 'syz.1.5391': attribute type 22 has an invalid length. [ 1007.804128][T21419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5391'. [ 1009.488930][T21444] netlink: 'syz.4.5402': attribute type 22 has an invalid length. [ 1009.506538][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5402'. [ 1009.955402][T21447] netlink: 'syz.2.5403': attribute type 22 has an invalid length. [ 1009.980642][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5403'. [ 1010.556040][T21467] netlink: 160 bytes leftover after parsing attributes in process `syz.3.5410'. [ 1011.018483][T21471] netlink: 'syz.1.5412': attribute type 22 has an invalid length. [ 1011.067881][T21471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5412'. [ 1011.929956][ T5083] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1011.940797][T21495] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5419'. [ 1012.194087][T21504] netlink: 'syz.2.5422': attribute type 21 has an invalid length. [ 1012.213543][T21504] IPv6: Can't replace route, no match found [ 1012.220287][T21489] netlink: 'syz.3.5416': attribute type 22 has an invalid length. [ 1012.231892][T21489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5416'. [ 1012.986403][ T5083] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1013.316089][T21526] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 1013.332758][T21526] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1013.343426][T21526] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 1013.359238][T21526] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 1013.372379][T21526] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.5435'. [ 1013.406158][T21526] netlink: 'syz.3.5435': attribute type 1 has an invalid length. [ 1013.692508][ T5083] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1013.837999][T21544] netlink: 'syz.3.5439': attribute type 22 has an invalid length. [ 1013.885600][T21544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5439'. [ 1015.931895][ T5083] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1016.654881][ T5083] Bluetooth: hci1: command 0x0406 tx timeout [ 1017.852614][T12474] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1018.970458][T21628] netlink: 'syz.1.5471': attribute type 10 has an invalid length. [ 1019.765361][T21628] veth0_vlan: left promiscuous mode [ 1019.790742][T21628] veth0_vlan: entered promiscuous mode [ 1019.818134][T21628] team0: Device veth0_vlan failed to register rx_handler [ 1022.675754][T21694] netlink: 'syz.1.5498': attribute type 22 has an invalid length. [ 1022.738414][T21694] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5498'. [ 1024.071113][T21708] netlink: 'syz.4.5513': attribute type 22 has an invalid length. [ 1024.079934][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5513'. [ 1025.567064][T21751] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.5520'. [ 1026.147023][T21761] pimreg: tun_chr_ioctl cmd 1074025681 [ 1026.709747][T21766] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 1026.783168][T21766] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 1026.872891][T21771] netlink: 'syz.4.5525': attribute type 29 has an invalid length. [ 1027.393661][T21780] netlink: 160 bytes leftover after parsing attributes in process `syz.2.5528'. [ 1027.571496][T21791] IPv6: NLM_F_CREATE should be specified when creating new route [ 1027.596206][T21791] netlink: 1 bytes leftover after parsing attributes in process `syz.4.5533'. [ 1030.063987][T21833] netlink: 'syz.2.5548': attribute type 22 has an invalid length. [ 1030.130729][T21833] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5548'. [ 1032.912111][T21880] netlink: 'syz.1.5562': attribute type 22 has an invalid length. [ 1032.950971][T21880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5562'. [ 1035.363422][T21932] sit0: entered allmulticast mode [ 1035.526334][T21930] netlink: 'syz.2.5582': attribute type 22 has an invalid length. [ 1035.560736][T21930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5582'. [ 1035.586770][T21929] sit0: entered promiscuous mode [ 1040.242118][T22004] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.5612'. [ 1040.752692][T22013] netlink: 'syz.1.5616': attribute type 21 has an invalid length. [ 1040.815042][T22013] IPv6: Can't replace route, no match found [ 1040.892729][T22013] FAULT_INJECTION: forcing a failure. [ 1040.892729][T22013] name failslab, interval 1, probability 0, space 0, times 0 [ 1040.933151][T22013] CPU: 1 PID: 22013 Comm: syz.1.5616 Not tainted syzkaller #0 [ 1040.940725][T22013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1040.951031][T22013] Call Trace: [ 1040.954366][T22013] [ 1040.957348][T22013] dump_stack_lvl+0x18c/0x250 [ 1040.962111][T22013] ? show_regs_print_info+0x20/0x20 [ 1040.967483][T22013] ? load_image+0x420/0x420 [ 1040.972790][T22013] ? __might_sleep+0xe0/0xe0 [ 1040.977919][T22013] ? __lock_acquire+0x7d80/0x7d80 [ 1040.983051][T22013] should_fail_ex+0x394/0x4c0 [ 1040.987826][T22013] should_failslab+0x9/0x20 [ 1040.992587][T22013] slab_pre_alloc_hook+0x59/0x300 [ 1040.997695][T22013] ? __lock_acquire+0x7d80/0x7d80 [ 1041.002893][T22013] kmem_cache_alloc_node+0x5e/0x310 [ 1041.008493][T22013] ? __alloc_skb+0x103/0x2c0 [ 1041.013356][T22013] __alloc_skb+0x103/0x2c0 [ 1041.017864][T22013] netlink_sendmsg+0x66a/0xbf0 [ 1041.022939][T22013] ? netlink_getsockopt+0x590/0x590 [ 1041.028257][T22013] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1041.034057][T22013] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1041.039464][T22013] ? security_socket_sendmsg+0x80/0xa0 [ 1041.045040][T22013] ? netlink_getsockopt+0x590/0x590 [ 1041.050324][T22013] ____sys_sendmsg+0x61b/0x980 [ 1041.055183][T22013] ? __asan_memset+0x22/0x40 [ 1041.059855][T22013] ? __sys_sendmsg_sock+0x30/0x30 [ 1041.064971][T22013] ? __import_iovec+0x5f2/0x850 [ 1041.070021][T22013] ? import_iovec+0x73/0xa0 [ 1041.074641][T22013] ___sys_sendmsg+0x2a6/0x360 [ 1041.079432][T22013] ? get_pid_task+0x20/0x1e0 [ 1041.084261][T22013] ? __sys_sendmsg+0x2b0/0x2b0 [ 1041.089224][T22013] ? __lock_acquire+0x7d80/0x7d80 [ 1041.094576][T22013] __se_sys_sendmsg+0x1d0/0x2c0 [ 1041.099526][T22013] ? __x64_sys_sendmsg+0x80/0x80 [ 1041.104729][T22013] ? lockdep_hardirqs_on+0x98/0x150 [ 1041.109994][T22013] do_syscall_64+0x55/0xb0 [ 1041.114501][T22013] ? clear_bhb_loop+0x40/0x90 [ 1041.119255][T22013] ? clear_bhb_loop+0x40/0x90 [ 1041.124094][T22013] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1041.130157][T22013] RIP: 0033:0x7fa47999de59 [ 1041.134807][T22013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1041.154936][T22013] RSP: 002b:00007fa47a8be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1041.163609][T22013] RAX: ffffffffffffffda RBX: 00007fa479c25fa0 RCX: 00007fa47999de59 [ 1041.171652][T22013] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1041.179693][T22013] RBP: 00007fa47a8be090 R08: 0000000000000000 R09: 0000000000000000 [ 1041.187739][T22013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1041.195994][T22013] R13: 00007fa479c26038 R14: 00007fa479c25fa0 R15: 00007ffe21f03198 [ 1041.204264][T22013] [ 1041.477903][T22027] netlink: 'syz.2.5621': attribute type 21 has an invalid length. [ 1041.511406][T22027] IPv6: Can't replace route, no match found [ 1043.870612][T22079] netlink: 'syz.1.5639': attribute type 22 has an invalid length. [ 1043.879114][T22079] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5639'. [ 1044.458394][T22102] netlink: 'syz.4.5645': attribute type 21 has an invalid length. [ 1044.486102][T22102] IPv6: NLM_F_CREATE should be specified when creating new route [ 1044.495650][T22102] IPv6: Can't replace route, no match found [ 1045.070462][T22109] netlink: 'syz.3.5648': attribute type 21 has an invalid length. [ 1045.092183][T22109] IPv6: Can't replace route, no match found [ 1045.336651][T22109] netlink: 'syz.3.5648': attribute type 10 has an invalid length. [ 1045.393486][T22109] team0: Device wg1 is of different type [ 1045.863288][T22125] netlink: 'syz.3.5652': attribute type 22 has an invalid length. [ 1045.880685][T22125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5652'. [ 1046.983098][T22140] netlink: 739 bytes leftover after parsing attributes in process `syz.1.5660'. [ 1049.109070][T22185] netlink: 'syz.3.5681': attribute type 21 has an invalid length. [ 1049.131826][T22185] IPv6: Can't replace route, no match found [ 1049.182731][T22185] FAULT_INJECTION: forcing a failure. [ 1049.182731][T22185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1049.241698][T22185] CPU: 1 PID: 22185 Comm: syz.3.5681 Not tainted syzkaller #0 [ 1049.250132][T22185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1049.260648][T22185] Call Trace: [ 1049.264069][T22185] [ 1049.267047][T22185] dump_stack_lvl+0x18c/0x250 [ 1049.271907][T22185] ? show_regs_print_info+0x20/0x20 [ 1049.277458][T22185] ? load_image+0x420/0x420 [ 1049.282223][T22185] ? __might_fault+0xaa/0x120 [ 1049.287322][T22185] ? __lock_acquire+0x7d80/0x7d80 [ 1049.292787][T22185] should_fail_ex+0x394/0x4c0 [ 1049.297657][T22185] _copy_from_iter+0x1cd/0x1290 [ 1049.302859][T22185] ? rcu_is_watching+0x15/0xb0 [ 1049.308114][T22185] ? copyout_mc+0x70/0x70 [ 1049.312629][T22185] ? __virt_addr_valid+0x10c/0x380 [ 1049.317958][T22185] ? __virt_addr_valid+0x10c/0x380 [ 1049.323167][T22185] ? __virt_addr_valid+0x10c/0x380 [ 1049.328848][T22185] ? __check_object_size+0x4fc/0xa40 [ 1049.334208][T22185] netlink_sendmsg+0x76b/0xbf0 [ 1049.339164][T22185] ? netlink_getsockopt+0x590/0x590 [ 1049.344450][T22185] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1049.350231][T22185] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1049.355677][T22185] ? security_socket_sendmsg+0x80/0xa0 [ 1049.361294][T22185] ? netlink_getsockopt+0x590/0x590 [ 1049.366761][T22185] ____sys_sendmsg+0x61b/0x980 [ 1049.371754][T22185] ? __asan_memset+0x22/0x40 [ 1049.376385][T22185] ? __sys_sendmsg_sock+0x30/0x30 [ 1049.381451][T22185] ? __import_iovec+0x5f2/0x850 [ 1049.386353][T22185] ? import_iovec+0x73/0xa0 [ 1049.390918][T22185] ___sys_sendmsg+0x2a6/0x360 [ 1049.395653][T22185] ? get_pid_task+0x20/0x1e0 [ 1049.400411][T22185] ? __sys_sendmsg+0x2b0/0x2b0 [ 1049.405338][T22185] ? __lock_acquire+0x7d80/0x7d80 [ 1049.410433][T22185] __se_sys_sendmsg+0x1d0/0x2c0 [ 1049.415366][T22185] ? perf_trace_preemptirq_template+0x269/0x330 [ 1049.421824][T22185] ? __x64_sys_sendmsg+0x80/0x80 [ 1049.426903][T22185] ? lockdep_hardirqs_on+0x98/0x150 [ 1049.432155][T22185] do_syscall_64+0x55/0xb0 [ 1049.436729][T22185] ? clear_bhb_loop+0x40/0x90 [ 1049.441546][T22185] ? clear_bhb_loop+0x40/0x90 [ 1049.446708][T22185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1049.452914][T22185] RIP: 0033:0x7f599019de59 [ 1049.457360][T22185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1049.477532][T22185] RSP: 002b:00007f5991058028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1049.485990][T22185] RAX: ffffffffffffffda RBX: 00007f5990425fa0 RCX: 00007f599019de59 [ 1049.494233][T22185] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1049.502764][T22185] RBP: 00007f5991058090 R08: 0000000000000000 R09: 0000000000000000 [ 1049.511205][T22185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1049.519842][T22185] R13: 00007f5990426038 R14: 00007f5990425fa0 R15: 00007ffd34780b48 [ 1049.528653][T22185] [ 1049.843588][T12474] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1050.120887][T22214] netlink: 168 bytes leftover after parsing attributes in process `syz.1.5695'. [ 1050.496155][T22228] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5700'. [ 1050.506230][T22228] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1050.762188][T12474] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 1050.867350][T22232] netlink: 'syz.2.5702': attribute type 22 has an invalid length. [ 1050.900662][T22232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5702'. [ 1051.017624][T22237] netlink: 'syz.4.5704': attribute type 3 has an invalid length. [ 1051.026484][T22237] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5704'. [ 1052.283064][T12474] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 1053.984291][T12474] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1054.339841][T22289] netlink: 9275 bytes leftover after parsing attributes in process `syz.4.5727'. [ 1054.542439][T22263] netlink: 'syz.2.5717': attribute type 22 has an invalid length. [ 1054.550841][T22263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5717'. [ 1054.563460][T22289] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1054.570940][T22289] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.578527][T22289] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.586096][T22289] IPv6: NLM_F_CREATE should be set when creating new route [ 1054.869872][T22295] netlink: 'syz.1.5730': attribute type 21 has an invalid length. [ 1054.920400][T22295] IPv6: Can't replace route, no match found [ 1055.061243][T22295] netlink: 'syz.1.5730': attribute type 10 has an invalid length. [ 1055.635364][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.644271][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1056.018061][T22295] team0: Device wg1 is of different type [ 1056.235971][T12474] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1056.627395][T22321] netlink: 'syz.4.5737': attribute type 22 has an invalid length. [ 1056.754605][T22321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5737'. [ 1056.861106][T22335] netlink: 'syz.2.5744': attribute type 21 has an invalid length. [ 1056.870027][T22335] IPv6: Can't replace route, no match found [ 1056.918313][T22335] netlink: 'syz.2.5744': attribute type 10 has an invalid length. [ 1056.988483][T22335] team0: Device wg1 is of different type [ 1057.279598][T12474] Bluetooth: hci4: unexpected event 0x1c length: 15 > 5 [ 1057.309833][T22339] netlink: 19367 bytes leftover after parsing attributes in process `syz.3.5745'. [ 1058.192499][T22375] netlink: 'syz.4.5759': attribute type 21 has an invalid length. [ 1058.218626][T22375] IPv6: Can't replace route, no match found [ 1058.234397][T22376] netlink: 'syz.1.5755': attribute type 22 has an invalid length. [ 1058.268536][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5755'. [ 1058.347874][T22375] netlink: 'syz.4.5759': attribute type 10 has an invalid length. [ 1058.928820][T22375] team0: Device wg1 is of different type [ 1059.024022][T22378] netlink: 'syz.2.5760': attribute type 21 has an invalid length. [ 1059.041782][T22378] IPv6: Can't replace route, no match found [ 1059.063100][T22379] netlink: 'syz.2.5760': attribute type 10 has an invalid length. [ 1059.142738][T22379] team0: Device wg1 is of different type [ 1059.385385][T22389] netlink: 'syz.4.5765': attribute type 21 has an invalid length. [ 1059.408474][T22389] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5765'. [ 1059.425607][T22389] netlink: 'syz.4.5765': attribute type 4 has an invalid length. [ 1059.444744][T22389] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5765'. [ 1060.078807][T22410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5770'. [ 1062.066152][T22453] validate_nla: 7 callbacks suppressed [ 1062.066222][T22453] netlink: 'syz.1.5789': attribute type 22 has an invalid length. [ 1062.108976][T22453] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5789'. [ 1063.365118][T22484] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.5802'. [ 1063.466087][T22484] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1063.473851][T22484] IPv6: NLM_F_CREATE should be set when creating new route [ 1063.481681][T22484] IPv6: NLM_F_CREATE should be set when creating new route [ 1063.489537][T22484] IPv6: NLM_F_CREATE should be set when creating new route [ 1065.197667][T22514] netlink: 'syz.4.5815': attribute type 3 has an invalid length. [ 1065.237745][T22514] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5815'. [ 1065.403340][T22521] netlink: 'syz.1.5817': attribute type 21 has an invalid length. [ 1065.431367][T22521] IPv6: Can't replace route, no match found [ 1065.480464][T22521] netlink: 'syz.1.5817': attribute type 10 has an invalid length. [ 1065.519248][T22521] team0: Device wg1 is of different type [ 1066.122469][T22529] netlink: 'syz.2.5822': attribute type 22 has an invalid length. [ 1066.200025][T22529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5822'. [ 1066.505433][T22540] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1067.281287][T22556] netlink: 'syz.2.5832': attribute type 3 has an invalid length. [ 1067.292765][T22556] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5832'. [ 1067.713849][T22569] netlink: 'syz.1.5834': attribute type 22 has an invalid length. [ 1067.806901][T22569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5834'. [ 1068.518068][T22575] netlink: 'syz.4.5839': attribute type 1 has an invalid length. [ 1068.540750][T22575] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.5839'. [ 1068.811787][T22575] netlink: 'syz.4.5839': attribute type 1 has an invalid length. [ 1068.983704][T22580] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 1069.001034][T22580] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 1069.038910][T22580] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 1069.081206][T22580] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 1070.030394][T22594] netlink: 'syz.3.5846': attribute type 3 has an invalid length. [ 1070.102359][T22594] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5846'. [ 1071.306368][T22608] netlink: 'syz.3.5851': attribute type 22 has an invalid length. [ 1071.329387][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5851'. [ 1071.607603][T22617] netlink: 'syz.1.5854': attribute type 21 has an invalid length. [ 1071.621445][T22617] IPv6: Can't replace route, no match found [ 1071.661208][T22617] netlink: 'syz.1.5854': attribute type 10 has an invalid length. [ 1071.703106][T22617] team0: Device wg1 is of different type [ 1071.927809][T22621] netlink: 'syz.2.5856': attribute type 21 has an invalid length. [ 1071.948410][T22621] IPv6: Can't replace route, no match found [ 1072.035341][T22621] netlink: 'syz.2.5856': attribute type 10 has an invalid length. [ 1072.108151][T22621] team0: Device wg1 is of different type [ 1072.820188][T22639] netlink: 'syz.1.5863': attribute type 22 has an invalid length. [ 1072.880193][T22639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5863'. [ 1075.369066][T22691] netlink: 'syz.1.5885': attribute type 5 has an invalid length. [ 1076.106415][T22703] netlink: 'syz.4.5891': attribute type 21 has an invalid length. [ 1076.115906][T22703] IPv6: Can't replace route, no match found [ 1077.013325][T22726] netlink: 'syz.3.5898': attribute type 21 has an