last executing test programs: 5.611082685s ago: executing program 2 (id=7309): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 5.283271321s ago: executing program 2 (id=7311): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffbf, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 5.095632997s ago: executing program 2 (id=7314): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 4.484491556s ago: executing program 2 (id=7321): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 4.030219733s ago: executing program 2 (id=7326): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000280), 0x9) r4 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r6, &(0x7f00000000c0), 0x12) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r8 = openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$cgroup_pressure(r8, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000f9788c80000000000400000018430000ffffffff000000f80000000085100000fdffffff360100002020732500000000002020207b1af8ff00000000bfa1000000000000070143330ea9330ffe32000008000000b703"], &(0x7f0000000600)='GPL\x00', 0x2, 0xa5, &(0x7f0000000540)=""/165, 0x41000, 0x40, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f00000003c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0x3}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r1, r6, r6, r1], &(0x7f00000006c0)=[{0x5, 0x1, 0xf, 0xc}, {0x4, 0x1, 0x10, 0x4}, {0x3, 0x5, 0x0, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x5, 0x3, 0x5, 0x5}, {0x5, 0x5, 0x1, 0x6}, {0x3, 0x2, 0xb, 0x8}], 0x10, 0x5}, 0x94) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) 3.671328062s ago: executing program 2 (id=7330): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000040000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 3.303636272s ago: executing program 1 (id=7339): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.773709465s ago: executing program 0 (id=7334): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.396538946s ago: executing program 3 (id=7335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.395128605s ago: executing program 1 (id=7343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 2.266286036s ago: executing program 0 (id=7336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1.902757385s ago: executing program 1 (id=7337): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1.902057436s ago: executing program 3 (id=7338): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000040000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1.703064452s ago: executing program 0 (id=7340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1.436253403s ago: executing program 3 (id=7341): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xd8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.253530178s ago: executing program 1 (id=7342): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000040000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 1.194178833s ago: executing program 3 (id=7344): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r6) 1.040014176s ago: executing program 3 (id=7345): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000040000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 501.220989ms ago: executing program 1 (id=7346): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, &(0x7f0000000040), 0xcf) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000100)=""/210, 0xd2, 0x0, &(0x7f0000000340)=""/219, 0xdb}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x25, 0x5, 0x5, &(0x7f0000001600)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001640), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f0000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 499.122ms ago: executing program 0 (id=7353): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2a, 0xfffffbff, 0x3, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa9e9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 388.248228ms ago: executing program 3 (id=7347): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b703000000040000850000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) 181.199725ms ago: executing program 0 (id=7348): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r2) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r4) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x401}, 0x48) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r7) 224.27µs ago: executing program 0 (id=7349): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x3c, &(0x7f0000000040), 0xcf) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000100)=""/210, 0xd2, 0x0, &(0x7f0000000340)=""/219, 0xdb}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000015c0)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) socketpair(0x25, 0x5, 0x5, &(0x7f0000001600)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000001640), 0x2, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73f72cc9f0ba1f8483a0000005e1206021f0000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x4004850) 0s ago: executing program 1 (id=7350): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYBLOB="0000000000000000b703000000040000850000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000005c0)=r1, 0x12) syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time_for_children\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x4, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x0, @perf_config_ext={0x3, 0x8001}, 0x0, 0x2e, 0xfffffbff, 0x9, 0x2, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x4004743d, 0x110e22fff6) close(r2) write$cgroup_type(r3, &(0x7f0000000280), 0x9) kernel console output (not intermixed with test programs): tribute type 10 has an invalid length. [ 337.334519][T12602] netlink: 'syz.0.2436': attribute type 10 has an invalid length. [ 337.469302][T12606] netlink: 'syz.2.2438': attribute type 10 has an invalid length. [ 338.334157][T12627] netlink: 'syz.0.2445': attribute type 10 has an invalid length. [ 338.473471][T12631] netlink: 'syz.2.2447': attribute type 10 has an invalid length. [ 338.530787][T12634] netlink: 'syz.1.2448': attribute type 10 has an invalid length. [ 338.782900][T12648] netlink: 'syz.0.2453': attribute type 10 has an invalid length. [ 340.767056][T12727] __nla_validate_parse: 42 callbacks suppressed [ 340.767071][T12727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2482'. [ 340.797692][T12729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2483'. [ 340.801996][T12727] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2482'. [ 340.840389][T12724] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2482'. [ 340.853796][T12729] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2483'. [ 340.864991][T12731] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2482'. [ 340.902125][T12725] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2483'. [ 340.951530][T12732] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2483'. [ 341.312461][T12743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2488'. [ 341.337477][T12743] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2488'. [ 341.367009][T12745] validate_nla: 9 callbacks suppressed [ 341.367043][T12745] netlink: 'syz.3.2489': attribute type 10 has an invalid length. [ 341.680674][T12754] netlink: 'syz.0.2493': attribute type 10 has an invalid length. [ 341.776921][T12757] netlink: 'syz.1.2494': attribute type 10 has an invalid length. [ 341.945633][T12760] netlink: 'syz.0.2495': attribute type 10 has an invalid length. [ 342.089235][T12772] netlink: 'syz.2.2500': attribute type 10 has an invalid length. [ 342.437493][T12782] netlink: 'syz.2.2503': attribute type 10 has an invalid length. [ 342.677015][T12789] netlink: 'syz.1.2506': attribute type 10 has an invalid length. [ 343.033721][T12799] netlink: 'syz.0.2510': attribute type 10 has an invalid length. [ 343.113715][T12803] netlink: 'syz.3.2511': attribute type 10 has an invalid length. [ 343.236997][T12809] netlink: 'syz.1.2513': attribute type 10 has an invalid length. [ 345.823402][T12886] __nla_validate_parse: 50 callbacks suppressed [ 345.823417][T12886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2542'. [ 345.857246][T12886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2542'. [ 345.869654][T12883] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2542'. [ 345.881463][T12888] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2542'. [ 346.098504][T12892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2545'. [ 346.127511][T12892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2545'. [ 346.162441][T12891] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2545'. [ 346.175250][T12895] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2545'. [ 346.212508][T12898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2546'. [ 346.252134][T12898] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2546'. [ 346.371836][T12902] validate_nla: 11 callbacks suppressed [ 346.371881][T12902] netlink: 'syz.1.2548': attribute type 10 has an invalid length. [ 346.735918][T12913] netlink: 'syz.1.2553': attribute type 10 has an invalid length. [ 346.789308][T12915] netlink: 'syz.2.2552': attribute type 10 has an invalid length. [ 346.909747][T12917] netlink: 'syz.3.2554': attribute type 10 has an invalid length. [ 347.675489][T12934] netlink: 'syz.1.2560': attribute type 10 has an invalid length. [ 347.865625][T12942] netlink: 'syz.0.2563': attribute type 10 has an invalid length. [ 347.921140][T12944] netlink: 'syz.1.2564': attribute type 10 has an invalid length. [ 347.948505][T12946] netlink: 'syz.3.2565': attribute type 10 has an invalid length. [ 348.131020][T12951] netlink: 'syz.0.2567': attribute type 10 has an invalid length. [ 348.564562][T12968] netlink: 'syz.3.2573': attribute type 10 has an invalid length. [ 350.844248][T13047] __nla_validate_parse: 38 callbacks suppressed [ 350.844261][T13047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2600'. [ 350.891874][T13047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2600'. [ 350.909172][T13043] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2600'. [ 350.963547][T13047] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2600'. [ 351.428515][T13067] validate_nla: 14 callbacks suppressed [ 351.428549][T13067] netlink: 'syz.0.2610': attribute type 10 has an invalid length. [ 351.530997][T13071] netlink: 'syz.3.2612': attribute type 10 has an invalid length. [ 351.661576][T13080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2613'. [ 351.684595][T13080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2613'. [ 351.714544][T13074] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2613'. [ 351.739631][T13080] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2613'. [ 351.859772][T13085] netlink: 'syz.0.2617': attribute type 10 has an invalid length. [ 352.048476][T13093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2619'. [ 352.083713][T13093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2619'. [ 352.415517][T13100] netlink: 'syz.1.2622': attribute type 10 has an invalid length. [ 352.660791][T13105] netlink: 'syz.0.2624': attribute type 10 has an invalid length. [ 352.915932][T13120] netlink: 'syz.1.2629': attribute type 10 has an invalid length. [ 353.175227][T13132] netlink: 'syz.1.2634': attribute type 10 has an invalid length. [ 353.732272][T13142] netlink: 'syz.1.2638': attribute type 10 has an invalid length. [ 354.009468][T13153] netlink: 'syz.3.2642': attribute type 10 has an invalid length. [ 354.090559][T13156] netlink: 'syz.2.2644': attribute type 10 has an invalid length. [ 355.908709][T13217] __nla_validate_parse: 42 callbacks suppressed [ 355.908725][T13217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2665'. [ 355.976801][T13217] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2665'. [ 356.002538][T13215] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2665'. [ 356.029745][T13221] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2665'. [ 356.475223][T13234] validate_nla: 6 callbacks suppressed [ 356.475255][T13234] netlink: 'syz.1.2672': attribute type 10 has an invalid length. [ 356.587968][T13240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2674'. [ 356.611130][T13240] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2674'. [ 356.629753][T13238] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2674'. [ 356.657988][T13243] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2674'. [ 356.699942][T13245] netlink: 'syz.2.2676': attribute type 10 has an invalid length. [ 356.708810][T13249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2675'. [ 356.740050][T13249] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2675'. [ 357.245866][T13258] netlink: 'syz.2.2680': attribute type 10 has an invalid length. [ 357.594075][T13272] netlink: 'syz.1.2685': attribute type 10 has an invalid length. [ 357.745554][T13277] netlink: 'syz.2.2687': attribute type 10 has an invalid length. [ 358.015864][T13287] netlink: 'syz.1.2691': attribute type 10 has an invalid length. [ 358.649419][T13304] netlink: 'syz.3.2696': attribute type 10 has an invalid length. [ 358.743836][T13308] netlink: 'syz.0.2698': attribute type 10 has an invalid length. [ 358.981333][T13316] netlink: 'syz.3.2701': attribute type 10 has an invalid length. [ 359.571476][T13337] netlink: 'syz.1.2709': attribute type 10 has an invalid length. [ 361.511243][T13397] validate_nla: 5 callbacks suppressed [ 361.511277][T13397] netlink: 'syz.3.2730': attribute type 10 has an invalid length. [ 361.610845][T13403] netlink: 'syz.2.2732': attribute type 10 has an invalid length. [ 361.724695][T13409] netlink: 'syz.0.2735': attribute type 10 has an invalid length. [ 361.764319][T13412] __nla_validate_parse: 42 callbacks suppressed [ 361.764334][T13412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2734'. [ 361.780987][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2733'. [ 361.795220][T13412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2734'. [ 361.814059][T13408] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2734'. [ 361.829249][T13413] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2733'. [ 361.841139][T13412] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2734'. [ 361.870894][T13405] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2733'. [ 361.914172][T13415] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2733'. [ 362.524954][T13436] netlink: 'syz.1.2744': attribute type 10 has an invalid length. [ 362.536227][T13434] netlink: 'syz.2.2743': attribute type 10 has an invalid length. [ 362.635963][T13438] netlink: 'syz.0.2745': attribute type 10 has an invalid length. [ 362.871376][T13451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2749'. [ 362.901529][T13451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2749'. [ 363.446666][T13464] netlink: 'syz.3.2755': attribute type 10 has an invalid length. [ 363.492477][T13466] netlink: 'syz.2.2756': attribute type 10 has an invalid length. [ 363.524890][T13468] netlink: 'syz.0.2757': attribute type 10 has an invalid length. [ 364.241232][T13493] netlink: 'syz.1.2767': attribute type 10 has an invalid length. [ 367.166774][T13580] __nla_validate_parse: 42 callbacks suppressed [ 367.166791][T13580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2798'. [ 367.194526][T13580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2798'. [ 367.205623][T13577] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2798'. [ 367.253802][T13580] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2798'. [ 367.280163][T13585] validate_nla: 6 callbacks suppressed [ 367.280194][T13585] netlink: 'syz.2.2801': attribute type 10 has an invalid length. [ 367.498212][T13592] netlink: 'syz.3.2803': attribute type 10 has an invalid length. [ 367.829440][T13606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2807'. [ 367.847528][T13606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2807'. [ 367.866160][T13602] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2807'. [ 367.877149][T13606] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2807'. [ 367.895328][T13611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2810'. [ 367.914500][T13611] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2810'. [ 368.593835][T13622] netlink: 'syz.3.2813': attribute type 10 has an invalid length. [ 368.626850][T13627] netlink: 'syz.1.2814': attribute type 10 has an invalid length. [ 369.459965][T13645] netlink: 'syz.1.2822': attribute