last executing test programs: 14.640361085s ago: executing program 2 (id=2335): socket$kcm(0x1e, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x8, 0x8000000000ca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xffffff7e, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x65199, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x7, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x464, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x310c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x73) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xb00, @mcast1}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x10, 0x29, 0x3}], 0x10}, 0xf7e5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000780)=ANY=[], 0x9) socket$kcm(0x2, 0x3, 0x2) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001380)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000005000000010000000100000f030000000300000001000000030000004494a50000000000000f010000000000002edf"], 0x0, 0x45, 0x0, 0x1}, 0x28) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061f2ff00000000009500006e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f0000000400)=""/205, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe98}, 0x94) close(r6) perf_event_open(&(0x7f00000002c0)={0x4, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x2002, 0xf452, 0x0, 0x0, 0x9, 0x0, 0xfffb, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xfffffffffffffeff, 0xffffffffffffffff, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x8, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54}, 0x20) socket$kcm(0x10, 0x2, 0x0) 14.300953676s ago: executing program 2 (id=2340): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%pK \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0x1, 0x58, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@ptr={0x4}, @typedef={0x4, 0x0, 0x0, 0x8, 0x1}, @const={0xe, 0x0, 0x0, 0xa, 0x2}, @const={0x6, 0x0, 0x0, 0xa, 0x4}]}, {0x0, [0x0, 0x5f, 0x6f, 0x61, 0x5f]}}, &(0x7f0000000380)=""/206, 0x4f, 0xce, 0x1, 0x7}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000540)=""/111, 0x6f, 0x0, &(0x7f00000005c0)=""/55, 0x37}}, 0x10) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000006c0)=@o_path={&(0x7f0000000680)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xe, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x0, 0x7, 0x1, 0x10, 0xffffffffffffffff}, @ldst={0x2, 0x0, 0x6, 0xa, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0x2, 0x1, 0x0, r1}]}, &(0x7f00000001c0)='GPL\x00', 0x98f, 0xf, &(0x7f0000000200)=""/15, 0x40f00, 0x40, '\x00', r2, @sk_skb=0x4, r3, 0x8, &(0x7f00000004c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x5, 0x3, 0x100}, 0x10, r4, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, r5, 0xffffffffffffffff], 0x0, 0x10, 0x8001}, 0x94) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000800)=""/4096) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001980)={r1, &(0x7f0000001800)="da704a0f32c3eb012a59e68c0ee250788ce4de28ba2afed94d3e4cdddce105428e79720974365fe5aec55b56fa49b565d7112e77116f1221ed6c2918b1dc40c74ae985a7037f784a356902d3f8514efb8747e1988b54f5072f3c93b18d6eca020e680f44a7b9f01223ae7105976d4adca656f43364f3", &(0x7f0000001880)=""/217}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001a40)={r5, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001a80)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000002f00)={&(0x7f0000001ac0), 0x6e, &(0x7f0000002e40)=[{&(0x7f0000001b40)=""/73, 0x49}, {&(0x7f0000001bc0)=""/6, 0x6}, {&(0x7f0000001c00)=""/110, 0x6e}, {&(0x7f0000001c80)=""/89, 0x59}, {&(0x7f0000001d00)=""/4096, 0x1000}, {&(0x7f0000002d00)=""/13, 0xd}, {&(0x7f0000002d40)=""/197, 0xc5}], 0x7, &(0x7f0000002ec0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}, 0x12040) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003200)={0x18, 0x28, &(0x7f0000002f40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@jmp={0x5, 0x1, 0xb, 0xa, 0x3, 0x30, 0xffffffffffffffff}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffc}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4cb}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_fd={0x18, 0x8, 0x1, 0x0, r11}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003080)='syzkaller\x00', 0x4, 0x4, &(0x7f00000030c0)=""/4, 0x41000, 0x4, '\x00', r2, 0x0, r12, 0x8, &(0x7f0000003100)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000003140)={0x5, 0xa, 0x800, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000003180)=[r1, r9, r11, r8, 0xffffffffffffffff], &(0x7f00000031c0)=[{0x4, 0x4, 0x5, 0x6}, {0x5, 0x3, 0x8, 0x4}, {0x1, 0x2, 0xd, 0x1}, {0x0, 0x1, 0x1, 0xc}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000003440)={0x11, 0x10, &(0x7f00000032c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffc4e1, 0x0, 0x0, 0x0, 0x401}, @ldst={0x1, 0x1, 0x0, 0x7, 0x8, 0x20, 0xffffffffffffffff}], &(0x7f0000003340)='syzkaller\x00', 0x101, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x0, r3, 0x8, &(0x7f0000003380)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000033c0)={0x3, 0xc, 0x7, 0x80000001}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f0000003400)=[{0x1, 0x4, 0x10, 0x8}], 0x10, 0xfa}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000003700)={r1, 0x58, &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003880)={&(0x7f0000003740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc8, 0xc8, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0x3}}, @var={0x1, 0x0, 0x0, 0xe, 0x5, 0x1}, @const={0x2, 0x0, 0x0, 0xa, 0x4}, @enum64={0x10, 0x4, 0x0, 0x13, 0x0, 0x1, [{0xe, 0x9, 0x5e}, {0xc, 0x2, 0x200}, {0x4, 0x7, 0x8}, {0xb, 0x1ff, 0x7fffffff}]}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @struct={0xd, 0x4, 0x0, 0x4, 0x1, 0x3, [{0x4, 0x2, 0x2}, {0xa, 0x2, 0x9}, {0x7, 0x4, 0x9}, {0x7, 0x4, 0xffffffce}]}, @type_tag={0xb, 0x0, 0x0, 0x12, 0x1}]}, {0x0, [0x6f, 0x2e, 0x5f, 0x61, 0x5f, 0x61]}}, &(0x7f0000003840)=""/60, 0xe8, 0x3c, 0x0, 0x1}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000003900)=@bpf_tracing={0x1a, 0x26, &(0x7f0000003500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x4}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000001}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7000000}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @generic={0x3, 0x1, 0x1, 0x1ff, 0x1331}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003640)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6, '\x00', r14, 0x18, r15, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2cf16, r8, 0x0, &(0x7f00000038c0)=[r8], 0x0, 0x10, 0xfffffffe}, 0x94) ioctl$TUNGETVNETLE(r12, 0x800454dd, &(0x7f00000039c0)) bpf$PROG_BIND_MAP(0x23, &(0x7f0000003a00)={r13, r12}, 0xc) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000003a40)={r11}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003a80)={0x2, 0x4, 0x8, 0x1, 0x80, r9, 0x3, '\x00', 0x0, r16, 0x3, 0x5}, 0x50) close(r1) write$cgroup_subtree(r12, &(0x7f0000003b00)={[{0x2d, 'blkio'}]}, 0x7) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003b40)={0x0, 0x101, 0x8}, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000003b80)={0x1b, 0x0, 0x0, 0x9, 0x0, r10, 0x4, '\x00', r14, r9, 0x2, 0x1, 0x1}, 0x50) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000003c00), 0x201, 0x0) ioctl$TUNSETVNETHDRSZ(r17, 0x400454d8, &(0x7f0000003c40)=0x1) sendmsg$inet(r16, &(0x7f0000003ec0)={&(0x7f0000003c80)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000003dc0)=[{&(0x7f0000003cc0)="a5c2d6a359e69cefe897510917c896dbcf64bc80ec88547f7f2d069ab0e9d92be6835139c9", 0x25}, {&(0x7f0000003d00)="07c625bc9e574774f6603e768c577c53008ba3b07501bfb3342bfc817b4a90144d90654b08cac564a0728c1688f7d2fd0feac0a8ae5666dfe35d08fe94b194b579d5c112f3389117c59d1253e2ca4fc8b810ddf376ef37fcdc5ccf3f56df0152f288783d0ac111920b7edca10518c68f6621f60ae6db3fb1a5eeb1edc5e28f4f94d77b5211e333570bba", 0x8a}], 0x2, &(0x7f0000003e00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10000}}, @ip_retopts={{0x30, 0x0, 0x7, {[@lsrr={0x83, 0xf, 0xec, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0xc, 0xcd, 0x3, 0x4, [{@private=0xa010100, 0x100}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000}}], 0x98}, 0x850) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000040c0)={0x6, 0x1f, &(0x7f0000003f00)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @ldst={0x1, 0x0, 0x3, 0x2, 0x2, 0x40, 0xfffffffffffffff0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xa, 0x4, 0x0, 0x100, 0x10}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff8}}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r13}}], &(0x7f0000004000)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', r6, 0x25, r11, 0x8, &(0x7f0000004040)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000004080)={0x2, 0xb, 0x0, 0xabdd0c0}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 14.052392554s ago: executing program 2 (id=2342): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a80)={&(0x7f0000000800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x93, 0x93, 0x9, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0x8}, {0x5, 0x2}, {0xc, 0x4}, {0xa, 0x3}, {0xc}, {0x9, 0x2}]}, @union={0x6, 0x2, 0x0, 0x5, 0x0, 0x5, [{0xc, 0x0, 0x3}, {0xd, 0x1, 0x5}]}, @datasec={0x2, 0x3, 0x0, 0xf, 0x3, [{0x2, 0x1, 0x5}, {0x5, 