last executing test programs: 8.406281457s ago: executing program 1 (id=2054): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xffbff024}, {0x6, 0x1, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4004743d, 0x110e22fff6) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) 8.096011457s ago: executing program 1 (id=2058): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4240, 0x0, 0x9d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4a2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123900000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x2, 0x0, 0x0, 0x0, 0x0, 0x37a05, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, @perf_bp={&(0x7f0000000140), 0x6}, 0x1075, 0x0, 0x0, 0x0, 0xffffffffffffbbfa, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1c0000000000000}, 0x0, 0x1, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="c1dfb080cdf29b80bed0b26a8035", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x4800000000000009, 0x8855b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x4, @perf_config_ext={0x6b, 0x1ef7}, 0x11efa, 0x6, 0x27c6, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x46, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x0, @local, 0x3}, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)='\t', 0x1}], 0x1}, 0x41) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0x5) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f00000001c0)) 7.938962341s ago: executing program 2 (id=2061): r0 = perf_event_open$cgroup(&(0x7f0000000100)={0x2, 0x80, 0x12, 0x69, 0x40, 0x7, 0x0, 0x5, 0x8b02, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, @perf_bp={&(0x7f00000000c0), 0x7}, 0x104, 0x0, 0x7fff, 0x3, 0x101, 0x9, 0x5, 0x0, 0x8000, 0x0, 0x3}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x64}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x6a}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.666863449s ago: executing program 2 (id=2065): socket$kcm(0x11, 0x200000000000002, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r0, &(0x7f0000000780)='syz1\x00', 0x1ff) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="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", 0x145}, {&(0x7f0000000a40)="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", 0x2f0}], 0x2}, 0x10049014) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x40000004, 0xfffffffd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x400000000001, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000e95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) r3 = openat$cgroup_ro(r0, &(0x7f00000003c0)='memory.events\x00', 0x0, 0x0) perf_event_open(&(0x7f00000008c0)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0xffffffffffffffff, 0x2b4}, 0x0, 0x10000, 0x100, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)="d8000000140081054e81f782db44b904021f08020a000000040000a118000200e00000e4ffff0d1208000f0100810401880016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee080005c8400f45312b3429fa0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg(r3, &(0x7f0000000c40)={&(0x7f0000000880)=@pppol2tp={0x18, 0x1, {0x0, r2, {0x2, 0x4e24, @remote}, 0x2, 0x2}}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000900)="5d10cd6c58b0392b068157d4ee77056e37ddf3910a54fb3793a141e2e366a1fdde7531da1cdc04dc7d32c2c635ff0468d04b9a51920885fb1e00a2dd0554314081ef7997d07120c9467c325d9770592abd6dd4560932dbc9c38788691c4148a9d5400ef6ef62938fa16f217a78f5f6ce0cd322d80ec178b940f51a49406ea14288c6a3dd63eb1b9dc7651bd2dae93a7339a89d6422d482669283ffc413ea6cd1f8180124bb93cf012a9c", 0xaa}, {&(0x7f00000009c0)="fb6f17a27b840d0c4b195af726c2bd2208f9aad39cd896a12fa3346c6d7bfb848a7c614f26cd6ead3315936705d6113ac6b0b58294618047acae1beeba9497954927b95191b1d2f0c12d4df7759c2a11dd792473fb9a07748fdd2595f360c3389f6b9f5f13df1f669cce301cc0992d8a7523555fb6a7ccf7a7d26c8a9bb54f3f336082b5976e550cb0884fdce9a6cc8dd8522710e2602d91a8da2040e3cf82232f02254b0700d4790748ecb36360d084a085f9022459e9a0dd0a5ab864b1a1b03d836606921692", 0xc7}, {&(0x7f0000000ac0)="a8cda9c9b9", 0x5}, {&(0x7f0000000b00)="581240a47c0591065f9a4f67fe84d3108e4614a8599076ee40cec791d8e598b6eea4ec1bbec2206a5a79c7b69d08737914b1f4a4db1bff23de6c6ac3bc789a5c538195dd53b07d25bc5effdb5cfb7d2bd407047a29af5df57c755299b988b8fc238234b722b713", 0x67}, {&(0x7f0000000b80)="bd94bc62b2e6956f2c821c1bc794339627d891f4db7fdc4d80f8e57436fec162006b95d9a708eda552", 0x29}], 0x5}, 0x4008000) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000800)={0x2, 0x80, 0xf2, 0x1, 0x2, 0x4, 0x0, 0x401, 0x8, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x3, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x800, 0x1, @perf_bp={&(0x7f0000000400), 0x1}, 0x8080, 0xfffffffffffffffb, 0x9b32, 0x2, 0x7fffffffffffffff, 0xff, 0xfc, 0x0, 0x0, 0x0, 0x80}) r5 = socket$kcm(0x10, 0x2, 0x4) recvmsg(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}, 0x12200) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d64050000000000650404000100000004"], 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa6, 0x0, 0x0, 0x10, 0x3}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r6, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff31000000330020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7473ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x6, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES32=r7, @ANYRES64], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup=r0, r0, 0x32, 0x31, r3, @void, @void, @void, @value=r7}, 0x20) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x10) 6.706951486s ago: executing program 2 (id=2066): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd600664f7931fed6bd954b43370e9701", 0xd8}], 0x1}, 0x60044084) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="f32288557b39864701b58ed1b7325cdc84870bf9ed766ce3f3e2e732faf954976d9ccbb0554fa383bdbdaf0c4915a7cbf315979cd8b7e54dbc8876bf343778425fd8f09978abb4f8681b286cc66ea0784f5d27218431830dc7591f1a55e29d004c2ffcb5460c1da7755604186e5c0e66362dca0497db4e838836f3e74371bc5390b842129f40dbfb3aac04ac2cdfbba4b12e1810d2e372df71be86d82e453656e7eb41af323c2e410d9698cf8566e3d4b29bbbf424602dabba4c43355413a4246a0aa211c8f47045cee6f9e2cedeb3dcf5863097211e88f81ae0c66d4f6b7e935739405770f13b3ca90b9624", 0xec}, {&(0x7f00000002c0)="cfb1ab00d495d30aaa4d48234e9de21f250b2f70af6f614570f26d8d6b1d2870b97f052fb4845d1dfd22f5b59fb16b03bfd2f4c1494b82a784f640bfc1a77d7904109969ab9ab7a544222dc7ef96bd295a6fa1d07294539e2e2198301ebca6476814c09b7e80bfa2cd6784fb1642b2ba27d46c77caeea28d", 0x78}], 0x2, &(0x7f0000000e80)}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) r3 = getpid() perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, r3, 0x4000000000, 0xffffffffffffffff, 0xd) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r4, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x80, 0x61, 0x1, 0x40, 0x0, 0x1, 0x1421, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xaa, 0x1, @perf_config_ext={0xb, 0xa}, 0x10540, 0x8b71, 0x6, 0x0, 0x7f, 0x2d3, 0x0, 0x0, 0x7fff, 0x0, 0x6}, r3, 0x9, r2, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 6.660566008s ago: executing program 1 (id=2068): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd600664f7931fed6bd954b43370e9701", 0xd8}], 0x1}, 0x60044084) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="f32288557b39864701b58ed1b7325cdc84870bf9ed766ce3f3e2e732faf954976d9ccbb0554fa383bdbdaf0c4915a7cbf315979cd8b7e54dbc8876bf343778425fd8f09978abb4f8681b286cc66ea0784f5d27218431830dc7591f1a55e29d004c2ffcb5460c1da7755604186e5c0e66362dca0497db4e838836f3e74371bc5390b842129f40dbfb3aac04ac2cdfbba4b12e1810d2e372df71be86d82e453656e7eb41af323c2e410d9698cf8566e3d4b29bbbf424602dabba4c43355413a4246a0aa211c8f47045cee6f9e2cedeb3dcf5863097211e88f81ae0c66d4f6b7e935739405770f13b3ca90b9624", 0xec}, {&(0x7f00000002c0)="cfb1ab00d495d30aaa4d48234e9de21f250b2f70af6f614570f26d8d6b1d2870b97f052fb4845d1dfd22f5b59fb16b03bfd2f4c1494b82a784f640bfc1a77d7904109969ab9ab7a544222dc7ef96bd295a6fa1d07294539e2e2198301ebca6476814c09b7e80bfa2cd6784fb1642b2ba27d46c77caeea28d", 0x78}], 0x2, &(0x7f0000000e80)}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x80, 0x61, 0x1, 0x40, 0x0, 0x1, 0x1421, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xaa, 0x1, @perf_config_ext={0xb, 0xa}, 0x10540, 0x8b71, 0x6, 0x0, 0x7f, 0x2d3, 0x0, 0x0, 0x7fff, 0x0, 0x6}, 0x0, 0x9, r2, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 4.50764776s ago: executing program 3 (id=2078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x2, 0x200, 0x20000, 0x1, 0x7fffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x2}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000040)="29d1d9fce4e5890b2afded29878ecc3c9f1bfa341461613cc346a3a21f85e4fc4f3157ed3334b1756b7dd4db1a63dac375c2f033ef7007303c47c7b22dddc810052d01b2204378946f8535533eb7dd86917c573221b7a7a1a0869fa85cb602cc3c6be156ccae791c6dea1aa3fff79345d0804e492d6024bc9ce4443a26c721dea6246433c546c2ccc7368453ab07025acf2fdf7afc7c4c3534652d398e0cadc2eb51afbe4a4b6331c2286627", &(0x7f0000000100)=""/79, &(0x7f0000000180)="2b9ed7e1ed4e5558ddf332df86d03455eb20374775e7127e5bd87d28fe024c20379885663563033a3d9e369b8558bdd2666f8d16d8c8ee95df170ac8bde8d1d3c285b1d59b6381b72cfef8f62f1842727248c1d54b3e76ed60ec3d0f85fa09057e511a90fbd17c5a63ecd5a937e6351ceab7c43542856c8ae7c0583dfe6d27b643486a2fb9e6a6afac790aa6ba0023fa08f3b9fa", &(0x7f0000000240)="40aedb945c881ad4e40b5f06a0598cec4e58993f374c4287e397d4909b3e4986c66db957e3d88a77189c078684355d6b717b16fbe00c7e660b820ee1c39a438e864a7dfd4338ca6c764c5ba21ee2559fd1507e8caed840479f58015abc9b78c0eb47ea3ffd5f7cccaef38e", 0x4, r0, 0x4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r2}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r1}, 0x20) 4.474336101s ago: executing program 3 (id=2079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0x0) 4.327210035s ago: executing program 3 (id=2081): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20002, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x2, 0x4}, 0x50) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r1, 0x0, 0x2, 0x4}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000ac0)={r3, 0x0, 0x0}, 0x10) syz_clone(0x20021000, &(0x7f0000001180), 0x0, &(0x7f0000001040), 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x2, 0xbf22, 0x1, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r6, 0x0, 0xa002a0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0), &(0x7f0000000240), 0x1fd, r6}, 0x38) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@fallback, 0xffffffffffffffff, 0x1a}, 0x20) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f00000000c0)=[{0x25, 0x1, 0x3, 0xfffffffe}, {}, {0x28}, {0x6, 0x6}]}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x40000100) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) 4.14214104s ago: executing program 0 (id=2083): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xffbff024}, {0x6, 0x1, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r3) r4 = socket$kcm(0x1e, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003480)={@map, 0xffffffffffffffff, 0x3}, 0x20) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 3.618653256s ago: executing program 0 (id=2084): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = getpid() r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x0, @private0={0x76}, 0x2}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)="bb", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="20000000000000008400f6ff070000003d3152a6773eb7d092000000000000002000000000000000840000000200000076"], 0x40}, 0x20004000) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x9) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYRES32=r3, @ANYBLOB='$'], 0x14) r4 = perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, r1, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x66, 0x7f, 0x8081, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @value=r5}, 0x50) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r6}, 0x38) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r7, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@volatile={0xe}, @float={0x10, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x61, 0x0, 0x61]}}, &(0x7f0000000300)=""/44, 0x36, 0x2c, 0x1, 0x7}, 0x28) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000500), 0x4) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r8, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 3.519324378s ago: executing program 3 (id=2085): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(0x3) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200048cc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000001) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB], 0x48) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x4000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}, 0x100000, 0x7, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080", @ANYBLOB], 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000001000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x1200000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRES64=r3], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000001a124fb0000000000000000000000000000000000c280264c80e1b3cf9ae8f7d2a021238ba49919fa7cb4923c49b27f5820241e33cc77953a45495b257055a0ec25f1ed1040e2e9e8e946eb6128d4396ea9befa6523826ccc5a4393dffa2dbdbeee5fbdca820de085c6d849a5fbd0469b992e0aae77d26fe6121122b0454e68d13ce638f6db43f4915df16cbbcb995772087c05e7e9ea518ae06cc5ac3d23aaa80f532685a69a94ae8c14c2571a5a3a37ec955148a645d9b537e00d5dc36c6f2c38b6c0644341ea8a2a017b6937d8830ca6b7a6e922a2f05e55936e9e03818812a72c01b2e6ca6b6161191af701b10629d378eafbe768790867d6fe6519b1c9eead25fb4b6dbbef94b153311940ab16acdb4ede6cd14ae3ebcaabc7233bda7671f3881509768f4d512fb57068911fbe86836ab84f40a5d5984e5d05fc3f15f8dce759a996127198a8e92eb6c7e37c919e0259d11593bf78d692aa3ae5e853360ded5b4f73cc1bfd86c6fbad37"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x3, 0x0, &(0x7f0000000000)="259a53", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 3.350739473s ago: executing program 0 (id=2086): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async, rerun: 32) r2 = socket$kcm(0x10, 0x2, 0x0) (rerun: 32) r3 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x3, &(0x7f0000000000), 0x10) (async, rerun: 64) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000300)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a1280001000002020000000000080005007a010401a80016002000034004020000035c0461c900004f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee501534eedba07d6e239b7a1ca16854695d1f79064485e75106300fa125f3d4ece1a0fa80983a3f1fdb3fefe626503fd22d1cc58463d0346a61fde641561ee9c811dc0c1cd706ff2f41398d8e7369039e7ff837d3150d78569e4243b96f7e5080199891344de62a210156a7b0a", 0xd8}], 0x1}, 0x20014000) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180000000000000028000000280000000500000003000000010000fd020000000501040000000080050000004d3655070000000000000f01000000b500612e6100d2fd08c3499d6c4e74f01d4e21082b1abb5ea8a506d5d6531d9d5707184c896c7bf8fdbc45"], 0x0, 0x45, 0x0, 0x1, 0x5}, 0x28) (async) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000080), &(0x7f00000001c0), 0x1000000}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x2000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$inet(r3, &(0x7f0000001740)={&(0x7f0000000180)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000001680)=[{&(0x7f0000000280)="75b37f576dd523d1117268f1764350190fe2bf6fa5999260b92949f2f00ca0", 0x1f}, {&(0x7f00000002c0)="6c4b5974b7eaeb1587fc7379918d6bf3f9b180139e0f3b32b2424c012cdcd07c3444ac39156be5277d65a9cc9405a9f1e88546b5aae1b901a28bad", 0x3b}, {&(0x7f0000001500)="e48fb6280dc110a0f8e0625652d3794f38954983469f7c803ac88e4ae13539ceea131c7af4b56b3814240342d71f5b", 0x2f}, {&(0x7f0000001540)="751d1c564cc19fbd1af07ba56990eab37b3967d3dd3a7a42d49f1be2828cd112d4217fef4a813521c74c0d201e73037009a40e77ce46b6eb06d5d0cdab45e2762584606ed908f4494e2903f5310e165b259860b65ddc888e5e9e358c29286bab3bbc7adbef00806428e26afe421655a3fe6ce11487f0adc9fd1a8e90b5e8408219cde530cf69b30b9f83ff6f09f09608", 0x90}, {&(0x7f0000001600)="35728e5015b5e98544245dfb228bcdd0b9e0ce30f8df50fab894085d70d9ebfe8f903fa049fdd26ae2a38a01b0c0595060fd1c308c5fbe6846fd459760e4014cb7192e11293fda66e47438b8b5a63f24a101f60ea7b0b62fa0782693ebdedc94afad726751c0a28b0846e6811f7c76d75535b3", 0x73}], 0x5, &(0x7f0000001700)}, 0x85) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r4) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x10) (rerun: 32) sendmsg$kcm(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000000500)=""/4086, 0xff6}], 0x1}, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0xff, 0x4, 0x0, 0x0, 0x0, 0x2103, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0xf}, 0x100904, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xc, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000002000000850000000000000000009500a500"/41], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x29, 0x11, 0x0, 0x40019) (async) socket$kcm(0x1e, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x8c40, 0x0) (async) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000321053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f00000001c0), 0x4) 3.165402648s ago: executing program 1 (id=2087): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r2}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xad5, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x5, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 3.164807769s ago: executing program 0 (id=2088): bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e00000009000000020000000002000000000200", @ANYRES32=0x1, @ANYBLOB="ffffff7f000000002eeccac90fa3501ed80377000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000000000000010000000200"/28], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0xa, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1, 0xffffffffffffffff}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xa19}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2000000}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x3}, 0x94) r4 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x29, 0x0, 0x29) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000a40)={r2, &(0x7f0000000a00)}, 0x20) 3.163571089s ago: executing program 2 (id=2089): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x4004743d, 0x110e22fff6) write$cgroup_type(r1, 0x0, 0x0) 2.915580296s ago: executing program 2 (id=2090): socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x4240, 0x0, 0x9d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000cb000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff3a2c}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e01068500be"], 0xffdd) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x69, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x5, 0x800}, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f00000000c0)="5f555209d7aa9b5642ecc217af76cc319ac714dd198f462d38c2cddca9d8e4461535da2ca641249ae901c9caae8508e8822b43fba232b270f46caed1581b9601a3cd0d7bb3169a", &(0x7f0000000240)=""/89, 0x4}, 0x20) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000300)="c1dfb080cdf29b80bed0b26a8035", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 391.257249ms ago: executing program 0 (id=2091): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x22a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x8, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000200)={0x6, 0x80, 0x0, 0x0, 