type 10 has an invalid length. [ 369.935980][T13658] netlink: 'syz.3.2827': attribute type 10 has an invalid length. [ 369.966694][T13660] netlink: 'syz.1.2828': attribute type 10 has an invalid length. [ 370.321024][T13674] netlink: 'syz.3.2834': attribute type 10 has an invalid length. [ 370.752944][T13686] netlink: 'syz.2.2838': attribute type 10 has an invalid length. [ 371.018839][T13691] netlink: 'syz.0.2839': attribute type 10 has an invalid length. [ 372.534275][T13744] validate_nla: 4 callbacks suppressed [ 372.534321][T13744] netlink: 'syz.0.2860': attribute type 10 has an invalid length. [ 372.611832][T13747] netlink: 'syz.3.2861': attribute type 10 has an invalid length. [ 372.695531][T13752] __nla_validate_parse: 46 callbacks suppressed [ 372.695547][T13752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2862'. [ 372.718297][T13752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2862'. [ 372.742999][T13750] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2862'. [ 372.767923][T13752] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2862'. [ 372.804642][T13760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2864'. [ 372.813816][T13760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2864'. [ 372.832524][T13754] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2864'. [ 372.850416][T13760] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2864'. [ 373.168749][T13765] netlink: 'syz.3.2868': attribute type 10 has an invalid length. [ 373.402530][T13776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2871'. [ 373.419706][T13776] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2871'. [ 373.494728][T13778] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 373.662434][T13780] netlink: 'syz.2.2874': attribute type 10 has an invalid length. [ 373.945420][T13792] netlink: 'syz.1.2879': attribute type 10 has an invalid length. [ 374.399645][T13808] netlink: 'syz.1.2884': attribute type 10 has an invalid length. [ 374.515574][T13810] netlink: 'syz.2.2885': attribute type 10 has an invalid length. [ 375.432678][T13826] netlink: 'syz.2.2890': attribute type 10 has an invalid length. [ 376.257897][T13849] netlink: 'syz.1.2898': attribute type 10 has an invalid length. [ 377.689908][T13894] validate_nla: 3 callbacks suppressed [ 377.689954][T13894] netlink: 'syz.3.2914': attribute type 10 has an invalid length. [ 378.042609][T13905] __nla_validate_parse: 42 callbacks suppressed [ 378.042625][T13905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2917'. [ 378.101174][T13905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2917'. [ 378.115214][T13899] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2917'. [ 378.136963][T13908] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2917'. [ 378.188515][T13912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2920'. [ 378.207459][T13912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2920'. [ 378.227543][T13911] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2920'. [ 378.239596][T13912] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2920'. [ 378.383277][T13916] netlink: 'syz.1.2922': attribute type 10 has an invalid length. [ 378.728669][T13921] netlink: 'syz.1.2924': attribute type 10 has an invalid length. [ 378.832347][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.842449][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.902365][T13931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2926'. [ 378.912199][T13931] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2926'. [ 379.445691][T13944] netlink: 'syz.1.2932': attribute type 10 has an invalid length. [ 379.531173][T13947] netlink: 'syz.2.2933': attribute type 10 has an invalid length. [ 379.590094][T13951] netlink: 'syz.1.2935': attribute type 10 has an invalid length. [ 380.167565][T13972] netlink: 'syz.2.2943': attribute type 10 has an invalid length. [ 380.294569][T13975] netlink: 'syz.2.2945': attribute type 10 has an invalid length. [ 380.375311][T13977] netlink: 'syz.3.2944': attribute type 10 has an invalid length. [ 381.002234][T13998] netlink: 'syz.2.2954': attribute type 10 has an invalid length. [ 383.075516][T14073] validate_nla: 6 callbacks suppressed [ 383.075559][T14073] netlink: 'syz.3.2981': attribute type 10 has an invalid length. [ 383.277958][T14081] netlink: 'syz.3.2984': attribute type 10 has an invalid length. [ 383.442275][T14092] __nla_validate_parse: 38 callbacks suppressed [ 383.442290][T14092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2987'. [ 383.460617][T14092] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2987'. [ 383.492442][T14088] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2987'. [ 383.532862][T14095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2987'. [ 383.603946][T14101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2990'. [ 383.618760][T14101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2990'. [ 383.629998][T14097] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2990'. [ 383.642695][T14101] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2990'. [ 383.817632][T14103] netlink: 'syz.0.2992': attribute type 10 has an invalid length. [ 384.311893][T14116] netlink: 'syz.3.2997': attribute type 10 has an invalid length. [ 384.609084][T14128] netlink: 'syz.3.3001': attribute type 10 has an invalid length. [ 384.717772][T14134] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3002'. [ 384.747977][T14134] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3002'. [ 385.479490][T14151] netlink: 'syz.1.3009': attribute type 10 has an invalid length. [ 385.629434][T14158] netlink: 'syz.3.3012': attribute type 10 has an invalid length. [ 386.305030][T14180] netlink: 'syz.0.3020': attribute type 10 has an invalid length. [ 386.611246][T14198] netlink: 'syz.0.3024': attribute type 10 has an invalid length. [ 386.654426][T14198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.666351][T14198] team0: Port device bond0 added [ 387.201259][T14218] netlink: 'syz.1.3033': attribute type 10 has an invalid length. [ 388.386422][T14269] validate_nla: 2 callbacks suppressed [ 388.386453][T14269] netlink: 'syz.1.3051': attribute type 10 has an invalid length. [ 388.412538][T14269] bond_slave_1: left promiscuous mode [ 388.581923][T14278] netlink: 'syz.1.3055': attribute type 10 has an invalid length. [ 388.662773][T14285] __nla_validate_parse: 22 callbacks suppressed [ 388.662787][T14285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3057'. [ 388.685510][T14285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3057'. [ 388.696811][T14282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3057'. [ 388.721525][T14285] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3057'. [ 389.311106][T14311] netlink: 'syz.1.3068': attribute type 10 has an invalid length. [ 389.344895][T14312] netlink: 'syz.2.3066': attribute type 10 has an invalid length. [ 389.757407][T14327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3073'. [ 389.766439][T14327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3073'. [ 389.788682][T14326] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3073'. [ 389.806275][T14327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3073'. [ 389.850452][T14333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3074'. [ 389.869752][T14333] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3074'. [ 390.361581][T14343] netlink: 'syz.0.3079': attribute type 10 has an invalid length. [ 390.533290][T14348] netlink: 'syz.1.3081': attribute type 10 has an invalid length. [ 391.311612][T14380] netlink: 'syz.3.3091': attribute type 10 has an invalid length. [ 393.359981][T14463] netlink: 'syz.3.3124': attribute type 10 has an invalid length. [ 393.707144][T14482] netlink: 'syz.0.3129': attribute type 10 has an invalid length. [ 393.826131][T14486] __nla_validate_parse: 30 callbacks suppressed [ 393.826147][T14486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3130'. [ 393.852206][T14486] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3130'. [ 393.903936][T14483] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3130'. [ 393.944461][T14488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3130'. [ 394.339218][T14499] netlink: 'syz.0.3135': attribute type 10 has an invalid length. [ 394.594987][T14508] netlink: 'syz.0.3139': attribute type 10 has an invalid length. [ 394.814207][T14522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3142'. [ 394.827622][T14522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3142'. [ 394.838755][T14518] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3142'. [ 394.850979][T14522] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3142'. [ 395.329058][T14532] netlink: 'syz.2.3147': attribute type 10 has an invalid length. [ 395.360585][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3146'. [ 395.382927][T14535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3146'. [ 395.739151][T14547] netlink: 'syz.0.3151': attribute type 10 has an invalid length. [ 396.425998][T14563] netlink: 'syz.0.3157': attribute type 10 has an invalid length. [ 396.843035][T14581] netlink: 'syz.3.3163': attribute type 10 has an invalid length. [ 396.873972][T14581] bond_slave_0: left promiscuous mode [ 396.888234][T14581] bond_slave_1: left promiscuous mode [ 397.346685][T14598] netlink: 'syz.1.3170': attribute type 10 has an invalid length. [ 397.955820][T14620] netlink: 'syz.0.3175': attribute type 10 has an invalid length. [ 398.077777][T14624] netlink: 'syz.1.3179': attribute type 10 has an invalid length. [ 398.733517][T14652] netlink: 'syz.1.3188': attribute type 10 has an invalid length. [ 398.754685][T14651] netlink: 'syz.0.3189': attribute type 10 has an invalid length. [ 399.167812][T14672] __nla_validate_parse: 34 callbacks suppressed [ 399.167832][T14672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3195'. [ 399.187526][T14672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3195'. [ 399.208569][T14667] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3195'. [ 399.222076][T14672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3195'. [ 399.308009][T14678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3198'. [ 399.317063][T14678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3198'. [ 399.348381][T14674] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3198'. [ 399.369650][T14678] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3198'. [ 399.556461][T14685] netlink: 'syz.0.3200': attribute type 10 has an invalid length. [ 399.884391][T14705] netlink: 'syz.1.3206': attribute type 10 has an invalid length. [ 400.048304][T14712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3209'. [ 400.058273][T14712] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3209'. [ 400.882920][T14741] netlink: 'syz.3.3219': attribute type 10 has an invalid length. [ 401.200671][T14752] bridge0: port 3(team0) entered blocking state [ 401.208921][T14752] bridge0: port 3(team0) entered disabled state [ 401.216864][T14752] team0: entered allmulticast mode [ 401.223161][T14752] team_slave_0: entered allmulticast mode [ 401.233765][T14752] team_slave_1: entered allmulticast mode [ 401.240476][T14752] bond0: entered allmulticast mode [ 401.245851][T14752] bond_slave_1: entered allmulticast mode [ 401.253281][T14752] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 401.265239][T14752] team0: entered promiscuous mode [ 401.270914][T14752] team_slave_0: entered promiscuous mode [ 401.277133][T14752] team_slave_1: entered promiscuous mode [ 401.284487][T14752] bond0: entered promiscuous mode [ 401.291112][T14752] bond_slave_1: entered promiscuous mode [ 401.297481][T14752] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 401.307045][T14752] bridge0: port 3(team0) entered blocking state [ 401.313911][T14752] bridge0: port 3(team0) entered forwarding state [ 401.791718][T14771] netlink: 'syz.3.3231': attribute type 10 has an invalid length. [ 402.407176][T14795] bridge0: port 3(team0) entered blocking state [ 402.419278][T14795] bridge0: port 3(team0) entered disabled state [ 402.429406][T14795] team0: entered allmulticast mode [ 402.434625][T14795] team_slave_0: entered allmulticast mode [ 402.440825][T14795] team_slave_1: entered allmulticast mode [ 402.446710][T14795] bond0: entered allmulticast mode [ 402.452232][T14795] bond_slave_0: entered allmulticast mode [ 402.459401][T14795] bond_slave_1: entered allmulticast mode [ 402.465563][T14795] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 402.491013][T14795] team0: entered promiscuous mode [ 402.496382][T14795] team_slave_0: entered promiscuous mode [ 402.503209][T14795] team_slave_1: entered promiscuous mode [ 402.511604][T14795] bond0: entered promiscuous mode [ 402.524293][T14795] bond_slave_0: entered promiscuous mode [ 402.532273][T14795] bond_slave_1: entered promiscuous mode [ 402.542086][T14795] bridge0: port 3(team0) entered blocking state [ 402.549013][T14795] bridge0: port 3(team0) entered forwarding state [ 404.431358][T14875] __nla_validate_parse: 50 callbacks suppressed [ 404.431374][T14875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3264'. [ 404.469232][T14875] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3264'. [ 404.472543][T14877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3265'. [ 404.499317][T14877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3265'. [ 404.515554][T14870] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3264'. [ 404.578754][T14879] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3264'. [ 404.610280][T14877] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3265'. [ 404.651174][T14874] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3265'. [ 404.958419][T14892] netlink: 'syz.1.3270': attribute type 10 has an invalid length. [ 405.058772][T14905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3274'. [ 405.076353][T14905] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3274'. [ 409.530324][T15057] __nla_validate_parse: 26 callbacks suppressed [ 409.530341][T15057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3327'. [ 409.550104][T15057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3327'. [ 409.560276][T15053] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3327'. [ 409.594623][T15057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3327'. [ 409.792690][T15062] netlink: 'syz.2.3330': attribute type 10 has an invalid length. [ 410.257018][T15089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3340'. [ 410.276439][T15089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3340'. [ 410.292716][T15086] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3340'. [ 410.335165][T15089] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3340'. [ 412.457037][T15177] netlink: 'syz.2.3369': attribute type 10 has an invalid length. [ 412.538597][T15182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3370'. [ 412.562018][T15182] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3370'. [ 413.740113][T15227] netlink: 'syz.2.3386': attribute type 10 has an invalid length. [ 414.047838][T15239] wg2: entered promiscuous mode [ 414.058434][T15239] wg2: entered allmulticast mode [ 414.954814][T15278] wg2: entered promiscuous mode [ 414.974434][T15278] wg2: entered allmulticast mode [ 415.248599][T15293] __nla_validate_parse: 10 callbacks suppressed [ 415.248615][T15293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3406'. [ 415.274987][T15293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3406'. [ 415.285764][T15288] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3406'. [ 415.301742][T15293] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3406'. [ 416.248076][T15337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3421'. [ 416.257096][T15337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3421'. [ 416.270259][T15333] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3421'. [ 416.281311][T15337] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3421'. [ 416.582136][T15352] netlink: 'syz.2.3425': attribute type 10 has an invalid length. [ 416.762312][T15361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3429'. [ 416.776363][T15361] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3429'. [ 418.257788][T15422] wg2: entered promiscuous mode [ 418.266177][T15422] wg2: entered allmulticast mode [ 419.361164][T15478] netlink: 'syz.3.3467': attribute type 10 has an invalid length. [ 420.335659][T15521] __nla_validate_parse: 