invalid length. [ 1077.028392][T22726] IPv6: Can't replace route, no match found [ 1077.112736][T22726] netlink: 'syz.3.5898': attribute type 10 has an invalid length. [ 1077.177756][T22726] team0: Device wg1 is of different type [ 1078.096211][T12474] Bluetooth: hci2: command 0x0406 tx timeout [ 1078.764481][T22760] netlink: 'syz.2.5912': attribute type 22 has an invalid length. [ 1078.780332][T22760] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 1079.020484][T22777] netlink: 'syz.4.5918': attribute type 21 has an invalid length. [ 1079.033193][T22777] IPv6: Can't replace route, no match found [ 1079.067331][T22777] netlink: 'syz.4.5918': attribute type 10 has an invalid length. [ 1079.113502][T22777] team0: Device wg1 is of different type [ 1080.461856][T22800] netlink: 'syz.2.5925': attribute type 22 has an invalid length. [ 1080.525009][T22800] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5925'. [ 1080.751596][T22802] netlink: 'syz.1.5927': attribute type 21 has an invalid length. [ 1082.693085][T22830] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1082.700438][T22830] IPv6: NLM_F_CREATE should be set when creating new route [ 1082.730385][T22830] netlink: 'syz.1.5938': attribute type 9 has an invalid length. [ 1082.738912][T22830] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1082.809739][T22835] netlink: 'syz.1.5938': attribute type 9 has an invalid length. [ 1082.854096][T22832] netlink: 'syz.3.5939': attribute type 21 has an invalid length. [ 1082.879977][T22835] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5938'. [ 1083.383335][T22846] netlink: 'syz.4.5943': attribute type 10 has an invalid length. [ 1083.424783][T22846] team0: Device wg1 is of different type [ 1083.505998][T22850] netlink: 22 bytes leftover after parsing attributes in process `syz.3.5946'. [ 1083.643367][T22854] netlink: 'syz.2.5950': attribute type 21 has an invalid length. [ 1084.042967][T22858] netlink: 'syz.1.5947': attribute type 22 has an invalid length. [ 1084.098583][T22858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5947'. [ 1084.540419][T22882] netlink: 'syz.3.5958': attribute type 21 has an invalid length. [ 1084.562085][T22882] IPv6: Can't replace route, no match found [ 1084.589354][T22882] netlink: 'syz.3.5958': attribute type 10 has an invalid length. [ 1084.636660][T22882] team0: Device wg1 is of different type [ 1085.608167][T22912] FAULT_INJECTION: forcing a failure. [ 1085.608167][T22912] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.673343][T22912] CPU: 1 PID: 22912 Comm: syz.4.5976 Not tainted syzkaller #0 [ 1085.681116][T22912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1085.691223][T22912] Call Trace: [ 1085.694635][T22912] [ 1085.697740][T22912] dump_stack_lvl+0x18c/0x250 [ 1085.702489][T22912] ? show_regs_print_info+0x20/0x20 [ 1085.708131][T22912] ? load_image+0x420/0x420 [ 1085.712704][T22912] ? __might_sleep+0xe0/0xe0 [ 1085.717524][T22912] ? __lock_acquire+0x7d80/0x7d80 [ 1085.722706][T22912] should_fail_ex+0x394/0x4c0 [ 1085.727480][T22912] should_failslab+0x9/0x20 [ 1085.732323][T22912] slab_pre_alloc_hook+0x59/0x300 [ 1085.737464][T22912] ? __lock_acquire+0x7d80/0x7d80 [ 1085.742636][T22912] kmem_cache_alloc_node+0x5e/0x310 [ 1085.747899][T22912] ? __alloc_skb+0x103/0x2c0 [ 1085.752550][T22912] __alloc_skb+0x103/0x2c0 [ 1085.757039][T22912] netlink_sendmsg+0x66a/0xbf0 [ 1085.762065][T22912] ? netlink_getsockopt+0x590/0x590 [ 1085.767455][T22912] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1085.773162][T22912] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1085.778530][T22912] ? security_socket_sendmsg+0x80/0xa0 [ 1085.784058][T22912] ? netlink_getsockopt+0x590/0x590 [ 1085.789378][T22912] ____sys_sendmsg+0x61b/0x980 [ 1085.794197][T22912] ? __asan_memset+0x22/0x40 [ 1085.798922][T22912] ? __sys_sendmsg_sock+0x30/0x30 [ 1085.803983][T22912] ? __import_iovec+0x5f2/0x850 [ 1085.809196][T22912] ? import_iovec+0x73/0xa0 [ 1085.813748][T22912] ___sys_sendmsg+0x2a6/0x360 [ 1085.818485][T22912] ? get_pid_task+0x20/0x1e0 [ 1085.823272][T22912] ? __sys_sendmsg+0x2b0/0x2b0 [ 1085.828099][T22912] ? __lock_acquire+0x7d80/0x7d80 [ 1085.833183][T22912] __se_sys_sendmsg+0x1d0/0x2c0 [ 1085.838172][T22912] ? __x64_sys_sendmsg+0x80/0x80 [ 1085.843159][T22912] ? lockdep_hardirqs_on+0x98/0x150 [ 1085.848405][T22912] do_syscall_64+0x55/0xb0 [ 1085.852894][T22912] ? clear_bhb_loop+0x40/0x90 [ 1085.857605][T22912] ? clear_bhb_loop+0x40/0x90 [ 1085.862615][T22912] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1085.868805][T22912] RIP: 0033:0x7f34c0b9de59 [ 1085.873345][T22912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1085.893422][T22912] RSP: 002b:00007f34c1b08028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1085.901873][T22912] RAX: ffffffffffffffda RBX: 00007f34c0e25fa0 RCX: 00007f34c0b9de59 [ 1085.910229][T22912] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1085.918238][T22912] RBP: 00007f34c1b08090 R08: 0000000000000000 R09: 0000000000000000 [ 1085.926562][T22912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1085.934577][T22912] R13: 00007f34c0e26038 R14: 00007f34c0e25fa0 R15: 00007fff93488008 [ 1085.942773][T22912] [ 1086.168676][T22910] netlink: 'syz.2.5967': attribute type 22 has an invalid length. [ 1086.177434][T22910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5967'. [ 1086.370433][T22924] netlink: 'syz.4.5971': attribute type 21 has an invalid length. [ 1086.383702][T22924] IPv6: Can't replace route, no match found [ 1086.445231][T22924] netlink: 'syz.4.5971': attribute type 10 has an invalid length. [ 1086.504050][T22924] team0: Device wg1 is of different type [ 1086.754228][T22935] netlink: 'syz.4.5979': attribute type 21 has an invalid length. [ 1087.555403][ T5083] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1087.966226][T22963] netlink: 'syz.1.5989': attribute type 21 has an invalid length. [ 1088.047767][T22966] netlink: 'syz.3.5987': attribute type 1 has an invalid length. [ 1088.095044][T22966] netlink: 199820 bytes leftover after parsing attributes in process `syz.3.5987'. [ 1088.207825][T22970] netlink: 'syz.1.5991': attribute type 4 has an invalid length. [ 1088.218818][T22970] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5991'. [ 1088.392877][ T5083] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1088.630924][T22983] IPv6: Can't replace route, no match found [ 1088.709313][T22983] team0: Device wg1 is of different type [ 1089.557904][ T5083] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 1089.696210][T23009] tap0: tun_chr_ioctl cmd 1074025677 [ 1089.708331][T23009] tap0: linktype set to 778 [ 1089.719868][T23009] tap0: tun_chr_ioctl cmd 2147767511 [ 1089.745598][T23009] validate_nla: 4 callbacks suppressed [ 1089.745635][T23009] netlink: 'syz.4.6007': attribute type 3 has an invalid length. [ 1089.760761][T23009] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.6007'. [ 1089.810435][T23013] lo: entered allmulticast mode [ 1089.903190][T23013] lo: entered promiscuous mode [ 1089.911489][T23013] lo: left allmulticast mode [ 1090.050865][T23017] netlink: 'syz.3.6011': attribute type 21 has an invalid length. [ 1090.994437][T23035] netlink: 'syz.3.6018': attribute type 21 has an invalid length. [ 1091.011774][T23035] IPv6: Can't replace route, no match found [ 1091.055552][T23035] netlink: 'syz.3.6018': attribute type 10 has an invalid length. [ 1091.087386][T23035] team0: Device wg1 is of different type [ 1091.201848][T23040] sctp: [Deprecated]: syz.4.6019 (pid 23040) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1091.201848][T23040] Use struct sctp_sack_info instead [ 1091.728429][T23049] netlink: 'syz.3.6023': attribute type 22 has an invalid length. [ 1091.778712][T23049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6023'. [ 1093.524880][T23072] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1094.394513][T23089] netlink: 'syz.3.6037': attribute type 22 has an invalid length. [ 1094.411135][T23089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6037'. [ 1094.599159][T23088] netlink: 'syz.1.6036': attribute type 22 has an invalid length. [ 1094.650840][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6036'. [ 1094.843987][T23103] netlink: 'syz.2.6041': attribute type 33 has an invalid length. [ 1094.861054][T23103] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6041'. [ 1096.341062][T23129] netlink: 'syz.2.6050': attribute type 22 has an invalid length. [ 1096.349238][T23129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6050'. [ 1097.113916][T23138] netlink: 'syz.4.6053': attribute type 22 has an invalid length. [ 1097.139088][T23138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6053'. [ 1099.252701][T23170] netlink: 'syz.2.6063': attribute type 21 has an invalid length. [ 1099.411525][T23177] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6065'. [ 1099.738885][T23175] netlink: 'syz.1.6064': attribute type 22 has an invalid length. [ 1099.800682][T23175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6064'. [ 1100.591934][T23189] netlink: 'syz.4.6069': attribute type 10 has an invalid length. [ 1103.100309][T23189] team0: Device wg1 is of different type [ 1104.094327][T23216] netlink: 'syz.4.6078': attribute type 22 has an invalid length. [ 1104.135943][T23216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6078'. [ 