0x40, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_int(r0, &(0x7f0000000600)=0xd, 0x18) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xd}}, 0x0, 0x0, 0xffffffffffffffff, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socketpair(0x1e, 0x1, 0x0, 0x0) close(0xffffffffffffffff) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff5, 0x80000001}, 0x0, 0x200000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40001) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r5) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40305829, &(0x7f0000000040)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000100)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000500)=[0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0], 0x0, 0x84, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000640), 0x0, 0x0, 0xd, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) 387.632959ms ago: executing program 1 (id=2092): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061004000000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x0, 0xffbff024}, {0x6, 0x1, 0x0, 0x7}]}) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 315.5098ms ago: executing program 3 (id=2093): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) perf_event_open(&(0x7f0000000380)={0x4, 0x80, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0xe802, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10, 0xc8, 0x0, 0x0, 0x2, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001840)={&(0x7f0000000040)="8a50f1bef98ce23409840dc8d5320b3f1803014dc27f784680d31c36933c705b03e217af62de510f17daf4", &(0x7f0000000080)=""/240, &(0x7f0000000780)="e4b435245e180f837ae45e05d00a3e95fb91ba78411e8d4b03eefc4b32364df26fd887a4db419076dee25f95522102cb3091f4731232e35de8e57d45a0308934ab42fcd3769b37e86e966072deed4b184686a120b0ecdf8342b4224ae5a768079f4cc4529e4c35427c97326cb5955ffc7039e8dbe475f075c080811f6719cdc07ae3861ddb7d2e2e3bcca34001963dbecca22a7d875853de77fc15dadb12bdf76cf1f8b801f8d9c5c6177501b296fe02e07858297c2d340a8de712415e89385a2ba1fa5d12421af877b7a82189a3f5d88c178e5fddb700f6d78671c7299d37c0d03bfc14899a041d1f58b63646ed763ee8e5f03cd25bcb0d779ce47db1ba78a55c95149eb22957f6f0cbb31a561d658ddc4dec40426e248ee0f3d30b67494bef047eb07ddcd033e5c032664dace4748742973ffa50db287f61c9fd82a22bc9f25dc9156c62eb1e5bc2be4f20c2fcc30c8d62c52cf94e2fcd198e773bdceaf19fc69a12309e82910523f8367e34e27b6480c6a511fbc4ff559d3bcfafd3af86fee91e39b5c6c99532c1223d73b5c5dfb07e3880cdc205f14128b3a2d6ff7c07c4d3d9f5b168fbc29d2764d7d522323fed7a502284cd210343bdb4966242f316a2dc92580fc1b123bf3961fac09dc11074cdca2963ad1f8b95d5bc946c596cae8b97b3b3169a51dcfe395a26bed855c2c903fe0b92c6e756b8d51fab619f16b93fca8f0ee558e69472b42c324ec848394d1719e7ec4f33bcd997b660553d93ef432d1f1b0dab76f7181666ad487792d49be1c3783d6010d9b7f388079958ebfc77888f59bf72975cfb9b975d39f2fd2eac0a0c2cf3be7202f94f13493f5b509ea7c0c386244509d2a9b1779348451a80ec308012544f2ccd95f31f4468b582d4eb3c076a81538b3bdd38fcd022d1d57ab78fde924be8aa267e173e67dda33efa8af27a0bf768f9ed60d7892680c44a954d4a74faa59e487e04514aafbd7c8b3ade3a3fa2c1d0036480dbf0214cf7a1f086dbc56d3d85b127e33fba8161d96b828b5854e804e0db4ec66179fd9603972b7a2dc2303b6eee3053fb4e3401d0954d2fbafbb70c8ba0ac1cd04b215ef79e1999b823b98b128cf0215ac76d90d700a265ee1177fa2f6a2c33913fd7eaf8336b7c5bbc7ef8c5ab6cce9e882dd6e5ae53a4d6ded801d7642ef910a9bf4e86cf2ae55d78cc2c1a3da4d39780150ef36aa38b421eabde1d1568f3c4032ea05dc0de7af5ad04c9926997b39c8483fa92900a856be1feef2482128dc75a6df04d290917827c02bb5c7c0b9ca7357e734d9bc8d881a54af5370605e93c665e29d9664a88ecb8a7054598c707ee4fc4026bb5e95be75da598272f4da1fd88c9e3a0f8efbaa5e0519e85cf5901bcab9ff4fc7ea0d9a5157a34061be3e8067d2d3627b81b00c3d921aa0ad11d777a0450fc120a5bfe5423739936318b58b8d32457341083c77fdd7f842e8fe469d167ad63520d40f52c11327a3c354c298255870b52e87570301775241abaff01f025ac3156a6bf032f0ed3184aa2aaa628c547052ca87856a2e2719ee82d1d0418bb0b5f653f0ff5746c5d2412aeb05900c9cedd572db7bba42a0bfb12daef00a925586c344c030c9a10baaf3f8a81ae1949cdfa8d662beb48e31e5efffe3a0516cff3c6dc4aa091a7dc3b7552b877a734056f70707b47d3e5ad99096739ff54fd86a6b97a770e0b4b73ddec0e1741787e8197091deba21adcfab1f4c5f5c441c141f17e6674e32cc21061a529c1ad91fe8ccd70ca763630b7376162df2d99fb266e5ad17421420e7bcfd08aa3f732f500a0841447a857a6724ec812e1b436dda36791a0e26eefbe07229e50879210bf5af2b4a50542941bba9a4eb82c64198ce304b76176d573cec5181c55006981617bedbbb0c98121edc55f4a41077af5a6f45dc7189b79d7325259effd3f954aed4f3a1a02fd7ed8c7182ef76fb102d00b216d5aa6defa93a5cd1c243a653e0e8040810f519f9fc85fc81809805aac5820364620b2a9e10a02c920e4f6c32df74aafd51d7a95072ffe09730855b3f78b0f27491462db14078af1918bb61ecf2cc4572b26037a59f203b84f3c6f56a6cadefd027c299927700efbdbe9d677d7838c9c2e323ea86f8c66a9c4cbbd21355d55c77cff1a0b934fb7d5022d9869e416d66285983338bfaa2fc723d516226afe2044c4a2f0ca31033f0317e7f0412f5533656d4b3199d228949f59c02320e194cc6af9e7b023a61c393035cf55d3104c1f09113ade1a92d537a7e6c226271ee0fc65cbeacebb257f761039f9807392d3ae7a18b4fb281f41570fd2de1e8c23ff1b54fc9e6c103d7405d94ba934a5fd2c5360a979ac8e536ac3bd42413ff5653ffea6edb266f85ea3f86d9c315322055281e57d4b4d5a2137ade43abfcd24e0311006bb3582b9a4fca46a67981a0463508bd9f6276b9092cfabb4fd8d9d910ed0d6e9b0985b507e658c1473fe7cfad754e428cafc0a8fc512b9f11a3ae9d5b2dd9a5b8ff40f8849003342e43a1d7699dc925a36ed7096536634656e0b94d16939135c083e13ab46cbf5a3a410e42d64e37da2dbcdbfdc6d4be039b50cace60670167556ecb1a67cffeaa400feeae4cd729259376ab2265ad6d3719198ae826d0c738e63e2af005da151077871661e5913e19ceae0327613cbf2c5d94bda34a96f76160bb9976918dd4879ad2266b19de3590d09a2a3aea5582e9f2803d598be8a1057170aef81012230dbd99741a877c7bbec629d7ce71a4b6958b7dd38ce18ab47deac95e7c631538a07d437fe626ece804a20be3200926c14d262d74a1dd56f72f9339c056523389cc8d937f2db9f8f1058f90238fa19dd2ea51df3592952f88a2a497ca6eb9ac7dcdad610fd17cdfc8c7078098a17b8470aa74a3aed1401a803db6e99c8849dde58c5f1252a63fe2d913f830cb96c9e4a8345df14668af843e1801f0467e74c7b47bb228c848369920d45a895942032e3a8af70be1f204222390f595275457511abd69f2a029299436ef826971a6eaa8c6874dc8e93d11d7a57a53fdaaa637a52cf0aacc98d0a8addd4e3613d526991ad7ca23ad14247456a4d52f4b9c649cbdf89646e7dd7e6e5de932192f624825739ca169d00be5f89732c86d73158a167905ca2513850caa1c7265f93a8be060889635ce5f2c4226189237de88dce6f7597455f7b977c484929cf1b72e02b59d0e7f5de09182d581b9e35fd0a5ffa979e114bcad671165f7cd4de087696d7c72348ac1699a334de49dd0347a5fbc32e135cb27240643f51658d81f903d9295b53489255528eb63833d51741d8de5c37d22a5ff7445c0e3ededc6cab7c2a942cf9066d61f50c61366003ee9c39b81dde2165258ce98d34b8fcd47c6ffdc9e8c9acaa7619e133fc6bccada077373942613aa02f0c84c1bcf8b49b1d3273ffb617ae5b8b841759b0937ba1532bcf13e4cf687c527da025b610b9d8c385bca6e020209e511bfc1c0044f2586cf60441f68123a9404287041e18726a10176609a86b6c595535ee2c6cfa3a18dd32182a11d7e45102107f4ba36205bb972c1f8c3c73c8a3366d63512f3bd25980e72662612d7b00c2ce754bc0a51fd78b989b864715e3076903a80e402e0bc4b38b9e5d5d081bad4f814e9806a3acc9282405d7fc559b282e15498a8214c0d787b496083e4d93ef116c8d456a56c7442d114410d9751500cf7ceb9e8661366907b52822162ef4d6e04371f3232e33ed7367a6c3cfd5262c0d6fc7d6a2366100b0ea08c64e85a70470683f0b96fa985dec2383f0a5e1acbde50f21eb4bb53c951b3d37dbe60393f517ae119bdc1a2688e6fbc0643416b2102cc23cc045f832f3e81dd732ec5632cb75f045feaf99886151928e1eb0a10e8b1e1dd11bd53b93ca104ff1116c22bd3c6402ff7b36f7d70ffb3f6f6b94a38461f33ce2c292e9cc530d8ce5e5d607525208a5eb3a37151a657b13dd4be5b966451760ce34aa49194c5d62c9f328aea63fa9ba3bf9d9e2f5312346335c6465917e0a347313ba682dd04711b1d44771ede188aaacc6d3cb3d8ff2fa94c1610e3588cd1a85bb9e86f4fd4138703ea7778760cba6ed01fd033514717d4bffea3a76a1ed79e7a6d26c0c363519626af2e332d89e4dd4062707c4e2fab3c43221a1ce3a59c2f6f544cad0b09fc502e028770b0bb52a6c2f292a91a8419867cb08e00900560dba72d23d1d15251fb4de42567cd79d1550707941cdaf62e5e6c0fb9800a9e55623426a7b4728d888ccd180ea413e98a3de8d148ad7b0fc844ea8291b7e49c07b5baf0fb1982a3acb52533afc20d7df936298d24cc190d8ca33c506f6a6a36d05c1ec7e2a6e865c7f54d4cd0862a6889f65ec4d1db42963c46c715f9408fb7597e6a8f313fad3633c71443449b6948f8a7f1775c023c4fc679eed480f15244febfbdc02a525be77195cf6eedd0ff75643654660bd5d7f95dcbfb8538b7ef06373b52e3008c7e99f0fdba80805e8c6223b12ed497e36355b3bf05ebf8e0b60eee8d7561ae8de4b9690bc0380b491dfa6e608614b0b0ffdc1e3d5db563d78db87a0c8f3915f93995d6aba7dfafcb6e943c800dda1052b917ccce384b46882894764ecf2a7da417e9a6bab3545a39d70112462ba3d02d9334c5b7971b22ca8274eba8e2a42501ff2ed335f35abbc1095f7d11738c9363a7e26fa2f866aed0d4c991b54a791053fa9adb0fd201b38c21b94b3047186078bbf19eb9e0576db9481c459ba3a28e0e7c47955d5d9941dd06dfe74131d9fcb22f612d3a805e8b8aaa9d1714c120141133151e24d74f49b621dc93a2533f11c0ba0d1546441b055232658257810907a0abbe25ed0e766f9ca28ab9f6c8e102639eb30d26c3f0e9a84f2fa964ecc55764f7d460d1037cfad6f930b9aafaa225877d1452b521d11b53c5ff92ca2a6e84008503532227d53dd9d438275a1c5f6c7740516a969a4b7719da3632b6ed249ae3c60aade36d667e64121d71c6a14f96bbc3b325e9dcdd613ddf733081aa6840db278f94e3ca1e9be375e51bbeab755d4f8618a55ff6715b5bc67a2b244ea76e74b5f9edbd972dce7c5aa61ea8ccde85fb5a28f9470f9b91ce1a771b7f56eeccd2f6348e6bc1ef0b71a2d24a3e6cfc4ff90e449c7fdfef4126691e95a2422cf38f55dc16427e202088f893d33091f5ec3d1ebfc84a8536b9b3fd0228b27a45d60a367202629314a13fcabc5bd11c52e44a46d804fd02f7c6ff53fc0914860a20af99d27a217a088c42e137d7aadc38c783b4be5e4fa5847e4d1be7e0677b1504717eeeaa22241fb21ad93a25f72026446c09e2df4ea7608d2ce01b637a3d2cdbdb01414f15272aa9f37bfdf7518b75180e3989c9b3df66472472f0aaf7385fcd8b753ccee611e8168f384de3c6966b2940a745cce2a93df619abffe19ae7b17e86d56cb45d2fa64cc9f002fa38fe6f0a179c72b825f8dda5f710c0f4edc33a82add4f0d3bc9b69c568cf2ccd4713371c5017bbfc1576e4a99df68e7b2cd291fe4f27e18a8fda9bb05a85e630092ed5809b71c58f1eb91cf105429a591da9a259e6d7e9cf9a5c38b2eb6d38426fcadabe91fbd53be2c9f0dde94c00480f83aa516091dc25528644d4cdcf4b4d3afe72bc5000b70cfa70059336e0084ca8caf05a0a98c2e3259eff3a9019af9a43a69ce5be7e8434ee4d2961e4706b81b6f027d6e02a3fcfedc5170d3fb79a123c6b3f807a9e1e78131600c2e9231552d426d2da1fe29a5acd20ca3d30652ca", &(0x7f0000001780)="de74a9fd7f1e0c73d3bec7edb080e252a6bbe440a67e4c7e707da41c35a0dea5428ced84ff35ea8a6b016f022b9d76d9942c0224a66258c6731c8148297a62d69f656610aeab08a0ca7a4dc0fae67bf640243efacafc63412c82f73024d16a22fd18457dd31810125f776c4a10a8eb08d5a36856f73164c87995bab613315fc3f9da40fc130df35ee06cd6278a7a95e87ada4d68a3", 0xfffffff2, r2, 0x4}, 0x38) (async) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x5d}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 239.903843ms ago: executing program 2 (id=2094): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x806, 0x0, 0x3, 0x8, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000070000000500000000000000", @ANYRES32, @ANYBLOB="00000000000000020000009c7500000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}], 0x40, 0x800}, 0x40000) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)}, 0x40e4804) r5 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r8 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r8, 0x29, 0x24, &(0x7f00000000c0), 0x4) 91.626267ms ago: executing program 1 (id=2095): perf_event_open(0x0, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x1e, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0xf3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x50194, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_config_ext={0x8, 0x6}, 0x0, 0x0, 0x6, 0x8, 0x80000000000000, 0x2, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x9) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030017000b63d25a80648c2594f92e24fc60100c02", 0x17}], 0x1}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x3) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r1, &(0x7f00000014c0)={&(0x7f0000001540)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, 0x0}, 0x0) write$cgroup_devices(r0, &(0x7f00000005c0)=ANY=[], 0xfffffeff) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000033000b0fd25a806c8c6f94f91024fc60", 0x14}], 0x1}, 0x0) 23.508629ms ago: executing program 3 (id=2096): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x448}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80040, 0x0) getpid() sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000b40)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e448e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16e6c53f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd600664f7931fed6bd954b43370e9701", 0xd8}], 0x1}, 0x60044084) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000600a8000600200005400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={&(0x7f0000000080)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000340)=[{&(0x7f00000001c0)="f32288557b39864701b58ed1b7325cdc84870bf9ed766ce3f3e2e732faf954976d9ccbb0554fa383bdbdaf0c4915a7cbf315979cd8b7e54dbc8876bf343778425fd8f09978abb4f8681b286cc66ea0784f5d27218431830dc7591f1a55e29d004c2ffcb5460c1da7755604186e5c0e66362dca0497db4e838836f3e74371bc5390b842129f40dbfb3aac04ac2cdfbba4b12e1810d2e372df71be86d82e453656e7eb41af323c2e410d9698cf8566e3d4b29bbbf424602dabba4c43355413a4246a0aa211c8f47045cee6f9e2cedeb3dcf5863097211e88f81ae0c66d4f6b7e935739405770f13b3ca90b9624", 0xec}, {&(0x7f00000002c0)="cfb1ab00d495d30aaa4d48234e9de21f250b2f70af6f614570f26d8d6b1d2870b97f052fb4845d1dfd22f5b59fb16b03bfd2f4c1494b82a784f640bfc1a77d7904109969ab9ab7a544222dc7ef96bd295a6fa1d07294539e2e2198301ebca6476814c09b7e80bfa2cd6784fb1642b2ba27d46c77caeea28d", 0x78}], 0x2, &(0x7f0000000e80)}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x6, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x8000) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x0, 0x22, 0x0, &(0x7f0000000380)="f6f4e9a1d78ad62ceef1884386dd78bb3fb7dbfc8180ca8395ccfda2e499b3dcf581", 0x0, 0xa1b, 0x0, 0x2f, 0x0, &(0x7f0000000700)="010a", 0x0}, 0x50) perf_event_open(&(0x7f0000000580)={0x0, 0x80, 0x80, 0x61, 0x1, 0x40, 0x0, 0x1, 0x1421, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0xaa, 0x1, @perf_config_ext={0xb, 0xa}, 0x10540, 0x8b71, 0x6, 0x0, 0x7f, 0x2d3, 0x0, 0x0, 0x7fff, 0x0, 0x6}, 0x0, 0x9, r2, 0x0) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000"], 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xa1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) 0s ago: executing program 0 (id=2097): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000000010000d700000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000014c0)={0x5, 0x80, 0x0, 0xfe, 0xff, 0x5, 0x0, 0x1, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x1590, 0x0, 0x8, 0x3, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002d40)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000280), 0x4) r4 = socket$kcm(0x2b, 0x1, 0x0) close(r4) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000180)="90", 0x1}], 0x1}, 0x8040) setsockopt$sock_attach_bpf(r5, 0x84, 0xb, &(0x7f0000000000), 0xe) setsockopt$sock_attach_bpf(r4, 0x1, 0xd, &(0x7f00000001c0), 0x45) close(r4) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/167, 0xa7}, 0x2002) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x26, 0x7, 0x81, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="00000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socketpair(0x1e, 0x4, 0x4, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xfca804a0, 0x8, 0x0, &(0x7f00000002c0)="b800000500000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$sock(r6, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0xf}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18, 0xb00}, 0x4008045) kernel console output (not intermixed with test programs): 148179][ T6784] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.263'. [ 129.158716][ T6784] openvswitch: netlink: Key type 4112 is out of range max 32 [ 129.502743][ T6795] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 129.570373][ T6795] team0: Device hsr_slave_0 failed to register rx_handler [ 129.593217][ T6797] netlink: 44 bytes leftover after parsing attributes in process `syz.3.267'. [ 129.805206][ T6790] netlink: 'syz.1.266': attribute type 9 has an invalid length. [ 129.835371][ T6790] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.266'. [ 130.149721][ T6800] netlink: 'syz.0.268': attribute type 10 has an invalid length. [ 130.279708][ T6800] team0: Device ipvlan1 failed to register rx_handler [ 130.590708][ T6814] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 130.839398][ T6820] netlink: 'syz.3.274': attribute type 4 has an invalid length. [ 130.861599][ T6820] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.274'. [ 131.350371][ T6840] netlink: 'syz.1.282': attribute type 6 has an invalid length. [ 131.370913][ T6840] netlink: 168 bytes leftover after parsing attributes in process `syz.1.282'. [ 131.532360][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.282'. [ 131.552546][ T6842] netlink: 60 bytes leftover after parsing attributes in process `syz.1.282'. [ 131.596644][ T6841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.282'. [ 131.624952][ T6840] netlink: 60 bytes leftover after parsing attributes in process `syz.1.282'. [ 131.866709][ T6861] netlink: 'syz.3.289': attribute type 13 has an invalid length. [ 131.905624][ T6861] netlink: 'syz.3.289': attribute type 58 has an invalid length. [ 131.935681][ T6861] netlink: 152 bytes leftover after parsing attributes in process `syz.3.289'. [ 132.588089][ T6896] netlink: 'syz.0.299': attribute type 9 has an invalid length. [ 133.127395][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.138277][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.850286][ T6933] netlink: 'syz.2.311': attribute type 9 has an invalid length. [ 134.478872][ T6939] delete_channel: no stack [ 134.532922][ T6953] __nla_validate_parse: 5 callbacks suppressed [ 134.532940][ T6953] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.316'. [ 134.571893][ T6953] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.316'. [ 134.583622][ T6943] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.316'. [ 134.608088][ T6953] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.316'. [ 134.724298][ T6943] netlink: 188 bytes leftover after parsing attributes in process `syz.3.316'. [ 135.164116][ T6967] cgroup: fork rejected by pids controller in /syz0 [ 135.313868][ T6953] netlink: 'syz.3.316': attribute type 10 has an invalid length. [ 135.331688][ T6953] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 135.342021][ T6953] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 135.349097][ T6953] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.403758][ T6953] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 135.778162][ T5776] bond0: (slave syz_tun): Releasing backup interface [ 136.747230][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 136.756454][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 136.770532][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 136.835401][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 136.856000][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 136.866311][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 136.949763][ T2965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.983681][ T7099] sctp: [Deprecated]: syz.3.330 (pid 7099) Use of int in maxseg socket option. [ 136.983681][ T7099] Use struct sctp_assoc_value instead [ 137.084712][ T2965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.294888][ T2965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.505479][ T2965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.947482][ T7091] chnl_net:caif_netlink_parms(): no params data found [ 138.191650][ T7126] netlink: 44 bytes leftover after parsing attributes in process `syz.3.335'. [ 