last executing test programs: 9.801704141s ago: executing program 0 (id=3437): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r0}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff030768045e207a1509cf36b9", 0x0, 0x500, 0x60000020, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 9.154540139s ago: executing program 0 (id=3439): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffffffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 8.983740207s ago: executing program 0 (id=3440): syz_open_procfs$namespace(0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80460, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0}, 0x81, 0x3, 0x0, 0xbb68c6b7e07d1536, 0x1, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, @perf_config_ext={0x0, 0x7fff}, 0x11400, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="740000007600a9dd05bafeff9db77085fc00000000184eab5c0001000000ffffffff9eadebbfe8fb3bda8a2edce97202d8e8424b0aae2b06f34c7b394f81158445eb96b10edc5866664ea95cb8749a7b33824b2869cccf0f8fe4b7771724d3fcf46f1a00ef29bf690a2a01ec9a5e9fae01d9fcbc", 0x74}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f00000000c0), 0x2, 0x0) 8.919345448s ago: executing program 2 (id=3441): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xffff, 0x81}, 0x100c, 0x7, 0x0, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40000) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe7d}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6500, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x12, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x5865}, 0x0) 7.973828326s ago: executing program 2 (id=3445): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xc}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000002040)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x40000000, 0x1, 0x100001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1dc1465eee689e4fc93312e1fc9a479e09bf3f81f54823a8dd3f725e88e21143ad6ad895bbbe7243049c0dceb0eb0903907f8deb52330dbc5b9a"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)='\x00'/10, 0xa}], 0x2}, 0x8080) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)="148726e80cc762db211148a16cedde5ad4bc1b445b54e40f1fcc6902a8a39e997f6d0fd068853de0d7781a39864d8e3d58116139038ece727648cbf811a765e99dda978fffe67cc3b8b076551b6cd2018a43fdd37e6311ab0d3e3723768e0d87346031028fc202457abd9bc7bd4720889cbca930a4bf3ca5a3433b3466520941ff65b8dff0974543eeac1e07d3bcd25aaaa58f922f0dc31e54f3458f7ad73098a9a4ac184c09089e1ced4799a62f4db9700e8875e87077200a60bb5cd1cb1ef1eff482", 0xc3}, {&(0x7f0000000580)="8cc4348d5f4cd784ac4cde76cde19657565b0652e7de5b7878ff2e3439", 0x1d}, {&(0x7f0000000680)="6e1e5c42e1b08403806e55fb44f72b461b07598fb936cafcd304f3749dda1ec1b01f14e81ac7b75dee5cdf41f589aab61564cfcbb5dfc6a2f5f912837067517f9eb67a9c32cd1b6455381a33fca347bd2cd67f16768e1700", 0x58}, {&(0x7f0000000700)="737568a03fd5b5", 0x7}, {&(0x7f0000000740)}, {&(0x7f00000007c0)="79dff61fcb2d5c321a21a9c40f4633ac1a2951dd4131353022cf61095413bdd63a69916324cd97779ae04de659214c22f1709704ea933f2726cb652f94cfa5ef2c2620e441a7d8e8a798f91b171bf530c52f5c84f300c8d27027d9b66e862fba6b9b08c640aaeb0a824cfb38c5f78f8bf50f45019cbe3609481102b39eb71fa1d4fc3163", 0x84}, {&(0x7f0000000880)="5d5a6af74aa9", 0x6}, {&(0x7f00000008c0)}, {&(0x7f0000000940)="98fec9cef2d952742146fab600116ecfe36c66ccfc3079d0e52b9d0ff940f84354d6443ee4b6b8fb73f2b2239934bca0f815da507c94c0e50224b638e3785ed68bd1ac70d65be60f492d8e919076c86cd3e5319ae08dee2a18c4892b1dea41e6c9ade99dacd72aa85a09f9bd7189b358aadb5dc1915bd10dfa9248fc01a9e31355bce52041b000f334dab6b9d65b20696fad5aaff1b8a8a704af521b467431afa8972422aaa886eb4334cce675a0e3e79d640e420341b2cf27650da70c6afe38c9139e16e328d671920629cf257deccb3f1a4b57f5ee41fafaa4ca32716eaae887a179672809a2", 0xe7}], 0x9, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x50}, 0x20000010) 7.882686241s ago: executing program 0 (id=3446): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x2008, r0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETVNETBE(r9, 0x400454de, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r9, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9d79cebf57c96c61}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)='GPL\x00', 0x4, 0xf8, &(0x7f0000000680)=""/248, 0x41000, 0x4, '\x00', r5, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0xb, 0x5, 0x73}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r9, r10], &(0x7f0000000980)=[{0x5, 0x1, 0x5, 0xb}, {0x1, 0x2, 0x9}, {0x1, 0x4, 0x2, 0x6}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0x10001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200)=0x3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r11, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0xfffffffe, 0x0, 0x2, 0x22000, 0x1, 0xc23, '\x00', 0x0, r11, 0x5, 0x0, 0x42}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000003e864a053417c878bcd29f41bd", @ANYRES32=r13, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) 7.129822607s ago: executing program 4 (id=3449): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8, 0x16, 0x9e, 0x5, 0x0, 0x6, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x6, 0x9}, 0x3040, 0x6, 0x0, 0x4, 0x8000000000000001, 0x8, 0x2, 0x0, 0x735e, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001580)) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8f}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @loopback, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close(r5) 6.99440717s ago: executing program 3 (id=3450): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0, 0x3}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r0, 0x107, 0xd, &(0x7f00000000c0), 0x4f) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x0]}}, 0x0, 0x27}, 0x28) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) r3 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r1, &(0x7f0000000100)='syz1\x00', 0x1ff) 6.940751559s ago: executing program 2 (id=3451): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r0}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff030768045e207a1509cf36b9", 0x0, 0x500, 0x60000020, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 6.69795248s ago: executing program 1 (id=3452): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xadb740b25be2919a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280), 0x84, r0}, 0x38) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) sendmsg$kcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="a695", 0x2}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x5e0}, 0x4801) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x10}, 0x300, 0x0, 0x0, 0x3, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, &(0x7f0000000380)="fd97a6633528276901d509de9400a14fb5913c6c253c5551be05130e9eee4bce3f4e", 0x0}, 0x50) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 6.33429976s ago: executing program 3 (id=3453): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8, 0x16, 0x9e, 0x5, 0x0, 0x6, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x6, 0x9}, 0x3040, 0x6, 0x0, 0x4, 0x8000000000000001, 0x8, 0x2, 0x0, 0x735e, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001580)) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8f}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @loopback, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close(r5) 5.828509345s ago: executing program 4 (id=3454): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8, 0x16, 0x9e, 0x5, 0x0, 0x6, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x6, 0x9}, 0x3040, 0x6, 0x0, 0x4, 0x8000000000000001, 0x8, 0x2, 0x0, 0x735e, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001580)) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8f}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @loopback, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close(r5) 5.73846361s ago: executing program 2 (id=3455): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$kcm(0x2, 0x1, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000940)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$kcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="a6", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="a0000000000000000b0100000400000043e2c520c578ad0d79b52008ea172c0d7d7cc6241cb8bb9e6be742f80851e7d1a502bedc0c2a4da1c3c0da096ed25e8c3fae526c09700b3a6bcdffb293d1d4ec80642b2cc5cfacf1e37fe7f1d34933bc5a15aa733e1db0e8c1db400fce316af4f3d838302154d2feb15c1f721a6fcaeb3dd3be72af44ea46445d8410618d28c4fac1602ab56d45cb561212d51770000088000000000000009200000040000000459fae71ec32c699873d5edcf9c6c7ca72ae2780f36a9f5f0e6c2fe3d72228efd5744252e240d68ac38dbd8a7652b381ef33a1e0882c6cde710fa3ad2c0f0b77062dfb4d12675b588d5bbdc2fba065cdd2de40c57c6ea7fe5efe1d1cb76650b1646361cccbe83b39d2bb23795e5f1fd8b41f000000000000e0000000000000000c010000a4000000e0a51d83dc5711f91fe63a552b4ea897a4a03ab8435d08374aaa864f710f033f2420d39fcecfd8651207c39f3468a85ba9a1839991df3315b4c03afbba8cc24a7ea61719d0f8858a99f48a639f4955b1e5b5c1e637ee964a37e2379990b272644d7e8e5913c32e677c623cfc86335a2cb34bf3c3815be8e68a6ea98025c632063cd2ebc230fceb149f4e5221aaece73543ee03e420d65fd92dc037169d8e1f554726b21e16d54321dd01156d1bb9f0569155b69f3a62c66959a849aef0b79f91b1cb8fe3aecf5b0ace96000000000000a8000000000000001401000002000000a10b958486bf6b0cbc98ebdc89064c5d44aea5ffe4ab31df2e9d02c2251a76c19738557bcda205a2d8c4542efe31c63b694ba4e0645e600333d8b43f986313dd3fc77a37737bc207af8730fb0681a919b1063dde130f4317dddd5983c70a4e5d4e77ff7928fb27d54ac3ac8a20c967fb469f58e835bcaa5128c7093e11a3c3cfd46f646dcc91fcdb4a70ee5770c1c1ec33d8b2562440500078000000000000000a010000d6fdffff2ef60dd173b4bf57df11c370733e67cd7c42f2b4e12148b1b011087318bdc755ae1c848b9fe0bf6e731058b71f88bbf8a0daa7e088cbf313b9d6f6095d1aa1a5ee63a395e0b4b1b6bc0b23e405b8d87c2ec0ba97eefa23c2d2f96d4511a9d4bb823ebc2786760000100100000000000006000000ff000000c9e8b55eb3a7fcb473dd3719455ff31861c305bf2ab2fa8fb81379792c069130c32c4f1707b0ee64671bf17810bfd56e03b15fe7c0b79e910e2b522ed68f01d77fcaab2896c9d860e9de2e74e4dc710d61339544aa342b6eaf2a19603bb2fab64b4ea922cb63d5e8b484fbfb9330a1e594778491e9e42e269f27e668835307f62829f30892f7aa7a054a3c10fc01ab8fc219fb5b16408b5955ce3cb3420229ce2b7679ce5e60db78a2a2a388f3280778fc7e762c9feec8c9e101f9a357bbdf12bbcde051c574305a47474e6abf9e30396a5953ed1971a112e9ba37c49603e2ebead6f00c67fda9808d7fcdeb434625afe680caf436f5ad952969312649000000b00000000000000019010000070000004208ce68676a1b55239a58080ba5da591bcb492159f7477460341ab35b5180689ac91bd9e3d2d55040207acce0c8d340d1123777fc46a662e657840588000900363219c0d7b495fa0d9317b587b19c1635a498842d58900e513bfe365869c5abec05e880952dddb89d8e10a2d721fc291052ff28dc60f290a5186c2cc42a4df70c6666a21ddbff160fa5b059ee0e14a1c42b0b871a230b45c36d9f737e23000040000000000000000101000007000000ff18ee2204ef27c8d6bf42fb8cbeafd359a0c387b53e43b1989e50656670e9b8bb5c2cbb38c187361d8e000000000000b8"], 0x5e0}, 0x4801) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.574514418s ago: executing program 1 (id=3456): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) sendmsg$tipc(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)}], 0x2, 0x0, 0x0, 0x400c800}, 0x4000000) close(r2) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x40000000003}, 0x10c002, 0xac5d, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e145802000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x40004) 5.244661053s ago: executing program 1 (id=3458): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000540)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0x81}, 0x100c, 0x0, 0xfffffffc, 0x9, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x10005}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="11000000040000000400000005"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2, 0xffffffffffffffff, 0x521}, 0x57) socket$kcm(0x1e, 0x1, 0x0) write$cgroup_devices(r0, 0x0, 0xfffffeff) 5.241873553s ago: executing program 0 (id=3468): socket$kcm(0x10, 0x2, 0x0) r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x8c, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7ffe, 0xe}, 0x0, 0x0, 0xfffffffe, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2000000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x2008, r0}, 0x18) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x6, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="180000000effd001000000000400070007010000080700007500fcff0000000095"], &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000a00)=""/250, 0x0, 0x0, '\x00', r5}, 0x94) r6 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0x64, &(0x7f0000000000)=r8, 0x10) r9 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETVNETBE(r9, 0x400454de, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', 0x0, r9, 0x4, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x6, 0x12, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x9d79cebf57c96c61}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000380)='GPL\x00', 0x4, 0xf8, &(0x7f0000000680)=""/248, 0x41000, 0x4, '\x00', r5, 0x25, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x5, 0xb, 0x5, 0x73}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000940)=[r9, r10], &(0x7f0000000980)=[{0x5, 0x1, 0x5, 0xb}, {0x1, 0x2, 0x9}, {0x1, 0x4, 0x2, 0x6}, {0x3, 0x3, 0x10, 0x8}], 0x10, 0x10001}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f00000002c0)={'bond0\x00', 0x4000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'nicvf0\x00', 0x1432}) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000200)=0x3) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r12, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x0, 0x808e}, 0x40000100) write$cgroup_devices(r11, &(0x7f00000005c0)=ANY=[], 0xfffffeff) syz_clone(0x8001000, 0x0, 0x0, 0x0, 0x0, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x10, 0xfffffffe, 0x0, 0x2, 0x22000, 0x1, 0xc23, '\x00', 0x0, r11, 0x5, 0x0, 0x42}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000003e864a053417c878bcd29f41bd", @ANYRES32=r13, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x94) 4.714765221s ago: executing program 1 (id=3459): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x6, @perf_config_ext, 0x1080d2, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x6) r0 = socket$kcm(0x2, 0x1, 0x84) r1 = socket$kcm(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000000)={0x3, 0x80, 0x0, 0x45, 0x0, 0xfd, 0x0, 0x9c, 0x10803, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400001, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0xffff, 0x5, 0x4, 0x2, 0x200000a, 0x48, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0xfffffeff, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x84, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) syz_clone(0x2000, &(0x7f0000000080), 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000400)="626a38067817f5a3904a9e6fef300d820348eb8c7dc0fac02824c6c07f17dffd527cbe1e7cb5987050b1282b2d3d92240f8f565075a8784be0") openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) 4.714464301s ago: executing program 3 (id=3460): socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110c230000) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2042) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x72bd1de2ad10b2b3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8940, &(0x7f0000000080)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) ioctl$TUNGETFEATURES(r1, 0x800454cf, 0x0) socket$kcm(0x10, 0x2, 0x4) 4.619797167s ago: executing program 4 (id=3461): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x8000000000000000, 0x40}, 0x200, 0x2, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000041) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg(r0, &(0x7f00000008c0)={0x0, 0x241, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg$inet(r0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)}, 0x40) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 4.514400155s ago: executing program 2 (id=3462): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0xc}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="8fedcb7907031175f37538e486dd630080fc00000000db5b686158bbcfe8875a060300001123000000000000000000000000ac1414aa89"], 0xfdef) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000002040)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r4, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x7, 0x40000000, 0x1, 0x100001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1dc1465eee689e4fc93312e1fc9a479e09bf3f81f54823a8dd3f725e88e21143ad6ad895bbbe7243049c0dceb0eb0903907f8deb52330dbc5b9a"], &(0x7f00000002c0)='GPL\x00'}, 0x94) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000280), 0x4) sendmsg$kcm(r6, &(0x7f00000001c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0xc}, 0x80, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000300)='\x00'/10, 0xa}], 0x2}, 0x8080) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x4, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x1, 0x1, 0x0, r7}, @call={0x85, 0x0, 0x0, 0x25}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xd2, &(0x7f0000000040)=""/210}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb, 0x0, &(0x7f0000000000)="259a53f271a76d2686dd4c", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000004c0)={r8, 0x58, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000480)="148726e80cc762db211148a16cedde5ad4bc1b445b54e40f1fcc6902a8a39e997f6d0fd068853de0d7781a39864d8e3d58116139038ece727648cbf811a765e99dda978fffe67cc3b8b076551b6cd2018a43fdd37e6311ab0d3e3723768e0d87346031028fc202457abd9bc7bd4720889cbca930a4bf3ca5a3433b3466520941ff65b8dff0974543eeac1e07d3bcd25aaaa58f922f0dc31e54f3458f7ad73098a9a4ac184c09089e1ced4799a62f4db9700e8875e87077200a60bb5cd1cb1ef1eff482", 0xc3}, {&(0x7f0000000580)="8cc4348d5f4cd784ac4cde76cde19657565b0652e7de5b7878ff2e3439", 0x1d}, {&(0x7f0000000680)="6e1e5c42e1b08403806e55fb44f72b461b07598fb936cafcd304f3749dda1ec1b01f14e81ac7b75dee5cdf41f589aab61564cfcbb5dfc6a2f5f912837067517f9eb67a9c32cd1b6455381a33fca347bd2cd67f16768e1700", 0x58}, {&(0x7f0000000700)="737568a03fd5b5", 0x7}, {&(0x7f0000000740)}, {&(0x7f00000007c0)="79dff61fcb2d5c321a21a9c40f4633ac1a2951dd4131353022cf61095413bdd63a69916324cd97779ae04de659214c22f1709704ea933f2726cb652f94cfa5ef2c2620e441a7d8e8a798f91b171bf530c52f5c84f300c8d27027d9b66e862fba6b9b08c640aaeb0a824cfb38c5f78f8bf50f45019cbe3609481102b39eb71fa1d4fc3163", 0x84}, {&(0x7f0000000880)="5d5a6af74aa9", 