1105.181821][T23235] netlink: 'syz.3.6084': attribute type 21 has an invalid length. [ 1105.221354][T23235] IPv6: Can't replace route, no match found [ 1105.265059][T23235] netlink: 'syz.3.6084': attribute type 10 has an invalid length. [ 1105.929794][T23235] team0: Device wg1 is of different type [ 1105.972095][T23233] netlink: 'syz.1.6083': attribute type 10 has an invalid length. [ 1106.079948][T23233] team0: Device wg1 is of different type [ 1106.342299][T23248] netlink: 'syz.2.6089': attribute type 22 has an invalid length. [ 1106.390575][T23248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6089'. [ 1106.965644][T23260] syzkaller0: entered promiscuous mode [ 1106.980681][T23260] syzkaller0: entered allmulticast mode [ 1107.386132][T23272] netlink: 'syz.4.6098': attribute type 29 has an invalid length. [ 1111.314020][T23272] netlink: 'syz.4.6098': attribute type 29 has an invalid length. [ 1111.332251][T23275] netlink: 'syz.1.6099': attribute type 21 has an invalid length. [ 1111.562112][T23287] netlink: 'syz.4.6101': attribute type 21 has an invalid length. [ 1111.582265][T23287] IPv6: Can't replace route, no match found [ 1112.019321][T23300] netlink: 'syz.2.6104': attribute type 10 has an invalid length. [ 1114.694533][T23300] team0: Device wg1 is of different type [ 1114.751037][T23304] netlink: 'syz.3.6105': attribute type 22 has an invalid length. [ 1114.759438][T23304] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6105'. [ 1114.970117][T23311] netlink: 'syz.1.6108': attribute type 21 has an invalid length. [ 1115.550139][T23320] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1115.719745][T23318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6111'. [ 1116.620692][T23336] netlink: 'syz.3.6116': attribute type 10 has an invalid length. [ 1116.987026][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.998482][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.076578][T23336] team0: Device wg1 is of different type [ 1117.106205][T23339] netlink: 'syz.1.6118': attribute type 22 has an invalid length. [ 1117.120799][T23339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6118'. [ 1117.379790][T23347] netlink: 'syz.1.6120': attribute type 21 has an invalid length. [ 1117.482683][T23349] netlink: 'syz.4.6122': attribute type 21 has an invalid length. [ 1117.491659][T23349] IPv6: NLM_F_CREATE should be specified when creating new route [ 1117.500406][T23349] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1117.508326][T23349] IPv6: NLM_F_CREATE should be set when creating new route [ 1117.516212][T23349] IPv6: NLM_F_CREATE should be set when creating new route [ 1117.524408][T23349] IPv6: NLM_F_CREATE should be set when creating new route [ 1118.757392][T23373] netlink: 'syz.3.6132': attribute type 21 has an invalid length. [ 1118.777101][T23375] netlink: 'syz.1.6129': attribute type 22 has an invalid length. [ 1118.790560][T23375] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6129'. [ 1119.067045][T23379] netlink: 'syz.3.6133': attribute type 10 has an invalid length. [ 1119.075749][T23379] netlink: 55 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1119.653429][T23398] netlink: 'syz.3.6141': attribute type 21 has an invalid length. [ 1120.006556][T23410] netlink: 'syz.3.6145': attribute type 21 has an invalid length. [ 1120.021566][T23410] IPv6: Can't replace route, no match found [ 1120.050833][T23405] netlink: 'syz.4.6143': attribute type 22 has an invalid length. [ 1120.113253][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6143'. [ 1120.503506][T23416] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6147'. [ 1120.513906][T23416] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1120.989806][T23423] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6150'. [ 1121.567026][T23427] aaaaaaaaaaaaaaa: entered promiscuous mode [ 1121.682518][T23433] validate_nla: 1 callbacks suppressed [ 1121.682588][T23433] netlink: 'syz.4.6153': attribute type 21 has an invalid length. [ 1122.163552][T23440] netlink: 'syz.4.6156': attribute type 22 has an invalid length. [ 1122.255563][T23440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6156'. [ 1123.340466][T23462] netlink: 'syz.1.6165': attribute type 10 has an invalid length. [ 1123.388971][T23462] netlink: 55 bytes leftover after parsing attributes in process `syz.1.6165'. [ 1123.731946][T23467] syzkaller0: entered promiscuous mode [ 1123.737800][T23467] syzkaller0: entered allmulticast mode [ 1127.299737][T23479] netlink: 'syz.4.6171': attribute type 22 has an invalid length. [ 1127.307858][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6171'. [ 1127.881075][T23499] netlink: 'syz.2.6178': attribute type 9 has an invalid length. [ 1127.889233][T23499] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6178'. [ 1129.018264][T23523] netlink: 'syz.1.6183': attribute type 22 has an invalid length. [ 1129.064687][T23523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6183'. [ 1129.313226][T23531] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1129.346258][T23532] FAULT_INJECTION: forcing a failure. [ 1129.346258][T23532] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.383429][T23532] CPU: 0 PID: 23532 Comm: syz.3.6188 Not tainted syzkaller #0 [ 1129.391071][T23532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1129.401521][T23532] Call Trace: [ 1129.404924][T23532] [ 1129.407886][T23532] dump_stack_lvl+0x18c/0x250 [ 1129.413048][T23532] ? show_regs_print_info+0x20/0x20 [ 1129.418307][T23532] ? load_image+0x420/0x420 [ 1129.422859][T23532] should_fail_ex+0x394/0x4c0 [ 1129.427586][T23532] should_failslab+0x9/0x20 [ 1129.432133][T23532] slab_pre_alloc_hook+0x59/0x300 [ 1129.437289][T23532] kmem_cache_alloc+0x5a/0x2c0 [ 1129.442190][T23532] ? skb_clone+0x1eb/0x370 [ 1129.446642][T23532] skb_clone+0x1eb/0x370 [ 1129.450923][T23532] __netlink_deliver_tap+0x411/0x7f0 [ 1129.456259][T23532] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.461841][T23532] netlink_deliver_tap+0x19c/0x1b0 [ 1129.466989][T23532] __netlink_sendskb+0x4b/0x90 [ 1129.471923][T23532] netlink_dump+0xab3/0xec0 [ 1129.476576][T23532] ? netlink_lookup+0x200/0x200 [ 1129.481496][T23532] ? netlink_lookup+0x30/0x200 [ 1129.486305][T23532] ? netlink_lookup+0x30/0x200 [ 1129.491197][T23532] __netlink_dump_start+0x57c/0x7a0 [ 1129.496546][T23532] rtnetlink_rcv_msg+0xe19/0xf90 [ 1129.501517][T23532] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1129.506946][T23532] ? rtnl_getlink+0xd20/0xd20 [ 1129.511773][T23532] ? rtnetlink_bind+0x80/0x80 [ 1129.516525][T23532] ? rtnl_getlink+0xd20/0xd20 [ 1129.521246][T23532] ? ref_tracker_free+0x686/0x830 [ 1129.526328][T23532] netlink_rcv_skb+0x235/0x4c0 [ 1129.531153][T23532] ? rtnetlink_bind+0x80/0x80 [ 1129.535873][T23532] ? netlink_ack+0x1160/0x1160 [ 1129.540780][T23532] ? __lock_acquire+0x7d80/0x7d80 [ 1129.545856][T23532] ? netlink_deliver_tap+0x2e/0x1b0 [ 1129.551197][T23532] netlink_unicast+0x7b1/0x930 [ 1129.556426][T23532] netlink_sendmsg+0x8d0/0xbf0 [ 1129.561602][T23532] ? netlink_getsockopt+0x590/0x590 [ 1129.566849][T23532] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1129.572720][T23532] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1129.578268][T23532] ? security_socket_sendmsg+0x80/0xa0 [ 1129.584172][T23532] ? netlink_getsockopt+0x590/0x590 [ 1129.589605][T23532] ____sys_sendmsg+0x61b/0x980 [ 1129.594520][T23532] ? __asan_memset+0x22/0x40 [ 1129.599264][T23532] ? __sys_sendmsg_sock+0x30/0x30 [ 1129.604421][T23532] ? __import_iovec+0x5f2/0x850 [ 1129.609314][T23532] ? import_iovec+0x73/0xa0 [ 1129.613870][T23532] ___sys_sendmsg+0x2a6/0x360 [ 1129.618608][T23532] ? get_pid_task+0x20/0x1e0 [ 1129.623327][T23532] ? __sys_sendmsg+0x2b0/0x2b0 [ 1129.628250][T23532] ? __lock_acquire+0x7d80/0x7d80 [ 1129.633360][T23532] __se_sys_sendmsg+0x1d0/0x2c0 [ 1129.638261][T23532] ? __x64_sys_sendmsg+0x80/0x80 [ 1129.643254][T23532] ? lockdep_hardirqs_on+0x98/0x150 [ 1129.648848][T23532] do_syscall_64+0x55/0xb0 [ 1129.653395][T23532] ? clear_bhb_loop+0x40/0x90 [ 1129.658113][T23532] ? clear_bhb_loop+0x40/0x90 [ 1129.662913][T23532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1129.669291][T23532] RIP: 0033:0x7f599019de59 [ 1129.673927][T23532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.694401][T23532] RSP: 002b:00007f5991058028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1129.703035][T23532] RAX: ffffffffffffffda RBX: 00007f5990425fa0 RCX: 00007f599019de59 [ 1129.711305][T23532] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1129.719508][T23532] RBP: 00007f5991058090 R08: 0000000000000000 R09: 0000000000000000 [ 1129.727521][T23532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1129.735645][T23532] R13: 00007f5990426038 R14: 00007f5990425fa0 R15: 00007ffd34780b48 [ 1129.743781][T23532] [ 1129.898734][T23531] netlink: 'syz.2.6187': attribute type 10 has an invalid length. [ 1130.076743][T23531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.137105][T23531] bridge_slave_1: left allmulticast mode [ 1130.192240][T23531] bridge_slave_1: left promiscuous mode [ 1130.352134][T23531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1130.834126][T23531] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1130.870601][T23533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6187'. [ 1131.079483][T23560] netlink: 'syz.4.6196': attribute type 21 has