138.493526][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.500905][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.514649][ T7091] bridge_slave_0: entered allmulticast mode [ 138.522456][ T7091] bridge_slave_0: entered promiscuous mode [ 138.684735][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.709398][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.722884][ T7091] bridge_slave_1: entered allmulticast mode [ 138.730240][ T7091] bridge_slave_1: entered promiscuous mode [ 138.879631][ T7091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.923504][ T7091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.961893][ T5787] Bluetooth: hci0: command tx timeout [ 139.017686][ T7091] team0: Port device team_slave_0 added [ 139.077169][ T7091] team0: Port device team_slave_1 added [ 139.696549][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.704473][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.732188][ T7091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.782422][ T7091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.807810][ T7091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.836256][ T7091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.968458][ T7091] hsr_slave_0: entered promiscuous mode [ 139.978246][ T7091] hsr_slave_1: entered promiscuous mode [ 139.984857][ T7091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.997942][ T7091] Cannot create hsr debugfs directory [ 140.589552][ T2965] hsr_slave_0: left promiscuous mode [ 140.628697][ T2965] hsr_slave_1: left promiscuous mode [ 140.641799][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.669696][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.724498][ T2965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.752682][ T2965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.781035][ T2965] bridge_slave_1: left allmulticast mode [ 140.797583][ T2965] bridge_slave_1: left promiscuous mode [ 140.816539][ T2965] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.850425][ T2965] bridge_slave_0: left allmulticast mode [ 140.864101][ T2965] bridge_slave_0: left promiscuous mode [ 140.869918][ T2965] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.974798][ T2965] veth1_macvtap: left promiscuous mode [ 140.983981][ T2965] veth0_macvtap: left promiscuous mode [ 140.989589][ T2965] veth1_vlan: left promiscuous mode [ 141.014784][ T2965] veth0_vlan: left promiscuous mode [ 141.032116][ T5787] Bluetooth: hci0: command tx timeout [ 141.898948][ T2965] team0 (unregistering): Port device team_slave_1 removed [ 141.946631][ T2965] team0 (unregistering): Port device C removed [ 141.988512][ T2965] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.035604][ T2965] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.363738][ T2965] bond0 (unregistering): Released all slaves [ 142.504266][ T7211] netlink: 'syz.3.349': attribute type 10 has an invalid length. [ 142.520172][ T7211] netlink: 40 bytes leftover after parsing attributes in process `syz.3.349'. [ 142.544193][ T7211] batman_adv: batadv0: Adding interface: virt_wifi0 [ 142.550996][ T7211] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.579913][ T7211] batman_adv: batadv0: Interface activated: virt_wifi0 [ 142.885170][ T7222] netlink: 'syz.3.352': attribute type 39 has an invalid length. [ 143.121726][ T5787] Bluetooth: hci0: command tx timeout [ 143.271344][ T7232] netlink: 'syz.1.353': attribute type 10 has an invalid length. [ 143.289931][ T7234] netlink: 12927 bytes leftover after parsing attributes in process `syz.1.353'. [ 143.322445][ T7234] netlink: 'syz.1.353': attribute type 29 has an invalid length. [ 143.379038][ T7234] netlink: 'syz.1.353': attribute type 29 has an invalid length. [ 143.419457][ T7232] netlink: 'syz.1.353': attribute type 29 has an invalid length. [ 143.654181][ T7091] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.723042][ T7091] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.763306][ T7091] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.878101][ T7091] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.555125][ T7091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.680068][ T7091] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.689399][ T7262] mac80211_hwsim hwsim5 .3c: renamed from wlan1 (while UP) [ 144.793516][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.800699][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.933140][ T2924] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.940326][ T2924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.196763][ T5787] Bluetooth: hci0: command tx timeout [ 145.649548][ T7286] netlink: 'syz.2.365': attribute type 21 has an invalid length. [ 145.680308][ T7286] IPv6: NLM_F_CREATE should be specified when creating new route [ 145.869892][ T7091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.019829][ T7091] veth0_vlan: entered promiscuous mode [ 146.051909][ T7091] veth1_vlan: entered promiscuous mode [ 146.128646][ T7091] veth0_macvtap: entered promiscuous mode [ 146.142531][ T7091] veth1_macvtap: entered promiscuous mode [ 146.235219][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.262397][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.287424][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.304841][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.336302][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.371523][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.407266][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.461086][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.472095][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.484944][ T7321] netlink: 'syz.1.372': attribute type 1 has an invalid length. [ 146.492972][ T7321] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.372'. [ 146.504044][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.521635][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.531772][ T7091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.543020][ T7091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.585249][ T7091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.630210][ T7091] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.639644][ T7091] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.650015][ T7091] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.663372][ T7091] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.955574][ T3554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.997661][ T3554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.135277][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.156248][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.483418][ T7356] netlink: 128 bytes leftover after parsing attributes in process `syz.1.380'. [ 147.535982][ T7356] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.792392][ T7368] netlink: 'syz.0.328': attribute type 10 has an invalid length. [ 147.855800][ T7368] team0: Device hsr_slave_0 failed to register rx_handler [ 148.110192][ T7357] netlink: 'syz.0.328': attribute type 9 has an invalid length. [ 148.131647][ T7357] netlink: 184904 bytes leftover after parsing attributes in process `syz.0.328'. [ 148.389117][ T7381] netlink: 830 bytes leftover after parsing attributes in process `syz.2.385'. [ 150.466080][ T5787] Bluetooth: hci0: unexpected subevent 0x01 length: 150 > 18 [ 150.663203][ T7458] netlink: 'syz.3.397': attribute type 10 has an invalid length. [ 150.737948][ T7466] netlink: 'syz.3.397': attribute type 9 has an invalid length. [ 150.789248][ T7466] netlink: 184904 bytes leftover after parsing attributes in process `syz.3.397'. [ 150.854550][ T7458] team0: Device hsr_slave_0 failed to register rx_handler [ 151.874517][ T7484] netlink: 'syz.2.406': attribute type 3 has an invalid length. [ 151.902757][ T7484] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.406'. [ 152.246376][ T7493] netlink: 'syz.0.408': attribute type 21 has an invalid length. [ 152.267627][ T7493] IPv6: NLM_F_CREATE should be specified when creating new route [ 152.274159][ T7497] netlink: 60 bytes leftover after parsing attributes in process `syz.2.409'. [ 152.363179][ T7501] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.409'. [ 152.894698][ T7515] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.413'. [ 152.908360][ T7515] netlink: 'syz.1.413': attribute type 2 has an invalid length. [ 153.667336][ T7517] syzkaller0: entered promiscuous mode [ 153.673704][ T7517] syzkaller0: entered allmulticast mode [ 153.807642][ T7531] netlink: 'syz.1.419': attribute type 10 has an invalid length. [ 153.826780][ T7533] netlink: 'syz.1.419': attribute type 9 has an invalid length. [ 153.853624][ T7533] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.419'. [ 153.877835][ T7531] team0: Device hsr_slave_0 failed to register rx_handler [ 155.621814][ T7536] netlink: 'syz.0.428': attribute type 10 has an invalid length. [ 155.629804][ T7536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.428'. [ 155.695010][ T7536] veth0_vlan: entered allmulticast mode [ 155.723005][ T7536] bridge0: port 3(veth0_vlan) entered blocking state [ 155.738870][ T7536] bridge0: port 3(veth0_vlan) entered disabled state [ 155.776659][ T7536] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 155.793734][ T7538] netlink: 'syz.3.420': attribute type 21 has an invalid length. [ 155.802169][ T7538] IPv6: NLM_F_CREATE should be specified when creating new route [ 156.763150][ T7569] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.432'. [ 156.844645][ T7571] netlink: 'syz.3.433': attribute type 10 has an invalid length. [ 157.008208][ T7571] team0: Port device wlan1 added [ 157.018309][ T7574] netlink: 'syz.3.433': attribute type 2 has an invalid length. [ 157.027356][ T7574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.433'. [ 157.050255][ T7578] netlink: 'syz.2.436': attribute type 10 has an invalid length. [ 157.060568][ T7578] netlink: 40 bytes leftover after parsing attributes in process `syz.2.436'. [ 157.131705][ T7578] veth0_vlan: entered allmulticast mode [ 157.162097][ T7578] bridge0: port 3(veth0_vlan) entered blocking state [ 157.169543][ T7578] bridge0: port 3(veth0_vlan) entered disabled state [ 157.244966][ T7578] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 157.314946][ T7587] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.438'. [ 157.338887][ T7587] netlink: zone id is out of range [ 157.358533][ T7587] netlink: zone id is out of range [ 157.372540][ T7587] netlink: zone id is out of range [ 157.411786][ T7587] netlink: zone id is out of range [ 157.465915][ T7587] netlink: zone id is out of range [ 157.488687][ T7587] netlink: zone id is out of range [ 157.506668][ T7587] netlink: zone id is out of range [ 157.521539][ T7587] netlink: zone id is out of range [ 157.637958][ T7599] bridge0: port 3(batadv0) entered blocking state [ 157.648345][ T7599] bridge0: port 3(batadv0) entered disabled state [ 157.657039][ T7599] batadv0: entered allmulticast mode [ 157.718020][ T7599] batadv0: entered promiscuous mode [ 157.731256][ T7599] bridge0: port 3(batadv0) entered blocking state [ 157.738791][ T7599] bridge0: port 3(batadv0) entered forwarding state [ 157.784760][ T48] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 157.794522][ T48] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 159.574885][ T7627] netlink: 'syz.3.448': attribute type 10 has an invalid length. [ 159.586261][ T7627] netlink: 40 bytes leftover after parsing attributes in process `syz.3.448'. [ 159.632663][ T7627] veth0_vlan: entered allmulticast mode [ 160.002166][ T7637] netlink: 'syz.1.450': attribute type 2 has an invalid length. [ 160.534839][ T7643] netlink: 'syz.1.453': attribute type 9 has an invalid length. [ 160.577295][ T7643] netlink: 13143 bytes leftover after parsing attributes in process `syz.1.453'. [ 160.910000][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 2622 [ 161.908967][ T7671] netlink: 156 bytes leftover after parsing attributes in process `syz.3.462'. [ 163.034246][ T7714] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.472'. [ 163.218980][ T7717] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.473'. [ 163.231901][ T7717] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.473'. [ 163.247838][ T7717] tipc: Started in network mode [ 163.254513][ T7717] tipc: Node identity b, cluster identity 73 [ 163.263004][ T7717] tipc: Node number set to 11 [ 164.874257][ T7751] netlink: 'syz.1.483': attribute type 10 has an invalid length. [ 164.898711][ T7751] netlink: 'syz.1.483': attribute type 2 has an invalid length. [ 164.933538][ T7751] netlink: 132 bytes leftover after parsing attributes in process `syz.1.483'. [ 165.176767][ T7759] netlink: 2220 bytes leftover after parsing attributes in process `syz.3.486'. [ 166.125061][ T7764] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 166.132796][ T7764] IPv6: NLM_F_CREATE should be set when creating new route [ 166.140119][ T7764] IPv6: NLM_F_CREATE should be set when creating new route [ 166.147420][ T7764] IPv6: NLM_F_CREATE should be set when creating new route [ 166.312217][ T7773] netlink: 'syz.3.489': attribute type 10 has an invalid length. [ 166.323421][ T7773] netlink: 156 bytes leftover after parsing attributes in process `syz.3.489'. [ 166.399314][ T7775] netlink: 'syz.0.488': attribute type 29 has an invalid length. [ 166.428354][ T7775] netlink: 'syz.0.488': attribute type 29 has an invalid length. [ 166.469951][ T7775] netlink: 'syz.0.488': attribute type 29 has an invalid length. [ 166.494293][ T7775] netlink: 'syz.0.488': attribute type 29 has an invalid length. [ 167.213537][ T7792] netlink: 'syz.2.495': attribute type 10 has an invalid length. [ 167.492744][ T7792] team0: Port device .3c added [ 167.516134][ T7795] netlink: 'syz.2.495': attribute type 2 has an invalid length. [ 167.530984][ T7795] netlink: 132 bytes leftover after parsing attributes in process `syz.2.495'. [ 167.869843][ T7799] netlink: 'syz.3.498': attribute type 9 has an invalid length. [ 167.920579][ T7799] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.498'. [ 168.633862][ T7812] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.502'. [ 168.729358][ T7812] syzkaller0: entered promiscuous mode [ 168.751059][ T7812] syzkaller0: entered allmulticast mode [ 168.824987][ T7812] syzkaller0: create flow: hash 2974932231 index 1 [ 168.976026][ T7811] syzkaller0: delete flow: hash 2974932231 index 1 [ 171.710624][ T7836] validate_nla: 1 callbacks suppressed [ 171.710641][ T7836] netlink: 'syz.1.508': attribute type 2 has an invalid length. [ 171.751898][ T7837] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 171.759693][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.508'. [ 171.791385][ T7837] batman_adv: batadv0: Adding interface: virt_wifi0 [ 171.808755][ T7837] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.877857][ T7837] batman_adv: batadv0: Interface activated: virt_wifi0 [ 172.016948][ T7848] netlink: 'syz.1.513': attribute type 10 has an invalid length. [ 172.041618][ T7848] netlink: 156 bytes leftover after parsing attributes in process `syz.1.513'. [ 172.322601][ T7859] netlink: 'syz.3.515': attribute type 12 has an invalid length. [ 172.342879][ T7859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.515'. [ 172.376382][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 5 [ 173.193803][ T7878] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.521'. [ 173.223670][ T7878] netlink: 'syz.2.521': attribute type 1 has an invalid length. [ 173.247892][ T7878] netlink: 'syz.2.521': attribute type 2 has an invalid length. [ 173.295587][ T7878] netlink: 'syz.2.521': attribute type 3 has an invalid length. [ 173.312036][ T7878] netlink: 'syz.2.521': attribute type 4 has an invalid length. [ 173.559570][ T7890] netlink: 'syz.2.526': attribute type 28 has an invalid length. [ 173.589243][ T7890] netlink: 2 bytes leftover after parsing attributes in process `syz.2.526'. [ 173.614330][ T7891] netlink: 'syz.2.526': attribute type 28 has an invalid length. [ 173.636873][ T7891] netlink: 2 bytes leftover after parsing attributes in process `syz.2.526'. [ 174.048748][ T7918] netlink: 164 bytes leftover after parsing attributes in process `syz.0.534'. [ 178.040417][ T7969] netlink: 'syz.0.549': attribute type 21 has an invalid length. [ 178.063027][ T7969] netlink: 164 bytes leftover after parsing attributes in process `syz.0.549'. [ 178.138897][ T7965] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 178.191249][ T7965] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 178.269373][ T7967] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 178.333388][ T7973] netlink: 'syz.1.546': attribute type 29 has an invalid length. [ 178.476887][ T7979] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.551'. [ 178.521987][ T7979] net_ratelimit: 334 callbacks suppressed [ 178.522003][ T7979] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 179.104578][ T7990] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.555'. [ 179.189637][ T7990] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 179.408401][ T7994] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 179.608439][ T7996] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.558'. [ 179.644717][ T7996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'. [ 180.667411][ T8033] netlink: 'syz.3.570': attribute type 21 has an invalid length. [ 180.677277][ T8033] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 180.684784][ T8033] IPv6: NLM_F_CREATE should be set when creating new route [ 180.692636][ T8033] IPv6: NLM_F_CREATE should be set when creating new route [ 180.700307][ T8033] IPv6: NLM_F_CREATE should be set when creating new route [ 180.735641][ T8036] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.571'. [ 180.747261][ T8036] netlink: 4 bytes leftover after parsing attributes in process `syz.2.571'. [ 181.210018][ T8049] netlink: 209216 bytes leftover after parsing attributes in process `syz.2.575'. [ 181.233928][ T8049] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.726042][ T8070] syz.2.581 (8070) used obsolete PPPIOCDETACH ioctl [ 182.233649][ T8101] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.590'. [ 182.857653][ T8122] netlink: 168 bytes leftover after parsing attributes in process `syz.2.598'. [ 182.909999][ T8124] netlink: 'syz.0.599': attribute type 12 has an invalid length. [ 184.510465][ T8163] netlink: 'syz.0.610': attribute type 28 has an invalid length. [ 184.520149][ T8163] netlink: 'syz.0.610': attribute type 29 has an invalid length. [ 184.535987][ T8163] netlink: 132 bytes leftover after parsing attributes in process `syz.0.610'. [ 185.086086][ T8169] netlink: 180 bytes leftover after parsing attributes in process `syz.1.611'. [ 186.979488][ T8188] netlink: 14 bytes leftover after parsing attributes in process `syz.2.614'. [ 187.005916][ T8189] netlink: 14 bytes leftover after parsing attributes in process `syz.2.614'. [ 188.265525][ T8192] delete_channel: no stack [ 188.472708][ T8205] netlink: 'syz.1.619': attribute type 21 has an invalid length. [ 188.496978][ T8198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.693473][ T8204] netlink: 'syz.2.618': attribute type 9 has an invalid length. [ 188.751655][ T8204] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.618'. [ 189.115666][ T8198] netlink: 'syz.2.618': attribute type 9 has an invalid