last executing test programs: 4.499543652s ago: executing program 1 (id=1755): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x12, &(0x7f0000000bc0)=ANY=[@ANYBLOB="bf12000000000000b7030000000000007b3ac0ff000000007b3ac8ff000000007b3ad0ff000000007b3ad8ff000000007b3ae0ff000000007b3ae8ff000000007b3af0ff000000007b3af8ff00000000bf21000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1400000076007fe4f427c8fdc600000000000000", 0x14}], 0x1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x6, 0x0, 0x3}]}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="0123456789abcdef0123456789ab", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0x8}, @volatile={0xffffffff, 0x0, 0x0, 0x9, 0x1}]}}, 0x0, 0x32}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x20c0, 0x0) 4.462538793s ago: executing program 3 (id=1756): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80001000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r4, 0x5, 0xb, 0x0, &(0x7f0000000040)="6121eed4cd50bb2b01e841", 0x0, 0x29d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe}, 0x50) socket$kcm(0x10, 0x2, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2100, 0x0) close(r5) socket$kcm(0xa, 0x2, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={&(0x7f0000000000)='./file0\x00', r2, 0x4000, r3}, 0x18) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'veth1_vlan\x00', @random="001000"}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000780df831000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r7}, 0x4) close(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, r1) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x4c01, 0x0) ioctl$TUNATTACHFILTER(r8, 0x401054d5, &(0x7f0000000380)={0x1, &(0x7f0000000240)=[{0x7, 0xd0, 0x2, 0x9}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x11, 0x0, &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.32751718s ago: executing program 3 (id=1757): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffffffffffe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000181100"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90724fc600d0003000a740100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000380)}, {&(0x7f0000001200)="60ea2478db9ca7bb266635ceaf87df84056b7d68659678f7c917742449a417998686af2984aa24ce9b26d38ad3f578a6fd729d1f35b82345a345bb98331c3fa559c9fde4cc2f3d", 0x47}, {&(0x7f0000001280)="e5d8fdc6c45dbdb0e976b5f5af97d4be033ea75afa96f069", 0x18}, {0x0}, {&(0x7f0000001440)="854535e5f3f3ca38ab358b0f45df85f1a6f427e1ed24ffa44ec9e3080ef3ee2cca6c7bc5515a348c9edf72c21bda1403524327389c143044633e62616c07fcffaa4206738e3107ae1f1c1804ae2434c9cb70e3009ef60a8963965b557e8a656b3243bac0b1d82616", 0x68}, {&(0x7f0000001500)}], 0x6}, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.32562672s ago: executing program 1 (id=1765): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6f94f90524fc6010000200d7070000053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152, 0x0, 0x18}, 0x94) 2.845060002s ago: executing program 2 (id=1761): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r0}, 0x94) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, r1}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x200000000000000a, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x3, 0xfffffffffffffd6a, 0x0, 0x0, 0x5b, '\x00', r3, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) (async, rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r4, 0x4030582a, &(0x7f0000000040)) (async) r5 = socket$kcm(0xa, 0x5, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) (async) close(0x3) (async) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) close(0x3) (async) socket$kcm(0xa, 0x5, 0x0) (async) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) (async) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r9, 0x1c) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x80fe, 0x7, @dev={0xfe, 0x80, '\x00', 0x33}, 0x12, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000004c0)="7f", 0x1}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000084000000070000007f00000000000000b8"], 0xd0}, 0x480c4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) (async) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r11}, 0xc) 2.844221702s ago: executing program 1 (id=1762): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r1}, &(0x7f0000001a40), &(0x7f0000001a80)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xafff}, 0x70) 2.666319996s ago: executing program 1 (id=1763): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6c0bd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6c9, 0x1, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x45, 0x0, 0xb, 0x200004}, {0x0, 0x3, 0x9}]}) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x10000, 0x80000001, 0x7, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x12710d6c3bff50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2010000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f0000001200)={&(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{}, 0x4}}, 0x80, 0x0}, 0x0) sendmsg$kcm(r4, &(0x7f0000000700)={&(0x7f0000000080)=@in={0x2, 0x4e21, @rand_addr=0x64010101}, 0x80, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x10}, 0x0) close(r4) r5 = socket$kcm(0x1e, 0x4, 0x0) sendmsg$inet(r5, &(0x7f0000002940)={&(0x7f0000000080)={0x2, 0x4e23, @multicast2}, 0x10, 0x0}, 0x20000041) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) gettid() gettid() sendmsg$unix(r6, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002900)=ANY=[], 0x88, 0x4040040}, 0x40c0) syz_clone(0x10021400, 0x0, 0x0, 0x0, &(0x7f0000000440), 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x2, 0x4}, 0x21, 0x0, 0x0, 0x4, 0x9, 0x7f7fffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0xa, 0x2, 0x0) 2.571433529s ago: executing program 3 (id=1764): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(0xffffffffffffffff, 0x2405, 0xffffffffffffffff) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x0, &(0x7f0000002f40), 0x0, 0x0, 0x0, 0x0) 2.50999952s ago: executing program 2 (id=1766): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x1, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xc, &(0x7f0000000100)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000003c0)={{}, &(0x7f00000001c0), &(0x7f0000000200)='%+9llu \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000600), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="b702000009000000bfa300000000000007030000407effff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7ebfcd0cd00006ed3d09a6175037958e271b60dedf8937f02008b6d83923dd29c034055d47dafe6c8dc3d5d78c07f34e4d5b3185b310efd4989147a00000000f110026e6d2ef831ab7ea0c34f17e3adeef3bb622003b538dfd8e012e71f6420b90adddff61b5b0a341a2d7cbdb90000bdb2ca76050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132658555cf476619f28d9961b626c57c2691208171656d60a17e3c1c4b751ca532e6ea09c346df3d7cb4ebd31a08b32808980200000000000000334d83239d0c2e9ff10ff2d27080e71113610e10c358e8327e7050b6c860dac12233f9a1fb9c2aec61ce63a38d316ef49b66d6e42fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a5f3d74ca891c4594e8a4399e01eadd3964663e88535c133f7130856f75643619f567d2e24f29e5dad9326edb697a6ea0182babc18cae2ed4b4390af9a9ceefd07e002cab5ebfcaad34732181feb215139f15eafddcb0c7cbe31fbae7c34d5ac5e7e64c21add9191eadd6e1795ad6a0f7f8cd3fccbdc3dec04b25dfc17975238345d4f71af35910b158e56657b7218baaa7cbf781c0a99bd50499ccff0f000000000000c7beba3da8223fe5308e4e2833baace04f4087c4f0da0d9a88f9dbb593ddeb3f0932a4d0175b889b8eccf707882042e716df9b57b290c661d4e85031086e97bcc5ca0e221a0e34323c129102b7b7a643e82e88a1940b3c02ed9c92d6f64b1282dc519b00159830d7617001154c46bd3ca96318c570f0721fc7aa2a58090000000000000094f22cdf550ef091a78098534f0d973058594000000000000000c12346e47ad97f4ead7cf754a52e4b2d0f22d428bd705414888700a30e2366c6a06b3367a389ca3905689a1f3db9c24db65c1e0001581d573dab18fd0600885f1ea8f2fd299fc3cdafda323e9c7080397bc49d70c060d57bc88fbe09baa058b040360ab9261503d2f363fb099408885afc2bf9a4f8c3506b669e889f5e4be1b8e0d634ebc1057b7e98186fc5141bd670dba6f43279f73db9dec75070cd9ab0fd969169ef6d2857b6bf955012cf7fe50d133da86c0477e42b98a6cc999dc21c3ef408e633dfa35f14d6e734837d365e63845f3c1092f8dd4fc7ea0000af3904ea0f3698cd9492794b8212a350d726bff873339c4cad4ead1348474250eda2c8067ab730c1d82a5687f2ed690000522a0b7426000000000000000000000000000000000000000093fc7a82b98f99d9dedf7ba17f5f0b6d15e552fbd21f7eecff10243a43af03eea84c4304a5d3f93c3fc74c00000000000043e1ed82b9aa0ae92a499984a009000000937523f5292d12659906005cde64f903c3415c458a2b32c2318f0858f19c6def80e1481e8e1c0098fc3f38b7a57211adb15d824cfdcf229628c0de49860e44286fe0e257cfa4ce50f3d10763d442824414a73c06837fe08de62f8710ca977960b74d0000ce73da6022a8671d1a3575b4e18c28c73203bf134686dd65808452cb6b76fcb134252c78de9b240de7b4cd015a77f76bb6470c05fc980b3d8f3f964f432a4bf6cddd6222c2da006b6fdb9c8468ae1d986a893b9519444d16a6dfa92c04331a6698507048fab5ae402acd05fe621f22712dfd09004770b4278fa14547d8ce3c21188e5e4e2baacd98e8e451d6aaaf090000006ed1d9018000008dd952595d78e9583bf4ea5de36099e3cd32941a815e3f3ceafe3065b9594fdcb24ebb6eddb9e87c9ecec7a42c0000abe1c6ea55887dfa18d0aea1b6eca5a883702b0bf3aefcb225895db90e237157a34e9f447237ea5b391bddd1290f7ce987a0e36b8e71b1779bbe95ffa9c3c0f6ba66e4d48e75253e3d633811e4b3220616aafbe7a3a18375ae593eb58fd500426286472466823cb8e1800aaaa0d9463c0c4ea5541a55df6eeffec0b66482228816cdfccb98374c644eea45de7867a0efbad0ab2bc33b350440a90b791b2b33f74a112a3b91b40bed8db2df8633207f8387e04ca52ab0f3f7b058b13523b896800b992972d9609551c27a5916ea16069c5b0300000026d3c27e7945b29996e5cefbc9f857bc1332d200194f658b930780603134ae6b7f5092772bd5d880dbe21b790c475b14b7fe4fe002dffd651faa79bb0cee0cdac2bc3218f2ddaa6f7ba04b696a30d313bed30ba8f35569a9b07ee7308da09c01a4b827aa1784d927aca9b8540534c5c49a0300cfbc2213fc1572b0204dd456b11a454d1f3f14179974aae624ea59500f5e048b2780666de81a040663c57f49af25be909984ae4e679107a14bbb24851f6199eaf9a1b81f33426f86b4b941c08dfe2bc8ec246ec1aae120c42405e428923f3a83d9ba5c373f5e8a54120b451e2806370f1ed60c9fd5d9af4d16cb0f413c324da52d4bd2e01d3ac2d578d72e2d63322dfc9245ce3e3a097fb82f4e3b61a55594616020f72f1c55ee3d325c7496a7c2f10cfeae16ae436751227378f0b1ee78bd33c50206700dd90b96a330f92bff736c83ca53e7f02b734d1a9292337e2be3896f7e7f244bfab4946c7042e88206f641eafcc5b4ba7a7880533cde00995d1caf6936f356ecf07a0084e7adc2dc12417997b03087c7b3b44b06f6158a2a18ce0e56ffbeb22f40521dd9972583d413098aa80db98ef324a2bfb6961c07b47521973cf0bb6f5530f6216b047b35d6e06b72b22b29de42bb1bc8ce0a0e3500000000000000000000000000b92eb197e4149627920000008000000000801792756f90b37f0858efc387f559203f314a4b0ed750fa72e5948ac3fe5921c14ef578d420e7b2a9e2f87f7b44949fe14c00000000000f47030c09f62d444b4981db81799776eeb4448278de519705fa8b56779bc8cc927b308c8e50815c4c3b27487996c09121caf47f76158362c74904f89cbc588aae84567a83571ff72bb65c082b5a8dedc05a3167d84205d5af86553c21e1f023a51c0e179fccfbc201982ebddcaa45613899d19082453b180ca0c525b8d3cfaf7d0bcddeb5d5c7166038f276a92941393ba5e51f77172822bd903d9f8b436656771774ed88daab0d0cfdd1bffc30ab566e1a4cb3ad66d830e10f7c1de13218aea21e7def613204c2b7c1ad48b01c20024032e9b3bba7d6ceca38d3e96db049b92fc32ee34fe7b8419c8fbf03d61c159dc5864e030000a2c55b614d622b8de966c97e1940026f96db3c78ca18c9f08d1c47edf1a4d7298109f31b6078711ee72eacab61213bf50000000000e1000000000000000000001217887d0452aa6d26e4614d511710abeec84b78c027c160ba3759fa55249b832ce4dfb91122193d514ed992c07f8cd6d897b314907e15642da228dbc03429e6e0e7ac118ed351c3b0c44bf5d8b58be5732f29eed98d5b3688d80f7c66f8333aa8cc2ec5b5e305b3dee2562d415b4b9ed530797f55f9fe8510423409629a09000000000000009a35d9ca93e4b4591679547b8de8af1782451f7b8e1de508f1e9e525210d62bb850f8035040ad9e57abe58797515b737bfb21d35ac560f99dbd18dad5e6345a464955e8141d75b6177e4fa176a020b0000000000006e76f0294fee7d19a0f327f8796d77b6e24b8df4bb438b527d10e657d49b844198ea9f93c4fd6fd2daa9bd87fd1e02ecc8075dca1280c201043257e9bd3c9a7aa150eb1711632b76d4dc053e64bfcfd057980136d6e9faca03b24fa300ef90bfe4ad364256937796f941c2fead94785f48777941f0cd3dba54ab6a5d5e91e90ac9ae994c3d4108b2fe7eca9413ac9bc138c74800487eb19c48db3f79be964808d409b5e36fc7fdd40080361427b6b9c118e5c9a0a1d5ca24886eb8a78796540635ac3530b9025d8bad0533a7f81b2188ec75a5fc9302e3815bdcc9ab11201ef940569c995c21eeaefe2e8fc02e0433dc7371d1f72124bad23e554c30fdd7cd8c2da1e8706417da9ad8916551a1182fac08603dfc2f2279ba161c13984cd753b54a85e6f3018c7d48c4b6c2f6910975e9ff51318b09fa13e2d38ce013aab41524c298c3719e31bcb1f102eaeee69a19e006bcdb1acc2664efa949a1a07bb3d7848d5e1381fbe63c522053a3bb32eb6345e10f7a12bf84e0e196a00833f464dd2f6547f14ebf137fce33efeb813211f31ff24d7dbb00f2574ccda59b3ea068fc2a18c37ee579f5a9ecc47da73684bcadd209ae5bbb7147df745ae7a4e446ca16d027d8d0adcdb54182c9de8053fc8b1b9d19c16c53d34db6e26f6a88d449f6abf378ca2e577e206a758a3d46e45e7949c5b5069103009693a798a330a1ccb32d49772e80862df36dc0156b3f72cd85083f8e96ca1697457ec722766bd46ee2424975a38149bd57e5c0eb4087fc243e7e51b0aca9f0ab0668d7f2ee9ad9f267d8804417aa7e36a64d489bb84a1483fd3c3ecb024060002858cbb1f7708f5b41fca2fee7c03b1f862ce88dc313d913e041dd7583a1ac41c466757c5dd07ea2c5d62a000b84b11308b6636b735b3c654cbc0000000000000019a4e9a9c2cbc906f97fd6eb00b18d09a5df123ebbdb2827b43aed6a29e9942e402c1ae52e9cb98f3019d364fc21ea02023db91ced3c2f06550cef8a79ed39091e4776001187d0ab2f82478431d36470cc008d745ce8fd64c9aa64da230bb080945a557081b767beb75b1ea856a55c71b8fda672289aa6085100d48ac8039f19fec3acbcc5944a4e6fd44af8f10110db730a8d0d41b4ea36f9510f843a471963bd4621b9e43f08d341bb69df430ac4bf5c06c6398c1b28bdd3f4c2353c330d8457cf728294e8ea1861ce50c367498945285f73c94d91210652eb4f3077cab6be2a3512eddbcb63d091d69fb1b26c8ada9a99d747d38ef5042053299b8e95decc637a022a49664742606cfdb2a3258498a6a0a82369d70177433e52b851ac396163ca09e6c22ad796a565cf23d87ae9be7235553aa6b8ab74842d3d4ba738b3fa997f079d225335f2af55644478e514aed8ba202805ad458d9ae6ab8d156f11f3cfe7def690f2bbbb463063664625223d23386540e0db96d8eb1755ad49ae817683de97a6dd32d584391302e65594b12bb2e6630217401031c8a1b964ca32f735421bbf64c9f1f9329e5cfda139ea79619e1d00a9a3ab49993362f30d191aa3387101feaa3e326190804eae2114437f8f4b27480900dd6511844a643886588fbdee7f8863a8dfdd75a9e128c6c15166a5f92d3c2d4952e5d07c59bfce0724a02600094c3369be3024edf451ff76a59855fd90353a0de907834bb77a059c56e92eed2f1415b3d8178453c7aecd8fbd161e2ffd66bcf2be175e45184f06bafd1c1c4fd7006a6c90d8afd126f1c51ee0f724ffbbed25a286c95d17c8b4297f8bba8efd565ecb157f0be244fb9657f737354b20e3a5012abb36052eec7a4fe9bc5b5283581b208d90d28d78f1c5422c3bcad67278e8bb88d7e6ccf72dd61319b44aa617d667000000000000a5edbd3e8605225681090853fc66a20e30fb9938e5886ae748236f5e071278763e070b2b75ce0a9e6870033d25dd19733152b01b507d812216e0f7fc89bbe200806f079e9515dd886a781a46ebe3da4c8307885b535109bb1678d08eeef3717bea30f64282ee844b6d64ec51b1221d175b59c1537089dfa803275ab6dcd40b1fe4e851597c1993a477c225201087b7b0977be62a71927bb01b705267aabe967add451795dfd5114726193415cc3e0784a37db8ab8b97a171bc4ad9593f7c750ad440a26b93d24ee8f080de0f2a16cbd5cd1f370bc1235d88d5cbd25acf91daa392731dab4c9c15015de2fded6332b6ebccf6e1588f3f1a5a3e853587a6843ee1a3f3c270e3ab4462bcff01c70b03e8f8c9d816d7d69e4040155e9f999ce4e366a816c6e7224f41df7eead6d6d214ed98708e1d269f4b469af2e2a2559258439758f4fded2780e736568c7eea209c5ed54a1beaf06013bb4b330d39518528a46d68b277faf926672650cad335ae285aeb0b0130a9c7016580a857722b9c51a5a37a856ccb9b6673f58ebfa66f1db4d041741e104cdd91efa4b3248ebecff3568f31b547b19a939708c3b4b45f46377b4a345248489ddef4bc87426717971de1c0049006d2fb99c311fa91c364749917ee81ea8fd51365449d568eadbad6aead6101b7e6582e793670492d814d58e4a9faa8a4a3027b230e8f5b2349fb3ff3c4365df6bd85aa7f76c388ef94f0155c81b04863624fb4708f83ebf93a51d1438d7761d4b1b929d9aa8faef691676834a2591b75205ede2e4a709c3a9899d06c5cb5a571159402e429c5cf839f49957aed76dc7db43f9fdc754e40d7c662ad7939a09bfdbc31deb0d327895afae1eca61820e09abc2c0ed5ce083aceb89c8e24ad45483d3128f0547869970dc84c8787a06046bf79f28a7678b03baeff239ce600d91a07236e255ff7ea441ff0602bb38d7aaa1c414a94c4e143ea2cca9d14a01bb70ff93057a03288bd71c45b025731765ca5250b162f08be1a29460a53f213bfb88a8e80e4c46dbfa5936894a95d27c4e90c151748f8ee457c29cb7e21deb805a9c5c6abf373a4bad5e1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000140), 0x8, 0x10, &(0x7f0000000000)={0x4}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, 0x0, 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r3 = socket$kcm(0xa, 0x5, 0x0) r4 = socket$kcm(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=0x1], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4}) r5 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x8916, &(0x7f0000000000)={r5}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8936, &(0x7f0000000000)={r4}) 2.335389664s ago: executing program 1 (id=1767): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x334ecc4b, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x11, 0x200000000000003, 0x300) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f00000003c0), 0x4) (async) recvmsg$kcm(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000006c0), 0x60}, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) socket$kcm(0x10, 0x2, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x644b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x2}, 0x8004, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x7a}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x823, 0x4, 0x4, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) (async) r9 