0x20604, 0x7}, {0x4, 0x7, 0x7}], "a4379f"}]}, {0x0, [0x61, 0x0, 0x0, 0x30, 0x2e, 0x0, 0x61]}}, &(0x7f0000000980)=""/197, 0xb5, 0xc5, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002f000b08d25a80648c7494f90424fc600b0002", 0x17}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="934300005a"], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="d8000000100081046881f782db44b9090000000b01000000e8fe55a1180015000600140000000012080004003e000000a80016000a00001c06000200036010fab94dcf5c0461c1a6ced67f6f94007134cf6ee08000a0e408e8d8ef52878516277ce06bbace8017cbec4c2ee5a7cef409", 0x70}], 0x1}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000705d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c01", 0x27}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x103442, 0x0) ioctl$TUNSETIFF(r4, 0x400454da, &(0x7f0000000140)={'batadv0\x00'}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003d000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 13.512437822s ago: executing program 2 (id=2347): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x4030582a, &(0x7f0000000040)) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x30, 0x41, 0x20, 0xfffff028}, {0x6, 0x2e, 0x0, 0x4000}]}) 13.160260383s ago: executing program 2 (id=2349): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{}, &(0x7f0000000180), &(0x7f0000000280)='%pi6 \x00'}, 0x20) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x5, @perf_config_ext={0x6, 0xfffffffffffffff8}, 0x10162, 0x0, 0xda, 0x1, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x42, &(0x7f0000000040), 0x3b) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f00000000c0)=r2}, 0x20) recvmsg$unix(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f00000003c0)=""/199, 0xc7}], 0x1}, 0x20) close(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x2}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000400)={0x2, 0x80, 0x15, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x101048, 0x0, 0x0, 0x9, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x3}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000000380), 0xfffffffb, r5}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r5}, 0x38) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0xc0a10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0xe, 0x0, 0x8}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1e, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10a0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0xe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x50) 11.048311831s ago: executing program 2 (id=2354): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, 0xffffffffffffffff, 0x1) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x36, 0x43a1bd76, 0x9, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x7, 0x10) (async) r0 = socket$kcm(0x10, 0x7, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020032000b07d25a806f8c6394f90424fc602f0000000a740200053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc81e9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x2, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xfffffffb, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) socket$kcm(0x11, 0x3, 0x0) (async) r6 = socket$kcm(0x11, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000100000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r7, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000040)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000800)="62053c005902002f1eafbcf706e12b30087f5c112d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee844d50c0000", 0x46}], 0x1}, 0x4040) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x400006, 0x12101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x828, 0x100000001, 0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x2, 0x0, 0x0, 0x0, 0x400006, 0x12101, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0x7}, 0x828, 0x100000001, 0x0, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8983, &(0x7f0000000080)) (async) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x8983, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="350400004100054cc6a119e30c80a843015a35400c0002000200002037153e370c04018006041a004500ac377653c6de2a7c31f4a918505e7a", 0x39}], 0x1}, 0x10049014) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) socket$kcm(0x29, 0x7, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x82c80, 0x0) 10.78879429s ago: executing program 3 (id=2289): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x300, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) syz_clone(0x190200, &(0x7f0000000140)="43cc62a3eb8e28b2f4b8ac0cce43a7f38f72cd132b7c83ada9023da711aa0560dabaeb803c75fa72236629c34266089ce52082932914d9a05dd47e3f5eba4bcbfd25c41d87236eca67249eae1e9c35e947d2a7754540d36cad558bb34d1377a70cb843b70ea41ff194b133420f5782af5d7220fcf466a539c7d903b47b539e4558658cf15e613a42f183e42bd9348ff0c1f14a8e5cd967ebb9385c7b03ca542e5b33e6cb15", 0xa5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="935d02a978ac688921e5ac837231635df3d070d976a22a025f99f85359550bcbfccb811b83c9cc08d00557747d637f17874062596dce3fe9bbe5a4e60e634b966dd8b8") recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x103b35, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r4, 0x10) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x300, 0x0) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) close(r3) (async) syz_clone(0x190200, &(0x7f0000000140)="43cc62a3eb8e28b2f4b8ac0cce43a7f38f72cd132b7c83ada9023da711aa0560dabaeb803c75fa72236629c34266089ce52082932914d9a05dd47e3f5eba4bcbfd25c41d87236eca67249eae1e9c35e947d2a7754540d36cad558bb34d1377a70cb843b70ea41ff194b133420f5782af5d7220fcf466a539c7d903b47b539e4558658cf15e613a42f183e42bd9348ff0c1f14a8e5cd967ebb9385c7b03ca542e5b33e6cb15", 0xa5, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)="935d02a978ac688921e5ac837231635df3d070d976a22a025f99f85359550bcbfccb811b83c9cc08d00557747d637f17874062596dce3fe9bbe5a4e60e634b966dd8b8") (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x30f6, 0x0, 0x1, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) unlink(&(0x7f0000000080)='./cgroup/cgroup.procs\x00') (async) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x8cffffffffffffff}, 0x103b35, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x10000000000000, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x50) (async) setsockopt$sock_attach_bpf(r1, 0x84, 0x22, &(0x7f0000000000)=r4, 0x10) (async) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) (async) 10.452906271s ago: executing program 3 (id=2357): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x9e100, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r3, 0x800454e1, 0x0) write$cgroup_devices(r4, 0x0, 0xffdd) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="c10c09409b0a1d819c25", 0xfffffcf0}], 0x1}, 0x24008831) 6.695880673s ago: executing program 3 (id=2361): r0 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, @perf_config_ext={0x76, 0x1ef5}, 0x4001, 0x400, 0x98, 0x2, 0x2, 0xfffff271, 0xfff6, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfff0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000028000100c21400002fbd6c193d970000", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x13, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000bbae889a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000002600008500000006000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000040000000850000006d00000095", @ANYRES8=r0, @ANYBLOB="372b96cedf0cfb851d4a7a6792dc7e958e60b6110b9b0be96330f15fd29215ecc31323655216cfb8c8eedb3ab53c65ba9976135c2d1bafc5847f39b15febb9d1614c167c98f4950e76e4231149ee3a1b56c687ec35a33e24fde951d01f11f7b28dd1debe0a"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x8}, 0x100e64, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8003}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x8, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x18080, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x8}, 0x2000}, 0x0, 0xe, 0xffffffffffffffff, 0x0) syz_clone(0x4c002000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x10, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x3, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/31], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0xa, 0x2, 0x73) r5 = socket$kcm(0xa, 0x2, 0x73) close(r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000100081044e81f782db44b904021d08000b000000e8fe55a1180015000600142603600e1209000d00e803c9", 0x2f}], 0x1}, 0x40001) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0xd, 0x0, 0xfe, 0x9, 0x0, 0x5d31, 0x10080, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000001000850000002200000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001980)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000240)={0x0, 0x1}, 0x10}, 0x94) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r8, 0x1, 0x2, &(0x7f0000000000), 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b9040220080207000000040000a118000200e000000100000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb", 0xbd}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 3.640245812s ago: executing program 0 (id=2376): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) (async) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r0}, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={r0, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000900)=[0x0], &(0x7f0000000940)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa5, &(0x7f0000000a40)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xd9, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1c, 0xc, &(0x7f0000000580)=ANY=[@ANYRESHEX=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', r2, @fallback=0x17, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x40022, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x40022, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x202, 0x400000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="02", 0x1}], 0x1}, 0x0) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xcfe972a7e1622baf, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6}, 0x1001, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x6}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xcfe972a7e1622baf, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x6}, 0x1001, 0x10002, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x3, 0x0, 0x6}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"/1617], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x74}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r8 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000780)=""/252, 0xfc}, {&(0x7f0000001500)=""/156, 0x9c}, {0x0}, {&(0x7f0000000c80)=""/182, 0xb6}, {&(0x7f0000000440)=""/194, 0xc2}, {&(0x7f0000000640)=""/268, 0x10c}], 0x6}, 0x20) write$cgroup_subtree(r8, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000120091ef"], 0xfe33) recvmsg$kcm(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r9 = openat$cgroup_procs(r6, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000005c0)=r5, 0x12) r10 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000001100)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095", @ANYRES64=r4, @ANYRESDEC=r3, @ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, r0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001000)={r1, 0x0, 0xa8, 0xb, &(0x7f0000000980)="7ad07aa87bec7a002d87b7a131e9509ef87b36d6fcb08e8b98213a6255a3abd9ced7e5555e2e0a8aef2331fb92b813f971ab253dcbe8c5da0aa9c84fd0a9731ab901ef122917b3956309cef43ea18301127818dbaa7df97177c7fde7a11d8f150a5b53b0b4648970fa9168501270e0f2269b41e3cf95e9f15991cfb5707581c54ca63a6037685c42afdb3f1fe13c77f10428322481937a8ab191fa8846026130ea9db47b2e166e39", &(0x7f0000000e00)=""/11, 0x1800, 0x0, 0xde, 0x9a, &(0x7f0000000e40)="9b18a98041ff6a6774add2ae723d3f29083e90ce864ad2464bfce04137644da86c8c7c7eeb51df9a06466f8d778f3c8a6a7e77554bb57530814d65c7ccf429a305d1820d85c05714bdf98e3653e77b884f7a6fb55fa66f006bc008b37f8da9b4fbabab8983f5083eaa64f64469c2ec31c5b109d71cb0cfd37219070060b7d344edeaad492b3976997e2c97cc7a2bab9b3f73cf6d8887c505a1dbc0070eb38bce826a295dd642eeb5b6542ab73dcf87a73b91eeca95b497ff48b93058cf6dfea82195b8b58478eaab94a229bbf7c5e84f862606d28c9954568cb0f811bf9b", &(0x7f0000000f40)="16ed9d5b4d99bd77c41f54bd0a044faf0a57ba17eb109a7e63d5c8879e7dc10d14a01fb857fe9248295e6b5d33f5aa21828db8775fa4836bd2e5a4642dc4aa13e148c3d626100beced7de2252da8ba7d9010d08c0d4a7176b11b5516d5431a353e1959ba0a82cc4c0f778f5a954c9693dc3c7d5cafea4328b97147a1dd5c2eb58c8a16bed23c14c684aa5d1511ad878e2b6a8ba7c67d1f94e1cf", 0x1, 0x0, 0x1a2f}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703320000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000340)) (async) ioctl$TUNSETCARRIER(r10, 0x400454e2, &(0x7f0000000340)) 3.051953121s ago: executing program 1 (id=2378): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000001080)=ANY=[@ANYBLOB="180000000000000000000000feffffff180100002000732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000050000008500000006000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r2, 0x1}, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0x69) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x80000, 0x0, 0x0, 0x40f00, 0x30, '\x00', 0x0, 0xc}, 0x94) 3.008490242s ago: executing program 0 (id=2379): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x20543, 0x0) ioctl$TUNSETLINK(r2, 0x400454cd, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00') ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x40049409, 0x5) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r1, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x4000080) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x8ff, 0xb8, &(0x7f00000004c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$kcm(0x29, 0x7, 0x0) 2.815562509s ago: executing program 1 (id=2380): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x1, 0x1, 0x4, 0x10, 0x0, 0x7ff, 0x8480, 0xa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_bp={0x0, 0xc}, 0x10000, 0xfffffffffffffff5, 0x13, 0x7, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x75}, 0x0, 0xa, r0, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) r5 = socket$kcm(0x2c, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r4}, &(0x7f0000000080), &(0x7f00000001c0)=r5}, 0x20) close(r5) close(r3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x4030582a, &(0x7f0000000040)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x45, &(0x7f0000000040)=r8, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000440)=[0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x21, &(0x7f0000000580)=[{}, {}, {}, {}, {}], 0x28, 0x0, 0x0, &(0x7f0000000600), 0x8, 0xea, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0x13, &(0x7f0000000940)=ANY=[@ANYBLOB="8510000003000000b7080000000000007b8af8ff00000000b7080000040000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018290000", @ANYRES32=r8, @ANYBLOB="000000000200000018110000", @ANYRES32=r8, @ANYBLOB="00000000000000005da2e0fff0ffffff535c86467e652e67009537c3fc20eb3c95bb77af4e06e8f091d64812bc1394c67dfad5af06f76e66799aec28a97fc45222dbba9ce2071ea049cf0ed5e7efc2bb8bfd392c27c889d30dcd4d62a2f3f0c300000000000000"], &(0x7f0000000340)='GPL\x00', 0x4, 0x71, &(0x7f0000000380)=""/113, 0x41000, 0x0, '\x00', r9, @fallback=0x29, r8, 0x8, &(0x7f00000007c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x0, 0x1}, 0x10, 0x0, r8, 0x1, 0x0, &(0x7f0000000840)=[{0x0, 0x2, 0x10, 0x5}], 0x10, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x12, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x6}, [@alu={0x4, 0x1, 0x6, 0x0, 0x8, 0xffffffffffffffe0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x7, 0x0, 0xb, 0x9, 0x6, 0x0, 0x8}]}, &(0x7f0000000380)='GPL\x00', 0x9, 0xbe, &(0x7f00000003c0)=""/190, 0x41000, 0x1a, '\x00', r9, 0x25, r1, 0x8, &(0x7f0000000480)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x7, 0x800, 0x7c0b2975}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000500)=[r7, r3, r6, r3, r1], &(0x7f0000000540)=[{0x2, 0x3, 0x4}, {0x3, 0x1, 0x5, 0x7}], 0x10, 0x7fffffff}, 0x94) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x403, 0x10, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x3, 0x6, 0x6, 0xb471, 0x10000}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(r3, &(0x7f00000005c0)=ANY=[], 0xfffffeff) 2.17245924s ago: executing program 3 (id=2381): r0 = socket$kcm(0xa, 0x5, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000400000000000000008500000030000000180100002020702500000000f82020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x1, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f0000000440)={&(0x7f0000000180)=@in6={0xa, 0xffff, 0x0, @mcast1, 0x6}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}, {0x0, 0x30}], 0x2, 0x0, 0x0, 0x900}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000100)={'veth0_to_team\x00', 0x400}) (async) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000240)={'gre0\x00', 0x200}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) (async) perf_event_open(0x0, 0x0, 0x6, 0xffffffffffffffff, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x600}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000340)={'syzkaller0\x00', 0x200}) (async) write$cgroup_devices(r6, &(0x7f0000000140)=ANY=[@ANYRESOCT=r6], 0x10017) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x200000, 0x9}, 0x0, 0x9, 0xffffffffffffffff, 0x0) (async) socketpair(0x24, 0x800, 0x774, &(0x7f0000000380)) (async) setsockopt$sock_attach_bpf(r0, 0x0, 0x21, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) 1.899269829s ago: executing program 0 (id=2382): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000280)='syz1\x00', 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000050000000200000047"], 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r2}, 0xc) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x404802, 0x0) ioctl$TUNSETTXFILTER(r5, 0x400454d1, &(0x7f00000002c0)={0x1, 0x6, [@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, @broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, @local]}) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @dev, 0xfffff001}, 0x80, 0x0}, 0xe07e872420dfefca) 1.85716519s ago: executing program 3 (id=2383): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@func={0xc, 0x0, 0x0, 0xc, 0x4}]}, {0x0, [0x0]}}, &(0x7f0000000100)=""/133, 0x27, 0x85, 0x0, 0x6}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r2, 0x8) write$cgroup_subtree(r2, &(0x7f0000000040), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r3 = socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000300)={'bridge_slave_1\x00', @remote}) setsockopt$sock_attach_bpf(r3, 0x84, 0x85, &(0x7f0000000ac0), 0x90) sendmsg$inet(r3, &(0x7f00000006c0)={&(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000000)="83", 0x1}, {&(0x7f0000000200)="b092af391197d1e3d83ed1aaad117c1c5130aba499be34f08dcc0efbb8e20b5a95f0301fdd6867148466f08045ed01df8be9c62510d37200668b73de90e6d1fa16c43eb0816d9faf98fe560d0e432aa824ed73671fb5fe7a74fc537807a2689e14f838e02a302976d20961ba45555f86c496226c539a36048f12189f9c123338d6997d09c784f3020f3ec8d2ade78e75a08cd08ca8d560546a8043005b93b53e907dedb3d7ed21f329d0b189a74f683dff1cd3be39fff6583064c83bc0bb61b20a8f644305bc56da06a5fc3a522f8e263ee94d84946ce4eeb1fcf0e6e3b2deb9ec9cc832ede463f4e8e53110196286cbb5bdd82d920c", 0xf6}], 0x2}, 0x0) 1.807325132s ago: executing program 1 (id=2384): socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x29, 0x13, 0x0, 0x0) socket$kcm(0xa, 0x2, 0x88) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x80100, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) close(r1) r2 = socket$kcm(0x2b, 0x1, 0x0) close(r2) r3 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x2, @dev, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x2cb) close(r2) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400000001ff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x40, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$unix(r4, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0) 1.716510784s ago: executing program 0 (id=2385): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f0, &(0x7f0000000080)) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) r5 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz0\x00', 0x200002, 0x0) openat$cgroup_devices(r5, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a0003", 0x37}], 0x1}, 0x20000880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0x11, 0x3, 0x0) ioctl$TUNGETVNETHDRSZ(0xffffffffffffffff, 0x800454d7, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'tunl0\x00', @random="013301308308"}) 1.408763284s ago: executing program 1 (id=2386): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000005000000fd1900008400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="050000020200"], 0x50) socket$kcm(0xa, 0x3, 0x87) (async) socket$kcm(0xa, 0x3, 0x87) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={0x0}, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x5, 0x7f, 0xef0, 0x9, 0x0, 0x1}, 0x50) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x6, r1, 0x406}, 0x38) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_ext={0x1c, 0x1f, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3ff}, [@alu={0x7, 0x54e6e09d3eb88cb1, 0x4, 0x9, 0x7, 0x1, 0x10}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0xb3}, @tail_call, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @ldst={0x3, 0x1, 0x4, 0x1, 0x4, 0x80, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x2a}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff2}}]}, &(0x7f0000000140)='GPL\x00', 0x85, 0xde, &(0x7f0000000180)=""/222, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x8, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x2bd79, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[r0, r0, r1, r0, r1]}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x29200, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, @perf_config_ext={0xffffffffffffffff, 0x69296873}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0xfffffffffffff7fe}, 0x0, 0x3fffffb, 0xffffffffffffffff, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r1}, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080304000000e8fe03a1180015000600142603600e1208000f0000810401a80016040a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x8008) socket$kcm(0x10, 0x2, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) 1.383194145s ago: executing program 0 (id=2387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="600000004e007f049e", 0x9}, {&(0x7f0000000180)="78cabf2dfb73fc0a7d0a0080f2dcb9fe06892544001100b8f9e6aaeb1ae2f6e8bcb5ee52dc06249798093c5102a1bca0b646a7ce904f6e6b788b3219c233e60ddc36024a99a63e729f9b06f96137c89d03234f008c5681", 0x57}], 0x2}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r2, 0x58, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x2, &(0x7f00000005c0)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x240}], &(0x7f0000000640)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x28, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x84}, 0x94) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @fwd={0xe}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x3}]}, {0x0, [0x0, 0x5f, 0x2e, 0x0, 0x0, 0x5f, 0x61, 0x0, 0x5f, 0x5f]}}, &(0x7f0000000580)=""/209, 0x64, 0xd1, 0x1, 0x403}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x20, &(0x7f0000000800)={&(0x7f00000006c0)=""/24, 0x18, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_lsm={0x1d, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x2, 0x8, 0x7, 0xfffffffa}, 0x10, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0x12, &(0x7f00000000c0)=@raw=[@exit, @jmp={0x5, 0x0, 0xa, 0x0, 0x2, 0x10, 0xfffffffffffffff0}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x280c}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x3}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @exit], &(0x7f00000001c0)='GPL\x00', 0x0, 0xc7, &(0x7f0000000280)=""/199, 0x40f00, 0x18, '\x00', r3, @fallback=0x28, r4, 0x8, &(0x7f00000006c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0x1}, 0x10, r5, 0xffffffffffffffff, 0x0, &(0x7f0000000740)=[r1, r0, r1, r1, r1, r1, 0x1], 0x0, 0x10, 0x2}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x4000000}, 0x2124, 0x6, 0x0, 0x8, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bc00"], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000040)) close(r0) 1.108286284s ago: executing program 1 (id=2388): bpf$MAP_CREATE(0x1400000000000000, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 ', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000ff"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$TUNSETOFFLOAD(r0, 0x40047438, 0x110e22fff7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}, {&(0x7f0000000040)="b260f32a23ee77cec5b03a77ff9fd6f161ba07583820ecd7e1422163502a23c53f06", 0x22}], 0x2}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeedb, 0x0, 0x0, 0x0, 0xd3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@call={0x85, 0x0, 0x0, 0xd0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) 887.699451ms ago: executing program 0 (id=2389): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0x5, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, @perf_bp={&(0x7f0000000100), 0x4}, 0x114905, 0x4, 0x0, 0x1, 0x6, 0x2000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0, 0xfffffffe}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0xb}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8e, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) ioctl$SIOCSIFHWADDR(r5, 0x8b20, &(0x7f0000000040)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c0e0a9b80"], 0xfe33) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 848.896522ms ago: executing program 3 (id=2390): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x7, 0x2, 0x1, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2143, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) socketpair(0x18, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNGETVNETLE(r0, 0x80047456, &(0x7f0000000180)) 0s ago: executing program 1 (id=2391): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x25) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x19, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000090000000000000000000000181100000d467763b91bdf2442d43a9d7866433e0b413e", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000055090100f90000009500000000000000bd0a0600000000004500f4ff0400000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000030000008500000006000000bf91000000000000b702000003000000850000002a000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0x1001, &(0x7f0000001cc0)=""/4097, 0x40f00, 0x24}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000040), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000800) r3 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x1e, 0xc00e}, 0x0) socket$kcm(0xa, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x14, '\x00', 0x0, @sk_msg=0x7}, 0x94) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r6, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r7, @ANYRES32=0x0, @ANYBLOB='&'], 0x10) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x6, 0x8000}, 0x14c28, 0x0, 0xfffffffc, 0x0, 0x10000, 0x800000, 0x3761, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r7}, &(0x7f0000000000), &(0x7f00000000c0)=r5}, 0x20) recvmsg$unix(r4, &(0x7f00000002c0)={0x0, 0xf2, &(0x7f0000000dc0)=[{&(0x7f0000000940)=""/199, 0xc7}], 0x1}, 0x10000) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000380)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[@ANYBLOB='N-N:N/NN'], 0x6a) kernel console output (not intermixed with test programs): tribute type 13 has an invalid length. [ 126.156966][ T7021] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.333'. [ 126.309939][ T7027] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.335'. [ 