last executing test programs: 34m19.932625247s ago: executing program 1 (id=10634): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x80}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m19.527362369s ago: executing program 1 (id=10642): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)}, 0x9cdc2384056b48b8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="1c00000000000300000000000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 34m19.39120209s ago: executing program 1 (id=10645): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x9, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x881) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000008c0)=""/188, 0xbc, 0x0, &(0x7f0000001b00)=""/4096, 0x1000}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000ecf800000000000000000001bfb631692d044780cb29f03e884f3c2a85833bf8497b85a6dff271244a15161fd838782a56c83ea698455c788cc6b774575dddaeb24833a12f61e7b8c6358205abe5ad3f69f6fea440a59e316e43274af8174eff183b931679", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/21], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/102, 0x66, 0x0, &(0x7f0000000240)=""/248, 0xf8}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) socket$kcm(0x25, 0x1, 0x0) 34m18.721554404s ago: executing program 1 (id=10648): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x9, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x881) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e0000000000000007004000"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000008c0)=""/188, 0xbc, 0x0, &(0x7f0000001b00)=""/4096, 0x1000}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000ecf800000000000000000001bfb631692d044780cb29f03e884f3c2a85833bf8497b85a6dff271244a15161fd838782a56c83ea698455c788cc6b774575dddaeb24833a12f61e7b8c6358205abe5ad3f69f6fea440a59e316e43274af8174eff183b931679", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/21], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/102, 0x66, 0x0, &(0x7f0000000240)=""/248, 0xf8}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) socket$kcm(0x25, 0x1, 0x0) 34m18.560716324s ago: executing program 1 (id=10650): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10100) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) 34m18.375800955s ago: executing program 32 (id=10650): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x10100) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x5452, &(0x7f00000006c0)='\x02;\xe5\b\x00\x1c\x9c\x00\x00\x00\x00\x00\x00\x91\xecB\xdcZ\xe5\xbd$\x05\x90\xa9\xf3\xc7\xcb\xb7\xf0\xa1;#\x989\xe9\x12\xdf^6T\xdf\xcd\x02\xc5\xb0\xba\x12\'QXp\t\xfc\xf3\x01\x02\xbc\xbf\xc0\xf0\x10\xee\xd3\\yy\xa4\xf9\xe8\x00\xdd\xe97 0_\xe4]W\xf7~\xacVK\xc9t\x9e+:\x85\xef\x94\x0e\x19\x9cV[N.\xeb\x9fJ>\xd9\x99\x88\xd8\xdd\xb8Y\xc3$\xc6\x93\v\x04REY\xf4\xea\xf2\xcd\xcd.\x16\x861\xa1\v\x8d\x8e\x84R\xa6\x83\x84\xc0\x01e\xc3\xc8\xcc?\xc8?\x19\xb2\xa2\xe1\xac<\xe9f\x11\xff3\xc7\x19\x9e\x19\xf5-\xfe\xbd\xae\xbbR\x82\x16\xf9\x15S\x03U\xe0\xd8t\xe3%96') ioctl$TUNGETFEATURES(r2, 0x5452, &(0x7f00000013c0)) 34m17.635822399s ago: executing program 33 (id=10655): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x9, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x881) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000008c0)=""/188, 0xbc, 0x0, &(0x7f0000001b00)=""/4096, 0x1000}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000ecf800000000000000000001bfb631692d044780cb29f03e884f3c2a85833bf8497b85a6dff271244a15161fd838782a56c83ea698455c788cc6b774575dddaeb24833a12f61e7b8c6358205abe5ad3f69f6fea440a59e316e43274af8174eff183b931679", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/21], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/102, 0x66, 0x0, &(0x7f0000000240)=""/248, 0xf8}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) socket$kcm(0x25, 0x1, 0x0) 34m16.597149525s ago: executing program 34 (id=10657): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x0, 'io'}]}, 0x4) 34m16.211490267s ago: executing program 35 (id=10653): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x126400, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x18) 34m16.092056848s ago: executing program 36 (id=10671): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x9, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r0}, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x881) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000540)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={&(0x7f00000008c0)=""/188, 0xbc, 0x0, &(0x7f0000001b00)=""/4096, 0x1000}}, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x14869, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x3a0ffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) close(r4) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000ecf800000000000000000001bfb631692d044780cb29f03e884f3c2a85833bf8497b85a6dff271244a15161fd838782a56c83ea698455c788cc6b774575dddaeb24833a12f61e7b8c6358205abe5ad3f69f6fea440a59e316e43274af8174eff183b931679", @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="000000000100"/21], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f0000000180)=""/102, 0x66, 0x0, &(0x7f0000000240)=""/248, 0xf8}}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r6, 0x58, &(0x7f00000002c0)}, 0x10) socket$kcm(0x25, 0x1, 0x0) 34m16.055378518s ago: executing program 7 (id=10667): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33) 34m15.65803401s ago: executing program 37 (id=10667): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r2], 0xfe33) 34m15.432698032s ago: executing program 3 (id=10677): perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x101}, 0x0, 0xc8, 0x8, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa06"], 0xfdef) write$cgroup_subtree(r2, &(0x7f0000000000), 0xffc0) 34m15.400960982s ago: executing program 3 (id=10678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@bloom_filter={0x1e, 0x3, 0xfff, 0x1, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x5}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) recvmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x43) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0xfc63, &(0x7f0000000380)}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000"], 0x0, 0x52}, 0x28) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x18, 0x1, 0x2, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @volatile={0x5, 0x0, 0x0, 0x9, 0x3}, @func_proto={0x2, 0x0, 0x0, 0x6, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000080), 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x7, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0xa, 0x5, 0x0) 34m15.200238682s ago: executing program 3 (id=10680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x80}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m14.569479276s ago: executing program 3 (id=10682): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/2742], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 34m14.280381728s ago: executing program 3 (id=10684): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x80}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m14.279781248s ago: executing program 1 (id=10674): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 34m14.020724289s ago: executing program 38 (id=10674): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) 34m14.011881759s ago: executing program 8 (id=10670): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 34m13.782611921s ago: executing program 39 (id=10670): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x50a3}}, @call={0x85, 0x0, 0x0, 0x8}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=@base={0x6, 0x4, 0xdd, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0xc}, 0x50) 34m13.77837845s ago: executing program 9 (id=10679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x80}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m13.741168901s ago: executing program 40 (id=10679): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x161) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xdf, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x2, @perf_config_ext={0x408003, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x0, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}, 0x14002) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r3, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380)}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000}}, @ip_pktinfo={{0x1c, 0xfd000f00, 0x8, {0x0, @remote, @multicast1}}}, @ip_pktinfo={{0x1c, 0x28f0700, 0x8, {0x0, @empty=0xa0050000}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x88, 0x0, 0x0, [0x0, 0x0, 0x0]}]}}}], 0x80}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x8411}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000ba20702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34m13.696460091s ago: executing program 3 (id=10688): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000040)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0x0, 0x0}, 0x30) 34m13.696316261s ago: executing program 41 (id=10688): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r0 = perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000087000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff2e, &(0x7f0000000040)=""/210}, 0x70) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={r2, r0, 0x0, 0x0, 0x0}, 0x30) 1.540758791s ago: executing program 0 (id=24726): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x374, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x3}, 0x50) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x4030582b, 0x0) write$cgroup_int(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x395f8, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b00)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000b40)={0x0, 0xa, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000b80)=[0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000bc0)=[{0x1, 0x2, 0x3, 0x4}, {0x4, 0x2}, {0x5, 0x3, 0x1, 0x7}, {0x1, 0x4, 0xa, 0x7}, {0x0, 0x1, 0x5, 0x5}, {0x4, 0x2, 0x3, 0x9}], 0x10, 0xfffffff7}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000d80), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x8, 0x14}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.355285752s ago: executing program 0 (id=24731): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.184134093s ago: executing program 0 (id=24735): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d004892e822a6abc02ad2602a5ad6f7007ea60864160af365935cfaea3f49d8df1931a0e64ffc4c78029ee517d34460bc06000000938037e70e457ae2", 0x51}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f00000009c0)=""/185, 0xb9}, {&(0x7f0000000a80)=""/96, 0x60}, {&(0x7f0000000240)=""/37, 0x25}, {&(0x7f0000000b00)=""/181, 0xb5}, {&(0x7f00000020c0)=""/4090, 0xffa}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/175, 0xaf}], 0x7}, 0x40010022) recvmsg$kcm(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10182) 1.039022294s ago: executing program 4 (id=24739): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 985.927974ms ago: executing program 6 (id=24741): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002, 0x2}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=r2, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x7d, &(0x7f0000000000)=r6, 0x8) 888.986335ms ago: executing program 6 (id=24743): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_lsm={0x1d, 0x2, &(0x7f0000000800)=@raw=[@cb_func={0x18, 0xb, 0x4, 0x0, 0x8}], &(0x7f0000000880)='GPL\x00', 0x4, 0x2, &(0x7f00000008c0)=""/2, 0x41000, 0x24, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 888.857345ms ago: executing program 4 (id=24744): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x24, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x50) 764.734186ms ago: executing program 6 (id=24746): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080059746850000002d000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 764.491446ms ago: executing program 4 (id=24747): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000300"], 0x50) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 764.413756ms ago: executing program 2 (id=24748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, 0x0, 0x0, 0x4}, 0x20) 709.511246ms ago: executing program 5 (id=24749): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 659.912736ms ago: executing program 6 (id=24750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000380)={'pim6reg1\x00', @broadcast}) 600.756957ms ago: executing program 2 (id=24751): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x17, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="85000000a400000095"], &(0x7f0000003240)='GPL\x00'}, 0x94) 600.386667ms ago: executing program 4 (id=24752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r4}, 0x10) close(r0) 550.905137ms ago: executing program 5 (id=24753): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 528.783297ms ago: executing program 2 (id=24754): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffff51, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x40}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) 411.059528ms ago: executing program 2 (id=24755): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) 410.766058ms ago: executing program 5 (id=24756): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000e40)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000e00)='/'}, 0x50) 409.704367ms ago: executing program 4 (id=24757): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006b000000850000009e00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 347.447388ms ago: executing program 6 (id=24758): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000001304000000002e"], 0x0, 0x37}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) 307.914708ms ago: executing program 5 (id=24759): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x24, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x50) 265.351959ms ago: executing program 2 (id=24760): bpf$MAP_CREATE(0x0, 0x0, 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r1}, 0x10) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82744, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xa, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22041800f3fe8000000000000000000000000000aafe8000000000000227bfa7b09303960e2f80ae"], 0xfdef) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0xfdef) 264.667919ms ago: executing program 4 (id=24761): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 176.757269ms ago: executing program 5 (id=24762): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000050000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000002a97850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0xfeffff, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 176.495129ms ago: executing program 0 (id=24763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000080)=""/13, 0x2}, 0x20) 154.094289ms ago: executing program 6 (id=24764): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x8, 0xc, 0xffffbffb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) 117.978199ms ago: executing program 2 (id=24765): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 64.61213ms ago: executing program 0 (id=24766): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) 64.34156ms ago: executing program 5 (id=24767): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, 0x2}, 0x94) 0s ago: executing program 0 (id=24768): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000040)="e1ae2343ab", &(0x7f0000000200)=""/182}, 0x20) kernel console output (not intermixed with test programs): switching to perfect channel medium [ 3181.731260][ T316] netlink: 'syz.2.22072': attribute type 11 has an invalid length. [ 3181.770585][ T316] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22072'. [ 3181.802374][ T315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3182.071038][ T330] netlink: 'syz.5.22087': attribute type 16 has an invalid length. [ 3182.083220][ T330] netlink: 'syz.5.22087': attribute type 3 has an invalid length. [ 3182.094267][ T330] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22087'. [ 3182.649641][ T333] netlink: 