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) write$cgroup_subtree(r8, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r8}, &(0x7f00000000c0), &(0x7f0000000180)='%pI4 \x00'}, 0x20) (async) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0xff, 0x0, 0xffffffffffffffff, 0x8010, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xf50a43945a8ef38c}, 0xce6b9b20411c70f4, 0x800000000000ca, 0x0, 0x9, 0xffffffbffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r10 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20488, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x10000, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x100000000bf}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1) (async) recvmsg$unix(r3, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYBLOB="3eca", @ANYRES32=r10], 0x9a) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800"], 0x31) 2.249375426s ago: executing program 3 (id=1768): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{}, &(0x7f0000000280), 0x0}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000280000000400"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x9}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000440)={r0, 0x0, 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="080000000000000000000000000000008510eaff0500000085200000020000009500007b"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_ATTACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="1100868fc73055c5c8879ebcd75b747c00ecc5", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x11) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d640a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000001380)}}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000000000010040000000000000000000009010000000000000001000005000000000000000002"], 0x0, 0x4a, 0x0, 0xfffffffc}, 0x28) r5 = socket$kcm(0x2, 0x2, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) setsockopt$sock_attach_bpf(r5, 0x11, 0x65, &(0x7f0000000140)=r6, 0x4a) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x7fe2, 0x2}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r8, r7}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002a40)={0x6, 0x18, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xcd69, 0x0, 0x0, 0x0, 0x1a}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@generic={0x6, 0x9, 0x8, 0x2, 0x400}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @generic={0x4, 0x5, 0x8, 0x9, 0x9}, @jmp={0x5, 0x1, 0x3, 0x4, 0x3, 0x40, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @exit, @map_fd={0x18, 0x2, 0x1, 0x0, r0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x4, 0x1000, &(0x7f0000001980)=""/4096, 0x41100, 0x0, '\x00', 0x0, 0x25, r4, 0x8, &(0x7f0000002980)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000029c0)={0x2, 0x2, 0x6, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002a00)=[r7], 0x0, 0x10, 0x7fffffff}, 0x94) 1.943518153s ago: executing program 2 (id=1770): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0x8ec0}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0100000000000100000000000000000000001400000000000000000000000200000000000000000000001400000000003e8000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) 1.942320484s ago: executing program 1 (id=1771): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x2, 0x3}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x8000}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x5, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x7c}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x1, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000780)={0x4, &(0x7f0000000600)=[{0x45, 0x0, 0x2, 0xffffffff}, {0x3d}, {0x2}, {0x6}]}) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x7c, &(0x7f0000000000), 0xc) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000c40)=[{0x20405, 0x0, 0x0, 0xc}, {0x8004, 0x5, 0x10009, 0x4}], 0x10, 0x3}, 0x94) socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb9200a4831371400000069bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f00000001c0)) 1.826855246s ago: executing program 3 (id=1772): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r1}, &(0x7f0000001a40), &(0x7f0000001a80)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0xafff}, 0x70) 1.775610218s ago: executing program 2 (id=1773): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000007"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f03, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffff94, 0xfffffffffffffff8}, 0x126a0, 0x1000, 0x0, 0x0, 0x736, 0x2, 0x7ff, 0x0, 0x0, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x50, 0x9b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x100e4a, 0x0, 0x4000, 0x0, 0x17}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB="0d00000001000000", @ANYRES32, @ANYBLOB="d36c3cd5d7e4a0532e9a45e6e647e48023af0c83d4a5441f37eff8f9c7253e403066392bcb8b5a2cd150a9e688a4676a66c8b5c7871382878f3419279935adf45c8c17676ec85b12010353639ea66a8fe7abe4b4d381966303fc520d0071e386d9", @ANYRES32=r1, @ANYBLOB, @ANYRES64=0x0], 0x20) perf_event_open(&(0x7f0000010000)={0x1, 0x80, 0x0, 0x5, 0x81, 0x0, 0x0, 0x5c32, 0xae073155cfd213b3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x5, 0xfffffffd, 0x9, 0x0, 0x7, 0x1}, 0x0, 0xffffffffffffdfff, 0xffffffffffffffff, 0xb) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x53) bpf$MAP_CREATE(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000800)='cpuset.mems\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b400000000000000631120000021a199b2dd94c8f9940000008510000002000000850000000800000095000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) write$cgroup_int(r8, &(0x7f0000000040)=0x2c, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000050d7000000000000000000001d7118690000005b061bcfd455000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0x0, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 1.6967067s ago: executing program 3 (id=1774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600eeff04000000090000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0xe, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1d}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000240)={r4, r3}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8914, &(0x7f0000000080)) 1.363029487s ago: executing program 2 (id=1777): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000053000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b706000000000000850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="a7b9545dd30a1d31677b2d5a5091", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080), 0x6e, &(0x7f0000000340)=[{&(0x7f0000000140)=""/235, 0xeb}, {&(0x7f0000000240)=""/69, 0x45}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/59, 0x3b}], 0x4, &(0x7f0000000440)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}, 0x10002) 733.288322ms ago: executing program 0 (id=1779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ac0)={{r1}, &(0x7f0000001a40), &(0x7f0000001a80)=r3}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000700000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x1010000}, 0x70) 662.775584ms ago: executing program 0 (id=1780): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, 0x3efd7ab4c41335d9, @perf_config_ext={0xffffffff, 0x4}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r2, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b00)=[{&(0x7f0000001980)="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", 0x19e}], 0x1}, 0x408c0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800786a00"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x92c0199, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 343.957342ms ago: executing program 2 (id=1781): ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) (async) ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) (async) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x8, 0x1, 0x8, 0x7f, 0x0, 0x2000000020, 0x98010, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x2, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x81, 0x0, @perf_bp={&(0x7f0000000080), 0x9}, 0x800, 0xffffffff, 0x7, 0x9, 0x276, 0x5dc4, 0x0, 0x0, 0xdf, 0x0, 0x7}, 0x0, 0xb, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000140)='/dev/net/tun\x00') r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x10, r0}, 0x18) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2b, 'net_cls'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'memory'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2b, 'rdma'}, {0x2b, 'pids'}, {0x2b, 'net_cls'}]}, 0x50) (async) write$cgroup_subtree(r3, &(0x7f0000000240)={[{0x2b, 'net_cls'}, {0x2b, 'cpuacct'}, {0x2d, 'perf_event'}, {0x2d, 'memory'}, {0x2b, 'perf_event'}, {0x2b, 'hugetlb'}, {0x2b, 'rdma'}, {0x2b, 'pids'}, {0x2b, 'net_cls'}]}, 0x50) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000002c0)=""/79) (async) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000002c0)=""/79) r4 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r4, r1, 0x0, 0x7, &(0x7f0000000340)='hugetlb'}, 0x30) syz_open_procfs$namespace(r4, &(0x7f00000003c0)='ns/time_for_children\x00') bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x33, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf7d, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@map_val={0x18, 0x9, 0x2, 0x0, r2}, @map_val={0x18, 0x7, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x5}, @ldst={0x2, 0x0, 0x0, 0x1, 0x2, 0xffffffffffffffc0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x739}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @jmp={0x5, 0x1, 0x8, 0x3, 0x8, 0x7fffffffffffffe8, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x5, 0xbd, &(0x7f0000000680)=""/189, 0x40f00, 0x3f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000740)={0x4, 0x7, 0x1, 0x80000}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000780)=[r2, 0xffffffffffffffff, r2, r0, r2, r2, r2, r2, r2], &(0x7f00000007c0)=[{0x0, 0x5, 0x6, 0x1}, {0x1, 0x2, 0x7, 0xa}, {0x2, 0x1, 0x8}, {0x4, 0x3, 0xb, 0xa}, {0x5, 0x1, 0xb, 0x3}], 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r5, 0x0, 0xe9, 0x36, &(0x7f0000000900)="56dba2af074ca6f35c417ce381ba9a052fb543a805923d07b286d42c7f6c7c6f4783f3668ce4b81251e2f72d8981ed01e4ee0f1bec1964133dd23a4bced5f6df4dca6685ff50fc855f72c16251bd717ab936270b92bf3121aaf85bc9519b74aa764c65bc6bf3b1e195a0abb305a6463f21752ec2e4a92f45944f470335d798ce62863fd6023ae084790434e580fb95aeec6b5c42cba45a33a8fbc9652c72968478fe2e093e688bc8f26a86c206b7900d62ab79ea15f53f8fba5f46dc20be4deaef34ea82a5308d018c79ef76ed8167492796cb6694249420dc9e3cf969720f872487e0cdbcdfbec568", &(0x7f0000000a00)=""/54, 0x2, 0x0, 0x27, 0x12, &(0x7f0000000a40)="a68415fd6b64ba41ccfb97b3458f0b25b4bdf8cc03f3b9af6507f1ed3a1afc958d635dfbe23b6a", &(0x7f0000000a80)="6dbf5854e1e7b76ffd89d4291520bdc91f63", 0x1, 0x0, 0x32}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000ac0)={r5, 0x0, 0xe9, 0x36, &(0x7f0000000900)="56dba2af074ca6f35c417ce381ba9a052fb543a805923d07b286d42c7f6c7c6f4783f3668ce4b81251e2f72d8981ed01e4ee0f1bec1964133dd23a4bced5f6df4dca6685ff50fc855f72c16251bd717ab936270b92bf3121aaf85bc9519b74aa764c65bc6bf3b1e195a0abb305a6463f21752ec2e4a92f45944f470335d798ce62863fd6023ae084790434e580fb95aeec6b5c42cba45a33a8fbc9652c72968478fe2e093e688bc8f26a86c206b7900d62ab79ea15f53f8fba5f46dc20be4deaef34ea82a5308d018c79ef76ed8167492796cb6694249420dc9e3cf969720f872487e0cdbcdfbec568", &(0x7f0000000a00)=""/54, 0x2, 0x0, 0x27, 0x12, &(0x7f0000000a40)="a68415fd6b64ba41ccfb97b3458f0b25b4bdf8cc03f3b9af6507f1ed3a1afc958d635dfbe23b6a", &(0x7f0000000a80)="6dbf5854e1e7b76ffd89d4291520bdc91f63", 0x1, 0x0, 0x32}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000c00)={&(0x7f0000000b40)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000000bc0)=[{&(0x7f0000000b80)="cbdcbf124a74962ee231e557295d935732de2bf972958615fa6677bdd2dfa341e66724a1004b927d753a3d1a4b577b700eebdb430894bb", 0x37}], 0x1}, 0xfce534f7166ca379) gettid() (async) r6 = gettid() syz_open_procfs$namespace(r6, &(0x7f0000000c40)='ns/ipc\x00') r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000cc0)=@generic={&(0x7f0000000c80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d80)={r7, 0x58, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000dc0)={0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000001280)={&(0x7f0000000e00)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000001200)=[{&(0x7f0000000e80)='.', 0x1}, {&(0x7f0000000ec0)="35f9244fbf7ea80242602a571c8516c68151ee64b87780befad9a829952e953c4392c620f89080b237de199b26b79ac3714e38633050734d6c12170a00647a9e003bcc9d2d92150fe0833f3ebad8", 0x4e}, {&(0x7f0000000f40)}, {&(0x7f0000000f80)="5ed36f6364339aa8e35e41b36101a226872006da4c06da7ae30cb93dd0d8abc6b2a0f12f8c499bdbe3bd3779470de926e6e439422626344df40959139c7575a3c3bf084c3c69802ad8f5a81cd18d1174c5e4e83eca", 0x55}, {&(0x7f0000001000)="6bf5a0ba628121b6827667659f36ad2097f91d01184ff7ae444c53153e4ce795af1457cb8ffe382387312f7355010168b4d3adb23eaca2c1fd3b0f6fd654b43d3c0433f11bf80918eadeb638799ec686775d0c0607fdfaea60b333f0006243b63f97bde9419f80e756760fb564edd9146c12c5a680e098cb8477c56aae2ec32acec6bb96c9bd813c0d7af8cad9cda9802f4b", 0x92}, {&(0x7f00000010c0)="0f8a31cca360fb72f4f2e4c7df223f079f7e0329b011ecf158abe5c3d0d63e88bc673151f586b5f270594f65dc2b44a71ab1072e780e41f4489b68de40079c783b9762d81f5f49836d31524ae0470ba35d2da7ef0548167d2c6951e5a64f5ec2244ddbe52d32978dc3a440c486d2a566bb95b033b6da137595abfda5b56936e845b3060dacd3fbbdd214d81a0a8fa31613b66f6b172cf65625b30b36b05fea49", 0xa0}, {&(0x7f0000001180)="3ed289aae464eddcacbd67688966a3b0b35cb91447e3c059e1700842516f2ac20ed6c4b6be8fa4007257cb64a3ecf0acc9cb7c3371d9a6645c2a911c77b2210bd08aab9b880abd0392dabb23003ea8fc4226ea94e015688e7d3c68b06bfc26645d97082b341d79633102aa4deb2443cbce382bc4101e", 0x76}], 0x7, 0x0, 0x0, 0x82fcc9176496af8f}, 0x14040084) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) (async) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x6, 0x0, r2, 0x2, '\x00', r8, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) r11 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x3}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x11, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x966}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='syzkaller\x00', 0x2, 0x76, &(0x7f0000001440)=""/118, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x5, 0x6, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[r9, r2, r7, r2, r11, r2], 0x0, 0x10, 0x10001}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001600)={0x6, 0x11, &(0x7f0000001340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x966}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001400)='syzkaller\x00', 0x2, 0x76, &(0x7f0000001440)=""/118, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000001500)={0x5, 0x6, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000015c0)=[r9, r2, r7, r2, r11, r2], 0x0, 0x10, 0x10001}, 0x94) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f00000016c0)=r5) gettid() 307.456493ms ago: executing program 0 (id=1782): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0x8ec0}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f0100000000000100000000000000000000001400000000000000000000000200000000000000000000001400000000000ec000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000000"], 0xf}, 0x0) 217.753325ms ago: executing program 0 (id=1783): r0 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2000) (async) recvmsg$kcm(r0, &(0x7f0000002c00)={0x0, 0x0, 0x0}, 0x20) sendmsg(r0, &(0x7f0000003800)={0x0, 0x0, 0x0}, 0x200c8030) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="0500000000000000791090000000000063000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002000000000000070000000000000000000000020100000000002e"], 0x0, 0x34}, 0x20) 42.535649ms ago: executing program 0 (id=1784): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90324fc602f1a08000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x0, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=1785): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000340), 0x4) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x310) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) perf_event_open$cgroup(&(0x7f0000000380)={0x1, 0x80, 0x7d, 0x6, 0x0, 0xc7, 0x0, 0x0, 0x20404, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5, 0x4, @perf_config_ext={0x68b5, 0x6}, 0x1, 0x10, 0x208, 0x2, 0xc, 0x793, 0x48, 0x0, 0x5, 0x0, 0x801}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000980)=ANY=[@ANYBLOB='b *:', @ANYRESOCT=r2], 0xe) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x4) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x0, 0x0, 0x3, 0x4, {0xa, 0x4e20, 0x3, @mcast1}}}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000080)="2c5a498ec1c0c21b4091af31662397f43b1dda87cf6dfe309f4155e80531186973cdea39f70c83b4d5e88ac87a220aefbebc92bcfc27f1e0fee099e93af27728af741be8d9c5edcbb7", 