0x6}, {&(0x7f00000008c0)}, {&(0x7f0000000940)="98fec9cef2d952742146fab600116ecfe36c66ccfc3079d0e52b9d0ff940f84354d6443ee4b6b8fb73f2b2239934bca0f815da507c94c0e50224b638e3785ed68bd1ac70d65be60f492d8e919076c86cd3e5319ae08dee2a18c4892b1dea41e6c9ade99dacd72aa85a09f9bd7189b358aadb5dc1915bd10dfa9248fc01a9e31355bce52041b000f334dab6b9d65b20696fad5aaff1b8a8a704af521b467431afa8972422aaa886eb4334cce675a0e3e79d640e420341b2cf27650da70c6afe38c9139e16e328d671920629cf257deccb3f1a4b57f5ee41fafaa4ca32716eaae887a179672809a2", 0xe7}], 0x9, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}], 0x50}, 0x20000010) 3.76395355s ago: executing program 4 (id=3463): r0 = socket$kcm(0xa, 0x2, 0x3a) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x104) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000000f01f0081"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0xb, &(0x7f0000000000), 0xe) sendmsg$inet(r1, &(0x7f00000007c0)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000080)="92", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="2400000000000000000000000700000044140823e000000200000002e00000010000100000000000dc00000000000000000000000700000094040000863900012c01000cb2ffb69602013567ffcb060f19367d2b99bdc0f59e428bc33a050a3660f2bb77c7045b050a31efe0215e235d56060495ae0144243471ac14142700000006ac1414bb00000001ac1414bb0000ffff0a01010200000009009404010000866000000000000c253d78b48f9458beb62d0102000d3bf9f2dbdddfea00b260f00503db010436b20603c70109e35e3ab5244a640709675e60e1799f870512e123b12c8654130f6a1f80f526064d12061127d9c9821b1bfe4b42fcb33e2e2d2594040000000000001400000000000000000000000200000022a20000000000001400000000000000000000000200000005000000000000001c"], 0x158}, 0x24000840) close(r1) sendmsg$kcm(r0, 0x0, 0x0) 3.760955511s ago: executing program 3 (id=3474): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x602080, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) close(r0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$TUNGETVNETLE(r0, 0x40107447, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) close(0x3) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 3.546785097s ago: executing program 1 (id=3464): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0xd30f, 0x10000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000030000a69108a00000000000400000000000000950000000000000046a1106954caf9317ef0ec6cf5f9296f92e6d9fbaf8d628d5afd48ee755f33e7495dde895d9a2b8c8aa5ff9cafec3c01608c93122ee076b3b798618d6d6b6f391799a552c3a162939866b4767b8f113833ee26d6d2ad9ca26e9d26806cc4757f9660753259904f10096a64e155d3b392012db9"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2b0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="6a50bae0b3e5"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800"/16, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000001007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000085000000a0000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800114004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef", 0xd2}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000040)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000001100000065000000000000007600000000009fff95000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000008400000000000000"], 0x18}, 0x41) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 3.461944871s ago: executing program 2 (id=3465): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8, 0x16, 0x9e, 0x5, 0x0, 0x6, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x6, 0x9}, 0x3040, 0x6, 0x0, 0x4, 0x8000000000000001, 0x8, 0x2, 0x0, 0x735e, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001580)) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8f}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @loopback, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close(r5) 3.374148996s ago: executing program 4 (id=3466): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2420, 0x0, 0x0, 0x3, 0x3, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0xd, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x5, 0x84) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB="3eca", @ANYRES8=r2], 0x9a) 549.950598ms ago: executing program 4 (id=3467): socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x8, 0x0, 0x4000004, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x2e}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r0}, &(0x7f0000001b80), &(0x7f0000001bc0)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff030768045e207a1509cf36b9", 0x0, 0x500, 0x60000020, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 519.405383ms ago: executing program 3 (id=3469): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) r2 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xe, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x80, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x900}, 0x4060) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r0, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000008c0)=[0x0, 0x0], 0x0, 0x9b, &(0x7f0000000900), 0x0, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0xf7, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0x1b, &(0x7f0000000c80)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=r4], &(0x7f0000000340)='GPL\x00', 0xfffff000, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000800)={0x4, 0x4, 0x1, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 439.910397ms ago: executing program 1 (id=3470): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8, 0x16, 0x9e, 0x5, 0x0, 0x6, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x6, 0x9}, 0x3040, 0x6, 0x0, 0x4, 0x8000000000000001, 0x8, 0x2, 0x0, 0x735e, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001580)) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8f}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @loopback, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close(r5) 259.641187ms ago: executing program 0 (id=3471): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001040)=0xffffffffffffffff, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20002080) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 3 (id=3472): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.events\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/51) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[]) perf_event_open(&(0x7f0000000340)={0x0, 0x80, 0x8, 0x16, 0x9e, 0x5, 0x0, 0x6, 0x20000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x10001, 0x2, @perf_config_ext={0x6, 0x9}, 0x3040, 0x6, 0x0, 0x4, 0x8000000000000001, 0x8, 0x2, 0x0, 0x735e, 0x0, 0x5}, 0x0, 0xb, r0, 0x8) socket$kcm(0xa, 0x5, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r2, 0x400454c9, 0xffffffffffffffff) ioctl$TUNGETVNETLE(r2, 0x800454dd, &(0x7f0000001580)) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r3, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x8f}, 0x0, 0xfffffffffffbffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xa0100, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x6}, 0x10, 0x0, 0x80000003, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b02d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$kcm(0x21, 0x2, 0x2) r6 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r6, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0}, 0x8000) sendmsg$inet(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)=[{0x0, 0x47}], 0x1}, 0x48800) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e20, 0xfffffffe, @loopback, 0x1}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0xff00) close(r5) kernel console output (not intermixed with test programs): pe 29 has an invalid length. [ 176.238700][ T5762] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 176.248386][ T5766] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 176.293953][ T5762] netlink: 'syz.3.332': attribute type 29 has an invalid length. [ 176.404105][ T5763] netlink: 'syz.4.334': attribute type 1 has an invalid length. [ 176.423129][ T5763] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.334'. [ 176.458881][ T5762] netlink: 'syz.3.332': attribute type 10 has an invalid length. [ 176.501636][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.509543][ T5762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.518913][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.527267][ T5762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.690524][ T5762] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 176.796914][ T5773] mac80211_hwsim hwsim2 ªªªªªª: renamed from wlan0 [ 177.018315][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.332'. [ 177.048961][ T5762] netlink: 60 bytes leftover after parsing attributes in process `syz.3.332'. [ 177.434187][ T5795] netlink: 'syz.0.338': attribute type 10 has an invalid length. [ 177.474822][ T5795] bond0: (slave wlan1): Opening slave failed [ 177.588629][ T5793] netlink: 132 bytes leftover after parsing attributes in process `syz.2.341'. [ 177.638744][ T5799] netlink: 128 bytes leftover after parsing attributes in process `syz.2.341'. [ 177.673957][ T5799] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 178.081169][ T5807] netlink: 'syz.1.342': attribute type 29 has an invalid length. [ 178.096579][ T5810] tap0: tun_chr_ioctl cmd 2147767517 [ 178.226101][ T5814] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.343'. [ 179.466807][ T5837] validate_nla: 3 callbacks suppressed [ 179.466843][ T5837] netlink: 'syz.0.348': attribute type 10 has an invalid length. [ 179.720622][ T5843] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 179.817411][ T5837] team0 (unregistering): Port device team_slave_1 removed [ 179.993147][ T5843] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 180.050163][ T5840] netlink: 'syz.4.349': attribute type 1 has an invalid length. [ 180.059311][ T5848] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 180.143356][ T5840] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.349'. [ 180.156572][ T5847] tap0: tun_chr_ioctl cmd 2147767517 [ 180.328164][ T5852] netlink: 'syz.2.351': attribute type 10 has an invalid length. [ 180.424015][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.434525][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.806051][ T5848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.351'. [ 181.009386][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.017353][ T5852] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.026659][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.034908][ T5852] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.467688][ T5852] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 181.528136][ T5850] netlink: 'syz.2.351': attribute type 29 has an invalid length. [ 181.613477][ T5848] netlink: 60 bytes leftover after parsing attributes in process `syz.2.351'. [ 181.734846][ T5868] netlink: 'syz.1.354': attribute type 8 has an invalid length. [ 181.772832][ T5868] netlink: 'syz.1.354': attribute type 1 has an invalid length. [ 181.824024][ T5868] netlink: 104088 bytes leftover after parsing attributes in process `syz.1.354'. [ 181.919882][ T5870] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.355'. [ 182.967381][ T5889] tap0: tun_chr_ioctl cmd 2147767517 [ 183.500869][ T5886] netlink: 'syz.3.359': attribute type 1 has an invalid length. [ 183.683067][ T5886] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.359'. [ 184.634863][ T5911] netlink: 'syz.2.364': attribute type 10 has an invalid length. [ 185.263371][ T5918] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 185.281340][ T5918] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 185.341885][ T5922] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 185.393198][ T5918] netlink: 'syz.0.367': attribute type 29 has an invalid length. [ 185.471075][ T5918] netlink: 'syz.0.367': attribute type 10 has an invalid length. [ 185.517732][ T5918] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.524938][ T5918] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.533035][ T5918] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.540315][ T5918] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.635439][ T5918] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 185.692148][ T5921] tap0: tun_chr_ioctl cmd 2147767517 [ 185.876202][ T5921] netlink: 'syz.2.368': attribute type 1 has an invalid length. [ 185.963820][ T5921] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.368'. [ 186.238225][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'. [ 186.282191][ T5922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.367'. [ 186.329758][ T5936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.369'. [ 186.398214][ T5938] tap0: tun_chr_ioctl cmd 2147767517 [ 186.519647][ T5942] netlink: 'syz.3.372': attribute type 1 has an invalid length. [ 186.573494][ T5942] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.372'. [ 187.057821][ T5955] netlink: 'syz.2.375': attribute type 8 has an invalid length. [ 187.114859][ T5955] netlink: 'syz.2.375': attribute type 1 has an invalid length. [ 187.122565][ T5955] netlink: 104088 bytes leftover after parsing attributes in process `syz.2.375'. [ 189.820924][ T5983] tap0: tun_chr_ioctl cmd 2147767517 [ 189.932770][ T5985] netlink: 'syz.3.381': attribute type 1 has an invalid length. [ 190.098348][ T5985] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.381'. [ 190.575603][ T5989] delete_channel: no stack [ 190.698190][ T5996] tap0: tun_chr_ioctl cmd 2147767517 [ 190.866521][ T5997] netlink: 'syz.0.385': attribute type 1 has an invalid length. [ 190.868548][ T6001] netlink: 'syz.1.386': attribute type 29 has an invalid length. [ 190.909503][ T6001] netlink: 'syz.1.386': attribute type 29 has an invalid length. [ 190.929730][ T6003] netlink: 'syz.1.386': attribute type 29 has an invalid length. [ 190.938343][ T5997] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.385'. [ 191.017277][ T6001] netlink: 'syz.1.386': attribute type 29 has an invalid length. [ 191.067335][ T6001] netlink: 'syz.1.386': attribute type 10 has an invalid length. [ 191.262098][ T6011] tap0: tun_chr_ioctl cmd 2147767517 [ 191.328671][ T6001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.386'. [ 191.361524][ T6014] netlink: 'syz.4.389': attribute type 1 has an invalid length. [ 191.380641][ T6014] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.389'. [ 191.421679][ T6001] netlink: 60 bytes leftover after parsing attributes in process `syz.1.386'. [ 192.596905][ T6023] netlink: 65043 bytes leftover after parsing attributes in process `syz.2.390'. [ 195.504683][ T6058] tap0: tun_chr_ioctl cmd 2147767517 [ 195.676981][ T6058] netlink: 'syz.4.401': attribute type 1 has an invalid length. [ 195.740517][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.747009][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.073490][ T6058] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.401'. [ 196.272434][ T6067] netlink: 'syz.2.403': attribute type 29 has an invalid length. [ 196.386083][ T6067] netlink: 'syz.2.403': attribute type 29 has an invalid length. [ 196.544972][ T6072] netlink: 'syz.2.403': attribute type 29 has an invalid length. [ 196.874647][ T6077] tap0: tun_chr_ioctl cmd 2147767517 [ 196.974493][ T6081] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 196.986778][ T6081] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.405'. [ 197.545770][ T6087] netlink: 65043 bytes leftover after parsing attributes in process `syz.1.404'. [ 197.592272][ T6092] netlink: 'syz.4.409': attribute type 10 has an invalid length. [ 197.769475][ T6100] sctp: [Deprecated]: syz.4.409 (pid 6100) Use of int in maxseg socket option. [ 197.769475][ T6100] Use struct sctp_assoc_value instead [ 198.037667][ T6092] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.047964][ T6092] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.057692][ T6092] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.066998][ T6092] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.538301][ T6112] netlink: 'syz.4.415': attribute type 10 has an invalid length. [ 199.154688][ T6122] tap0: tun_chr_ioctl cmd 2147767517 [ 199.370822][ T6123] netlink: 'syz.1.417': attribute type 1 has an invalid length. [ 199.398905][ T6123] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.417'. [ 202.060466][ T6149] netlink: 'syz.0.423': attribute type 10 has an invalid length. [ 202.069369][ T6149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.423'. [ 202.265238][ T6155] tap0: tun_chr_ioctl cmd 2147767517 [ 202.401980][ T6160] netlink: 'syz.1.425': attribute type 1 has an invalid length. [ 202.526641][ T6160] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.425'. [ 202.842247][ T6161] netlink: 65043 bytes leftover after parsing attributes in process `syz.0.424'. [ 202.887596][ T4279] Bluetooth: hci1: command 0x0406 tx timeout [ 202.893863][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 202.899921][ T4279] Bluetooth: hci3: command 0x0406 tx timeout [ 202.906519][ T4279] Bluetooth: hci0: command 0x0406 tx timeout [ 202.912698][ T4279] Bluetooth: hci4: command 0x0406 tx timeout [ 203.096479][ T6170] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 203.184206][ T6170] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.323873][ T6170] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.343984][ T6170] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.353533][ T6170] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.005006][ T6170] sctp: [Deprecated]: syz.3.431 (pid 6170) Use of int in maxseg socket option. [ 204.005006][ T6170] Use struct sctp_assoc_value instead [ 204.099999][ T6183] netlink: 'syz.0.433': attribute type 13 has an invalid length. [ 204.164591][ T6183] netlink: 152 bytes leftover after parsing attributes in process `syz.0.433'. [ 204.315117][ T6183] syz_tun: refused to change device tx_queue_len [ 204.340904][ T6183] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 204.546195][ T6194] tap0: tun_chr_ioctl cmd 2147767517 [ 205.029712][ T6192] netlink: 'syz.3.435': attribute type 1 has an invalid length. [ 205.129859][ T6192] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.435'. [ 207.326418][ T6227] netlink: 'syz.1.442': attribute type 10 has an invalid length. [ 207.452536][ T6226] delete_channel: no stack [ 207.485052][ T6233] tap0: tun_chr_ioctl cmd 2147767517 [ 207.542604][ T6238] tap0: tun_chr_ioctl cmd 2147767517 [ 207.614337][ T6234] netlink: 'syz.2.444': attribute type 1 has an invalid length. [ 207.730782][ T6234] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.444'. [ 208.047763][ T6239] netlink: 'syz.0.445': attribute type 1 has an invalid