'syz.5.22076': attribute type 16 has an invalid length. [ 3182.668686][ T333] netlink: 'syz.5.22076': attribute type 3 has an invalid length. [ 3182.695364][ T333] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22076'. [ 3182.904274][ T348] netlink: 'syz.5.22081': attribute type 11 has an invalid length. [ 3182.916613][ T348] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22081'. [ 3182.940024][ T347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.564161][ T354] netlink: 'syz.0.22085': attribute type 11 has an invalid length. [ 3183.593601][ T354] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22085'. [ 3183.697279][ T353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3183.803059][ T363] netlink: 'syz.2.22088': attribute type 11 has an invalid length. [ 3183.826210][ T363] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22088'. [ 3183.862555][ T362] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.013006][ T370] netlink: 'syz.5.22092': attribute type 16 has an invalid length. [ 3184.024172][ T374] netlink: 'syz.2.22091': attribute type 16 has an invalid length. [ 3184.116874][ T376] netlink: 'syz.6.22093': attribute type 11 has an invalid length. [ 3184.184956][ T375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.571056][ T401] netlink: 'syz.4.22103': attribute type 11 has an invalid length. [ 3184.594182][ T400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3184.711506][ T408] netlink: 'syz.0.22104': attribute type 11 has an invalid length. [ 3184.733359][ T405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.098265][ T421] netlink: 'syz.4.22111': attribute type 11 has an invalid length. [ 3185.138580][ T420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.392565][ T433] __nla_validate_parse: 16 callbacks suppressed [ 3185.392602][ T433] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22118'. [ 3185.459758][ T431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.618213][ T444] validate_nla: 13 callbacks suppressed [ 3185.618253][ T444] netlink: 'syz.6.22120': attribute type 16 has an invalid length. [ 3185.650160][ T444] netlink: 'syz.6.22120': attribute type 3 has an invalid length. [ 3185.664158][ T444] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22120'. [ 3185.733495][ T446] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22122'. [ 3185.752558][ T451] netlink: 'syz.4.22124': attribute type 16 has an invalid length. [ 3185.778842][ T449] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22123'. [ 3185.794546][ T453] netlink: 'syz.5.22125': attribute type 16 has an invalid length. [ 3185.794684][ T451] netlink: 'syz.4.22124': attribute type 3 has an invalid length. [ 3185.811705][ T453] netlink: 'syz.5.22125': attribute type 3 has an invalid length. [ 3185.811867][ T445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.832653][ T451] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22124'. [ 3185.840683][ T448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3185.851831][ T453] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22125'. [ 3185.971384][ T460] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22127'. [ 3186.001344][ T462] netlink: 'syz.2.22128': attribute type 16 has an invalid length. [ 3186.023695][ T459] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.039428][ T462] netlink: 'syz.2.22128': attribute type 3 has an invalid length. [ 3186.058029][ T467] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.22130'. [ 3186.070254][ T462] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22128'. [ 3186.091924][ T465] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.117308][ T464] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.22129'. [ 3186.188358][ T472] netlink: 'syz.4.22129': attribute type 1 has an invalid length. [ 3186.368318][ T474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3186.600122][ T489] netlink: 'syz.6.22137': attribute type 16 has an invalid length. [ 3186.760389][ T494] nla_validate_range_unsigned: 6 callbacks suppressed [ 3186.760428][ T494] netlink: 'syz.4.22139': attribute type 11 has an invalid length. [ 3186.788718][ T493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3187.979696][ T548] netlink: 'syz.6.22160': attribute type 11 has an invalid length. [ 3188.007020][ T547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3188.365515][ T570] device syzkaller0 entered promiscuous mode [ 3188.542293][ T578] netlink: 'syz.4.22175': attribute type 11 has an invalid length. [ 3188.580026][ T577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3189.672087][ T608] netlink: 'syz.5.22187': attribute type 11 has an invalid length. [ 3189.698422][ T607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3190.233388][ T619] netlink: 'syz.6.22191': attribute type 11 has an invalid length. [ 3190.248064][ T618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3191.445300][ T622] validate_nla: 37 callbacks suppressed [ 3191.445335][ T622] netlink: 'syz.4.22192': attribute type 16 has an invalid length. [ 3191.478574][ T622] netlink: 'syz.4.22192': attribute type 3 has an invalid length. [ 3191.497382][ T622] __nla_validate_parse: 26 callbacks suppressed [ 3191.497430][ T622] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22192'. [ 3191.570125][ T628] netlink: 'syz.5.22195': attribute type 16 has an invalid length. [ 3191.598953][ T628] netlink: 'syz.5.22195': attribute type 3 has an invalid length. [ 3191.615303][ T625] device syzkaller0 entered promiscuous mode [ 3191.624636][ T632] netlink: 'syz.6.22196': attribute type 16 has an invalid length. [ 3191.626316][ T628] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22195'. [ 3191.645004][ T632] netlink: 'syz.6.22196': attribute type 3 has an invalid length. [ 3191.655345][ T632] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22196'. [ 3191.788353][ T636] netlink: 'syz.4.22198': attribute type 16 has an invalid length. [ 3191.812442][ T636] netlink: 'syz.4.22198': attribute type 3 has an invalid length. [ 3191.821765][ T636] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22198'. [ 3191.821840][ T640] netlink: 'syz.6.22208': attribute type 11 has an invalid length. [ 3191.869289][ T640] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.22208'. [ 3191.909742][ T637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3192.051989][ T646] netlink: 'syz.6.22199': attribute type 16 has an invalid length. [ 3192.061180][ T646] netlink: 'syz.6.22199': attribute type 3 has an invalid length. [ 3192.074550][ T646] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22199'. [ 3192.323009][ T655] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22205'. [ 3192.861875][ T675] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22209'. [ 3192.988313][ T677] netlink: 'syz.5.22210': attribute type 11 has an invalid length. [ 3192.997188][ T677] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22210'. [ 3193.013382][ T676] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3194.805671][ T687] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22212'. [ 3195.650246][ T726] device syzkaller0 entered promiscuous mode [ 3196.045793][ T732] netlink: 'syz.0.22240': attribute type 11 has an invalid length. [ 3196.077255][ T731] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3196.231571][ T734] netlink: 'syz.4.22232': attribute type 11 has an invalid length. [ 3196.250558][ T733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3198.921195][ T766] device syzkaller0 entered promiscuous mode [ 3198.974463][ T771] validate_nla: 24 callbacks suppressed [ 3198.974498][ T771] netlink: 'syz.4.22241': attribute type 16 has an invalid length. [ 3199.026506][ T771] netlink: 'syz.4.22241': attribute type 3 has an invalid length. [ 3199.045370][ T771] __nla_validate_parse: 11 callbacks suppressed [ 3199.045412][ T771] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22241'. [ 3199.224048][ T785] netlink: 'syz.4.22243': attribute type 16 has an invalid length. [ 3199.237039][ T785] netlink: 'syz.4.22243': attribute type 3 has an invalid length. [ 3199.245609][ T785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22243'. [ 3200.125153][ T789] netlink: 'syz.4.22245': attribute type 16 has an invalid length. [ 3200.133913][ T789] netlink: 'syz.4.22245': attribute type 3 has an invalid length. [ 3200.142864][ T789] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22245'. [ 3201.190182][ T796] netlink: 'syz.2.22246': attribute type 16 has an invalid length. [ 3201.199532][ T796] netlink: 'syz.2.22246': attribute type 3 has an invalid length. [ 3201.209033][ T796] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22246'. [ 3201.247656][ T794] netlink: 'syz.4.22259': attribute type 16 has an invalid length. [ 3201.266089][ T794] netlink: 'syz.4.22259': attribute type 3 has an invalid length. [ 3201.287383][ T794] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22259'. [ 3201.352503][ T799] netlink: 'syz.2.22247': attribute type 11 has an invalid length. [ 3201.361097][ T799] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22247'. [ 3201.381310][ T797] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3201.499888][ T801] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22248'. [ 3201.633640][ T803] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22250'. [ 3201.696542][ T805] netlink: 'syz.2.22251': attribute type 11 has an invalid length. [ 3201.704913][ T805] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22251'. [ 3201.736178][ T804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3201.987534][ T811] netlink: 'syz.2.22255': attribute type 11 has an invalid length. [ 3201.995827][ T811] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22255'. [ 3202.028287][ T810] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3202.173852][ T808] device syzkaller0 entered promiscuous mode [ 3202.749402][ T837] netlink: 'syz.5.22263': attribute type 11 has an invalid length. [ 3202.768742][ T836] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3204.718572][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3204.725096][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3204.964681][ T833] device syzkaller0 entered promiscuous mode [ 3204.996426][ T846] validate_nla: 12 callbacks suppressed [ 3204.996457][ T846] netlink: 'syz.0.22266': attribute type 16 has an invalid length. [ 3205.036170][ T846] netlink: 'syz.0.22266': attribute type 3 has an invalid length. [ 3205.044207][ T846] __nla_validate_parse: 5 callbacks suppressed [ 3205.044248][ T846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22266'. [ 3205.144013][ T853] netlink: 'syz.5.22269': attribute type 11 has an invalid length. [ 3205.153762][ T853] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22269'. [ 3205.176948][ T849] netlink: 'syz.4.22268': attribute type 11 has an invalid length. [ 3205.184951][ T851] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.251150][ T849] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22268'. [ 3205.305450][ T848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3205.465235][ T867] netlink: 'syz.4.22274': attribute type 16 has an invalid length. [ 3205.474305][ T867] netlink: 'syz.4.22274': attribute type 3 has an invalid length. [ 3205.485463][ T867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22274'. [ 3205.653992][ T869] netlink: 'syz.0.22275': attribute type 16 has an invalid length. [ 3205.663148][ T869] netlink: 'syz.0.22275': attribute type 3 has an invalid length. [ 3205.673654][ T869] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22275'. [ 3208.163589][ T913] netlink: 'syz.4.22283': attribute type 11 has an invalid length. [ 3208.170822][ T910] netlink: 'syz.6.22282': attribute type 16 has an invalid length. [ 3208.179847][ T913] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22283'. [ 3208.184834][ T908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.192508][ T910] netlink: 'syz.6.22282': attribute type 3 has an invalid length. [ 3208.231144][ T910] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22282'. [ 3208.274590][ T916] netlink: 'syz.0.22284': attribute type 11 has an invalid length. [ 3208.292260][ T916] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22284'. [ 3208.321913][ T914] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3208.485475][ T931] netlink: 'syz.6.22287': attribute type 16 has an invalid length. [ 3208.516182][ T931] netlink: 'syz.6.22287': attribute type 3 has an invalid length. [ 3208.524365][ T931] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22287'. [ 3208.547894][ T929] device syzkaller0 entered promiscuous mode [ 3208.743487][ T939] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22288'. [ 3208.853027][ T941] netlink: 'syz.6.22289': attribute type 11 has an invalid length. [ 3208.900954][ T940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3211.782308][ T974] device syzkaller0 entered promiscuous mode [ 3211.878556][ T983] validate_nla: 2 callbacks suppressed [ 3211.878594][ T983] netlink: 'syz.6.22300': attribute type 16 has an invalid length. [ 3211.902228][ T981] device syzkaller0 entered promiscuous mode [ 3211.907437][ T983] netlink: 'syz.6.22300': attribute type 3 has an invalid length. [ 3211.921521][ T983] __nla_validate_parse: 1 callbacks suppressed [ 3211.921560][ T983] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22300'. [ 3211.947988][ T986] netlink: 'syz.0.22301': attribute type 16 has an invalid length. [ 3211.976117][ T986] netlink: 'syz.0.22301': attribute type 3 has an invalid length. [ 3212.007687][ T986] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22301'. [ 3212.307984][ T995] netlink: 'syz.0.22303': attribute type 11 has an invalid length. [ 3212.317236][ T995] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22303'. [ 3212.348607][ T994] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3212.792599][ T1001] netlink: 'syz.4.22305': attribute type 11 has an invalid length. [ 3212.804254][ T1001] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22305'. [ 3212.845027][ T999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3215.022998][ T1014] device syzkaller0 entered promiscuous mode [ 3219.341750][ T1034] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22320'. [ 3219.418574][ T1038] device syzkaller0 entered promiscuous mode [ 3219.418630][ T1046] netlink: 'syz.2.22312': attribute type 16 has an invalid length. [ 3219.446079][ T1046] netlink: 'syz.2.22312': attribute type 3 has an invalid length. [ 3219.476042][ T1046] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22312'. [ 3219.607309][ T1058] netlink: 'syz.2.22315': attribute type 16 has an invalid length. [ 3219.615780][ T1058] netlink: 'syz.2.22315': attribute type 3 has an invalid length. [ 3219.627513][ T1058] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22315'. [ 3219.987071][ T1072] netlink: 'syz.2.22317': attribute type 16 has an invalid length. [ 3219.995522][ T1072] netlink: 'syz.2.22317': attribute type 3 has an invalid length. [ 3220.004348][ T1072] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22317'. [ 3222.270452][ T1052] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22314'. [ 3222.379562][ T1078] device syzkaller0 entered promiscuous mode [ 3222.387029][ T1085] netlink: 'syz.4.22321': attribute type 11 has an invalid length. [ 3222.395120][ T1085] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22321'. [ 3222.413187][ T1084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3225.065219][ T1107] device syzkaller0 entered promiscuous mode [ 3225.077965][ T1112] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22327'. [ 3227.893895][ T1126] device syzkaller0 entered promiscuous mode [ 3230.759807][ T1152] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22339'. [ 3232.199836][ T1193] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22348'. [ 3232.383887][ T1196] device syzkaller0 entered promiscuous mode [ 3235.270980][ T1216] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22354'. [ 3236.429025][ T1272] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22363'. [ 3236.503809][ T1269] device syzkaller0 entered promiscuous mode [ 3239.283641][ T1293] netlink: 