0x49}, {&(0x7f0000000140)="3dfda90d9f2a6d8854afa3b599993e1ce5b7bc70d9884ee4f87417741eb8cbb1f74422500a6de533cd13fa7f9a18b18af437a1da2b8737fff0fa0412283fc01083dd4c22ffd9e0eff8ba63decc874797144bb9e177b671dc3033b3e70828720afccd731c141daf0c799661abb04a5502295025f15819f7b45a682dbb7bb5d831a5ad5d94b5641756ae975f1d1d65532db051ac8f287b905923daa328bd0f6ec4cb42255eb9df502ba0c8f265dbf21dcff347869bcc3f58c6605f52afc105", 0xbe}, {&(0x7f0000000200)="21f5ed68c3403695d71961b491d07f66fb31e7ba573e18f26632d7774e55b1e4c9fce98118896211851a5900cc4e12b8a2e5ea5ebf9c0ac1a18adee3d1d5dd1deac6b475994992e197103b29894aaea015e061667dbff04e48aa693b29e50b4e14fca65d1266d5f0911b3581f0bafb6c31af19fce941ef4d0977dee588a6152679fc023c216354ce44f9071af980dd0560227ce5959cd66fdd13760fa727313ea28d0548041fc480", 0xa8}], 0x3, &(0x7f0000000380)=[@timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0xd}}, @mark={{0x14, 0x1, 0x24, 0xfffffffb}}], 0x60}, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="1b0000001e006bcd9e3fe3dc6e0800000a0000dd600000007ea608", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000240)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x35}], 0x1}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={&(0x7f0000000880)=@l2tp6={0xa, 0x1100, 0x2, @mcast1}, 0x80, 0x0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.161' (ED25519) to the list of known hosts. [ 76.100395][ T5762] cgroup: Unknown subsys name 'net' [ 76.241267][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.839488][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.413641][ T5784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.420056][ T5785] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.424285][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.433403][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.436469][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.447255][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.450467][ T5784] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.457933][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.471333][ T5785] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.473679][ T5787] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.480323][ T5785] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.493869][ T5787] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.497012][ T5785] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.501860][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.511339][ T5785] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.522505][ T5785] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.532662][ T5787] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.533914][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.547528][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.554878][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.583296][ T5781] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.590708][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.598581][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.598815][ T5784] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.078677][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 80.154988][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 80.183730][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.245872][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.277044][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.285439][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.292810][ T5777] bridge_slave_0: entered allmulticast mode [ 80.299776][ T5777] bridge_slave_0: entered promiscuous mode [ 80.327779][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.335191][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.342575][ T5777] bridge_slave_1: entered allmulticast mode [ 80.349540][ T5777] bridge_slave_1: entered promiscuous mode [ 80.443433][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.456066][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.507612][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.514983][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.522309][ T5774] bridge_slave_0: entered allmulticast mode [ 80.529536][ T5774] bridge_slave_0: entered promiscuous mode [ 80.537743][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.545930][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.555340][ T5776] bridge_slave_0: entered allmulticast mode [ 80.563246][ T5776] bridge_slave_0: entered promiscuous mode [ 80.577338][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.584638][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.592074][ T5776] bridge_slave_1: entered allmulticast mode [ 80.599474][ T5776] bridge_slave_1: entered promiscuous mode [ 80.640523][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.647815][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.655500][ T5774] bridge_slave_1: entered allmulticast mode [ 80.662784][ T5774] bridge_slave_1: entered promiscuous mode [ 80.691932][ T5777] team0: Port device team_slave_0 added [ 80.700895][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.732754][ T5777] team0: Port device team_slave_1 added [ 80.741146][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.754271][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.775505][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.782903][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.790099][ T5775] bridge_slave_0: entered allmulticast mode [ 80.797758][ T5775] bridge_slave_0: entered promiscuous mode [ 80.819734][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.841185][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.848586][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.856132][ T5775] bridge_slave_1: entered allmulticast mode [ 80.865586][ T5775] bridge_slave_1: entered promiscuous mode [ 80.906438][ T5776] team0: Port device team_slave_0 added [ 80.925043][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.932037][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.958608][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.987293][ T5776] team0: Port device team_slave_1 added [ 81.006794][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.016787][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.024075][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.050213][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.064194][ T5774] team0: Port device team_slave_0 added [ 81.089301][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.096652][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.122711][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.136778][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.169413][ T5774] team0: Port device team_slave_1 added [ 81.186140][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.193356][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.219974][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.271877][ T5775] team0: Port device team_slave_0 added [ 81.291139][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.298272][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.324630][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.343421][ T5777] hsr_slave_0: entered promiscuous mode [ 81.349858][ T5777] hsr_slave_1: entered promiscuous mode [ 81.361579][ T5775] team0: Port device team_slave_1 added [ 81.379704][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.386837][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.415822][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.461148][ T5776] hsr_slave_0: entered promiscuous mode [ 81.468101][ T5776] hsr_slave_1: entered promiscuous mode [ 81.474799][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.483473][ T5776] Cannot create hsr debugfs directory [ 81.517886][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.525138][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.551683][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.597089][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.604309][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.615252][ T5784] Bluetooth: hci2: command tx timeout [ 81.630549][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.671068][ T5774] hsr_slave_0: entered promiscuous mode [ 81.677580][ T5774] hsr_slave_1: entered promiscuous mode [ 81.683094][ T5784] Bluetooth: hci3: command tx timeout [ 81.683333][ T5784] Bluetooth: hci0: command tx timeout [ 81.689005][ T5084] Bluetooth: hci1: command tx timeout [ 81.701411][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.709264][ T5774] Cannot create hsr debugfs directory [ 81.799878][ T5775] hsr_slave_0: entered promiscuous mode [ 81.807297][ T5775] hsr_slave_1: entered promiscuous mode [ 81.814033][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.821634][ T5775] Cannot create hsr debugfs directory [ 82.205614][ T5777] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.226762][ T5777] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.253560][ T5777] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.266100][ T5777] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.314511][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.347203][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.369584][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.388318][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.440441][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.458757][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.469297][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.479963][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.586019][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.597869][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.609420][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.631574][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.688831][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.748390][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.795332][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.817869][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.830421][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.837971][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.864144][ T4306] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.871324][ T4306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.902063][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.909264][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.948188][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.955406][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.977573][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.998077][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.061498][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.074217][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.119691][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.126921][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.138798][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.146058][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.189251][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.196506][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.224038][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.231240][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.638688][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.682677][ T5084] Bluetooth: hci2: command tx timeout [ 83.729150][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.762808][ T5084] Bluetooth: hci0: command tx timeout [ 83.773219][ T5084] Bluetooth: hci1: command tx timeout [ 83.778684][ T5084] Bluetooth: hci3: command tx timeout [ 83.860079][ T5776] veth0_vlan: entered promiscuous mode [ 83.890223][ T5776] veth1_vlan: entered promiscuous mode [ 83.925540][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.951423][ T5777] veth0_vlan: entered promiscuous mode [ 83.969438][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.018435][ T5777] veth1_vlan: entered promiscuous mode [ 84.040083][ T5774] veth0_vlan: entered promiscuous mode [ 84.061880][ T5774] veth1_vlan: entered promiscuous mode [ 84.075906][ T5776] veth0_macvtap: entered promiscuous mode [ 84.113550][ T5776] veth1_macvtap: entered promiscuous mode [ 84.178113][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.189780][ T5777] veth0_macvtap: entered promiscuous mode [ 84.208672][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.220759][ T5777] veth1_macvtap: entered promiscuous mode [ 84.230777][ T5774] veth0_macvtap: entered promiscuous mode [ 84.244659][ T5775] veth0_vlan: entered promiscuous mode [ 84.255088][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.273232][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.281961][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.292523][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.305834][ T5774] veth1_macvtap: entered promiscuous mode [ 84.340917][ T5775] veth1_vlan: entered promiscuous mode [ 84.385239][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.411000][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.423451][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.434919][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.445646][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.458725][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.469124][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.480693][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.491873][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.503031][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.515042][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.541291][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.552887][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.561614][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.571059][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.601657][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.614255][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.624809][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.635372][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.646808][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.688057][ T5777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.697319][ T5777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.708773][ T5777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.717578][ T5777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.733424][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.741475][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.771569][ T5775] veth0_macvtap: entered promiscuous mode [ 84.807814][ T5775] veth1_macvtap: entered promiscuous mode [ 84.836421][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.845779][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.889180][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.900684][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.911771][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.922424][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.932508][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.944180][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.956131][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.979753][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.990515][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.009042][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.019757][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.032948][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.046106][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.058723][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.118559][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.132973][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.137668][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.155822][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.168550][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.178291][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.324014][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.344101][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.372773][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.380676][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.448319][ T3485] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.456669][ T3485] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.545259][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.566877][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.687796][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.709572][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.764265][ T5084] Bluetooth: hci2: command tx timeout [ 85.830118][ C0] hrtimer: interrupt took 67530 ns [ 85.843759][ T5084] Bluetooth: hci3: command tx timeout [ 85.846510][ T5781] Bluetooth: hci1: command tx timeout [ 85.849319][ T5084] Bluetooth: hci0: command tx timeout [ 85.942770][ T5839] Zero length message leads to an empty skb [ 86.802894][ T5837] syz.3.4 (5837) used greatest stack depth: 20584 bytes left [ 86.996879][ T5856] netlink: 'syz.0.8': attribute type 21 has an