length. [ 208.142545][ T6239] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.445'. [ 209.168291][ T6260] netlink: 'syz.2.450': attribute type 4 has an invalid length. [ 209.242317][ T6260] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.450'. [ 210.048438][ T6285] tap0: tun_chr_ioctl cmd 2147767517 [ 210.221005][ T6292] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 210.261056][ T6293] tap0: tun_chr_ioctl cmd 2147767517 [ 210.323336][ T6292] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.458'. [ 210.396369][ T6291] tap0: tun_chr_ioctl cmd 2147767517 [ 210.535552][ T6291] netlink: 'syz.0.460': attribute type 1 has an invalid length. [ 210.644682][ T6291] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.460'. [ 210.710285][ T6293] netlink: 'syz.3.459': attribute type 1 has an invalid length. [ 210.776932][ T6293] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.459'. [ 211.855686][ T6314] netlink: 'syz.2.463': attribute type 10 has an invalid length. [ 212.178699][ T6314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.320223][ T6314] team0: Port device bond0 added [ 212.502076][ T6317] netlink: 65043 bytes leftover after parsing attributes in process `syz.4.461'. [ 212.529993][ T6311] delete_channel: no stack [ 213.623145][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.468'. [ 213.837025][ T6339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.468'. [ 213.954379][ T6340] netlink: 60 bytes leftover after parsing attributes in process `syz.4.468'. [ 214.139760][ T6342] netlink: 60 bytes leftover after parsing attributes in process `syz.4.468'. [ 214.516814][ T6355] tap0: tun_chr_ioctl cmd 2147767517 [ 214.530702][ T6353] tap0: tun_chr_ioctl cmd 2147767517 [ 214.750091][ T6358] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 214.831946][ T6361] tap0: tun_chr_ioctl cmd 2147767517 [ 214.850381][ T6358] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.473'. [ 214.887018][ T6357] netlink: 'syz.3.474': attribute type 1 has an invalid length. [ 214.898177][ T6357] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.474'. [ 215.021659][ T6370] netlink: 'syz.2.475': attribute type 1 has an invalid length. [ 215.066584][ T6370] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.475'. [ 215.424338][ T6378] netlink: 'syz.1.476': attribute type 10 has an invalid length. [ 215.432417][ T6378] netlink: 156 bytes leftover after parsing attributes in process `syz.1.476'. [ 215.451741][ T6380] tap0: tun_chr_ioctl cmd 2147767517 [ 215.676254][ T6383] netlink: 'syz.0.477': attribute type 1 has an invalid length. [ 215.856976][ T6383] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.477'. [ 217.709688][ T6409] netlink: 'syz.4.486': attribute type 29 has an invalid length. [ 217.888011][ T6409] netlink: 'syz.4.486': attribute type 29 has an invalid length. [ 218.053434][ T6416] netlink: 'syz.4.486': attribute type 29 has an invalid length. [ 219.115434][ T6435] tap0: tun_chr_ioctl cmd 2147767517 [ 219.387525][ T6436] netlink: 'syz.2.489': attribute type 1 has an invalid length. [ 219.489596][ T6441] tap0: tun_chr_ioctl cmd 2147767517 [ 219.500916][ T6436] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.489'. [ 219.716526][ T6445] netlink: 'syz.3.490': attribute type 1 has an invalid length. [ 219.762066][ T6445] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.490'. [ 221.327187][ T6461] tap0: tun_chr_ioctl cmd 2147767517 [ 221.839119][ T6464] netlink: 'syz.4.495': attribute type 1 has an invalid length. [ 221.997985][ T6465] netlink: 'syz.3.497': attribute type 13 has an invalid length. [ 222.023151][ T6464] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.495'. [ 222.058052][ T6465] netlink: 152 bytes leftover after parsing attributes in process `syz.3.497'. [ 222.268018][ T6465] syz_tun: refused to change device tx_queue_len [ 222.325270][ T6465] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 223.184301][ T6486] syz.2.502 uses obsolete (PF_INET,SOCK_PACKET) [ 223.554346][ T6483] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.501'. [ 224.819593][ T6506] tap0: tun_chr_ioctl cmd 2147767517 [ 224.996352][ T6511] netlink: 'syz.3.509': attribute type 10 has an invalid length. [ 225.013519][ T6511] netlink: 156 bytes leftover after parsing attributes in process `syz.3.509'. [ 225.108879][ T6512] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 225.163781][ T6514] netlink: 'syz.4.510': attribute type 13 has an invalid length. [ 225.183448][ T6512] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.507'. [ 225.193260][ T6514] netlink: 152 bytes leftover after parsing attributes in process `syz.4.510'. [ 225.220001][ T6514] syz_tun: refused to change device tx_queue_len [ 225.292843][ T6514] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 225.387854][ T6526] tap0: tun_chr_ioctl cmd 2147767517 [ 225.527763][ T6523] netlink: 'syz.2.512': attribute type 1 has an invalid length. [ 225.646209][ T6523] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.512'. [ 228.043352][ T6570] tap0: tun_chr_ioctl cmd 2147767517 [ 228.110687][ T6571] netlink: 'syz.4.524': attribute type 10 has an invalid length. [ 228.194395][ T6571] netlink: 156 bytes leftover after parsing attributes in process `syz.4.524'. [ 228.237486][ T6570] netlink: 'syz.2.523': attribute type 1 has an invalid length. [ 228.435050][ T6570] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.523'. [ 228.840320][ T6585] tap0: tun_chr_ioctl cmd 2147767517 [ 229.085089][ T6589] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.527'. [ 229.543213][ T6590] netlink: 'syz.3.526': attribute type 1 has an invalid length. [ 229.558842][ T6590] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.526'. [ 230.169468][ T6612] tap0: tun_chr_ioctl cmd 2147767517 [ 230.349387][ T6619] netlink: 'syz.0.532': attribute type 1 has an invalid length. [ 230.396397][ T6619] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.532'. [ 231.173247][ T6636] netlink: 'syz.2.540': attribute type 10 has an invalid length. [ 231.201094][ T6636] netlink: 156 bytes leftover after parsing attributes in process `syz.2.540'. [ 231.505579][ T6638] netlink: 65043 bytes leftover after parsing attributes in process `syz.3.538'. [ 232.827661][ T6662] tap0: tun_chr_ioctl cmd 2147767517 [ 232.888542][ T6663] tap0: tun_chr_ioctl cmd 2147767517 [ 233.068429][ T6668] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 233.120931][ T6668] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.546'. [ 233.269270][ T6667] netlink: 'syz.2.547': attribute type 1 has an invalid length. [ 233.303117][ T6667] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.547'. [ 234.188701][ T6691] tap1: tun_chr_ioctl cmd 2147767517 [ 234.375241][ T6693] netlink: 'syz.2.554': attribute type 1 has an invalid length. [ 234.421938][ T6693] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.554'. [ 235.639222][ T6716] tap0: tun_chr_ioctl cmd 2147767517 [ 236.070653][ T6716] netlink: 'syz.0.572': attribute type 1 has an invalid length. [ 236.255455][ T6716] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.572'. [ 236.367371][ T6733] tap0: tun_chr_ioctl cmd 2147767517 [ 236.615951][ T6727] netlink: 'syz.3.564': attribute type 1 has an invalid length. [ 236.702501][ T6727] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.564'. [ 237.751812][ T6748] tap0: tun_chr_ioctl cmd 2147767517 [ 237.834337][ T6752] netlink: 'syz.2.569': attribute type 13 has an invalid length. [ 237.852717][ T6752] netlink: 152 bytes leftover after parsing attributes in process `syz.2.569'. [ 237.901197][ T6754] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 237.909826][ T6754] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.568'. [ 237.920136][ T6752] syz_tun: refused to change device tx_queue_len [ 237.920243][ T6752] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 239.595471][ T6794] tap0: tun_chr_ioctl cmd 2147767517 [ 239.702797][ T6797] netlink: 'syz.4.583': attribute type 1 has an invalid length. [ 239.722833][ T6797] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.583'. [ 239.778328][ T6792] netlink: 'syz.1.582': attribute type 4 has an invalid length. [ 239.793061][ T6792] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.582'. [ 239.965592][ T6802] tap0: tun_chr_ioctl cmd 2147767517 [ 239.990333][ T6804] netlink: 'syz.1.584': attribute type 13 has an invalid length. [ 240.023323][ T6804] netlink: 152 bytes leftover after parsing attributes in process `syz.1.584'. [ 240.099520][ T6804] syz_tun: refused to change device tx_queue_len [ 240.150199][ T6811] netlink: 'syz.3.586': attribute type 1 has an invalid length. [ 240.203173][ T6804] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 240.247477][ T6811] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.586'. [ 240.454521][ T6821] tap0: tun_chr_ioctl cmd 2147767517 [ 240.646613][ T6822] netlink: 'syz.4.587': attribute type 1 has an invalid length. [ 240.666756][ T6822] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.587'. [ 241.265017][ T6840] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.592'. [ 241.601011][ T6840] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 241.873771][ T6861] netlink: 'syz.4.596': attribute type 4 has an invalid length. [ 241.882679][ T6861] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.596'. [ 242.062997][ T6866] tap0: tun_chr_ioctl cmd 2147767517 [ 242.211323][ T6872] netlink: 'syz.0.599': attribute type 10 has an invalid length. [ 242.263409][ T6872] netlink: 156 bytes leftover after parsing attributes in process `syz.0.599'. [ 242.326457][ T6876] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 242.345477][ T6876] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.598'. [ 242.474473][ T6882] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.601'. [ 242.838899][ T6891] tap0: tun_chr_ioctl cmd 2147767517 [ 242.961303][ T6892] netlink: 'syz.1.604': attribute type 1 has an invalid length. [ 242.972198][ T6892] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.604'. [ 243.536258][ T6901] tap0: tun_chr_ioctl cmd 2147767517 [ 243.612959][ T6904] tap0: tun_chr_ioctl cmd 2147767517 [ 243.757850][ T6908] netlink: 'syz.2.606': attribute type 1 has an invalid length. [ 243.773105][ T6908] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.606'. [ 243.952039][ T6911] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.616'. [ 244.177589][ T6921] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.612'. [ 244.268497][ T6921] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 245.015002][ T6940] tap0: tun_chr_ioctl cmd 2147767517 [ 245.231614][ T6941] validate_nla: 1 callbacks suppressed [ 245.231675][ T6941] netlink: 'syz.4.617': attribute type 1 has an invalid length. [ 245.326055][ T6941] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.617'. [ 246.147447][ T6951] tap0: tun_chr_ioctl cmd 2147767517 [ 246.381784][ T6958] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 246.458018][ T6958] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.620'. [ 246.672738][ T6959] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.619'. [ 248.266639][ T6987] tap0: tun_chr_ioctl cmd 2147767517 [ 248.584398][ T7001] netlink: 'syz.3.629': attribute type 1 has an invalid length. [ 248.728240][ T7001] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.629'. [ 248.801355][ T7003] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.628'. [ 248.871849][ T7003] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 249.503854][ T7021] tap0: tun_chr_ioctl cmd 2147767517 [ 250.061323][ T7025] netlink: 'syz.0.637': attribute type 1 has an invalid length. [ 250.221089][ T7025] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.637'. [ 250.952233][ T7046] tap0: tun_chr_ioctl cmd 2147767517 [ 251.236057][ T7051] netlink: 'syz.4.643': attribute type 1 has an invalid length. [ 251.490088][ T7051] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.643'. [ 252.386176][ T7072] netlink: 'syz.1.649': attribute type 4 has an invalid length. [ 252.394503][ T7072] netlink: 152 bytes leftover after parsing attributes in process `syz.1.649'. [ 252.459009][ T7072] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 252.721592][ T7078] netlink: 'syz.0.651': attribute type 10 has an invalid length. [ 252.760192][ T7078] device veth1_macvtap left promiscuous mode [ 253.727080][ T7104] tap0: tun_chr_ioctl cmd 2147767517 [ 254.151909][ T7107] tap0: tun_chr_ioctl cmd 2147767517 [ 254.190186][ T7101] netlink: 'syz.2.660': attribute type 1 has an invalid length. [ 254.363082][ T7101] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.660'. [ 254.564445][ T7107] netlink: 'syz.3.662': attribute type 1 has an invalid length. [ 254.692322][ T7107] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.662'. [ 254.884620][ T7125] tap0: tun_chr_ioctl cmd 2147767517 [ 255.039849][ T7124] netlink: 'syz.4.665': attribute type 1 has an invalid length. [ 255.074028][ T7124] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.665'. [ 255.138810][ T7131] netlink: 'syz.1.668': attribute type 13 has an invalid length. [ 255.147513][ T7131] netlink: 152 bytes leftover after parsing attributes in process `syz.1.668'. [ 255.163972][ T7131] syz_tun: refused to change device tx_queue_len [ 255.170673][ T7131] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 255.297118][ T7137] netlink: 'syz.1.669': attribute type 10 has an invalid length. [ 255.321565][ T7137] device veth1_macvtap left promiscuous mode [ 255.402090][ T7139] netlink: 'syz.0.679': attribute type 4 has an invalid length. [ 255.417293][ T7139] netlink: 152 bytes leftover after parsing attributes in process `syz.0.679'. [ 255.435272][ T7139] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 257.125409][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.131773][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.381562][ T7177] netlink: 'syz.2.683': attribute type 10 has an invalid length. [ 257.408150][ T7177] device veth1_macvtap left promiscuous mode [ 257.535454][ T7172] netlink: 'syz.1.681': attribute type 13 has an invalid length. [ 257.547465][ T7172] netlink: 152 bytes leftover after parsing attributes in process `syz.1.681'. [ 257.631279][ T7172] syz_tun: refused to change device tx_queue_len [ 257.718476][ T7172] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 257.808583][ T7179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.684'. [ 257.959893][ T7189] tap0: tun_chr_ioctl cmd 2147767517 [ 258.105492][ T7195] tap0: tun_chr_ioctl cmd 2147767517 [ 258.171749][ T7193] netlink: 'syz.0.687': attribute type 1 has an invalid length. [ 258.226891][ T7193] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.687'. [ 258.241041][ T7200] netlink: 'syz.2.688': attribute type 1 has an invalid length. [ 258.261636][ T7200] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.688'. [ 259.460379][ T7228] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 259.544655][ T7228] device hsr0 entered promiscuous mode [ 259.599738][ T7228] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 259.684150][ T7228] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 259.727673][ T7228] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 259.781020][ T7228] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 260.180320][ T7241] netlink: 'syz.4.705': attribute type 1 has an invalid length. [ 260.243384][ T7241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.316350][ T7245] tap0: tun_chr_ioctl cmd 2147767517 [ 260.854538][ T7248] netlink: 'syz.0.704': attribute type 1 has an invalid length. [ 260.882319][ T7257] tap0: tun_chr_ioctl cmd 2147767517 [ 260.963528][ T7248] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.704'. [ 261.098231][ T7265] netlink: 'syz.1.709': attribute type 1 has an invalid length. [ 261.156944][ T7265] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.709'. [ 261.228241][ T7269] netlink: 'syz.2.711': attribute type 16 has an invalid length. [ 261.255762][ T7269] netlink: 48 bytes leftover after parsing attributes in process `syz.2.711'. [ 261.503336][ T7279] tap0: tun_chr_ioctl cmd 2147767517 [ 261.572050][ T7283] netlink: 'syz.0.717': attribute type 10 has an invalid length. [ 261.947616][ T7285] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.714'. [ 262.193101][ T7297] device hsr0 entered promiscuous mode [ 262.324369][ T7297] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 262.403364][ T7297] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 262.484351][ T7297] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 262.600750][ T7297] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 264.680492][ T7333] validate_nla: 2 callbacks suppressed [ 264.680508][ T7333] netlink: 'syz.2.730': attribute type 10 has an invalid length. [ 264.720398][ T7333] device hsr0 entered promiscuous mode [ 264.761600][ T7333] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 264.822982][ T7333] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 264.892596][ T7333] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 264.916501][ T7333] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 264.968410][ T7339] tap0: tun_chr_ioctl cmd 2147767517 [ 265.008376][ T7335] netlink: 'syz.4.731': attribute type 1 has an invalid length. [ 265.063178][ T7335] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.731'. [ 265.949865][ T7368] tap0: tun_chr_ioctl cmd 2147767517 [ 266.219446][ T7369] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 266.334929][ T7369] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.743'. [ 266.726836][ T7382] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 266.787315][ T7382] device hsr0 entered promiscuous mode [ 266.868063][ T7382] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 266.999742][ T7382] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 267.017904][ T7382] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 267.084166][ T7382] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 269.243440][ T7424] netlink: 3 bytes leftover after parsing attributes in process `syz.4.756'. [ 269.453009][ T7435] netlink: 'syz.0.763': attribute type 10 has an invalid length. [ 269.655144][ T7435] device hsr0 entered promiscuous mode [ 269.744797][ T7435] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 269.830719][ T7435] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 269.902798][ T7435] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 269.997298][ T7435] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 270.472144][ T7448] netlink: 'syz.0.764': attribute type 10 has an invalid length. [ 272.232560][ T7480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 272.665939][ T7490] netlink: 'syz.3.776': attribute type 1 has an invalid length. [ 272.709051][ T7490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.777989][ T7492] tap0: tun_chr_ioctl cmd 2147767517 [ 272.965127][ T7493] netlink: 'syz.2.777': attribute type 1 has an invalid length. [ 272.985239][ T7493] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.777'. [ 273.006753][ T7495] tap0: tun_chr_ioctl cmd 2147767517 [ 273.160163][ T7503] netlink: 'syz.1.778': attribute type 1 has an invalid length. [ 273.217914][ T7503] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.778'. [ 274.382465][ T7527] netlink: 'syz.0.790': attribute type 1 has an invalid length. [ 274.446588][ T7527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.839111][ T7539] IPv6: NLM_F_CREATE should be specified when creating new route [ 274.908382][ T7539] netlink: 1 bytes leftover after parsing attributes in process `syz.0.793'. [ 275.483273][ T7551] tap0: tun_chr_ioctl cmd 2147767517 [ 275.758235][ T7557] netlink: 'syz.4.797': attribute type 1 has an invalid length. [ 275.776089][ T7557] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.797'. [ 275.946382][ T7560] tap0: tun_chr_ioctl cmd 2147767517 [ 276.141117][ T7566] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 276.273269][ T7566] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.799'. [ 276.541357][ T7578] netlink: 'syz.0.803': attribute type 10 has an invalid length. [ 276.584756][ T7578] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 276.668969][ T7578] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 276.687539][ T7578] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 276.708922][ T7578] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 277.107948][ T7599] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.129908][ T7599] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.255288][ T7602] netlink: 132 bytes leftover after parsing attributes in process `syz.4.813'. [ 277.297101][ T7604] netlink: 144 bytes leftover after parsing attributes in process `syz.3.812'. [ 277.412673][ T7607] tap0: tun_chr_ioctl cmd 2147767517 [ 277.578225][ T7610] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 277.590268][ T7610] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.814'. [ 277.682253][ T7616] tap0: tun_chr_ioctl cmd 2147767517 [ 277.810115][ T7618] netlink: 'syz.4.817': attribute type 1 has an invalid length. [ 277.826195][ T7618] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.817'. [ 278.950746][ T7649] tap0: tun_chr_ioctl cmd 2147767517 [ 279.148436][ T7656] netlink: 'syz.2.830': attribute type 1 has an invalid length. [ 279.195512][ T7656] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.830'. [ 279.407497][ T7661] tap0: tun_chr_ioctl cmd 2147767517 [ 279.600381][ T7661] netlink: 'syz.1.835': attribute type 1 has an invalid length. [ 279.643094][ T7661] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.835'. [ 279.860591][ T7673] tap0: tun_chr_ioctl cmd 2147767517 [ 279.911989][ T7676] tap0: tun_chr_ioctl cmd 2147767517 [ 280.053563][ T7676] netlink: 'syz.0.838': attribute type 1 has an invalid length. [ 280.073353][ T7676] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.838'. [ 280.166442][ T7673] netlink: 'syz.3.837': attribute type 1 has an invalid length. [ 280.203537][ T7673] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.837'. [ 281.146951][ T7719] tap0: tun_chr_ioctl cmd 2147767517 [ 281.307917][ T7720] netlink: 'syz.4.850': attribute type 1 has an invalid length. [ 281.393336][ T7720] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.850'. [ 281.628331][ T7727] tap0: tun_chr_ioctl cmd 2147767517 [ 281.883999][ T7727] netlink: 'syz.2.852': attribute type 1 has an invalid length. [ 281.927696][ T7727] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.852'. [ 282.018872][ T7742] tap0: tun_chr_ioctl cmd 2147767517 [ 282.099802][ T7745] tap0: tun_chr_ioctl cmd 2147767517 [ 282.149753][ T7746] netlink: 'syz.1.857': attribute type 1 has an invalid length. [ 282.203487][ T7746] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.857'. [ 282.296612][ T7745] netlink: 'syz.0.858': attribute type 1 has an invalid length. [ 282.311236][ T7745] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.858'. [ 282.325051][ T7750] netlink: 144 bytes leftover after parsing attributes in process `syz.4.859'. [ 284.153771][ T7789] netlink: 144 bytes leftover after parsing attributes in process `syz.1.871'. [ 284.415072][ T7793] tap0: tun_chr_ioctl cmd 2147767517 [ 284.579237][ T7800] netlink: 'syz.3.873': attribute type 1 has an invalid length. [ 284.653100][ T7800] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.873'. [ 285.079342][ T7814] tap0: tun_chr_ioctl cmd 2147767517 [ 285.374092][ T7818] netlink: 'syz.2.879': attribute type 1 has an invalid length. [ 285.400099][ T7818] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.879'. [ 286.265164][ T7844] tap0: tun_chr_ioctl cmd 2147767517 [ 286.731642][ T7848] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 286.808117][ T7848] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.891'. [ 286.889051][ T7851] tap0: tun_chr_ioctl cmd 2147767517 [ 287.217436][ T7858] netlink: 'syz.2.892': attribute type 1 has an invalid length. [ 287.309749][ T7858] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.892'. [ 287.702072][ T7872] tap0: tun_chr_ioctl cmd 2147767517 [ 287.973120][ T7877] netlink: 'syz.0.905': attribute type 1 has an invalid length. [ 288.010540][ T7877] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.905'. [ 288.682577][ T7889] tap0: tun_chr_ioctl cmd 2147767517 [ 288.923831][ T7894] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 288.931732][ T7894] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.900'. [ 289.452675][ T7909] netlink: 'syz.2.907': attribute type 1 has an invalid length. [ 289.514253][ T7909] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.907'. [ 290.586050][ T7937] tap0: tun_chr_ioctl cmd 2147767517 [ 290.707514][ T7940] netlink: 'syz.4.916': attribute type 1 has an invalid length. [ 290.769580][ T7940] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.916'. [ 291.499464][ T7959] tap0: tun_chr_ioctl cmd 2147767517 [ 291.794236][ T7964] netlink: 'syz.1.924': attribute type 1 has an invalid length. [ 291.971392][ T7964] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.924'. [ 292.664770][ T7979] netlink: 'syz.3.930': attribute type 10 has an invalid length. [ 292.672774][ T7979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.930'. [ 292.689426][ T7979] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.066315][ T8020] netlink: 'syz.0.943': attribute type 1 has an invalid length. [ 295.143268][ T8020] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.943'. [ 295.356509][ T8023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.945'. [ 295.463103][ T8023] netlink: 60 bytes leftover after parsing attributes in process `syz.3.945'. [ 295.510916][ T8029] netlink: 60 bytes leftover after parsing attributes in process `syz.3.945'. [ 296.156671][ T8046] tap0: tun_chr_ioctl cmd 2147767517 [ 296.326104][ T8049] netlink: 'syz.2.951': attribute type 1 has an invalid length. [ 296.406119][ T8049] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.951'. [ 297.480458][ T8065] netlink: 'syz.3.958': attribute type 1 has an invalid length. [ 297.643022][ T8065] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.958'. [ 299.497134][ T8099] tap0: tun_chr_ioctl cmd 2147767517 [ 300.069080][ T8101] netlink: 'syz.2.970': attribute type 1 has an invalid length. [ 300.233044][ T8101] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.970'. [ 301.205594][ T8133] netlink: 'syz.0.977': attribute type 1 has an invalid length. [ 301.252327][ T8133] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.977'. [ 301.611050][ T8144] netlink: 'syz.2.982': attribute type 10 has an invalid length. [ 301.643233][ T8144] netlink: 40 bytes leftover after parsing attributes in process `syz.2.982'. [ 301.664688][ T8144] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 301.684021][ T8144] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.771111][ T8150] tap0: tun_chr_ioctl cmd 2147767517 [ 301.912738][ T8149] netlink: 'syz.1.984': attribute type 1 has an invalid length. [ 302.013295][ T8149] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.984'. [ 302.196700][ T8159] tap0: tun_chr_ioctl cmd 2147767517 [ 302.337781][ T8164] tap0: tun_chr_ioctl cmd 2147767517 [ 302.389902][ T8162] netlink: 'syz.0.987': attribute type 1 has an invalid length. [ 302.611205][ T8162] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.987'. [ 302.818707][ T8169] netlink: 'syz.4.988': attribute type 1 has an invalid length. [ 302.944361][ T8169] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.988'. [ 304.067927][ T8197] netlink: 'syz.1.997': attribute type 10 has an invalid length. [ 304.088073][ T8197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.997'. [ 304.119825][ T8197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.156467][ T8218] tap0: tun_chr_ioctl cmd 2147767517 [ 305.381548][ T8224] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 305.481676][ T8224] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1008'. [ 306.314020][ T8249] tap0: tun_chr_ioctl cmd 2147767517 [ 306.346218][ T8254] netlink: 'syz.4.1018': attribute type 29 has an invalid length. [ 306.377288][ T8254] netlink: 'syz.4.1018': attribute type 29 has an invalid length. [ 306.399535][ T8258] netlink: 'syz.4.1018': attribute type 29 has an invalid length. [ 306.462772][ T8260] netlink: 'syz.2.1015': attribute type 1 has an invalid length. [ 306.512044][ T8260] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1015'. [ 306.609047][ T8259] netlink: 'syz.3.1017': attribute type 1 has an invalid length. [ 306.743263][ T8259] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1017'. [ 308.003354][ T8299] tap0: tun_chr_ioctl cmd 2147767517 [ 308.199810][ T8302] netlink: 'syz.2.1042': attribute type 1 has an invalid length. [ 308.363737][ T8302] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1042'. [ 309.350498][ T8330] netlink: 'syz.3.1040': attribute type 1 has an invalid length. [ 309.388854][ T8330] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1040'. [ 310.377922][ T8350] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1049'. [ 311.122455][ T8357] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 311.248389][ T8357] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1052'. [ 312.828859][ T8387] netlink: 'syz.0.1058': attribute type 29 has an invalid length. [ 313.396150][ T8396] netlink: 'syz.1.1061': attribute type 1 has an invalid length. [ 313.442551][ T8396] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1061'. [ 313.573934][ T8402] netlink: 'syz.2.1063': attribute type 1 has an invalid length. [ 313.673119][ T8402] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1063'. [ 314.850030][ T8423] netlink: 'syz.1.1071': attribute type 11 has an invalid length. [ 314.894262][ T8423] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1071'. [ 314.907743][ T8428] netlink: 'syz.3.1072': attribute type 12 has an invalid length. [ 314.949181][ T8428] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1072'. [ 314.955483][ T8422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.070838][ T8430] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 315.091038][ T8430] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1073'. [ 318.111086][ T8450] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 318.228578][ T8450] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1078'. [ 318.571284][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.577835][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.858263][ T8471] netlink: 'syz.4.1082': attribute type 1 has an invalid length. [ 318.894240][ T8471] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1082'. [ 319.271370][ T8484] netlink: 'syz.0.1085': attribute type 1 has an invalid length. [ 319.325705][ T8484] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1085'. [ 322.547377][ T8498] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1090'. [ 323.215808][ T8519] netlink: 'syz.3.1099': attribute type 11 has an invalid length. [ 323.252194][ T8519] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1099'. [ 323.369741][ T8518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 323.446300][ T8520] netlink: 'syz.1.1098': attribute type 1 has an invalid length. [ 323.533350][ T8520] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1098'. [ 323.867437][ T8540] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1106'. [ 323.946779][ T8542] netlink: 'syz.4.1108': attribute type 1 has an invalid length. [ 324.190742][ T8542] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1108'. [ 327.121292][ T8559] tap0: tun_chr_ioctl cmd 2147767517 [ 327.335695][ T8564] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 327.509440][ T8564] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1111'. [ 328.645835][ T8582] netlink: 'syz.4.1118': attribute type 11 has an invalid length. [ 328.675509][ T8582] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1118'. [ 328.760823][ T8581] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.920383][ T8587] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1120'. [ 329.338242][ T8602] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 329.394549][ T8602] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1124'. [ 330.686218][ T8634] tap0: tun_chr_ioctl cmd 2147767517 [ 330.989343][ T8638] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 331.045936][ T8638] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1135'. [ 332.188925][ T8660] tap0: tun_chr_ioctl cmd 2147767517 [ 332.477157][ T8665] netlink: 'syz.2.1152': attribute type 1 has an invalid length. [ 332.493402][ T8665] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1152'. [ 335.449998][ T8685] netlink: 'syz.0.1143': attribute type 1 has an invalid length. [ 335.609420][ T8685] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1143'. [ 336.280435][ T8709] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1156'. [ 336.792820][ T8715] tap0: tun_chr_ioctl cmd 2147767517 [ 336.997174][ T8717] netlink: 'syz.3.1158': attribute type 1 has an invalid length. [ 337.096663][ T8720] netlink: 'syz.4.1161': attribute type 10 has an invalid length. [ 337.111012][ T8717] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1158'. [ 338.374803][ T8752] tap0: tun_chr_ioctl cmd 2147767517 [ 338.567775][ T8750] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 338.640150][ T8750] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1167'. [ 339.283673][ T8777] tap0: tun_chr_ioctl cmd 2147767517 [ 339.363962][ T8781] tap0: tun_chr_ioctl cmd 2147767517 [ 339.408833][ T8782] netlink: 'syz.4.1177': attribute type 1 has an invalid length. [ 339.503803][ T8782] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1177'. [ 339.587016][ T8788] netlink: 'syz.3.1179': attribute type 1 has an invalid length. [ 339.649370][ T8788] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1179'. [ 340.798401][ T8810] netlink: 'syz.4.1184': attribute type 21 has an invalid length. [ 341.203159][ T8825] tap0: tun_chr_ioctl cmd 2147767517 [ 341.335592][ T8827] netlink: 'syz.1.1189': attribute type 1 has an invalid length. [ 341.423706][ T8827] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1189'. [ 341.657820][ T8837] netlink: 'syz.2.1193': attribute type 10 has an invalid length. [ 342.103291][ T8848] tap0: tun_chr_ioctl cmd 2147767517 [ 342.312936][ T8856] netlink: 'syz.0.1195': attribute type 1 has an invalid length. [ 342.348034][ T8856] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1195'. [ 344.096221][ T8887] netlink: 'syz.1.1208': attribute type 10 has an invalid length. [ 344.145555][ T8887] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.273295][ T8887] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.327221][ T8887] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.363015][ T8887] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.443458][ T8887] device geneve0 entered promiscuous mode [ 344.471351][ T8894] netlink: 'syz.4.1210': attribute type 1 has an invalid length. [ 344.473812][ T8887] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.513169][ T8887] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.552823][ T8887] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.567673][ T8894] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1210'. [ 344.593272][ T8887] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.645505][ T8887] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 344.699554][ T8891] tap0: tun_chr_ioctl cmd 2147767517 [ 345.399379][ T8908] tap0: tun_chr_ioctl cmd 2147767517 [ 345.501449][ T8913] netlink: 'syz.2.1214': attribute type 1 has an invalid length. [ 345.521607][ T8913] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1214'. [ 346.474667][ T8931] tap0: tun_chr_ioctl cmd 2147767517 [ 346.623622][ T8934] netlink: 'syz.3.1222': attribute type 1 has an invalid length. [ 346.732369][ T8934] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1222'. [ 349.675345][ T8959] tap0: tun_chr_ioctl cmd 2147767517 [ 349.818394][ T8960] netlink: 'syz.1.1228': attribute type 1 has an invalid length. [ 349.830902][ T8960] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1228'. [ 349.866413][ T8962] netlink: 'syz.0.1229': attribute type 3 has an invalid length. [ 349.883886][ T8962] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1229'. [ 350.434315][ T8976] tap0: tun_chr_ioctl cmd 2147767517 [ 350.561861][ T8974] netlink: 'syz.0.1233': attribute type 1 has an invalid length. [ 350.715936][ T8974] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1233'. [ 351.120432][ T8993] tap0: tun_chr_ioctl cmd 2147767517 [ 351.274362][ T8998] netlink: 'syz.1.1237': attribute type 1 has an invalid length. [ 351.298389][ T8998] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1237'. [ 351.880228][ T9011] tap0: tun_chr_ioctl cmd 2147767517 [ 352.139864][ T9013] netlink: 'syz.3.1242': attribute type 1 has an invalid length. [ 352.331888][ T9013] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1242'. [ 354.126663][ T9042] tap0: tun_chr_ioctl cmd 2147767517 [ 354.267489][ T9040] netlink: 'syz.1.1246': attribute type 1 has an invalid length. [ 354.361790][ T9040] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1246'. [ 354.832118][ T9055] tap0: tun_chr_ioctl cmd 2147767517 [ 355.074175][ T9059] netlink: 'syz.4.1249': attribute type 1 has an invalid length. [ 355.104496][ T9059] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1249'. [ 355.287697][ T9071] tap0: tun_chr_ioctl cmd 2147767517 [ 355.418727][ T9074] netlink: 'syz.1.1255': attribute type 1 has an invalid length. [ 355.461258][ T9074] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1255'. [ 355.764162][ T9085] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1259'. [ 355.835712][ T9087] Dead loop on virtual device ip6_vti0, fix it urgently! [ 356.147039][ T9098] tap0: tun_chr_ioctl cmd 2147767517 [ 356.343932][ T9102] tap0: tun_chr_ioctl cmd 2147767517 [ 356.399421][ T9103] netlink: 'syz.1.1265': attribute type 1 has an invalid length. [ 356.465823][ T9105] tap0: tun_chr_ioctl cmd 2147767517 [ 356.604863][ T9103] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1265'. [ 356.695717][ T9107] netlink: 'syz.0.1267': attribute type 1 has an invalid length. [ 356.795479][ T9107] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1267'. [ 356.878064][ T9109] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 356.921511][ T9109] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1268'. [ 357.766963][ T9134] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1272'. [ 358.124094][ T9140] tap0: tun_chr_ioctl cmd 2147767517 [ 358.342379][ T9147] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 358.424784][ T9147] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1275'. [ 358.429259][ T9154] tap0: tun_chr_ioctl cmd 2147767517 [ 358.454406][ T9155] tap0: tun_chr_ioctl cmd 2147767517 [ 358.600594][ T9158] netlink: 'syz.0.1280': attribute type 1 has an invalid length. [ 358.631458][ T9158] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1280'. [ 358.692431][ T9159] netlink: 'syz.2.1281': attribute type 1 has an invalid length. [ 358.731654][ T9159] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1281'. [ 358.872021][ T9168] Dead loop on virtual device ip6_vti0, fix it urgently! [ 359.264047][ T9176] tap0: tun_chr_ioctl cmd 2147767517 [ 359.377524][ T9172] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 359.406327][ T9172] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1284'. [ 359.547431][ T9182] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1287'. [ 360.690853][ T9206] sctp: [Deprecated]: syz.4.1294 (pid 9206) Use of int in max_burst socket option deprecated. [ 360.690853][ T9206] Use struct sctp_assoc_value instead [ 360.967260][ T9209] tap0: tun_chr_ioctl cmd 2147767517 [ 361.118517][ T9211] netlink: 'syz.3.1296': attribute type 11 has an invalid length. [ 361.203902][ T9211] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1296'. [ 361.283188][ T9212] netlink: 'syz.1.1295': attribute type 1 has an invalid length. [ 361.289371][ T9218] tap0: tun_chr_ioctl cmd 2147767517 [ 361.291053][ T9212] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1295'. [ 361.339689][ T9215] netlink: 'syz.3.1296': attribute type 11 has an invalid length. [ 361.374366][ T9215] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1296'. [ 361.424812][ T9210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.474067][ T9222] netlink: 'syz.4.1298': attribute type 1 has an invalid length. [ 361.526939][ T9222] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1298'. [ 361.966375][ T9231] tap0: tun_chr_ioctl cmd 2147767517 [ 362.064174][ T9236] netlink: 'syz.3.1301': attribute type 1 has an invalid length. [ 362.521773][ T9244] tap0: tun_chr_ioctl cmd 2147767517 [ 362.532651][ T9249] netlink: 'syz.1.1306': attribute type 22 has an invalid length. [ 362.644651][ T9248] netlink: 'syz.0.1305': attribute type 1 has an invalid length. [ 363.047179][ T9263] tap0: tun_chr_ioctl cmd 2147767517 [ 363.500743][ T9268] netlink: 'syz.2.1310': attribute type 1 has an invalid length. [ 363.662509][ T9268] __nla_validate_parse: 3 callbacks suppressed [ 363.662570][ T9268] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1310'. [ 364.072513][ T9278] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1313'. [ 364.441115][ T9285] netlink: 'syz.4.1315': attribute type 29 has an invalid length. [ 364.549816][ T9285] netlink: 'syz.4.1315': attribute type 29 has an invalid length. [ 364.658010][ T9287] netlink: 'syz.4.1315': attribute type 29 has an invalid length. [ 364.766632][ T9285] netlink: 'syz.4.1315': attribute type 29 has an invalid length. [ 364.811221][ T9287] netlink: 'syz.4.1315': attribute type 29 has an invalid length. [ 366.046128][ T9312] tap0: tun_chr_ioctl cmd 2147767517 [ 366.067995][ T9314] tap0: tun_chr_ioctl cmd 2147767517 [ 366.083451][ T9318] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1324'. [ 366.204078][ T9321] netlink: 'syz.4.1321': attribute type 1 has an invalid length. [ 366.272037][ T9321] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1321'. [ 366.333125][ T9322] netlink: 'syz.0.1322': attribute type 1 has an invalid length. [ 366.447570][ T9322] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1322'. [ 366.737990][ T9340] tap0: tun_chr_ioctl cmd 2147767517 [ 366.909808][ T9345] netlink: 'syz.1.1330': attribute type 1 has an invalid length. [ 366.928318][ T9345] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1330'. [ 368.025338][ T9363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1335'. [ 369.567468][ T9394] tap0: tun_chr_ioctl cmd 2147767517 [ 369.843623][ T9394] netlink: 'syz.1.1344': attribute type 1 has an invalid length. [ 369.906519][ T9394] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1344'. [ 370.211481][ T9411] tap0: tun_chr_ioctl cmd 2147767517 [ 370.318767][ T9416] netlink: 'syz.3.1348': attribute type 1 has an invalid length. [ 370.330164][ T9416] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1348'. [ 371.463326][ T9447] tap0: tun_chr_ioctl cmd 2147767517 [ 371.902158][ T9459] tap0: tun_chr_ioctl cmd 2147767517 [ 372.145505][ T9461] netlink: 'syz.0.1363': attribute type 1 has an invalid length. [ 372.246480][ T9461] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1363'. [ 372.941288][ T9485] tap0: tun_chr_ioctl cmd 2147767517 [ 373.288405][ T9494] C: renamed from team_slave_0 [ 373.297454][ T9485] netlink: 'syz.0.1369': attribute type 1 has an invalid length. [ 373.315905][ T9494] netlink: 'syz.1.1382': attribute type 4 has an invalid length. [ 373.353024][ T9494] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1382'. [ 373.377084][ T9485] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1369'. [ 373.387400][ T9494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 373.875005][ T9510] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1378'. [ 373.910660][ T9514] tap0: tun_chr_ioctl cmd 2147767517 [ 373.926918][ T9513] tap0: tun_chr_ioctl cmd 2147767517 [ 374.084261][ T9514] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 374.143103][ T9514] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1377'. [ 374.203611][ T9513] netlink: 'syz.3.1379': attribute type 1 has an invalid length. [ 374.267930][ T9513] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1379'. [ 374.384758][ T4271] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 375.067792][ T9549] tap0: tun_chr_ioctl cmd 2147767517 [ 375.212488][ T9556] netlink: 'syz.4.1389': attribute type 1 has an invalid length. [ 375.343049][ T9556] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1389'. [ 375.825567][ T9570] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1399'. [ 375.857234][ T9573] tap0: tun_chr_ioctl cmd 2147767517 [ 376.099593][ T9574] netlink: 'syz.0.1400': attribute type 1 has an invalid length. [ 376.129281][ T9574] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1400'. [ 376.618638][ T9590] tap0: tun_chr_ioctl cmd 2147767517 [ 376.702755][ T9589] netlink: 'syz.2.1403': attribute type 1 has an invalid length. [ 376.772534][ T9589] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1403'. [ 377.283890][ T9614] netlink: 'syz.0.1413': attribute type 7 has an invalid length. [ 378.413000][ T9634] tap0: tun_chr_ioctl cmd 2147767517 [ 378.636193][ T4271] Bluetooth: hci2: unexpected event 0x03 length: 151 > 11 [ 379.020086][ T9635] netlink: 'syz.4.1419': attribute type 1 has an invalid length. [ 379.223289][ T9635] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1419'. [ 379.886058][ T9661] tap0: tun_chr_ioctl cmd 2147767517 [ 380.005445][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.012136][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.092815][ T9664] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 380.163199][ T9664] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1426'. [ 381.982476][ T9703] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1435'. [ 382.004182][ T9702] tap0: tun_chr_ioctl cmd 2147767517 [ 382.132546][ T9708] netlink: 'syz.4.1438': attribute type 1 has an invalid length. [ 382.193335][ T9708] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1438'. [ 382.954425][ T9724] netlink: 'syz.1.1443': attribute type 1 has an invalid length. [ 382.962401][ T9724] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1443'. [ 383.167582][ T9721] tap0: tun_chr_ioctl cmd 2147767517 [ 383.539795][ T9738] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 383.610823][ T9738] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 383.677114][ T9740] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 383.736040][ T9738] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 383.754450][ T9745] netlink: 'syz.0.1446': attribute type 29 has an invalid length. [ 384.669198][ T9765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1455'. [ 385.005569][ T9778] tap0: tun_chr_ioctl cmd 2147767517 [ 385.188576][ T9781] netlink: 'syz.4.1461': attribute type 1 has an invalid length. [ 385.258268][ T9781] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1461'. [ 387.540140][ T9814] tap0: tun_chr_ioctl cmd 2147767517 [ 387.750399][ T9822] netlink: 'syz.4.1469': attribute type 1 has an invalid length. [ 387.996843][ T9822] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1469'. [ 388.944275][ T9841] tap0: tun_chr_ioctl cmd 2147767517 [ 388.992640][ T9846] tap0: tun_chr_ioctl cmd 2147767517 [ 389.097154][ T9849] netlink: 'syz.1.1486': attribute type 1 has an invalid length. [ 389.185847][ T9849] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1486'. [ 389.213082][ T9850] netlink: 'syz.0.1478': attribute type 1 has an invalid length. [ 389.253187][ T9850] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1478'. [ 389.501148][ T9861] netlink: 'syz.2.1481': attribute type 29 has an invalid length. [ 389.529983][ T9861] netlink: 'syz.2.1481': attribute type 29 has an invalid length. [ 391.306003][ T9861] netlink: 'syz.2.1481': attribute type 29 has an invalid length. [ 391.447023][ T9869] netlink: 'syz.2.1483': attribute type 1 has an invalid length. [ 391.474751][ T9870] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1484'. [ 391.525835][ T9872] tap0: tun_chr_ioctl cmd 2147767517 [ 391.653118][ T9878] netlink: 'syz.1.1487': attribute type 1 has an invalid length. [ 391.666457][ T9878] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1487'. [ 392.312288][ T9883] device lo entered promiscuous mode [ 394.940472][ T9911] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 394.971554][ T9911] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 395.005050][ T9913] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 395.032775][ T9914] netlink: 'syz.0.1496': attribute type 1 has an invalid length. [ 395.057055][ T9911] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 395.074294][ T9914] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1496'. [ 395.113599][ T9911] netlink: 'syz.4.1495': attribute type 29 has an invalid length. [ 395.162769][ T9916] tap0: tun_chr_ioctl cmd 2147767517 [ 395.327904][ T9920] netlink: 'syz.3.1498': attribute type 1 has an invalid length. [ 395.413116][ T9920] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1498'. [ 395.850652][ T9925] netlink: 'syz.0.1500': attribute type 1 has an invalid length. [ 396.233712][ T9939] tap0: tun_chr_ioctl cmd 2147767517 [ 396.493238][ T9944] netlink: 'syz.1.1503': attribute type 1 has an invalid length. [ 396.666657][ T9944] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1503'. [ 397.449013][ T9968] netlink: 'syz.3.1510': attribute type 29 has an invalid length. [ 398.501778][ T9992] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1518'. [ 399.243081][ T9989] tap0: tun_chr_ioctl cmd 2147767517 [ 399.621217][T10009] tap0: tun_chr_ioctl cmd 2147767517 [ 399.717664][T10016] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1524'. [ 401.099569][T10053] tap0: tun_chr_ioctl cmd 2147767517 [ 401.348569][T10057] validate_nla: 6 callbacks suppressed [ 401.348617][T10057] netlink: 'syz.0.1539': attribute type 1 has an invalid length. [ 401.520954][T10057] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1539'. [ 401.854663][T10062] tap0: tun_chr_ioctl cmd 2147767517 [ 401.997709][T10070] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 402.089049][T10070] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1542'. [ 402.527347][T10081] tap0: tun_chr_ioctl cmd 2147767517 [ 402.649537][T10084] netlink: 'syz.4.1546': attribute type 1 has an invalid length. [ 402.678409][T10084] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1546'. [ 403.215002][T10104] netlink: 'syz.1.1554': attribute type 2 has an invalid length. [ 403.223774][T10104] netlink: 'syz.1.1554': attribute type 1 has an invalid length. [ 403.232220][T10104] netlink: 170140 bytes leftover after parsing attributes in process `syz.1.1554'. [ 403.679150][T10108] tap0: tun_chr_ioctl cmd 2147767517 [ 403.770943][T10109] netlink: 'syz.1.1555': attribute type 1 has an invalid length. [ 403.853088][T10109] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1555'. [ 404.002604][T10118] tap0: tun_chr_ioctl cmd 2147767517 [ 404.137986][T10122] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 404.157563][T10122] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1559'. [ 405.647850][T10148] tap0: tun_chr_ioctl cmd 2147767517 [ 405.876683][T10148] netlink: 'syz.3.1567': attribute type 1 has an invalid length. [ 405.923302][T10148] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1567'. [ 406.723925][T10170] tap0: tun_chr_ioctl cmd 2147767517 [ 406.955351][T10177] netlink: 'syz.1.1574': attribute type 1 has an invalid length. [ 407.045646][T10177] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1574'. [ 412.806332][T10235] tap0: tun_chr_ioctl cmd 2147767517 [ 413.006068][T10242] netlink: 'syz.4.1595': attribute type 1 has an invalid length. [ 413.068416][T10242] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1595'. [ 413.081197][T10246] tap0: tun_chr_ioctl cmd 2147767517 [ 413.179696][ T4271] Bluetooth: hci3: unexpected event 0x2c length: 151 > 17 [ 413.179741][ T4271] Bluetooth: hci3: Ignoring connect complete event for invalid link type [ 413.271396][T10252] netlink: 'syz.0.1599': attribute type 1 has an invalid length. [ 413.279954][T10252] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1599'. [ 414.227427][T10276] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.1606'. [ 414.325534][T10280] tap0: tun_chr_ioctl cmd 2147767517 [ 414.429711][T10285] netlink: 'syz.4.1607': attribute type 1 has an invalid length. [ 414.438161][T10285] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1607'. [ 414.683673][T10293] sock: sock_timestamping_bind_phc: sock not bind to device [ 414.716414][ T4271] Bluetooth: hci4: unexpected event 0x2c length: 151 > 17 [ 414.716450][ T4271] Bluetooth: hci4: Ignoring connect complete event for invalid link type [ 414.905233][T10301] tap0: tun_chr_ioctl cmd 2147767517 [ 414.929298][T10299] netlink: 'syz.1.1616': attribute type 3 has an invalid length. [ 414.982968][T10299] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1616'. [ 415.030912][T10304] netlink: 'syz.3.1615': attribute type 1 has an invalid length. [ 415.094919][T10304] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1615'. [ 416.634874][ T4271] Bluetooth: hci1: unexpected event 0x2c length: 151 > 17 [ 416.634912][ T4271] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 417.056284][T10342] tap0: tun_chr_ioctl cmd 2147767517 [ 417.219167][T10342] netlink: 'syz.1.1630': attribute type 1 has an invalid length. [ 417.233954][T10342] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1630'. [ 417.481849][T10354] tap0: tun_chr_ioctl cmd 2147767517 [ 417.515960][T10357] netlink: 'syz.3.1635': attribute type 1 has an invalid length. [ 417.525096][T10357] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.1635'. [ 417.682669][T10359] netlink: 'syz.4.1633': attribute type 1 has an invalid length. [ 417.751334][T10359] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1633'. [ 418.041556][T10371] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1639'. [ 418.310364][T10383] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.1643'. [ 419.254658][T10397] tap0: tun_chr_ioctl cmd 2147767517 [ 419.517888][T10398] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 419.601188][T10405] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.1651'. [ 419.654241][T10398] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1649'. [ 423.111224][T10455] netlink: 'syz.1.1666': attribute type 21 has an invalid length. [ 423.145290][T10455] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1666'. [ 423.149239][T10459] netlink: 'syz.4.1669': attribute type 1 has an invalid length. [ 423.166950][T10459] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.1669'. [ 423.181315][T10455] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 423.203149][T10455] netlink: 'syz.1.1666': attribute type 5 has an invalid length. [ 423.223388][T10455] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1666'. [ 423.540415][T10472] tap0: tun_chr_ioctl cmd 2147767517 [ 423.785952][T10478] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 423.847792][T10478] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1673'. [ 424.040173][T10490] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1676'. [ 