46 callbacks suppressed [ 420.335675][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3482'. [ 420.338622][T15522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3484'. [ 420.353973][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3482'. [ 420.374909][T15522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3484'. [ 420.390352][T15513] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3482'. [ 420.408764][T15521] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3482'. [ 420.425930][T15516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3484'. [ 420.493721][T15522] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3484'. [ 421.191950][T15547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3493'. [ 421.203001][T15540] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 421.226071][T15547] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3493'. [ 421.335747][T15540] netlink: 'syz.3.3492': attribute type 10 has an invalid length. [ 421.380768][T15540] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 421.397993][T15540] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 421.406882][T15540] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 422.898789][T15608] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 423.117670][T15608] netlink: 'syz.0.3511': attribute type 10 has an invalid length. [ 423.147054][T15608] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 423.155097][T15608] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 423.163621][T15608] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 424.632110][T15670] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 424.716248][T15670] netlink: 'syz.2.3531': attribute type 10 has an invalid length. [ 424.749767][T15670] team0: Port device wlan1 removed [ 424.762764][T15670] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 425.447889][T15707] __nla_validate_parse: 57 callbacks suppressed [ 425.447905][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3545'. [ 425.507858][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3545'. [ 425.537787][T15703] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3545'. [ 425.557832][T15707] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3545'. [ 425.578310][T15712] netlink: 'syz.0.3546': attribute type 10 has an invalid length. [ 425.700480][T15719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3549'. [ 425.718698][T15719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3549'. [ 425.750093][T15716] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3549'. [ 425.798213][T15719] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3549'. [ 425.904980][T15728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3552'. [ 425.937901][T15728] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3552'. [ 426.339559][T15754] netlink: 'syz.1.3558': attribute type 10 has an invalid length. [ 426.852496][T15771] Â: renamed from pim6reg1 [ 427.199812][T15785] netlink: 'syz.1.3572': attribute type 10 has an invalid length. [ 428.227187][T15810] Â: renamed from pim6reg1 [ 428.493352][T15839] netlink: 'syz.0.3588': attribute type 10 has an invalid length. [ 428.729747][T15848] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 428.916805][T15848] netlink: 'syz.1.3593': attribute type 10 has an invalid length. [ 428.953407][T15848] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 429.285302][T15869] netlink: 'syz.0.3600': attribute type 10 has an invalid length. [ 430.016381][T15884] Â: renamed from pim6reg1 [ 430.411268][T15904] netlink: 'syz.1.3614': attribute type 10 has an invalid length. [ 430.449137][T15907] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 430.483089][T15907] __nla_validate_parse: 35 callbacks suppressed [ 430.483105][T15907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3615'. [ 430.536881][T15907] netlink: 'syz.0.3615': attribute type 10 has an invalid length. [ 430.563458][T15915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3617'. [ 430.575047][T15915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3617'. [ 430.595602][T15916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3618'. [ 430.598869][T15910] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3617'. [ 430.622592][T15915] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3617'. [ 430.639224][T15916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3618'. [ 430.657294][T15914] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3618'. [ 430.684571][T15916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3618'. [ 431.118509][T15933] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3623'. [ 431.243270][T15926] Â: renamed from pim6reg1 [ 432.936395][T15975] Â: renamed from pim6reg1 [ 435.192261][T16072] netlink: 'syz.2.3672': attribute type 10 has an invalid length. [ 435.891829][T16096] __nla_validate_parse: 51 callbacks suppressed [ 435.891845][T16096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3682'. [ 435.938947][T16096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3682'. [ 435.962807][T16093] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3682'. [ 435.988425][T16100] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3682'. [ 436.103909][T16102] netlink: 'syz.1.3685': attribute type 10 has an invalid length. [ 436.386210][T16118] netlink: 'syz.3.3688': attribute type 10 has an invalid length. [ 436.399349][T16118] batadv0: left promiscuous mode [ 436.412283][T16118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 436.422239][T16118] batadv0: entered promiscuous mode [ 436.430979][T16118] batadv0: entered allmulticast mode [ 436.439176][T16118] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 436.452892][T16127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3690'. [ 436.473312][T16127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3690'. [ 436.492381][T16122] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3690'. [ 436.497820][T16128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3692'. [ 436.506591][T16127] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3690'. [ 436.528666][T16128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3692'. [ 436.931208][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 436.940811][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 436.970517][T16143] netlink: 'syz.0.3698': attribute type 10 has an invalid length. [ 438.274847][T16188] netlink: 'syz.0.3714': attribute type 10 has an invalid length. [ 438.282860][T16188] batadv0: left promiscuous mode [ 438.291177][T16188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 438.301393][T16188] batadv0: entered promiscuous mode [ 438.306790][T16188] batadv0: entered allmulticast mode [ 438.313545][T16188] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 438.535795][ T11] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 438.545280][ T11] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 439.515591][T16234] netlink: 'syz.1.3736': attribute type 10 has an invalid length. [ 439.538407][T16234] batadv0: left promiscuous mode [ 439.568189][T16234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 439.577292][T16234] team0: Port device batadv0 added [ 440.298174][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.304547][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.455897][T16269] ÿ: renamed from bond_slave_0 [ 440.468742][T16271] netlink: 'syz.3.3748': attribute type 10 has an invalid length. [ 440.486023][T16271] bond0: (slave batadv0): Releasing backup interface [ 440.495655][T16271] batadv0: left promiscuous mode [ 440.501605][T16271] batadv0: left allmulticast mode [ 440.520169][T16271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.528031][T16271] batadv0: entered promiscuous mode [ 440.537912][T16271] batadv0: entered allmulticast mode [ 440.543965][T16271] team0: Port device batadv0 added [ 441.111302][T16289] __nla_validate_parse: 62 callbacks suppressed [ 441.111318][T16289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3754'. [ 441.130541][T16289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3754'. [ 441.152359][T16287] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3754'. [ 441.202487][T16289] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3754'. [ 441.307691][T16295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3758'. [ 441.325727][T16295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3758'. [ 441.358839][T16292] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3758'. [ 441.381421][T16295] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3758'. [ 441.385389][T16296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3759'. [ 441.443014][T16296] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3759'. [ 444.061073][T16380] netlink: 'syz.2.3790': attribute type 10 has an invalid length. [ 444.069381][T16380] batadv0: left promiscuous mode [ 444.079194][T16380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.089190][T16380] team0: Port device batadv0 added [ 444.261146][T16382] netlink: 'syz.3.3793': attribute type 10 has an invalid length. [ 445.016556][T16413] netlink: 'syz.3.3805': attribute type 10 has an invalid length. [ 445.081201][T16419] netlink: 'syz.1.3804': attribute type 10 has an invalid length. [ 445.937563][T16443] netlink: 'syz.2.3816': attribute type 7 has an invalid length. [ 446.268716][T16456] netlink: 'syz.2.3819': attribute type 10 has an invalid length. [ 446.427803][T16461] __nla_validate_parse: 58 callbacks suppressed [ 446.427818][T16461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3822'. [ 446.527472][T16461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3822'. [ 446.558163][T16458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3822'. [ 446.589263][T16468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3823'. [ 446.598544][T16464] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3822'. [ 446.634755][T16468] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3823'. [ 446.645907][T16462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3823'. [ 446.674213][T16471] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3823'. [ 446.692017][T16473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3825'. [ 446.705892][T16473] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3825'. [ 447.263581][T16484] netlink: 'syz.1.3829': attribute type 7 has an invalid length. [ 447.468332][T16494] netlink: 'syz.0.3831': attribute type 10 has an invalid length. [ 448.491265][T16522] netlink: 'syz.2.3843': attribute type 10 has an invalid length. [ 451.521420][T16612] netlink: 'syz.2.3877': attribute type 10 has an invalid length. [ 451.576050][T16612] team0: Port device macvlan1 added [ 451.694559][T16617] __nla_validate_parse: 58 callbacks suppressed [ 451.694574][T16617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3879'. [ 451.747504][T16617] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3879'. [ 451.759353][T16616] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3879'. [ 451.783110][T16623] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3879'. [ 451.812663][T16626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3882'. [ 451.847108][T16626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3882'. [ 451.859649][T16624] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3882'. [ 451.874895][T16626] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3882'. [ 452.300519][T16634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3885'. [ 452.327452][T16634] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3885'. [ 452.906066][T16652] netlink: 'syz.1.3889': attribute type 10 has an invalid length. [ 453.830535][T16686] netlink: 'syz.3.3901': attribute type 10 has an invalid length. [ 455.064050][T16724] netlink: 'syz.1.3914': attribute type 10 has an invalid length. [ 456.699217][T16778] __nla_validate_parse: 50 callbacks suppressed [ 456.699233][T16778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3936'. [ 456.758456][T16778] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3936'. [ 456.796073][T16783] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3936'. [ 456.825034][T16775] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3936'. [ 457.252364][T16800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3942'. [ 457.266552][T16800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3942'. [ 457.296865][T16794] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3942'. [ 457.334567][T16800] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3942'. [ 457.623789][T16810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3947'. [ 457.641292][T16810] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3947'. [ 457.872485][T16815] netlink: 'syz.3.3949': attribute type 10 has an invalid length. [ 458.771531][T16853] netlink: 'syz.1.3961': attribute type 10 has an invalid length. [ 459.220851][T16865] netlink: 'syz.2.3967': attribute type 10 has an invalid length. [ 459.255617][T16865] batman_adv: batadv0: Adding interface: virt_wifi0 [ 459.263768][T16865] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.302999][T16865] batman_adv: batadv0: Interface activated: virt_wifi0 [ 460.178826][T16890] netlink: 'syz.1.3976': attribute type 10 has an invalid length. [ 461.056357][T16923] netlink: 'syz.3.3988': attribute type 10 has an invalid length. [ 461.718897][T16950] __nla_validate_parse: 66 callbacks suppressed [ 461.718931][T16950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3997'. [ 461.981885][T16956] netlink: 'syz.0.3999': attribute type 10 has an invalid length. [ 462.612628][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4008'. [ 462.627006][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4008'. [ 462.639049][T16981] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4008'. [ 462.653224][T16987] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4008'. [ 462.663463][T16988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4010'. [ 462.690509][T16991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4009'. [ 462.703510][T16988] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4010'. [ 462.728683][T16985] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4010'. [ 462.776913][T16991] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4009'. [ 462.833869][T16995] netlink: 'syz.2.4011': attribute type 10 has an invalid length. [ 463.890839][T17027] netlink: 'syz.2.4022': attribute type 10 has an invalid length. [ 465.182188][T17074] netlink: 'syz.2.4040': attribute type 12 has an invalid length. [ 466.031387][T17111] netlink: 'syz.2.4052': attribute type 10 has an invalid length. [ 466.450768][T17123] netlink: 'syz.1.4056': attribute type 12 has an invalid length. [ 467.116601][T17145] __nla_validate_parse: 33 callbacks suppressed [ 467.116616][T17145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4064'. [ 467.137687][T17145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4064'. [ 467.161825][T17142] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4064'. [ 467.211501][T17145] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4064'. [ 467.281753][T17151] veth1_macvtap: entered allmulticast mode [ 467.801638][T17175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4075'. [ 467.817110][T17175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4075'. [ 467.833476][T17169] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4075'. [ 467.863488][T17175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4075'. [ 468.289657][T17187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4080'. [ 468.315715][T17187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4080'. [ 472.667301][T17334] __nla_validate_parse: 38 callbacks suppressed [ 472.716360][T17333] netlink: 'syz.2.4135': attribute type 10 has an invalid length. [ 472.758023][T17334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4134'. [ 472.767746][T17334] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4134'. [ 472.779077][T17330] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4134'. [ 472.790017][T17337] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4134'. [ 473.229464][T17354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4141'. [ 473.242144][T17354] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4141'. [ 473.283846][T17352] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4141'. [ 473.326983][T17355] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4141'. [ 