'syz.4.22369': attribute type 16 has an invalid length. [ 3239.293000][ T1293] netlink: 'syz.4.22369': attribute type 3 has an invalid length. [ 3239.301965][ T1293] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22369'. [ 3240.340199][ T1313] netlink: 'syz.0.22375': attribute type 16 has an invalid length. [ 3240.350858][ T1313] netlink: 'syz.0.22375': attribute type 3 has an invalid length. [ 3240.360153][ T1313] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22375'. [ 3240.900875][ T1317] device syzkaller0 entered promiscuous mode [ 3243.812140][ T1338] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22382'. [ 3244.090993][ T1347] device syzkaller0 entered promiscuous mode [ 3244.290503][ T1348] device syzkaller0 entered promiscuous mode [ 3249.266823][ T1370] netlink: 'syz.2.22390': attribute type 16 has an invalid length. [ 3249.275184][ T1370] netlink: 'syz.2.22390': attribute type 3 has an invalid length. [ 3249.296350][ T1370] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22390'. [ 3250.629247][ T1410] netlink: 'syz.6.22402': attribute type 16 has an invalid length. [ 3250.664207][ T1410] netlink: 'syz.6.22402': attribute type 3 has an invalid length. [ 3250.699077][ T1410] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22402'. [ 3251.013871][ T1420] device syzkaller0 entered promiscuous mode [ 3251.236557][ T1425] netlink: 'syz.0.22407': attribute type 11 has an invalid length. [ 3251.255795][ T1425] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22407'. [ 3251.290577][ T1423] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3253.122901][ T1444] netlink: 'syz.2.22412': attribute type 11 has an invalid length. [ 3253.132357][ T1444] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22412'. [ 3253.152934][ T1443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3254.916338][ T1452] netlink: 'syz.5.22415': attribute type 11 has an invalid length. [ 3254.938044][ T1452] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22415'. [ 3255.000504][ T1451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3255.037846][ T1458] netlink: 'syz.2.22417': attribute type 11 has an invalid length. [ 3255.062447][ T1454] device syzkaller0 entered promiscuous mode [ 3255.070318][ T1458] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22417'. [ 3255.106446][ T1457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3258.166918][ T1481] device syzkaller0 entered promiscuous mode [ 3260.840428][ T1501] netlink: 'syz.0.22430': attribute type 11 has an invalid length. [ 3260.865471][ T1501] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22430'. [ 3260.890537][ T1505] netlink: 'syz.5.22431': attribute type 16 has an invalid length. [ 3260.908750][ T1500] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3260.910078][ T1505] netlink: 'syz.5.22431': attribute type 3 has an invalid length. [ 3260.928544][ T1505] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22431'. [ 3261.143303][ T1510] netlink: 'syz.5.22434': attribute type 16 has an invalid length. [ 3261.165484][ T1510] netlink: 'syz.5.22434': attribute type 3 has an invalid length. [ 3261.184362][ T1510] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22434'. [ 3261.304833][ T1516] netlink: 'syz.2.22436': attribute type 16 has an invalid length. [ 3261.307945][ T1514] netlink: 'syz.6.22435': attribute type 16 has an invalid length. [ 3261.313426][ T1516] netlink: 'syz.2.22436': attribute type 3 has an invalid length. [ 3261.343317][ T1516] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22436'. [ 3261.347040][ T1514] netlink: 'syz.6.22435': attribute type 3 has an invalid length. [ 3261.380879][ T1514] netlink: 132 bytes leftover after parsing attributes in process `syz.6.22435'. [ 3261.629513][ T1528] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22439'. [ 3261.828397][ T1533] netlink: 'syz.2.22443': attribute type 16 has an invalid length. [ 3261.846069][ T1533] netlink: 'syz.2.22443': attribute type 3 has an invalid length. [ 3261.864297][ T1533] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22443'. [ 3261.902742][ T1539] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22446'. [ 3261.920299][ T1537] netlink: 'syz.4.22445': attribute type 11 has an invalid length. [ 3261.930617][ T1537] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22445'. [ 3261.934340][ T1535] device syzkaller0 entered promiscuous mode [ 3261.977654][ T1536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3262.164940][ T1547] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22449'. [ 3264.868324][ T1558] device syzkaller0 entered promiscuous mode [ 3264.915808][ T1568] device syzkaller0 entered promiscuous mode [ 3265.069199][ T1583] netlink: 'syz.5.22459': attribute type 11 has an invalid length. [ 3265.100395][ T1582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3265.225652][ T1589] netlink: 'syz.5.22460': attribute type 11 has an invalid length. [ 3265.242816][ T1588] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3266.157286][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3266.163913][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3269.564616][ T1585] __nla_validate_parse: 4 callbacks suppressed [ 3269.564631][ T1585] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22458'. [ 3269.748522][ T1602] netlink: 'syz.5.22463': attribute type 11 has an invalid length. [ 3269.770883][ T1602] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22463'. [ 3269.820137][ T1600] device syzkaller0 entered promiscuous mode [ 3269.844014][ T1601] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3269.906209][ T1607] device syzkaller0 entered promiscuous mode [ 3272.710646][ T1617] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22470'. [ 3272.720409][ T1620] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22471'. [ 3272.916709][ T1631] netlink: 'syz.5.22473': attribute type 11 has an invalid length. [ 3272.938168][ T1631] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22473'. [ 3272.973355][ T1630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3275.363306][ T1644] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22475'. [ 3275.534657][ T1653] device syzkaller0 entered promiscuous mode [ 3275.590328][ T1659] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22479'. [ 3278.236939][ T1674] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22483'. [ 3278.250990][ T1683] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22485'. [ 3278.403514][ T1692] netlink: 'syz.4.22487': attribute type 11 has an invalid length. [ 3278.412086][ T1692] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22487'. [ 3278.464293][ T1691] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3278.477092][ T1689] device syzkaller0 entered promiscuous mode [ 3278.572956][ T1697] netlink: 'syz.6.22490': attribute type 11 has an invalid length. [ 3278.602276][ T1697] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.22490'. [ 3278.639285][ T1696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3278.641679][ T1699] validate_nla: 8 callbacks suppressed [ 3278.641712][ T1699] netlink: 'syz.0.22491': attribute type 16 has an invalid length. [ 3278.664299][ T1699] netlink: 'syz.0.22491': attribute type 3 has an invalid length. [ 3278.673176][ T1699] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22491'. [ 3278.710674][ T1702] netlink: 'syz.4.22492': attribute type 16 has an invalid length. [ 3278.726565][ T1702] netlink: 'syz.4.22492': attribute type 3 has an invalid length. [ 3278.734750][ T1702] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22492'. [ 3281.545425][ T1733] netlink: 'syz.2.22497': attribute type 11 has an invalid length. [ 3281.564520][ T1733] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22497'. [ 3281.616164][ T1732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3281.648547][ T1738] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22498'. [ 3281.690532][ T1741] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22500'. [ 3281.759650][ T1742] netlink: 'syz.4.22501': attribute type 11 has an invalid length. [ 3281.780719][ T1742] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22501'. [ 3281.839054][ T1739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3281.854035][ T1747] netlink: 'syz.2.22503': attribute type 11 has an invalid length. [ 3281.871610][ T1747] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22503'. [ 3281.885664][ T1745] netlink: 'syz.5.22502': attribute type 11 has an invalid length. [ 3281.901080][ T1746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3281.941742][ T1745] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22502'. [ 3281.993261][ T1744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3282.021752][ T1749] device syzkaller0 entered promiscuous mode [ 3282.041804][ T1756] netlink: 'syz.4.22506': attribute type 11 has an invalid length. [ 3282.051323][ T1756] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22506'. [ 3282.086186][ T1755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3283.262752][ T1780] netlink: 'syz.4.22512': attribute type 16 has an invalid length. [ 3283.272369][ T1780] netlink: 'syz.4.22512': attribute type 3 has an invalid length. [ 3283.280785][ T1780] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22512'. [ 3284.691834][ T1761] device syzkaller0 entered promiscuous mode [ 3284.815033][ T1786] netlink: 'syz.6.22515': attribute type 11 has an invalid length. [ 3284.826627][ T1786] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.22515'. [ 3284.849877][ T1785] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3287.147128][ T1783] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22513'. [ 3287.157047][ T1788] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22514'. [ 3287.225401][ T1793] device syzkaller0 entered promiscuous mode [ 3287.294119][ T1801] netlink: 'syz.4.22519': attribute type 11 has an invalid length. [ 3287.309704][ T1801] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22519'. [ 3287.329438][ T1799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3287.333188][ T1802] netlink: 'syz.0.22517': attribute type 11 has an invalid length. [ 3287.359614][ T1802] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22517'. [ 3287.408853][ T1800] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3287.643190][ T1819] netlink: 'syz.0.22521': attribute type 11 has an invalid length. [ 3287.663444][ T1819] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22521'. [ 3287.695376][ T1818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3290.211075][ T1841] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22528'. [ 3290.392484][ T1847] device syzkaller0 entered promiscuous mode [ 3290.624286][ T1860] netlink: 'syz.0.22531': attribute type 11 has an invalid length. [ 3290.633805][ T1860] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22531'. [ 3290.655720][ T1859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3292.967413][ T1855] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22530'. [ 3293.097191][ T1875] netlink: 'syz.2.22534': attribute type 11 has an invalid length. [ 3293.143545][ T1875] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.22534'. [ 3293.154052][ T1878] netlink: 'syz.6.22533': attribute type 11 has an invalid length. [ 3293.164465][ T1878] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.22533'. [ 3293.234976][ T1877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3293.235704][ T1874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3293.322164][ T1883] device syzkaller0 entered promiscuous mode [ 3293.564344][ T1888] device syzkaller0 entered promiscuous mode [ 3298.401745][ T1915] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22541'. [ 3298.604294][ T1940] netlink: 'syz.4.22544': attribute type 11 has an invalid length. [ 3298.634341][ T1940] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22544'. [ 3298.727974][ T1939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3298.795001][ T1946] device syzkaller0 entered promiscuous mode [ 3298.853648][ T1956] netlink: 'syz.0.22551': attribute type 11 has an invalid length. [ 3298.857297][ T1950] device syzkaller0 entered promiscuous mode [ 3298.872386][ T1956] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22551'. [ 3298.915189][ T1954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3303.818123][ T1959] device syzkaller0 entered promiscuous mode [ 3303.907285][ T1973] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22554'. [ 3304.112790][ T1983] netlink: 'syz.5.22560': attribute type 16 has an invalid length. [ 3304.121263][ T1983] netlink: 'syz.5.22560': attribute type 3 has an invalid length. [ 3304.129651][ T1983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22560'. [ 3306.358873][ T1979] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22558'. [ 3306.427837][ T1988] device syzkaller0 entered promiscuous mode [ 3306.515639][ T2005] netlink: 'syz.0.22566': attribute type 11 has an invalid length. [ 3306.526511][ T2005] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22566'. [ 3306.542616][ T2002] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3306.579895][ T2004] netlink: 'syz.2.22564': attribute type 16 has an invalid length. [ 3306.608307][ T2004] netlink: 'syz.2.22564': attribute type 3 has an invalid length. [ 3306.636459][ T2004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22564'. [ 3309.134085][ T2022] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22569'. [ 3309.312113][ T2030] netlink: 'syz.4.22572': attribute type 16 has an invalid length. [ 3309.337619][ T2030] netlink: 'syz.4.22572': attribute type 3 has an invalid length. [ 3309.357349][ T2030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22572'. [ 3309.402683][ T2028] device syzkaller0 entered promiscuous mode [ 3309.467222][ T2037] device syzkaller0 entered promiscuous mode [ 3309.579539][ T2042] netlink: 'syz.4.22576': attribute type 16 has an invalid length. [ 3309.602122][ T2042] netlink: 'syz.4.22576': attribute type 3 has an invalid length. [ 3309.621151][ T2042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22576'. [ 3309.905110][ T2056] netlink: 'syz.4.22577': attribute type 11 has an invalid length. [ 3309.914801][ T2056] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22577'. [ 3309.933210][ T2055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3312.247198][ T2062] netlink: 'syz.5.22578': attribute type 11 has an invalid length. [ 3312.255730][ T2062] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22578'. [ 3312.273043][ T2059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3314.462806][ T2074] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22582'. [ 3314.606843][ T2076] device syzkaller0 entered promiscuous mode [ 3314.646848][ T2078] device syzkaller0 entered promiscuous mode [ 3314.832933][ T2087] netlink: 'syz.0.22585': attribute type 16 has an invalid length. [ 3314.841845][ T2087] netlink: 'syz.0.22585': attribute type 3 has an invalid length. [ 3314.852671][ T2087] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22585'. [ 3318.423355][ T2106] netlink: 'syz.5.22589': attribute type 11 has an invalid length. [ 3318.431662][ T2106] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22589'. [ 3318.447700][ T2105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3319.606822][ T2084] device syzkaller0 entered promiscuous mode [ 3319.809218][ T2114] netlink: 'syz.0.22593': attribute type 11 has an invalid length. [ 3319.817939][ T2114] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22593'. [ 3319.865174][ T2112] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3322.436426][ T2116] device syzkaller0 entered promiscuous mode [ 3322.484182][ T2118] device syzkaller0 entered promiscuous mode [ 3322.544705][ T2136] netlink: 'syz.4.22597': attribute type 11 has an invalid length. [ 3322.553890][ T2136] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22597'. [ 3322.596005][ T2135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3327.261965][ T2150] netlink: 'syz.4.22603': attribute type 16 has an invalid length. [ 3327.287038][ T2150] netlink: 'syz.4.22603': attribute type 3 has an invalid length. [ 3327.295127][ T2150] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22603'. [ 3327.419374][ T2153] device syzkaller0 entered promiscuous mode [ 3327.598243][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3327.604683][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3330.140101][ T2163] device syzkaller0 entered promiscuous mode [ 3333.010120][ T2186] device syzkaller0 entered promiscuous mode [ 3333.838616][ T2201] netlink: 'syz.5.22618': attribute type 16 has an invalid length. [ 3333.868344][ T2201] netlink: 'syz.5.22618': attribute type 3 has an invalid length. [ 3333.889985][ T2201] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22618'. [ 3336.276790][ T2206] netlink: 'syz.5.22629': attribute type 16 has an invalid length. [ 3336.296963][ T2206] netlink: 'syz.5.22629': attribute type 3 has an invalid length. [ 3336.357791][ T2206] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22629'. [ 3336.463407][ T2210] device syzkaller0 entered promiscuous mode [ 3339.701472][ T2246] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22628'. [ 3339.863802][ T2257] device syzkaller0 entered promiscuous mode [ 3342.910875][ T2279] netlink: 'syz.5.22636': attribute type 16 has an invalid length. [ 3342.953792][ T2279] netlink: 'syz.5.22636': attribute type 3 has an invalid length. [ 3342.976882][ T2279] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22636'. [ 3343.156545][ T2290] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22639'. [ 3343.965075][ T2317] device syzkaller0 entered promiscuous mode [ 3347.345049][ T2377] netlink: 'syz.2.22657': attribute type 16 has an invalid length. [ 3347.354517][ T2377] netlink: 'syz.2.22657': attribute type 3 has an invalid length. [ 3347.366982][ T2377] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22657'. [ 3348.502137][ T2412] netlink: 'syz.2.22664': attribute type 16 has an invalid length. [ 3348.528911][ T2412] netlink: 'syz.2.22664': attribute type 3 has an invalid length. [ 3348.547744][ T2412] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22664'. [ 3348.673463][ T2415] device syzkaller0 entered promiscuous mode [ 3348.984106][ T2428] netlink: 'syz.2.22670': attribute type 16 has an invalid length. [ 3348.992932][ T2428] netlink: 'syz.2.22670': attribute type 3 has an invalid length. [ 3349.001386][ T2428] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22670'. [ 3351.379063][ T2429] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22669'. [ 3351.755680][ T2458] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22678'. [ 3352.324295][ T2473] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22683'. [ 3352.680324][ T2481] device syzkaller0 entered promiscuous mode [ 3356.820757][ T2550] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22697'. [ 3357.927973][ T2577] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22702'. [ 3358.130392][ T2575] device syzkaller0 entered promiscuous mode [ 3360.872011][ T2590] device syzkaller0 entered promiscuous mode [ 3363.622701][ T2621] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22712'. [ 3364.668623][ T2640] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22716'. [ 3369.323260][ T2760] netlink: 'syz.0.22747': attribute type 16 has an invalid length. [ 3369.331677][ T2760] netlink: 'syz.0.22747': attribute type 3 has an invalid length. [ 3369.341894][ T2760] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22747'. [ 3371.487911][ T2839] netlink: 'syz.4.22751': attribute type 16 has an invalid length. [ 3371.511925][ T2839] netlink: 'syz.4.22751': attribute type 3 has an invalid length. [ 3371.533291][ T2839] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22751'. [ 3372.709731][ T2877] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.22758'. [ 3372.744434][ T2877] netlink: 'syz.6.22758': attribute type 1 has an invalid length. [ 3372.760955][ T2877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22758'. [ 3373.196508][ T2888] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.22771'. [ 3373.343249][ T2892] netlink: 'syz.5.22771': attribute type 1 has an invalid length. [ 3373.435628][ T2892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22771'. [ 3373.631323][ T2900] netlink: 'syz.5.22765': attribute type 16 has an invalid length. [ 3373.640031][ T2900] netlink: 'syz.5.22765': attribute type 3 has an invalid length. [ 3373.650237][ T2900] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22765'. [ 3375.025369][ T2928] device syzkaller0 entered promiscuous mode [ 3378.202773][ T2959] netlink: 'syz.5.22778': attribute type 16 has an invalid length. [ 3378.225786][ T2959] netlink: 'syz.5.22778': attribute type 3 has an invalid length. [ 3378.234739][ T2959] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22778'. [ 3379.881035][ T2986] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22794'. [ 3380.720001][ T3015] netlink: 'syz.0.22789': attribute type 16 has an invalid length. [ 3380.739679][ T3015] netlink: 'syz.0.22789': attribute type 3 has an invalid length. [ 3380.764261][ T3015] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22789'. [ 3382.045909][ T3044] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22798'. [ 3382.546003][ T3061] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22803'. [ 3383.301927][ T3076] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22806'. [ 3384.169171][ T3097] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22812'. [ 3384.189749][ T3100] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22813'. [ 3384.353411][ T3108] netlink: 'syz.2.22814': attribute type 16 has an invalid length. [ 3384.373732][ T3108] netlink: 'syz.2.22814': attribute type 3 has an invalid length. [ 3384.388075][ T3108] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22814'. [ 3384.417152][ T3112] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22815'. [ 3384.722486][ T3122] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22819'. [ 3386.257720][ T3162] netlink: 763 bytes leftover after parsing attributes in process `syz.5.22827'. [ 3386.429822][ T3167] netlink: 'syz.4.22828': attribute type 16 has an invalid length. [ 3386.462931][ T3167] netlink: 'syz.4.22828': attribute type 3 has an invalid length. [ 3386.502776][ T3167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22828'. [ 3386.503577][ T3171] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22829'. [ 3386.763879][ T3175] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22831'. [ 3386.883406][ T3179] device syzkaller0 entered promiscuous mode [ 3387.193044][ T3189] netlink: 'syz.6.22836': attribute type 16 has an invalid length. [ 3387.247219][ T3189] netlink: 'syz.6.22836': attribute type 3 has an invalid length. [ 3389.039067][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3389.045659][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3390.970673][ T3213] netlink: 'syz.0.22842': attribute type 16 has an invalid length. [ 3390.993860][ T3213] netlink: 'syz.0.22842': attribute type 3 has an invalid length. [ 3391.016246][ T3213] __nla_validate_parse: 1 callbacks suppressed [ 3391.016279][ T3213] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22842'. [ 3392.211838][ T3233] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.22847'. [ 3392.309910][ T3238] netlink: 'syz.6.22847': attribute type 1 has an invalid length. [ 3392.330870][ T3238] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22847'. [ 3392.738705][ T3239] device syzkaller0 entered promiscuous mode [ 3396.020011][ T3271] netlink: 'syz.2.22855': attribute type 16 has an invalid length. [ 3396.028229][ T3271] netlink: 'syz.2.22855': attribute type 3 has an invalid length. [ 3396.037358][ T3271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22855'. [ 3397.068145][ T3295] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.22861'. [ 3397.106173][ T3295] netlink: 'syz.4.22861': attribute type 1 has an invalid length. [ 3397.121236][ T3295] netlink: 4 bytes leftover after parsing attributes in process `syz.4.22861'. [ 3397.482123][ T3306] device syzkaller0 entered promiscuous mode [ 3400.403362][ T3318] device syzkaller0 entered promiscuous mode [ 3400.491425][ T3327] netlink: 'syz.2.22868': attribute type 16 has an invalid length. [ 3400.500117][ T3327] netlink: 'syz.2.22868': attribute type 3 has an invalid length. [ 3400.508627][ T3327] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22868'. [ 3404.382923][ T3354] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.22874'. [ 3404.459014][ T3361] netlink: 'syz.6.22874': attribute type 1 has an invalid length. [ 3404.472652][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22874'. [ 3405.239465][ T3373] device syzkaller0 entered promiscuous mode [ 3405.295036][ T3388] netlink: 'syz.4.22880': attribute type 16 has an invalid length. [ 3405.305000][ T3388] netlink: 'syz.4.22880': attribute type 3 has an invalid length. [ 3405.325216][ T3388] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22880'. [ 3407.996170][ T3394] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22882'. [ 3408.879570][ T3415] netlink: 763 bytes leftover after parsing attributes in process `syz.2.22898'. [ 3409.157710][ T3422] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.22889'. [ 3410.494706][ T3457] device syzkaller0 entered promiscuous mode [ 3413.766762][ T3473] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.22904'. [ 3413.776279][ T3477] netlink: 'syz.5.22904': attribute type 1 has an invalid length. [ 3413.784731][ T3477] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22904'. [ 3415.779373][ T3523] device syzkaller0 entered promiscuous mode [ 3416.076683][ T3532] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22920'. [ 3418.940122][ T3533] device syzkaller0 entered promiscuous mode [ 3422.894853][ T3591] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22934'. [ 3423.227923][ T3597] device syzkaller0 entered promiscuous mode [ 3427.940909][ T3662] netlink: 763 bytes leftover after parsing attributes in process `syz.6.22951'. [ 3432.028670][ T3759] netlink: 763 bytes leftover after parsing attributes in process `syz.4.22974'. [ 3434.966350][ T3832] netlink: 763 bytes leftover after parsing attributes in process `syz.0.22991'. [ 3435.489917][ T3845] device syzkaller0 entered promiscuous mode [ 3438.367588][ T3856] device syzkaller0 entered promiscuous mode [ 3442.420765][ T3908] device syzkaller0 entered promiscuous mode [ 3442.430475][ T3910] netlink: 763 bytes leftover after parsing attributes in process `syz.2.23008'. [ 3445.541315][ T3928] device syzkaller0 entered promiscuous mode [ 3448.423728][ T3949] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.23028'. [ 3448.464939][ T3949] netlink: 'syz.2.23028': attribute type 1 has an invalid length. [ 3448.475090][ T3949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23028'. [ 3449.212815][ T3964] device syzkaller0 entered promiscuous mode [ 3450.498155][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3450.504503][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3452.423586][ T3981] device syzkaller0 entered promiscuous mode [ 3455.199849][ T4002] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.23031'. [ 3455.214223][ T4002] netlink: 'syz.0.23031': attribute type 1 has an invalid length. [ 3455.222620][ T4002] netlink: 4 bytes leftover after parsing attributes in process `syz.0.23031'. [ 3455.505632][ T4011] device syzkaller0 entered promiscuous mode [ 3459.434754][ T4048] netlink: 16186 bytes leftover after parsing attributes in process `syz.6.23044'. [ 3459.497358][ T4053] netlink: 'syz.6.23044': attribute type 1 has an invalid length. [ 3459.537199][ T4053] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23044'. [ 3459.565636][ T4055] netlink: 'syz.0.23047': attribute type 10 has an invalid length. [ 3459.574310][ T4055] device wlan1 left promiscuous mode [ 3459.588908][ T4055] device wlan1 entered promiscuous mode [ 3459.596455][ T4055] team0: Port device wlan1 added [ 3459.781098][ T4065] netlink: 763 bytes leftover after parsing attributes in process `syz.0.23052'. [ 3459.892832][ T4066] device syzkaller0 entered promiscuous mode [ 3462.829103][ T4084] device syzkaller0 entered promiscuous mode [ 3465.726944][ T4103] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.23061'. [ 3465.802794][ T4103] netlink: 'syz.2.23061': attribute type 1 has an invalid length. [ 3465.836280][ T4103] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23061'. [ 3466.063300][ T4114] netlink: 'syz.2.23064': attribute type 10 has an invalid length. [ 3466.088450][ T4114] bond0: (slave wlan1): Releasing backup interface [ 3466.098705][ T4114] device wlan1 left promiscuous mode [ 3466.162985][ T4114] device wlan1 entered promiscuous mode [ 3466.188634][ T4114] team0: Port device wlan1 added [ 3467.112472][ T4142] device syzkaller0 entered promiscuous mode [ 3470.164700][ T4152] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.23075'. [ 3470.174175][ T4153] netlink: 'syz.5.23075': attribute type 1 has an invalid length. [ 3470.182804][ T4153] netlink: 4 bytes leftover after parsing attributes in process `syz.5.23075'. [ 3470.197905][ T4163] netlink: 'syz.6.23078': attribute type 10 has an invalid length. [ 3471.433502][ T4194] netlink: 'syz.5.23089': attribute type 10 has an invalid length. [ 3471.473158][ T4194] device wlan1 left promiscuous mode [ 3471.527830][ T4194] device wlan1 entered promiscuous mode [ 3471.554251][ T4194] team0: Port device wlan1 added [ 3474.947000][ T4296] netlink: 'syz.5.23116': attribute type 10 has an invalid length. [ 3476.317051][ T4337] netlink: 'syz.5.23128': attribute type 10 has an invalid length. [ 3476.447235][ T4348] netlink: 'syz.6.23129': attribute type 10 has an invalid length. [ 3477.405631][ T4366] netlink: 'syz.6.23137': attribute type 10 has an invalid length. [ 3478.117608][ T4383] netlink: 'syz.4.23142': attribute type 10 has an invalid length. [ 3478.398990][ T4392] netlink: 'syz.0.23144': attribute type 10 has an invalid length. [ 3479.317052][ T4402] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 3479.333368][ T4402] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 3479.342269][ T4402] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 3479.352792][ T4402] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 3479.363410][ T4402] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 3479.371118][ T4402] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 3479.457558][ T4405] netlink: 'syz.0.23148': attribute type 10 has an invalid length. [ 3479.653912][ T4400] chnl_net:caif_netlink_parms(): no params data found [ 3479.929634][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 3479.951689][ T4400] bridge0: port 1(bridge_slave_0) entered disabled state [ 3479.963363][ T4400] device bridge_slave_0 entered promiscuous mode [ 3480.011316][ T4400] bridge0: port 2(bridge_slave_1) entered blocking state [ 3480.022393][ T4400] bridge0: port 2(bridge_slave_1) entered disabled state [ 3480.031631][ T4400] device bridge_slave_1 entered promiscuous mode [ 3480.115720][ T4400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3480.129518][ T4400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3480.166215][ T4400] team0: Port device team_slave_0 added [ 3480.198521][ T4400] team0: Port device team_slave_1 added [ 3480.215228][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3480.223023][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3480.251429][ T4400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3480.281652][ T4400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3480.298916][ T4400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3480.361078][ T4400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3480.488436][ T4400] device hsr_slave_0 entered promiscuous mode [ 3480.504541][ T4400] device hsr_slave_1 entered promiscuous mode [ 3480.603293][ T4433] netlink: 'syz.5.23154': attribute type 10 has an invalid length. [ 3480.682694][ T4386] device 0 left promiscuous mode [ 3480.743096][ T4386] device 1 left promiscuous mode [ 3480.796504][ T4386] device 2 left promiscuous mode [ 3480.836624][ T4386] device 3 left promiscuous mode [ 3480.906470][ T4386] device 4 left