an invalid length. [ 1131.722969][ T5083] Bluetooth: hci1: ISO packet for unknown connection handle 2366 [ 1131.762000][T23582] netlink: 'syz.3.6200': attribute type 22 has an invalid length. [ 1131.779617][T23582] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6200'. [ 1133.098178][T23607] ipvlan1: entered promiscuous mode [ 1133.178026][T23607] ipvlan1: entered allmulticast mode [ 1133.216326][T23607] veth0_vlan: entered allmulticast mode [ 1133.490806][T23612] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1133.498103][T23612] IPv6: NLM_F_CREATE should be set when creating new route [ 1133.669828][T23617] netlink: 'syz.1.6217': attribute type 21 has an invalid length. [ 1133.721589][T23617] IPv6: Can't replace route, no match found [ 1133.782333][T23607] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6213'. [ 1133.966577][T23618] netlink: 'syz.3.6216': attribute type 22 has an invalid length. [ 1134.011400][T23618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6216'. [ 1135.643194][T23655] netlink: 'syz.3.6229': attribute type 3 has an invalid length. [ 1135.679892][T23655] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6229'. [ 1136.031351][T23664] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1136.139996][T23665] netlink: 'syz.4.6232': attribute type 22 has an invalid length. [ 1136.160032][T23665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6232'. [ 1136.211487][T23664] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6231'. [ 1138.332401][T23697] netlink: 'syz.4.6243': attribute type 1 has an invalid length. [ 1138.391323][T23697] netlink: 112860 bytes leftover after parsing attributes in process `syz.4.6243'. [ 1138.705169][T23709] netlink: 'syz.1.6246': attribute type 22 has an invalid length. [ 1138.739204][T23709] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1139.055810][T23718] ipvlan1: entered promiscuous mode [ 1139.138908][T23718] ipvlan1: entered allmulticast mode [ 1139.172176][T23718] veth0_vlan: entered allmulticast mode [ 1139.743321][T23720] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1139.750689][T23720] IPv6: NLM_F_CREATE should be set when creating new route [ 1139.758126][T23720] IPv6: NLM_F_CREATE should be set when creating new route [ 1139.765853][T23720] IPv6: NLM_F_CREATE should be set when creating new route [ 1140.110864][T23716] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1140.131229][T23725] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6248'. [ 1140.794353][T23751] netlink: 'syz.3.6261': attribute type 21 has an invalid length. [ 1140.815592][T23751] IPv6: Can't replace route, no match found [ 1140.908039][T23746] netlink: 'syz.1.6259': attribute type 22 has an invalid length. [ 1140.939552][T23746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6259'. [ 1141.839487][T23764] netlink: 'syz.1.6267': attribute type 10 has an invalid length. [ 1141.847772][T23764] netlink: 'syz.1.6267': attribute type 19 has an invalid length. [ 1141.855915][T23764] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.6267'. [ 1143.266723][T23784] netlink: 'syz.3.6272': attribute type 22 has an invalid length. [ 1143.291569][T23784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6272'. [ 1143.868111][ T5083] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1144.132091][T23803] -1: renamed from syzkaller0 [ 1144.726210][T23815] netlink: 'syz.2.6285': attribute type 22 has an invalid length. [ 1144.755731][T23815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6285'. [ 1145.421579][T23830] netlink: 'syz.3.6292': attribute type 21 has an invalid length. [ 1145.467461][T23830] IPv6: Can't replace route, no match found [ 1145.771092][T23837] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.6295'. [ 1145.930891][ T5083] Bluetooth: hci4: command 0x0406 tx timeout [ 1146.185386][T23850] netlink: 'syz.3.6299': attribute type 21 has an invalid length. [ 1146.207101][T23850] IPv6: Can't replace route, no match found [ 1146.220208][T23846] netlink: 'syz.1.6300': attribute type 22 has an invalid length. [ 1146.239376][T23846] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6300'. [ 1147.752578][T23880] netlink: 'syz.2.6312': attribute type 21 has an invalid length. [ 1147.767001][T23880] netlink: 'syz.2.6312': attribute type 6 has an invalid length. [ 1147.784267][T23880] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6312'. [ 1147.952377][T23883] netlink: 'syz.3.6310': attribute type 22 has an invalid length. [ 1147.979827][T23883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6310'. [ 1148.116535][T23886] netlink: 'syz.4.6313': attribute type 21 has an invalid length. [ 1148.189323][T23888] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1148.801446][T23901] netlink: 'syz.3.6318': attribute type 3 has an invalid length. [ 1148.944634][T23901] netlink: 'syz.3.6318': attribute type 5 has an invalid length. [ 1149.680213][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6322'. [ 1150.525415][T23939] validate_nla: 2 callbacks suppressed [ 1150.525590][T23939] netlink: 'syz.2.6334': attribute type 4 has an invalid length. [ 1150.570097][T23939] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6334'. [ 1150.594178][T23941] netlink: 'syz.1.6333': attribute type 21 has an invalid length. [ 1150.642100][T23941] IPv6: Can't replace route, no match found [ 1151.098679][T23951] netlink: 'syz.2.6338': attribute type 21 has an invalid length. [ 1151.696776][T23964] netlink: 'syz.2.6344': attribute type 21 has an invalid length. [ 1151.735058][T23964] IPv6: Can't replace route, no match found [ 1152.552510][T23976] netlink: 'syz.3.6349': attribute type 21 has an invalid length. [ 1152.816594][T23982] netlink: 'syz.3.6352': attribute type 6 has an invalid length. [ 1152.841014][T23982] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6352'. [ 1153.009522][T23985] netlink: 'syz.1.6353': attribute type 21 has an invalid length. [ 1153.052420][T23985] IPv6: Can't replace route, no match found [ 1153.191463][T23985] netlink: 'syz.1.6353': attribute type 10 has an invalid length. [ 1153.263495][T23985] team0: Device wg1 is of different type [ 1153.434604][T24000] netlink: 'syz.3.6358': attribute type 10 has an invalid length. [ 1153.485067][T24000] netlink: 'syz.3.6358': attribute type 10 has an invalid length. [ 1154.238700][T24011] syzkaller0: entered promiscuous mode [ 1154.250150][T24021] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.6365'. [ 1154.267325][T24011] syzkaller0: entered allmulticast mode [ 1158.103405][T24031] validate_nla: 15 callbacks suppressed [ 1158.103424][T24031] netlink: 'syz.1.6369': attribute type 21 has an invalid length. [ 1158.140691][T24031] IPv6: Can't replace route, no match found [ 1158.146842][T24035] netlink: 'syz.1.6369': attribute type 10 has an invalid length. [ 1158.168358][T24035] team0: Device wg1 is of different type [ 1158.290347][T24042] netlink: 'syz.3.6372': attribute type 21 has an invalid length. [ 1159.111847][T24057] netlink: 'syz.3.6378': attribute type 22 has an invalid length. [ 1159.120220][T24057] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6378'. [ 1159.798010][T24066] netlink: 'syz.2.6382': attribute type 21 has an invalid length. [ 1160.760758][T24100] netlink: 'syz.4.6395': attribute type 21 has an invalid length. [ 1160.841879][T24099] netlink: 'syz.3.6396': attribute type 21 has an invalid length. [ 1160.892237][T24099] IPv6: Can't replace route, no match found [ 1160.948729][T24101] netlink: 'syz.1.6393': attribute type 22 has an invalid length. [ 1161.078003][T24101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6393'. [ 1163.081708][T24132] netlink: 'syz.2.6405': attribute type 21 has an invalid length. [ 1163.482304][T24139] netlink: 'syz.2.6409': attribute type 22 has an invalid length. [ 1163.566033][T24139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6409'. [ 1164.602379][T24163] netlink: 'syz.2.6418': attribute type 21 has an invalid length. [ 1164.707663][T24167] netlink: 'syz.3.6421': attribute type 21 has an invalid length. [ 1164.743170][T24167] IPv6: Can't replace route, no match found [ 1167.445618][T24186] netlink: 'syz.2.6424': attribute type 22 has an invalid length. [ 1167.454550][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6424'. [ 1167.709603][T24197] netlink: 'syz.4.6430': attribute type 21 has an invalid length. [ 1167.947326][T24207] netlink: 'syz.4.6434': attribute type 5 has an invalid length. [ 1168.115293][T24215] netlink: 'syz.2.6436': attribute type 2 has an invalid length. [ 1168.126984][T24215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1168.273321][T24221] netlink: 'syz.3.6437': attribute type 22 has an invalid length. [ 1168.331600][T24221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6437'. [ 1168.617622][T24230] netlink: 'syz.1.6442': attribute type 21 has an invalid length. [ 1168.759646][T24234] netlink: 'syz.2.6444': attribute type 3 has an invalid length. [ 1168.789263][T24234] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1168.979969][T24242] netlink: 144 bytes leftover after parsing attributes in process `syz.3.6447'. [ 1169.116763][T24242] team0: Port device team_slave_0 removed [ 1169.142196][T24242] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1169.541905][T24262] netlink: 'syz.1.6453': attribute type 21 has an invalid length. [ 1169.705346][T24263] netlink: 