473.429274][T17363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4142'. [ 473.507512][T17363] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4142'. [ 473.791950][T17372] netlink: 'syz.3.4146': attribute type 10 has an invalid length. [ 478.741647][T17562] __nla_validate_parse: 42 callbacks suppressed [ 478.741663][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4211'. [ 478.779918][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4211'. [ 478.803802][T17557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4211'. [ 478.834628][T17562] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4211'. [ 479.403571][T17590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4230'. [ 479.436186][T17590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4230'. [ 479.452456][T17584] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4230'. [ 479.469343][T17590] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4230'. [ 479.723011][T17601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4226'. [ 479.757713][T17601] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4226'. [ 480.546779][T17636] netlink: 'syz.2.4241': attribute type 10 has an invalid length. [ 481.420940][T17669] netlink: 'syz.3.4251': attribute type 10 has an invalid length. [ 482.307068][T17696] netlink: 'syz.1.4261': attribute type 10 has an invalid length. [ 483.143282][T17733] netlink: 'syz.3.4271': attribute type 10 has an invalid length. [ 483.862878][T17761] __nla_validate_parse: 26 callbacks suppressed [ 483.862895][T17761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4280'. [ 483.890254][T17761] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4280'. [ 483.922520][T17754] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4280'. [ 483.941215][T17764] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4280'. [ 483.955282][T17765] netlink: 'syz.2.4283': attribute type 10 has an invalid length. [ 484.815708][T17798] netlink: 'syz.2.4295': attribute type 10 has an invalid length. [ 484.846273][T17802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4294'. [ 484.865367][T17802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4294'. [ 484.879505][T17796] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4294'. [ 484.892924][T17802] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4294'. [ 485.063573][T17812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4299'. [ 485.081593][T17812] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4299'. [ 485.920098][T17847] netlink: 'syz.2.4312': attribute type 10 has an invalid length. [ 487.101930][T17882] netlink: 'syz.3.4325': attribute type 10 has an invalid length. [ 488.074409][T17917] netlink: 'syz.3.4336': attribute type 10 has an invalid length. [ 489.088711][T17952] netlink: 'syz.1.4347': attribute type 10 has an invalid length. [ 489.274156][T17962] __nla_validate_parse: 37 callbacks suppressed [ 489.274171][T17962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4349'. [ 489.295147][T17962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4349'. [ 489.312669][T17957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4349'. [ 489.332841][T17962] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4349'. [ 489.915676][T17988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4359'. [ 489.928331][T17989] netlink: 'syz.3.4358': attribute type 10 has an invalid length. [ 489.937092][T17988] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4359'. [ 489.983887][T17990] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4359'. [ 490.028073][T17982] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4359'. [ 490.223441][T18000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4364'. [ 490.248053][T18000] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4364'. [ 490.974000][T18022] netlink: 'syz.3.4370': attribute type 10 has an invalid length. [ 495.932392][T18210] netlink: 'syz.2.4439': attribute type 10 has an invalid length. [ 496.925972][T18255] netlink: 'syz.2.4454': attribute type 10 has an invalid length. [ 497.640789][T18285] netlink: 'syz.3.4466': attribute type 10 has an invalid length. [ 497.652674][T18291] __nla_validate_parse: 34 callbacks suppressed [ 497.652688][T18291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4465'. [ 497.668823][T18291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4465'. [ 497.698521][T18284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4465'. [ 497.729791][T18291] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4465'. [ 498.683383][T18322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4479'. [ 498.725204][T18322] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4479'. [ 498.776255][T18321] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4479'. [ 498.797561][T18327] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4479'. [ 498.966696][T18337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4483'. [ 498.980686][T18337] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4483'. [ 500.475297][T18387] netlink: 'syz.0.4502': attribute type 10 has an invalid length. [ 501.036963][T18414] netlink: 'syz.3.4512': attribute type 10 has an invalid length. [ 501.711524][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.718016][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.861359][T18442] netlink: 'syz.3.4522': attribute type 10 has an invalid length. [ 502.901044][T18483] __nla_validate_parse: 38 callbacks suppressed [ 502.901059][T18483] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4535'. [ 502.917065][T18483] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4535'. [ 502.928135][T18479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4535'. [ 502.939320][T18483] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4535'. [ 503.299729][T18492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4539'. [ 503.324908][T18492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4539'. [ 503.346779][T18490] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4539'. [ 503.376445][T18492] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4539'. [ 503.688218][T18504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4543'. [ 503.704913][T18504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4543'. [ 507.800294][T18640] netlink: 'syz.1.4592': attribute type 10 has an invalid length. [ 508.838440][T18683] netlink: 'syz.2.4606': attribute type 10 has an invalid length. [ 509.537540][T18718] netlink: 'syz.2.4618': attribute type 10 has an invalid length. [ 509.566207][T18721] __nla_validate_parse: 34 callbacks suppressed [ 509.566223][T18721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4620'. [ 509.587774][T18721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4620'. [ 509.604198][T18717] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4620'. [ 509.619438][T18721] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4620'. [ 510.673647][T18768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4636'. [ 510.683368][T18768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4636'. [ 510.709478][T18762] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4636'. [ 510.739155][T18768] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4636'. [ 511.181663][T18786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4644'. [ 511.200421][T18786] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4644'. [ 514.832463][T18919] __nla_validate_parse: 50 callbacks suppressed [ 514.832475][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4691'. [ 514.847996][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4691'. [ 514.858693][T18918] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4691'. [ 514.871316][T18919] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4691'. [ 515.163899][T18930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4695'. [ 515.173757][T18930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4695'. [ 515.186038][T18927] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4695'. [ 515.199543][T18930] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4695'. [ 515.384323][T18938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4698'. [ 515.393713][T18938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4698'. [ 518.246066][T19023] netlink: 'syz.3.4729': attribute type 10 has an invalid length. [ 519.052621][T19062] netlink: 'syz.0.4741': attribute type 10 has an invalid length. [ 519.929845][T19095] netlink: 'syz.2.4752': attribute type 10 has an invalid length. [ 519.962444][T19096] __nla_validate_parse: 54 callbacks suppressed [ 519.962460][T19096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4753'. [ 519.992111][T19096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4753'. [ 520.006539][T19094] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4753'. [ 520.018555][T19096] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4753'. [ 520.183578][T19106] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4756'. [ 520.225126][T19106] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4756'. [ 520.253988][T19103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4756'. [ 520.266777][T19108] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4756'. [ 520.459197][T19114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4758'. [ 520.468412][T19114] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4758'. [ 523.568571][T19232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 523.692995][T19238] netlink: 'syz.0.4803': attribute type 10 has an invalid length. [ 524.531626][T19272] netlink: 'syz.1.4815': attribute type 10 has an invalid length. [ 525.385053][T19306] netlink: 'syz.2.4828': attribute type 10 has an invalid length. [ 525.422382][T19310] __nla_validate_parse: 50 callbacks suppressed [ 525.422398][T19310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4829'. [ 525.441768][T19310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4829'. [ 525.453362][T19308] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4829'. [ 525.469356][T19310] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4829'. [ 525.488821][T19315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4830'. [ 525.504887][T19315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4830'. [ 525.515570][T19312] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4830'. [ 525.527101][T19315] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4830'. [ 525.699828][T19320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4832'. [ 525.718035][T19320] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4832'. [ 525.860281][T19324] Driver unsupported XDP return value 0 on prog (id 3852) dev N/A, expect packet loss! [ 526.256068][T19336] netlink: 'syz.2.4839': attribute type 10 has an invalid length. [ 526.943717][T19365] netlink: 'syz.3.4851': attribute type 10 has an invalid length. [ 527.696616][T19399] netlink: 'syz.1.4863': attribute type 10 has an invalid length. [ 529.859604][T19475] netlink: 'syz.3.4892': attribute type 29 has an invalid length. [ 529.877664][T19475] netlink: 'syz.3.4892': attribute type 29 has an invalid length. [ 529.892765][T19475] netlink: 'syz.3.4892': attribute type 29 has an invalid length. [ 529.908121][T19475] netlink: 'syz.3.4892': attribute type 29 has an invalid length. [ 530.042021][T19483] netlink: 'syz.3.4895': attribute type 10 has an invalid length. [ 530.818764][T19503] __nla_validate_parse: 66 callbacks suppressed [ 530.818779][T19503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4900'. [ 530.837611][T19503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4900'. [ 530.851901][T19499] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4900'. [ 530.864209][T19503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4900'. [ 531.038952][T19509] netlink: 'syz.0.4905': attribute type 10 has an invalid length. [ 531.155565][T19522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4907'. [ 531.215943][T19522] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4907'. [ 531.248737][T19517] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4907'. [ 531.262183][T19526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4907'. [ 531.420688][T19532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4911'. [ 531.462291][T19532] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4911'. [ 531.953277][T19553] netlink: 'syz.0.4917': attribute type 10 has an invalid length. [ 532.320669][T19566] netlink: 'syz.1.4924': attribute type 29 has an invalid length. [ 532.329292][T19566] netlink: 'syz.1.4924': attribute type 29 has an invalid length. [ 532.342317][T19566] netlink: 'syz.1.4924': attribute type 29 has an invalid length. [ 532.845421][T19589] bond0: (slave netdevsim0): Releasing backup interface [ 532.856884][T19589] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 532.865982][T19589] batman_adv: batadv0: Adding interface: netdevsim0 [ 532.873749][T19589] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 532.899782][T19589] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 533.431813][T19615] bond0: (slave netdevsim0): Releasing backup interface [ 533.460852][T19615] batman_adv: batadv0: Adding interface: netdevsim0 [ 533.474996][T19615] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.509382][T19615] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 534.027800][T19646] bond0: (slave netdevsim0): Releasing backup interface [ 534.036546][T19646] batman_adv: batadv0: Adding interface: netdevsim0 [ 534.045053][T19646] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 534.071116][T19646] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 535.122921][T19675] validate_nla: 12 callbacks suppressed [ 535.122939][T19675] netlink: 'syz.0.4965': attribute type 10 has an invalid length. [ 535.141893][T19675] bond0: (slave netdevsim0): Releasing backup interface [ 535.151054][T19675] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 535.165052][T19675] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 535.174391][T19675] batman_adv: batadv0: Adding interface: netdevsim0 [ 535.187008][T19675] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.217526][T19675] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 535.726886][T19702] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 535.735884][T19702] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 535.751094][T19702] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 535.761324][T19702] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 535.774906][T19702] netlink: 'syz.2.4977': attribute type 29 has an invalid length. [ 535.810998][T19708] netlink: 'syz.0.4980': attribute type 29 has an invalid length. [ 535.827876][T19708] netlink: 'syz.0.4980': attribute type 29 has an invalid length. [ 535.838035][T19708] netlink: 'syz.0.4980': attribute type 29 has an invalid length. [ 535.846555][T19708] netlink: 'syz.0.4980': attribute type 29 has an invalid length. [ 535.996428][T19721] __nla_validate_parse: 46 callbacks suppressed [ 535.996444][T19721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4984'. [ 536.015684][T19721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4984'. [ 536.026768][T19714] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4984'. [ 536.045442][T19721] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4984'. [ 536.139705][T19726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4987'. [ 536.167457][T19726] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4987'. [ 536.191514][T19723] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4987'. [ 536.216831][T19729] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4987'. [ 536.698457][T19744] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.4996'. [ 536.728658][T19747] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4995'. [ 537.043606][ T5790] Bluetooth: hci0: unexpected event 0x3d length: 151 > 14 [ 538.589606][T19840] syz.1.5040[19840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.602211][T19840] syz.1.5040[19840] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 538.837463][ T5790] Bluetooth: hci1: unexpected event 0x3d length: 151 > 14 [ 540.226954][ T5790] Bluetooth: hci3: unexpected event 0x3d length: 151 > 14 [ 540.534287][T19893] validate_nla: 44 callbacks suppressed [ 540.534304][T19893] netlink: 'syz.0.5062': attribute type 29 has an invalid length. [ 540.558935][T19893] netlink: 'syz.0.5062': attribute type 29 has an invalid length. [ 540.574174][T19893] netlink: 'syz.0.5062': attribute type 29 has an invalid length. [ 