promiscuous mode [ 3481.140135][ T4441] netlink: 'syz.0.23155': attribute type 10 has an invalid length. [ 3481.447679][T24656] Bluetooth: hci3: command 0x0409 tx timeout [ 3481.554341][ T4386] device erspan0 left promiscuous mode [ 3481.560007][ T4386] Ÿë: port 2(erspan0) entered disabled state [ 3481.704317][ T4400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 3481.713781][ T4400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 3481.740139][ T4400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 3481.751090][ T4400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 3481.849663][ T4400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3481.872826][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3481.882262][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3481.917600][ T4400] 8021q: adding VLAN 0 to HW filter on device team0 [ 3481.941281][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3481.956956][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3481.975073][T15938] bridge0: port 1(bridge_slave_0) entered blocking state [ 3481.982271][T15938] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3482.064358][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3482.079871][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3482.102927][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3482.113379][T15938] bridge0: port 2(bridge_slave_1) entered blocking state [ 3482.120581][T15938] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3482.129105][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3482.138797][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3482.158143][ T4456] netlink: 'syz.5.23167': attribute type 10 has an invalid length. [ 3482.178702][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3482.208592][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3482.219250][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3482.229254][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3482.240004][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3482.279634][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3482.288585][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3482.299176][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3482.309779][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3482.324450][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3482.712457][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3482.723261][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3482.738402][ T4400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3482.788276][ T4469] netlink: 'syz.6.23160': attribute type 10 has an invalid length. [ 3483.059728][ T4386] device wlan1 left promiscuous mode [ 3483.074505][ T4386] team0: Port device wlan1 removed [ 3483.093817][ T4478] netlink: 'syz.5.23163': attribute type 10 has an invalid length. [ 3483.202689][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3483.212021][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3483.235383][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3483.245566][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3483.254971][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3483.263089][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3483.273787][ T4400] device veth0_vlan entered promiscuous mode [ 3483.290725][ T4400] device veth1_vlan entered promiscuous mode [ 3483.312098][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3483.320478][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3483.329430][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3483.339765][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3483.352520][ T4400] device veth0_macvtap entered promiscuous mode [ 3483.362996][ T4400] device veth1_macvtap entered promiscuous mode [ 3483.381644][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3483.389649][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3483.399188][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3483.408085][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3483.418723][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3483.431814][ T4400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3483.444292][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3483.457092][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3483.471463][ T4400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3483.480660][ T4400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3483.489787][ T4400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3483.499286][ T4400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3483.516506][T24656] Bluetooth: hci3: command 0x041b tx timeout [ 3483.573564][T15938] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3483.583690][T15938] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3483.600776][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3483.612230][T16900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3483.621079][T16900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3483.648630][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3484.239143][ T4496] netlink: 'syz.5.23168': attribute type 10 has an invalid length. [ 3484.514608][ T4402] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3484.526485][ T4402] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3484.536117][ T4402] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3484.544360][ T4402] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3484.552420][ T4402] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 3484.561519][ T4402] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3484.967912][ T4386] device veth0_to_team left promiscuous mode [ 3484.974129][ T4386] Ÿë: port 1(veth0_to_team) entered disabled state [ 3485.525045][ T4386] device geneve1 left promiscuous mode [ 3485.532437][ T4386] team0 (unregistering): Port device geneve1 removed [ 3485.596778][T24656] Bluetooth: hci3: command 0x040f tx timeout [ 3485.661610][ T4386] device hsr_slave_0 left promiscuous mode [ 3485.670432][ T4386] team0 (unregistering): Port device hsr_slave_0 removed [ 3485.819511][ T4386] device team_slave_1 left promiscuous mode [ 3485.827889][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 3486.404929][ T4526] netlink: 'syz.0.23175': attribute type 10 has an invalid length. [ 3486.416147][ T4525] netlink: 'syz.5.23176': attribute type 10 has an invalid length. [ 3486.437773][ T4501] chnl_net:caif_netlink_parms(): no params data found [ 3486.543389][ T4501] bridge0: port 1(bridge_slave_0) entered blocking state [ 3486.550875][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 3486.559772][ T4501] device bridge_slave_0 entered promiscuous mode [ 3486.571616][ T4501] bridge0: port 2(bridge_slave_1) entered blocking state [ 3486.582977][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 3486.591986][ T4501] device bridge_slave_1 entered promiscuous mode [ 3486.625121][ T4501] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3486.636299][ T4402] Bluetooth: hci1: command 0x0409 tx timeout [ 3486.645820][ T4501] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3486.682221][ T4501] team0: Port device team_slave_0 added [ 3486.691650][ T4501] team0: Port device team_slave_1 added [ 3486.712222][ T4501] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3486.719947][ T4501] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3486.748644][ T4501] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3486.766721][ T4501] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3486.773996][ T4501] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3486.800765][ T4501] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3486.838193][ T4501] device hsr_slave_0 entered promiscuous mode [ 3486.845136][ T4501] device hsr_slave_1 entered promiscuous mode [ 3486.852508][ T4501] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3486.860848][ T4501] Cannot create hsr debugfs directory [ 3487.057442][ T4501] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3487.163019][ T4501] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3487.279559][ T4501] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3487.415486][ T4501] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3487.644327][ T4501] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 3487.653902][ T4501] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 3487.663727][ T4501] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 3487.673221][ T4501] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 3487.686041][ T4402] Bluetooth: hci3: command 0x0419 tx timeout [ 3487.751662][ T4501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3487.767837][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3487.777478][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3487.791813][ T4501] 8021q: adding VLAN 0 to HW filter on device team0 [ 3487.832898][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3487.857781][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3487.875359][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 3487.882572][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3487.895345][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3487.904769][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3487.916876][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 3487.924047][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3487.956513][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3488.104898][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3488.113365][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3488.123093][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3488.133950][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3488.144900][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3488.160038][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3488.204511][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3488.214854][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3488.223760][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3488.232573][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3488.242348][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3488.258018][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3488.276158][ T4560] netlink: 'syz.0.23182': attribute type 10 has an invalid length. [ 3488.504292][ T4567] netlink: 'syz.6.23183': attribute type 10 has an invalid length. [ 3488.718409][T24656] Bluetooth: hci1: command 0x041b tx timeout [ 3488.782417][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3488.798080][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3488.812212][ T4501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3488.917437][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3488.930174][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3488.991919][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3489.004368][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3489.017194][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3489.032553][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3489.054580][ T4501] device veth0_vlan entered promiscuous mode [ 3489.086449][ T4501] device veth1_vlan entered promiscuous mode [ 3489.130278][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3489.166958][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3489.191830][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3489.200858][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3489.232604][ T4576] netlink: 'syz.4.23186': attribute type 10 has an invalid length. [ 3489.301194][ T4576] team0: Port device wlan1 added [ 3489.310555][ T4501] device veth0_macvtap entered promiscuous mode [ 3489.353319][ T4501] device veth1_macvtap entered promiscuous mode [ 3489.390174][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3489.404956][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3489.418000][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3489.425780][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3489.435735][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3489.464013][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3489.483988][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3489.527039][ T4581] netlink: 'syz.0.23188': attribute type 10 has an invalid length. [ 3489.538634][ T4501] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3489.559746][ T4501] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3489.574560][ T4501] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3489.594327][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3489.611498][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3489.714564][ T4501] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3489.725577][ T4501] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3489.736274][ T4501] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3489.745167][ T4501] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3490.029439][ T4586] device syzkaller0 entered promiscuous mode [ 3490.803102][T24656] Bluetooth: hci1: command 0x040f tx timeout [ 3492.689111][ T6736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3492.709317][ T6736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3492.833984][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3492.841573][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3492.879328][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3492.880550][ T4402] Bluetooth: hci1: command 0x0419 tx timeout [ 3492.978945][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3493.168558][ T4607] netlink: 'syz.4.23205': attribute type 10 has an invalid length. [ 3493.253376][ T4609] netlink: 'syz.2.23174': attribute type 10 has an invalid length. [ 3493.421616][ T4609] team0: Port device wlan1 added [ 3493.690058][ T4402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3493.700452][ T4402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3493.708792][ T4402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3493.720462][ T4402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3493.727907][ T4402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3493.735062][ T4402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3494.141154][ T4386] device wlan1 left promiscuous mode [ 3494.161135][ T4386] team0: Port device wlan1 removed [ 3494.404242][ T4613] chnl_net:caif_netlink_parms(): no params data found [ 3494.474649][ T4613] bridge0: port 1(bridge_slave_0) entered blocking state [ 3494.481872][ T4613] bridge0: port 1(bridge_slave_0) entered disabled state [ 3494.491020][ T4613] device bridge_slave_0 entered promiscuous mode [ 3494.522154][ T4613] bridge0: port 2(bridge_slave_1) entered blocking state [ 3494.529528][ T4613] bridge0: port 2(bridge_slave_1) entered disabled state [ 3494.550321][ T4613] device bridge_slave_1 entered promiscuous mode [ 3494.598364][ T4613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3494.611017][ T4613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3494.656734][ T4613] team0: Port device team_slave_0 added [ 3494.693580][ T4613] team0: Port device team_slave_1 added [ 3494.749903][ T4633] netlink: 'syz.4.23200': attribute type 10 has an invalid length. [ 3494.766623][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3494.781735][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3494.808572][ T4613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3494.820925][ T4635] netlink: 'syz.2.23199': attribute type 10 has an invalid length. [ 3494.866766][ T4613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3494.873785][ T4613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3494.903462][ T4613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3494.954400][ T4613] device hsr_slave_0 entered promiscuous mode [ 3494.961852][ T4613] device hsr_slave_1 entered promiscuous mode [ 3494.969990][ T4613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3494.978189][ T4613] Cannot create hsr debugfs directory [ 3495.124337][ T4642] netlink: 763 bytes leftover after parsing attributes in process `syz.2.23203'. [ 3495.315607][ T4647] netlink: 'syz.2.23207': attribute type 10 has an invalid length. [ 3495.331949][ T4648] netlink: 'syz.5.23206': attribute type 10 has an invalid length. [ 3495.526754][ T4613] .a: (slave netdevsim0): Releasing backup interface [ 3495.556660][ T4652] netlink: 'syz.2.23208': attribute type 10 has an invalid length. [ 3495.745370][ T4613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3495.756255][T24656] Bluetooth: hci0: command 0x0409 tx timeout [ 3495.781735][ T4613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3496.015553][ T4613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3496.044915][ T4613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3496.296403][ T4688] syz.2.23225[4688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3496.296496][ T4688] syz.2.23225[4688] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3497.143564][ T4386] device team_slave_1 left promiscuous mode [ 3497.169483][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 3497.239555][ T4386] device team_slave_0 left promiscuous mode [ 3497.249473][ T4386] team0 (unregistering): Port device team_slave_0 removed [ 3497.325429][ T4386] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3497.334566][ T4386] device bond_slave_1 left promiscuous mode [ 3497.402677][ T4386] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3497.412303][ T4386] device bond_slave_0 left promiscuous mode [ 3497.836286][ T4402] Bluetooth: hci0: command 0x041b tx timeout [ 3498.181756][ T4386] bond0 (unregistering): Released all slaves [ 3498.452269][ T4613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3498.494302][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3498.515523][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3498.565579][ T4613] 8021q: adding VLAN 0 to HW filter on device team0 [ 3498.579832][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3498.607901][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3498.621131][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 3498.628318][ T5666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3498.669911][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3498.687877][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3498.701017][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3498.710102][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 3498.717272][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3498.725340][ T4744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23250'. [ 3498.770184][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3498.796707][ T4744] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23250'. [ 3498.819856][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3498.835424][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3498.859264][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3498.870461][ T4754] syz.6.23256[4754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3498.870623][ T4754] syz.6.23256[4754] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3498.894738][ T4613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3498.919005][ T4613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3498.932437][ T4741] netlink: 60 bytes leftover after parsing attributes in process `syz.4.23250'. [ 3498.962302][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3498.978144][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3498.996512][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3499.015665][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3499.036115][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3499.062299][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3499.077329][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3499.129163][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3499.665188][ T4613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3499.683071][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3499.694260][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3499.876068][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3499.884861][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3499.918348][T24656] Bluetooth: hci0: command 0x040f tx timeout [ 3499.930507][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3499.948914][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3499.964617][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3499.978017][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3500.000338][ T4613] device veth0_vlan entered promiscuous mode [ 3500.055748][ T4613] device veth1_vlan entered promiscuous mode [ 3500.138433][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3500.161070][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3500.194540][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3500.218491][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3500.247705][ T4613] device veth0_macvtap entered promiscuous mode [ 3500.277857][ T4613] device veth1_macvtap entered promiscuous mode [ 3500.330680][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3500.365921][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3500.375779][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3500.418753][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3500.430291][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3501.029810][ T4816] macvtap0: refused to change device tx_queue_len [ 3501.050414][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3501.073051][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3501.134127][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3501.150053][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3501.165894][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3501.181453][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3501.206679][ T4613] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3501.224967][ T4613] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3501.238112][ T4613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3501.250305][ T4826] netlink: 'syz.5.23287': attribute type 10 has an invalid length. [ 3501.276149][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3501.317032][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3501.365686][ T4613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3501.380374][ T4613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3501.402146][ T4613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3501.419984][ T4613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3501.459487][ T4833] device wg2 entered promiscuous mode [ 3501.531583][ T4847] netlink: 'syz.2.23295': attribute type 1 has an invalid length. [ 3501.566612][ T4847] netlink: 83992 bytes leftover after parsing attributes in process `syz.2.23295'. [ 3501.625069][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3501.645171][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3501.689507][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3501.733774][T16900] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3501.760569][T16900] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3501.812345][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3501.996041][T24656] Bluetooth: hci0: command 0x0419 tx timeout [ 3502.025567][ T4386] device 0 left promiscuous mode [ 3502.725355][ T4402] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 3502.760429][ T4402] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 3502.774744][ T4402] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 3502.782841][ T4402] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 3502.790820][ T4402] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 3502.801691][ T4402] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 3503.011391][ T4888] netlink: 'syz.4.23311': attribute type 10 has an invalid length. [ 3503.051301][ T4888] device veth0_vlan left promiscuous mode [ 3503.079534][ T4888] device veth0_vlan entered promiscuous mode [ 3503.107722][ T4888] team0: Device veth0_vlan failed to register rx_handler [ 3503.954014][ T4876] chnl_net:caif_netlink_parms(): no params data found [ 3504.033698][ T4386] device erspan0 left promiscuous mode [ 3504.041635][ T4386] Ÿë: port 1(erspan0) entered disabled state [ 3504.267002][ T4876] bridge0: port 1(bridge_slave_0) entered blocking state [ 3504.274200][ T4876] bridge0: port 1(bridge_slave_0) entered disabled state [ 3504.282453][ T4876] device bridge_slave_0 entered promiscuous mode [ 3504.323230][ T4876] bridge0: port 2(bridge_slave_1) entered blocking state [ 3504.330734][ T4876] bridge0: port 2(bridge_slave_1) entered disabled state [ 3504.339387][ T4876] device bridge_slave_1 entered promiscuous mode [ 3504.382596][ T4876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3504.424673][ T4876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3504.608014][ T4386] device wlan1 left promiscuous mode [ 3504.619668][ T4386] team0: Port device wlan1 removed [ 3504.674975][ T4876] team0: Port device team_slave_0 added [ 3504.711939][ T4876] team0: Port device team_slave_1 added [ 3504.803270][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3504.818792][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3504.862749][ T4876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3504.884882][ T4402] Bluetooth: hci5: command 0x0409 tx timeout [ 3504.919044][ T4876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3504.938284][ T4876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3505.040760][ T4876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3505.070833][ T4978] netlink: 'syz.5.23349': attribute type 21 has an invalid length. [ 3505.096206][ T4978] netlink: 132 bytes leftover after parsing attributes in process `syz.5.23349'. [ 3505.163309][ T4876] device hsr_slave_0 entered promiscuous mode [ 3505.181192][ T4876] device hsr_slave_1 entered promiscuous mode [ 3505.202312][ T4876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3505.227249][ T4876] Cannot create hsr debugfs directory [ 3505.569707][ T4876] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3505.740209][ T4876] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3505.841447][ T4876] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3506.010992][ T4876] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3506.148113][ T5039] netlink: 'syz.2.23378': attribute type 10 has an invalid length. [ 3506.171435][ T5039] netlink: 168 bytes leftover after parsing attributes in process `syz.2.23378'. [ 3506.248298][ T5039] team0: Port device syz_tun added [ 3506.956622][ T4402] Bluetooth: hci5: command 0x041b tx timeout [ 3509.050815][ T4402] Bluetooth: hci5: command 0x040f tx timeout [ 3510.713109][ T4386] device geneve1 left promiscuous mode [ 3510.721418][ T4386] team0 (unregistering): Port device geneve1 removed [ 3510.833992][ T4386] device hsr_slave_0 left promiscuous mode [ 3510.842900][ T4386] team0 (unregistering): Port device hsr_slave_0 removed [ 3510.935049][ T4386] .a (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3510.989688][ T4386] device team_slave_1 left promiscuous mode [ 3510.998860][ T4386] team0 (unregistering): Port device team_slave_1 removed [ 3511.086541][ T4386] .a (unregistering): (slave bond_slave_1): Releasing backup interface [ 3511.126062][ T4402] Bluetooth: hci5: command 0x0419 tx timeout [ 3511.143329][ T4386] .a (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3511.626761][ T4386] .a (unregistering): Released all slaves [ 3511.667780][ T5075] syzkaller1: tun_chr_ioctl cmd 2147767507 [ 3511.683223][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 3511.690579][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 3511.720633][ T5116] device bridge_slave_1 left promiscuous mode [ 3511.728579][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 3511.736706][ T5116] device bridge_slave_0 left promiscuous mode [ 3511.743410][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 3511.809586][ T5122] netlink: 'syz.5.23413': attribute type 21 has an invalid length. [ 3511.826182][ T5122] netlink: 'syz.5.23413': attribute type 1 has an invalid length. [ 3511.834157][ T5122] netlink: 144 bytes leftover after parsing attributes in process `syz.5.23413'. [ 3511.874754][ T4876] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 3511.915414][ T4876] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 3511.927996][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3511.934339][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3511.958683][ T4876] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 3511.997695][ T4876] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 3512.127399][ T5140] netlink: 'syz.2.23418': attribute type 16 has an invalid length. [ 3512.135340][ T5140] netlink: 156 bytes leftover after parsing attributes in process `syz.2.23418'. [ 3512.298678][ T4876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3512.363775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3512.387361][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3512.421022][ T4876] 8021q: adding VLAN 0 to HW filter on device team0 [ 3512.436244][ T5150] netlink: 'syz.2.23423': attribute type 13 has an invalid length. [ 3512.454645][ T5150] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.23423'. [ 3512.480855][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3512.508715][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3512.532590][ T6736] bridge0: port 1(bridge_slave_0) entered blocking state [ 3512.539766][ T6736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3512.570348][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3512.593454][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3512.624491][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3512.654439][ T6736] bridge0: port 2(bridge_slave_1) entered blocking state [ 3512.661657][ T6736] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3512.697061][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3512.730482][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3512.780680][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3512.810441][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3512.829475][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3512.850239][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3512.893654][ T4876] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3512.917713][ T4876] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3512.952180][ T5171] netlink: 'syz.0.23432': attribute type 10 has an invalid length. [ 3512.966177][ T5171] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 3512.992700][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3513.009126][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3513.038034][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3513.059087][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3513.086857][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3513.124073][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3513.647886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3513.655403][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3513.698417][ T4876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3514.243438][ T5240] netlink: 'syz.4.23462': attribute type 10 has an invalid length. [ 3514.275028][ T5240] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 3514.768691][ T5261] netlink: 'syz.2.23469': attribute type 10 has an invalid length. [ 3514.793082][ T5261] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 3514.918678][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3514.936684][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3515.036558][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3515.052037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3515.073629][ T4876] device veth0_vlan entered promiscuous mode [ 3515.141410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3515.155112][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3515.243198][ T4876] device veth1_vlan entered promiscuous mode [ 3515.324148][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3515.344164][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3515.376280][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3515.403543][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3515.459525][ T4876] device veth0_macvtap entered promiscuous mode [ 3515.471223][ T4876] device veth1_macvtap entered promiscuous mode [ 3515.571930][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3515.593285][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3515.609344][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3515.620163][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3515.631342][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3515.661551][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3515.680497][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3515.699539][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3515.715507][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3515.723882][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3515.733180][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3515.842107][ T5222] device wlan1 left promiscuous mode [ 3515.864923][ T5222] team0: Port device wlan1 removed [ 3515.893206][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3515.921308][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3515.948492][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3515.969739][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3515.984912][ T4876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3515.996730][ T4876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3516.030878][ T4876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3516.040486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3516.059638][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3516.084778][ T4876] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3516.106667][ T4876] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3516.115414][ T4876] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3516.147448][ T4876] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3516.281973][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3516.301399][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3516.331232][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3516.375438][ T5666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3516.383962][ T5666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3516.412902][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3516.554266][ T5339] netlink: 'syz.6.23304': attribute type 16 has an invalid length. [ 3516.574300][ T5339] netlink: 156 bytes leftover after parsing attributes in process `syz.6.23304'. [ 3516.805072][ T5349] macvtap0: refused to change device tx_queue_len [ 3517.215704][T24656] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 3517.227733][T24656] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 3517.237843][T24656] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 3517.249111][T24656] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 3517.257346][T24656] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 3517.267869][T24656] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 3517.731834][ T5361] chnl_net:caif_netlink_parms(): no params data found [ 3518.039270][ T5361] bridge0: port 1(bridge_slave_0) entered blocking state [ 3518.047133][ T5361] bridge0: port 1(bridge_slave_0) entered disabled state [ 3518.060769][ T5361] device bridge_slave_0 entered promiscuous mode [ 3518.105264][ T5361] bridge0: port 2(bridge_slave_1) entered blocking state [ 3518.136205][ T5361] bridge0: port 2(bridge_slave_1) entered disabled state [ 3518.167631][ T5361] device bridge_slave_1 entered promiscuous mode [ 3518.264886][ T5361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3518.468307][ T5361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3518.564505][ T5222] device hsr_slave_0 left promiscuous mode [ 3518.575882][ T5222] device hsr_slave_1 left promiscuous mode [ 3518.624176][ T5222] device veth1_vlan left promiscuous mode [ 3519.359066][T24656] Bluetooth: hci4: command 0x0409 tx timeout [ 3519.678377][ T5222] .a (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3519.771420][ T5222] device team_slave_1 left promiscuous mode [ 3519.800888][ T5222] team0 (unregistering): Port device team_slave_1 removed [ 3519.898442][ T5222] device team_slave_0 left promiscuous mode [ 3519.911576][ T5222] team0 (unregistering): Port device team_slave_0 removed [ 3519.998030][ T5222] .a (unregistering): (slave bond_slave_1): Releasing backup interface [ 3520.083196][ T5222] .a (unregistering): (slave bond_slave_0): Releasing backup interface [ 3520.863218][ T5222] .a (unregistering): Released all slaves [ 3520.938314][ T5361] team0: Port device team_slave_0 added [ 3520.957884][ T5361] team0: Port device team_slave_1 added [ 3521.058276][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3521.065263][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3521.146357][ T5361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3521.208998][ T5361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3521.245795][ T5361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3521.302566][ T5361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3521.400866][ T5361] device hsr_slave_0 entered promiscuous mode [ 3521.416832][ T5361] device hsr_slave_1 entered promiscuous mode [ 3521.440252][T24656] Bluetooth: hci4: command 0x041b tx timeout [ 3521.460472][ T5361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3521.474023][ T5361] Cannot create hsr debugfs directory [ 3523.515990][T24656] Bluetooth: hci4: command 0x040f tx timeout [ 3523.544895][ T5361] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 3523.600149][ T5222] device 0 left promiscuous mode [ 3523.633458][ T5361] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 3523.661495][ T5361] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 3523.846478][ T5361] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 3524.220127][ T5538] netlink: 'syz.2.23589': attribute type 2 has an invalid length. [ 3524.236317][ T5538] netlink: 51 bytes leftover after parsing attributes in process `syz.2.23589'. [ 3524.504441][ T5361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3524.595842][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3524.622246][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3524.652617][ T5361] 8021q: adding VLAN 0 to HW filter on device team0 [ 3524.727669][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3524.737390][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3524.763401][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 3524.770607][ T5666] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3524.803017][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3524.822223][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3524.847191][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3524.861010][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 3524.868194][ T5666] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3524.895537][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3524.917527][ T5666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3525.011464][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3525.030190][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3525.069198][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3525.097500][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3525.192345][ T5361] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 3525.225920][ T5361] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3525.250553][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3525.278893][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3525.292522][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3525.311801][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3525.325455][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3525.338201][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3525.596014][T24656] Bluetooth: hci4: command 0x0419 tx timeout [ 3525.997792][ T5222] device wlan1 left promiscuous mode [ 3526.035069][ T5222] team0: Port device wlan1 removed [ 3526.160083][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3526.175653][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3526.197213][ T5361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3526.963876][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3526.980306][T15938] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3527.017409][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3527.033275][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3527.065725][ T5361] device veth0_vlan entered promiscuous mode [ 3527.077341][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3527.095504][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3527.111372][ T5361] device veth1_vlan entered promiscuous mode [ 3530.675025][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3530.723184][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3530.737339][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3530.749433][ T5361] device veth0_macvtap entered promiscuous mode [ 3530.767490][ T5361] device veth1_macvtap entered promiscuous mode [ 3530.792116][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3530.836013][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3530.866041][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3530.908069][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3530.935964][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3530.967405][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3530.989706][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3531.010422][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3531.027466][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3531.062475][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3531.100817][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3531.124007][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3531.143324][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3531.153540][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3531.164518][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3531.174454][ T5361] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3531.185022][ T5361] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3531.205495][ T5361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3531.214233][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3531.228455][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3531.249230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3531.263852][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3531.293607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3531.321142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3531.348126][ T5361] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3531.369882][ T5361] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3531.388951][ T5361] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3531.412210][ T5361] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3532.122620][ T5222] device geneve1 left promiscuous mode [ 3532.162665][ T5222] team0 (unregistering): Port device geneve1 removed [ 3532.325390][ T5222] device macvlan1 left promiscuous mode [ 3532.358049][ T5222] team0 (unregistering): Port device macvlan1 removed [ 3532.740026][ T5222] device hsr_slave_0 left promiscuous mode [ 3532.748026][ T5222] team0 (unregistering): Port device hsr_slave_0 removed [ 3532.849109][ T5222] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 3532.904271][ T5222] device team_slave_1 left promiscuous mode [ 3532.911813][ T5222] team0 (unregistering): Port device team_slave_1 removed [ 3533.014430][ T5222] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 3533.081443][ T5222] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 3533.147478][ T5222] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 3533.334458][ T5222] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 3533.768179][ T5222] bond0 (unregistering): Released all slaves [ 3534.001279][ T6736] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3534.033517][ T4386] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3534.041201][ T6736] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3534.055518][ T4386] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3534.062053][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3534.103593][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3534.265804][ T5793] device syzkaller0 entered promiscuous mode [ 3537.682539][ T5812] netlink: 'syz.0.23701': attribute type 2 has an invalid length. [ 3537.690577][ T5812] netlink: 164 bytes leftover after parsing attributes in process `syz.0.23701'. [ 3540.055541][ T5943] netlink: 132 bytes leftover after parsing attributes in process `syz.6.23761'. [ 3541.654143][ T6023] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23800'. [ 3541.676438][ T6023] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23800'. [ 3541.695504][ T6023] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23800'. [ 3541.737444][ T6023] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23800'. [ 3542.111475][ T6050] netlink: 830 bytes leftover after parsing attributes in process `syz.2.23812'. [ 3542.499317][ T6067] netlink: 'syz.0.23820': attribute type 2 has an invalid length. [ 3542.517807][ T6067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23820'. [ 3543.601823][ T6095] Ÿë: port 1(veth0_to_team) entered blocking state [ 3543.646053][ T6095] Ÿë: port 1(veth0_to_team) entered disabled state [ 3543.682066][ T6095] device veth0_to_team entered promiscuous mode [ 3544.506762][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23848'. [ 3544.582876][ T6131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23848'. [ 3544.662375][ T6132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23848'. [ 3544.770580][ T6135] netlink: 60 bytes leftover after parsing attributes in process `syz.2.23848'. [ 3545.623321][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23865'. [ 3545.684471][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23865'. [ 3545.714376][ T6172] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23865'. [ 3545.776917][ T6169] netlink: 60 bytes leftover after parsing attributes in process `syz.0.23865'. [ 3547.034968][T24656] Bluetooth: hci5: Received unexpected HCI Event 0x00 [ 3547.512390][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23906'. [ 3547.559472][ T6261] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23906'. [ 3549.983877][ T6394] __nla_validate_parse: 5 callbacks suppressed [ 3549.983894][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23968'. [ 3550.004935][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23968'. [ 3550.014918][ T6394] netlink: 60 bytes leftover after parsing attributes in process `syz.6.23968'. [ 3550.173747][T24656] Bluetooth: hci5: ISO packet for unknown connection handle 2681 [ 3551.422771][ T6461] netlink: 'syz.2.23999': attribute type 10 has an invalid length. [ 3552.522080][ T6461] team0: Port device netdevsim0 added [ 3554.000878][ T6542] netlink: 'syz.5.24037': attribute type 2 has an invalid length. [ 3554.028759][ T6542] netlink: 51 bytes leftover after parsing attributes in process `syz.5.24037'. [ 3554.263673][ T6549] netlink: 'syz.4.24041': attribute type 10 has an invalid length. [ 3554.353196][ T6549] team0: Port device netdevsim0 added [ 3554.441127][ T6559] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3554.487308][ T6559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3554.894278][ T6581] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 3554.939328][ T6587] netlink: 'syz.5.24059': attribute type 10 has an invalid length. [ 3555.042851][ T6587] device veth0_vlan left promiscuous mode [ 3555.081144][ T6587] device veth0_vlan entered promiscuous mode [ 3555.137944][ T6587] team0: Device veth0_vlan failed to register rx_handler [ 3555.253601][ T6603] device bridge_slave_1 left promiscuous mode [ 3555.300595][ T6603] bridge0: port 2(bridge_slave_1) entered disabled state [ 3555.337702][ T6603] device bridge_slave_0 left promiscuous mode [ 3555.376369][ T6603] bridge0: port 1(bridge_slave_0) entered disabled state [ 3555.783055][ T6625] netlink: 