'syz.3.6451': attribute type 22 has an invalid length. [ 1169.757422][T24263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1169.802020][T24265] netlink: 'syz.2.6454': attribute type 21 has an invalid length. [ 1169.821666][T24265] IPv6: Can't replace route, no match found [ 1170.662306][T24295] netlink: 'syz.3.6465': attribute type 21 has an invalid length. [ 1171.943216][T24322] netlink: 'syz.1.6471': attribute type 22 has an invalid length. [ 1171.962261][T24322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6471'. [ 1172.354062][T24332] netlink: 'syz.2.6479': attribute type 21 has an invalid length. [ 1172.677262][T24340] netlink: 'syz.2.6482': attribute type 29 has an invalid length. [ 1172.698107][T24340] netlink: 'syz.2.6482': attribute type 29 has an invalid length. [ 1176.596778][T24382] netlink: 'syz.3.6497': attribute type 21 has an invalid length. [ 1176.608331][T24382] IPv6: Can't replace route, no match found [ 1177.002471][T24401] netlink: 'syz.4.6501': attribute type 21 has an invalid length. [ 1177.129334][T24403] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.6503'. [ 1177.875266][T24430] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1178.283925][T24438] netlink: 'syz.3.6513': attribute type 21 has an invalid length. [ 1178.435507][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1178.442464][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.026669][T24453] netlink: 'syz.3.6517': attribute type 22 has an invalid length. [ 1179.077066][T24453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6517'. [ 1179.599375][T24476] netlink: 'syz.2.6525': attribute type 21 has an invalid length. [ 1180.215150][T24503] netlink: 'syz.4.6534': attribute type 21 has an invalid length. [ 1180.225036][T24503] IPv6: Can't replace route, no match found [ 1180.443988][T24510] netlink: 'syz.1.6537': attribute type 21 has an invalid length. [ 1180.474060][T24513] netlink: 'syz.2.6535': attribute type 22 has an invalid length. [ 1180.509907][T24513] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6535'. [ 1180.860114][T24522] netlink: 'syz.3.6541': attribute type 1 has an invalid length. [ 1180.918772][T24522] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6541'. [ 1180.963019][T24523] netlink: 'syz.3.6541': attribute type 1 has an invalid length. [ 1181.069972][T24523] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.6541'. [ 1181.414354][T24532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1181.440655][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1181.460412][T24532] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1181.481767][T24532] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1181.501195][T24532] netlink: 33 bytes leftover after parsing attributes in process `syz.2.6546'. [ 1182.306238][T24546] netlink: 'syz.2.6549': attribute type 21 has an invalid length. [ 1182.353714][T24546] IPv6: Can't replace route, no match found [ 1183.076098][T24563] netlink: 'syz.1.6554': attribute type 22 has an invalid length. [ 1183.110098][T24563] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6554'. [ 1185.083365][T24573] netlink: 'syz.2.6559': attribute type 21 has an invalid length. [ 1185.456261][T24581] netlink: 'syz.2.6562': attribute type 1 has an invalid length. [ 1185.476234][T24581] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.6562'. [ 1185.551829][T24581] netlink: 'syz.2.6562': attribute type 10 has an invalid length. [ 1185.613555][T24581] team0: Device vxcan1 is of different type [ 1185.901826][T24587] netlink: 'syz.4.6564': attribute type 22 has an invalid length. [ 1185.910291][T24587] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6564'. [ 1186.082495][T24593] netlink: 'syz.2.6565': attribute type 12 has an invalid length. [ 1186.101180][T24593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6565'. [ 1186.404779][T24602] netlink: 'syz.2.6570': attribute type 21 has an invalid length. [ 1187.070973][T24612] netlink: 'syz.2.6575': attribute type 22 has an invalid length. [ 1187.079713][T24612] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6575'. [ 1188.441651][T24641] netlink: 'syz.4.6583': attribute type 21 has an invalid length. [ 1189.257080][T24654] netlink: 'syz.4.6587': attribute type 22 has an invalid length. [ 1189.302322][T24654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6587'. [ 1189.754839][T24672] netlink: 'syz.2.6595': attribute type 21 has an invalid length. [ 1190.486731][T24691] netlink: 'syz.1.6602': attribute type 21 has an invalid length. [ 1190.512262][T24691] IPv6: Can't replace route, no match found [ 1190.563975][T24697] netlink: 'syz.4.6606': attribute type 21 has an invalid length. [ 1192.045584][T24728] netlink: 'syz.4.6619': attribute type 21 has an invalid length. [ 1192.310097][T24734] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6617'. [ 1193.265998][T24755] netlink: 'syz.4.6631': attribute type 21 has an invalid length. [ 1193.456476][T24764] netlink: 'syz.4.6635': attribute type 21 has an invalid length. [ 1193.481744][T24764] IPv6: Can't replace route, no match found [ 1197.515073][T24781] netlink: 'syz.1.6643': attribute type 21 has an invalid length. [ 1198.114586][T24809] netlink: 'syz.1.6654': attribute type 21 has an invalid length. [ 1198.399301][T24818] netlink: 'syz.1.6657': attribute type 1 has an invalid length. [ 1198.420059][T24818] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6657'. [ 1199.138431][T24834] netlink: 'syz.1.6665': attribute type 21 has an invalid length. [ 1199.847542][T24853] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.6673'. [ 1200.113641][T24861] netlink: 'syz.3.6676': attribute type 21 has an invalid length. [ 1200.281539][T24863] netlink: 'syz.4.6677': attribute type 21 has an invalid length. [ 1200.308584][T24863] IPv6: Can't replace route, no match found [ 1200.749258][T24871] netlink: 'syz.4.6681': attribute type 3 has an invalid length. [ 1200.768391][T24871] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6681'. [ 1201.015027][T24882] netlink: 'syz.4.6686': attribute type 21 has an invalid length. [ 1202.291955][T24911] netlink: 'syz.4.6699': attribute type 21 has an invalid length. [ 1203.923240][T24943] netlink: 'syz.1.6710': attribute type 21 has an invalid length. [ 1208.498869][T24969] netlink: 'syz.1.6716': attribute type 21 has an invalid length. [ 1208.507147][T24969] IPv6: Can't replace route, no match found [ 1208.829054][T24982] netlink: 'syz.4.6721': attribute type 21 has an invalid length. [ 1209.913686][T25007] netlink: 'syz.1.6731': attribute type 21 has an invalid length. [ 1213.764990][T25030] netlink: 'syz.2.6741': attribute type 21 has an invalid length. [ 1213.919198][T25039] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6744'. [ 1215.084761][T25066] netlink: 'syz.3.6753': attribute type 21 has an invalid length. [ 1215.485163][T25074] netlink: 'syz.4.6755': attribute type 1 has an invalid length. [ 1216.297800][T25099] netlink: 'syz.1.6764': attribute type 21 has an invalid length. [ 1217.488253][T25128] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1217.518846][T25128] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1217.541824][T25128] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6776'. [ 1217.565391][T25130] netlink: 'syz.2.6777': attribute type 21 has an invalid length. [ 1217.644526][T25121] netlink: 'syz.1.6773': attribute type 22 has an invalid length. [ 1217.689522][T25121] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6773'. [ 1218.467732][T25154] netlink: 'syz.3.6787': attribute type 21 has an invalid length. [ 1219.328374][T25184] netlink: 'syz.2.6798': attribute type 21 has an invalid length. [ 1219.395279][T25171] netlink: 'syz.3.6792': attribute type 22 has an invalid length. [ 1219.451667][T25171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6792'. [ 1219.558947][T25188] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.6800'. [ 1220.908068][T25208] netlink: 'syz.3.6806': attribute type 21 has an invalid length. [ 1220.920910][T25208] IPv6: Can't replace route, no match found [ 1221.284525][T25216] netlink: 'syz.3.6809': attribute type 21 has an invalid length. [ 1221.646031][T25220] netlink: 'syz.1.6811': attribute type 22 has an invalid length. [ 1221.670616][T25220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6811'. [ 1223.128409][T25244] netlink: 'syz.3.6821': attribute type 21 has an invalid length. [ 1223.710373][T25255] netlink: 'syz.3.6825': attribute type 22 has an invalid length. [ 1223.718967][T25255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6825'. [ 1225.748188][T25296] netlink: 'syz.4.6841': attribute type 22 has an invalid length. [ 1225.809237][T25296] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1225.918298][ T5083] Bluetooth: hci0: unexpected event 0x1c length: 15 > 5 [ 1227.961106][T25339] netlink: 'syz.2.6858': attribute type 22 has an invalid length. [ 1228.000737][T25339] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6858'. [ 1228.162047][T25352] netlink: 'syz.3.6862': attribute type 2 has an invalid length. [ 1228.170205][T25352] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.6862'. [ 1229.195662][T25368] netlink: 'syz.3.6870': attribute type 21 has an invalid length. [ 1229.226716][T25368] IPv6: Can't replace route, no match found [ 1229.628523][T25384] netlink: 'syz.3.6876': attribute