540.583864][T19893] netlink: 'syz.0.5062': attribute type 29 has an invalid length. [ 540.594559][T19893] netlink: 'syz.0.5062': attribute type 29 has an invalid length. [ 541.799861][ T5790] Bluetooth: hci2: unexpected event 0x3d length: 151 > 14 [ 541.806913][ T5790] Bluetooth: hci0: unexpected event 0x04 length: 15 > 10 [ 542.007075][T19912] syzkaller0: entered promiscuous mode [ 542.021041][T19912] syzkaller0: entered allmulticast mode [ 543.501840][T19919] netlink: 'syz.3.5073': attribute type 25 has an invalid length. [ 543.584105][T19923] netlink: 'syz.1.5074': attribute type 29 has an invalid length. [ 543.595616][T19923] netlink: 'syz.1.5074': attribute type 29 has an invalid length. [ 543.613574][T19923] netlink: 'syz.1.5074': attribute type 29 has an invalid length. [ 543.624557][T19923] netlink: 'syz.1.5074': attribute type 29 has an invalid length. [ 543.877459][ T5790] Bluetooth: hci0: command 0x0406 tx timeout [ 544.592988][T19940] __nla_validate_parse: 34 callbacks suppressed [ 544.593005][T19940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5082'. [ 544.612635][T19940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5082'. [ 544.623355][T19934] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5082'. [ 544.642310][T19940] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5082'. [ 545.545431][T19985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5101'. [ 545.555013][T19985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5101'. [ 545.565626][T19979] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5101'. [ 545.577274][T19985] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5101'. [ 545.756690][T19988] validate_nla: 3 callbacks suppressed [ 545.756721][T19988] netlink: 'syz.2.5104': attribute type 10 has an invalid length. [ 546.022697][T19996] netlink: 'syz.2.5114': attribute type 10 has an invalid length. [ 546.377809][T20021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5115'. [ 546.386991][T20021] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5115'. [ 546.796566][T20034] syzkaller0: entered promiscuous mode [ 546.810977][T20034] syzkaller0: entered allmulticast mode [ 548.803924][T20059] syz.3.5131[20059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 548.804333][T20059] syz.3.5131[20059] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 549.422792][T20082] syzkaller0: entered promiscuous mode [ 549.445621][T20082] syzkaller0: entered allmulticast mode [ 549.453220][T20085] netlink: 'syz.1.5142': attribute type 12 has an invalid length. [ 550.940458][T20091] __nla_validate_parse: 15 callbacks suppressed [ 550.940475][T20091] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5143'. [ 551.121167][T20098] syz.0.5146[20098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.121328][T20098] syz.0.5146[20098] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 551.379133][T20108] netlink: 'syz.2.5149': attribute type 10 has an invalid length. [ 551.532064][T20116] netlink: 168 bytes leftover after parsing attributes in process `syz.2.5154'. [ 551.541553][T20117] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5153'. [ 551.592418][T20119] syzkaller0: entered promiscuous mode [ 551.601260][T20119] syzkaller0: entered allmulticast mode [ 553.477280][T20135] syz.1.5160[20135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.478428][T20135] syz.1.5160[20135] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 553.678763][T20144] netlink: 'syz.2.5162': attribute type 10 has an invalid length. [ 553.740459][T20148] netlink: 168 bytes leftover after parsing attributes in process `syz.3.5164'. [ 553.872565][ T5790] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 555.492030][T20170] netlink: 'syz.1.5172': attribute type 1 has an invalid length. [ 555.514219][T20170] netlink: 'syz.1.5172': attribute type 4 has an invalid length. [ 555.523415][T20170] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5172'. [ 555.694119][T20179] netlink: 'syz.0.5176': attribute type 10 has an invalid length. [ 555.776123][T20182] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.912051][T20190] sctp: [Deprecated]: syz.0.5180 (pid 20190) Use of int in maxseg socket option. [ 555.912051][T20190] Use struct sctp_assoc_value instead [ 558.973578][T20203] netlink: 'syz.0.5186': attribute type 1 has an invalid length. [ 558.981836][T20203] netlink: 'syz.0.5186': attribute type 4 has an invalid length. [ 558.989948][T20203] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5186'. [ 560.580987][T20211] netlink: 'syz.2.5188': attribute type 10 has an invalid length. [ 561.021432][T20233] netlink: 'syz.3.5195': attribute type 29 has an invalid length. [ 561.038032][T20233] netlink: 'syz.3.5195': attribute type 29 has an invalid length. [ 561.056563][T20233] netlink: 'syz.3.5195': attribute type 29 has an invalid length. [ 561.068190][T20233] netlink: 'syz.3.5195': attribute type 29 has an invalid length. [ 562.488136][T20237] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 562.497806][T20241] netlink: 'syz.3.5198': attribute type 1 has an invalid length. [ 562.505573][T20241] netlink: 'syz.3.5198': attribute type 4 has an invalid length. [ 562.513822][T20241] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5198'. [ 562.662521][T20245] netlink: 'syz.3.5200': attribute type 10 has an invalid length. [ 563.151617][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.159227][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.426249][T20265] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.622223][T20277] netlink: 'syz.2.5211': attribute type 10 has an invalid length. [ 566.565241][T20307] netlink: 'syz.2.5221': attribute type 10 has an invalid length. [ 566.645362][T20313] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.812642][T20321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5225'. [ 566.822185][T20321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5225'. [ 566.832776][T20319] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5225'. [ 566.843341][T20321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5225'. [ 569.356917][T20337] netlink: 'syz.0.5232': attribute type 10 has an invalid length. [ 569.630113][T20349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5234'. [ 569.684855][T20349] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5234'. [ 569.717194][T20343] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5234'. [ 569.737979][T20353] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5234'. [ 569.764082][T20356] bridge_slave_1: left allmulticast mode [ 569.770337][T20356] bridge_slave_1: left promiscuous mode [ 569.776366][T20356] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.793835][T20356] bridge_slave_0: left allmulticast mode [ 569.799718][T20356] bridge_slave_0: left promiscuous mode [ 569.805690][T20356] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.084925][T20370] netlink: 'syz.0.5242': attribute type 10 has an invalid length. [ 571.872789][T20390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5251'. [ 571.884384][T20390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5251'. [ 571.896127][T20386] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5251'. [ 571.917824][T20390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5251'. [ 572.065292][T20394] netlink: 'syz.1.5254': attribute type 10 has an invalid length. [ 575.195848][T20429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5265'. [ 576.540243][T20417] lo: entered allmulticast mode [ 576.549321][T20429] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5265'. [ 576.565955][T20427] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5265'. [ 576.586203][T20430] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5265'. [ 576.679102][T20435] netlink: 'syz.3.5266': attribute type 10 has an invalid length. [ 576.744147][T20437] netlink: 'syz.1.5267': attribute type 4 has an invalid length. [ 576.752999][T20437] netlink: 116 bytes leftover after parsing attributes in process `syz.1.5267'. [ 576.770732][T20437] netlink: 'syz.1.5267': attribute type 2 has an invalid length. [ 576.778988][T20437] netlink: 'syz.1.5267': attribute type 8 has an invalid length. [ 576.786838][T20437] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5267'. [ 577.006366][T20445] syzkaller0: entered promiscuous mode [ 577.012072][T20445] syzkaller0: entered allmulticast mode [ 578.771211][T20469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5277'. [ 580.149492][T20467] netlink: 'syz.3.5278': attribute type 10 has an invalid length. [ 580.160788][T20469] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5277'. [ 580.171483][T20465] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5277'. [ 580.185540][T20470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5277'. [ 580.373449][T20480] team0: left allmulticast mode [ 580.387450][T20480] team_slave_0: left allmulticast mode [ 580.402338][T20480] team_slave_1: left allmulticast mode [ 580.416537][T20480] bond0: left allmulticast mode [ 580.421638][T20480] bond_slave_0: left allmulticast mode [ 580.427138][T20480] bond_slave_1: left allmulticast mode [ 580.433385][T20480] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 580.441272][T20480] batadv0: left allmulticast mode [ 580.446697][T20480] team0: left promiscuous mode [ 580.451756][T20480] team_slave_0: left promiscuous mode [ 580.457558][T20480] team_slave_1: left promiscuous mode [ 580.463146][T20480] bond0: left promiscuous mode [ 580.467992][T20480] bond_slave_0: left promiscuous mode [ 580.473832][T20480] bond_slave_1: left promiscuous mode [ 580.479610][T20480] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 580.486930][T20480] batadv0: left promiscuous mode [ 580.492471][T20480] bridge0: port 3(team0) entered disabled state [ 580.585419][T20480] bridge_slave_1: left allmulticast mode [ 580.594720][T20480] bridge_slave_1: left promiscuous mode [ 580.600938][T20480] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.611663][T20480] bridge_slave_0: left allmulticast mode [ 580.619060][T20480] bridge_slave_0: left promiscuous mode [ 580.624810][T20480] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.795184][T20490] syzkaller0: entered promiscuous mode [ 580.802911][T20490] syzkaller0: entered allmulticast mode [ 581.110132][T20497] team0: left allmulticast mode [ 581.115168][T20497] team_slave_0: left allmulticast mode [ 581.120921][T20497] team_slave_1: left allmulticast mode [ 581.126434][T20497] bond0: left allmulticast mode [ 581.131792][T20497] bond_slave_1: left allmulticast mode [ 581.137622][T20497] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 581.144540][T20497] batadv0: left allmulticast mode [ 581.155125][T20497] team0: left promiscuous mode [ 581.163353][T20497] team_slave_0: left promiscuous mode [ 581.178662][T20497] team_slave_1: left promiscuous mode [ 581.186869][T20497] bond0: left promiscuous mode [ 581.214299][T20497] bond_slave_1: left promiscuous mode [ 581.220422][T20497] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 581.227728][T20497] batadv0: left promiscuous mode [ 581.233886][T20497] bridge0: port 3(team0) entered disabled state [ 581.261979][T20497] bridge_slave_1: left allmulticast mode [ 581.280626][T20497] bridge_slave_1: left promiscuous mode [ 581.307745][T20497] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.347223][T20497] bridge_slave_0: left allmulticast mode [ 581.364030][T20497] bridge_slave_0: left promiscuous mode [ 581.379967][T20497] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.531418][T20508] netlink: 'syz.2.5289': attribute type 4 has an invalid length. [ 581.543486][T20508] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5289'. [ 581.575375][T20503] netlink: 'syz.3.5288': attribute type 10 has an invalid length. [ 581.598851][T20511] netlink: 'syz.2.5289': attribute type 2 has an invalid length. [ 581.617830][T20511] netlink: 'syz.2.5289': attribute type 8 has an invalid length. [ 581.635278][T20511] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5289'. [ 581.743593][T20521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5291'. [ 581.772775][T20521] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5291'. [ 581.806150][T20516] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5291'. [ 581.880607][T20524] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5291'. [ 582.370492][T20544] netlink: 'syz.0.5301': attribute type 10 has an invalid length. [ 582.478327][T20551] netlink: 'syz.0.5304': attribute type 4 has an invalid length. [ 582.507175][T20551] netlink: 'syz.0.5304': attribute type 2 has an invalid length. [ 582.515635][T20551] netlink: 'syz.0.5304': attribute type 8 has an invalid length. [ 583.114737][T20569] netlink: 'syz.0.5312': attribute type 10 has an invalid length. [ 584.036582][T20600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 584.044325][T20600] IPv6: NLM_F_CREATE should be set when creating new route [ 584.051729][T20600] IPv6: NLM_F_CREATE should be set when creating new route [ 584.059063][T20600] IPv6: NLM_F_CREATE should be set when creating new route [ 584.343983][T20618] netlink: 'syz.2.5327': attribute type 10 has an invalid length. [ 584.643696][ T48] syzkaller0: tun_net_xmit 76 [ 584.644056][T20630] syzkaller0: create flow: hash 3090870993 index 1 [ 584.649330][ T48] syzkaller0: tun_net_xmit 48 [ 584.660870][ T6101] syzkaller0: tun_net_xmit 76 [ 584.723469][T20631] netlink: 'syz.0.5340': attribute type 10 has an invalid length. [ 584.733946][T20625] syzkaller0: delete flow: hash 3090870993 index 1 [ 585.185459][T20641] __nla_validate_parse: 11 callbacks suppressed [ 585.185478][T20641] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5336'. [ 586.277006][T20641] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5336'. [ 586.289331][T20640] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5336'. [ 586.312380][T20642] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5336'. [ 586.472300][T20649] syzkaller0: entered allmulticast mode [ 586.490055][T20649] syzkaller0: entered promiscuous mode [ 586.497532][T20649] syzkaller0: left allmulticast mode [ 586.852257][T20664] netlink: 'syz.2.5344': attribute type 10 has an invalid length. [ 586.887085][T20667] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5346'. [ 587.082881][T20676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5350'. [ 587.208668][T20676] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5350'. [ 587.234576][T20675] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5350'. [ 587.266176][T20677] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5350'. [ 587.441833][T20688] syzkaller0: entered allmulticast mode [ 587.473468][T20688] syzkaller0: entered promiscuous mode [ 587.484771][T20688] syzkaller0: left allmulticast mode [ 587.738600][T20693] netlink: 'syz.2.5356': attribute type 10 has an invalid length. [ 587.852555][T20697] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.5358'. [ 589.693276][T20721] syzkaller0: entered allmulticast mode [ 589.802073][T20721] syzkaller0: entered promiscuous mode [ 589.812526][T20721] syzkaller0: left allmulticast mode [ 589.831726][T20730] netlink: 'syz.2.5368': attribute type 10 has an invalid length. [ 590.021788][T20733] netlink: 'syz.0.5377': attribute type 10 has an invalid length. [ 590.251315][T20744] __nla_validate_parse: 4 callbacks suppressed [ 590.251331][T20744] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5370'. [ 590.614324][T20753] netlink: 'syz.0.5372': attribute type 10 has an invalid length. [ 590.637685][T20753] team0: Device ip6_vti0 is of different type [ 590.701236][T20756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5373'. [ 590.732203][T20756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5373'. [ 590.743504][T20755] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5373'. [ 590.761238][T20756] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5373'. [ 591.175126][T20762] syzkaller0: entered promiscuous mode [ 591.193888][T20762] syzkaller0: entered allmulticast mode [ 591.209825][T20768] netlink: 'syz.2.5380': attribute type 10 has an invalid length. [ 593.316769][T20789] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5386'. [ 593.412047][T20794] pim6reg1: entered promiscuous mode [ 593.417528][T20794] pim6reg1: entered allmulticast mode [ 593.440683][T20794] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5388'. [ 593.862798][T20804] netlink: 'syz.0.5390': attribute type 10 has an invalid