length. [ 189.167408][ T8198] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.618'. [ 189.807998][ T8230] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.625'. [ 190.264511][ T8255] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 190.285022][ T8255] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.635'. [ 190.319104][ T8255] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 190.338620][ T8252] netlink: 'syz.3.635': attribute type 15 has an invalid length. [ 190.351825][ T8252] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.635'. [ 190.398476][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.417004][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.432864][ T8262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.448418][ T8262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.361694][ T8309] netlink: 60 bytes leftover after parsing attributes in process `syz.2.648'. [ 191.512896][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 191.522202][ T5786] Bluetooth: hci3: command 0x0406 tx timeout [ 191.523141][ T5789] Bluetooth: hci2: command 0x0406 tx timeout [ 193.763200][ T8328] syzkaller0: entered promiscuous mode [ 193.785308][ T8328] syzkaller0: entered allmulticast mode [ 193.840388][ T8339] netlink: 132 bytes leftover after parsing attributes in process `syz.3.660'. [ 194.570982][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.577939][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.790868][ T8345] netlink: 'syz.1.663': attribute type 3 has an invalid length. [ 194.815607][ T8345] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.663'. [ 194.920818][ T8345] netlink: 'syz.1.663': attribute type 3 has an invalid length. [ 194.955141][ T8345] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.663'. [ 199.722505][ T8352] netlink: 'syz.1.665': attribute type 2 has an invalid length. [ 199.730277][ T8352] netlink: 'syz.1.665': attribute type 11 has an invalid length. [ 199.742070][ T8352] netlink: 132 bytes leftover after parsing attributes in process `syz.1.665'. [ 199.755875][ T8355] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.667'. [ 201.349385][ T8380] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.357132][ T8380] IPv6: NLM_F_CREATE should be set when creating new route [ 201.365287][ T8380] IPv6: NLM_F_CREATE should be set when creating new route [ 201.373301][ T8380] IPv6: NLM_F_CREATE should be set when creating new route [ 203.289434][ T8406] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.679'. [ 205.252163][ T8440] netlink: 'syz.2.687': attribute type 10 has an invalid length. [ 205.495542][ T8442] netlink: 'syz.2.687': attribute type 10 has an invalid length. [ 205.534883][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.2.687'. [ 205.560242][ T8442] team0: entered promiscuous mode [ 205.578354][ T8442] team_slave_0: entered promiscuous mode [ 205.598869][ T8442] team_slave_1: entered promiscuous mode [ 205.611673][ T8442] mac80211_hwsim hwsim5 .3c: entered promiscuous mode [ 205.627033][ T8442] team0: entered allmulticast mode [ 205.639947][ T8442] team_slave_0: entered allmulticast mode [ 205.659128][ T8442] team_slave_1: entered allmulticast mode [ 205.670985][ T8442] mac80211_hwsim hwsim5 .3c: entered allmulticast mode [ 205.698606][ T8442] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.719419][ T8442] bridge0: port 3(team0) entered blocking state [ 205.738497][ T8442] bridge0: port 3(team0) entered disabled state [ 206.035876][ T8452] netlink: 15999 bytes leftover after parsing attributes in process `syz.0.692'. [ 206.097751][ T8452] netlink: 16399 bytes leftover after parsing attributes in process `syz.0.692'. [ 206.240280][ T8451] netlink: 'syz.2.693': attribute type 10 has an invalid length. [ 206.413991][ T8465] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.698'. [ 206.470725][ T8451] team0: Device hsr_slave_0 failed to register rx_handler [ 206.675904][ T8475] netlink: 'syz.0.701': attribute type 2 has an invalid length. [ 206.684880][ T8475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.701'. [ 206.859889][ T8482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 206.936675][ T8482] netlink: 'syz.2.704': attribute type 9 has an invalid length. [ 206.966860][ T8482] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.704'. [ 207.158958][ T8484] netlink: 'syz.2.704': attribute type 9 has an invalid length. [ 207.168312][ T8484] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.704'. [ 207.403196][ T8489] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.706'. [ 207.419273][ T8489] netlink: 6320 bytes leftover after parsing attributes in process `syz.0.706'. [ 208.107770][ T8515] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 208.280654][ T8516] netlink: 'syz.0.713': attribute type 39 has an invalid length. [ 208.315426][ T8525] netlink: 'syz.3.716': attribute type 2 has an invalid length. [ 208.361984][ T8525] netlink: 'syz.3.716': attribute type 1 has an invalid length. [ 208.376034][ T8525] netlink: 9 bytes leftover after parsing attributes in process `syz.3.716'. [ 208.453768][ T48] tipc: Subscription rejected, illegal request [ 209.188219][ T8553] netlink: 'syz.1.723': attribute type 19 has an invalid length. [ 209.210996][ T8553] netlink: 55 bytes leftover after parsing attributes in process `syz.1.723'. [ 209.416894][ T8565] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.725'. [ 209.872367][ T8579] skbuff: bad partial csum: csum=65535/127 headroom=178 headlen=65664 [ 210.044262][ T5778] Bluetooth: hci1: unexpected subevent 0x05 length: 150 > 12 [ 210.211162][ T8584] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.734'. [ 210.568855][ T8596] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.736'. [ 210.591795][ T8596] openvswitch: netlink: Duplicate key (type 0). [ 210.671018][ T8601] netlink: 180 bytes leftover after parsing attributes in process `syz.2.739'. [ 210.725933][ T8603] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.740'. [ 211.656058][ T8645] validate_nla: 3 callbacks suppressed [ 211.656094][ T8645] netlink: 'syz.0.752': attribute type 29 has an invalid length. [ 211.674710][ T8645] netlink: 'syz.0.752': attribute type 29 has an invalid length. [ 212.071791][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 212.442801][ T8653] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.755'. [ 212.492414][ T8653] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.755'. [ 212.927816][ T8675] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.761'. [ 212.965323][ T8675] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 213.604813][ T8691] netlink: 'syz.1.775': attribute type 6 has an invalid length. [ 213.622200][ T8691] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.775'. [ 213.812190][ T8693] netlink: 192436 bytes leftover after parsing attributes in process `syz.2.767'. [ 213.845553][ T8693] openvswitch: netlink: Duplicate key (type 0). [ 213.913079][ T8698] : port 1() entered blocking state [ 213.919204][ T8698] : port 1() entered disabled state [ 213.932946][ T8698] : entered allmulticast mode [ 213.940142][ T8698] : entered promiscuous mode [ 214.250925][ T8709] syzkaller0: entered promiscuous mode [ 214.266065][ T8709] syzkaller0: entered allmulticast mode [ 214.538811][ T8718] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.773'. [ 216.850168][ T8745] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.782'. [ 216.867004][ T8745] openvswitch: netlink: Duplicate key (type 0). [ 216.988356][ T8752] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.785'. [ 217.012549][ T8749] netlink: 'syz.1.785': attribute type 2 has an invalid length. [ 217.080273][ T8749] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.785'. [ 217.772848][ T8782] netlink: 'syz.0.796': attribute type 28 has an invalid length. [ 217.780644][ T8782] netlink: 'syz.0.796': attribute type 29 has an invalid length. [ 217.831811][ T8782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.796'. [ 220.462575][ T8777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.463059][ T8780] netlink: 156 bytes leftover after parsing attributes in process `syz.0.796'. [ 220.503209][ T8790] netlink: 'syz.2.799': attribute type 10 has an invalid length. [ 220.557815][ T8790] geneve1: entered promiscuous mode [ 220.587707][ T8790] geneve1: entered allmulticast mode [ 220.602959][ T8790] team0: Port device geneve1 added [ 223.869859][ T8822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.807'. [ 223.894984][ T8830] netlink: set zone limit has 8 unknown bytes [ 224.297756][ T8844] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 224.326964][ T8844] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 224.384971][ T8847] netlink: 'syz.0.808': attribute type 29 has an invalid length. [ 225.085896][ T8869] netlink: 'syz.3.817': attribute type 10 has an invalid length. [ 225.127116][ T8867] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.818'. [ 225.164634][ T8869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.817'. [ 225.175952][ T8869] batman_adv: batadv0: Adding interface: veth1_vlan [ 225.186865][ T8869] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.220245][ T8869] batman_adv: batadv0: Interface activated: veth1_vlan [ 225.229679][ T8856] netlink: 'syz.2.814': attribute type 10 has an invalid length. [ 225.310856][ T8856] team0: Device ipvlan1 failed to register rx_handler [ 225.436973][ T8872] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.819'. [ 225.480826][ T8872] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.819'. [ 225.498448][ T8872] netlink: 6332 bytes leftover after parsing attributes in process `syz.0.819'. [ 226.206967][ T8897] netlink: 184912 bytes leftover after parsing attributes in process `syz.2.824'. [ 229.191489][ T8910] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.829'. [ 229.628773][ T8908] netlink: 'syz.3.830': attribute type 10 has an invalid length. [ 229.695692][ T8908] team0: Device ipvlan1 failed to register rx_handler [ 229.917204][ T8921] netlink: 'syz.2.832': attribute type 10 has an invalid length. [ 229.934634][ T8921] netlink: 55 bytes leftover after parsing attributes in process `syz.2.832'. [ 230.972462][ T8933] netlink: 'syz.3.835': attribute type 10 has an invalid length. [ 231.136869][ T8938] netlink: 'syz.1.836': attribute type 10 has an invalid length. [ 231.278518][ T8938] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 231.383391][ T8949] netlink: 'syz.3.839': attribute type 21 has an invalid length. [ 232.119315][ T8969] tun0: tun_chr_ioctl cmd 2147767520 [ 234.161212][ T8983] syzkaller0: entered promiscuous mode [ 234.180672][ T8983] syzkaller0: entered allmulticast mode [ 234.980138][ T9003] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.853'. [ 235.192398][ T9005] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 235.217149][ T9005] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.854'. [ 236.770935][ T9000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.852'. [ 237.584242][ T9022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.855'. [ 237.764648][ T9022] netlink: 40 bytes leftover after parsing attributes in process `syz.1.855'. [ 237.849417][ T9022] netlink: 13 bytes leftover after parsing attributes in process `syz.1.855'. [ 237.952408][ T9011] netlink: 'syz.1.855': attribute type 29 has an invalid length. [ 238.003243][ T9011] netlink: 'syz.1.855': attribute type 29 has an invalid length. [ 240.536833][ T9046] netlink: 14 bytes leftover after parsing attributes in process `syz.0.863'. [ 240.553964][ T9044] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.862'. [ 240.697970][ T9046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.769433][ T9046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.816331][ T9046] bond0 (unregistering): Released all slaves [ 240.886134][ T9044] debugfs: Directory '!!' with parent 'ieee80211' already present! [ 241.232647][ T9067] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.868'. [ 241.291608][ T9067] bridge_slave_1: entered promiscuous mode [ 241.328907][ T9073] netlink: 'syz.2.870': attribute type 3 has an invalid length. [ 241.350828][ T9073] netlink: 132 bytes leftover after parsing attributes in process `syz.2.870'. [ 241.603775][ T9084] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.872'. [ 241.619712][ T9073] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.870'. [ 241.632725][ T9073] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.870'. [ 241.645234][ T9085] netlink: 'syz.3.873': attribute type 21 has an invalid length. [ 241.655884][ T9073] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.870'. [ 241.751283][ T9088] netlink: 'syz.0.874': attribute type 25 has an invalid length. [ 241.773857][ T9088] netlink: 'syz.0.874': attribute type 9 has an invalid length. [ 241.805039][ T9091] netlink: 'syz.2.870': attribute type 10 has an invalid length. [ 241.823920][ T9091] netlink: 40 bytes leftover after parsing attributes in process `syz.2.870'. [ 241.836163][ T9091] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 242.331729][ T9100] netlink: 14 bytes leftover after parsing attributes in process `syz.2.876'. [ 242.370318][ T9107] @: renamed from bond_slave_0 (while UP) [ 242.559747][ T9113] netlink: 'syz.3.878': attribute type 39 has an invalid length. [ 243.635503][ T9148] bond0 (unregistering): (slave 5@): Releasing backup interface [ 243.708173][ T9148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.749302][ T9148] bond0 (unregistering): Released all slaves [ 243.856710][ T9160] netlink: 'syz.2.894': attribute type 2 has an invalid length. [ 243.874888][ T9160] netlink: 'syz.2.894': attribute type 9 has an invalid length. [ 243.911748][ T9167] netlink: 'syz.1.895': attribute type 16 has an invalid length. [ 244.082942][ T9170] netlink: 'syz.2.897': attribute type 39 has an invalid length. [ 244.441962][ T9170] hsr_slave_1 (unregistering): left promiscuous mode [ 245.034047][ T9173] erspan0: refused to change device tx_queue_len [ 245.690131][ T9191] __nla_validate_parse: 5 callbacks suppressed [ 245.690172][ T9191] netlink: 40 bytes leftover after parsing attributes in process `syz.3.901'. [ 245.830913][ T9191] netlink: 3 bytes leftover after parsing attributes in process `syz.3.901'. [ 245.915030][ T9191] bridge_slave_0: entered allmulticast mode [ 245.960920][ T9191] netlink: 3 bytes leftover after parsing attributes in process `syz.3.901'. [ 247.144027][ T9232] validate_nla: 1 callbacks suppressed [ 247.144044][ T9232] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 247.188253][ T9232] netlink: 'syz.0.914': attribute type 4 has an invalid length. [ 247.211558][ T9232] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.914'. [ 247.284309][ T9237] netlink: 40 bytes leftover after parsing attributes in process `syz.2.916'. [ 247.341960][ T9237] netlink: 3 bytes leftover after parsing attributes in process `syz.2.916'. [ 247.422899][ T9237] netlink: 3 bytes leftover after parsing attributes in process `syz.2.916'. [ 248.506696][ T9273] mac80211_hwsim hwsim20 wlan1: entered promiscuous mode [ 248.515061][ T9273] mac80211_hwsim hwsim20 wlan1: entered allmulticast mode [ 248.610248][ T9273] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.928'. [ 249.876982][ T9300] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.897432][ T9300] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.930723][ T9300] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.962337][ T9300] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.023007][ T9300] bridge0: port 3(batadv0) entered disabled state [ 250.176453][ T9300] batadv0 (unregistering): left allmulticast mode [ 250.191909][ T9300] batadv0 (unregistering): left promiscuous mode [ 250.202647][ T9300] bridge0: port 3(batadv0) entered disabled state [ 250.271123][ T9307] netlink: 'syz.1.938': attribute type 6 has an invalid length. [ 250.285620][ T9307] netlink: 168 bytes leftover after parsing attributes in process `syz.1.938'. [ 252.598768][ T9348] netlink: 'syz.2.950': attribute type 10 has an invalid length. [ 252.713734][ T9354] syz.1.952[9354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 252.713985][ T9354] syz.1.952[9354] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 253.254452][ T9372] netlink: 'syz.3.958': attribute type 153 has an invalid length. [ 253.277058][ T9372] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.958'. [ 253.907928][ T9390] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.964'. [ 253.950309][ T9389] netlink: 'syz.1.963': attribute type 1 has an invalid length. [ 253.959069][ T9390] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 253.988333][ T9389] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.963'. [ 254.448066][ T9401] syzkaller0: entered promiscuous mode [ 254.467336][ T9401] syzkaller0: entered allmulticast mode [ 256.006948][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.014170][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.963413][ T9447] sit0: entered allmulticast mode [ 257.991783][ T9448] sit0: entered promiscuous mode [ 258.157551][ T9453] netlink: 'syz.0.980': attribute type 27 has an invalid length. [ 258.203939][ T9453] netlink: 'syz.0.980': attribute type 4 has an invalid length. [ 258.226343][ T9453] netlink: 152 bytes leftover after parsing attributes in process `syz.0.980'. [ 258.239579][ T9457] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 258.256775][ T9454] netlink: 'syz.0.980': attribute type 27 has an invalid length. [ 258.268605][ T5778] Bluetooth: hci2: unexpected subevent 0x05 length: 150 > 12 [ 258.280268][ T9454] netlink: 'syz.0.980': attribute type 4 has an invalid length. [ 258.288782][ T9454] netlink: 152 bytes leftover after parsing attributes in process `syz.0.980'. [ 259.130482][ T9484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.985'. [ 259.457254][ T9494] syzkaller0: entered promiscuous mode [ 259.473688][ T9494] syzkaller0: entered allmulticast mode [ 259.481100][ T9491] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 259.487822][ T9491] pim6reg0: persist enabled [ 259.495517][ T9497] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 259.501350][ T9497] pim6reg0: persist enabled [ 259.749489][ T9511] netlink: 'syz.3.993': attribute type 41 has an invalid length. [ 259.780467][ T9511] netlink: 'syz.3.993': attribute type 21 has an invalid length. [ 259.788824][ T9511] netlink: 'syz.3.993': attribute type 6 has an invalid length. [ 259.798945][ T9511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.993'. [ 259.906140][ T9511] syzkaller0: entered promiscuous mode [ 259.914199][ T9511] syzkaller0: entered allmulticast mode [ 260.321708][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 262.353145][ T9529] netlink: 'syz.2.998': attribute type 10 has an invalid length. [ 262.680268][ T9546] netlink: 'syz.2.1004': attribute type 9 has an invalid length. [ 262.688769][ T9546] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1004'. [ 262.737745][ T9540] netlink: 'syz.3.1002': attribute type 10 has an invalid length. [ 262.848332][ T9540] team0 (unregistering): Port device team_slave_0 removed [ 262.866681][ T9540] team0 (unregistering): Port device team_slave_1 removed [ 262.897427][ T9540] team0 (unregistering): Port device wlan1 removed [ 263.199822][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 263.440415][ T9568] netlink: 'syz.1.1010': attribute type 39 