425.067032][T10507] netlink: 'syz.2.1682': attribute type 1 has an invalid length. [ 425.090372][T10507] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.1682'. [ 426.013397][T10523] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.1685'. [ 426.101961][T10528] netlink: 'syz.2.1688': attribute type 2 has an invalid length. [ 426.110000][T10528] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.1688'. [ 426.427335][T10536] tap0: tun_chr_ioctl cmd 2147767517 [ 426.601765][T10539] netlink: 'syz.4.1690': attribute type 1 has an invalid length. [ 426.670467][T10539] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1690'. [ 428.780270][T10576] tap0: tun_chr_ioctl cmd 2147767517 [ 429.088141][T10583] netlink: 'syz.1.1699': attribute type 1 has an invalid length. [ 429.120123][T10583] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1699'. [ 429.221438][T10590] netlink: 61967 bytes leftover after parsing attributes in process `syz.4.1705'. [ 429.274132][T10594] tap0: tun_chr_ioctl cmd 2147767517 [ 429.329233][T10596] device syzkaller0 entered promiscuous mode [ 429.410880][T10599] netlink: 'syz.3.1708': attribute type 1 has an invalid length. [ 429.441207][T10599] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1708'. [ 431.318878][T10620] tap0: tun_chr_ioctl cmd 2147767517 [ 431.452142][T10621] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 431.465359][T10621] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1716'. [ 431.688414][T10631] device syzkaller0 entered promiscuous mode [ 437.170441][T10681] TCP: TCP_TX_DELAY enabled [ 437.731579][T10699] tap0: tun_chr_ioctl cmd 2147767517 [ 437.939473][T10701] netlink: 'syz.3.1744': attribute type 1 has an invalid length. [ 437.993134][T10701] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1744'. [ 438.442403][T10713] tap0: tun_chr_ioctl cmd 2147767517 [ 438.591423][T10718] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 438.713093][T10718] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1748'. [ 438.775769][T10727] tap0: tun_chr_ioctl cmd 2147767517 [ 439.088655][T10730] netlink: 'syz.3.1751': attribute type 1 has an invalid length. [ 439.122296][T10730] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1751'. [ 441.153328][T10766] netlink: 'syz.0.1763': attribute type 1 has an invalid length. [ 441.161402][T10766] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1763'. [ 441.256711][T10768] tap0: tun_chr_ioctl cmd 2147767517 [ 441.446134][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.452506][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.020428][T10794] tap0: tun_chr_ioctl cmd 2147767517 [ 442.131136][T10797] netlink: 'syz.4.1767': attribute type 1 has an invalid length. [ 442.163079][T10797] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1767'. [ 442.399869][T10804] tap0: tun_chr_ioctl cmd 2147767517 [ 442.544744][T10809] netlink: 'syz.1.1770': attribute type 1 has an invalid length. [ 442.555379][T10809] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1770'. [ 445.107646][T10852] tap0: tun_chr_ioctl cmd 2147767517 [ 445.339048][T10856] netlink: 'syz.2.1785': attribute type 1 has an invalid length. [ 445.488814][T10856] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1785'. [ 445.936642][T10874] tap0: tun_chr_ioctl cmd 2147767517 [ 446.060802][T10878] netlink: 'syz.1.1790': attribute type 1 has an invalid length. [ 446.123907][T10878] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1790'. [ 446.235041][T10885] tap0: tun_chr_ioctl cmd 2147767517 [ 446.408539][T10892] netlink: 'syz.0.1794': attribute type 1 has an invalid length. [ 446.439033][T10892] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1794'. [ 449.851710][ T4271] Bluetooth: hci3: Malformed Event: 0x02 [ 450.627355][T10952] netlink: 'syz.2.1806': attribute type 1 has an invalid length. [ 450.667577][T10952] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1806'. [ 453.063814][T10941] tap0: tun_chr_ioctl cmd 2147767517 [ 453.175268][T10957] tap0: tun_chr_ioctl cmd 2147767517 [ 453.270576][T10959] sock: sock_set_timeout: `syz.1.1812' (pid 10959) tries to set negative timeout [ 453.316522][T10964] netlink: 'syz.0.1810': attribute type 1 has an invalid length. [ 453.341320][T10964] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1810'. [ 453.991966][T10980] tap0: tun_chr_ioctl cmd 2147767517 [ 454.209654][T10985] netlink: 'syz.3.1818': attribute type 1 has an invalid length. [ 454.392408][T10985] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1818'. [ 458.786302][T11028] tap0: tun_chr_ioctl cmd 2147767517 [ 458.932925][T11033] netlink: 'syz.1.1830': attribute type 1 has an invalid length. [ 458.985489][T11033] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1830'. [ 459.146519][T11041] tap0: tun_chr_ioctl cmd 2147767517 [ 459.214277][T11043] tap0: tun_chr_ioctl cmd 2147767517 [ 459.329821][T11045] netlink: 'syz.4.1835': attribute type 1 has an invalid length. [ 459.477279][T11045] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1835'. [ 459.623879][T11046] netlink: 'syz.2.1837': attribute type 1 has an invalid length. [ 459.718403][T11046] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1837'. [ 464.860393][T11094] tap0: tun_chr_ioctl cmd 2147767517 [ 464.951170][T11096] netlink: 'syz.1.1850': attribute type 1 has an invalid length. [ 464.971996][T11096] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1850'. [ 466.880922][T11124] tap0: tun_chr_ioctl cmd 2147767517 [ 467.089271][T11124] netlink: 'syz.2.1858': attribute type 1 has an invalid length. [ 467.131539][T11124] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1858'. [ 467.201955][T11130] netlink: 'syz.4.1859': attribute type 3 has an invalid length. [ 467.224518][T11130] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1859'. [ 467.254423][T11135] netlink: 'syz.4.1859': attribute type 3 has an invalid length. [ 467.273448][T11135] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1859'. [ 467.288901][T11137] tap0: tun_chr_ioctl cmd 2147767517 [ 467.297776][T11130] netlink: 'syz.4.1859': attribute type 3 has an invalid length. [ 467.305959][T11130] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1859'. [ 467.404652][T11138] netlink: 'syz.1.1861': attribute type 1 has an invalid length. [ 467.433962][T11138] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1861'. [ 467.467123][T11140] tap0: tun_chr_ioctl cmd 2147767517 [ 467.567915][T11145] netlink: 'syz.4.1862': attribute type 1 has an invalid length. [ 467.676654][T11145] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1862'. [ 469.400324][T11176] netlink: 'syz.0.1873': attribute type 3 has an invalid length. [ 469.497256][T11176] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1873'. [ 469.596218][T11177] netlink: 'syz.0.1873': attribute type 3 has an invalid length. [ 469.734008][T11177] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1873'. [ 469.739368][T11176] netlink: 'syz.0.1873': attribute type 3 has an invalid length. [ 469.787041][T11176] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1873'. [ 470.010920][T11180] netlink: 'syz.3.1875': attribute type 1 has an invalid length. [ 470.245898][T11180] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1875'. [ 470.622432][T11198] tap0: tun_chr_ioctl cmd 2147767517 [ 471.022335][T11200] netlink: 'syz.0.1880': attribute type 1 has an invalid length. [ 471.076810][T11200] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1880'. [ 475.155496][T11242] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 475.189609][T11242] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1889'. [ 475.260810][T11242] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 475.316698][T11244] netlink: 'syz.2.1889': attribute type 3 has an invalid length. [ 475.368752][T11242] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1889'. [ 475.433393][T11244] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1889'. [ 475.809777][T11257] tap0: tun_chr_ioctl cmd 2147767517 [ 475.997303][T11256] netlink: 'syz.4.1893': attribute type 1 has an invalid length. [ 476.130720][T11256] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1893'. [ 476.334752][T11265] tap0: tun_chr_ioctl cmd 2147767517 [ 476.345326][T11269] netlink: 'syz.2.1899': attribute type 4 has an invalid length. [ 476.395272][T11269] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1899'. [ 476.659268][T11266] netlink: 'syz.0.1897': attribute type 1 has an invalid length. [ 476.757833][T11266] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1897'. [ 477.816544][T11287] tap1: tun_chr_ioctl cmd 2147767517 [ 478.043314][T11285] netlink: 'syz.0.1911': attribute type 1 has an invalid length. [ 478.061665][T11285] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1911'. [ 478.345145][T11300] device syzkaller0 entered promiscuous mode [ 481.082396][T11320] device syzkaller0 entered promiscuous mode [ 481.108157][ T4271] Bluetooth: hci2: unexpected event 0x04 length: 15 > 10 [ 482.114854][T11343] netlink: 'syz.3.1918': attribute type 1 has an invalid length. [ 482.215379][T11343] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.1918'. [ 483.132951][ T4271] Bluetooth: hci2: command 0x0409 tx timeout [ 483.902008][T11335] tap0: tun_chr_ioctl cmd 2147767517 [ 487.277849][T11399] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1935'. [ 487.743148][T11413] tap0: tun_chr_ioctl cmd 2147767517 [ 487.978341][T11414] netlink: 'syz.2.1940': attribute type 1 has an invalid length. [ 488.018151][T11414] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.1940'. [ 489.789326][T11448] device syzkaller0 entered promiscuous mode [ 489.822773][T11453] tap0: tun_chr_ioctl cmd 2147767517 [ 490.000048][T11454] netlink: 'syz.4.1953': attribute type 1 has an invalid length. [ 490.047215][T11454] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1953'. [ 494.172294][T11477] tap0: tun_chr_ioctl cmd 2147767517 [ 494.323718][T11479] pimreg: tun_chr_ioctl cmd 2147767520 [ 494.461219][T11484] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 494.507403][T11484] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.1962'. [ 497.373600][T11518] device syzkaller0 entered promiscuous mode [ 498.048200][T11541] netlink: 'syz.0.1983': attribute type 1 has an invalid length. [ 498.131094][T11541] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1983'. [ 501.637914][T11538] tap0: tun_chr_ioctl cmd 2147767517 [ 502.852542][T11600] tap0: tun_chr_ioctl cmd 2147767517 [ 502.884946][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.891308][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.098334][T11606] netlink: 'syz.4.2001': attribute type 1 has an invalid length. [ 503.107031][T11606] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2001'. [ 503.709310][T11620] device syzkaller0 entered promiscuous mode [ 504.035938][T11639] netlink: 'syz.0.2009': attribute type 1 has an invalid length. [ 504.055605][T11639] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2009'. [ 508.204759][T11625] tap0: tun_chr_ioctl cmd 2147767517 [ 509.591735][T11678] tap0: tun_chr_ioctl cmd 2147767517 [ 509.769892][T11678] netlink: 'syz.3.2022': attribute type 1 has an invalid length. [ 509.806839][T11678] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2022'. [ 512.208778][T11715] tap0: tun_chr_ioctl cmd 2147767517 [ 512.372697][T11715] netlink: 'syz.3.2038': attribute type 1 has an invalid length. [ 512.425890][T11715] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2038'. [ 513.288865][T11736] tap0: tun_chr_ioctl cmd 2147767517 [ 513.363736][T11737] netlink: 'syz.4.2053': attribute type 1 has an invalid length. [ 513.381148][T11737] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2053'. [ 517.430435][T11798] tap0: tun_chr_ioctl cmd 2147767517 [ 517.579010][T11807] device syzkaller0 entered promiscuous mode [ 517.631410][T11798] netlink: 'syz.2.2063': attribute type 1 has an invalid length. [ 517.742998][T11798] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2063'. [ 520.106810][T11840] netlink: 'syz.0.2075': attribute type 1 has an invalid length. [ 520.114984][T11840] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2075'. [ 521.187314][T11835] tap0: tun_chr_ioctl cmd 2147767517 [ 523.369539][T11891] netlink: 'syz.4.2087': attribute type 1 has an invalid length. [ 523.468176][T11891] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2087'. [ 523.627748][T11897] netlink: 'syz.1.2088': attribute type 1 has an invalid length. [ 523.700265][T11897] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2088'. [ 525.192592][T11881] tap0: tun_chr_ioctl cmd 2147767517 [ 525.219306][T11890] tap0: tun_chr_ioctl cmd 2147767517 [ 525.481013][T11908] netlink: 'syz.3.2091': attribute type 4 has an invalid length. [ 529.261976][T11944] netlink: 'syz.3.2104': attribute type 1 has an invalid length. [ 529.405185][T11944] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2104'. [ 529.961100][T11955] tap1: tun_chr_ioctl cmd 2147767517 [ 530.136920][T11957] netlink: 'syz.3.2105': attribute type 1 has an invalid length. [ 530.166918][T11957] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2105'. [ 530.630076][T11966] netlink: 'syz.4.2107': attribute type 4 has an invalid length. [ 531.361867][T11979] device syzkaller0 entered promiscuous mode [ 532.556617][T12002] netlink: 'syz.2.2115': attribute type 1 has an invalid length. [ 532.566123][T12002] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2115'. [ 534.656574][T11999] tap0: tun_chr_ioctl cmd 2147767517 [ 535.953000][T12030] tap0: tun_chr_ioctl cmd 2147767517 [ 536.277901][T12029] netlink: 'syz.3.2121': attribute type 1 has an invalid length. [ 536.408911][T12029] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2121'. [ 536.477049][T12038] netlink: 'syz.1.2122': attribute type 4 has an invalid length. [ 538.053002][T12071] tap0: tun_chr_ioctl cmd 2147767517 [ 538.229058][T12066] netlink: 'syz.4.2130': attribute type 1 has an invalid length. [ 538.243399][T12066] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2130'. [ 539.618324][T12092] netlink: 'syz.0.2138': attribute type 4 has an invalid length. [ 540.013169][T12099] netlink: 'syz.0.2139': attribute type 1 has an invalid length. [ 540.021587][T12099] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2139'. [ 541.015370][T12096] tap0: tun_chr_ioctl cmd 2147767517 [ 541.262726][T12108] netlink: 'syz.3.2142': attribute type 29 has an invalid length. [ 541.434150][T12108] netlink: 'syz.3.2142': attribute type 29 has an invalid length. [ 545.954690][T12145] tap0: tun_chr_ioctl cmd 2147767517 [ 546.124940][T12150] netlink: 'syz.3.2152': attribute type 1 has an invalid length. [ 546.133434][T12150] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2152'. [ 547.757135][T12157] tap0: tun_chr_ioctl cmd 2147767517 [ 547.937166][T12158] netlink: 'syz.1.2154': attribute type 1 has an invalid length. [ 548.042241][T12158] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2154'. [ 550.269306][T12196] netlink: 'syz.3.2160': attribute type 1 has an invalid length. [ 550.277549][T12196] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2160'. [ 551.426067][T12192] tap0: tun_chr_ioctl cmd 2147767517 [ 552.019097][T12205] tap0: tun_chr_ioctl cmd 2147767517 [ 552.144002][T12208] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 552.172348][T12208] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2175'. [ 553.494719][T12223] tap0: tun_chr_ioctl cmd 2147767517 [ 553.695595][T12229] netlink: 'syz.1.2169': attribute type 1 has an invalid length. [ 553.857059][T12229] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2169'. [ 555.050031][T12247] device syzkaller0 entered promiscuous mode [ 556.649976][T12275] netlink: 'syz.3.2180': attribute type 1 has an invalid length. [ 556.669769][T12275] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2180'. [ 557.058351][T12288] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 557.074118][T12288] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2183'. [ 558.427559][T12270] tap0: tun_chr_ioctl cmd 2147767517 [ 558.433430][T12276] netlink: 'syz.1.2182': attribute type 2 has an invalid length. [ 558.445654][T12281] tap0: tun_chr_ioctl cmd 2147767517 [ 559.275460][T12304] device syzkaller0 entered promiscuous mode [ 564.329660][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.336137][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.508678][T12360] netlink: 'syz.0.2201': attribute type 1 has an invalid length. [ 564.517136][T12360] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2201'. [ 567.161325][T12328] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.2194'. [ 567.177303][T12356] tap0: tun_chr_ioctl cmd 2147767517 [ 568.422698][T12381] tap0: tun_chr_ioctl cmd 2147767517 [ 568.598298][T12384] netlink: 'syz.4.2208': attribute type 1 has an invalid length. [ 568.643270][T12384] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2208'. [ 569.487125][T12409] tap0: tun_chr_ioctl cmd 2147767517 [ 569.717459][T12409] netlink: 'syz.4.2218': attribute type 1 has an invalid length. [ 569.796075][T12409] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2218'. [ 571.392353][T12435] netlink: 'syz.0.2226': attribute type 2 has an invalid length. [ 571.421005][T12435] netlink: 'syz.0.2226': attribute type 9 has an invalid length. [ 571.449268][T12435] netlink: 'syz.0.2226': attribute type 10 has an invalid length. [ 571.464905][T12435] netlink: 'syz.0.2226': attribute type 11 has an invalid length. [ 571.483020][T12435] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2226'. [ 571.492591][T12430] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.2224'. [ 571.558520][T12442] tap0: tun_chr_ioctl cmd 2147767517 [ 571.667871][T12444] tap0: tun_chr_ioctl cmd 2147767517 [ 571.748254][T12447] netlink: 'syz.4.2228': attribute type 1 has an invalid length. [ 571.834998][T12447] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2228'. [ 571.885293][T12448] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 571.916844][T12448] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2229'. [ 572.849408][T12468] tap0: tun_chr_ioctl cmd 2147767517 [ 573.074257][T12471] netlink: 'syz.4.2235': attribute type 1 has an invalid length. [ 573.123250][T12471] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2235'. [ 573.178632][T12474] tap0: tun_chr_ioctl cmd 2147767517 [ 573.358581][T12477] netlink: 'syz.1.2248': attribute type 1 has an invalid length. [ 