type 22 has an invalid length. [ 1229.694534][T25384] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6876'. [ 1231.094845][T25400] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6882'. [ 1231.158104][T25400] netlink: 'syz.1.6882': attribute type 1 has an invalid length. [ 1231.193491][T25400] netlink: 6 bytes leftover after parsing attributes in process `syz.1.6882'. [ 1231.895551][T25418] netlink: 'syz.2.6890': attribute type 21 has an invalid length. [ 1231.987435][T25414] netlink: 'syz.4.6887': attribute type 22 has an invalid length. [ 1232.017057][T25414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1233.394025][T25444] netlink: 'syz.1.6899': attribute type 21 has an invalid length. [ 1233.414174][T25444] IPv6: Can't replace route, no match found [ 1233.753271][ T5083] Bluetooth: hci1: unexpected event 0x1c length: 15 > 5 [ 1233.835683][T25454] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.6903'. [ 1235.343752][T25481] netlink: 'syz.2.6913': attribute type 22 has an invalid length. [ 1235.399131][T25481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6913'. [ 1236.296283][T25509] netlink: 'syz.1.6918': attribute type 1 has an invalid length. [ 1236.453151][T25509] netlink: 'syz.1.6918': attribute type 2 has an invalid length. [ 1236.532850][T25509] netlink: 'syz.1.6918': attribute type 2 has an invalid length. [ 1236.605868][T25509] netlink: 'syz.1.6918': attribute type 3 has an invalid length. [ 1236.690188][T25509] netlink: 'syz.1.6918': attribute type 4 has an invalid length. [ 1236.807694][T25509] netlink: 'syz.1.6918': attribute type 5 has an invalid length. [ 1236.829415][T25509] netlink: 'syz.1.6918': attribute type 6 has an invalid length. [ 1236.901765][T25509] netlink: 'syz.1.6918': attribute type 7 has an invalid length. [ 1236.992698][T25509] netlink: 'syz.1.6918': attribute type 9 has an invalid length. [ 1237.012817][T25509] netlink: 'syz.1.6918': attribute type 10 has an invalid length. [ 1237.054953][T25509] netlink: 126304 bytes leftover after parsing attributes in process `syz.1.6918'. [ 1237.240389][T25521] IPv6: Can't replace route, no match found [ 1238.525813][T25559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6943'. [ 1239.003644][T25576] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6950'. [ 1239.175660][T25582] delete_channel: no stack [ 1239.209448][T25582] delete_channel: no stack [ 1239.406573][T25580] geneve0: entered promiscuous mode [ 1239.441695][T25580] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 1239.863436][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.869871][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.557245][T25610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6960'. [ 1241.057557][T25616] syzkaller0: entered promiscuous mode [ 1241.063238][T25616] syzkaller0: entered allmulticast mode [ 1242.760276][T25647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6975'. [ 1245.334838][T25647] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6975'. [ 1246.089394][T25684] validate_nla: 15 callbacks suppressed [ 1246.089440][T25684] netlink: 'syz.3.6987': attribute type 22 has an invalid length. [ 1246.195354][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6987'. [ 1246.352967][T25686] netlink: 'syz.1.6988': attribute type 22 has an invalid length. [ 1246.430094][T25686] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6988'. [ 1246.493208][T25685] netlink: 'syz.4.6989': attribute type 21 has an invalid length. [ 1247.192057][T25707] netlink: 'syz.3.6997': attribute type 21 has an invalid length. [ 1247.227477][T25707] IPv6: Can't replace route, no match found [ 1247.366799][T25711] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.6998'. [ 1247.440891][T25710] netlink: 14593 bytes leftover after parsing attributes in process `syz.1.6998'. [ 1247.848147][T25722] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1247.859617][T25722] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1247.872884][T25722] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1247.886180][T25722] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1247.896348][T25722] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1247.904315][T25722] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1247.922458][T18884] team0: Port device syz_tun removed [ 1249.009389][T25733] netlink: 'syz.1.7001': attribute type 21 has an invalid length. [ 1249.025226][T25736] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7003'. [ 1249.125289][T24484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.296750][T24484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.429125][T24484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.476416][T25747] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7007'. [ 1249.563252][T24484] bond0: (slave netdevsim0): Releasing backup interface [ 1249.575483][T24484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1249.858899][T25718] chnl_net:caif_netlink_parms(): no params data found [ 1250.011058][ T5083] Bluetooth: hci3: command tx timeout [ 1250.493600][T25718] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.532050][T25718] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.539899][T25718] bridge_slave_0: entered allmulticast mode [ 1250.628118][T25718] bridge_slave_0: entered promiscuous mode [ 1250.681975][T25718] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.689296][T25718] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.738813][T25718] bridge_slave_1: entered allmulticast mode [ 1250.794258][T25718] bridge_slave_1: entered promiscuous mode [ 1251.135256][T25718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1251.184369][T25718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1251.562523][T25718] team0: Port device team_slave_0 added [ 1251.589447][T25718] team0: Port device team_slave_1 added [ 1251.622517][T25792] netlink: 763 bytes leftover after parsing attributes in process `syz.3.7019'. [ 1251.975634][T25718] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1252.000592][T25718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.036766][T25718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1252.090790][ T5083] Bluetooth: hci3: command tx timeout [ 1252.104870][T25718] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1252.115686][T25718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1252.143548][T25718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1252.163029][T25803] netlink: 'syz.4.7022': attribute type 21 has an invalid length. [ 1252.173222][T25803] IPv6: Can't replace route, no match found [ 1252.236691][T25803] netlink: 'syz.4.7022': attribute type 10 has an invalid length. [ 1252.362455][T25718] hsr_slave_0: entered promiscuous mode [ 1252.369514][T25718] hsr_slave_1: entered promiscuous mode [ 1252.377701][T25718] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1252.387415][T25718] Cannot create hsr debugfs directory [ 1252.734524][T24484] [ 1252.736948][T24484] ====================================================== [ 1252.744980][T24484] WARNING: possible circular locking dependency detected [ 1252.753384][T24484] syzkaller #0 Not tainted [ 1252.757951][T24484] ------------------------------------------------------ [ 1252.765196][T24484] kworker/u4:2/24484 is trying to acquire lock: [ 1252.771621][T24484] ffff888024854d80 (team->team_lock_key#10){+.+.}-{3:3}, at: team_del_slave+0x31/0x1b0 [ 1252.781559][T24484] [ 1252.781559][T24484] but task is already holding lock: [ 1252.789141][T24484] ffff8880427c8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1252.799782][T24484] [ 1252.799782][T24484] which lock already depends on the new lock. [ 1252.799782][T24484] [ 1252.810318][T24484] [ 1252.810318][T24484] the existing dependency chain (in reverse order) is: [ 1252.819545][T24484] [ 1252.819545][T24484] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 1252.827330][T24484] __mutex_lock+0x135/0xc80 [ 1252.832420][T24484] ieee80211_open+0x144/0x200 [ 1252.837751][T24484] __dev_open+0x2cb/0x430 [ 1252.842909][T24484] dev_open+0xab/0x190 [ 1252.847534][T24484] team_add_slave+0x709/0x2880 [ 1252.852933][T24484] do_setlink+0xcde/0x3f40 [ 1252.857917][T24484] rtnl_newlink+0x1848/0x2170 [ 1252.863150][T24484] rtnetlink_rcv_msg+0x843/0xf90 [ 1252.868810][T24484] netlink_rcv_skb+0x235/0x4c0 [ 1252.874308][T24484] netlink_unicast+0x7b1/0x930 [ 1252.879620][T24484] netlink_sendmsg+0x8d0/0xbf0 [ 1252.885045][T24484] ____sys_sendmsg+0x61b/0x980 [ 1252.890390][T24484] ___sys_sendmsg+0x2a6/0x360 [ 1252.895624][T24484] __se_sys_sendmsg+0x1d0/0x2c0 [ 1252.901119][T24484] do_syscall_64+0x55/0xb0 [ 1252.906716][T24484] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1252.913293][T24484] [ 1252.913293][T24484] -> #0 (team->team_lock_key#10){+.+.