has an invalid length. [ 264.217103][ T9594] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1020'. [ 264.304878][ T9596] netlink: 'syz.0.1021': attribute type 12 has an invalid length. [ 264.334535][ T9596] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1021'. [ 265.354485][ T9621] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 265.373268][ T9621] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1027'. [ 265.601333][ T9626] mac80211_hwsim hwsim3 ..c: renamed from wlan1 [ 266.338208][ T9649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.410479][ T9653] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1036'. [ 266.440346][ T9653] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1036'. [ 266.675220][ T9659] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1037'. [ 267.453624][ T9662] netlink: 'syz.2.1039': attribute type 6 has an invalid length. [ 267.510750][ T9662] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1039'. [ 267.939242][ T9683] netlink: 'syz.0.1046': attribute type 10 has an invalid length. [ 267.945771][ T9686] netlink: 'syz.1.1045': attribute type 29 has an invalid length. [ 267.971743][ T9683] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1046'. [ 267.981189][ T9683] veth0_vlan: left allmulticast mode [ 268.039611][ T9683] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 268.081779][ T9686] netlink: 'syz.1.1045': attribute type 29 has an invalid length. [ 268.494707][ T9700] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1052'. [ 269.392637][ T9716] bridge_slave_0: left allmulticast mode [ 269.617858][ T9727] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 269.638836][ T9718] netlink: 'syz.1.1058': attribute type 27 has an invalid length. [ 269.652435][ T9718] netlink: 'syz.1.1058': attribute type 4 has an invalid length. [ 269.685296][ T9718] netlink: 'syz.1.1058': attribute type 5 has an invalid length. [ 269.760140][ T9718] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1058'. [ 270.011887][ T9734] netlink: 'syz.0.1063': attribute type 41 has an invalid length. [ 271.346807][ T9749] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1067'. [ 273.436664][ T9756] netlink: 'syz.1.1069': attribute type 21 has an invalid length. [ 273.458886][ T9756] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1069'. [ 273.491590][ T9756] netlink: 'syz.1.1069': attribute type 5 has an invalid length. [ 273.499397][ T9756] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1069'. [ 274.636276][ T9785] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 275.085380][ T9797] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1078'. [ 275.266184][ T9802] netlink: 'syz.0.1078': attribute type 3 has an invalid length. [ 275.286271][ T9802] netlink: 'syz.0.1078': attribute type 1 has an invalid length. [ 275.765672][ T9808] netlink: 'syz.2.1081': attribute type 1 has an invalid length. [ 275.781876][ T9808] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.1081'. [ 276.890944][ T9824] netlink: 'syz.2.1088': attribute type 11 has an invalid length. [ 277.179001][ T9836] syzkaller0: entered promiscuous mode [ 277.186541][ T9836] syzkaller0: entered allmulticast mode [ 277.233297][ T9849] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 279.500847][ T9865] netlink: 'syz.2.1100': attribute type 21 has an invalid length. [ 279.525913][ T9865] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1100'. [ 279.551848][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1101'. [ 279.565371][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 279.578426][ T9866] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1101'. [ 279.590105][ T9866] bridge_slave_0: entered allmulticast mode [ 279.596965][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1101'. [ 279.606733][ T9866] netlink: 33 bytes leftover after parsing attributes in process `syz.3.1101'. [ 279.635737][ T9869] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1101'. [ 279.669940][ T9868] netlink: 'syz.1.1102': attribute type 10 has an invalid length. [ 279.757456][ T9868] geneve1: entered promiscuous mode [ 279.768963][ T9868] geneve1: entered allmulticast mode [ 279.777392][ T9868] team0: Port device geneve1 added [ 279.784184][ T9871] GPL: port 1(syz_tun) entered blocking state [ 279.795885][ T9871] GPL: port 1(syz_tun) entered disabled state [ 279.804199][ T9871] syz_tun: entered allmulticast mode [ 279.829222][ T9873] syz_tun: left allmulticast mode [ 279.836811][ T9873] GPL: port 1(syz_tun) entered disabled state [ 279.851325][ T9875] netlink: 'syz.3.1104': attribute type 3 has an invalid length. [ 279.872929][ T9875] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.1104'. [ 280.165561][ T9886] netlink: 'syz.1.1107': attribute type 3 has an invalid length. [ 280.195170][ T9886] netlink: 'syz.1.1107': attribute type 1 has an invalid length. [ 280.239168][ T9886] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1107'. [ 282.586325][ T9900] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1111'. [ 283.705820][ T9921] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1118'. [ 284.087291][ T9941] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 284.095926][ T9941] netlink: 'syz.0.1124': attribute type 10 has an invalid length. [ 284.105467][ T9941] netlink: 209216 bytes leftover after parsing attributes in process `syz.0.1124'. [ 284.134299][ T9941] openvswitch: netlink: Message has 4 unknown bytes. [ 284.343476][ T9947] netlink: 'syz.0.1126': attribute type 21 has an invalid length. [ 284.361756][ T9947] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1126'. [ 284.378376][ T9947] netlink: 'syz.0.1126': attribute type 5 has an invalid length. [ 284.405814][ T9947] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1126'. [ 284.526332][ T9948] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 284.536077][ T9948] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1127'. [ 284.547285][ T9948] hsr0: entered promiscuous mode [ 284.569149][ T9948] bridge0: port 4(hsr0) entered blocking state [ 284.580423][ T9948] bridge0: port 4(hsr0) entered disabled state [ 284.604273][ T9948] hsr0: entered allmulticast mode [ 284.609935][ T9948] hsr_slave_0: entered allmulticast mode [ 284.635692][ T9948] hsr_slave_1: entered allmulticast mode [ 284.701587][ T9948] bridge0: port 4(hsr0) entered blocking state [ 284.710354][ T9948] bridge0: port 4(hsr0) entered forwarding state [ 285.514151][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 2878 [ 285.848873][ T9970] syzkaller0: entered promiscuous mode [ 285.902211][ T9970] syzkaller0: entered allmulticast mode [ 287.503227][T10012] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1147'. [ 287.831957][T10030] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1152'. [ 287.927598][T10027] netlink: 'syz.2.1150': attribute type 21 has an invalid length. [ 288.031701][T10027] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1150'. [ 288.040943][T10027] netlink: 'syz.2.1150': attribute type 5 has an invalid length. [ 288.136478][T10027] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1150'. [ 289.321936][T10057] netlink: 'syz.1.1157': attribute type 10 has an invalid length. [ 289.386795][T10057] macvlan0: entered promiscuous mode [ 289.432315][T10057] macvlan0: entered allmulticast mode [ 289.767714][T10057] veth1_vlan: entered allmulticast mode [ 289.880236][T10057] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 290.008242][T10059] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1158'. [ 290.040159][T10062] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1158'. [ 290.064362][T10063] netlink: 14568 bytes leftover after parsing attributes in process `syz.0.1158'. [ 290.165437][T10061] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1158'. [ 290.366998][T10066] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1159'. [ 290.428029][T10068] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1160'. [ 291.412556][T10078] delete_channel: no stack [ 292.403036][T10114] netlink: 'syz.1.1172': attribute type 29 has an invalid length. [ 292.496245][T10114] netlink: 'syz.1.1172': attribute type 29 has an invalid length. [ 292.564167][T10121] __nla_validate_parse: 1 callbacks suppressed [ 292.564187][T10121] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1174'. [ 292.581998][T10118] netlink: 'syz.3.1173': attribute type 21 has an invalid length. [ 292.637934][T10118] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1173'. [ 292.730643][T10126] netlink: 'syz.2.1175': attribute type 3 has an invalid length. [ 292.740424][T10118] netlink: 'syz.3.1173': attribute type 5 has an invalid length. [ 292.795331][T10126] netlink: 201372 bytes leftover after parsing attributes in process `syz.2.1175'. [ 292.851108][T10118] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1173'. [ 292.926963][T10121] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1174'. [ 292.984404][T10123] netlink: 'syz.2.1175': attribute type 4 has an invalid length. [ 293.005620][T10123] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1175'. [ 293.073335][T10124] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1174'. [ 293.668483][T10132] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1177'. [ 295.171895][T10162] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1186'. [ 295.205306][T10165] netlink: 'syz.0.1187': attribute type 10 has an invalid length. [ 295.233678][T10165] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.1187'. [ 295.641701][T10170] netlink: 'syz.2.1188': attribute type 2 has an invalid length. [ 299.580049][T10218] netlink: 'syz.1.1202': attribute type 21 has an invalid length. [ 299.591818][T10218] __nla_validate_parse: 1 callbacks suppressed [ 299.591834][T10218] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1202'. [ 299.633626][T10218] netlink: 'syz.1.1202': attribute type 5 has an invalid length. [ 299.667314][T10218] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1202'. [ 299.934398][T10231] netlink: 'syz.2.1206': attribute type 39 has an invalid length. [ 300.332958][T10238] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1207'. [ 300.350429][T10238] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 300.600790][T10248] netlink: 'syz.1.1210': attribute type 1 has an invalid length. [ 300.639542][T10248] netlink: 'syz.1.1210': attribute type 3 has an invalid length. [ 300.706467][T10248] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1210'. [ 300.926740][T10240] syzkaller0: entered promiscuous mode [ 300.932841][T10240] syzkaller0: entered allmulticast mode [ 301.352787][T10275] netlink: 'syz.1.1216': attribute type 5 has an invalid length. [ 301.381674][T10275] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1216'. [ 301.708147][T10285] netlink: 'syz.2.1219': attribute type 21 has an invalid length. [ 301.721828][T10285] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1219'. [ 301.731125][T10285] netlink: 'syz.2.1219': attribute type 5 has an invalid length. [ 301.765914][T10285] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1219'. [ 301.831925][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 303.466589][T10317] netlink: 668 bytes leftover after parsing attributes in process `syz.3.1226'. [ 303.490717][T10317] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 303.582563][T10317] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 303.932628][T10327] netlink: 'syz.0.1229': attribute type 10 has an invalid length. [ 303.971772][T10327] netlink: 'syz.0.1229': attribute type 10 has an invalid length. [ 303.984244][T10327] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1229'. [ 303.995374][T10327] team0: entered promiscuous mode [ 304.000517][T10327] team_slave_0: entered promiscuous mode [ 304.007792][T10327] team_slave_1: entered promiscuous mode [ 304.014598][T10327] team0: entered allmulticast mode [ 304.020120][T10327] team_slave_0: entered allmulticast mode [ 304.026561][T10327] team_slave_1: entered allmulticast mode [ 304.035183][T10327] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.043403][T10327] bridge0: port 3(team0) entered blocking state [ 304.050002][T10327] bridge0: port 3(team0) entered disabled state [ 304.059745][T10327] bridge0: port 3(team0) entered blocking state [ 304.066395][T10327] bridge0: port 3(team0) entered forwarding state [ 304.182445][T10330] netlink: 'syz.0.1231': attribute type 2 has an invalid length. [ 304.361249][T10332] IPv6: NLM_F_CREATE should be specified when creating new route [ 304.751983][T10344] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1235'. [ 305.020824][T10350] veth1_macvtap: left promiscuous mode [ 305.052492][ T5773] cgroup: fork rejected by pids controller in /syz3 [ 305.059716][T10350] macsec0: entered allmulticast mode [ 306.187910][T10422] netlink: 'syz.2.1242': attribute type 10 has an invalid length. [ 306.729358][T10429] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1245'. [ 306.753737][T10429] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 306.793520][T10429] netlink: 'syz.2.1245': attribute type 10 has an invalid length. [ 307.495514][T10435] netlink: 'syz.1.1247': attribute type 2 has an invalid length. [ 307.530781][T10435] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1247'. [ 307.638249][T10435] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1247'. [ 307.761124][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 307.784000][ T5778] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 307.795970][ T5778] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 307.810006][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 307.818383][ T5778] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 307.827209][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 308.095907][T10453] netlink: 'syz.2.1252': attribute type 21 has an invalid length. [ 308.146921][T10440] chnl_net:caif_netlink_parms(): no params data found [ 308.194467][T10459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1253'. [ 308.411004][T10462] syzkaller0: entered promiscuous mode [ 308.443874][T10462] syzkaller0: entered allmulticast mode [ 309.913656][ T5778] Bluetooth: hci2: command tx timeout [ 311.008729][T10440] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.024401][T10440] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.033541][T10440] bridge_slave_0: entered allmulticast mode [ 311.040993][T10440] bridge_slave_0: entered promiscuous mode [ 311.059075][T10440] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.066751][T10440] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.074485][T10440] bridge_slave_1: entered allmulticast mode [ 311.082496][T10440] bridge_slave_1: entered promiscuous mode [ 311.117666][T10440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.153069][T10440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.227457][T10513] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 311.251650][T10513] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1259'. [ 311.307357][T10440] team0: Port device team_slave_0 added [ 311.340379][T10440] team0: Port device team_slave_1 added [ 311.557875][T10440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 311.565314][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.592917][T10440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.608933][T10511] netlink: 'syz.0.1260': attribute type 10 has an invalid length. [ 311.622603][T10509] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1259'. [ 311.628354][T10511] team0: Device ipvlan1 failed to register rx_handler [ 311.715977][T10440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.725747][T10440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.753693][T10440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.839596][T10440] hsr_slave_0: entered promiscuous mode [ 311.848041][T10440] hsr_slave_1: entered promiscuous mode [ 311.863574][T10440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.871376][T10440] Cannot create hsr debugfs directory [ 312.002000][ T5778] Bluetooth: hci2: command tx timeout [ 312.100806][T10440] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.257518][T10440] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.277528][T10525] netlink: 'syz.0.1263': attribute type 21 has an invalid length. [ 312.286450][T10525] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1263'. [ 312.298365][T10525] netlink: 'syz.0.1263': attribute type 5 has an invalid length. [ 312.307483][T10525] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1263'. [ 312.365894][T10440] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.481187][T10440] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.912585][T10535] netlink: 'syz.1.1266': attribute type 39 has an invalid length. [ 313.184316][T10440] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 313.238311][T10440] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 313.283433][T10440] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 313.316134][T10440] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.436062][T10540] : port 1(gretap0) entered blocking state [ 313.445259][T10540] : port 1(gretap0) entered disabled state [ 313.452089][T10540] gretap0: entered allmulticast mode [ 313.459367][T10540] gretap0: entered promiscuous mode [ 313.588242][T10440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.607316][T10440] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.627258][T10409] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.634405][T10409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.649771][T10407] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.656918][T10407] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.847671][T10440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.906705][T10440] veth0_vlan: entered promiscuous mode [ 313.917788][T10440] veth1_vlan: entered promiscuous mode [ 313.954415][T10440] veth0_macvtap: entered promiscuous mode [ 313.966031][T10440] veth1_macvtap: entered promiscuous mode [ 313.988612][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.000291][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.010284][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.020968][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.032468][T10440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.048492][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.060531][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.072133][ T5778] Bluetooth: hci2: command tx timeout [ 314.074895][T10440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.088519][T10440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.099991][T10440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.115515][T10440] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.124685][T10440] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.133927][T10440] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.142678][T10440] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.304350][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.343003][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.422108][T10409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.426105][T10555] netlink: 'syz.0.1270': attribute type 2 has an invalid length. [ 314.445351][T10409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.530926][T10555] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1270'. [ 