'syz.2.24077': attribute type 10 has an invalid length. [ 3555.802217][ T6625] netlink: 3531 bytes leftover after parsing attributes in process `syz.2.24077'. [ 3556.663741][ T6679] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3556.679747][ T6679] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3557.260631][ T6705] device bridge_slave_1 left promiscuous mode [ 3557.291934][ T6705] bridge0: port 2(bridge_slave_1) entered disabled state [ 3557.337161][ T6705] device bridge_slave_0 left promiscuous mode [ 3557.355369][ T6705] bridge0: port 1(bridge_slave_0) entered disabled state [ 3557.599813][ T6721] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3557.647624][ T6721] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3558.055142][ T6740] netlink: 'syz.6.24126': attribute type 29 has an invalid length. [ 3558.067216][ T6740] netlink: 'syz.6.24126': attribute type 3 has an invalid length. [ 3558.075164][ T6740] netlink: 132 bytes leftover after parsing attributes in process `syz.6.24126'. [ 3558.255828][ T6750] device bridge_slave_1 left promiscuous mode [ 3558.282726][ T6750] bridge0: port 2(bridge_slave_1) entered disabled state [ 3558.331061][ T6750] device bridge_slave_0 left promiscuous mode [ 3558.341276][ T6750] bridge0: port 1(bridge_slave_0) entered disabled state [ 3558.491901][ T6754] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 3558.527988][ T6754] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 3560.346917][ T6870] syz.2.24187[6870] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3563.288000][ T7071] dvmrp1: tun_chr_ioctl cmd 2147767511 [ 3564.662169][ T7150] dvmrp1: tun_chr_ioctl cmd 2147767511 [ 3568.017006][ T7335] cgroup: fork rejected by pids controller in /syz0 [ 3569.248003][ T4402] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 3569.258595][ T4402] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 3569.269586][ T4402] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 3569.283541][ T4402] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 3569.292272][ T4402] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 3569.300864][ T4402] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 3569.949440][ T7392] chnl_net:caif_netlink_parms(): no params data found [ 3570.198688][ T7392] bridge0: port 1(bridge_slave_0) entered blocking state [ 3570.230803][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 3570.252176][ T7392] device bridge_slave_0 entered promiscuous mode [ 3570.300250][ T7392] bridge0: port 2(bridge_slave_1) entered blocking state [ 3570.317283][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 3570.352111][ T7392] device bridge_slave_1 entered promiscuous mode [ 3570.452623][ T7392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3570.470997][ T7392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3570.508749][ T7392] team0: Port device team_slave_0 added [ 3570.525035][ T7392] team0: Port device team_slave_1 added [ 3570.615765][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3570.627741][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3570.669224][ T7392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3570.692514][ T7392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3570.710550][ T7392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3570.765800][ T7392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3570.986468][ T7392] device hsr_slave_0 entered promiscuous mode [ 3571.011798][ T7392] device hsr_slave_1 entered promiscuous mode [ 3571.034795][ T7392] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3571.053342][ T7392] Cannot create hsr debugfs directory [ 3571.340363][ T7392] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3571.356007][ T4402] Bluetooth: hci0: command 0x0409 tx timeout [ 3571.495251][ T7392] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3571.618832][ T7392] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3571.775113][ T7392] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3572.206619][ T7392] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 3572.222956][ T7392] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 3572.268738][ T7392] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 3572.289171][ T7392] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 3572.515532][ T7392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3572.557090][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3572.596705][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3572.630079][ T7392] 8021q: adding VLAN 0 to HW filter on device team0 [ 3572.668408][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3572.686862][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3572.701469][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 3572.708644][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3572.756650][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3572.775542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3572.797834][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3572.817099][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 3572.824245][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3572.843904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 3572.863108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 3572.895595][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 3572.917159][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 3572.941302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 3572.970860][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 3572.983332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3572.995780][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3573.014886][ T7392] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3573.031422][ T7392] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 3573.044353][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 3573.059447][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3573.097122][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3573.358161][ T1274] ieee802154 phy0 wpan0: encryption failed: -22 [ 3573.364493][ T1274] ieee802154 phy1 wpan1: encryption failed: -22 [ 3573.443643][ T4402] Bluetooth: hci0: command 0x041b tx timeout [ 3573.729250][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 3573.743789][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 3573.779008][ T7392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3573.819660][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3573.831953][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3573.890203][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3573.909138][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3573.949593][ T7392] device veth0_vlan entered promiscuous mode [ 3573.958377][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3573.973405][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3574.022623][ T7392] device veth1_vlan entered promiscuous mode [ 3574.047398][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 3574.066873][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 3574.097285][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3574.115713][ T5222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3574.137904][ T7392] device veth0_macvtap entered promiscuous mode [ 3574.154588][ T7392] device veth1_macvtap entered promiscuous mode [ 3574.197763][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3574.229621][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.240001][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3574.250568][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.260485][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3574.271186][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.281029][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3574.291515][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.301369][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 3574.311813][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.322798][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3574.337914][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 3574.346177][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3574.354134][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3574.363248][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3574.380003][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3574.396050][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.415112][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3574.434054][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.444966][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3574.455744][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.491835][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3574.515915][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.536439][ T7392] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3574.554190][ T7392] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3574.580348][ T7392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3574.593132][ T7392] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3574.634399][ T7392] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3574.662017][ T7392] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3574.690609][ T7392] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3574.719984][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3574.740839][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3574.924328][T16900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3574.949800][T16900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3574.996391][ T6736] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 3575.018002][ T6736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3575.039338][ T6736] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3575.050991][T16900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 3575.516092][ T4402] Bluetooth: hci0: command 0x040f tx timeout [ 3575.531204][ T7615] device pim6reg1 entered promiscuous mode [ 3576.865341][ T7658] device pim6reg1 entered promiscuous mode [ 3577.110935][ T7660] syz.4.24543[7660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3577.111031][ T7660] syz.4.24543[7660] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3577.596362][ T4402] Bluetooth: hci0: command 0x0419 tx timeout [ 3579.585832][ T7744] syz.6.24578[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3579.586025][ T7744] syz.6.24578[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3579.631549][ T7744] syz.6.24578[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3579.648595][ T7744] syz.6.24578[7744] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3580.650369][ T7767] device pim6reg1 entered promiscuous mode [ 3581.174610][ T7793] syz.5.24601[7793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3581.174713][ T7793] syz.5.24601[7793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3581.222569][ T7793] syz.5.24601[7793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3581.257737][ T7793] syz.5.24601[7793] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 3581.767788][ T7815] device veth1_macvtap left promiscuous mode [ 3582.932213][ T7845] device pim6reg1 entered promiscuous mode [ 3584.395084][ T7900] device pim6reg1 entered promiscuous mode [ 3586.885305][ T8025] device pim6reg1 entered promiscuous mode [ 3587.727193][ T8071] device pim6reg1 entered promiscuous mode [ 3588.443749][ T8113] device pim6reg1 entered promiscuous mode [ 3588.923220][ T8142] [ 3588.925585][ T8142] ============================================ [ 3588.931724][ T8142] WARNING: possible recursive locking detected [ 3588.937872][ T8142] syzkaller #0 Not tainted [ 3588.942271][ T8142] -------------------------------------------- [ 3588.948413][ T8142] syz.2.24765/8142 is trying to acquire lock: [ 3588.954483][ T8142] ffff88802ff5c238 (&trie->lock){-.-.}-{2:2}, at: trie_delete_elem+0x90/0x690 [ 3588.963759][ T8142] [ 3588.963759][ T8142] but task is already holding lock: [ 3588.971135][ T8142] ffff8880583bea38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 3588.980031][ T8142] [ 3588.980031][ T8142] other info that might help us debug this: [ 3588.988088][ T8142] Possible unsafe locking scenario: [ 3588.988088][ T8142] [ 3588.995537][ T8142] CPU0 [ 3588.998806][ T8142] ---- [ 3589.002077][ T8142] lock(&trie->lock); [ 3589.006173][ T8142] lock(&trie->lock); [ 3589.010232][ T8142] [ 3589.010232][ T8142] *** DEADLOCK *** [ 3589.010232][ T8142] [ 3589.018369][ T8142] May be due to missing lock nesting notation [ 3589.018369][ T8142] [ 3589.026677][ T8142] 3 locks held by syz.2.24765/8142: [ 3589.031857][ T8142] #0: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: bpf_map_update_value+0x375/0x670 [ 3589.041769][ T8142] #1: ffff8880583bea38 (&trie->lock){-.-.}-{2:2}, at: trie_update_elem+0xc4/0xe90 [ 3589.051068][ T8142] #2: ffffffff8cb2aca0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0xf9/0x420 [ 3589.060380][ T8142] [ 3589.060380][ T8142] stack backtrace: [ 3589.066275][ T8142] CPU: 1 PID: 8142 Comm: syz.2.24765 Not tainted syzkaller #0 [ 3589.073719][ T8142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 3589.083912][ T8142] Call Trace: [ 3589.087181][ T8142] [ 3589.090099][ T8142] dump_stack_lvl+0x168/0x22e [ 3589.094776][ T8142] ? show_regs_print_info+0x12/0x12 [ 3589.099969][ T8142] ? load_image+0x3b0/0x3b0 [ 3589.104466][ T8142] __lock_acquire+0x122f/0x7c50 [ 3589.109312][ T8142] ? mark_lock+0x94/0x320 [ 3589.113633][ T8142] ? verify_lock_unused+0x140/0x140 [ 3589.118818][ T8142] ? __lock_acquire+0x12e5/0x7c50 [ 3589.123897][ T8142] ? mark_lock+0x94/0x320 [ 3589.128224][ T8142] lock_acquire+0x1b4/0x490 [ 3589.132716][ T8142] ? trie_delete_elem+0x90/0x690 [ 3589.137752][ T8142] ? read_lock_is_recursive+0x10/0x10 [ 3589.143112][ T8142] ? verify_lock_unused+0x140/0x140 [ 3589.148298][ T8142] _raw_spin_lock_irqsave+0xa4/0xf0 [ 3589.153484][ T8142] ? trie_delete_elem+0x90/0x690 [ 3589.158410][ T8142] ? _raw_spin_lock+0x40/0x40 [ 3589.163076][ T8142] trie_delete_elem+0x90/0x690 [ 3589.167827][ T8142] ? __cant_sleep+0x210/0x210 [ 3589.172492][ T8142] bpf_prog_5186c38a4019a4cb+0x42/0x46 [ 3589.177950][ T8142] bpf_trace_run4+0x1f5/0x420 [ 3589.182618][ T8142] ? bpf_trace_run4+0xf9/0x420 [ 3589.187367][ T8142] ? bpf_trace_run3+0x400/0x400 [ 3589.192208][ T8142] ? percpu_ref_put+0x19/0x180 [ 3589.196962][ T8142] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 3589.202412][ T8142] __alloc_pages+0x49c/0x4e0 [ 3589.206992][ T8142] ? zone_statistics+0x170/0x170 [ 3589.211919][ T8142] ? __lock_acquire+0x7c50/0x7c50 [ 3589.216943][ T8142] ? __rwlock_init+0x140/0x140 [ 3589.221695][ T8142] __kmalloc_large_node+0x8c/0x1e0 [ 3589.226807][ T8142] ? bpf_map_kmalloc_node+0xb8/0x1a0 [ 3589.232080][ T8142] __kmalloc_node+0x10e/0x240 [ 3589.236744][ T8142] ? _raw_spin_lock+0x40/0x40 [ 3589.241411][ T8142] bpf_map_kmalloc_node+0xb8/0x1a0 [ 3589.246506][ T8142] trie_update_elem+0x160/0xe90 [ 3589.251348][ T8142] bpf_map_update_value+0x59e/0x670 [ 3589.256538][ T8142] map_update_elem+0x4d7/0x680 [ 3589.261287][ T8142] __sys_bpf+0x454/0x6d0 [ 3589.265515][ T8142] ? bpf_link_show_fdinfo+0x340/0x340 [ 3589.270877][ T8142] ? lock_chain_count+0x20/0x20 [ 3589.275716][ T8142] __x64_sys_bpf+0x78/0x90 [ 3589.280116][ T8142] do_syscall_64+0x4c/0xa0 [ 3589.284517][ T8142] ? clear_bhb_loop+0x60/0xb0 [ 3589.289178][ T8142] ? clear_bhb_loop+0x60/0xb0 [ 3589.293838][ T8142] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3589.299715][ T8142] RIP: 0033:0x7f093898efc9 [ 3589.304112][ T8142] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 3589.323797][ T8142] RSP: 002b:00007f0939846038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3589.332556][ T8142] RAX: ffffffffffffffda RBX: 00007f0938be5fa0 RCX: 00007f093898efc9 [ 3589.340510][ T8142] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000002 [ 3589.348474][ T8142] RBP: 00007f0938a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 3589.356443][ T8142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3589.364399][ T8142] R13: 00007f0938be6038 R14: 00007f0938be5fa0 R15: 00007ffc07ac6a88 [ 3589.372360][ T8142]