length. [ 594.939219][T20840] netlink: 'syz.3.5401': attribute type 10 has an invalid length. [ 597.255303][T20883] netlink: 'syz.1.5413': attribute type 10 has an invalid length. [ 598.466212][T20919] netlink: 'syz.1.5425': attribute type 10 has an invalid length. [ 598.951876][T20932] syzkaller0: create flow: hash 3090870993 index 1 [ 600.147707][T20928] syzkaller0: delete flow: hash 3090870993 index 1 [ 601.625067][T20946] netlink: 'syz.0.5436': attribute type 10 has an invalid length. [ 601.804164][T20956] netlink: 'syz.1.5440': attribute type 10 has an invalid length. [ 601.894480][T20956] team0: Port device dummy0 added [ 601.924814][T20953] netlink: 'syz.3.5439': attribute type 9 has an invalid length. [ 601.957953][T20953] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.5439'. [ 602.807070][T20971] netlink: 'syz.2.5445': attribute type 21 has an invalid length. [ 603.087932][T20973] netlink: 'syz.1.5446': attribute type 10 has an invalid length. [ 603.115273][T20973] veth0_vlan: entered allmulticast mode [ 603.239044][T20973] veth0_vlan: left promiscuous mode [ 603.275992][T20973] veth0_vlan: entered promiscuous mode [ 603.301669][T20973] team0: Device veth0_vlan failed to register rx_handler [ 604.434946][T20992] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5453'. [ 604.690195][T20999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5454'. [ 604.712705][T20999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5454'. [ 604.748918][T20998] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5454'. [ 604.770643][T20999] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5454'. [ 605.232408][T21010] pim6reg1: entered promiscuous mode [ 605.238037][T21010] pim6reg1: entered allmulticast mode [ 605.323219][T21010] netlink: 830 bytes leftover after parsing attributes in process `syz.3.5457'. [ 605.456709][ T5790] Bluetooth: hci0: unexpected event 0x14 length: 15 > 6 [ 605.800736][T21023] netlink: 'syz.3.5462': attribute type 10 has an invalid length. [ 605.926186][T21023] veth0_vlan: entered allmulticast mode [ 605.973888][T21023] veth0_vlan: left promiscuous mode [ 606.050753][T21023] veth0_vlan: entered promiscuous mode [ 606.071371][T21023] team0: Device veth0_vlan failed to register rx_handler [ 606.649227][T21030] syz.2.5465 uses obsolete (PF_INET,SOCK_PACKET) [ 607.607910][T21049] pim6reg1: entered promiscuous mode [ 607.633439][T21049] pim6reg1: entered allmulticast mode [ 607.660489][T21049] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5472'. [ 607.863695][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5483'. [ 607.883010][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5483'. [ 607.931487][T21057] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5483'. [ 607.981475][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5483'. [ 608.085715][T21064] netlink: 'syz.2.5476': attribute type 10 has an invalid length. [ 608.859150][T21070] netlink: 'syz.0.5477': attribute type 21 has an invalid length. [ 609.046198][T21076] netlink: 'syz.2.5480': attribute type 9 has an invalid length. [ 609.055134][T21076] netlink: 49779 bytes leftover after parsing attributes in process `syz.2.5480'. [ 609.096688][T21078] sit0: entered allmulticast mode [ 609.129667][T21078] sit0: entered promiscuous mode [ 609.985444][ T5790] Bluetooth: hci2: unexpected event 0x14 length: 15 > 6 [ 610.096029][T21100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5487'. [ 610.125979][T21099] netlink: 'syz.3.5488': attribute type 10 has an invalid length. [ 610.176996][T21100] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5487'. [ 610.249905][T21095] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5487'. [ 610.277654][T21101] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5487'. [ 610.970535][T21118] netlink: 'syz.1.5493': attribute type 9 has an invalid length. [ 611.841548][T21129] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 611.968884][T21133] netlink: 'syz.1.5495': attribute type 21 has an invalid length. [ 612.062102][ T5790] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 612.108642][T21137] netlink: 'syz.0.5499': attribute type 10 has an invalid length. [ 612.618600][T21153] netlink: 'syz.0.5505': attribute type 9 has an invalid length. [ 612.915662][T21162] netlink: 'syz.1.5510': attribute type 10 has an invalid length. [ 613.077199][T21162] bond0: (slave wlan1): Releasing backup interface [ 613.207305][T21162] team0: Port device wlan1 added [ 613.226601][T21168] netlink: 'syz.2.5512': attribute type 10 has an invalid length. [ 613.516097][T21173] __nla_validate_parse: 10 callbacks suppressed [ 613.516113][T21173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5513'. [ 613.537060][T21173] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5513'. [ 613.546477][T21174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5514'. [ 613.562664][T21174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5514'. [ 613.572228][T21172] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5513'. [ 613.618110][T21176] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5513'. [ 613.641509][T21171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5514'. [ 613.660270][T21174] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5514'. [ 613.716722][T21182] netlink: 'syz.2.5523': attribute type 10 has an invalid length. [ 614.069240][T21187] netlink: 'syz.3.5518': attribute type 9 has an invalid length. [ 614.090536][T21187] netlink: 49779 bytes leftover after parsing attributes in process `syz.3.5518'. [ 614.345423][T21194] netlink: 'syz.1.5528': attribute type 1 has an invalid length. [ 614.365718][T21194] netlink: 'syz.1.5528': attribute type 4 has an invalid length. [ 614.374494][T21194] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5528'. [ 614.425736][T21197] netlink: 'syz.2.5520': attribute type 16 has an invalid length. [ 614.447558][T21197] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.502861][T21194] team0: Port device team_slave_0 removed [ 614.542949][T21194] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 614.569189][T21199] netlink: 'syz.3.5519': attribute type 21 has an invalid length. [ 614.656042][T21206] netlink: 'syz.0.5522': attribute type 3 has an invalid length. [ 614.784129][T21204] netlink: 'syz.2.5521': attribute type 10 has an invalid length. [ 614.803895][T21204] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 614.922509][T21204] batman_adv: batadv0: Removing interface: virt_wifi0 [ 615.104626][T21212] netlink: 'syz.0.5525': attribute type 10 has an invalid length. [ 615.716617][T21223] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 616.150207][T21233] veth0_macvtap: left promiscuous mode [ 617.414555][T21260] veth0_vlan: entered allmulticast mode [ 617.446873][T21260] veth0_vlan: left promiscuous mode [ 617.495934][T21260] veth0_vlan: entered promiscuous mode [ 617.546693][T21260] team0: Device veth0_vlan failed to register rx_handler [ 618.213695][T21278] bond0: (slave wlan1): Releasing backup interface [ 618.269922][T21278] team0: Device wlan1 is of different type [ 618.888684][T21298] validate_nla: 7 callbacks suppressed [ 618.888699][T21298] netlink: 'syz.3.5550': attribute type 10 has an invalid length. [ 619.784503][T21301] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 619.810920][T21307] netlink: 'syz.0.5552': attribute type 10 has an invalid length. [ 619.827704][T21307] veth0_vlan: entered allmulticast mode [ 619.854897][T21307] veth0_vlan: left promiscuous mode [ 619.871434][T21307] veth0_vlan: entered promiscuous mode [ 619.896416][T21307] team0: Device veth0_vlan failed to register rx_handler [ 620.206123][T21312] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 620.264954][T21314] netlink: 'syz.3.5555': attribute type 39 has an invalid length. [ 620.350943][T21314] veth0_macvtap: left promiscuous mode [ 620.486202][T21320] netlink: 'syz.2.5558': attribute type 10 has an invalid length. [ 620.539426][T21320] bond0: (slave wlan1): Releasing backup interface [ 620.595153][T21320] team0: Port device wlan1 added [ 621.276561][T21336] __nla_validate_parse: 5 callbacks suppressed [ 621.276578][T21336] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5567'. [ 621.325894][T21338] netlink: 'syz.1.5568': attribute type 3 has an invalid length. [ 621.366931][T21338] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.5568'. [ 622.091451][T21344] netlink: 'syz.0.5570': attribute type 1 has an invalid length. [ 622.107585][T21344] netlink: 'syz.0.5570': attribute type 4 has an invalid length. [ 622.166571][T21344] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.5570'. [ 622.184877][T21348] netlink: 'syz.1.5572': attribute type 39 has an invalid length. [ 622.234773][T21348] veth0_macvtap: left promiscuous mode [ 622.284124][T21352] team0: Port device team_slave_0 removed [ 622.291248][T21352] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 622.308484][T21351] netlink: 'syz.3.5573': attribute type 10 has an invalid length. [ 622.374790][T21351] bond0: (slave wlan1): Releasing backup interface [ 622.454096][T21351] team0: Port device wlan1 added [ 622.549201][ T5790] Bluetooth: hci3: Malformed LE Event: 0x1d [ 622.609934][T21362] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 622.626677][T21362] netlink: 'syz.2.5578': attribute type 10 has an invalid length. [ 622.650931][T21362] team0: Port device wlan1 removed [ 622.670901][T21362] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 623.231295][T21380] veth0_vlan: left promiscuous mode [ 623.241636][T21380] veth0_vlan: entered promiscuous mode [ 623.252043][T21380] team0: Device veth0_vlan failed to register rx_handler [ 623.300916][T21381] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.5584'. [ 623.462595][T21381] team0: Port device team_slave_0 removed [ 623.480987][T21381] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 623.536554][T21387] bond0: (slave wlan1): Releasing backup interface [ 623.579752][ T5790] Bluetooth: hci3: unexpected event 0x1d length: 151 > 5 [ 623.605820][T21387] team0: Port device wlan1 added [ 623.666154][T21381] syz.3.5584 (21381) used greatest stack depth: 18992 bytes left [ 624.025792][T21400] validate_nla: 5 callbacks suppressed [ 624.025829][T21400] netlink: 'syz.1.5592': attribute type 10 has an invalid length. [ 624.351208][T21411] netlink: 'syz.0.5594': attribute type 10 has an invalid length. [ 624.697916][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.704273][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.813647][T21419] wg2: left promiscuous mode [ 624.827598][T21419] wg2: left allmulticast mode [ 625.103748][T21425] netlink: 'syz.2.5599': attribute type 1 has an invalid length. [ 625.199441][T21425] netlink: 'syz.2.5599': attribute type 4 has an invalid length. [ 625.283112][T21425] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.5599'. [ 625.329347][T21427] team0: Port device team_slave_0 removed [ 625.336125][T21427] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 625.582770][T21438] netlink: 'syz.0.5602': attribute type 10 has an invalid length. [ 626.061575][ T5790] Bluetooth: hci0: Malformed LE Event: 0x1d [ 626.111111][T21451] netlink: 'syz.0.5615': attribute type 10 has an invalid length. [ 626.371412][T21461] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5610'. [ 626.449685][T21464] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5608'. [ 626.730731][T21473] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 626.795046][T21473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5612'. [ 626.837887][T21473] netlink: 'syz.0.5612': attribute type 10 has an invalid length. [ 626.862277][T21473] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 626.956921][T21475] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5613'. [ 627.090444][T21484] netlink: 'syz.0.5618': attribute type 10 has an invalid length. [ 627.660032][ T5790] Bluetooth: hci1: Malformed LE Event: 0x1d [ 627.933486][T21511] netlink: 'syz.1.5628': attribute type 10 has an invalid length. [ 628.275015][T21524] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 628.301115][T21524] netlink: 'syz.3.5633': attribute type 10 has an invalid length. [ 628.369041][T21524] team0: Port device wlan1 removed [ 628.398096][T21524] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 628.948048][ T5790] Bluetooth: hci0: unexpected event 0x1d length: 151 > 5 [ 629.562484][T21572] validate_nla: 1 callbacks suppressed [ 629.562500][T21572] netlink: 'syz.0.5657': attribute type 10 has an invalid length. [ 629.595478][T21572] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5657'. [ 629.607545][T21572] team0: entered promiscuous mode [ 629.613676][T21572] team_slave_1: entered promiscuous mode [ 629.619823][T21572] bond0: entered promiscuous mode [ 629.625370][T21572] bond_slave_1: entered promiscuous mode [ 629.632014][T21572] batadv0: entered promiscuous mode [ 629.638354][T21572] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 629.653555][T21569] netlink: 'syz.2.5655': attribute type 10 has an invalid length. [ 629.663114][T21575] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 629.670430][T21575] IPv6: NLM_F_CREATE should be set when creating new route [ 629.961179][ T5790] Bluetooth: hci1: unexpected event 0x1d length: 151 > 5 [ 630.414107][T21598] netlink: 'syz.2.5667': attribute type 10 has an invalid length. [ 630.505346][T21598] team0: Port device wlan1 removed [ 630.525064][T21598] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 630.556071][T21602] netlink: 'syz.3.5668': attribute type 10 has an invalid length. [ 630.747953][T21611] sit0: left promiscuous mode [ 630.881626][T21613] netlink: 'syz.3.5670': attribute type 10 has an invalid length. [ 630.917576][T21613] netlink: 55 bytes leftover after parsing attributes in process `syz.3.5670'. [ 631.649775][T21617] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5673'. [ 631.997853][T21641] netlink: 'syz.1.5680': attribute type 10 has an invalid length. [ 632.129108][T21644] netlink: 'syz.3.5682': attribute type 10 has an invalid length. [ 632.192523][T21648] netlink: 'syz.1.5684': attribute type 10 has an invalid length. [ 632.616300][T21657] netlink: 'syz.0.5688': attribute type 10 has an invalid length. [ 632.644661][T21657] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5688'. [ 632.872336][T21668] netlink: 'syz.3.5692': attribute type 10 has an invalid length. [ 633.941243][T21700] team0: Port device wlan1 removed [ 633.966589][T21700] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 634.804992][T21738] validate_nla: 3 callbacks suppressed [ 634.805009][T21738] netlink: 'syz.3.5717': attribute type 10 has an invalid length. [ 634.878673][T21740] netlink: 'syz.1.5720': attribute type 10 has an invalid length. [ 635.132611][T21752] netlink: 'syz.2.5725': attribute type 10 has an invalid length. [ 635.153218][T21752] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5725'. [ 635.170781][T21752] batadv0: entered promiscuous mode [ 635.177104][T21752] batadv0: entered allmulticast mode [ 635.204596][T21752] team0: Port device batadv0 removed [ 635.213106][T21752] bridge0: port 3(batadv0) entered blocking state [ 635.220458][T21752] bridge0: port 3(batadv0) entered disabled state [ 635.234413][T21750] netlink: 'syz.0.5724': attribute type 10 has an invalid length. [ 635.665953][T21264] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 635.675424][T21264] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 635.991896][T21787] netlink: 'syz.2.5738': attribute type 10 has an invalid length. [ 636.547302][T21807] netlink: 'syz.3.5749': attribute type 10 has an invalid length. [ 636.664040][T21815] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5752'. [ 637.305064][T21836] netlink: 'syz.0.5762': attribute type 10 has an invalid length. [ 637.572300][T21854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5769'. [ 637.582374][T21854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5769'. [ 637.594384][T21856] netlink: 'syz.1.5771': attribute type 10 has an invalid length. [ 637.610479][T21856] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5771'. [ 637.621710][T21856] batadv0: entered promiscuous mode [ 637.627159][T21856] batadv0: entered allmulticast mode [ 637.671238][T21856] team0: Port device batadv0 removed [ 637.681259][T21856] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 637.699957][T21852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5769'. [ 