314.669596][T10550] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1270'. [ 314.963355][T10565] sctp: [Deprecated]: syz.3.1276 (pid 10565) Use of int in max_burst socket option deprecated. [ 314.963355][T10565] Use struct sctp_assoc_value instead [ 315.134992][T10572] netlink: 'syz.1.1278': attribute type 21 has an invalid length. [ 315.159411][T10572] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1278'. [ 315.183059][T10572] netlink: 'syz.1.1278': attribute type 5 has an invalid length. [ 315.220931][T10572] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1278'. [ 315.395170][T10584] netlink: 'syz.3.1280': attribute type 21 has an invalid length. [ 315.407999][T10584] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1280'. [ 315.471702][T10584] netlink: 'syz.3.1280': attribute type 5 has an invalid length. [ 315.520162][T10584] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1280'. [ 316.156290][ T5778] Bluetooth: hci2: command tx timeout [ 317.692449][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.698800][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.848650][ T144] tipc: Left network mode [ 318.343034][T10616] : port 1(gretap0) entered blocking state [ 318.350396][T10616] : port 1(gretap0) entered disabled state [ 318.368570][T10616] gretap0: entered allmulticast mode [ 318.383938][T10616] gretap0: entered promiscuous mode [ 318.453118][T10620] C: renamed from team_slave_0 (while UP) [ 318.462253][T10620] netlink: 'syz.2.1291': attribute type 1 has an invalid length. [ 318.471377][T10620] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1291'. [ 318.491180][T10620] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 318.529811][T10622] netlink: 'syz.0.1292': attribute type 10 has an invalid length. [ 318.864228][T10624] netlink: 'syz.2.1293': attribute type 21 has an invalid length. [ 318.891965][T10624] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1293'. [ 318.906282][T10624] netlink: 'syz.2.1293': attribute type 5 has an invalid length. [ 318.938059][T10624] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1293'. [ 319.099316][T10634] netlink: 'syz.3.1296': attribute type 28 has an invalid length. [ 319.290355][T10641] netlink: 'syz.3.1299': attribute type 39 has an invalid length. [ 319.816152][T10666] netlink: 'syz.0.1304': attribute type 21 has an invalid length. [ 319.825535][T10666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1304'. [ 319.837840][T10666] netlink: 'syz.0.1304': attribute type 5 has an invalid length. [ 319.861576][T10666] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1304'. [ 322.997059][T10690] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 323.010126][T10690] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1313'. [ 323.020963][T10690] netlink: 'syz.2.1313': attribute type 1 has an invalid length. [ 323.066227][T10694] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1314'. [ 323.075542][T10694] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1314'. [ 323.087343][T10690] bridge0: port 3(team0) entered disabled state [ 323.123027][T10690] bridge_slave_1: left allmulticast mode [ 323.129301][T10690] bridge_slave_1: left promiscuous mode [ 323.141674][T10690] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.199306][T10690] bridge_slave_0: left promiscuous mode [ 323.213636][T10690] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.501899][T10695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1313'. [ 323.570436][ T144] : left allmulticast mode [ 323.599127][ T144] : left promiscuous mode [ 323.622129][ T144] : port 1() entered disabled state [ 323.693557][ T144] hsr_slave_0: left promiscuous mode [ 323.715287][ T144] hsr_slave_1: left promiscuous mode [ 323.722871][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.730337][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.786389][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.822837][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.842221][ T144] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 323.850514][ T144] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 323.879695][ T144] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 323.887330][ T144] batman_adv: batadv0: Removing interface: virt_wifi0 [ 323.896220][ T144] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 323.922194][ T144] batman_adv: batadv0: Removing interface: veth1_vlan [ 323.960756][ T144] veth1_macvtap: left promiscuous mode [ 323.966432][ T144] veth0_macvtap: left promiscuous mode [ 325.341099][T10707] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1316'. [ 325.350812][T10709] tap0: tun_chr_ioctl cmd 1074025677 [ 325.370210][T10709] tap0: linktype set to 825 [ 325.509943][T10711] validate_nla: 2 callbacks suppressed [ 325.510005][T10711] netlink: 'syz.1.1317': attribute type 10 has an invalid length. [ 325.568382][T10711] nlmon0: entered promiscuous mode [ 325.574662][T10711] nlmon0: entered allmulticast mode [ 325.580949][T10711] team0: Device nlmon0 is of different type [ 325.803474][T10720] netlink: 'syz.2.1320': attribute type 10 has an invalid length. [ 325.811772][T10720] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1320'. [ 325.840623][T10720] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 326.299986][T10732] bridge0: port 4(hsr0) entered disabled state [ 326.936339][T10757] netlink: 'syz.1.1330': attribute type 10 has an invalid length. [ 326.944658][T10757] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1330'. [ 326.983956][T10757] lo: entered allmulticast mode [ 327.101576][T10761] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 327.111880][T10761] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1331'. [ 327.122820][T10761] netlink: 'syz.3.1331': attribute type 1 has an invalid length. [ 327.123479][T10759] netlink: 'syz.2.1339': attribute type 21 has an invalid length. [ 327.145181][T10759] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1339'. [ 327.155149][T10759] netlink: 'syz.2.1339': attribute type 5 has an invalid length. [ 327.167284][T10759] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1339'. [ 327.195987][T10761] bridge_slave_1: left allmulticast mode [ 327.205783][T10761] bridge_slave_1: left promiscuous mode [ 327.212687][T10761] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.240035][T10761] bridge_slave_0: left allmulticast mode [ 327.246670][T10761] bridge_slave_0: left promiscuous mode [ 327.265304][T10761] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.985163][T10766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1331'. [ 328.451698][T10783] netlink: 'syz.3.1335': attribute type 21 has an invalid length. [ 328.462783][T10783] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1335'. [ 328.472105][T10783] netlink: 'syz.3.1335': attribute type 5 has an invalid length. [ 328.479917][T10783] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1335'. [ 328.596269][T10786] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1337'. [ 329.563824][T10804] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1343'. [ 329.595985][T10804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 330.604868][T10852] netlink: 'syz.3.1357': attribute type 21 has an invalid length. [ 330.644534][T10852] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1357'. [ 330.660396][T10852] netlink: 'syz.3.1357': attribute type 5 has an invalid length. [ 330.674757][T10852] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1357'. [ 331.183029][T10864] netlink: 'syz.2.1361': attribute type 10 has an invalid length. [ 331.256908][T10865] netlink: 'syz.0.1360': attribute type 10 has an invalid length. [ 331.312687][T10865] geneve0: entered promiscuous mode [ 331.366402][T10871] netlink: 'syz.1.1362': attribute type 3 has an invalid length. [ 331.410509][T10871] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1362'. [ 331.595131][T10871] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1362'. [ 331.632020][T10871] netlink: 'syz.1.1362': attribute type 28 has an invalid length. [ 331.659204][T10871] netlink: 'syz.1.1362': attribute type 29 has an invalid length. [ 331.696622][T10871] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1362'. [ 332.184881][T10886] netlink: 'syz.2.1366': attribute type 21 has an invalid length. [ 332.198050][T10886] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1366'. [ 332.212030][T10886] netlink: 'syz.2.1366': attribute type 5 has an invalid length. [ 332.220069][T10886] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1366'. [ 332.376753][T10894] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1368'. [ 332.388995][T10894] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 332.417019][ T144] bridge0: port 3(team0) entered disabled state [ 333.248581][T10909] netlink: 'syz.1.1375': attribute type 21 has an invalid length. [ 334.673068][T10930] __nla_validate_parse: 3 callbacks suppressed [ 334.673085][T10930] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1381'. [ 334.711700][T10930] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1381'. [ 336.423608][T10957] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1389'. [ 337.575081][T10985] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1394'. [ 338.706030][T10983] validate_nla: 4 callbacks suppressed [ 338.706068][T10983] netlink: 'syz.3.1393': attribute type 11 has an invalid length. [ 339.370656][T11009] netlink: 'syz.1.1402': attribute type 21 has an invalid length. [ 339.646463][T11019] netlink: 'syz.0.1404': attribute type 10 has an invalid length. [ 339.672278][T11019] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1404'. [ 339.715478][T11019] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 339.758926][T11024] netlink: 'syz.3.1406': attribute type 21 has an invalid length. [ 339.788467][T11024] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1406'. [ 339.808746][T11024] netlink: 'syz.3.1406': attribute type 5 has an invalid length. [ 339.834177][T11024] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1406'. [ 340.507684][T11033] C: renamed from team_slave_0 (while UP) [ 340.750520][T11033] netlink: 'syz.1.1407': attribute type 3 has an invalid length. [ 340.799031][T11033] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1407'. [ 341.051586][T11055] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1414'. [ 341.061906][T11057] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1414'. [ 341.305035][T11061] netlink: 'syz.0.1415': attribute type 10 has an invalid length. [ 341.342761][T11061] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.350646][T11061] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.720609][T11048] netlink: 'syz.2.1410': attribute type 11 has an invalid length. [ 341.857106][T11077] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1419'. [ 341.977914][T11079] netlink: 'syz.1.1420': attribute type 21 has an invalid length. [ 342.003392][T11079] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1420'. [ 342.032423][T11079] netlink: 'syz.1.1420': attribute type 5 has an invalid length. [ 342.040237][T11079] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1420'. [ 342.785293][T11087] sit0: entered promiscuous mode [ 343.226126][T11098] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1427'. [ 343.280933][T11102] hsr_slave_0: left promiscuous mode [ 343.498871][T11102] hsr_slave_1: left promiscuous mode [ 343.789926][T11119] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1432'. [ 344.491348][T11139] pim6reg1: entered promiscuous mode [ 344.499185][T11139] pim6reg1: entered allmulticast mode [ 344.847052][T11149] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1450'. [ 345.109759][T11160] validate_nla: 1 callbacks suppressed [ 345.109786][T11160] netlink: 'syz.3.1445': attribute type 21 has an invalid length. [ 345.123953][T11160] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1445'. [ 345.141928][T11160] netlink: 'syz.3.1445': attribute type 5 has an invalid length. [ 345.150817][T11160] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1445'. [ 345.173226][T11152] netlink: 'syz.0.1443': attribute type 11 has an invalid length. [ 345.293853][T11166] netlink: 'syz.0.1446': attribute type 23 has an invalid length. [ 346.079358][T11172] netlink: 206468 bytes leftover after parsing attributes in process `syz.0.1448'. [ 346.134183][T11172] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1448'. [ 346.175076][T11170] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1447'. [ 346.291967][T11181] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1452'. [ 346.547309][T11187] Q6`Ҙ: renamed from lo (while UP) [ 347.116903][T11187] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 347.302117][T11211] netlink: 'syz.1.1460': attribute type 21 has an invalid length. [ 347.329743][T11211] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1460'. [ 347.351748][T11211] netlink: 'syz.1.1460': attribute type 5 has an invalid length. [ 347.360016][T11211] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1460'. [ 347.513702][T11212] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1461'. [ 348.593345][T11239] netlink: 'syz.0.1468': attribute type 4 has an invalid length. [ 348.997364][T11245] Q6`Ҙ: renamed from lo (while UP) [ 349.265769][T11245] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 349.964754][T11259] __nla_validate_parse: 4 callbacks suppressed [ 349.964805][T11259] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1475'. [ 349.968655][T11263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1476'. [ 350.500068][T11273] netlink: 'syz.3.1479': attribute type 39 has an invalid length. [ 351.650857][T11293] netlink: 'syz.0.1485': attribute type 21 has an invalid length. [ 351.677307][T11293] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1485'. [ 351.712670][T11293] netlink: 'syz.0.1485': attribute type 5 has an invalid length. [ 351.720473][T11293] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1485'. [ 353.213212][T11315] netlink: 'syz.3.1493': attribute type 21 has an invalid length. [ 353.221223][T11315] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1493'. [ 353.560362][T11320] IPv6: Can't replace route, no match found [ 354.098875][T11334] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1500'. [ 354.288524][T11339] netlink: 'syz.0.1502': attribute type 21 has an invalid length. [ 354.338187][T11339] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1502'. [ 354.423209][T11339] netlink: 'syz.0.1502': attribute type 5 has an invalid length. [ 354.431027][T11339] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1502'. [ 354.470076][T11341] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1503'. [ 354.504809][T11344] netlink: 208052 bytes leftover after parsing attributes in process `syz.3.1504'. [ 354.531722][T11344] netlink: 'syz.3.1504': attribute type 1 has an invalid length. [ 354.547070][T11344] netlink: 'syz.3.1504': attribute type 2 has an invalid length. [ 354.580600][T11344] netlink: 'syz.3.1504': attribute type 3 has an invalid length. [ 354.659318][T11344] netlink: 'syz.3.1504': attribute type 4 has an invalid length. [ 355.294627][T11357] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.1506'. [ 355.715254][T11369] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1509'. [ 355.814653][T11369] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 355.840476][T11369] CPU: 1 PID: 11369 Comm: syz.1.1509 Not tainted syzkaller #0 [ 355.848038][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 355.858173][T11369] Call Trace: [ 355.861576][T11369] [ 355.864732][T11369] dump_stack_lvl+0x18c/0x250 [ 355.869625][T11369] ? show_regs_print_info+0x20/0x20 [ 355.875002][T11369] ? load_image+0x420/0x420 [ 355.879648][T11369] sysfs_warn_dup+0x8e/0xa0 [ 355.884271][T11369] sysfs_do_create_link_sd+0xc0/0x110 [ 355.889721][T11369] device_add_class_symlinks+0x1cf/0x240 [ 355.895521][T11369] device_add+0x4f9/0xc40 [ 355.899937][T11369] wiphy_register+0x1d99/0x2ac0 [ 355.905008][T11369] ? cfg80211_event_work+0x40/0x40 [ 355.910184][T11369] ? minstrel_ht_alloc+0x88a/0x990 [ 355.915495][T11369] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 355.921755][T11369] ieee80211_register_hw+0x2dd8/0x3b30 [ 355.927378][T11369] ? ieee80211_register_hw+0xfc1/0x3b30 [ 355.933020][T11369] ? ieee80211_tasklet_handler+0x20/0x20 [ 355.939420][T11369] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 355.945495][T11369] ? __debug_object_init+0xec/0x450 [ 355.950825][T11369] ? __asan_memset+0x22/0x40 [ 355.955516][T11369] ? __hrtimer_init+0x189/0x270 [ 355.960479][T11369] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 355.966382][T11369] ? mac80211_hwsim_free+0x220/0x220 [ 355.971732][T11369] ? rcu_is_watching+0x15/0xb0 [ 355.976565][T11369] ? kstrndup+0xbd/0x140 [ 355.980926][T11369] hwsim_new_radio_nl+0xdad/0x1a70 [ 355.986121][T11369] ? __nla_validate+0x50/0x50 [ 355.990896][T11369] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 355.997333][T11369] ? __nla_parse+0x40/0x50 [ 356.001855][T11369] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 356.008374][T11369] genl_family_rcv_msg_doit+0x21a/0x310 [ 356.014549][T11369] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 356.020547][T11369] ? bpf_lsm_capable+0x9/0x10 [ 356.025445][T11369] ? security_capable+0x89/0xb0 [ 356.030430][T11369] genl_rcv_msg+0x611/0x7a0 [ 356.035117][T11369] ? genl_bind+0x360/0x360 [ 356.039678][T11369] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 356.046087][T11369] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 356.052785][T11369] netlink_rcv_skb+0x235/0x4c0 [ 356.057622][T11369] ? genl_bind+0x360/0x360 [ 356.062112][T11369] ? netlink_ack+0x1160/0x1160 [ 356.066973][T11369] ? __lock_acquire+0x7d80/0x7d80 [ 356.072054][T11369] ? net_generic+0x1e/0x240 [ 356.076664][T11369] ? down_read+0x1ac/0x2e0 [ 356.081143][T11369] genl_rcv+0x28/0x40 [ 356.085202][T11369] netlink_unicast+0x7b1/0x930 [ 356.090070][T11369] netlink_sendmsg+0x8d0/0xbf0 [ 356.094896][T11369] ? perf_trace_lock+0x303/0x3b0 [ 356.099917][T11369] ? netlink_getsockopt+0x590/0x590 [ 356.105181][T11369] ? aa_sock_msg_perm+0x94/0x150 [ 356.110193][T11369] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 356.115546][T11369] ? security_socket_sendmsg+0x80/0xa0 [ 356.121057][T11369] ? netlink_getsockopt+0x590/0x590 [ 356.126323][T11369] ____sys_sendmsg+0x61b/0x980 [ 356.131277][T11369] ? __asan_memset+0x22/0x40 [ 356.135930][T11369] ? __sys_sendmsg_sock+0x30/0x30 [ 356.141012][T11369] ? __import_iovec+0x5f2/0x850 [ 356.145975][T11369] ? import_iovec+0x73/0xa0 [ 356.150546][T11369] ___sys_sendmsg+0x2a6/0x360 [ 356.155304][T11369] ? __sys_sendmsg+0x2b0/0x2b0 [ 356.160283][T11369] __se_sys_sendmsg+0x1d0/0x2c0 [ 356.165203][T11369] ? __x64_sys_sendmsg+0x80/0x80 [ 356.170251][T11369] ? lockdep_hardirqs_on+0x98/0x150 [ 356.175538][T11369] do_syscall_64+0x55/0xb0 [ 356.180003][T11369] ? clear_bhb_loop+0x40/0x90 [ 356.184832][T11369] ? clear_bhb_loop+0x40/0x90 [ 356.189563][T11369] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 356.195646][T11369] RIP: 0033:0x7fb6c539ce59 [ 356.200191][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.219914][T11369] RSP: 002b:00007fb6c6341028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.228489][T11369] RAX: ffffffffffffffda RBX: 00007fb6c5615fa0 RCX: 00007fb6c539ce59 [ 356.236523][T11369] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 356.244542][T11369] RBP: 