573.488343][T12477] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2248'. [ 574.331818][T12498] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 574.374972][T12498] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2241'. [ 574.831062][T12494] tap0: tun_chr_ioctl cmd 2147767517 [ 575.927546][T12523] netlink: 'syz.1.2246': attribute type 1 has an invalid length. [ 576.003081][T12523] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2246'. [ 579.897036][T12517] tap0: tun_chr_ioctl cmd 2147767517 [ 581.078437][T12555] tap0: tun_chr_ioctl cmd 2147767517 [ 581.260988][T12565] netlink: 'syz.2.2258': attribute type 1 has an invalid length. [ 581.310255][T12565] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2258'. [ 585.067629][T12617] tap0: tun_chr_ioctl cmd 2147767517 [ 585.231682][T12620] netlink: 'syz.3.2274': attribute type 1 has an invalid length. [ 585.310063][T12620] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2274'. [ 586.042533][T12627] tap0: tun_chr_ioctl cmd 2147767517 [ 586.291840][T12634] netlink: 'syz.1.2276': attribute type 1 has an invalid length. [ 586.382497][T12634] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2276'. [ 589.983622][T12676] tap0: tun_chr_ioctl cmd 2147767517 [ 590.318244][T12687] netlink: 'syz.3.2291': attribute type 1 has an invalid length. [ 590.452259][T12687] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2291'. [ 592.133857][T12708] tap0: tun_chr_ioctl cmd 2147767517 [ 592.402084][T12712] netlink: 'syz.0.2296': attribute type 1 has an invalid length. [ 592.523126][T12712] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2296'. [ 595.635077][T12752] device syzkaller0 entered promiscuous mode [ 596.188404][T12769] netlink: 'syz.3.2309': attribute type 1 has an invalid length. [ 596.246660][T12769] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2309'. [ 599.614529][T12762] tap0: tun_chr_ioctl cmd 2147767517 [ 604.222049][T12836] tap0: tun_chr_ioctl cmd 2147767517 [ 604.355981][T12839] netlink: 'syz.1.2327': attribute type 1 has an invalid length. [ 604.499097][T12839] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2327'. [ 607.938582][T12869] netlink: 65027 bytes leftover after parsing attributes in process `syz.0.2340'. [ 610.184602][T12900] tap0: tun_chr_ioctl cmd 2147767517 [ 610.471548][T12902] netlink: 'syz.4.2346': attribute type 1 has an invalid length. [ 610.593734][T12902] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2346'. [ 610.865573][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.873182][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.906583][T12912] device bridge_slave_1 left promiscuous mode [ 610.918598][T12912] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.948834][T12912] device bridge_slave_0 left promiscuous mode [ 610.964937][T12912] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.123882][T12912] bond0: (slave bridge0): Releasing backup interface [ 615.109644][T12964] tap0: tun_chr_ioctl cmd 2147767517 [ 615.262724][T12969] netlink: 'syz.3.2362': attribute type 1 has an invalid length. [ 615.308924][T12969] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2362'. [ 615.487170][T12976] tap0: tun_chr_ioctl cmd 2147767517 [ 615.781329][T12980] netlink: 'syz.2.2377': attribute type 1 has an invalid length. [ 615.829046][T12980] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2377'. [ 616.189478][T12998] device syzkaller0 entered promiscuous mode [ 622.437451][T13032] tap0: tun_chr_ioctl cmd 2147767517 [ 622.560238][T13035] netlink: 'syz.3.2383': attribute type 1 has an invalid length. [ 622.596451][T13035] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2383'. [ 623.011142][T13052] netlink: 'syz.2.2396': attribute type 1 has an invalid length. [ 623.019951][T13052] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2396'. [ 625.669088][T13045] tap0: tun_chr_ioctl cmd 2147767517 [ 625.722270][T13051] Ÿëä: port 1(gretap0) entered blocking state [ 625.735364][T13051] Ÿëä: port 1(gretap0) entered disabled state [ 625.742501][T13051] device gretap0 entered promiscuous mode [ 625.765357][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.771787][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.671404][ T4279] Bluetooth: hci0: unexpected event 0x05 length: 15 > 4 [ 626.796247][T13089] netlink: 'syz.4.2398': attribute type 29 has an invalid length. [ 627.374600][T13089] netlink: 'syz.4.2398': attribute type 29 has an invalid length. [ 627.443860][T13092] netlink: 'syz.4.2398': attribute type 29 has an invalid length. [ 627.678838][T13102] tap0: tun_chr_ioctl cmd 2147767517 [ 628.041094][T13106] netlink: 'syz.0.2399': attribute type 1 has an invalid length. [ 628.313073][T13106] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2399'. [ 629.193282][T13126] tap0: tun_chr_ioctl cmd 2147767517 [ 629.655219][T13128] netlink: 'syz.3.2405': attribute type 1 has an invalid length. [ 629.709615][T13128] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2405'. [ 630.721690][T13155] netlink: 65027 bytes leftover after parsing attributes in process `syz.2.2409'. [ 635.372367][T13213] netlink: 65027 bytes leftover after parsing attributes in process `syz.1.2425'. [ 637.745090][T13227] tap0: tun_chr_ioctl cmd 2147767517 [ 638.002093][T13234] netlink: 'syz.3.2429': attribute type 1 has an invalid length. [ 638.056287][T13234] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2429'. [ 639.355442][ T4279] Bluetooth: hci3: ISO packet too small [ 642.693517][T13281] netlink: 65027 bytes leftover after parsing attributes in process `syz.3.2439'. [ 642.881968][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 643.309836][T13296] tap0: tun_chr_ioctl cmd 2147767517 [ 643.492357][T13300] netlink: 'syz.1.2448': attribute type 1 has an invalid length. [ 643.562967][T13300] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2448'. [ 646.590253][T13358] tap0: tun_chr_ioctl cmd 2147767517 [ 646.741973][T13365] netlink: 'syz.0.2464': attribute type 1 has an invalid length. [ 646.784568][T13365] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2464'. [ 650.586957][T13392] Ÿëä: port 1(gretap0) entered blocking state [ 650.594220][T13392] Ÿëä: port 1(gretap0) entered disabled state [ 650.601679][T13392] device gretap0 entered promiscuous mode [ 651.176130][T13423] tap0: tun_chr_ioctl cmd 2147767517 [ 651.386134][T13425] tap0: tun_chr_ioctl cmd 2147767517 [ 651.460417][T13426] netlink: 'syz.0.2484': attribute type 1 has an invalid length. [ 651.681512][T13426] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.2484'. [ 651.883598][T13436] netlink: 'syz.1.2485': attribute type 1 has an invalid length. [ 651.964385][T13436] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2485'. [ 654.871581][T13478] tap0: tun_chr_ioctl cmd 2147767517 [ 655.050063][T13478] netlink: 'syz.3.2500': attribute type 1 has an invalid length. [ 655.104217][T13478] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2500'. [ 657.604207][T13530] tap0: tun_chr_ioctl cmd 2147767517 [ 657.986318][T13538] netlink: 'syz.1.2513': attribute type 1 has an invalid length. [ 658.060225][T13538] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2513'. [ 658.123253][T13545] tap0: tun_chr_ioctl cmd 2147767517 [ 658.328988][T13552] netlink: 'syz.3.2517': attribute type 1 has an invalid length. [ 658.351074][T13552] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2517'. [ 658.745526][T13559] tap0: tun_chr_ioctl cmd 2147767517 [ 658.906304][T13566] netlink: 'syz.4.2533': attribute type 1 has an invalid length. [ 658.975243][T13566] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.2533'. [ 660.868319][T13603] tap0: tun_chr_ioctl cmd 2147767517 [ 661.009252][T13612] netlink: 'syz.3.2538': attribute type 1 has an invalid length. [ 661.037660][T13613] tap0: tun_chr_ioctl cmd 2147767517 [ 661.052153][T13612] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2538'. [ 661.238959][T13616] netlink: 'syz.2.2540': attribute type 1 has an invalid length. [ 661.344860][T13616] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.2540'. [ 661.745242][T13630] tap0: tun_chr_ioctl cmd 2147767517 [ 661.863997][T13633] netlink: 'syz.1.2543': attribute type 1 has an invalid length. [ 661.890532][T13633] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2543'. [ 666.009200][T13681] tap0: tun_chr_ioctl cmd 2147767517 [ 666.194987][T13690] netlink: 'syz.1.2559': attribute type 1 has an invalid length. [ 666.220286][T13690] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.2559'. [ 668.121989][T13724] netlink: 'syz.3.2573': attribute type 29 has an invalid length. [ 668.165593][T13724] netlink: 'syz.3.2573': attribute type 3 has an invalid length. [ 668.185192][T13724] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2573'. [ 669.975181][T13745] tap0: tun_chr_ioctl cmd 2147767517 [ 670.371551][T13752] netlink: 'syz.3.2581': attribute type 1 has an invalid length. [ 670.437171][T13752] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2581'. [ 671.775119][T13783] netlink: 'syz.3.2590': attribute type 1 has an invalid length. [ 671.789521][T13783] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2590'. [ 672.390648][T13779] tap0: tun_chr_ioctl cmd 2147767517 [ 676.510461][T13829] device syzkaller0 entered promiscuous mode [ 677.836384][T13849] netlink: 'syz.2.2607': attribute type 29 has an invalid length. [ 677.857786][T13849] netlink: 'syz.2.2607': attribute type 3 has an invalid length. [ 677.873021][T13849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2607'. [ 678.046107][T13855] netlink: 'syz.3.2606': attribute type 1 has an invalid length. [ 678.063720][T13855] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.2606'. [ 679.632728][T13847] tap0: tun_chr_ioctl cmd 2147767517 [ 679.648406][T13860] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2610'. [ 682.802477][T13894] netlink: 'syz.1.2621': attribute type 29 has an invalid length. [ 682.823351][T13894] netlink: 'syz.1.2621': attribute type 3 has an invalid length. [ 682.863381][T13894] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2621'. [ 685.940962][T13937] tap0: tun_chr_ioctl cmd 2147767517 [ 686.051478][T13942] netlink: 'syz.4.2636': attribute type 29 has an invalid length. [ 686.107258][T13942] netlink: 'syz.4.2636': attribute type 3 has an invalid length. [ 686.143139][T13942] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2636'. [ 687.204932][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.211310][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.483365][T13969] tap1: tun_chr_ioctl cmd 2147767517 [ 690.364957][T13992] device syzkaller0 entered promiscuous mode [ 690.817674][T14002] netlink: 'syz.0.2650': attribute type 29 has an invalid length. [ 690.840366][T14002] netlink: 'syz.0.2650': attribute type 3 has an invalid length. [ 690.854132][T14002] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2650'. [ 693.487657][T14012] tap0: tun_chr_ioctl cmd 2147767517 [ 694.159211][T14037] tap0: tun_chr_ioctl cmd 2147767517 [ 696.869228][T14064] netlink: 'syz.1.2671': attribute type 29 has an invalid length. [ 696.898693][T14064] netlink: 'syz.1.2671': attribute type 3 has an invalid length. [ 696.959894][T14064] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2671'. [ 699.087799][T14099] tap0: tun_chr_ioctl cmd 2147767517 [ 702.646919][T14137] tap0: tun_chr_ioctl cmd 2147767517 [ 708.036628][T14179] tap0: tun_chr_ioctl cmd 2147767517 [ 710.047338][T14215] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 710.486379][T14215] device syzkaller0 entered promiscuous mode [ 716.298101][T14243] tap0: tun_chr_ioctl cmd 2147767517 [ 716.306773][T14248] tap0: tun_chr_ioctl cmd 2147767517 [ 716.316008][T14254] netlink: 'syz.2.2719': attribute type 10 has an invalid length. [ 716.324719][T14254] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2719'. [ 716.334464][T14254] bridge0: port 3(ipvlan1) entered blocking state [ 716.341037][T14254] bridge0: port 3(ipvlan1) entered disabled state [ 716.354853][T14254] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 720.295440][T14309] tap0: tun_chr_ioctl cmd 2147767517 [ 720.416216][T14311] tap0: tun_chr_ioctl cmd 2147767517 [ 721.346274][T14325] device syzkaller0 entered promiscuous mode [ 724.049425][T14343] bridge0: port 3(veth0_to_bridge) entered blocking state [ 724.056720][T14343] bridge0: port 3(veth0_to_bridge) entered disabled state [ 724.065206][T14343] device veth0_to_bridge entered promiscuous mode [ 724.071809][T14343] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 724.085042][T14343] bridge0: port 3(veth0_to_bridge) entered blocking state [ 724.092252][T14343] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 724.240645][T14360] tap0: tun_chr_ioctl cmd 2147767517 [ 724.274023][T14368] tap0: tun_chr_ioctl cmd 2147767517 [ 724.542613][T14374] tap0: tun_chr_ioctl cmd 2147767517 [ 725.534152][ T4279] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 725.880140][T14413] tap0: tun_chr_ioctl cmd 2147767517 [ 727.923909][T14421] tap0: tun_chr_ioctl cmd 2147767517 [ 728.210836][T14440] tap0: tun_chr_ioctl cmd 2147767517 [ 728.831004][T14450] device syzkaller0 entered promiscuous mode [ 728.843038][ T14] syzkaller0: tun_net_xmit 48 [ 728.853589][T14450] syzkaller0: tun_net_xmit 1280 [ 728.863827][T14450] syzkaller0: create flow: hash 2862735765 index 1 [ 729.103055][T14449] syzkaller0: delete flow: hash 2862735765 index 1 [ 731.217859][T14472] device syzkaller0 entered promiscuous mode [ 731.243502][T14472] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 734.796795][T14512] tap0: tun_chr_ioctl cmd 2147767517 [ 734.802411][T14509] tap0: tun_chr_ioctl cmd 2147767517 [ 736.702886][T14541] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 737.659134][T14541] device syzkaller0 entered promiscuous mode [ 742.841487][ T4279] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 742.844825][T14596] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 743.671931][T14596] device syzkaller0 entered promiscuous mode [ 745.637528][ T4279] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 747.215447][T14624] device syzkaller0 entered promiscuous mode [ 748.652128][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.658599][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.400820][T14676] device syzkaller0 entered promiscuous mode [ 754.074900][T14739] syz.3.2859[14739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.075004][T14739] syz.3.2859[14739] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 754.585498][T14740] device syzkaller0 entered promiscuous mode [ 754.629623][ T7712] syzkaller0: tun_net_xmit 48 [ 757.883170][T14788] device syzkaller0 entered promiscuous mode [ 757.921910][T14788] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 760.181981][T14814] device syzkaller0 entered promiscuous mode [ 763.768452][T14872] netlink: 'syz.2.2899': attribute type 7 has an invalid length. [ 763.816264][T14872] netlink: 'syz.2.2899': attribute type 1 has an invalid length. [ 763.875881][T14872] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2899'. [ 768.594565][T14942] sctp: [Deprecated]: syz.2.2909 (pid 14942) Use of int in maxseg socket option. [ 768.594565][T14942] Use struct sctp_assoc_value instead [ 771.624843][T14982] tap0: tun_chr_ioctl cmd 2147767517 [ 771.719738][T14986] tap0: tun_chr_ioctl cmd 2147767517 [ 775.027979][T15049] tap0: tun_chr_ioctl cmd 2147767517 [ 775.851229][T15056] tap0: tun_chr_ioctl cmd 2147767517 [ 778.367457][T15091] netlink: 'syz.0.2957': attribute type 7 has an invalid length. [ 778.383262][T15091] netlink: 'syz.0.2957': attribute type 1 has an invalid length. [ 778.403204][T15091] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2957'. [ 778.753731][T15099] sctp: [Deprecated]: syz.4.2950 (pid 15099) Use of int in maxseg socket option. [ 778.753731][T15099] Use struct sctp_assoc_value instead [ 779.261984][T15106] netlink: 'syz.4.2963': attribute type 7 has an invalid length. [ 779.270127][T15106] netlink: 'syz.4.2963': attribute type 1 has an invalid length. [ 779.278459][T15106] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.2963'. [ 781.245650][T15139] tap0: tun_chr_ioctl cmd 2147767517 [ 784.972432][T15194] tap0: tun_chr_ioctl cmd 2147767517 [ 788.104398][T15255] tap0: tun_chr_ioctl cmd 2147767517 [ 788.125082][T15253] tap0: tun_chr_ioctl cmd 2147767517 [ 789.786635][T15284] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3003'. [ 790.178629][T15290] sctp: [Deprecated]: syz.3.3004 (pid 15290) Use of int in maxseg socket option. [ 790.178629][T15290] Use struct sctp_assoc_value instead [ 791.783921][T15310] tap0: tun_chr_ioctl cmd 2147767517 [ 794.626809][T15369] netlink: 'syz.3.3028': attribute type 21 has an invalid length. [ 794.673034][T15369] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3028'. [ 794.770157][T15369] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3028'. [ 796.883641][T15379] tap0: tun_chr_ioctl cmd 2147767517 [ 797.341835][T15392] tap0: tun_chr_ioctl cmd 2147767517 [ 798.029208][T15410] tap0: tun_chr_ioctl cmd 2147767517 [ 798.313199][T15422] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3043'. [ 798.326886][T15422] openvswitch: netlink: Flow key attr not present in new flow. [ 799.530964][T15435] device syzkaller0 entered promiscuous mode [ 799.753208][T15445] tap0: tun_chr_ioctl cmd 2147767517 [ 800.338462][T15457] tap0: tun_chr_ioctl cmd 2147767517 [ 802.109662][T15481] tap0: tun_chr_ioctl cmd 2147767517 [ 803.859275][T15503] tap0: tun_chr_ioctl cmd 2147767517 [ 804.051037][T15519] device syzkaller0 entered promiscuous mode [ 807.220926][T15531] tap0: tun_chr_ioctl cmd 2147767517 [ 807.415325][T15553] tap0: tun_chr_ioctl cmd 2147767517 [ 807.832289][T15562] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3077'. [ 807.842029][T15562] openvswitch: netlink: Flow key attr not present in new flow. [ 808.419694][T15576] tap1: tun_chr_ioctl cmd 2147767517 [ 809.609619][T15598] tap0: tun_chr_ioctl cmd 2147767517 [ 810.103185][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.109600][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.685222][T15630] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3089'. [ 811.771557][T15630] openvswitch: netlink: Flow key attr not present in new flow. [ 814.158137][T15655] tap0: tun_chr_ioctl cmd 2147767517 [ 815.117899][T15671] tap0: tun_chr_ioctl cmd 2147767517 [ 815.421354][T15676] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3104'. [ 