126.320107][ T7026] netlink: 'syz.3.334': attribute type 10 has an invalid length. [ 126.333834][ T7026] netlink: 156 bytes leftover after parsing attributes in process `syz.3.334'. [ 126.572838][ T7031] netlink: 'syz.1.336': attribute type 10 has an invalid length. [ 126.596173][ T7031] 8021q: adding VLAN 0 to HW filter on device team0 [ 126.617412][ T7031] bond0: (slave team0): Enslaving as an active interface with an up link [ 127.586299][ T7067] netlink: 'syz.3.343': attribute type 10 has an invalid length. [ 127.645803][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.675812][ T7067] bridge_slave_1: left allmulticast mode [ 127.686103][ T7067] bridge_slave_1: left promiscuous mode [ 127.692867][ T7067] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.754988][ T7067] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 128.044799][ T7077] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 128.357710][ T7077] team0: Device nlmon0 is of different type [ 128.378637][ T7078] netlink: 'syz.2.349': attribute type 10 has an invalid length. [ 128.410462][ T7078] team0: Device nlmon0 is of different type [ 129.301861][ T7122] __nla_validate_parse: 5 callbacks suppressed [ 129.301877][ T7122] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.362'. [ 129.328582][ T7117] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.359'. [ 129.394306][ T7121] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.362'. [ 129.630066][ T7132] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.363'. [ 129.659544][ T7132] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.363'. [ 130.196133][ T7170] netlink: 144 bytes leftover after parsing attributes in process `syz.1.373'. [ 130.237893][ T7170] team0: Port device team_slave_0 removed [ 130.248816][ T7170] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 130.633405][ T7177] validate_nla: 3 callbacks suppressed [ 130.633420][ T7177] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 130.649965][ T7177] macvlan0: entered promiscuous mode [ 130.655302][ T7177] macvlan0: entered allmulticast mode [ 130.684960][ T7177] veth1_vlan: entered allmulticast mode [ 130.706828][ T7177] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 130.811245][ T7182] netlink: 'syz.0.379': attribute type 39 has an invalid length. [ 131.118153][ T7190] netlink: 'syz.2.381': attribute type 2 has an invalid length. [ 131.157185][ T7190] netlink: 1045 bytes leftover after parsing attributes in process `syz.2.381'. [ 131.440584][ T7198] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.383'. [ 132.747932][ T7217] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.387'. [ 132.819554][ T7225] netlink: 'syz.1.389': attribute type 2 has an invalid length. [ 132.931345][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.937720][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.271711][ T7238] netlink: 'syz.0.392': attribute type 10 has an invalid length. [ 133.343473][ T7238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.392'. [ 133.419456][ T7238] bond0: entered promiscuous mode [ 133.424560][ T7238] bond_slave_0: entered promiscuous mode [ 133.482104][ T7238] bond_slave_1: entered promiscuous mode [ 133.488788][ T7238] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 134.467573][ T7258] netlink: 132 bytes leftover after parsing attributes in process `syz.0.399'. [ 136.208236][ T7297] netlink: 'syz.2.411': attribute type 27 has an invalid length. [ 136.258185][ T7297] netlink: 164 bytes leftover after parsing attributes in process `syz.2.411'. [ 136.653655][ T7311] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.415'. [ 137.531808][ T7338] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.421'. [ 137.549591][ T7338] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 138.669286][ T7347] netlink: 61211 bytes leftover after parsing attributes in process `syz.0.424'. [ 139.022266][ T7354] netlink: 'syz.1.427': attribute type 58 has an invalid length. [ 139.079255][ T7354] netlink: 144 bytes leftover after parsing attributes in process `syz.1.427'. [ 139.128983][ T7356] netlink: 144 bytes leftover after parsing attributes in process `syz.1.427'. [ 141.140870][ T7393] netlink: 'syz.1.434': attribute type 9 has an invalid length. [ 141.148894][ T7393] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.434'. [ 141.423616][ T7396] netlink: 128 bytes leftover after parsing attributes in process `syz.0.435'. [ 141.505277][ T7396] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.651460][ T7396] syz.0.435 (7396) used greatest stack depth: 18856 bytes left [ 141.704049][ T7403] netlink: 'syz.1.437': attribute type 33 has an invalid length. [ 141.715385][ T7403] netlink: 152 bytes leftover after parsing attributes in process `syz.1.437'. [ 141.731205][ T7403] `: renamed from syz_tun (while UP) [ 142.181659][ T7422] netlink: 'syz.3.443': attribute type 3 has an invalid length. [ 142.197820][ T7422] netlink: 'syz.3.443': attribute type 4 has an invalid length. [ 142.206941][ T7422] netlink: 9067 bytes leftover after parsing attributes in process `syz.3.443'. [ 142.572454][ T7439] netlink: 60 bytes leftover after parsing attributes in process `syz.3.449'. [ 142.582191][ T7441] netlink: 60 bytes leftover after parsing attributes in process `syz.1.448'. [ 142.619735][ T7444] netlink: 'syz.2.450': attribute type 4 has an invalid length. [ 142.627684][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 142.724952][ T7457] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.452'. [ 142.791634][ T7489] netlink: 60 bytes leftover after parsing attributes in process `syz.0.452'. [ 143.197768][ T7508] netlink: 'syz.3.458': attribute type 10 has an invalid length. [ 143.216931][ T7508] netlink: 40 bytes leftover after parsing attributes in process `syz.3.458'. [ 143.229292][ T7508] team0: entered promiscuous mode [ 143.236708][ T7508] team_slave_0: entered promiscuous mode [ 143.255641][ T7508] team_slave_1: entered promiscuous mode [ 143.281193][ T7508] bridge0: port 2(team0) entered blocking state [ 143.287867][ T7508] bridge0: port 2(team0) entered disabled state [ 143.304016][ T7508] team0: entered allmulticast mode [ 143.324252][ T7508] team_slave_0: entered allmulticast mode [ 143.333934][ T7508] team_slave_1: entered allmulticast mode [ 143.346054][ T7508] bridge0: port 2(team0) entered blocking state [ 143.352589][ T7508] bridge0: port 2(team0) entered forwarding state [ 143.385290][ T7512] can: request_module (can-proto-4) failed. [ 143.497998][ T7497] delete_channel: no stack [ 144.061602][ T5782] Bluetooth: hci3: unexpected event 0x0b length: 151 > 11 [ 144.699662][ T7540] netlink: 'syz.3.465': attribute type 9 has an invalid length. [ 145.074815][ T5771] cgroup: fork rejected by pids controller in /syz1 [ 146.137097][ T7592] netlink: 'syz.2.481': attribute type 39 has an invalid length. [ 146.364484][ T5778] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 146.377117][ T5778] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 146.404497][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 146.414063][ T5778] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 146.422279][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 146.430387][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.706370][ T7598] chnl_net:caif_netlink_parms(): no params data found [ 146.821894][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.841162][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.848428][ T7598] bridge_slave_0: entered allmulticast mode [ 146.856732][ T7598] bridge_slave_0: entered promiscuous mode [ 146.879384][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.886520][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.899387][ T7598] bridge_slave_1: entered allmulticast mode [ 146.906742][ T7598] bridge_slave_1: entered promiscuous mode [ 147.013166][ T7623] netlink: 'syz.3.486': attribute type 10 has an invalid length. [ 147.022183][ T7623] __nla_validate_parse: 1 callbacks suppressed [ 147.022192][ T7623] netlink: 2 bytes leftover after parsing attributes in process `syz.3.486'. [ 147.042942][ T7623] hsr0: entered promiscuous mode [ 147.048627][ T7623] bridge0: port 4(hsr0) entered blocking state [ 147.055601][ T7623] bridge0: port 4(hsr0) entered disabled state [ 147.064909][ T7623] hsr0: entered allmulticast mode [ 147.070391][ T7623] hsr_slave_0: entered allmulticast mode [ 147.076644][ T7623] hsr_slave_1: entered allmulticast mode [ 147.094043][ T7626] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 147.104096][ T7623] bridge0: port 4(hsr0) entered blocking state [ 147.110656][ T7623] bridge0: port 4(hsr0) entered forwarding state [ 147.122921][ T7598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.132511][ T7626] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 147.145243][ T7598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.165565][ T7626] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 147.191078][ T7626] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 147.206797][ T7598] team0: Port device team_slave_0 added [ 147.213363][ T7626] netlink: 'syz.2.487': attribute type 29 has an invalid length. [ 147.226284][ T7598] team0: Port device team_slave_1 added [ 