00007fb6c5432e6f R08: 0000000000000000 R09: 0000000000000000 [ 356.252819][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.260839][T11369] R13: 00007fb6c5616038 R14: 00007fb6c5615fa0 R15: 00007ffcb66b01b8 [ 356.268925][T11369] [ 356.352519][T11374] netlink: 'syz.2.1511': attribute type 21 has an invalid length. [ 356.481553][T11374] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1511'. [ 356.560192][T11374] netlink: 'syz.2.1511': attribute type 5 has an invalid length. [ 356.584002][T11374] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1511'. [ 357.037611][T11389] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1514'. [ 357.078737][T11394] netlink: 'syz.1.1516': attribute type 21 has an invalid length. [ 357.102244][T11394] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1516'. [ 357.122837][T11394] netlink: 'syz.1.1516': attribute type 5 has an invalid length. [ 357.154056][T11394] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1516'. [ 357.182763][T11397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1517'. [ 357.955586][T11410] netlink: 'syz.0.1519': attribute type 21 has an invalid length. [ 357.994308][T11410] netlink: 'syz.0.1519': attribute type 19 has an invalid length. [ 358.012257][T11410] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1519'. [ 359.697121][T11435] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1528'. [ 360.348314][T11445] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 360.740912][T11475] netlink: set zone limit has 8 unknown bytes [ 361.666051][T11514] netlink: 'syz.0.1548': attribute type 21 has an invalid length. [ 361.682476][T11514] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1548'. [ 361.702015][T11514] netlink: 'syz.0.1548': attribute type 5 has an invalid length. [ 361.709814][T11514] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1548'. [ 363.065353][ T5778] Bluetooth: hci2: unexpected event 0x09 length: 15 > 3 [ 363.462049][T11568] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 363.479088][T11568] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1562'. [ 363.587925][T11568] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 364.287925][T11580] netlink: 'syz.0.1566': attribute type 21 has an invalid length. [ 364.300821][T11580] netlink: 'syz.0.1566': attribute type 4 has an invalid length. [ 364.319498][T11580] netlink: 'syz.0.1566': attribute type 23 has an invalid length. [ 364.333805][T11580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1566'. [ 365.432099][T11611] netlink: 'syz.0.1575': attribute type 21 has an invalid length. [ 365.464675][T11611] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1575'. [ 365.486703][T11611] netlink: 'syz.0.1575': attribute type 5 has an invalid length. [ 365.533665][T11611] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1575'. [ 365.571691][T11612] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1573'. [ 365.618431][T11612] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 365.686765][T11615] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1576'. [ 365.763741][T11615] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1576'. [ 365.828883][T11620] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1576'. [ 366.849019][T11641] __nla_validate_parse: 1 callbacks suppressed [ 366.849038][T11641] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1583'. [ 368.693759][T11665] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1588'. [ 368.820558][T11672] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1591'. [ 368.838404][T11672] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.873458][T11674] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1593'. [ 369.036920][T11676] netlink: 135856 bytes leftover after parsing attributes in process `syz.3.1594'. [ 369.776771][T11699] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1601'. [ 369.793699][T11699] hsr_slave_0: left promiscuous mode [ 369.809455][T11699] hsr_slave_1: left promiscuous mode [ 369.924275][T11699] hsr0 (unregistering): left promiscuous mode [ 369.942204][T11699] bridge0: port 4(hsr0) entered disabled state [ 370.415700][T11717] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1604'. [ 370.441518][T11717] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 370.893587][T11727] netlink: 'syz.1.1608': attribute type 10 has an invalid length. [ 370.922117][T11727] hsr_slave_0: entered promiscuous mode [ 370.946628][T11727] team0: Port device hsr_slave_0 added [ 371.137404][T11729] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1609'. [ 371.509611][T11738] netlink: 'syz.1.1613': attribute type 21 has an invalid length. [ 371.789604][T11746] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1616'. [ 371.915670][T11746] hsr_slave_0: left promiscuous mode [ 371.926239][T11746] hsr_slave_1: left promiscuous mode [ 372.649872][T11762] netlink: 'syz.1.1622': attribute type 2 has an invalid length. [ 372.659119][T11762] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1622'. [ 373.255565][T11766] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1624'. [ 373.457239][T11769] netlink: 'syz.2.1626': attribute type 10 has an invalid length. [ 373.477132][T11769] team0: Device hsr_slave_0 failed to register rx_handler [ 373.686087][T11781] netlink: 'syz.2.1627': attribute type 10 has an invalid length. [ 373.749418][T11781] wg1: entered promiscuous mode [ 373.773130][T11781] wg1: entered allmulticast mode [ 373.778788][T11781] team0: Device wg1 is of different type [ 373.915814][T11788] netlink: 'syz.0.1630': attribute type 21 has an invalid length. [ 373.961522][T11788] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1630'. [ 373.994293][T11788] netlink: 'syz.0.1630': attribute type 5 has an invalid length. [ 374.061481][T11788] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1630'. [ 374.535627][T11794] netlink: 'syz.2.1631': attribute type 10 has an invalid length. [ 374.568225][T11794] team0: Device hsr_slave_0 failed to register rx_handler [ 374.851337][T11802] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 374.857486][T11802] syzkaller1: linktype set to 769 [ 375.011043][T11809] netlink: 'syz.2.1635': attribute type 10 has an invalid length. [ 375.023033][T11809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1635'. [ 375.116673][T11809] netlink: 'syz.2.1635': attribute type 10 has an invalid length. [ 375.131582][T11809] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1635'. [ 375.703650][T11820] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1639'. [ 375.743444][T11820] netlink: zone id is out of range [ 376.240367][T11826] netlink: 'syz.2.1640': attribute type 39 has an invalid length. [ 376.335828][T11830] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1641'. [ 376.651829][T11832] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1641'. [ 377.014351][T11842] netlink: 'syz.0.1644': attribute type 10 has an invalid length. [ 377.038062][T11842] hsr_slave_0: entered promiscuous mode [ 377.055691][T11842] hsr_slave_0: entered allmulticast mode [ 377.068556][T11842] team0: Port device hsr_slave_0 added [ 377.278304][T11849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1646'. [ 377.782847][T11851] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1647'. [ 378.942462][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.952118][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.317609][T11871] syzkaller0: entered promiscuous mode [ 379.325683][T11871] syzkaller0: entered allmulticast mode [ 379.523019][T11873] C: left promiscuous mode [ 379.534600][T11873] C: left allmulticast mode [ 379.647694][T11873] team0: Port device C removed [ 379.676336][T11872] delete_channel: no stack [ 380.378396][T11879] netlink: 'syz.3.1656': attribute type 10 has an invalid length. [ 380.487627][T11879] team0: Port device hsr_slave_0 added [ 380.530723][T11886] netlink: 'syz.0.1664': attribute type 39 has an invalid length. [ 381.477412][T11908] netlink: 'syz.1.1663': attribute type 29 has an invalid length. [ 381.499557][T11908] netlink: 'syz.1.1663': attribute type 29 has an invalid length. [ 381.518425][T11909] netlink: 'syz.1.1663': attribute type 29 has an invalid length. [ 381.553337][T11908] netlink: 'syz.1.1663': attribute type 29 has an invalid length. [ 381.573558][T11909] netlink: 'syz.1.1663': attribute type 29 has an invalid length. [ 381.755909][T11912] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1666'. [ 381.770146][T11912] netlink: 'syz.0.1666': attribute type 5 has an invalid length. [ 383.166288][T11949] netlink: 'syz.3.1675': attribute type 39 has an invalid length. [ 383.315506][T11953] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1680'. [ 383.612438][T11955] netlink: 'syz.1.1679': attribute type 21 has an invalid length. [ 383.691712][T11955] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1679'. [ 383.881590][T11955] netlink: 'syz.1.1679': attribute type 5 has an invalid length. [ 383.889508][T11955] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1679'. [ 384.041588][T11964] netlink: 'syz.2.1682': attribute type 21 has an invalid length. [ 384.049480][T11964] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1682'. [ 384.488606][T11978] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1693'. [ 384.498017][T11978] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1693'. [ 385.787758][T12000] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1692'. [ 385.797794][T12000] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1692'. [ 386.365895][T12007] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1695'. [ 386.375815][T12007] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1695'. [ 386.876703][T12019] validate_nla: 7 callbacks suppressed [ 386.876747][T12019] netlink: 'syz.0.1698': attribute type 41 has an invalid length. [ 387.459612][T12034] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 387.466919][T12034] IPv6: NLM_F_CREATE should be set when creating new route [ 387.474267][T12034] IPv6: NLM_F_CREATE should be set when creating new route [ 387.481540][T12034] IPv6: NLM_F_CREATE should be set when creating new route [ 387.497356][T12036] netlink: 'syz.2.1704': attribute type 21 has an invalid length. [ 387.507784][T12036] netlink: 'syz.2.1704': attribute type 5 has an invalid length. [ 387.562677][T12040] netlink: 'syz.0.1705': attribute type 21 has an invalid length. [ 387.570733][T12040] netlink: 'syz.0.1705': attribute type 5 has an invalid length. [ 389.371637][T12073] netlink: 'syz.3.1714': attribute type 21 has an invalid length. [ 389.418908][T12073] __nla_validate_parse: 6 callbacks suppressed [ 389.418926][T12073] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1714'. [ 389.510170][T12073] netlink: 'syz.3.1714': attribute type 5 has an invalid length. [ 389.542607][T12073] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1714'. [ 389.579206][T12076] netlink: 'syz.0.1713': attribute type 10 has an invalid length. [ 389.592634][T12076] team0: Device ipvlan1 failed to register rx_handler [ 390.344694][T12092] netlink: 'syz.0.1717': attribute type 21 has an invalid length. [ 390.354235][T12092] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1717'. [ 390.365748][T12092] netlink: 'syz.0.1717': attribute type 5 has an invalid length. [ 390.391695][T12092] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1717'. [ 390.806550][T12103] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1722'. [ 391.956474][T12141] netlink: 'syz.1.1733': attribute type 21 has an invalid length. [ 391.966986][T12141] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1733'. [ 391.976684][T12141] netlink: 'syz.1.1733': attribute type 5 has an invalid length. [ 391.985755][T12141] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1733'. [ 392.221910][T12151] netlink: 'syz.3.1736': attribute type 21 has an invalid length. [ 392.243743][T12151] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1736'. [ 392.265179][T12151] netlink: 'syz.3.1736': attribute type 5 has an invalid length. [ 392.284964][T12151] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1736'. [ 393.057923][T12157] netlink: 'syz.2.1737': attribute type 13 has an invalid length. [ 393.113541][T12157] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.1737'. [ 393.792984][T12164] netlink: 'syz.0.1740': attribute type 21 has an invalid length. [ 393.831573][T12164] netlink: 'syz.0.1740': attribute type 6 has an invalid length. [ 394.501550][T12190] netlink: 'syz.0.1746': attribute type 21 has an invalid length. [ 394.509631][T12190] __nla_validate_parse: 4 callbacks suppressed [ 394.509645][T12190] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1746'. [ 394.525280][T12190] netlink: 'syz.0.1746': attribute type 5 has an invalid length. [ 394.533332][T12190] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1746'. [ 395.098449][T12202] netlink: 'syz.3.1751': attribute type 2 has an invalid length. [ 395.289393][T12205] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1752'. [ 395.311475][T12205] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1752'. [ 395.563103][T12215] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1756'. [ 396.298248][T12230] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1759'. [ 396.338364][T12230] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1759'. [ 396.505209][T12235] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1762'. [ 396.589410][T12234] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1762'. [ 396.906275][T12243] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1764'. [ 398.004200][T12278] validate_nla: 6 callbacks suppressed [ 398.004215][T12278] netlink: 'syz.3.1776': attribute type 21 has an invalid length. [ 398.020479][T12278] netlink: 'syz.3.1776': attribute type 5 has an invalid length. [ 399.879099][T12311] batadv0: entered promiscuous mode [ 399.952661][T12313] __nla_validate_parse: 3 callbacks suppressed [ 399.952697][T12313] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1788'. [ 400.010446][T12316] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1788'. [ 401.025745][T12362] netlink: 'syz.0.1802': attribute type 21 has an invalid length. [ 401.065291][T12362] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1802'. [ 401.075443][T12362] netlink: 'syz.0.1802': attribute type 5 has an invalid length. [ 401.084910][T12362] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1802'. [ 401.346279][T12377] netlink: 209592 bytes leftover after parsing attributes in process `syz.2.1806'. [ 401.450967][T12379] netlink: 'syz.1.1805': attribute type 33 has an invalid length. [ 401.736925][T12385] netlink: 'syz.1.1809': attribute type 6 has an invalid length. [ 402.788515][T12409] netlink: 'syz.1.1814': attribute type 39 has an invalid length. [ 403.804029][T12429] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1821'. [ 404.383808][T12448] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 404.417100][T12448] syzkaller0: entered promiscuous mode [ 404.423591][T12448] syzkaller0: entered allmulticast mode [ 406.715696][T12470] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode [ 407.640826][T12492] netlink: 'syz.0.1843': attribute type 21 has an invalid length. [ 407.661555][T12492] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1843'. [ 407.675519][T12492] netlink: 'syz.0.1843': attribute type 5 has an invalid length. [ 407.684990][T12492] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1843'. [ 407.774374][T12500] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1844'. [ 408.862413][T12534] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1852'. [ 408.877813][T12534] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1852'. [ 408.907555][T12530] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1852'. [ 409.856385][T12564] netlink: 'syz.0.1862': attribute type 10 has an invalid length. [ 409.895058][T12571] netlink: 'syz.2.1864': attribute type 21 has an invalid length. [ 409.951506][T12571] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1864'. [ 410.015106][T12571] netlink: 'syz.2.1864': attribute type 5 has an invalid length. [ 410.045511][T12571] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1864'. [ 410.847568][T12584] syzkaller0: entered promiscuous mode [ 410.858118][T12594] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.1869'. [ 410.873121][T12594] openvswitch: netlink: Message has 20476 unknown bytes. [ 410.901530][T12584] syzkaller0: entered allmulticast mode [ 413.830012][T12604] netlink: 'syz.2.1870': attribute type 10 has an invalid length. [ 414.157968][T12617] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.1874'. [ 414.610856][T12623] netlink: 'syz.1.1876': attribute type 10 has an invalid length. [ 415.088589][T12633] netlink: 'syz.2.1879': attribute type 21 has an invalid length. [ 415.115231][T12633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1879'. [ 415.124766][T12633] netlink: 'syz.2.1879': attribute type 5 has an invalid length. [ 415.141610][T12633] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1879'. [ 415.352313][T12639] C: renamed from team_slave_0 (while UP) [ 415.484572][T12639] netlink: 'syz.3.1878': attribute type 4 has an invalid length. [ 415.540722][T12639] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1878'. [ 415.639945][T12639] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 415.792590][T12651] netlink: 'syz.0.1883': attribute type 10 has an invalid length. [ 415.800515][T12651] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 416.578075][T12660] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1885'. [ 416.640089][T12663] netlink: 'syz.3.1885': attribute type 9 has an invalid length. [ 416.717108][T12663] netlink: 371 bytes leftover after parsing attributes in process `syz.3.1885'. [ 416.854850][T12667] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1888'. [ 418.222381][T12680] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1892'. [ 418.479195][T12684] netlink: 'syz.1.1893': attribute type 1 has an invalid length. [ 418.487852][T12684] netlink: 191376 bytes leftover after parsing attributes in process `syz.1.1893'. [ 418.969914][T12694] netlink: 'syz.3.1894': attribute type 21 has an invalid length. [ 419.026116][T12694] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1894'. [ 419.050186][T12694] netlink: 'syz.3.1894': attribute type 5 has an invalid length. [ 420.106021][T12717] netlink: 'syz.1.1903': attribute type 21 has an invalid length. [ 420.131885][T12717] __nla_validate_parse: 1 callbacks suppressed [ 420.131909][T12717] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1903'. [ 420.192053][T12717] netlink: 'syz.1.1903': attribute type 5 has an invalid length. [ 420.207393][T12717] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1903'. [ 420.227753][T12715] netlink: 'syz.0.1902': attribute type 10 has an invalid length. [ 420.243448][T12715] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1902'. [ 420.286399][T12715] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 420.548513][T12721] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1904'. [ 420.584854][T12721] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1904'. [ 420.601080][T12721] tc_dump_action: action bad kind [ 428.066924][T12823] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1931'. [ 429.941998][T12860] netlink: 'syz.3.1943': attribute type 3 has an invalid length. [ 