}-{3:3}: [ 1252.921600][T24484] __lock_acquire+0x37ef/0x7d80 [ 1252.927202][T24484] lock_acquire+0x19e/0x420 [ 1252.932262][T24484] __mutex_lock+0x135/0xc80 [ 1252.937756][T24484] team_del_slave+0x31/0x1b0 [ 1252.943084][T24484] team_device_event+0x297/0xa30 [ 1252.949153][T24484] notifier_call_chain+0x18f/0x380 [ 1252.954851][T24484] unregister_netdevice_many_notify+0x1037/0x1910 [ 1252.961951][T24484] unregister_netdevice_queue+0x2e9/0x330 [ 1252.968483][T24484] _cfg80211_unregister_wdev+0x16d/0x580 [ 1252.974733][T24484] ieee80211_remove_interfaces+0x4b3/0x690 [ 1252.981528][T24484] ieee80211_unregister_hw+0x5d/0x2a0 [ 1252.987443][T24484] mac80211_hwsim_del_radio+0x289/0x480 [ 1252.993574][T24484] hwsim_exit_net+0x58d/0x650 [ 1252.999069][T24484] cleanup_net+0x707/0xbb0 [ 1253.004218][T24484] process_scheduled_works+0xa60/0x1600 [ 1253.010491][T24484] worker_thread+0xa5e/0xfe0 [ 1253.015630][T24484] kthread+0x2fa/0x390 [ 1253.020252][T24484] ret_from_fork+0x48/0x80 [ 1253.025569][T24484] ret_from_fork_asm+0x11/0x20 [ 1253.030942][T24484] [ 1253.030942][T24484] other info that might help us debug this: [ 1253.030942][T24484] [ 1253.041469][T24484] Possible unsafe locking scenario: [ 1253.041469][T24484] [ 1253.049024][T24484] CPU0 CPU1 [ 1253.054423][T24484] ---- ---- [ 1253.059980][T24484] lock(&rdev->wiphy.mtx); [ 1253.064600][T24484] lock(team->team_lock_key#10); [ 1253.072613][T24484] lock(&rdev->wiphy.mtx); [ 1253.079944][T24484] lock(team->team_lock_key#10); [ 1253.085021][T24484] [ 1253.085021][T24484] *** DEADLOCK *** [ 1253.085021][T24484] [ 1253.093271][T24484] 5 locks held by kworker/u4:2/24484: [ 1253.098671][T24484] #0: ffff88801a25c938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1253.109813][T24484] #1: ffffc9000b5bfd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x975/0x1600 [ 1253.120505][T24484] #2: ffffffff8e3c8b10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 1253.129983][T24484] #3: ffffffff8e3d5b08 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 1253.140179][T24484] #4: ffff8880427c8768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x2bd/0x690 [ 1253.151425][T24484] [ 1253.151425][T24484] stack backtrace: [ 1253.157431][T24484] CPU: 1 PID: 24484 Comm: kworker/u4:2 Not tainted syzkaller #0 [ 1253.165178][T24484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1253.175761][T24484] Workqueue: netns cleanup_net [ 1253.180655][T24484] Call Trace: [ 1253.184074][T24484] [ 1253.187033][T24484] dump_stack_lvl+0x18c/0x250 [ 1253.192011][T24484] ? load_image+0x420/0x420 [ 1253.196655][T24484] ? show_regs_print_info+0x20/0x20 [ 1253.202091][T24484] ? print_circular_bug+0x12b/0x1a0 [ 1253.207585][T24484] check_noncircular+0x2fc/0x400 [ 1253.212564][T24484] ? print_deadlock_bug+0x5d0/0x5d0 [ 1253.217788][T24484] ? lockdep_lock+0xf5/0x230 [ 1253.222589][T24484] ? _find_first_zero_bit+0xd6/0x100 [ 1253.227911][T24484] __lock_acquire+0x37ef/0x7d80 [ 1253.233072][T24484] ? verify_lock_unused+0x140/0x140 [ 1253.238395][T24484] ? verify_lock_unused+0x140/0x140 [ 1253.243813][T24484] ? __up_read+0x2b8/0x6b0 [ 1253.248295][T24484] lock_acquire+0x19e/0x420 [ 1253.253133][T24484] ? team_del_slave+0x31/0x1b0 [ 1253.258020][T24484] ? __might_sleep+0xe0/0xe0 [ 1253.262874][T24484] ? read_lock_is_recursive+0x20/0x20 [ 1253.268456][T24484] __mutex_lock+0x135/0xc80 [ 1253.273073][T24484] ? team_del_slave+0x31/0x1b0 [ 1253.277877][T24484] ? __mutex_lock+0x30d/0xc80 [ 1253.282687][T24484] ? team_del_slave+0x31/0x1b0 [ 1253.287488][T24484] ? mutex_lock_nested+0x20/0x20 [ 1253.292720][T24484] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 1253.298584][T24484] team_del_slave+0x31/0x1b0 [ 1253.303215][T24484] team_device_event+0x297/0xa30 [ 1253.308275][T24484] notifier_call_chain+0x18f/0x380 [ 1253.313521][T24484] unregister_netdevice_many_notify+0x1037/0x1910 [ 1253.320062][T24484] ? unregister_netdevice_many+0x20/0x20 [ 1253.325767][T24484] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1253.331628][T24484] ? __lock_acquire+0x7d80/0x7d80 [ 1253.336724][T24484] unregister_netdevice_queue+0x2e9/0x330 [ 1253.342534][T24484] ? list_netdevice+0x730/0x730 [ 1253.347424][T24484] ? kernfs_remove_by_name_ns+0x117/0x150 [ 1253.353374][T24484] _cfg80211_unregister_wdev+0x16d/0x580 [ 1253.359056][T24484] ieee80211_remove_interfaces+0x4b3/0x690 [ 1253.364997][T24484] ? ieee80211_do_stop+0x1df0/0x1df0 [ 1253.370496][T24484] ? rcu_is_watching+0x15/0xb0 [ 1253.375401][T24484] ieee80211_unregister_hw+0x5d/0x2a0 [ 1253.380919][T24484] mac80211_hwsim_del_radio+0x289/0x480 [ 1253.386507][T24484] ? rhashtable_remove_fast+0xc00/0xc00 [ 1253.392191][T24484] hwsim_exit_net+0x58d/0x650 [ 1253.396903][T24484] ? hwsim_init_net+0x90/0x90 [ 1253.401619][T24484] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 1253.407502][T24484] cleanup_net+0x707/0xbb0 [ 1253.412045][T24484] ? ops_free_list+0x3b0/0x3b0 [ 1253.416955][T24484] ? _raw_spin_unlock_irq+0x23/0x50 [ 1253.422272][T24484] ? process_scheduled_works+0x975/0x1600 [ 1253.428112][T24484] ? process_scheduled_works+0x975/0x1600 [ 1253.433863][T24484] process_scheduled_works+0xa60/0x1600 [ 1253.439505][T24484] ? worker_attach_to_pool+0x370/0x370 [ 1253.445019][T24484] ? assign_work+0x3cc/0x5d0 [ 1253.449822][T24484] worker_thread+0xa5e/0xfe0 [ 1253.454675][T24484] kthread+0x2fa/0x390 [ 1253.458966][T24484] ? pr_cont_work+0x550/0x550 [ 1253.463675][T24484] ? kthread_blkcg+0xd0/0xd0 [ 1253.468383][T24484] ret_from_fork+0x48/0x80 [ 1253.472833][T24484] ? kthread_blkcg+0xd0/0xd0 [ 1253.477454][T24484] ret_from_fork_asm+0x11/0x20 [ 1253.482300][T24484] [ 1253.499098][T24484] team0: Port device wlan1 removed [ 1253.634599][T24484] hsr_slave_0: left promiscuous mode [ 1253.643031][T24484] hsr_slave_1: left promiscuous mode [ 1253.649409][T24484] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1253.657477][T24484] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1253.666163][T24484] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1253.678334][T24484] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1253.686607][T24484] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 1253.694886][T24484] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 1253.703466][T24484] bridge_slave_0: left promiscuous mode [ 1253.709431][T24484] bridge0: port 1(bridge_slave_0) entered disabled state [ 1253.736612][T24484] veth1_macvtap: left promiscuous mode [ 1253.742428][T24484] veth0_macvtap: left promiscuous mode [ 1253.749015][T24484] veth1_vlan: left promiscuous mode [ 1253.754874][T24484] veth0_vlan: left promiscuous mode [ 1253.979580][T24484] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1254.170565][ T5083] Bluetooth: hci3: command tx timeout [ 1254.225031][T24484] team0 (unregistering): Port device team_slave_1 removed [ 1254.277798][T24484] team0 (unregistering): Port device team_slave_0 removed [ 1254.330693][T24484] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1254.385137][T24484] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1254.439299][T24484] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1254.678803][T24484] bond0 (unregistering): Released all slaves [ 1254.928634][T25718] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1254.956160][T25718] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1254.986215][T25718] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1255.006137][T25718] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1255.246762][T25718] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1255.279990][T25718] 8021q: adding VLAN 0 to HW filter on device team0 [ 1255.304018][T24482] bridge0: port 1(bridge_slave_0) entered blocking state [ 1255.311240][T24482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1255.325329][T24482] bridge0: port 2(bridge_slave_1) entered blocking state [ 1255.332761][T24482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1255.379856][T25718] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1255.397942][T25718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1255.604092][T25718] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1255.662981][T25718] veth0_vlan: entered promiscuous mode [ 1255.678030][T25718] veth1_vlan: entered promiscuous mode [ 1255.717945][T25718] veth0_macvtap: entered promiscuous mode [ 1255.729119][T25718] veth1_macvtap: entered promiscuous mode [ 1255.754310][T25718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.766678][T25718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.778241][T25718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1255.789474][T25718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.802675][T25718] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1255.819441][T25718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.832057][T25718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.843412][T25718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.856941][T25718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.867114][T25718] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1255.883425][T25718] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1255.895280][T25718] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1255.911373][T25718] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.920440][T25718] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.933072][T25718] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.943354][T25718] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1255.998397][T25718] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht' [ 1256.029952][T24486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.036280][T25718] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht' [ 1256.046882][T24486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.081807][T24486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1256.089821][T24486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1256.250747][ T5083] Bluetooth: hci3: command tx timeout