invalid length. [ 87.033185][ T5856] IPv6: NLM_F_CREATE should be specified when creating new route [ 87.083350][ T5856] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.090845][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 87.098335][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 87.105662][ T5856] IPv6: NLM_F_CREATE should be set when creating new route [ 87.235871][ T5857] netlink: 'syz.0.8': attribute type 21 has an invalid length. [ 87.267595][ T5857] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.838799][ T5875] netlink: 'syz.2.11': attribute type 1 has an invalid length. [ 87.862981][ T5084] Bluetooth: hci2: command tx timeout [ 87.882628][ T5875] netlink: 'syz.2.11': attribute type 3 has an invalid length. [ 87.890781][ T5875] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11'. [ 87.923429][ T5084] Bluetooth: hci0: command tx timeout [ 87.928909][ T5084] Bluetooth: hci1: command tx timeout [ 87.934543][ T5084] Bluetooth: hci3: command tx timeout [ 88.044889][ T5875] netlink: 'syz.2.11': attribute type 10 has an invalid length. [ 88.146417][ T5875] netlink: 168 bytes leftover after parsing attributes in process `syz.2.11'. [ 89.274324][ T5877] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.601809][ T5915] netlink: 'syz.0.23': attribute type 1 has an invalid length. [ 90.640347][ T5915] netlink: 'syz.0.23': attribute type 3 has an invalid length. [ 90.690511][ T5915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23'. [ 90.791174][ T5917] netlink: 'syz.0.23': attribute type 10 has an invalid length. [ 90.816607][ T5917] netlink: 168 bytes leftover after parsing attributes in process `syz.0.23'. [ 90.926036][ T5921] netlink: 'syz.3.25': attribute type 21 has an invalid length. [ 90.940230][ T5921] IPv6: NLM_F_CREATE should be specified when creating new route [ 90.948519][ T5921] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 90.955832][ T5921] IPv6: NLM_F_CREATE should be set when creating new route [ 90.963165][ T5921] IPv6: NLM_F_CREATE should be set when creating new route [ 90.970436][ T5921] IPv6: NLM_F_CREATE should be set when creating new route [ 91.010674][ T5922] netlink: 'syz.3.25': attribute type 21 has an invalid length. [ 91.022127][ T5922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.025209][ T56] cfg80211: failed to load regulatory.db [ 93.344430][ T5957] netlink: 'syz.3.35': attribute type 1 has an invalid length. [ 93.358591][ T5957] netlink: 'syz.3.35': attribute type 3 has an invalid length. [ 93.379363][ T5957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.35'. [ 93.399246][ T5957] netlink: 'syz.3.35': attribute type 10 has an invalid length. [ 93.470387][ T5957] netlink: 168 bytes leftover after parsing attributes in process `syz.3.35'. [ 93.598575][ T5964] netlink: 'syz.1.37': attribute type 21 has an invalid length. [ 93.613712][ T5964] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.621615][ T5964] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.628938][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 93.636326][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 93.643642][ T5964] IPv6: NLM_F_CREATE should be set when creating new route [ 93.706293][ T5967] netlink: 'syz.1.37': attribute type 21 has an invalid length. [ 93.714474][ T5967] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.418461][ T5993] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.47'. [ 95.958852][ T6002] netlink: 'syz.3.49': attribute type 10 has an invalid length. [ 96.040171][ T6002] netlink: 55 bytes leftover after parsing attributes in process `syz.3.49'. [ 96.044187][ T6003] delete_channel: no stack [ 96.057170][ T6003] delete_channel: no stack [ 96.831520][ T6002] syz.3.49 (6002) used greatest stack depth: 20328 bytes left [ 97.606734][ T6025] netlink: 'syz.1.56': attribute type 2 has an invalid length. [ 97.617004][ T6023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.54'. [ 97.624312][ T6025] netlink: 184 bytes leftover after parsing attributes in process `syz.1.56'. [ 98.721293][ T6037] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.59'. [ 100.146645][ T6062] Illegal XDP return value 4294967294 on prog (id 48) dev N/A, expect packet loss! [ 100.696307][ T6066] netlink: 'syz.2.65': attribute type 21 has an invalid length. [ 100.730564][ T6066] netlink: 128 bytes leftover after parsing attributes in process `syz.2.65'. [ 101.287525][ T6079] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.70'. [ 101.339613][ T6079] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.70'. [ 101.422831][ T6079] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.70'. [ 101.703936][ T6086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.73'. [ 101.722341][ T6086] netlink: 60 bytes leftover after parsing attributes in process `syz.0.73'. [ 101.752714][ T6088] netlink: 60 bytes leftover after parsing attributes in process `syz.0.73'. [ 104.675203][ T6116] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 104.691461][ T6116] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.80'. [ 104.706856][ T6116] netlink: 'syz.3.80': attribute type 1 has an invalid length. [ 105.208957][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.3.85'. [ 105.888993][ T6153] netlink: 60 bytes leftover after parsing attributes in process `syz.2.91'. [ 106.117132][ T6159] netlink: 'syz.1.93': attribute type 10 has an invalid length. [ 106.144317][ T6159] veth1_vlan: entered allmulticast mode [ 106.221759][ T6159] team0: Device veth1_vlan failed to register rx_handler [ 106.572695][ T6170] netlink: 'syz.0.96': attribute type 10 has an invalid length. [ 106.627647][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.652036][ T6170] bridge_slave_1: left allmulticast mode [ 106.658050][ T6170] bridge_slave_1: left promiscuous mode [ 106.682416][ T6170] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.747850][ T6170] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 107.406517][ T6170] syz.0.96 (6170) used greatest stack depth: 20264 bytes left [ 107.482779][ T6177] syzkaller0: entered promiscuous mode [ 107.524467][ T6177] syzkaller0: entered allmulticast mode [ 108.368218][ T6197] syzkaller0: entered promiscuous mode [ 108.379167][ T6197] syzkaller0: entered allmulticast mode [ 108.855006][ T6209] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.103'. [ 108.881979][ T6209] netlink: 'syz.3.103': attribute type 3 has an invalid length. [ 108.891847][ T6209] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.103'. [ 111.057086][ T6194] syzkaller0: left promiscuous mode [ 112.491434][ T6224] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.107'. [ 112.869031][ T6234] syz.2.112 uses obsolete (PF_INET,SOCK_PACKET) [ 113.104346][ T6239] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 113.465315][ T6250] netlink: 'syz.2.119': attribute type 29 has an invalid length. [ 113.585678][ T6250] netlink: 'syz.2.119': attribute type 29 has an invalid length. [ 114.029886][ T6269] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.124'. [ 114.044067][ T6269] netlink: 'syz.3.124': attribute type 21 has an invalid length. [ 114.067964][ T6269] netlink: 128 bytes leftover after parsing attributes in process `syz.3.124'. [ 114.107764][ T6269] netlink: 'syz.3.124': attribute type 4 has an invalid length. [ 114.152348][ T6269] netlink: 'syz.3.124': attribute type 5 has an invalid length. [ 114.203396][ T6269] netlink: 3 bytes leftover after parsing attributes in process `syz.3.124'. [ 114.863371][ T6304] netlink: 'syz.2.135': attribute type 10 has an invalid length. [ 114.897607][ T6304] team0: Device ipvlan1 failed to register rx_handler [ 115.145096][ T6313] netlink: 10 bytes leftover after parsing attributes in process `syz.0.138'. [ 115.442384][ T6320] netlink: 132 bytes leftover after parsing attributes in process `syz.3.140'. [ 116.320302][ T6335] netlink: 'syz.2.146': attribute type 2 has an invalid length. [ 116.417157][ T6335] netlink: 164 bytes leftover after parsing attributes in process `syz.2.146'. [ 116.577877][ T6335] syz.2.146 (6335) used greatest stack depth: 19784 bytes left [ 117.043720][ T60] wlan1: Trigger new scan to find an IBSS to join [ 117.171049][ T6353] team0: Port device team_slave_0 removed [ 117.500259][ T6366] netlink: 'syz.1.157': attribute type 21 has an invalid length. [ 117.508150][ T6366] netlink: 156 bytes leftover after parsing attributes in process `syz.1.157'. [ 117.970814][ T6383] bridge_slave_1: left allmulticast mode [ 117.988204][ T6383] bridge_slave_1: left promiscuous mode [ 118.003331][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.107311][ T6383] bridge_slave_0: left allmulticast mode [ 118.113728][ T6383] bridge_slave_0: left promiscuous mode [ 118.119594][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.381353][ T6396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.250298][ T6417] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.258361][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 119.268978][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 119.277304][ T6417] IPv6: NLM_F_CREATE should be set when creating new route [ 119.475109][ T6419] netlink: 152 bytes leftover after parsing attributes in process `syz.1.169'. [ 119.550216][ T6419] tc_dump_action: action bad kind [ 119.604447][ T6423] netlink: 'syz.0.168': attribute type 9 has an invalid length. [ 119.682022][ T6423] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.168'. [ 120.049420][ T6436] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 120.066366][ T6434] netlink: 'syz.2.172': attribute type 1 has an invalid length. [ 120.083687][ T6439] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.109020][ T6436] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.172'. [ 120.130190][ T6434] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.172'. [ 120.378962][ T6446] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.176'. [ 120.602435][ T6455] netlink: 'syz.2.178': attribute type 10 has an invalid length. [ 120.627196][ T6455] team0: Port device dummy0 added [ 120.866605][ T6464] netlink: 'syz.2.181': attribute type 29 has an invalid length. [ 120.915376][ T6464] netlink: 'syz.2.181': attribute type 29 has an invalid length. [ 120.933714][ T6464] netlink: 'syz.2.181': attribute type 29 has an invalid length. [ 121.313163][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 121.518439][ T6484] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 121.642767][ T5784] Bluetooth: hci1: unexpected event 0x04 length: 151 > 10 [ 122.013699][ T12] wlan1: Trigger new scan to find an IBSS to join [ 122.407947][ T6508] netlink: 'syz.0.195': attribute type 33 has an invalid length. [ 122.486362][ T6502] netlink: 'syz.1.193': attribute type 153 has an invalid length. [ 122.498765][ T6502] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.193'. [ 123.022944][ T3485] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:14:10 [ 123.065854][ T6528] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.201'. [ 123.171699][ T6531] netlink: 'syz.3.202': attribute type 2 has an invalid length. [ 123.220856][ T6531] netlink: 132 bytes leftover after parsing attributes in process `syz.3.202'. [ 123.532696][ T6547] netlink: 40 bytes leftover after parsing attributes in process `syz.3.207'. [ 123.602015][ T6547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.692435][ T5784] Bluetooth: hci1: command tx timeout [ 126.437587][ T6554] syz.0.208 (6554) used greatest stack depth: 19560 bytes left [ 127.628412][ T6654] validate_nla: 2 callbacks suppressed [ 127.628430][ T6654] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 127.688112][ T6655] netlink: 'syz.0.222': attribute type 1 has an invalid length. [ 127.705805][ T6653] netlink: 'syz.0.222': attribute type 10 has an invalid length. [ 127.730419][ T6656] netlink: 'syz.2.219': attribute type 3 has an invalid length. [ 127.738398][ T6656] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.219'. [ 127.937819][ T6653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.981347][ T6653] team0: Port device bond0 added [ 128.004075][ T6649] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 128.010714][ T6649] syzkaller1: linktype set to 769 [ 128.082652][ T6653] syz.0.222 (6653) used greatest stack depth: 18600 bytes left [ 128.372593][ T6680] tap0: tun_chr_ioctl cmd 1074025677 [ 128.408323][ T6680] tap0: linktype set to 776 [ 129.528752][ T6697] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 129.536300][ T6697] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 129.576280][ T6713] netlink: 'syz.2.238': attribute type 10 has an invalid length. [ 129.619450][ T6713] team0: Device nlmon0 is of different type [ 129.836270][ T6706] syzkaller0: entered promiscuous mode [ 129.841836][ T6706] syzkaller0: entered allmulticast mode [ 132.244413][ T6762] pim6reg0: tun_chr_ioctl cmd 1074025672 [ 132.273504][ T6762] pim6reg0: ignored: set checksum disabled [ 132.433917][ T6770] netlink: 14 bytes leftover after parsing attributes in process `syz.2.253'. [ 132.973153][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.980052][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.697313][ T6818] netlink: 'syz.0.269': attribute type 3 has an invalid length. [ 133.731373][ T6818] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.269'. [ 134.158227][ T6827] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 134.165986][ T6827] IPv6: NLM_F_CREATE should be set when creating new route [ 134.174216][ T6827] IPv6: NLM_F_CREATE should be set when creating new route [ 134.182200][ T6827] IPv6: NLM_F_CREATE should be set when creating new route [ 135.042735][ T6590] wlan1: Trigger new scan to find an IBSS to join [ 135.439136][ T6845] netlink: 878 bytes leftover after parsing attributes in process `syz.2.277'. [ 137.433879][ T6853] netlink: 140 bytes leftover after parsing attributes in process `syz.1.279'. [ 138.934552][ T6887] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 138.982930][ T6887] syzkaller0: entered promiscuous mode [ 138.988498][ T6887] syzkaller0: entered allmulticast mode [ 139.027118][ T6878] netlink: 10 bytes leftover after parsing attributes in process `syz.3.287'. [ 140.962380][ T6594] wlan1: Trigger new scan to find an IBSS to join [ 141.950470][ T6600] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:14:10 [ 142.042907][ T6897] netlink: 68 bytes leftover after parsing attributes in process `syz.1.291'. [ 142.876137][ T6920] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.300'. [ 142.920003][ T6920] netlink: zone id is out of range [ 142.934213][ T6920] netlink: zone id is out of range [ 142.947622][ T6920] netlink: zone id is out of range [ 142.963920][ T6920] netlink: zone id is out of range [ 142.969836][ T6920] netlink: zone id is out of range [ 142.979375][ T6920] netlink: zone id is out of range [ 142.989575][ T6920] netlink: zone id is out of range [ 143.001539][ T6920] netlink: zone id is out of range [ 143.063263][ T6920] netlink: zone id is out of range [ 143.070310][ T6920] netlink: zone id is out of range [ 143.546798][ T6936] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.306'. [ 143.834535][ T6945] netlink: 68 bytes leftover after parsing attributes in process `syz.1.309'. [ 144.060422][ T6950] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.310'. [ 146.603498][ T6984] netlink: 'syz.1.321': attribute type 21 has an invalid length. [ 146.640366][ T6984] netlink: 156 bytes leftover after parsing attributes in process `syz.1.321'. [ 147.098458][ T7008] netlink: 'syz.2.328': attribute type 21 has an invalid length. [ 147.135743][ T6989] delete_channel: no stack [ 147.148592][ T7008] IPv6: NLM_F_CREATE should be specified when creating new route [ 147.829173][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.0.329'. [ 147.859206][ T7021] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 148.321668][ T7028] netlink: 'syz.1.332': attribute type 33 has an invalid length. [ 148.384147][ T7028] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.332'. [ 150.841917][ T7087] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.351'. [ 150.865568][ T7084] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.351'. [ 150.909529][ T7091] netlink: 'syz.1.353': attribute type 3 has an invalid length. [ 150.909584][ T7091] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.353'. [ 152.183480][ T7133] syzkaller0: entered promiscuous mode [ 152.190125][ T7133] syzkaller0: entered allmulticast mode [ 153.817312][ T7146] netlink: 'syz.2.371': attribute type 21 has an invalid length. [ 153.844005][ T7146] netlink: 156 bytes leftover after parsing attributes in process `syz.2.371'. [ 154.303140][ T7154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.742522][ T7167] netlink: 132 bytes leftover after parsing attributes in process `syz.0.375'. [ 154.860574][ T7171] netlink: 'syz.1.377': attribute type 10 has an invalid length. [ 154.879913][ T7171] netlink: 40 bytes leftover after parsing attributes in process `syz.1.377'. [ 154.889987][ T7171] team0: entered promiscuous mode [ 154.897019][ T7171] team_slave_1: entered promiscuous mode [ 154.909507][ T7171] team0: entered allmulticast mode [ 154.916278][ T7171] team_slave_1: entered allmulticast mode [ 154.926987][ T7171] bridge0: port 3(team0) entered blocking state [ 154.934992][ T7171] bridge0: port 3(team0) entered disabled state [ 154.949304][ T7171] bridge0: port 3(team0) entered blocking state [ 154.955828][ T7171] bridge0: port 3(team0) entered forwarding state [ 155.573579][ T7183] netlink: 'syz.1.382': attribute type 10 has an invalid length. [ 155.581680][ T7183] netlink: 2 bytes leftover after parsing attributes in process `syz.1.382'. [ 155.595812][ T7183] hsr0: entered promiscuous mode [ 155.603355][ T7183] bridge0: port 4(hsr0) entered blocking state [ 155.616079][ T7183] bridge0: port 4(hsr0) entered disabled state [ 155.641021][ T7183] hsr0: entered allmulticast mode [ 155.653028][ T7183] hsr_slave_0: entered allmulticast mode [ 155.667442][ T7183] hsr_slave_1: entered allmulticast mode [ 155.748536][ T7183] bridge0: port 4(hsr0) entered blocking state [ 155.755961][ T7183] bridge0: port 4(hsr0) entered forwarding state [ 155.765195][ T7201] netlink: 'syz.2.386': attribute type 1 has an invalid length. [ 155.773583][ T7201] netlink: 3455 bytes leftover after parsing attributes in process `syz.2.386'. [ 156.031724][ T7210] netlink: 822 bytes leftover after parsing attributes in process `syz.2.391'. [ 157.493118][ T7240] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.402'. [ 157.691555][ T7250] syzkaller0: entered promiscuous mode [ 157.699466][ T7250] syzkaller0: entered allmulticast mode [ 158.805305][ T7270] netlink: 'syz.1.410': attribute type 10 has an invalid length. [ 158.960326][ T7270] geneve1: entered promiscuous mode [ 158.988638][ T7270] geneve1: entered allmulticast mode [ 159.026461][ T7270] team0: Port device geneve1 added [ 163.133242][ T7322] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 163.163520][ T7322] netlink: 55 bytes leftover after parsing attributes in process `syz.3.424'. [ 163.573918][ T7333] netlink: 'syz.1.427': attribute type 46 has an invalid length. [ 163.603176][ T7333] netlink: 2 bytes leftover after parsing attributes in process `syz.1.427'. [ 163.680044][ T7336] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.428'. [ 163.722410][ T7337] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.428'. [ 164.042904][ T7351] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 164.106674][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.153118][ T7351] bridge_slave_1: left allmulticast mode [ 164.172535][ T7351] bridge_slave_1: left promiscuous mode [ 164.178423][ T7351] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.223903][ T7351] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 164.552290][ T7365] netlink: 'syz.3.436': attribute type 3 has an invalid length. [ 164.560097][ T7365] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.436'. [ 164.778528][ T7368] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.438'. [ 165.457581][ T7375] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 165.457956][ T7380] netlink: 188 bytes leftover after parsing attributes in process `syz.2.439'. [ 166.010446][ T7399] netlink: 'syz.0.449': attribute type 10 has an invalid length. [ 166.224411][ T7399] team0: Device wg1 is of different type [ 168.451098][ T7455] netlink: 'syz.0.466': attribute type 2 has an invalid length. [ 168.464966][ T7455] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.800491][ T7458] netlink: 'syz.2.467': attribute type 19 has an invalid length. [ 168.851655][ T7458] netlink: 156 bytes leftover after parsing attributes in process `syz.2.467'. [ 168.887876][ T7465] netlink: 'syz.3.468': attribute type 22 has an invalid length. [ 168.897500][ T7465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 169.684585][ T7490] netlink: 'syz.1.478': attribute type 10 has an invalid length. [ 170.536139][ T7490] vxcan1: entered promiscuous mode [ 170.541523][ T7490] vxcan1: entered allmulticast mode [ 170.551606][ T7490] team0: Device vxcan1 is of different type [ 170.573756][ T7487] netlink: 'syz.2.475': attribute type 10 has an invalid length. [ 170.589068][ T7487] netlink: 40 bytes leftover after parsing attributes in process `syz.2.475'. [ 170.625478][ T7487] caif0: entered promiscuous mode [ 170.641035][ T7487] caif0: entered allmulticast mode [ 170.651071][ T7487] net_ratelimit: 333 callbacks suppressed [ 170.651090][ T7487] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 170.743501][ T7501] tap0: tun_chr_ioctl cmd 1074025677 [ 170.771885][ T7501] tap0: linktype set to 774 [ 170.868636][ T7507] netlink: 'syz.2.481': attribute type 1 has an invalid length. [ 170.884348][ T7507] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.481'. [ 171.154340][ T7513] netlink: 'syz.2.485': attribute type 10 has an invalid length. [ 171.181470][ T7513] netlink: 212412 bytes leftover after parsing attributes in process `syz.2.485'. [ 171.231095][ T7513] openvswitch: netlink: Flow key attr not present in new flow. [ 172.565205][ T7551] netlink: 'syz.2.494': attribute type 2 has an invalid length. [ 172.612914][ T7551] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.494'. [ 173.019414][ T7561] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.498'. [ 173.628406][ T7575] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 173.673773][ T7575] netlink: 'syz.0.501': attribute type 4 has an invalid length. [ 173.738106][ T7575] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.501'. [ 173.837189][ T7585] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.502'. [ 174.005341][ T7587] netlink: 4068 bytes leftover after parsing attributes in process `syz.3.506'. [ 174.087282][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 174.111747][ T7595] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 174.122771][ T7589] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 174.133741][ T7591] netlink: 60 bytes leftover after parsing attributes in process `syz.2.505'. [ 174.501050][ T7601] netlink: 'syz.0.509': attribute type 3 has an invalid length. [ 174.534496][ T7604] netlink: 'syz.3.510': attribute type 1 has an invalid length. [ 174.542434][ T7601] netlink: 13435 bytes leftover after parsing attributes in process `syz.0.509'. [ 174.564247][ T6608] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 174.580570][ T7604] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.510'. [ 174.636663][ T7604] netlink: 9 bytes leftover after parsing attributes in process `syz.3.510'. [ 175.260200][ T7618] syzkaller0: entered promiscuous mode [ 175.277074][ T7618] syzkaller0: entered allmulticast mode [ 175.546058][ T7626] netlink: 'syz.1.519': attribute type 27 has an invalid length. [ 178.193261][ T7632] n: port 1(ip6gretap0) entered blocking state [ 178.202397][ T7632] n: port 1(ip6gretap0) entered disabled state [ 178.210958][ T7632] ip6gretap0: entered allmulticast mode [ 178.250735][ T7632] ip6gretap0: entered promiscuous mode [ 178.796334][ T7657] __nla_validate_parse: 1 callbacks suppressed [ 178.796385][ T7657] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.528'. [ 178.819676][ T7657] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 179.041054][ T7667] netlink: 'syz.1.531': attribute type 21 has an invalid length. [ 179.087071][ T7667] netlink: 156 bytes leftover after parsing attributes in process `syz.1.531'. [ 179.263288][ T7667] netlink: 128 bytes leftover after parsing attributes in process `syz.1.531'. [ 179.322432][ T7667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.373382][ T7675] netlink: 'syz.2.533': attribute type 10 has an invalid length. [ 180.194666][ T7695] netlink: 'syz.1.540': attribute type 9 has an invalid length. [ 180.211465][ T7695] netlink: 198056 bytes leftover after parsing attributes in process `syz.1.540'. [ 180.343558][ T7698] netlink: 'syz.3.541': attribute type 3 has an invalid length. [ 180.386123][ T7698] sock: sock_set_timeout: `syz.3.541' (pid 7698) tries to set negative timeout [ 180.452545][ T7700] netlink: 'syz.1.540': attribute type 9 has an invalid length. [ 180.461219][ T7700] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.540'. [ 180.744126][ T7701] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 181.124507][ T7701] syzkaller0: entered promiscuous mode [ 181.152881][ T7701] syzkaller0: entered allmulticast mode [ 184.860130][ T7749] netlink: 'syz.3.553': attribute type 9 has an invalid length. [ 184.885653][ T7749] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.553'. [ 185.163966][ T7758] netlink: 'syz.0.556': attribute type 11 has an invalid length. [ 185.223345][ T7760] netlink: 'syz.3.555': attribute type 30 has an invalid length. [ 185.656052][ T7772] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.903000][ T7780] netlink: 'syz.2.563': attribute type 10 has an invalid length. [ 186.271179][ T7780] team0: Device wg1 is of different type [ 186.302420][ T7787] netlink: 'syz.1.565': attribute type 63 has an invalid length. [ 186.407698][ T7787] netlink: 36 bytes leftover after parsing attributes in process `syz.1.565'. [ 188.326692][ T7823] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.576'. [ 188.348583][ T7823] tc_dump_action: action bad kind [ 188.445979][ T7822] netlink: 'syz.3.575': attribute type 4 has an invalid length. [ 188.482453][ T7822] netlink: 152 bytes leftover after parsing attributes in process `syz.3.575'. [ 188.533043][ T7822] .`: renamed from bond0 (while UP) [ 189.670690][ T7851] IPv6: Can't replace route, no match found [ 189.992820][ T7858] netlink: 'syz.3.583': attribute type 1 has an invalid length. [ 190.024506][ T7858] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 190.047413][ T7858] netlink: 'syz.3.583': attribute type 2 has an invalid length. [ 190.098157][ T7858] netlink: 'syz.3.583': attribute type 3 has an invalid length. [ 190.116382][ T7858] netlink: 'syz.3.583': attribute type 4 has an invalid length. [ 190.136575][ T7858] netlink: 'syz.3.583': attribute type 5 has an invalid length. [ 190.162812][ T7858] netlink: 'syz.3.583': attribute type 6 has an invalid length. [ 190.194556][ T7858] netlink: 'syz.3.583': attribute type 7 has an invalid length. [ 190.208238][ T7858] netlink: 'syz.3.583': attribute type 9 has an invalid length. [ 190.228451][ T7858] netlink: 'syz.3.583': attribute type 10 has an invalid length. [ 190.243555][ T7858] netlink: 126304 bytes leftover after parsing attributes in process `syz.3.583'. [ 191.802739][ T7900] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 192.089623][ T7905] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.599'. [ 192.734193][ T7917] netlink: 132 bytes leftover after parsing attributes in process `syz.0.603'. [ 193.113745][ T7931] netlink: 144 bytes leftover after parsing attributes in process `syz.3.606'. [ 193.603973][ T7946] netlink: 164 bytes leftover after parsing attributes in process `syz.2.610'. [ 193.806123][ T7948] netlink: 8 bytes leftover after parsing attributes in process `syz.0.612'. [ 194.376719][ T7958] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 194.463356][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.476229][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.532557][ T7958] syzkaller1: linktype set to 6 [ 198.040193][ T7986] validate_nla: 5 callbacks suppressed [ 198.040216][ T7986] netlink: 'syz.2.625': attribute type 21 has an invalid length. [ 198.609142][ T7992] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.627'. [ 199.763932][ T8013] netlink: 10 bytes leftover after parsing attributes in process `syz.1.631'. [ 200.111881][ T8023] syzkaller0: entered allmulticast mode [ 201.727018][ T8057] netlink: 'syz.3.643': attribute type 1 has an invalid length. [ 201.741359][ T8057] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.643'. [ 204.026337][ T8046] sit0: entered allmulticast mode [ 204.430410][ T8079] netlink: 132 bytes leftover after parsing attributes in process `syz.2.649'. [ 204.498630][ T8081] netlink: 'syz.1.650': attribute type 1 has an invalid length. [ 204.540152][ T8081] netlink: 'syz.1.650': attribute type 3 has an invalid length. [ 204.568880][ T8081] netlink: 132 bytes leftover after parsing attributes in process `syz.1.650'. [ 204.600648][ T8079] netlink: 'syz.2.649': attribute type 10 has an invalid length. [ 205.003186][ T8079] team0: Device vxcan1 is of different type [ 205.141270][ T8083] netlink: 'syz.3.651': attribute type 2 has an invalid length. [ 205.162586][ T8083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 205.815356][ T8104] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.657'. [ 205.888521][ T8104] bridge_slave_1: default FDB implementation only supports local addresses [ 205.979274][ T8107] netlink: 'syz.1.658': attribute type 9 has an invalid length. [ 206.031399][ T8107] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.658'. [ 206.722707][ T5782] Bluetooth: hci2: command 0x0406 tx timeout [ 206.730837][ T5782] Bluetooth: hci3: command 0x0406 tx timeout [ 206.744571][ T5782] Bluetooth: hci0: command 0x0406 tx timeout [ 206.751461][ T5782] Bluetooth: hci1: command 0x0406 tx timeout [ 207.566659][ T8142] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.671'. [ 208.418395][ T8155] netlink: 64 bytes leftover after parsing attributes in process `syz.1.676'. [ 208.750671][ T8162] netlink: 'syz.3.678': attribute type 4 has an invalid length. [ 209.157307][ T8173] syzkaller0: entered promiscuous mode [ 209.164185][ T8173] syzkaller0: entered allmulticast mode [ 210.300207][ T5084] Bluetooth: hci0: Malformed LE Event: 0x0d [ 210.440237][ T8178] delete_channel: no stack [ 215.758442][ T8218] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.694'. [ 215.884198][ T8221] netlink: 'syz.0.696': attribute type 3 has an invalid length. [ 215.952436][ T8221] netlink: 152 bytes leftover after parsing attributes in process `syz.0.696'. [ 217.340805][ T8253] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 217.400980][ T8253] netlink: 55 bytes leftover after parsing attributes in process `syz.0.705'. [ 217.665351][ T8260] delete_channel: no stack [ 217.722009][ T8260] delete_channel: no stack [ 218.413445][ T8268] netlink: 'syz.1.710': attribute type 4 has an invalid length. [ 218.442920][ T8268] netlink: 152 bytes leftover after parsing attributes in process `syz.1.710'. [ 218.472713][ T8268] .`: renamed from bond0 (while UP) [ 219.246184][ T8290] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.312030][ T8293] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 219.323164][ T8293] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 219.335731][ T8290] bridge0: entered allmulticast mode [ 219.419469][ T8294] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.432502][ T8294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.572591][ T8294] bridge0: entered promiscuous mode [ 220.310357][ T8305] netlink: 'syz.2.720': attribute type 10 has an invalid length. [ 220.345528][ T8305] netlink: 55 bytes leftover after parsing attributes in process `syz.2.720'. [ 220.621456][ T8305] delete_channel: no stack [ 220.663834][ T8305] delete_channel: no stack [ 221.180293][ T8316] netlink: 'syz.3.724': attribute type 10 has an invalid length. [ 221.196819][ T8316] netlink: 2 bytes leftover after parsing attributes in process `syz.3.724'. [ 221.246724][ T8316] hsr0: entered promiscuous mode [ 221.256491][ T8316] bridge0: port 2(hsr0) entered blocking state [ 221.274046][ T8316] bridge0: port 2(hsr0) entered disabled state [ 221.300418][ T8316] hsr0: entered allmulticast mode [ 221.312347][ T8316] hsr_slave_0: entered allmulticast mode [ 221.320400][ T8316] hsr_slave_1: entered allmulticast mode [ 221.434240][ T8316] bridge0: port 2(hsr0) entered blocking state [ 221.445343][ T8316] bridge0: port 2(hsr0) entered forwarding state [ 221.468016][ T8322] netlink: 'syz.0.727': attribute type 4 has an invalid length. [ 221.483532][ T8322] netlink: 152 bytes leftover after parsing attributes in process `syz.0.727'. [ 221.512486][ T8322] .`: renamed from bond0 [ 221.858035][ T8335] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 221.868032][ T8335] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.349981][ T8343] netlink: 'syz.1.737': attribute type 10 has an invalid length. [ 222.375022][ T8343] netlink: 55 bytes leftover after parsing attributes in process `syz.1.737'. [ 222.714939][ T8348] delete_channel: no stack [ 222.721271][ T8348] delete_channel: no stack [ 223.808481][ T8369] netlink: 'syz.0.742': attribute type 10 has an invalid length. [ 223.828274][ T8369] netlink: 2 bytes leftover after parsing attributes in process `syz.0.742'. [ 223.870207][ T8369] hsr0: entered promiscuous mode [ 223.909940][ T8369] bridge0: port 2(hsr0) entered blocking state [ 223.934629][ T8369] bridge0: port 2(hsr0) entered disabled state [ 223.955024][ T8369] hsr0: entered allmulticast mode [ 223.994711][ T8369] hsr_slave_0: entered allmulticast mode [ 224.001883][ T8369] hsr_slave_1: entered allmulticast mode [ 224.148845][ T8369] bridge0: port 2(hsr0) entered blocking state [ 224.160762][ T8369] bridge0: port 2(hsr0) entered forwarding state [ 224.181837][ T8371] netlink: 132 bytes leftover after parsing attributes in process `syz.3.744'. [ 224.454291][ T8375] netlink: 'syz.2.743': attribute type 4 has an invalid length. [ 224.485179][ T8375] netlink: 152 bytes leftover after parsing attributes in process `syz.2.743'. [ 224.529227][ T8375] .