429.950815][T12861] netlink: 'syz.3.1943': attribute type 3 has an invalid length. [ 429.960790][T12860] netlink: 'syz.3.1943': attribute type 16 has an invalid length. [ 429.971382][T12861] netlink: 'syz.3.1943': attribute type 16 has an invalid length. [ 429.979591][T12861] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1943'. [ 430.000719][T12860] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1943'. [ 430.180054][T12870] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1945'. [ 430.201130][T12859] bridge0: port 3(team0) entered disabled state [ 430.218042][T12859] bridge_slave_1: left allmulticast mode [ 430.226908][T12859] bridge_slave_1: left promiscuous mode [ 430.233327][T12859] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.257756][T12859] bridge_slave_0: left allmulticast mode [ 430.273213][T12859] bridge_slave_0: left promiscuous mode [ 430.285161][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.817156][T12882] netlink: 61211 bytes leftover after parsing attributes in process `syz.1.1948'. [ 430.933884][T12885] netlink: 'syz.0.1949': attribute type 2 has an invalid length. [ 430.976708][T12885] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.1949'. [ 431.009272][T12892] netlink: 'syz.1.1952': attribute type 1 has an invalid length. [ 431.039979][T12892] netlink: 'syz.1.1952': attribute type 4 has an invalid length. [ 431.071544][T12892] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.1952'. [ 431.691940][T12906] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1957'. [ 432.153677][ T5778] Bluetooth: hci2: command 0x0406 tx timeout [ 432.413862][T12912] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1960'. [ 432.444784][T12912] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1960'. [ 432.575748][T12912] netlink: 'syz.3.1960': attribute type 10 has an invalid length. [ 432.607646][T12912] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 432.634987][T12912] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.663311][T12912] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 433.048435][T12940] netlink: 'syz.2.1969': attribute type 3 has an invalid length. [ 433.086836][T12940] netlink: 'syz.2.1969': attribute type 3 has an invalid length. [ 433.110573][T12947] __nla_validate_parse: 3 callbacks suppressed [ 433.110609][T12947] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1972'. [ 433.111488][T12940] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1969'. [ 433.222569][T12953] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1973'. [ 433.251608][T12953] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1973'. [ 433.282173][T12957] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1975'. [ 433.318336][T12957] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1975'. [ 433.493626][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.538873][T12957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.603501][T12957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.640746][T12957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.675452][T12957] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 433.709009][T12957] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 434.843094][T12976] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1980'. [ 435.042825][T12978] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1981'. [ 435.256169][T12985] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1983'. [ 435.466791][T12990] validate_nla: 2 callbacks suppressed [ 435.466809][T12990] netlink: 'syz.1.1985': attribute type 17 has an invalid length. [ 435.530179][T12990] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1985'. [ 435.550622][T12990] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 436.078248][T13017] netlink: 'syz.0.1996': attribute type 21 has an invalid length. [ 436.101897][T13017] netlink: 'syz.0.1996': attribute type 5 has an invalid length. [ 438.053818][T13062] tun0: tun_chr_ioctl cmd 1074025677 [ 438.059305][T13062] tun0: linktype set to 1 [ 438.073428][T13059] mac80211_hwsim hwsim12 ..c: renamed from wlan1 [ 438.147829][T13065] netlink: 'syz.3.2009': attribute type 21 has an invalid length. [ 438.181523][T13065] __nla_validate_parse: 5 callbacks suppressed [ 438.181680][T13065] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2009'. [ 438.221987][T13065] netlink: 'syz.3.2009': attribute type 5 has an invalid length. [ 438.229974][T13065] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2009'. [ 438.945936][T13071] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2011'. [ 439.062541][T13071] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2011'. [ 439.100456][T13079] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2011'. [ 439.294666][T13071] netlink: 'syz.0.2011': attribute type 10 has an invalid length. [ 439.307229][T13071] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2011'. [ 439.364971][T13071] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 439.593230][T13087] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2015'. [ 439.868279][T13094] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2017'. [ 439.877727][T13096] netlink: 'syz.0.2018': attribute type 10 has an invalid length. [ 440.316649][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.323652][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.795173][T13120] netlink: 'syz.0.2027': attribute type 13 has an invalid length. [ 440.803450][T13120] netlink: 'syz.0.2027': attribute type 58 has an invalid length. [ 440.831479][T13120] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2027'. [ 440.869460][T13112] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.2024'. [ 440.895544][T13120] syzkaller0: left promiscuous mode [ 440.900902][T13120] syzkaller0: left allmulticast mode [ 440.984537][T13112] netlink: 'syz.2.2024': attribute type 10 has an invalid length. [ 441.008752][T13112] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. [ 441.061286][T13125] netlink: 'syz.3.2028': attribute type 9 has an invalid length. [ 441.168807][T13129] netlink: 'syz.0.2029': attribute type 21 has an invalid length. [ 441.197799][T13129] netlink: 'syz.0.2029': attribute type 5 has an invalid length. [ 441.221967][T13131] netlink: 'syz.2.2031': attribute type 39 has an invalid length. [ 441.357550][T13137] netlink: 'syz.1.2032': attribute type 10 has an invalid length. [ 441.460118][T13137] bridge0: port 3(team0) entered disabled state [ 441.467715][T13137] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.475367][T13137] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.597954][T13137] team0: Device bridge0 is already an upper device of the team interface [ 442.046628][T13147] C: left promiscuous mode [ 442.074085][T13147] C: left allmulticast mode [ 442.430793][T13147] team0: Port device C removed [ 442.582666][T13146] delete_channel: no stack [ 443.412280][T13179] FAULT_INJECTION: forcing a failure. [ 443.412280][T13179] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 443.426563][T13179] CPU: 0 PID: 13179 Comm: syz.2.2046 Not tainted syzkaller #0 [ 443.434069][T13179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.444166][T13179] Call Trace: [ 443.447476][T13179] [ 443.450449][T13179] dump_stack_lvl+0x18c/0x250 [ 443.455165][T13179] ? show_regs_print_info+0x20/0x20 [ 443.460504][T13179] ? load_image+0x420/0x420 [ 443.465146][T13179] ? __lock_acquire+0x7d80/0x7d80 [ 443.470212][T13179] ? snprintf+0xe9/0x140 [ 443.474603][T13179] should_fail_ex+0x394/0x4c0 [ 443.479439][T13179] _copy_to_user+0x2f/0xa0 [ 443.483905][T13179] simple_read_from_buffer+0xe7/0x150 [ 443.489423][T13179] proc_fail_nth_read+0x1e8/0x260 [ 443.494467][T13179] ? proc_fault_inject_write+0x360/0x360 [ 443.500111][T13179] ? fsnotify_perm+0x271/0x5e0 [ 443.504985][T13179] ? proc_fault_inject_write+0x360/0x360 [ 443.510624][T13179] vfs_read+0x298/0x990 [ 443.514788][T13179] ? kernel_read+0x1e0/0x1e0 [ 443.519384][T13179] ? __fget_files+0x28/0x460 [ 443.523988][T13179] ? __fget_files+0x3fc/0x460 [ 443.528673][T13179] ? __fdget_pos+0x2a3/0x330 [ 443.533268][T13179] ? ksys_read+0x74/0x260 [ 443.537604][T13179] ksys_read+0x151/0x260 [ 443.541853][T13179] ? vfs_write+0x9a0/0x9a0 [ 443.546281][T13179] ? lockdep_hardirqs_on+0x98/0x150 [ 443.551493][T13179] do_syscall_64+0x55/0xb0 [ 443.555917][T13179] ? clear_bhb_loop+0x40/0x90 [ 443.560595][T13179] ? clear_bhb_loop+0x40/0x90 [ 443.565275][T13179] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.571180][T13179] RIP: 0033:0x7f6a20d5d68e [ 443.575599][T13179] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 443.595211][T13179] RSP: 002b:00007f6a21c33fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 443.603627][T13179] RAX: ffffffffffffffda RBX: 00007f6a21c346c0 RCX: 00007f6a20d5d68e [ 443.611602][T13179] RDX: 000000000000000f RSI: 00007f6a21c340a0 RDI: 0000000000000006 [ 443.619573][T13179] RBP: 00007f6a21c34090 R08: 0000000000000000 R09: 0000000000000000 [ 443.627549][T13179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.635524][T13179] R13: 00007f6a21016038 R14: 00007f6a21015fa0 R15: 00007ffdd4e78118 [ 443.643512][T13179] [ 443.783455][T13181] mac80211_hwsim hwsim20 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 443.806800][T13181] __nla_validate_parse: 6 callbacks suppressed [ 443.806821][T13181] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.2047'. [ 443.846276][T13184] netlink: 'syz.3.2048': attribute type 21 has an invalid length. [ 443.855942][T13184] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2048'. [ 443.867494][T13184] netlink: 'syz.3.2048': attribute type 5 has an invalid length. [ 443.876950][T13184] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2048'. [ 443.887356][T13185] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2056'. [ 443.903961][T13185] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2056'. [ 445.074217][T13200] netlink: 188 bytes leftover after parsing attributes in process `syz.2.2053'. [ 445.212077][T13201] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2052'. [ 446.403944][T13234] Q6`Ҙ: renamed from lo (while UP) [ 446.517224][T13241] validate_nla: 2 callbacks suppressed [ 446.517244][T13241] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 446.539955][T13241] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.2065'. [ 447.163590][T13235] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 447.186892][T13240] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 447.203793][T13243] netlink: 'syz.2.2065': attribute type 4 has an invalid length. [ 447.215236][T13243] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2065'. [ 447.225340][T13241] netlink: 'syz.2.2065': attribute type 2 has an invalid length. [ 447.425908][T13251] netlink: 'syz.2.2066': attribute type 21 has an invalid length. [ 447.435532][T13251] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2066'. [ 447.446946][T13251] netlink: 'syz.2.2066': attribute type 5 has an invalid length. [ 447.465538][T13252] netlink: 'syz.1.2068': attribute type 21 has an invalid length. [ 447.485369][T13252] netlink: 'syz.1.2068': attribute type 5 has an invalid length. [ 449.404255][T13283] netlink: 'syz.3.2077': attribute type 5 has an invalid length. [ 449.678606][T13289] sctp: [Deprecated]: syz.0.2080 (pid 13289) Use of int in maxseg socket option. [ 449.678606][T13289] Use struct sctp_assoc_value instead [ 453.890892][T13336] __nla_validate_parse: 3 callbacks suppressed [ 453.890957][T13336] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.2094'. [ 454.085149][T13341] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.2095'. [ 454.099586][T13343] netlink: 'syz.3.2096': attribute type 21 has an invalid length. [ 454.120602][T13343] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2096'. [ 454.141899][T13343] netlink: 'syz.3.2096': attribute type 5 has an invalid length. [ 454.149818][T13343] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2096'. [ 454.207822][ C0] [ 454.207830][ C0] ================================ [ 454.207835][ C0] WARNING: inconsistent lock state [ 454.207852][ C0] syzkaller #0 Not tainted [ 454.207860][ C0] -------------------------------- [ 454.207864][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 454.207871][ C0] syz.0.2097/13345 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 454.207888][ C0] ffffffff8d2974d8 (kernfs_rename_lock){....}-{2:2}, at: kernfs_path_from_node+0x88/0xbd0 [ 454.207938][ C0] {INITIAL USE} state was registered at: [ 454.207944][ C0] lock_acquire+0x19e/0x420 [ 454.207961][ C0] _raw_write_lock_irq+0xaf/0xf0 [ 454.207982][ C0] kernfs_rename_ns+0x5e4/0x830 [ 454.208000][ C0] sysfs_rename_link_ns+0x175/0x1b0 [ 454.208013][ C0] device_rename+0x110/0x1e0 [ 454.208032][ C0] dev_change_name+0x308/0x8e0 [ 454.208127][ C0] do_setlink+0x925/0x3f40 [ 454.208169][ C0] rtnl_newlink+0x1848/0x2170 [ 454.208184][ C0] rtnetlink_rcv_msg+0x843/0xf90 [ 454.208201][ C0] netlink_rcv_skb+0x235/0x4c0 [ 454.208216][ C0] netlink_unicast+0x7b1/0x930 [ 454.208228][ C0] netlink_sendmsg+0x8d0/0xbf0 [ 454.208242][ C0] __sys_sendto+0x4a9/0x6b0 [ 454.208257][ C0] __x64_sys_sendto+0xde/0xf0 [ 454.208271][ C0] do_syscall_64+0x55/0xb0 [ 454.208287][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.208312][ C0] irq event stamp: 5458 [ 454.208317][ C0] hardirqs last enabled at (5457): [] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 454.208343][ C0] hardirqs last disabled at (5458): [] exc_debug+0x73/0x140 [ 454.208364][ C0] softirqs last enabled at (5326): [] do_softirq+0xfa/0x1a0 [ 454.208398][ C0] softirqs last disabled at (5277): [] do_softirq+0xfa/0x1a0 [ 454.208415][ C0] [ 454.208415][ C0] other info that might help us debug this: [ 454.208419][ C0] Possible unsafe locking scenario: [ 454.208419][ C0] [ 454.208423][ C0] CPU0 [ 454.208426][ C0] ---- [ 454.208429][ C0] lock(kernfs_rename_lock); [ 454.208439][ C0] [ 454.208442][ C0] lock(kernfs_rename_lock); [ 454.208451][ C0] [ 454.208451][ C0] *** DEADLOCK *** [ 454.208451][ C0] [ 454.208454][ C0] no locks held by syz.0.2097/13345. [ 454.208461][ C0] [ 454.208461][ C0] stack backtrace: [ 454.208466][ C0] CPU: 0 PID: 13345 Comm: syz.0.2097 Not tainted syzkaller #0 [ 454.208481][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 454.208490][ C0] Call Trace: [ 454.208502][ C0] <#DB> [ 454.208542][ C0] dump_stack_lvl+0x18c/0x250 [ 454.208562][ C0] ? show_regs_print_info+0x20/0x20 [ 454.208584][ C0] ? print_usage_bug+0x43d/0x6a0 [ 454.208601][ C0] ? verify_lock_unused+0x15/0x140 [ 454.208620][ C0] lock_acquire+0x2c2/0x420 [ 454.208636][ C0] ? trim_init_extable+0x6f0/0x6f0 [ 454.208690][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 454.208712][ C0] ? read_lock_is_recursive+0x20/0x20 [ 454.208729][ C0] ? __get_user_nocheck_8+0xa/0x20 [ 454.208752][ C0] ? fixup_exception+0x11bb/0x1d90 [ 454.208777][ C0] ? look_up_lock_class+0x75/0x140 [ 454.208800][ C0] _raw_read_lock_irqsave+0xbc/0x100 [ 454.208823][ C0] ? kernfs_path_from_node+0x88/0xbd0 [ 454.208843][ C0] ? _raw_read_lock+0x50/0x50 [ 454.208863][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.208883][ C0] ? lock_release+0xb5/0x8c0 [ 454.208900][ C0] ? percpu_ref_tryget+0x15/0x180 [ 454.208920][ C0] kernfs_path_from_node+0x88/0xbd0 [ 454.208941][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 454.208957][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.208977][ C0] ? kernfs_name+0x140/0x140 [ 454.208994][ C0] ? get_mem_cgroup_from_mm+0x38/0x290 [ 454.209009][ C0] ? get_mem_cgroup_from_mm+0x1b2/0x290 [ 454.209023][ C0] get_mm_memcg_path+0xb9/0x360 [ 454.209044][ C0] __mmap_lock_do_trace_start_locking+0xe6/0x2f0 [ 454.209062][ C0] ? __bpf_trace_mmap_lock_acquire_returned+0x230/0x230 [ 454.209092][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 454.209110][ C0] ? _raw_spin_unlock+0x28/0x40 [ 454.209131][ C0] stack_map_get_build_id_offset+0x5d3/0x720 [ 454.209152][ C0] ? pcpu_freelist_pop+0x12a/0x190 [ 454.209172][ C0] ? __bpf_get_stackid+0x900/0x900 [ 454.209186][ C0] ? perf_prepare_sample+0x1558/0x1db0 [ 454.209206][ C0] __bpf_get_stackid+0x564/0x900 [ 454.209227][ C0] bpf_prog_12712c88fd19bd5b+0x29/0x2d [ 454.209242][ C0] bpf_overflow_handler+0x1fc/0x510 [ 454.209262][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 454.209281][ C0] ? bpf_overflow_handler+0xde/0x510 [ 454.209301][ C0] ? tp_perf_event_destroy+0x20/0x20 [ 454.209323][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 454.209342][ C0] __perf_event_overflow+0x461/0x660 [ 454.209362][ C0] perf_swevent_event+0x319/0x570 [ 454.209379][ C0] ? perf_tp_event+0x1550/0x1550 [ 454.209395][ C0] ? trace_call_bpf+0x5e9/0x6c0 [ 454.209427][ C0] ? perf_trace_buf_alloc+0x290/0x290 [ 454.209449][ C0] perf_bp_event+0x319/0x430 [ 454.209469][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 454.209485][ C0] ? perf_trace_run_bpf_submit+0x125/0x1c0 [ 454.209523][ C0] ? lock_acquire+0x2c2/0x420 [ 454.209543][ C0] hw_breakpoint_exceptions_notify+0x23e/0x670 [ 454.209564][ C0] notifier_call_chain+0x18f/0x380 [ 454.209585][ C0] ? atomic_notifier_call_chain+0x26/0x180 [ 454.209605][ C0] atomic_notifier_call_chain+0xda/0x180 [ 454.209626][ C0] notify_die+0x145/0x1a0 [ 454.209645][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 454.209666][ C0] ? rcu_is_watching+0x15/0xb0 [ 454.209683][ C0] notify_debug+0x2e/0x50 [ 454.209709][ C0] exc_debug+0xde/0x140 [ 454.209728][ C0] asm_exc_debug+0x1e/0x40 [ 454.209748][ C0] RIP: 0010:__import_iovec+0x190/0x850 [ 454.209766][ C0] Code: 6b b7 fd 48 c7 03 00 00 00 00 4c 89 fb e9 d3 04 00 00 4d 85 e4 0f 88 5d 05 00 00 0f 01 cb 0f ae e8 4d 8b 7c 24 08 49 8b 1c 24 <31> ff 4c 89 fe e8 c6 fa 5e fd 4d 85 ff 0f 88 4d 05 00 00 e8 78 f6 [ 454.209780][ C0] RSP: 0018:ffffc9000c0cfaa0 EFLAGS: 00040206 [ 454.209794][ C0] RAX: 1ffff92001819fac RBX: 00002000000000c0 RCX: 0000000000000002 [ 454.209806][ C0] RDX: ffff88802b6dbc00 RSI: 0000000000000001 RDI: 0000000000000001 [ 454.209816][ C0] RBP: 0000000000000008 R08: ffffc9000c0cfd60 R09: ffffc9000c0cfe30 [ 454.209825][ C0] R10: ffffc9000c0cfe70 R11: fffff52001819fd0 R12: 0000200000000300 [ 454.209835][ C0] R13: dffffc0000000000 R14: ffffc9000c0cfcc0 R15: 0000000000000039 [ 454.209851][ C0] [ 454.209855][ C0] [ 454.209863][ C0] import_iovec+0x73/0xa0 [ 454.209879][ C0] ___sys_sendmsg+0x256/0x360 [ 454.209899][ C0] ? __sys_sendmsg+0x2b0/0x2b0 [ 454.209918][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 454.209957][ C0] __se_sys_sendmsg+0x1d0/0x2c0 [ 454.209975][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 454.209996][ C0] ? __x64_sys_sendmsg+0x80/0x80 [ 454.210022][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 454.210044][ C0] do_syscall_64+0x55/0xb0 [ 454.210059][ C0] ? clear_bhb_loop+0x40/0x90 [ 454.210074][ C0] ? clear_bhb_loop+0x40/0x90 [ 454.210088][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 454.210107][ C0] RIP: 0033:0x7fedc219ce59 [ 454.210119][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.210131][ C0] RSP: 002b:00007fedc2f95028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 454.210147][ C0] RAX: ffffffffffffffda RBX: 00007fedc2415fa0 RCX: 00007fedc219ce59 [ 454.210158][ C0] RDX: 0000000000040800 RSI: 0000200000000140 RDI: 0000000000000009 [ 454.210169][ C0] RBP: 00007fedc2232e6f R08: 0000000000000000 R09: 0000000000000000 [ 454.210179][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.210188][ C0] R13: 00007fedc2416038 R14: 00007fedc2415fa0 R15: 00007ffc92ec9408 [ 454.210207][ C0]