637.721696][T21854] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5769'. [ 637.755923][T21860] netlink: 'syz.0.5773': attribute type 29 has an invalid length. [ 637.774621][T21860] netlink: 'syz.0.5773': attribute type 29 has an invalid length. [ 638.286958][T21880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5781'. [ 638.296179][T21880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5781'. [ 638.306889][T21880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5781'. [ 638.317232][T21880] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5781'. [ 638.431743][T21887] batadv0: entered promiscuous mode [ 638.437162][T21887] batadv0: entered allmulticast mode [ 638.446902][T21887] team0: Port device batadv0 removed [ 638.452926][T21887] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 639.229014][T21922] @ÿ: renamed from bond_slave_0 [ 639.863533][T21956] validate_nla: 21 callbacks suppressed [ 639.863565][T21956] netlink: 'syz.1.5813': attribute type 10 has an invalid length. [ 640.412909][T21992] netlink: 'syz.2.5826': attribute type 10 has an invalid length. [ 640.425872][T21991] netlink: 'syz.3.5830': attribute type 4 has an invalid length. [ 640.463126][T21994] netlink: 'syz.0.5829': attribute type 33 has an invalid length. [ 640.594992][T22000] syz.0.5833[22000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 640.595116][T22000] syz.0.5833[22000] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 641.741616][T22021] netlink: 'syz.3.5841': attribute type 10 has an invalid length. [ 642.115730][T22041] netlink: 'syz.0.5852': attribute type 2 has an invalid length. [ 642.123927][T22041] netlink: 'syz.0.5852': attribute type 8 has an invalid length. [ 642.132651][T22041] __nla_validate_parse: 16 callbacks suppressed [ 642.132664][T22041] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5852'. [ 642.638504][T22066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5860'. [ 642.662817][T22066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5860'. [ 642.719171][T22059] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5860'. [ 642.746610][T22070] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5860'. [ 642.912028][T22080] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 642.920335][T22080] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 642.963872][T22080] netlink: 'syz.0.5870': attribute type 29 has an invalid length. [ 642.987650][T22078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5869'. [ 642.999307][T22078] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5869'. [ 643.085465][T22086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5871'. [ 643.094780][T22086] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5871'. [ 643.111423][T22083] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5871'. [ 643.127658][T22088] team0: entered allmulticast mode [ 643.138583][T22088] team_slave_1: entered allmulticast mode [ 643.152522][T22088] bond0: entered allmulticast mode [ 643.167435][T22088] bond_slave_1: entered allmulticast mode [ 643.177415][T22088] batadv0: entered allmulticast mode [ 643.182758][T22088] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 643.198529][T22088] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 643.442364][T22103] sctp: [Deprecated]: syz.3.5879 (pid 22103) Use of int in maxseg socket option. [ 643.442364][T22103] Use struct sctp_assoc_value instead [ 646.648474][T22154] lo: entered allmulticast mode [ 647.543674][T22189] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 647.926572][T22207] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.954220][T22207] bridge0: entered allmulticast mode [ 648.396117][T22227] lo: entered allmulticast mode [ 648.914055][T22247] validate_nla: 6 callbacks suppressed [ 648.914085][T22247] netlink: 'syz.1.5947': attribute type 10 has an invalid length. [ 650.180947][T22268] lo: entered allmulticast mode [ 650.327850][T22275] __nla_validate_parse: 2 callbacks suppressed [ 650.327869][T22275] netlink: 188 bytes leftover after parsing attributes in process `syz.2.5945'. [ 650.514267][T22280] netlink: 152 bytes leftover after parsing attributes in process `syz.2.5948'. [ 650.753983][T22289] netlink: 'syz.3.5952': attribute type 10 has an invalid length. [ 650.927452][T22292] bridge0: port 3(batadv0) entered disabled state [ 651.114730][T22292] bridge_slave_1: left allmulticast mode [ 651.131721][T22292] bridge_slave_1: left promiscuous mode [ 651.160714][T22292] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.184535][T22292] bridge_slave_0: left promiscuous mode [ 651.225040][T22292] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.523345][T22303] netlink: 'syz.3.5960': attribute type 10 has an invalid length. [ 651.536960][T22303] bond0: (slave wlan1): Releasing backup interface [ 651.616847][T22303] team0: Port device wlan1 added [ 652.097885][T22318] netlink: 'syz.2.5964': attribute type 10 has an invalid length. [ 652.327940][T22326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5966'. [ 652.855452][T22326] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5966'. [ 652.866676][T22321] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5966'. [ 652.878383][T22329] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5966'. [ 652.895532][T22334] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5968'. [ 652.943551][T22334] netlink: 'syz.0.5968': attribute type 16 has an invalid length. [ 652.960388][T22334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5968'. [ 652.975685][T22334] bridge_slave_0: entered allmulticast mode [ 653.060244][T22336] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 653.179253][T22344] sit0: entered promiscuous mode [ 654.277782][T22365] Bluetooth: hci2: unexpected event 0x1c length: 151 > 5 [ 655.571580][T22388] netlink: 152 bytes leftover after parsing attributes in process `syz.0.5987'. [ 655.626048][T22394] sit0: left promiscuous mode [ 655.739617][T22396] sit0: entered promiscuous mode [ 656.015091][T22405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5992'. [ 656.027940][ T5790] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 656.037671][ T5790] Bluetooth: hci2: command 0x0406 tx timeout [ 656.571167][T22412] netlink: 'syz.0.5994': attribute type 10 has an invalid length. [ 656.664079][T22412] bond0: (slave wlan1): Releasing backup interface [ 656.687136][T22412] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 656.696153][T22412] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 656.746259][T22412] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 656.757877][T22412] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 656.766682][T22412] team0: Port device wlan1 added [ 657.031957][T22428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5998'. [ 657.049367][T22428] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5998'. [ 657.066223][T22424] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5998'. [ 657.332133][T22434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6001'. [ 657.833845][T22442] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.6004'. [ 657.867934][T22443] sit0: left promiscuous mode [ 658.372025][T22446] sit0: entered promiscuous mode [ 658.462527][T22442] netlink: 'syz.1.6004': attribute type 16 has an invalid length. [ 658.471580][T22442] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6004'. [ 658.486732][T22442] bridge_slave_0: entered allmulticast mode [ 658.632837][ T5790] Bluetooth: hci1: unexpected event 0x1c length: 151 > 5 [ 658.688305][T22458] netlink: 'syz.1.6006': attribute type 10 has an invalid length. [ 658.764791][T22458] bond0: (slave wlan1): Releasing backup interface [ 658.912742][T22458] team0: Port device wlan1 added [ 659.296650][T22473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6011'. [ 659.346803][T22479] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 659.416557][T22479] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6012'. [ 659.458903][T22479] netlink: 'syz.2.6012': attribute type 10 has an invalid length. [ 659.626209][T22491] netlink: 'syz.2.6016': attribute type 16 has an invalid length. [ 659.683279][T22497] netlink: 'syz.0.6017': attribute type 10 has an invalid length. [ 659.786705][ T5790] Bluetooth: hci0: unexpected event 0x1c length: 151 > 5 [ 660.257603][T22510] netlink: 'syz.2.6021': attribute type 10 has an invalid length. [ 660.284546][T22510] bond0: (slave wlan1): Releasing backup interface [ 660.336287][T22510] team0: Port device wlan1 added [ 660.628735][T22525] __nla_validate_parse: 7 callbacks suppressed [ 660.628769][T22525] netlink: 152 bytes leftover after parsing attributes in process `syz.3.6025'. [ 660.667585][T22527] netlink: 'syz.1.6036': attribute type 10 has an invalid length. [ 660.839930][T22532] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.6027'. [ 660.886784][T22532] netlink: 'syz.3.6027': attribute type 16 has an invalid length. [ 660.898727][T22532] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6027'. [ 660.909164][T22532] bridge_slave_0: entered allmulticast mode [ 661.098770][T22544] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6029'. [ 661.127555][T22548] sit0: left promiscuous mode [ 661.317779][T22544] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6029'. [ 661.437631][T22554] sit0: entered promiscuous mode [ 661.513696][T22561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6032'. [ 661.533824][T22543] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6029'. [ 661.599135][T22552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6029'. [ 661.663165][T22561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6032'. [ 661.762515][T22557] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6032'. [ 662.882277][T22586] wg2: left promiscuous mode [ 662.887130][T22586] wg2: left allmulticast mode [ 663.535791][T22598] sit0: left promiscuous mode [ 663.782798][T22598] sit0: entered promiscuous mode [ 663.997933][T22606] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 664.053731][T22606] netlink: 'syz.0.6056': attribute type 10 has an invalid length. [ 664.140488][T22606] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 664.170229][T22606] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 664.235794][T22606] team0: Port device wlan1 removed [ 664.291749][T22606] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 664.359509][T22606] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 664.403786][T22606] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 665.529176][T22653] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 665.588444][T22653] netlink: 'syz.3.6071': attribute type 10 has an invalid length. [ 665.644563][T22653] team0: Port device wlan1 removed [ 665.684370][T22653] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 666.899288][T22686] wg2: left promiscuous mode [ 666.939809][T22686] wg2: left allmulticast mode [ 667.229176][T22702] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 667.242093][T22702] __nla_validate_parse: 15 callbacks suppressed [ 667.242107][T22702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6086'. [ 667.280252][T22702] netlink: 'syz.1.6086': attribute type 10 has an invalid length. [ 667.296612][T22702] team0: Port device wlan1 removed [ 667.315989][T22702] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 668.025923][T22738] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 668.048437][T22738] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6107'. [ 668.069758][T22738] netlink: 'syz.1.6107': attribute type 10 has an invalid length. [ 669.265861][T22797] netlink: 'syz.0.6135': attribute type 10 has an invalid length. [ 669.295581][T22797] macvlan1: entered promiscuous mode [ 669.305732][T22797] macvlan1: entered allmulticast mode [ 669.311625][T22797] veth1_vlan: entered allmulticast mode [ 669.319004][T22797] team0: Port device macvlan1 added [ 670.357006][T22814] netlink: 'syz.0.6142': attribute type 10 has an invalid length. [ 670.436009][T22814] veth1_vlan: left allmulticast mode [ 670.690156][T22830] netlink: 'syz.3.6147': attribute type 10 has an invalid length. [ 670.717267][T22830] team0: Port device macvlan1 added [ 671.588091][T22853] netlink: 'syz.2.6156': attribute type 10 has an invalid length. [ 671.672975][T22863] netlink: 'syz.1.6158': attribute type 10 has an invalid length. [ 671.705304][T22863] team0: Port device macvlan1 added [ 673.121336][T22906] netlink: 'syz.3.6169': attribute type 10 has an invalid length. [ 673.769091][T22914] netlink: 'syz.0.6176': attribute type 10 has an invalid length. [ 674.683079][T22949] netlink: 'syz.1.6188': attribute type 10 has an invalid length. [ 675.208469][T22955] netlink: 'syz.3.6190': attribute type 10 has an invalid length. [ 676.000161][T22985] netlink: 'syz.2.6202': attribute type 10 has an invalid length. [ 676.284967][T22993] netlink: 'syz.0.6212': attribute type 10 has an invalid length. [ 677.416307][T23031] netlink: 'syz.3.6217': attribute type 10 has an invalid length. [ 677.882549][T23044] netlink: 'syz.1.6224': attribute type 10 has an invalid length. [ 678.693331][T23075] veth1_to_bond: entered allmulticast mode [ 679.183303][T23096] netlink: 'syz.3.6240': attribute type 10 has an invalid length. [ 680.293863][T23122] veth1_to_bond: entered allmulticast mode [ 680.618928][T23125] netlink: 'syz.3.6250': attribute type 10 has an invalid length. [ 681.553419][T23165] veth1_to_bond: entered allmulticast mode [ 681.940977][T23179] veth1_to_bond: entered allmulticast mode [ 684.288631][T23246] netlink: 'syz.0.6290': attribute type 10 has an invalid length. [ 685.508371][T23301] netlink: 'syz.2.6306': attribute type 10 has an invalid length. [ 685.738579][T23307] netlink: 'syz.1.6318': attribute type 10 has an invalid length. [ 686.046482][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.057599][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.805138][T23344] netlink: 'syz.2.6322': attribute type 10 has an invalid length. [ 687.713562][T23380] netlink: 'syz.1.6334': attribute type 10 has an invalid length. [ 688.664997][T23417] netlink: 'syz.3.6345': attribute type 10 has an invalid length. [ 688.985640][T23423] netlink: 'syz.0.6355': attribute type 10 has an invalid length. [ 689.916149][T23437] netlink: 'syz.1.6350': attribute type 10 has an invalid length. [ 690.548581][T23460] netlink: 'syz.0.6358': attribute type 10 has an invalid length. [ 691.768228][T23505] netlink: 'syz.1.6369': attribute type 10 has an invalid length. [ 693.130160][T23548] netlink: 'syz.1.6381': attribute type 10 has an invalid length. [ 693.405142][T23562] netlink: 'syz.1.6394': attribute type 10 has an invalid length. [ 694.527746][T23598] netlink: 'syz.2.6397': attribute type 10 has an invalid length. [ 694.583454][T23591] netlink: 'syz.3.6396': attribute type 10 has an invalid length. [ 694.905180][T23606] netlink: 'syz.0.6409': attribute type 10 has an invalid length. [ 695.856598][T23647] netlink: 'syz.2.6412': attribute type 10 has an invalid length. [ 696.000827][T23641] netlink: 'syz.3.6413': attribute type 10 has an invalid length. [ 696.822737][T23684] netlink: 'syz.3.6424': attribute type 10 has an invalid length. [ 697.960997][T23726] netlink: 'syz.3.6434': attribute type 10 has an invalid length. [ 698.996902][T23773] netlink: 'syz.2.6448': attribute type 10 has an invalid length. [ 699.953767][T23807] netlink: 'syz.0.6458': attribute type 10 has an invalid length. [ 700.902049][T23843] netlink: 'syz.3.6470': attribute type 10 has an invalid length. [ 701.646657][T23874] netlink: 'syz.3.6480': attribute type 10 has an invalid length. [ 702.690280][T23918] netlink: 'syz.0.6491': attribute type 10 has an invalid length. [ 705.145028][T24007] netlink: 'syz.1.6519': attribute type 10 has an invalid length. [ 706.084862][T24039] netlink: 'syz.0.6530': attribute type 10 has an invalid length. [ 706.793082][T24070] netlink: 'syz.3.6540': attribute type 10 has an invalid length. [ 707.690264][T24106] netlink: 'syz.1.6551': attribute type 10 has an invalid length. [ 710.474024][T24214] netlink: 'syz.3.6582': attribute type 10 has an invalid length. [ 711.769242][T24235] netlink: 'syz.2.6588': attribute type 10 has an invalid length. [ 712.225087][T24256] netlink: 'syz.1.6593': attribute type 10 has an invalid length. [ 713.792834][T24286] netlink: 'syz.0.6601': attribute type 10 has an invalid length. [ 713.820366][T24300] netlink: 'syz.1.6604': attribute type 10 has an invalid length. [ 715.007617][T24349] netlink: 'syz.0.6613': attribute