`: renamed from bond0 (while UP) [ 224.723090][ T8386] netlink: 'syz.0.747': attribute type 21 has an invalid length. [ 224.752852][ T8386] netlink: 'syz.0.747': attribute type 4 has an invalid length. [ 224.772594][ T8386] netlink: 120 bytes leftover after parsing attributes in process `syz.0.747'. [ 225.351031][ T8389] syzkaller0: entered promiscuous mode [ 225.455346][ T8389] syzkaller0: entered allmulticast mode [ 225.993100][ T60] syzkaller0: tun_net_xmit 48 [ 228.388615][ T8424] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.756'. [ 231.106126][ T8438] syz.3.759[8438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.106438][ T8438] syz.3.759[8438] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 231.127379][ T8438] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.759'. [ 231.893741][ T8448] netlink: 152 bytes leftover after parsing attributes in process `syz.0.761'. [ 231.918946][ T8448] tc_dump_action: action bad kind [ 233.006788][ T8472] netlink: 10 bytes leftover after parsing attributes in process `syz.3.769'. [ 233.124300][ T8472] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.769'. [ 233.536851][ T8482] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 233.592375][ T8482] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.771'. [ 234.508510][ T8495] netlink: 152 bytes leftover after parsing attributes in process `syz.3.775'. [ 234.533516][ T8495] tc_dump_action: action bad kind [ 234.563665][ T8501] netlink: 'syz.1.778': attribute type 21 has an invalid length. [ 234.590257][ T8501] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 234.622397][ T8501] netlink: 100 bytes leftover after parsing attributes in process `syz.1.778'. [ 234.959300][ T8506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 234.983106][ T8504] netlink: 'syz.3.779': attribute type 39 has an invalid length. [ 235.030139][ T8506] netlink: 'syz.1.781': attribute type 9 has an invalid length. [ 235.052477][ T8506] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.781'. [ 235.692457][ T8509] netlink: 'syz.1.781': attribute type 9 has an invalid length. [ 235.741229][ T8509] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.781'. [ 235.854303][ T8522] netlink: 'syz.0.785': attribute type 21 has an invalid length. [ 235.904935][ T8522] netlink: 128 bytes leftover after parsing attributes in process `syz.0.785'. [ 235.955253][ T8522] netlink: 'syz.0.785': attribute type 4 has an invalid length. [ 236.012493][ T8522] netlink: 'syz.0.785': attribute type 3 has an invalid length. [ 236.021888][ T8522] netlink: 3 bytes leftover after parsing attributes in process `syz.0.785'. [ 237.499694][ T8556] netlink: 'syz.0.794': attribute type 12 has an invalid length. [ 237.544622][ T8556] netlink: 132 bytes leftover after parsing attributes in process `syz.0.794'. [ 239.334091][ T8596] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.805'. [ 239.416414][ T8596] netlink: 184 bytes leftover after parsing attributes in process `syz.2.805'. [ 239.484519][ T8596] netlink: 'syz.2.805': attribute type 4 has an invalid length. [ 239.532081][ T8596] netlink: 152 bytes leftover after parsing attributes in process `syz.2.805'. [ 239.932668][ T8604] netlink: 'syz.1.807': attribute type 2 has an invalid length. [ 240.279918][ T8604] netlink: 132 bytes leftover after parsing attributes in process `syz.1.807'. [ 240.532745][ T8616] netlink: 1039 bytes leftover after parsing attributes in process `syz.3.810'. [ 241.025125][ T8624] netlink: 830 bytes leftover after parsing attributes in process `syz.2.812'. [ 242.104123][ T8638] netlink: 'syz.1.815': attribute type 29 has an invalid length. [ 242.207922][ T8638] netlink: 'syz.1.815': attribute type 29 has an invalid length. [ 242.281546][ T8639] netlink: 'syz.1.815': attribute type 29 has an invalid length. [ 243.373241][ T8656] : renamed from bond_slave_0 (while UP) [ 244.376139][ T8682] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.830'. [ 244.474380][ T8682] netlink: 184 bytes leftover after parsing attributes in process `syz.0.830'. [ 244.532276][ T8682] netlink: 'syz.0.830': attribute type 4 has an invalid length. [ 244.550557][ T8682] netlink: 152 bytes leftover after parsing attributes in process `syz.0.830'. [ 244.643096][ T8682] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 245.319612][ T8703] netlink: 144324 bytes leftover after parsing attributes in process `syz.1.834'. [ 245.423256][ T8703] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 246.420264][ T8721] netlink: 'syz.0.840': attribute type 9 has an invalid length. [ 246.452775][ T8721] netlink: 161684 bytes leftover after parsing attributes in process `syz.0.840'. [ 246.707921][ T8728] netlink: 65185 bytes leftover after parsing attributes in process `syz.1.842'. [ 248.116613][ T8751] netlink: 'syz.0.850': attribute type 2 has an invalid length. [ 248.202793][ T8751] netlink: 'syz.0.850': attribute type 8 has an invalid length. [ 248.233435][ T8751] netlink: 132 bytes leftover after parsing attributes in process `syz.0.850'. [ 249.953457][ T8797] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.861'. [ 249.998619][ T8798] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.861'. [ 251.641243][ T8786] netlink: 'syz.3.854': attribute type 2 has an invalid length. [ 251.662017][ T8795] netlink: 'syz.2.860': attribute type 2 has an invalid length. [ 251.689555][ T8795] netlink: 'syz.2.860': attribute type 8 has an invalid length. [ 251.721117][ T8795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.860'. [ 251.749957][ T8794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.854'. [ 251.776045][ T8811] netlink: 188 bytes leftover after parsing attributes in process `syz.0.864'. [ 252.292783][ T8826] netlink: 'syz.3.870': attribute type 29 has an invalid length. [ 252.311312][ T8826] netlink: 'syz.3.870': attribute type 3 has an invalid length. [ 252.350940][ T8826] netlink: 132 bytes leftover after parsing attributes in process `syz.3.870'. [ 253.042751][ T8836] netlink: 'syz.2.873': attribute type 21 has an invalid length. [ 253.089436][ T8837] netlink: 'syz.2.873': attribute type 21 has an invalid length. [ 254.618705][ T8831] netlink: 'syz.1.871': attribute type 10 has an invalid length. [ 255.334452][ T8869] IPv6: NLM_F_CREATE should be specified when creating new route [ 255.351189][ T8869] netlink: 1 bytes leftover after parsing attributes in process `syz.0.882'. [ 255.865461][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.875307][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.569850][ T8902] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.890'. [ 256.621272][ T8901] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.849917][ T8911] netlink: 12 bytes leftover after parsing attributes in process `syz.0.892'. [ 257.297405][ T8925] tun0: tun_chr_ioctl cmd 1074025681 [ 257.343763][ T8927] netlink: 'syz.0.899': attribute type 1 has an invalid length. [ 257.353474][ T8927] netlink: 154788 bytes leftover after parsing attributes in process `syz.0.899'. [ 257.891692][ T8934] syzkaller0: entered promiscuous mode [ 257.927542][ T8934] syzkaller0: entered allmulticast mode [ 258.128960][ T8934] sock: sock_set_timeout: `syz.0.902' (pid 8934) tries to set negative timeout [ 262.048994][ T8955] netlink: 'syz.1.905': attribute type 17 has an invalid length. [ 262.066929][ T8955] netlink: 'syz.1.905': attribute type 16 has an invalid length. [ 262.081173][ T8955] netlink: 152 bytes leftover after parsing attributes in process `syz.1.905'. [ 262.688490][ T8967] netlink: 'syz.1.912': attribute type 2 has an invalid length. [ 263.630330][ T8990] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.919'. [ 264.173691][ T8988] netlink: 'syz.3.918': attribute type 2 has an invalid length. [ 264.232008][ T8988] netlink: 'syz.3.918': attribute type 8 has an invalid length. [ 264.267635][ T8988] netlink: 132 bytes leftover after parsing attributes in process `syz.3.918'. [ 264.666049][ T9007] netlink: 'syz.0.923': attribute type 21 has an invalid length. [ 264.710417][ T9007] netlink: 128 bytes leftover after parsing attributes in process `syz.0.923'. [ 264.759650][ T9007] netlink: 'syz.0.923': attribute type 5 has an invalid length. [ 264.770820][ T9007] netlink: 'syz.0.923': attribute type 6 has an invalid length. [ 264.792866][ T9007] netlink: 3 bytes leftover after parsing attributes in process `syz.0.923'. [ 264.832378][ T9012] netlink: 'syz.2.925': attribute type 19 has an invalid length. [ 264.841909][ T9012] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.925'. [ 264.865408][ T9016] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.925'. [ 264.889649][ T9015] netlink: 15999 bytes leftover after parsing attributes in process `syz.1.926'. [ 265.331423][ T9028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.929'. [ 265.793802][ T9034] netlink: 72 bytes leftover after parsing attributes in process `syz.1.932'. [ 266.543684][ T9037] netlink: 'syz.2.933': attribute type 2 has an invalid length. [ 266.592299][ T9037] netlink: 'syz.2.933': attribute type 8 has an invalid length. [ 266.709869][ T9048] sit0: entered allmulticast mode [ 266.841476][ T9054] bridge_slave_1: entered promiscuous mode [ 267.064168][ T9057] netlink: 'syz.1.938': attribute type 6 has an invalid length. [ 267.122638][ T9057] __nla_validate_parse: 5 callbacks suppressed [ 267.122659][ T9057] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.938'. [ 267.334949][ T9064] netlink: 132 bytes leftover after parsing attributes in process `syz.3.940'. [ 268.392214][ T9082] netlink: 10 bytes leftover after parsing attributes in process `syz.2.946'. [ 269.775296][ T9104] gre0: entered allmulticast mode [ 270.257698][ T9102] netlink: 'syz.0.950': attribute type 2 has an invalid length. [ 270.275433][ T9102] netlink: 'syz.0.950': attribute type 8 has an invalid length. [ 270.291427][ T9102] netlink: 132 bytes leftover after parsing attributes in process `syz.0.950'. [ 270.464118][ T9110] netlink: 128 bytes leftover after parsing attributes in process `syz.3.953'. [ 270.625322][ T9110] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 270.855376][ T9133] netlink: 129160 bytes leftover after parsing attributes in process `syz.2.958'. [ 270.897479][ T9132] delete_channel: no stack [ 272.063212][ T9162] netlink: 'syz.2.968': attribute type 39 has an invalid length. [ 275.201989][ T9162] hsr_slave_1 (unregistering): left promiscuous mode [ 275.815056][ T9207] netlink: 'syz.2.980': attribute type 10 has an invalid length. [ 276.737201][ T9207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.774377][ T9207] .`: (slave batadv0): Enslaving as an active interface with an up link [ 276.970035][ T9225] lo: entered allmulticast mode [ 277.093357][ T9229] netlink: 148 bytes leftover after parsing attributes in process `syz.2.987'. [ 277.141560][ T9231] netlink: 'syz.2.987': attribute type 10 has an invalid length. [ 277.182289][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.2.987'. [ 277.235125][ T9231] dummy0: entered promiscuous mode [ 277.252522][ T9231] dummy0: entered allmulticast mode [ 277.381688][ T9237] netlink: 'syz.0.989': attribute type 3 has an invalid length. [ 277.406383][ T9231] team0: Port device dummy0 removed [ 277.431864][ T9231] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 277.454225][ T9237] netlink: 'syz.0.989': attribute type 1 has an invalid length. [ 277.480782][ T9237] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.989'. [ 277.527257][ T9232] netlink: 'syz.0.989': attribute type 10 has an invalid length. [ 277.645067][ T9239] netlink: 830 bytes leftover after parsing attributes in process `syz.1.988'. [ 277.799843][ T9235] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.988'. [ 279.042060][ T9266] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.997'. [ 279.092281][ T9266] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 280.812822][ T9294] netlink: 'syz.0.1005': attribute type 21 has an invalid length. [ 280.835521][ T9203] delete_channel: no stack [ 280.859047][ T9294] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1005'. [ 281.374404][ T9303] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1010'. [ 281.442895][ T9303] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1010'. [ 281.894241][ T9314] netlink: 'syz.2.1013': attribute type 9 has an invalid length. [ 281.932268][ T9314] netlink: 'syz.2.1013': attribute type 23 has an invalid length. [ 281.990701][ T9314] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.1013'. [ 282.120536][ T9319] netlink: 'syz.1.1014': attribute type 2 has an invalid length. [ 282.150814][ T9319] netlink: 'syz.1.1014': attribute type 8 has an invalid length. [ 282.207626][ T9319] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1014'. [ 283.483562][ T9345] netlink: 'syz.3.1022': attribute type 28 has an invalid length. [ 284.451517][ T9354] syzkaller0: entered promiscuous mode [ 284.492364][ T9354] syzkaller0: entered allmulticast mode [ 284.549698][ T9354] syzkaller0: mtu less than device minimum [ 285.848291][ T9393] netlink: 'syz.2.1034': attribute type 1 has an invalid length. [ 285.864988][ T9395] 0: renamed from pim6reg1 [ 285.882220][ T9393] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1034'. [ 287.073155][ T9415] netlink: 'syz.1.1039': attribute type 1 has an invalid length. [ 287.090767][ T9415] netlink: 'syz.1.1039': attribute type 3 has an invalid length. [ 287.102746][ T9415] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1039'. [ 287.166061][ T9415] netlink: 'syz.1.1039': attribute type 10 has an invalid length. [ 287.192312][ T9415] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1039'. [ 287.801628][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1044'. [ 288.280066][ T9433] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1044'. [ 288.667161][ T5084] Bluetooth: hci2: unexpected subevent 0x0c length: 150 > 5 [ 288.890482][ T9463] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1052'. [ 289.037756][ T9463] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.1052'. [ 289.462454][ T9478] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1057'. [ 289.502587][ T9478] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 290.454112][ T9511] netlink: 'syz.2.1071': attribute type 10 has an invalid length. [ 290.510872][ T5084] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 291.276944][ T9534] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1073'. [ 291.982408][ T9549] delete_channel: no stack [ 292.007129][ T9549] netlink: 'syz.1.1076': attribute type 29 has an invalid length. [ 292.039856][ T9549] netlink: 'syz.1.1076': attribute type 29 has an invalid length. [ 292.108085][ T9554] netlink: 'syz.1.1076': attribute type 29 has an invalid length. [ 292.128593][ T9549] netlink: 'syz.1.1076': attribute type 29 has an invalid length. [ 292.528543][ T9566] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1082'. [ 292.751535][ T9575] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 295.146533][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1091'. [ 295.165945][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1091'. [ 295.198801][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1091'. [ 295.255806][ T9597] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1091'. [ 295.491711][ T9618] sctp: [Deprecated]: syz.1.1092 (pid 9618) Use of struct sctp_assoc_value in delayed_ack socket option. [ 295.491711][ T9618] Use struct sctp_sack_info instead [ 295.644783][ T9621] netlink: 15743 bytes leftover after parsing attributes in process `syz.3.1097'. [ 296.720733][ T9629] netlink: 'syz.1.1100': attribute type 10 has an invalid length. [ 296.738220][ T9629] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1100'. [ 298.131069][ T9650] netlink: 'syz.3.1105': attribute type 10 has an invalid length. [ 298.174052][ T9650] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1105'. [ 298.268930][ T9650] veth0_vlan: left promiscuous mode [ 299.045952][ T9675] netlink: 'syz.3.1113': attribute type 25 has an invalid length. [ 299.073127][ T9675] netlink: 'syz.3.1113': attribute type 9 has an invalid length. [ 299.102723][ T9675] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1113'. [ 299.116866][ T9677] netlink: 193100 bytes leftover after parsing attributes in process `syz.2.1114'. [ 299.155081][ T9681] netlink: 'syz.0.1115': attribute type 23 has an invalid length. [ 299.376594][ T9688] netlink: zone id is out of range [ 299.381947][ T9688] netlink: set zone limit has 8 unknown bytes [ 300.091711][ T9699] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1119'. [ 302.031948][ T9735] syzkaller0: entered promiscuous mode [ 302.039739][ T9734] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 302.074495][ T9735] syzkaller0: entered allmulticast mode [ 302.085140][ T9734] netlink: 'syz.2.1130': attribute type 29 has an invalid length. [ 302.206070][ T9737] bY4`Ҙ: renamed from lo (while UP) [ 302.445532][ T9742] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1133'. [ 302.482592][ T9742] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1133'. [ 302.711219][ T9751] netlink: 'syz.2.1137': attribute type 6 has an invalid length. [ 302.721672][ T9751] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1137'. [ 302.843546][ T9753] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1145'. [ 303.054517][ T9757] netlink: 'syz.2.1139': attribute type 2 has an invalid length. [ 303.086245][ T9757] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1139'. [ 303.508564][ T9766] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.1142'. [ 303.592565][ T9770] netlink: 'syz.3.1144': attribute type 4 has an invalid length. [ 304.206762][ T9795] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1153'. [ 304.389232][ T5084] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 304.717111][ T9811] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1159'. [ 305.019264][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 305.172907][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 305.511023][ T9840] netlink: 'syz.2.1167': attribute type 11 has an invalid length. [ 306.404234][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 308.200974][ T9890] syz.1.1179 (9890) used obsolete PPPIOCDETACH ioctl [ 308.661143][ T9909] raw_sendmsg: syz.3.1186 forgot to set AF_INET. Fix it! [ 308.688779][ T9903] netlink: 'syz.1.1184': attribute type 39 has an invalid length. [ 308.840255][ T9910] netlink: 'syz.1.1184': attribute type 10 has an invalid length. [ 308.902573][ T9910] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 308.910866][ T9910] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 308.919854][ T9910] team0: Port device netdevsim0 added [ 309.363394][ T9918] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 309.392255][ T9918] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 310.778415][ T9959] sctp: [Deprecated]: syz.1.1200 (pid 9959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 310.778415][ T9959] Use struct sctp_sack_info instead [ 311.258224][ T9978] netlink: 'syz.0.1208': attribute type 4 has an invalid length. [ 311.266942][ T9978] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1208'. [ 311.293798][ T9978] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 312.254088][ T9990] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.1211'. [ 312.732231][T10023] netlink: 'syz.0.1219': attribute type 63 has an invalid length. [ 312.762292][T10023] netlink: 'syz.0.1219': attribute type 63 has an invalid length. [ 313.257786][T10049] sctp: [Deprecated]: syz.0.1227 (pid 10049) Use of int in max_burst socket option deprecated. [ 313.257786][T10049] Use struct sctp_assoc_value instead [ 313.418944][T10051] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 313.676509][T10058] netlink: 'syz.2.1231': attribute type 10 has an invalid length. [ 313.764737][T10058] wlan1: mtu less than device minimum [ 313.806808][T10058] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 316.796948][T10073] netlink: 'syz.2.1235': attribute type 3 has an invalid length. [ 316.811858][T10073] netlink: 'syz.2.1235': attribute type 4 has an invalid length. [ 316.820387][T10073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 316.843550][T10075] netlink: 'syz.2.1235': attribute type 3 has an invalid length. [ 316.853418][T10075] netlink: 'syz.2.1235': attribute type 4 has an invalid length. [ 316.864209][T10075] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1235'. [ 317.289391][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.302830][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.350256][T10089] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1240'. [ 317.953731][T10104] netlink: 'syz.1.1245': attribute type 21 has an invalid length. [ 317.963035][T10104] netlink: 'syz.1.1245': attribute type 1 has an invalid length. [ 317.971295][T10104] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1245'. [ 318.061539][T10100] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1244'. [ 318.174116][T10108] netlink: 'syz.3.1246': attribute type 10 has an invalid length. [ 320.950408][T10108] veth1_macvtap: left promiscuous mode [ 321.067549][T10115] netlink: 'syz.0.1247': attribute type 21 has an invalid length. [ 321.094336][T10115] netlink: 'syz.0.1247': attribute type 12 has an invalid length. [ 321.113996][T10115] netlink: 'syz.0.1247': attribute type 13 has an invalid length. [ 321.127389][T10115] netlink: 12926 bytes leftover after parsing attributes in process `syz.0.1247'. [ 321.780737][T10147] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1262'. [ 322.265951][T10166] validate_nla: 4 callbacks suppressed [ 322.265971][T10166] netlink: 'syz.3.1259': attribute type 10 has an invalid length. [ 322.287040][T10166] netlink: 'syz.3.1259': attribute type 19 has an invalid length. [ 322.297872][T10166] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.1259'. [ 322.514504][T10172] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1263'. [ 322.759504][T10182] netlink: 'syz.0.1266': attribute type 10 has an invalid length. [ 322.788311][T10182] syz_tun: entered promiscuous mode [ 322.893108][T10182] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 323.746028][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'. [ 324.023181][T10196] : renamed from bond_slave_0 (while UP) [ 324.538046][T10204] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1272'. [ 324.632500][T10204] openvswitch: netlink: Tunnel attr 0 has unexpected len 1788 expected 8 [ 326.520782][T10222] syzkaller0: entered promiscuous mode [ 326.542400][T10222] syzkaller0: entered allmulticast mode [ 326.709728][T10232] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1281'. [ 326.908532][T10236] netlink: 'syz.0.1283': attribute type 1 has an invalid length. [ 326.919882][T10236] netlink: 101600 bytes leftover after parsing attributes in process `syz.0.1283'. [ 331.905205][T10246] netlink: 'syz.3.1286': attribute type 3 has an invalid length. [ 331.932419][T10246] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1286'. [ 332.127226][T10249] veth1_macvtap: entered promiscuous mode [ 332.182553][T10249] macsec0: entered promiscuous mode [ 332.203996][T10249] macsec0: entered allmulticast mode [ 332.222551][T10249] veth1_macvtap: entered allmulticast mode [ 332.950587][T10261] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1290'. [ 332.960569][T10261] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 333.390163][T10270] netlink: 'syz.3.1292': attribute type 28 has an invalid length. [ 333.402276][T10270] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1292'. [ 333.840982][T10274] netlink: 'syz.3.1294': attribute type 27 has an invalid length. [ 334.108137][T10274] .`: (slave 7): Releasing backup interface [ 335.458198][T10314] netlink: 'syz.2.1305': attribute type 27 has an invalid length. [ 335.594375][T10314] .`: (slave bond_slave_0): Releasing backup interface [ 336.161300][T10324] tap0: tun_chr_ioctl cmd 1074820166 [ 336.376493][T10324] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1308'. [ 336.393067][T10329] netlink: 'syz.1.1310': attribute type 10 has an invalid length. [ 336.426444][T10329] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1310'. [ 336.854489][T10340] sit0: entered allmulticast mode [ 337.274639][T10347] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.1314'. [ 337.868495][T10356] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 337.910022][T10356] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1316'. [ 337.985969][T10356] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1316'. [ 338.688894][T10361] netlink: 'syz.1.1317': attribute type 27 has an invalid length. [ 338.884119][T10361] .`: (slave bond_slave_0): Releasing backup interface [ 341.270366][T10394] netlink: 'syz.2.1328': attribute type 2 has an invalid length. [ 341.301472][T10394] netlink: 'syz.2.1328': attribute type 8 has an invalid length. [ 341.311063][T10394] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1328'. [ 341.566861][T10398] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.1329'. [ 342.600021][T10409] netlink: 'syz.3.1333': attribute type 21 has an invalid length. [ 342.631844][T10409] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1333'. [ 343.053889][T10416] netlink: 'syz.2.1335': attribute type 16 has an invalid length. [ 343.102498][T10416] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1335'. [ 344.311398][T10448] netlink: 'syz.2.1343': attribute type 7 has an invalid length. [ 344.341971][T10448] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1343'. [ 344.771775][T10467] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1351'. [ 344.805028][T10473] netlink: 'syz.2.1350': attribute type 4 has an invalid length. [ 344.873084][T10474] netlink: 'syz.1.1348': attribute type 21 has an invalid length. [ 345.034027][T10476] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1352'. [ 346.120708][T10497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.553572][T10515] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1361'. [ 346.809706][T10515] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.924772][T10515] .` (unregistering): (slave batadv0): Releasing backup interface [ 347.042309][ T5832] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 347.111751][T10515] .` (unregistering): Released all slaves [ 347.134093][T10527] can: request_module (can-proto-4) failed. [ 347.517526][T10537] netlink: 'syz.2.1366': attribute type 21 has an invalid length. [ 347.585936][T10537] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1366'. [ 347.597698][T10539] netlink: 'syz.3.1369': attribute type 10 has an invalid length. [ 347.661531][T10539] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.694951][T10539] .`: (slave batadv0): Enslaving as an active interface with an up link [ 347.833810][T10542] .>c: renamed from caif0 [ 348.387729][T10568] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1378'. [ 351.503523][T10584] netlink: 'syz.0.1383': attribute type 3 has an invalid length. [ 351.511460][T10584] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1383'. [ 352.487183][T10593] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.1384'. [ 353.418248][T10621] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1390'. [ 353.479206][T10621] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1390'. [ 353.847140][T10641] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1395'. [ 353.860050][T10641] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 353.872673][T10641] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 353.919094][T10641] netlink: 'syz.1.1395': attribute type 17 has an invalid length. [ 353.927292][T10641] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1395'. [ 353.948392][T10641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 354.494102][T10629] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1392'. [ 357.517612][T10677] netlink: 1042 bytes leftover after parsing attributes in process `syz.1.1406'. [ 357.530066][T10677] netlink: 'syz.1.1406': attribute type 3 has an invalid length. [ 357.544528][T10677] netlink: 'syz.1.1406': attribute type 1 has an invalid length. [ 357.559876][T10677] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1406'. [ 357.686862][T10684] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1407'. [ 357.794328][ T5084] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10 [ 358.097959][T10696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1412'. [ 358.118113][T10696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1412'. [ 358.313950][T10700] netlink: 'syz.0.1414': attribute type 10 has an invalid length. [ 358.358777][T10700] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.651054][T10720] netlink: 'syz.3.1420': attribute type 2 has an invalid length. [ 359.659310][T10720] netlink: 'syz.3.1420': attribute type 8 has an invalid length. [ 359.667630][T10720] __nla_validate_parse: 1 callbacks suppressed [ 359.667674][T10720] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1420'. [ 359.842358][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 361.765541][T10722] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1421'. [ 362.092882][T10734] netlink: 'syz.1.1426': attribute type 29 has an invalid length. [ 362.118604][T10734] netlink: 'syz.1.1426': attribute type 29 has an invalid length. [ 362.144327][T10734] netlink: 'syz.1.1426': attribute type 29 has an invalid length. [ 362.175704][T10734] netlink: 'syz.1.1426': attribute type 29 has an invalid length. [ 362.303916][ T5084] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 364.468994][T10810] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 364.557201][T10810] netlink: 'syz.3.1449': attribute type 10 has an invalid length. [ 364.686299][T10810] 8021q: adding VLAN 0 to HW filter on device .` [ 364.761055][T10810] team0: Port device .` added [ 365.681671][T10834] netlink: 'syz.2.1454': attribute type 10 has an invalid length. [ 365.748359][T10834] team0: Device hsr_slave_0 failed to register rx_handler [ 365.929038][T10841] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1456'. [ 366.903589][T10851] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1466'. [ 366.946946][T10851] netlink: get zone limit has 4 unknown bytes [ 367.146556][T10864] netlink: 'syz.0.1461': attribute type 29 has an invalid length. [ 367.172739][T10864] netlink: 'syz.0.1461': attribute type 29 has an invalid length. [ 367.195703][T10864] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1461'. [ 367.739704][T10905] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1473'. [ 367.761994][T10903] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1475'. [ 367.772868][T10903] hsr_slave_0: left promiscuous mode [ 367.791354][T10903] hsr_slave_1: left promiscuous mode [ 367.974915][T10903] bridge0: port 4(hsr0) entered disabled state [ 368.100939][T10903] hsr0 (unregistering): left allmulticast mode [ 368.127002][T10903] bridge0: port 4(hsr0) entered disabled state [ 369.222967][T10928] can: request_module (can-proto-0) failed. [ 369.319219][T10938] netlink: 'syz.3.1482': attribute type 1 has an invalid length. [ 369.327306][T10938] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1482'. [ 369.869074][T10954] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1488'. [ 369.955229][T10955] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1485'. [ 370.259083][T10964] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1491'. [ 372.060775][T11012] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1501'. [ 372.094208][T11005] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1501'. [ 372.178678][T11017] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.186104][T11017] IPv6: NLM_F_CREATE should be set when creating new route [ 372.193519][T11017] IPv6: NLM_F_CREATE should be set when creating new route [ 372.200813][T11017] IPv6: NLM_F_CREATE should be set when creating new route [ 372.692337][T11037] netlink: 'syz.1.1509': attribute type 10 has an invalid length. [ 373.422791][T11037] geneve0: entered promiscuous mode [ 373.505317][T11037] .