815.984709][T15681] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 817.015314][T15691] device syzkaller0 entered promiscuous mode [ 817.424082][T15700] netlink: 'syz.2.3110': attribute type 10 has an invalid length. [ 817.517970][T15700] team0 (unregistering): Port device team_slave_1 removed [ 817.545625][T15700] team0 (unregistering): Port device macvlan0 removed [ 817.578561][T15700] team0 (unregistering): Port device bond0 removed [ 821.023205][T15724] device veth0_vlan left promiscuous mode [ 821.029572][T15724] device veth0_vlan entered promiscuous mode [ 821.043504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 821.052469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 821.093167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 821.300028][T15732] device syzkaller0 entered promiscuous mode [ 821.349168][T15735] tap0: tun_chr_ioctl cmd 2147767517 [ 821.721111][T15744] netlink: 'syz.4.3121': attribute type 1 has an invalid length. [ 822.400631][T15763] netlink: 'syz.2.3127': attribute type 39 has an invalid length. [ 823.904719][T15789] netlink: 'syz.1.3133': attribute type 1 has an invalid length. [ 824.350589][T15795] device syzkaller0 entered promiscuous mode [ 824.444881][T15800] device syzkaller0 entered promiscuous mode [ 827.251587][T15809] tap0: tun_chr_ioctl cmd 2147767517 [ 827.262282][T15817] tap0: tun_chr_ioctl cmd 2147767517 [ 827.679303][T15838] netlink: 'syz.3.3145': attribute type 1 has an invalid length. [ 828.644466][T15860] tap0: tun_chr_ioctl cmd 2147767517 [ 829.553576][T15874] device syzkaller0 entered promiscuous mode [ 829.608166][T15879] tap0: tun_chr_ioctl cmd 2147767517 [ 832.094581][T15889] netlink: 'syz.4.3158': attribute type 39 has an invalid length. [ 832.225853][T15902] device syzkaller0 entered promiscuous mode [ 833.995343][T15916] tap0: tun_chr_ioctl cmd 2147767517 [ 834.135958][T15926] device syzkaller0 entered promiscuous mode [ 834.157536][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 834.211772][T15929] device syzkaller0 entered promiscuous mode [ 834.218618][T15929] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 834.364609][T15932] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3171'. [ 834.410074][T15934] tap0: tun_chr_ioctl cmd 2147767517 [ 834.789119][T15945] device syzkaller0 entered promiscuous mode [ 836.981587][T15959] tap0: tun_chr_ioctl cmd 2147767517 [ 837.245310][T15973] device syzkaller0 entered promiscuous mode [ 837.285057][T15976] tap0: tun_chr_ioctl cmd 2147767517 [ 837.514178][T15985] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3183'. [ 839.217525][T15993] tap0: tun_chr_ioctl cmd 2147767517 [ 840.409716][T16028] tap0: tun_chr_ioctl cmd 2147767517 [ 841.287959][T16043] device syzkaller0 entered promiscuous mode [ 841.326736][T16054] tap0: tun_chr_ioctl cmd 2147767517 [ 843.424551][T16065] device syzkaller0 entered promiscuous mode [ 843.442149][T16076] netlink: 'syz.3.3202': attribute type 10 has an invalid length. [ 845.639018][T16104] netlink: 'syz.0.3209': attribute type 39 has an invalid length. [ 847.025060][T16127] device syzkaller0 entered promiscuous mode [ 847.081175][T16133] netlink: 'syz.4.3216': attribute type 10 has an invalid length. [ 850.107388][T16170] tap0: tun_chr_ioctl cmd 2147767517 [ 851.441311][T16192] device syzkaller0 entered promiscuous mode [ 851.523349][T16198] netlink: 'syz.0.3229': attribute type 10 has an invalid length. [ 854.364286][T16234] device syzkaller0 entered promiscuous mode [ 854.420080][T16236] device syzkaller0 entered promiscuous mode [ 854.435591][T16243] tap0: tun_chr_ioctl cmd 2147767517 [ 859.448308][T16318] netlink: 'syz.3.3245': attribute type 39 has an invalid length. [ 859.507866][T16323] tap0: tun_chr_ioctl cmd 2147767517 [ 860.141869][T16337] device syzkaller0 entered promiscuous mode [ 860.377710][T16341] device syzkaller0 entered promiscuous mode [ 865.385609][T16381] netlink: 'syz.4.3257': attribute type 10 has an invalid length. [ 865.393670][T16381] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3257'. [ 865.546223][T16397] tap0: tun_chr_ioctl cmd 2147767517 [ 866.708198][T16407] tap0: tun_chr_ioctl cmd 2147767517 [ 867.647254][T16446] device syzkaller0 entered promiscuous mode [ 870.679790][T16499] netlink: 'syz.1.3282': attribute type 1 has an invalid length. [ 870.691851][T16499] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3282'. [ 871.528604][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 871.537421][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.607389][T16496] tap0: tun_chr_ioctl cmd 2147767517 [ 871.621186][T16505] tap0: tun_chr_ioctl cmd 2147767517 [ 871.998327][T16520] netlink: 'syz.2.3285': attribute type 39 has an invalid length. [ 872.249909][T16528] tap0: tun_chr_ioctl cmd 2147767517 [ 872.858508][T16551] netlink: 'syz.3.3295': attribute type 10 has an invalid length. [ 872.938554][T16551] device veth0_macvtap left promiscuous mode [ 873.286115][T16559] device syzkaller0 entered promiscuous mode [ 874.165382][T16591] netlink: 'syz.0.3302': attribute type 1 has an invalid length. [ 874.175713][T16591] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3302'. [ 876.009007][T16577] tap0: tun_chr_ioctl cmd 2147767517 [ 876.023075][T16585] tap0: tun_chr_ioctl cmd 2147767517 [ 876.348504][T16605] tap0: tun_chr_ioctl cmd 2147767517 [ 876.478995][T16605] netlink: 'syz.4.3308': attribute type 1 has an invalid length. [ 876.549298][T16605] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3308'. [ 877.651980][T16625] device syzkaller0 entered promiscuous mode [ 879.236652][T16679] netlink: 'syz.1.3326': attribute type 1 has an invalid length. [ 879.263165][T16679] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3326'. [ 879.392995][T16681] netlink: 'syz.0.3327': attribute type 1 has an invalid length. [ 879.401019][T16681] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3327'. [ 880.537705][T16669] tap0: tun_chr_ioctl cmd 2147767517 [ 880.548051][T16674] tap0: tun_chr_ioctl cmd 2147767517 [ 880.681513][T16687] tap0: tun_chr_ioctl cmd 2147767517 [ 880.874383][T16692] netlink: 'syz.2.3328': attribute type 1 has an invalid length. [ 880.898119][T16692] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3328'. [ 882.984477][T16728] device syzkaller0 entered promiscuous mode [ 883.073327][T16728] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 883.543102][T16742] device syzkaller0 entered promiscuous mode [ 884.401199][T16766] netlink: 'syz.3.3342': attribute type 1 has an invalid length. [ 884.452471][T16766] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3342'. [ 885.252588][T16780] netlink: 'syz.0.3344': attribute type 1 has an invalid length. [ 885.260830][T16780] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3344'. [ 886.202775][T16760] tap0: tun_chr_ioctl cmd 2147767517 [ 886.232439][T16777] tap0: tun_chr_ioctl cmd 2147767517 [ 886.343142][T16783] tap0: tun_chr_ioctl cmd 2147767517 [ 886.512085][ T4279] Bluetooth: hci3: unexpected event 0x0f length: 15 > 4 [ 886.586400][T16788] netlink: 'syz.2.3345': attribute type 1 has an invalid length. [ 886.633564][T16788] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3345'. [ 889.849009][T16840] device syzkaller0 entered promiscuous mode [ 889.876586][T16844] tap0: tun_chr_ioctl cmd 2147767517 [ 889.882066][T16842] tap0: tun_chr_ioctl cmd 2147767517 [ 889.983909][T16846] netlink: 'syz.3.3361': attribute type 1 has an invalid length. [ 890.023029][T16846] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3361'. [ 890.065608][T16847] netlink: 'syz.4.3362': attribute type 1 has an invalid length. [ 890.096330][T16847] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3362'. [ 890.306024][T16858] netlink: 'syz.1.3363': attribute type 1 has an invalid length. [ 890.314186][T16858] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3363'. [ 891.696218][T16849] tap0: tun_chr_ioctl cmd 2147767517 [ 893.654550][T16891] device veth0_vlan left promiscuous mode [ 893.734496][T16891] device veth0_vlan entered promiscuous mode [ 894.142423][T16902] tap0: tun_chr_ioctl cmd 2147767517 [ 894.368388][T16906] netlink: 'syz.2.3377': attribute type 1 has an invalid length. [ 894.513199][T16906] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3377'. [ 894.928510][T16921] tap0: tun_chr_ioctl cmd 2147767517 [ 895.070357][T16923] netlink: 'syz.1.3382': attribute type 1 has an invalid length. [ 895.087517][T16923] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3382'. [ 898.305126][ T4279] Bluetooth: hci4: unexpected event 0x3c length: 15 > 7 [ 898.524737][T16941] device veth0_vlan left promiscuous mode [ 898.553767][T16941] device veth0_vlan entered promiscuous mode [ 899.892345][T16970] tap0: tun_chr_ioctl cmd 2147767517 [ 900.088292][T16977] netlink: 'syz.3.3397': attribute type 1 has an invalid length. [ 900.097851][T16977] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3397'. [ 900.239365][T16982] netlink: 'syz.1.3400': attribute type 3 has an invalid length. [ 900.284668][T16982] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3400'. [ 900.794625][ T4279] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 900.870427][T16999] tap0: tun_chr_ioctl cmd 2147767517 [ 901.078452][T17006] netlink: 'syz.1.3405': attribute type 1 has an invalid length. [ 901.116519][T17006] netlink: 105120 bytes leftover after parsing attributes in process `syz.1.3405'. [ 901.942459][T17030] device syzkaller0 entered promiscuous mode [ 901.967914][T16300] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 902.146474][T17036] tap0: tun_chr_ioctl cmd 2147767517 [ 902.302030][T17037] netlink: 'syz.0.3417': attribute type 1 has an invalid length. [ 902.351325][T17037] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.3417'. [ 905.850533][ T4279] Bluetooth: hci1: unexpected event 0x3c length: 15 > 7 [ 905.892965][T17070] tap0: tun_chr_ioctl cmd 2147767517 [ 906.240336][T17074] tap0: tun_chr_ioctl cmd 2147767517 [ 906.279752][T17079] netlink: 'syz.0.3427': attribute type 10 has an invalid length. [ 906.383752][T17084] sctp: [Deprecated]: syz.2.3428 (pid 17084) Use of struct sctp_assoc_value in delayed_ack socket option. [ 906.383752][T17084] Use struct sctp_sack_info instead [ 906.467303][T17084] netlink: 'syz.2.3428': attribute type 10 has an invalid length. [ 906.502493][T17084] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3428'. [ 906.535200][T17084] bridge0: port 4(ipvlan1) entered blocking state [ 906.560308][T17084] bridge0: port 4(ipvlan1) entered disabled state [ 906.608886][T17077] netlink: 'syz.3.3425': attribute type 1 has an invalid length. [ 906.626875][T17084] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 906.657552][T17077] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3425'. [ 906.687301][T17089] netlink: 'syz.0.3429': attribute type 25 has an invalid length. [ 906.853713][T17092] netlink: 'syz.1.3430': attribute type 13 has an invalid length. [ 906.870050][T17092] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.3430'. [ 906.907848][T17100] tap0: tun_chr_ioctl cmd 2147767517 [ 907.110689][T17095] netlink: 'syz.4.3431': attribute type 1 has an invalid length. [ 907.194129][T17095] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3431'. [ 908.174700][T17119] tap0: tun_chr_ioctl cmd 2147767517 [ 908.437215][T17119] netlink: 'syz.4.3438': attribute type 1 has an invalid length. [ 908.543657][T17119] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3438'. [ 908.659382][ T4279] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 908.845867][T17130] netlink: 'syz.0.3440': attribute type 1 has an invalid length. [ 909.224938][T17137] tap0: tun_chr_ioctl cmd 2147767517 [ 910.664711][T17161] tap0: tun_chr_ioctl cmd 2147767517 [ 910.946540][T17163] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 911.083808][T17163] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3449'. [ 911.787020][T17182] tap0: tun_chr_ioctl cmd 2147767517 [ 912.068116][T17186] tap0: tun_chr_ioctl cmd 2147767517 [ 912.076256][T17184] netlink: 'syz.3.3453': attribute type 1 has an invalid length. [ 912.138757][T17184] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.3453'. [ 912.215812][T17194] netlink: 'syz.4.3454': attribute type 1 has an invalid length. [ 912.233037][T17194] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.3454'. [ 912.344503][T17193] netlink: 'syz.1.3456': attribute type 10 has an invalid length. [ 914.504316][ T4279] Bluetooth: hci1: unexpected subevent 0x12 length: 150 > 5 [ 914.807687][T17249] netlink: 'syz.2.3465': attribute type 1 has an invalid length. [ 914.830288][T17249] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.3465'. [ 917.071444][T17242] tap0: tun_chr_ioctl cmd 2147767517 [ 917.829281][T17265] tap0: tun_chr_ioctl cmd 2147767517 [ 917.865806][T17264] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 917.873666][T17264] #PF: supervisor instruction fetch in kernel mode [ 917.880176][T17264] #PF: error_code(0x0010) - not-present page [ 917.886195][T17264] PGD 5a7fa067 P4D 5a7fa067 PUD 0 [ 917.891365][T17264] Oops: 0010 [#1] PREEMPT SMP KASAN [ 917.896654][T17264] CPU: 1 PID: 17264 Comm: syz.4.3467 Not tainted syzkaller #0 [ 917.904115][T17264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 917.914181][T17264] RIP: 0010:0x0 [ 917.917683][T17264] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 917.925039][T17264] RSP: 0018:ffffc9001b5af258 EFLAGS: 00010246 [ 917.931106][T17264] RAX: 1ffffffff1733e8f RBX: 1ffff920036b5e5c RCX: 0000000000000000 [ 917.939074][T17264] RDX: ffffc9001b5af300 RSI: 0000000000000001 RDI: ffff88805a670000 [ 917.947040][T17264] RBP: ffffc9001b5af370 R08: ffff88805a67003f R09: 1ffff1100b4ce007 [ 917.955024][T17264] R10: dffffc0000000000 R11: ffffed100b4ce008 R12: ffffe8ffffd446e8 [ 917.963168][T17264] R13: ffffffff8b99f478 R14: 0000000000000000 R15: ffff88805a670000 [ 917.971340][T17264] FS: 00007fc24a2556c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 917.980350][T17264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 917.986929][T17264] CR2: ffffffffffffffd6 CR3: 000000007b4e3000 CR4: 00000000003506e0 [ 917.994901][T17264] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 918.002883][T17264] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 918.010852][T17264] Call Trace: [ 918.014145][T17264] [ 918.017132][T17264] bond_xdp_xmit+0x31e/0x550 [ 918.021781][T17264] ? __rwlock_init+0x140/0x140 [ 918.026560][T17264] ? bond_xdp_xmit+0x94/0x550 [ 918.031247][T17264] ? bond_xdp+0x850/0x850 [ 918.035574][T17264] ? _raw_spin_unlock+0x24/0x40 [ 918.040445][T17264] ? page_pool_put_defragged_page+0x427/0x660 [ 918.046715][T17264] bq_xmit_all+0xd3f/0x11b0 [ 918.051240][T17264] ? __lock_acquire+0x7d10/0x7d10 [ 918.056286][T17264] ? __dev_flush+0x1b0/0x1b0 [ 918.060879][T17264] ? trace_event_raw_event_lock+0x250/0x250 [ 918.066774][T17264] ? __next_zones_zonelist+0x99/0x120 [ 918.072152][T17264] ? rcu_is_watching+0x11/0xa0 [ 918.077061][T17264] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 918.083216][T17264] ? rcu_read_lock_bh_held+0x76/0xf0 [ 918.088540][T17264] ? rcu_read_lock_held+0x40/0x40 [ 918.093821][T17264] bq_enqueue+0x337/0x3d0 [ 918.098520][T17264] dev_map_enqueue_multi+0xecf/0x1020 [ 918.104103][T17264] ? dev_map_enqueue+0x340/0x340 [ 918.109140][T17264] ? rcu_lockdep_current_cpu_online+0x33/0x120 [ 918.115481][T17264] ? rcu_read_lock_held+0x40/0x40 [ 918.120510][T17264] ? rcu_is_watching+0x11/0xa0 [ 918.125289][T17264] xdp_do_redirect_frame+0x477/0x650 [ 918.130579][T17264] bpf_test_run_xdp_live+0xa99/0x1a90 [ 918.136056][T17264] ? 0xffffffffa0004440 [ 918.140228][T17264] ? bpf_test_run_xdp_live+0x518/0x1a90 [ 918.145797][T17264] ? xdp_convert_md_to_buff+0x330/0x330 [ 918.151387][T17264] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 918.157749][T17264] ? bpf_test_init+0x119/0x140 [ 918.162518][T17264] ? xdp_convert_md_to_buff+0x5b/0x330 [ 918.167985][T17264] bpf_prog_test_run_xdp+0x736/0xf10 [ 918.173370][T17264] ? dev_put+0x80/0x80 [ 918.177445][T17264] ? dev_put+0x80/0x80 [ 918.181513][T17264] bpf_prog_test_run+0x31e/0x390 [ 918.186454][T17264] __sys_bpf+0x62b/0x780 [ 918.190705][T17264] ? bpf_link_show_fdinfo+0x380/0x380 [ 918.196088][T17264] ? lock_chain_count+0x20/0x20 [ 918.200964][T17264] __x64_sys_bpf+0x78/0x90 [ 918.205385][T17264] do_syscall_64+0x4c/0xa0 [ 918.209820][T17264] ? clear_bhb_loop+0x60/0xb0 [ 918.214523][T17264] ? clear_bhb_loop+0x60/0xb0 [ 918.219292][T17264] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 918.225270][T17264] RIP: 0033:0x7fc24939c819 [ 918.229684][T17264] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 918.249389][T17264] RSP: 002b:00007fc24a255028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 918.257800][T17264] RAX: ffffffffffffffda RBX: 00007fc249616090 RCX: 00007fc24939c819 [ 918.265768][T17264] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 918.273826][T17264] RBP: 00007fc249432c91 R08: 0000000000000000 R09: 0000000000000000 [ 918.281927][T17264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 918.290014][T17264] R13: 00007fc249616128 R14: 00007fc249616090 R15: 00007ffd82d13d88 [ 918.298004][T17264] [ 918.301115][T17264] Modules linked in: [ 918.305016][T17264] CR2: 0000000000000000 [ 918.309172][T17264] ---[ end trace 0000000000000000 ]--- [ 918.314634][T17264] RIP: 0010:0x0 [ 918.318096][T17264] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 918.325727][T17264] RSP: 0018:ffffc9001b5af258 EFLAGS: 00010246 [ 918.331884][T17264] RAX: 1ffffffff1733e8f RBX: 1ffff920036b5e5c RCX: 0000000000000000 [ 918.339855][T17264] RDX: ffffc9001b5af300 RSI: 0000000000000001 RDI: ffff88805a670000 [ 918.347825][T17264] RBP: ffffc9001b5af370 R08: ffff88805a67003f R09: 1ffff1100b4ce007 [ 918.355791][T17264] R10: dffffc0000000000 R11: ffffed100b4ce008 R12: ffffe8ffffd446e8 [ 918.363761][T17264] R13: ffffffff8b99f478 R14: 0000000000000000 R15: ffff88805a670000 [ 918.371727][T17264] FS: 00007fc24a2556c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 918.380742][T17264] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 918.387363][T17264] CR2: ffffffffffffffd6 CR3: 000000007b4e3000 CR4: 00000000003506e0 [ 918.395351][T17264] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 918.403346][T17264] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 918.411335][T17264] Kernel panic - not syncing: Fatal exception in interrupt [ 918.418935][T17264] Kernel Offset: disabled [ 918.423263][T17264] Rebooting in 86400 seconds..