147.266433][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.277790][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.304695][ T7598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.340367][ T7598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.354721][ T7598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.393251][ T7598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.593580][ T7598] hsr_slave_0: entered promiscuous mode [ 147.604549][ T7598] hsr_slave_1: entered promiscuous mode [ 147.612383][ T7598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 147.620285][ T7598] Cannot create hsr debugfs directory [ 147.665096][ T7629] syzkaller0: entered promiscuous mode [ 147.676879][ T7629] syzkaller0: entered allmulticast mode [ 147.715389][ T7632] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 148.033665][ T7598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.457009][ T7598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.519207][ T5778] Bluetooth: hci0: command tx timeout [ 148.668100][ T7598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.815170][ T7598] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.840619][ T7660] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 149.239455][ T7598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.274180][ T7598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.316262][ T7598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.335407][ T7598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.394994][ T7671] netlink: 40 bytes leftover after parsing attributes in process `syz.3.500'. [ 149.569268][ T7598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.617427][ T7598] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.657022][ T7482] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.664310][ T7482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.738668][ T7483] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.746718][ T7483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.929147][ T7685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.505'. [ 150.335116][ T7707] netlink: 'syz.3.510': attribute type 12 has an invalid length. [ 150.349435][ T7707] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.510'. [ 150.388415][ T7598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.502237][ T7598] veth0_vlan: entered promiscuous mode [ 150.539246][ T7598] veth1_vlan: entered promiscuous mode [ 150.599464][ T5778] Bluetooth: hci0: command tx timeout [ 150.723226][ T7709] syzkaller0: entered promiscuous mode [ 150.763379][ T7713] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 150.817037][ T7713] netlink: 40 bytes leftover after parsing attributes in process `syz.0.511'. [ 150.859241][ T7713] dummy0: entered promiscuous mode [ 150.864474][ T7713] dummy0: entered allmulticast mode [ 150.890794][ T7713] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 151.218157][ T7722] netlink: 'syz.3.514': attribute type 3 has an invalid length. [ 151.265368][ T7722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.514'. [ 151.508266][ T7728] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.515'. [ 151.551789][ T7728] openvswitch: netlink: Flow key attribute not present in set flow. [ 152.679273][ T5778] Bluetooth: hci0: command tx timeout [ 153.142720][ T7598] veth0_macvtap: entered promiscuous mode [ 153.184819][ T7598] veth1_macvtap: entered promiscuous mode [ 153.243327][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.256174][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.269458][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.291604][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.309612][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.336846][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.358528][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.388373][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.416049][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.437011][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.453154][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.466334][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.484228][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.496472][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.529388][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.549097][ T7598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.570570][ T7598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.582283][ T7745] netlink: 'syz.0.520': attribute type 11 has an invalid length. [ 153.590438][ T7745] netlink: 'syz.0.520': attribute type 4 has an invalid length. [ 153.598258][ T7745] netlink: 196392 bytes leftover after parsing attributes in process `syz.0.520'. [ 153.601663][ T7598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.637009][ T7598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.656763][ T7598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.676358][ T7598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.685328][ T7598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.796098][ T7753] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 153.803227][ T7753] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 153.857830][ T7753] netlink: 132 bytes leftover after parsing attributes in process `syz.3.523'. [ 153.992528][ T7482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.019140][ T7482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.097344][ T7480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.116227][ T7480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.629823][ T7784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.532'. [ 154.759248][ T5778] Bluetooth: hci0: command tx timeout [ 155.128728][ T7806] netlink: 203516 bytes leftover after parsing attributes in process `syz.2.537'. [ 155.161144][ T7806] netlink: zone id is out of range [ 155.166334][ T7806] netlink: zone id is out of range [ 155.180366][ T7806] netlink: zone id is out of range [ 155.186096][ T7806] netlink: zone id is out of range [ 155.204027][ T7808] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 155.207722][ T7806] netlink: zone id is out of range [ 155.217313][ T7804] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.536'. [ 155.226956][ T7806] netlink: zone id is out of range [ 155.259305][ T7808] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.538'. [ 155.661396][ T7822] netlink: 'syz.2.541': attribute type 21 has an invalid length. [ 155.689395][ T7822] netlink: 168 bytes leftover after parsing attributes in process `syz.2.541'. [ 155.755618][ T7812] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 155.779666][ T7812] netlink: 2 bytes leftover after parsing attributes in process `syz.3.539'. [ 156.230154][ T7829] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.544'. [ 157.877972][ T7860] syzkaller0: entered promiscuous mode [ 157.899028][ T7860] syzkaller0: entered allmulticast mode [ 158.063738][ T7865] netlink: 'syz.2.555': attribute type 21 has an invalid length. [ 158.086564][ T7865] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.555'. [ 158.132413][ T7866] netlink: 'syz.1.553': attribute type 25 has an invalid length. [ 158.145876][ T7866] netlink: 'syz.1.553': attribute type 29 has an invalid length. [ 158.547375][ T7873] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 158.639676][ T7873] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 158.665573][ T7873] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 158.804403][ T7882] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.557'. [ 158.814057][ T7882] net_ratelimit: 323 callbacks suppressed [ 158.814070][ T7882] openvswitch: netlink: IP tunnel dst address not specified [ 161.559930][ T7873] netlink: 'syz.2.557': attribute type 29 has an invalid length. [ 161.795619][ T7884] netlink: 132 bytes leftover after parsing attributes in process `syz.1.561'. [ 161.818798][ T7886] netlink: 38831 bytes leftover after parsing attributes in process `syz.2.562'. [ 162.947495][ T7901] netlink: 'syz.1.566': attribute type 2 has an invalid length. [ 162.980854][ T7901] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 162.988623][ T7901] netlink: 'syz.1.566': attribute type 8 has an invalid length. [ 162.997374][ T7901] netlink: 44 bytes leftover after parsing attributes in process `syz.1.566'. [ 163.104962][ T7903] netlink: 128 bytes leftover after parsing attributes in process `syz.0.568'. [ 163.175335][ T7903] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 163.227382][ T7915] netlink: 15998 bytes leftover after parsing attributes in process `syz.2.570'. [ 163.500269][ T7926] netlink: 132 bytes leftover after parsing attributes in process `syz.0.575'. [ 163.888770][ T7936] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 163.897685][ T7936] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 164.974682][ T7966] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.586'. [ 164.988102][ T7968] netlink: 'syz.0.587': attribute type 5 has an invalid length. [ 165.155452][ T7974] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.590'. [ 165.203775][ T7974] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 165.320209][ T7988] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.593'. [ 