`: (slave geneve0): Enslaving as an active interface with an up link [ 373.952682][T11042] syzkaller0: entered promiscuous mode [ 373.963012][T11042] syzkaller0: entered allmulticast mode [ 373.982690][T11041] netlink: 'syz.0.1510': attribute type 10 has an invalid length. [ 374.001003][T11041] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1510'. [ 374.034174][T11041] veth0_vlan: left promiscuous mode [ 374.100724][T11056] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1511'. [ 374.110312][T11056] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1511'. [ 376.479314][T11079] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.1516'. [ 376.508330][T11079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 376.562304][T11079] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1516'. [ 376.576169][T11079] netlink: 6328 bytes leftover after parsing attributes in process `syz.3.1516'. [ 376.636758][T11087] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1518'. [ 376.653338][T11087] A link change request failed with some changes committed already. Interface bY4`Ҙ may have been left with an inconsistent configuration, please check. [ 376.687642][T11087] netlink: 'syz.0.1518': attribute type 10 has an invalid length. [ 376.900883][T11093] netlink: 'syz.3.1520': attribute type 10 has an invalid length. [ 376.992964][T11093] team0: Device hsr_slave_0 failed to register rx_handler [ 377.171755][T11098] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.907670][T11109] syzkaller0: entered promiscuous mode [ 377.957850][T11109] syzkaller0: entered allmulticast mode [ 378.253274][ T5084] Bluetooth: hci1: unexpected event 0x03 length: 151 > 11 [ 378.304765][T11124] netlink: 'syz.2.1528': attribute type 10 has an invalid length. [ 378.367052][T11124] __nla_validate_parse: 2 callbacks suppressed [ 378.367072][T11124] netlink: 210880 bytes leftover after parsing attributes in process `syz.2.1528'. [ 378.419985][T11120] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1526'. [ 378.733090][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.739520][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.912861][T11133] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1530'. [ 379.005461][T11133] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 379.046276][T11140] netlink: 'syz.2.1532': attribute type 3 has an invalid length. [ 379.074958][T11140] netlink: 'syz.2.1532': attribute type 1 has an invalid length. [ 379.514400][T11146] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 379.638595][T11146] hsr_slave_0: entered promiscuous mode [ 379.720368][T11146] team0: Port device hsr_slave_0 added [ 380.255900][T11159] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1538'. [ 380.436195][T11159] hsr_slave_0: left promiscuous mode [ 381.608981][T11159] hsr_slave_1: left promiscuous mode [ 381.639321][T11159] bridge0: port 2(hsr0) entered disabled state [ 381.724196][T11159] hsr0 (unregistering): left allmulticast mode [ 381.730820][T11159] bridge0: port 2(hsr0) entered disabled state [ 382.359876][T11178] netlink: 'syz.2.1543': attribute type 33 has an invalid length. [ 382.374790][T11178] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1543'. [ 382.917842][T11193] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1549'. [ 383.467425][T11206] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1553'. [ 383.494075][T11206] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 386.002245][T11222] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.1558'. [ 386.211222][T11228] netlink: 'syz.2.1561': attribute type 22 has an invalid length. [ 386.256581][T11228] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 386.283941][T11231] netlink: 'syz.3.1563': attribute type 10 has an invalid length. [ 386.308151][T11231] bridge0: port 2(hsr0) entered disabled state [ 386.345486][T11231] hsr0: left allmulticast mode [ 386.350520][T11231] hsr_slave_0: left allmulticast mode [ 386.361838][T11231] hsr_slave_1: left allmulticast mode [ 386.382614][T11231] hsr0: left promiscuous mode [ 386.411308][T11231] bridge0: port 2(hsr0) entered disabled state [ 386.442249][T11231] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 386.497009][T11232] netlink: 'syz.0.1562': attribute type 22 has an invalid length. [ 386.505597][T11232] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1562'. [ 386.753610][T11242] netlink: 9275 bytes leftover after parsing attributes in process `syz.2.1566'. [ 386.959657][T11251] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1567'. [ 387.095653][T11253] netlink: 'syz.3.1568': attribute type 9 has an invalid length. [ 387.121031][T11254] netlink: 'syz.3.1568': attribute type 9 has an invalid length. [ 387.187616][T11254] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1568'. [ 387.239947][T11253] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1568'. [ 388.243887][T11263] netlink: 'syz.0.1571': attribute type 6 has an invalid length. [ 388.272435][T11263] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1571'. [ 388.303446][T11261] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1570'. [ 388.914256][T11274] veth1_vlan: entered allmulticast mode [ 389.254128][T11279] netlink: 'syz.0.1575': attribute type 22 has an invalid length. [ 389.282470][T11279] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1575'. [ 392.602352][T11321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1587'. [ 392.611462][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 392.691335][T11321] bridge_slave_0: entered allmulticast mode [ 392.724625][T11321] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1587'. [ 393.718339][T11333] veth1_macvtap: left allmulticast mode [ 393.758295][T11333] veth1_macvtap: left promiscuous mode [ 394.039996][T11333] veth1_macvtap: entered allmulticast mode [ 394.062419][T11333] veth1_macvtap: entered promiscuous mode [ 394.145870][T11343] netlink: 'syz.1.1588': attribute type 22 has an invalid length. [ 394.170700][T11343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1588'. [ 394.237782][T11347] netlink: 'syz.0.1594': attribute type 21 has an invalid length. [ 394.276630][T11347] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1594'. [ 394.312279][T11347] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1594'. [ 394.369676][T11349] netlink: 'syz.0.1594': attribute type 1 has an invalid length. [ 394.392161][T11349] netlink: 'syz.0.1594': attribute type 4 has an invalid length. [ 394.442408][T11349] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1594'. [ 395.026645][T11370] netlink: 'syz.0.1601': attribute type 10 has an invalid length. [ 395.093770][T11370] veth1_macvtap: left promiscuous mode [ 395.465041][T11379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1605'. [ 400.080706][T11449] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1623'. [ 400.113533][T11449] netlink: 'syz.0.1623': attribute type 7 has an invalid length. [ 400.133703][T11449] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1623'. [ 400.189047][T11453] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1624'. [ 400.391494][T11458] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1625'. [ 400.426697][T11466] netlink: 'syz.0.1628': attribute type 3 has an invalid length. [ 400.457376][T11466] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1628'. [ 400.638420][T11471] netlink: 'syz.1.1629': attribute type 10 has an invalid length. [ 400.652366][T11471] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1629'. [ 401.108478][T11482] sctp: [Deprecated]: syz.0.1633 (pid 11482) Use of int in maxseg socket option. [ 401.108478][T11482] Use struct sctp_assoc_value instead [ 401.281961][T11486] netlink: 'syz.1.1632': attribute type 1 has an invalid length. [ 401.312254][T11486] netlink: 'syz.1.1632': attribute type 3 has an invalid length. [ 401.342186][T11486] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1632'. [ 401.405838][T11495] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1636'. [ 401.430168][T11495] openvswitch: netlink: Flow key attribute not present in set flow. [ 401.911386][T11518] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1642'. [ 401.941221][T11514] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1643'. [ 403.194534][T11552] dummy0: entered promiscuous mode [ 403.206478][T11552] dummy0: entered allmulticast mode [ 404.834850][T11581] netlink: 'syz.0.1663': attribute type 10 has an invalid length. [ 404.935857][T11581] netlink: 'syz.0.1663': attribute type 10 has an invalid length. [ 404.988174][T11585] netlink: get zone limit has 4 unknown bytes [ 405.247390][T11596] netlink: 'syz.1.1671': attribute type 8 has an invalid length. [ 405.272149][T11596] __nla_validate_parse: 4 callbacks suppressed [ 405.272167][T11596] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1671'. [ 406.031282][T11631] netlink: 'syz.2.1682': attribute type 7 has an invalid length. [ 406.052679][T11631] netlink: 'syz.2.1682': attribute type 6 has an invalid length. [ 406.187224][T11636] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1684'. [ 406.202376][T11636] hsr_slave_0: left promiscuous mode [ 406.546059][T11641] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 406.987081][T11646] netlink: 'syz.2.1688': attribute type 22 has an invalid length. [ 407.015992][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1688'. [ 407.453662][T11659] netlink: 'syz.0.1693': attribute type 1 has an invalid length. [ 407.489916][T11659] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1693'. [ 407.538774][T11659] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1693'. [ 408.556791][T11692] netlink: 'syz.3.1704': attribute type 10 has an invalid length. [ 408.582221][T11692] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1704'. [ 408.613245][T11693] netlink: 196 bytes leftover after parsing attributes in process `syz.2.1702'. [ 408.653304][T11692] batman_adv: batadv0: Adding interface: virt_wifi0 [ 408.705810][T11692] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.761006][T11692] batman_adv: batadv0: Interface activated: virt_wifi0 [ 409.302976][T11705] netlink: 'syz.2.1707': attribute type 27 has an invalid length. Stopping sshd: [ 409.344518][T11705] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1707'. [ 409.393389][T11705] netlink: 'syz.2.1707': attribute type 15 has an invalid length. stopped /usr/sbin/sshd (pid 5527) OK [ 409.638298][T11716] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1711'. [ 409.665183][T11716] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.724978][T11717] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1710'. Stopping crond: [ 409.789771][T11717] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.886052][T11717] bridge_slave_0 (unregistering): left allmulticast mode [ 409.893524][T11717] bridge_slave_0 (unregistering): left promiscuous mode [ 409.901003][T11717] bridge0: port 1(bridge_slave_0) entered disabled state stopped /usr/sbin/crond (pid 5511) OK [ 410.164794][T11723] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 410.268581][T11723] team0: Port device netdevsim0 added [ 410.306067][T11726] netlink: 'syz.0.1712': attribute type 10 has an invalid length. [ 410.352674][T11736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.456209][T11726] team0: Port device netdevsim0 removed [ 410.490329][T11726] .`: (slave netdevsim0): Enslaving as an active interface with an up link [ 410.601946][T11728] netlink: 'syz.0.1712': attribute type 1 has an invalid length. [ 410.632397][T11728] netlink: 'syz.0.1712': attribute type 4 has an invalid length. [ 410.640423][T11728] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.1712'. Stopping dhcpcd... [ 410.986646][T11751] netlink: 'syz.3.1718': attribute type 2 has an invalid length. stopped /sbin/dhcpcd (pid 5433)[ 411.024062][T11751] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1718'. [ 411.082638][T11752] netlink: 10398 bytes leftover after parsing attributes in process `syz.3.1718'. [ 411.102995][T11762] netlink: 10398 bytes leftover after parsing attributes in process `syz.3.1718'. [ 411.302901][T11767] netlink: 'syz.2.1722': attribute type 3 has an invalid length. [ 411.338396][T11767] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1722'. Stopping network: [ 411.572798][T11775] netlink: 'syz.3.1723': attribute type 10 has an invalid length. [ 411.593080][T11775] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1723'. [ 412.060103][T11789] netlink: 'syz.2.1726': attribute type 29 has an invalid length. [ 412.089314][T11789] netlink: 'syz.2.1726': attribute type 29 has an invalid length. [ 412.120724][T11791] netlink: 'syz.2.1726': attribute type 29 has an invalid length. [ 412.821338][T11815] netlink: 'syz.2.1730': attribute type 10 has an invalid length. [ 412.850195][T11815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1730'. [ 412.976494][T11815] batman_adv: batadv0: Adding interface: virt_wifi0 [ 413.004610][T11815] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. OK [ 413.084324][T11815] batman_adv: batadv0: Interface activated: virt_wifi0 [ 413.288559][T11823] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1733'. [ 413.300351][T11823] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1733'. [ 413.409868][T11821] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1731'. Stopping iptables: OK [ 413.692198][T11837] sctp: [Deprecated]: syz.1.1735 (pid 11837) Use of int in maxseg socket option. [ 413.692198][T11837] Use struct sctp_assoc_value instead Stopping system message bus: [ 414.372938][T11860] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.622676][T11860] bridge_slave_0 (unregistering): left promiscuous mode [ 414.653020][T11860] bridge0: port 1(bridge_slave_0) entered disabled state done [ 415.741693][T11872] validate_nla: 3 callbacks suppressed [ 415.741725][T11872] netlink: 'syz.2.1744': attribute type 1 has an invalid length. [ 415.763846][T11872] __nla_validate_parse: 2 callbacks suppressed [ 415.763891][T11872] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1744'. [ 415.786274][T11872] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1744'. [ 417.922341][T11920] netlink: 'syz.1.1765': attribute type 2 has an invalid length. [ 417.941973][T11920] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1765'. [ 418.036294][T11922] netlink: 'syz.3.1757': attribute type 1 has an invalid length. [ 418.058271][T11922] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1757'. [ 418.092987][T11922] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1757'. Stopping klogd: [ 418.294008][T11931] netlink: 'syz.0.1759': attribute type 12 has an invalid length. [ 418.301929][T11931] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1759'. OK [ 418.626144][T11931] netlink: 'syz.0.1759': attribute type 10 has an invalid length. [ 418.652353][T11931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1759'. [ 418.686924][T11931] batman_adv: batadv0: Adding interface: virt_wifi0 [ 418.732171][T11931] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. Stopping acpid: [ 418.800371][T11931] batman_adv: batadv0: Interface activated: virt_wifi0 [ 419.012313][T11956] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1768'. [ 419.279313][T11967] netlink: 'syz.1.1771': attribute type 1 has an invalid length. [ 419.292411][T11967] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1771'. [ 419.417115][T11967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.433285][T11967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.453585][T11967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.462944][T11967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.495329][T11977] sctp: [Deprecated]: syz.0.1775 (pid 11977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 419.495329][T11977] Use struct sctp_sack_info instead [ 419.638820][T11974] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 419.671252][T11974] syzkaller0: entered promiscuous mode [ 419.704858][T11974] syzkaller0: entered allmulticast mode [ 419.720909][T11982] netlink: 'syz.0.1776': attribute type 21 has an invalid length. [ 419.833578][T11985] netlink: 'syz.0.1776': attribute type 3 has an invalid length. [ 419.876478][T11985] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1776'. OK Stopping syslogd: stopped /sbin/syslogd (pid 5121) OK [ 420.506849][T11997] netlink: zone id is out of range [ 420.515149][T11997] netlink: zone id is out of range [ 420.526686][T11997] netlink: zone id is out of range [ 420.537782][T11997] netlink: zone id is out of range [ 420.548600][T11997] netlink: zone id is out of range [ 420.554482][T11997] netlink: zone id is out of range [ 420.560254][T11997] netlink: zone id is out of range [ 420.570421][T11997] netlink: zone id is out of range [ 420.577873][T11997] netlink: zone id is out of range [ 420.590920][T11997] netlink: zone id is out of range umount: can't remount debugfs read-only umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.161 closed by remote host. Sent SIGTERM to all processes [ 423.093688][T12017] netlink: 'syz.0.1785': attribute type 4 has an invalid length. [ 423.101622][T12017] __nla_validate_parse: 1 callbacks suppressed [ 423.101635][T12017] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1785'. [ 423.805446][T12018] .`: (slave syz_tun): Releasing backup interface [ 423.851301][T10431] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.950622][T10431] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.017450][T10431] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.108142][T10431] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 424.347662][T10431] ip6gretap0 (unregistering): left allmulticast mode [ 424.354630][T10431] ip6gretap0 (unregistering): left promiscuous mode [ 424.362087][T10431] n: port 1(ip6gretap0) entered disabled state [ 425.219521][T10431] hsr_slave_0: left promiscuous mode [ 425.225785][T10431] hsr_slave_1: left promiscuous mode [ 425.231723][T10431] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.239208][T10431] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.252503][T10431] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.259923][T10431] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.273136][T10431] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 425.280203][T10431] batman_adv: batadv0: Removing interface: virt_wifi0 [ 425.286395][T12020] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 425.298457][T12020] ACPI: PM: Preparing to enter system sleep state S5 [ 425.312917][T12020] kvm: exiting hardware virtualization [ 425.318595][T12020] reboot: Power down [ 425.328704][T10431] veth1_macvtap: left allmulticast mode [ 425.336028][T10431] veth1_macvtap: left promiscuous mode [ 425.343049][T10431] veth0_macvtap: left promiscuous mode serialport: VM disconnected.