type 10 has an invalid length. [ 715.293124][T24356] netlink: 'syz.0.6627': attribute type 10 has an invalid length. [ 716.364779][T24394] netlink: 'syz.1.6631': attribute type 10 has an invalid length. [ 717.444105][T24436] netlink: 'syz.2.6642': attribute type 10 has an invalid length. [ 718.315774][T24467] netlink: 'syz.0.6653': attribute type 10 has an invalid length. [ 719.230183][T24506] netlink: 'syz.1.6662': attribute type 10 has an invalid length. [ 720.327303][T24540] netlink: 'syz.1.6674': attribute type 10 has an invalid length. [ 721.272286][T24585] netlink: 'syz.0.6684': attribute type 10 has an invalid length. [ 722.136957][T24623] netlink: 'syz.3.6696': attribute type 10 has an invalid length. [ 723.086828][T24654] netlink: 'syz.0.6707': attribute type 10 has an invalid length. [ 723.985154][T24686] netlink: 'syz.3.6717': attribute type 10 has an invalid length. [ 724.772714][T24721] netlink: 'syz.3.6727': attribute type 10 has an invalid length. [ 725.749134][T24755] netlink: 'syz.3.6738': attribute type 10 has an invalid length. [ 726.616325][T24784] netlink: 'syz.1.6748': attribute type 10 has an invalid length. [ 727.620499][T24819] netlink: 'syz.1.6758': attribute type 10 has an invalid length. [ 728.659236][T24856] netlink: 'syz.1.6770': attribute type 10 has an invalid length. [ 729.527987][T24873] netlink: 'syz.1.6776': attribute type 10 has an invalid length. [ 730.210694][T24903] netlink: 'syz.3.6783': attribute type 10 has an invalid length. [ 730.416102][T24912] netlink: 'syz.1.6793': attribute type 10 has an invalid length. [ 731.135954][T24919] netlink: 'syz.0.6789': attribute type 10 has an invalid length. [ 731.644942][T24948] netlink: 'syz.2.6798': attribute type 10 has an invalid length. [ 736.124378][T25109] netlink: 'syz.2.6846': attribute type 10 has an invalid length. [ 737.132936][T25148] netlink: 'syz.0.6857': attribute type 10 has an invalid length. [ 737.949448][T25169] netlink: 'syz.2.6864': attribute type 10 has an invalid length. [ 739.746576][T25217] netlink: 'syz.1.6877': attribute type 10 has an invalid length. [ 747.471981][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.478454][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.289357][T25550] netlink: 'syz.0.6983': attribute type 10 has an invalid length. [ 753.635792][T25694] netlink: 'syz.2.7016': attribute type 10 has an invalid length. [ 776.643810][T26490] netlink: 'syz.2.7262': attribute type 10 has an invalid length. [ 781.578812][T26678] netlink: 'syz.0.7316': attribute type 10 has an invalid length. [ 783.519618][T22365] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 783.529813][T22365] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 783.540212][T22365] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 783.556529][T22365] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 783.565936][T22365] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 783.574067][T22365] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 783.962316][ T42] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.093676][ T42] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.245041][ T42] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.265101][T26738] chnl_net:caif_netlink_parms(): no params data found [ 784.351672][ T42] batman_adv: batadv0: Removing interface: netdevsim0 [ 784.479416][T26738] bridge0: port 1(bridge_slave_0) entered blocking state [ 784.489002][T26738] bridge0: port 1(bridge_slave_0) entered disabled state [ 784.496266][T26738] bridge_slave_0: entered allmulticast mode [ 784.503717][T26738] bridge_slave_0: entered promiscuous mode [ 784.512774][T26738] bridge0: port 2(bridge_slave_1) entered blocking state [ 784.520604][T26738] bridge0: port 2(bridge_slave_1) entered disabled state [ 784.528197][T26738] bridge_slave_1: entered allmulticast mode [ 784.535583][T26738] bridge_slave_1: entered promiscuous mode [ 784.683728][T26738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.782573][T26738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.904297][T26738] team0: Port device team_slave_0 added [ 785.008985][T26738] team0: Port device team_slave_1 added [ 785.091149][T26738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.119903][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.150639][T26738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.238778][T26738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 785.245775][T26738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.288577][T26738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 785.637766][T22365] Bluetooth: hci4: command tx timeout [ 785.759493][T26738] hsr_slave_0: entered promiscuous mode [ 785.776374][T26738] hsr_slave_1: entered promiscuous mode [ 785.787035][T26738] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 785.804562][T26738] Cannot create hsr debugfs directory [ 785.916688][ T42] GPL: port 1(erspan0) entered disabled state [ 785.964377][ T42] erspan0 (unregistering): left allmulticast mode [ 785.975492][ T42] erspan0 (unregistering): left promiscuous mode [ 785.987927][ T42] GPL: port 1(erspan0) entered disabled state [ 786.081803][T26813] netlink: 'syz.1.7346': attribute type 10 has an invalid length. [ 786.503485][ T42] [ 786.505868][ T42] ====================================================== [ 786.512984][ T42] WARNING: possible circular locking dependency detected [ 786.520036][ T42] 6.6.102-syzkaller #0 Not tainted [ 786.525156][ T42] ------------------------------------------------------ [ 786.532187][ T42] kworker/u4:2/42 is trying to acquire lock: [ 786.538177][ T42] ffff8880783d8d00 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 786.547813][ T42] [ 786.547813][ T42] but task is already holding lock: [ 786.555278][ T42] ffff88801ef78768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 786.565671][ T42] [ 786.565671][ T42] which lock already depends on the new lock. [ 786.565671][ T42] [ 786.576085][ T42] [ 786.576085][ T42] the existing dependency chain (in reverse order) is: [ 786.585113][ T42] [ 786.585113][ T42] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 786.592900][ T42] __mutex_lock+0x129/0xcc0 [ 786.597955][ T42] ieee80211_open+0x144/0x200 [ 786.603180][ T42] __dev_open+0x2bc/0x430 [ 786.608059][ T42] dev_open+0xab/0x170 [ 786.612683][ T42] team_add_slave+0xae7/0x2660 [ 786.618082][ T42] do_setlink+0xe14/0x3fb0 [ 786.623041][ T42] rtnl_newlink+0x175b/0x2020 [ 786.628270][ T42] rtnetlink_rcv_msg+0x7c7/0xf10 [ 786.633843][ T42] netlink_rcv_skb+0x216/0x480 [ 786.639146][ T42] netlink_unicast+0x751/0x8d0 [ 786.644446][ T42] netlink_sendmsg+0x8c1/0xbe0 [ 786.649843][ T42] ____sys_sendmsg+0x5bf/0x950 [ 786.655147][ T42] ___sys_sendmsg+0x220/0x290 [ 786.660368][ T42] __se_sys_sendmsg+0x1a5/0x270 [ 786.665772][ T42] do_syscall_64+0x55/0xb0 [ 786.670736][ T42] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 786.677185][ T42] [ 786.677185][ T42] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 786.685387][ T42] __lock_acquire+0x2ddb/0x7c80 [ 786.690789][ T42] lock_acquire+0x197/0x410 [ 786.695836][ T42] __mutex_lock+0x129/0xcc0 [ 786.700882][ T42] team_del_slave+0x32/0x1c0 [ 786.706010][ T42] team_device_event+0x28d/0xa20 [ 786.711488][ T42] notifier_call_chain+0x197/0x390 [ 786.717139][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 786.724012][ T42] unregister_netdevice_queue+0x324/0x360 [ 786.730279][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 786.736460][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 786.742817][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 786.748735][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 786.754829][ T42] hwsim_exit_net+0x585/0x640 [ 786.760043][ T42] cleanup_net+0x6f4/0xb90 [ 786.764997][ T42] process_scheduled_works+0xa45/0x15b0 [ 786.771087][ T42] worker_thread+0xa55/0xfc0 [ 786.776315][ T42] kthread+0x2fa/0x390 [ 786.781013][ T42] ret_from_fork+0x48/0x80 [ 786.785976][ T42] ret_from_fork_asm+0x11/0x20 [ 786.791286][ T42] [ 786.791286][ T42] other info that might help us debug this: [ 786.791286][ T42] [ 786.801526][ T42] Possible unsafe locking scenario: [ 786.801526][ T42] [ 786.809084][ T42] CPU0 CPU1 [ 786.814462][ T42] ---- ---- [ 786.819845][ T42] lock(&rdev->wiphy.mtx); [ 786.824367][ T42] lock(team->team_lock_key#2); [ 786.831939][ T42] lock(&rdev->wiphy.mtx); [ 786.838984][ T42] lock(team->team_lock_key#2); [ 786.843962][ T42] [ 786.843962][ T42] *** DEADLOCK *** [ 786.843962][ T42] [ 786.852104][ T42] 5 locks held by kworker/u4:2/42: [ 786.857206][ T42] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 786.868083][ T42] #1: ffffc90000b2fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 786.878616][ T42] #2: ffffffff8dfaec50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 786.888038][ T42] #3: ffffffff8dfbba48 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 786.897870][ T42] #4: ffff88801ef78768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 786.908714][ T42] [ 786.908714][ T42] stack backtrace: [ 786.914613][ T42] CPU: 0 PID: 42 Comm: kworker/u4:2 Not tainted 6.6.102-syzkaller #0 [ 786.922673][ T42] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 786.932740][ T42] Workqueue: netns cleanup_net [ 786.937527][ T42] Call Trace: [ 786.940809][ T42] [ 786.943740][ T42] dump_stack_lvl+0x16c/0x230 [ 786.948412][ T42] ? load_image+0x3b0/0x3b0 [ 786.952991][ T42] ? show_regs_print_info+0x20/0x20 [ 786.958199][ T42] ? print_circular_bug+0x12b/0x1a0 [ 786.963407][ T42] check_noncircular+0x2bd/0x3c0 [ 786.968338][ T42] ? print_deadlock_bug+0x5d0/0x5d0 [ 786.973619][ T42] ? lockdep_lock+0xe0/0x220 [ 786.978239][ T42] ? _find_first_zero_bit+0xd3/0x100 [ 786.983557][ T42] __lock_acquire+0x2ddb/0x7c80 [ 786.988432][ T42] ? verify_lock_unused+0x140/0x140 [ 786.993634][ T42] ? perf_trace_lock_acquire+0xfb/0x3e0 [ 786.999185][ T42] ? trace_event_raw_event_lock_acquire+0x2a0/0x2a0 [ 787.005826][ T42] lock_acquire+0x197/0x410 [ 787.010506][ T42] ? team_del_slave+0x32/0x1c0 [ 787.015271][ T42] ? __might_sleep+0xe0/0xe0 [ 787.019872][ T42] ? read_lock_is_recursive+0x20/0x20 [ 787.025255][ T42] __mutex_lock+0x129/0xcc0 [ 787.029778][ T42] ? team_del_slave+0x32/0x1c0 [ 787.034568][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 787.039584][ T42] ? rcu_is_watching+0x15/0xb0 [ 787.044341][ T42] ? trace_contention_end+0x39/0xe0 [ 787.049535][ T42] ? __mutex_lock+0x304/0xcc0 [ 787.054197][ T42] ? team_del_slave+0x32/0x1c0 [ 787.058971][ T42] ? mutex_lock_nested+0x20/0x20 [ 787.063895][ T42] ? bond_netdev_event+0xe1/0xef0 [ 787.068919][ T42] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 787.074582][ T42] ? bond_ipsec_offload_ok+0x410/0x410 [ 787.080042][ T42] team_del_slave+0x32/0x1c0 [ 787.084622][ T42] team_device_event+0x28d/0xa20 [ 787.089645][ T42] notifier_call_chain+0x197/0x390 [ 787.094769][ T42] unregister_netdevice_many_notify+0xf36/0x1810 [ 787.101098][ T42] ? trace_event_raw_event_lock+0x230/0x230 [ 787.106989][ T42] ? unregister_netdevice_many+0x20/0x20 [ 787.112636][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 787.118364][ T42] ? __lock_acquire+0x7c80/0x7c80 [ 787.123402][ T42] unregister_netdevice_queue+0x324/0x360 [ 787.129145][ T42] ? list_netdevice+0x730/0x730 [ 787.134063][ T42] ? kernfs_remove_by_name_ns+0x117/0x150 [ 787.139786][ T42] _cfg80211_unregister_wdev+0x16b/0x580 [ 787.145422][ T42] ieee80211_remove_interfaces+0x496/0x680 [ 787.151240][ T42] ? ieee80211_do_stop+0x1db0/0x1db0 [ 787.156553][ T42] ? rcu_is_watching+0x15/0xb0 [ 787.161342][ T42] ieee80211_unregister_hw+0x5d/0x2a0 [ 787.166710][ T42] mac80211_hwsim_del_radio+0x274/0x450 [ 787.172248][ T42] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 787.177891][ T42] hwsim_exit_net+0x585/0x640 [ 787.182577][ T42] ? hwsim_init_net+0x90/0x90 [ 787.187256][ T42] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 787.193069][ T42] cleanup_net+0x6f4/0xb90 [ 787.197501][ T42] ? ops_free_list+0x3b0/0x3b0 [ 787.202285][ T42] ? _raw_spin_unlock_irq+0x23/0x50 [ 787.207489][ T42] ? process_scheduled_works+0x957/0x15b0 [ 787.213197][ T42] ? process_scheduled_works+0x957/0x15b0 [ 787.218903][ T42] process_scheduled_works+0xa45/0x15b0 [ 787.224444][ T42] ? assign_work+0x400/0x400 [ 787.229041][ T42] ? assign_work+0x39e/0x400 [ 787.233636][ T42] worker_thread+0xa55/0xfc0 [ 787.238241][ T42] kthread+0x2fa/0x390 [ 787.242308][ T42] ? pr_cont_work+0x560/0x560 [ 787.246972][ T42] ? kthread_blkcg+0xd0/0xd0 [ 787.251636][ T42] ret_from_fork+0x48/0x80 [ 787.256065][ T42] ? kthread_blkcg+0xd0/0xd0 [ 787.260676][ T42] ret_from_fork_asm+0x11/0x20 [ 787.265434][ T42] [ 787.279377][ T42] team0: Port device wlan1 removed [ 787.302293][T26827] netlink: 'syz.0.7349': attribute type 10 has an invalid length. [ 787.453707][ T42] hsr_slave_0: left promiscuous mode [ 787.460145][ T42] hsr_slave_1: left promiscuous mode [ 787.466848][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.474732][ T42] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.482752][ T42] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.490458][ T42] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.501156][ T42] veth1_vlan: left promiscuous mode [ 787.722373][T22365] Bluetooth: hci4: command tx timeout [ 789.109767][ T42] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 789.136350][ T42] team0 (unregistering): Port device macvlan1 removed [ 789.265309][ T42] team0 (unregistering): Port device team_slave_1 removed [ 789.322980][ T42] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.443635][ T42] team0 (unregistering): Port device bond0 removed [ 789.555167][ T42] bond0 (unregistering): Released all slaves [ 789.773575][T26738] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 789.797551][T26738] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 789.798972][T22365] Bluetooth: hci4: command tx timeout [ 789.826079][T26738] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 789.839575][T26738] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 789.916321][T26738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 789.934486][T26738] 8021q: adding VLAN 0 to HW filter on device team0 [ 789.945492][T21264] bridge0: port 1(bridge_slave_0) entered blocking state [ 789.952645][T21264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 789.970284][T21264] bridge0: port 2(bridge_slave_1) entered blocking state [ 789.977453][T21264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.149496][T26738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.195244][T26738] veth0_vlan: entered promiscuous mode [ 790.209991][T26738] veth1_vlan: entered promiscuous mode [ 790.243610][T26738] veth0_macvtap: entered promiscuous mode [ 790.254165][T26738] veth1_macvtap: entered promiscuous mode [ 790.274489][T26738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.288306][T26738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.298697][T26738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.310842][T26738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.321221][T26738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 790.332775][T26738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.345935][T26738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 790.364918][T26738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.376063][T26738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.388091][T26738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.399741][T26738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.409905][T26738] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.420397][T26738] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.431614][T26738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.442784][T26738] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.451561][T26738] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.460837][T26738] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.469738][T26738] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.496066][T26738] ieee80211 phy11: Selected rate control algorithm 'minstrel_ht' [ 790.519009][T21264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.520550][T26738] ieee80211 phy12: Selected rate control algorithm 'minstrel_ht' [ 790.530791][T21264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 790.551928][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 790.560629][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 791.877516][T22365] Bluetooth: hci4: command tx timeout