165.454197][ T7990] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 165.512370][ T7997] netlink: 208064 bytes leftover after parsing attributes in process `syz.3.597'. [ 165.512867][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.545826][ T7990] team0: entered promiscuous mode [ 165.553218][ T7997] netlink: 'syz.3.597': attribute type 1 has an invalid length. [ 165.557631][ T7990] team_slave_1: entered promiscuous mode [ 165.568170][ T7990] bond0: (slave team0): Enslaving as an active interface with an up link [ 165.843631][ T8008] syzkaller0: refused to change device tx_queue_len [ 166.205992][ T8016] netlink: 'syz.1.601': attribute type 21 has an invalid length. [ 168.060416][ T8072] netlink: 'syz.3.617': attribute type 1 has an invalid length. [ 168.082804][ T8072] netlink: 'syz.3.617': attribute type 3 has an invalid length. [ 168.100518][ T8072] netlink: 132 bytes leftover after parsing attributes in process `syz.3.617'. [ 168.514487][ T8079] netlink: 'syz.3.621': attribute type 1 has an invalid length. [ 168.524556][ T8079] netlink: 191376 bytes leftover after parsing attributes in process `syz.3.621'. [ 168.636162][ T8086] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.620'. [ 168.672833][ T8087] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 168.729781][ T8087] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.622'. [ 168.954658][ T8095] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 168.975866][ T8095] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.625'. [ 169.010726][ T8095] netlink: 'syz.1.625': attribute type 1 has an invalid length. [ 169.011881][ T8098] delete_channel: no stack [ 169.059378][ T8098] delete_channel: no stack [ 169.511600][ T8107] @ÿ: renamed from bond_slave_0 (while UP) [ 170.255036][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.0.634'. [ 170.934969][ T8148] netlink: 'syz.3.639': attribute type 2 has an invalid length. [ 170.984976][ T8148] netlink: 'syz.3.639': attribute type 1 has an invalid length. [ 171.038625][ T8148] netlink: 9 bytes leftover after parsing attributes in process `syz.3.639'. [ 171.098768][ T8149] netlink: 'syz.3.639': attribute type 39 has an invalid length. [ 171.647410][ T8161] syzkaller0: entered promiscuous mode [ 171.653031][ T8161] syzkaller0: entered allmulticast mode [ 174.444968][ T8184] syzkaller0: entered promiscuous mode [ 174.459925][ T8184] syzkaller0: entered allmulticast mode [ 175.046271][ T8213] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 175.625292][ T8207] delete_channel: no stack [ 176.618520][ T8230] can: request_module (can-proto-5) failed. [ 176.676433][ T8230] can: request_module (can-proto-5) failed. [ 176.905491][ T8241] netlink: 'syz.1.660': attribute type 29 has an invalid length. [ 177.021881][ T8241] netlink: 'syz.1.660': attribute type 29 has an invalid length. [ 177.039920][ T8242] netlink: 'syz.1.660': attribute type 29 has an invalid length. [ 177.047946][ T8243] netlink: 'syz.1.660': attribute type 29 has an invalid length. [ 177.737597][ T8245] netlink: 703 bytes leftover after parsing attributes in process `syz.1.661'. [ 177.957977][ T8249] netlink: 'syz.1.662': attribute type 3 has an invalid length. [ 178.318109][ T8256] netlink: 'syz.3.665': attribute type 3 has an invalid length. [ 178.336306][ T8256] netlink: 'syz.3.665': attribute type 1 has an invalid length. [ 178.346067][ T8256] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.665'. [ 178.983857][ T8271] netlink: 'syz.3.668': attribute type 10 has an invalid length. [ 179.095485][ T8271] dummy0: entered promiscuous mode [ 179.125459][ T8271] dummy0: entered allmulticast mode [ 179.152507][ T8271] team0: Port device dummy0 added [ 180.179824][ T8312] netlink: 'syz.0.679': attribute type 46 has an invalid length. [ 180.188163][ T8312] netlink: 'syz.0.679': attribute type 46 has an invalid length. [ 180.565194][ T8325] veth0_vlan: entered allmulticast mode [ 180.881343][ T8340] netlink: 128 bytes leftover after parsing attributes in process `syz.3.686'. [ 181.411259][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.693'. [ 183.002112][ T8437] validate_nla: 4 callbacks suppressed [ 183.002165][ T8437] netlink: 'syz.0.714': attribute type 10 has an invalid length. [ 183.253008][ T8447] netlink: 'syz.3.717': attribute type 29 has an invalid length. [ 183.430879][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.439824][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.472988][ T8452] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.493996][ T8452] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.588190][ T8459] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 183.658402][ T8459] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 183.674062][ T8460] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 183.696504][ T8459] netlink: 'syz.2.722': attribute type 29 has an invalid length. [ 183.765033][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 183.779524][ T8464] netlink: 40 bytes leftover after parsing attributes in process `syz.3.723'. [ 183.793913][ T8464] netlink: 13 bytes leftover after parsing attributes in process `syz.3.723'. [ 184.040972][ T8477] netlink: 'syz.2.724': attribute type 21 has an invalid length. [ 184.587088][ T8484] netlink: 'syz.1.728': attribute type 2 has an invalid length. [ 184.608518][ T8484] netlink: 'syz.1.728': attribute type 1 has an invalid length. [ 184.638597][ T8484] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.728'. [ 184.965687][ T8503] pim6reg1: entered promiscuous mode [ 184.996465][ T8503] pim6reg1: entered allmulticast mode [ 185.592950][ T8531] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.740'. [ 186.029706][ T8550] netlink: 'syz.1.746': attribute type 10 has an invalid length. [ 186.077947][ T8550] team0: Port device geneve1 added [ 186.291211][ T8550] team0: Port device macvlan0 added [ 186.852002][ T8568] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.752'. [ 187.110233][ T8582] netlink: 6 bytes leftover after parsing attributes in process `syz.1.756'. [ 187.125048][ T8582] openvswitch: netlink: Flow actions attr not present in new flow. [ 187.386477][ T8590] netlink: 16154 bytes leftover after parsing attributes in process `syz.0.760'. [ 187.523147][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.761'. [ 187.554681][ T8588] netlink: 40 bytes leftover after parsing attributes in process `syz.2.761'. [ 189.032451][ T8620] validate_nla: 3 callbacks suppressed [ 189.032469][ T8620] netlink: 'syz.1.769': attribute type 1 has an invalid length. [ 189.104544][ T8620] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.769'. [ 189.534697][ T8633] netlink: 'syz.3.771': attribute type 3 has an invalid length. [ 189.565612][ T8633] netlink: 132 bytes leftover after parsing attributes in process `syz.3.771'. [ 190.512592][ T8646] netlink: 703 bytes leftover after parsing attributes in process `syz.3.776'. [ 190.552874][ T8646] netlink: 15999 bytes leftover after parsing attributes in process `syz.3.776'. [ 190.754197][ T8656] netlink: 'syz.0.777': attribute type 10 has an invalid length. [ 190.791234][ T8656] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.777'. [ 190.884187][ T8663] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.781'. [ 190.910348][ T8651] tap0: tun_chr_ioctl cmd 1074025692 [ 190.982444][ T8656] netlink: 128 bytes leftover after parsing attributes in process `syz.0.777'. [ 191.008320][ T8656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 191.037623][ T8666] netlink: 'syz.3.782': attribute type 12 has an invalid length. [ 191.056868][ T8666] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.782'. [ 191.119125][ T8669] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.782'. [ 191.319498][ T5088] Bluetooth: hci1: command 0x0406 tx timeout [ 191.325922][ T5088] Bluetooth: hci2: command 0x0406 tx timeout [ 191.328621][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 192.105694][ T8687] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.788'. [ 194.375183][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.381658][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.405309][ T8766] ref_ctr_offset mismatch. inode: 0x18c offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 195.430998][ T8772] __nla_validate_parse: 2 callbacks suppressed [ 195.431011][ T8772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.812'. [ 195.455697][ T8772] netlink: 132 bytes leftover after parsing attributes in process `syz.2.812'. [ 195.550828][ T8776] netlink: 'syz.3.814': attribute type 10 has an invalid length. [ 195.558871][ T8776] netlink: 40 bytes leftover after parsing attributes in process `syz.3.814'. [ 195.571129][ T8776] ipvlan1: entered promiscuous mode [ 195.576592][ T8776] ipvlan1: entered allmulticast mode [ 195.613816][ T8776] bridge0: port 5(ipvlan1) entered blocking state [ 195.627928][ T8776] bridge0: port 5(ipvlan1) entered disabled state [ 195.688209][ T8776] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 195.757167][ T8776] syz.3.814 (8776) used greatest stack depth: 18600 bytes left [ 196.949855][ T8798] netlink: 'syz.1.822': attribute type 21 has an invalid length. [ 198.167212][ T8824] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.831'. [ 198.183389][ T8824] netlink: 6320 bytes leftover after parsing attributes in process `syz.3.831'. [ 198.242410][ T8831] netlink: 'syz.0.832': attribute type 9 has an invalid length. [ 198.254358][ T8831] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.832'. [ 200.314270][ T8872] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 200.522847][ T8877] netlink: 'syz.3.847': attribute type 10 has an invalid length. [ 200.597945][ T8873] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.844'. [ 200.609646][ T8873] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.844'. [ 201.685885][ T8901] can: request_module (can-proto-5) failed. [ 204.202701][ T8916] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 204.625052][ T8920] delete_channel: no stack [ 204.974103][ T8948] netlink: 10 bytes leftover after parsing attributes in process `syz.2.864'. [ 205.584443][ T8966] netlink: 'syz.3.859': attribute type 4 has an invalid length. [ 206.722875][ T8999] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.879'. [ 206.943863][ T9009] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.882'. [ 206.975998][ T9009] netlink: zone id is out of range [ 206.983151][ T9009] netlink: zone id is out of range [ 206.998668][ T9009] netlink: zone id is out of range [ 207.018816][ T9009] netlink: zone id is out of range [ 207.028653][ T9009] netlink: zone id is out of range [ 207.039827][ T9009] netlink: zone id is out of range [ 207.050115][ T9009] netlink: zone id is out of range [ 207.055281][ T9009] netlink: zone id is out of range [ 207.092227][ T9009] netlink: zone id is out of range [ 207.097363][ T9009] netlink: zone id is out of range [ 207.142535][ T9016] netlink: 'syz.1.884': attribute type 33 has an invalid length. [ 207.168224][ T9016] netlink: 160 bytes leftover after parsing attributes in process `syz.1.884'. [ 208.537839][ T9056] netlink: 'syz.1.895': attribute type 13 has an invalid length. [ 208.560783][ T9059] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.896'. [ 208.590106][ T9056] netlink: 168 bytes leftover after parsing attributes in process `syz.1.895'. [ 208.600220][ T9059] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.896'. [ 209.087955][ T9076] netlink: 'syz.3.901': attribute type 21 has an invalid length. [ 209.113650][ T9076] netlink: 164 bytes leftover after parsing attributes in process `syz.3.901'. [ 209.502659][ T9084] netlink: 44 bytes leftover after parsing attributes in process `syz.0.903'. [ 210.434255][ T9111] netlink: 'syz.1.911': attribute type 2 has an invalid length. [ 210.462011][ T9111] netlink: 'syz.1.911': attribute type 11 has an invalid length. [ 210.485732][ T9111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.911'. [ 211.564992][ T9144] tap0: tun_chr_ioctl cmd 1074025677 [ 211.579274][ T9144] tap0: linktype set to 805 [ 212.078417][ T9163] netlink: 'syz.3.926': attribute type 12 has an invalid length. [ 212.097527][ T9163] netlink: 'syz.3.926': attribute type 11 has an invalid length. [ 212.115658][ T9163] netlink: 188816 bytes leftover after parsing attributes in process `syz.3.926'. [ 212.417602][ T9175] netlink: 'syz.3.931': attribute type 21 has an invalid length. [ 212.425581][ T9175] netlink: 156 bytes leftover after parsing attributes in process `syz.3.931'. [ 212.501210][ T9179] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.930'. [ 212.526503][ T9179] net_ratelimit: 42 callbacks suppressed [ 212.526519][ T9179] openvswitch: netlink: Key type 4112 is out of range max 32 [ 212.634992][ T9179] netlink: 'syz.0.930': attribute type 21 has an invalid length. [ 212.643515][ T9179] netlink: 152 bytes leftover after parsing attributes in process `syz.0.930'. [ 212.828600][ T9197] netlink: 'syz.2.937': attribute type 21 has an invalid length. [ 212.856157][ T9197] netlink: 128 bytes leftover after parsing attributes in process `syz.2.937'. [ 212.921589][ T9198] netlink: 'syz.2.937': attribute type 21 has an invalid length. [ 212.937460][ T9198] netlink: 128 bytes leftover after parsing attributes in process `syz.2.937'. [ 214.040557][ T9249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.951'. [ 216.827437][ T9258] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.953'. [ 217.078760][ T9269] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 217.117282][ T9269] team0: Device vxcan1 is of different type [ 217.706513][ T9286] netlink: 'syz.0.962': attribute type 10 has an invalid length. [ 217.723843][ T9286] veth0_macvtap: left promiscuous mode [ 217.990846][ T9285] netlink: 'syz.0.962': attribute type 7 has an invalid length. [ 218.264641][ T9297] netlink: 'syz.3.966': attribute type 3 has an invalid length. [ 218.306818][ T9297] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.966'. [ 218.673311][ T9312] netlink: 167844 bytes leftover after parsing attributes in process `syz.3.970'. [ 218.963431][ T9329] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.975'. [ 218.979244][ T9329] netlink: 160 bytes leftover after parsing attributes in process `syz.2.975'. [ 219.096787][ T9331] netlink: 16222 bytes leftover after parsing attributes in process `syz.2.975'. [ 219.106955][ T9331] netlink: 160 bytes leftover after parsing attributes in process `syz.2.975'. [ 219.191099][ T9330] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.974'. [ 219.213935][ T9330] netlink: 16126 bytes leftover after parsing attributes in process `syz.3.974'. [ 219.367607][ T9344] netlink: 'syz.2.977': attribute type 4 has an invalid length. [ 219.376631][ T9344] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.977'. [ 221.210941][ T9375] tun0: tun_chr_ioctl cmd 2147767507 [ 221.239838][ T9375] tun0: tun_chr_ioctl cmd 1074025681 [ 222.319700][ T9386] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.984'. [ 222.330444][ T9386] bridge_slave_1: default FDB implementation only supports local addresses [ 222.500819][ T9402] netlink: 'syz.3.992': attribute type 1 has an invalid length. [ 222.703594][ T9394] veth1_macvtap: left promiscuous mode [ 222.725676][ T9394] macsec0: entered allmulticast mode [ 223.511770][ T9434] @0Ùÿÿ: renamed from bond_slave_1 (while UP) [ 223.797491][ T9439] netlink: 'syz.3.1005': attribute type 9 has an invalid length. [ 223.843174][ T9439] __nla_validate_parse: 3 callbacks suppressed [ 223.843189][ T9439] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1005'. [ 223.937693][ T9449] netlink: 'syz.1.1009': attribute type 10 has an invalid length. [ 224.029820][ T9451] netlink: 'syz.1.1009': attribute type 28 has an invalid length. [ 224.034740][ T9443] can: request_module (can-proto-5) failed. [ 224.055933][ T9451] netlink: 'syz.1.1009': attribute type 29 has an invalid length. [ 224.085686][ T9451] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1009'. [ 224.886532][ T9470] netlink: 'syz.1.1016': attribute type 10 has an invalid length. [ 224.894826][ T9479] netlink: 'syz.3.1018': attribute type 29 has an invalid length. [ 224.917395][ T9470] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1016'. [ 224.942766][ T9470] batman_adv: batadv0: Adding interface: virt_wifi0 [ 224.960314][ T9470] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.033936][ T9470] batman_adv: batadv0: Interface activated: virt_wifi0 [ 225.055472][ T9479] netlink: 'syz.3.1018': attribute type 29 has an invalid length. [ 225.108154][ T9486] netlink: 'syz.0.1020': attribute type 29 has an invalid length. [ 225.260147][ T9479] netlink: 'syz.3.1018': attribute type 29 has an invalid length. [ 225.272635][ T9483] netlink: 'syz.3.1018': attribute type 29 has an invalid length. [ 225.350324][ T9486] netlink: 49920 bytes leftover after parsing attributes in process `syz.0.1020'. [ 225.414849][ T9494] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1021'. [ 225.656091][ T9504] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1022'. [ 225.697617][ T9504] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1022'. [ 225.828345][ T9500] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1021'. [ 225.837549][ T9500] batadv0: entered promiscuous mode [ 225.842861][ T9500] batadv0: entered allmulticast mode [ 225.849385][ T9500] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 226.018397][ T9507] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.1025'. [ 226.064105][ T9509] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1024'. [ 227.540274][ T9553] team0: Port device dummy0 added [ 228.028914][ T9568] Â: renamed from pim6reg1 [ 228.292821][ T9581] .`: renamed from bond0 (while UP) [ 229.614319][ T9630] validate_nla: 24 callbacks suppressed [ 229.614338][ T9630] netlink: 'syz.2.1046': attribute type 29 has an invalid length. [ 229.678080][ T9630] netlink: 'syz.2.1046': attribute type 29 has an invalid length. [ 230.344285][ T9630] netlink: 'syz.2.1046': attribute type 29 has an invalid length. [ 230.357517][ T9636] netlink: 'syz.0.1047': attribute type 10 has an invalid length. [ 230.369145][ T9636] __nla_validate_parse: 3 callbacks suppressed [ 230.369159][ T9636] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1047'. [ 230.432075][ T9643] netlink: 'syz.3.1048': attribute type 3 has an invalid length. [ 230.440285][ T9643] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1048'. [ 230.450288][ T9631] netlink: 'syz.2.1046': attribute type 29 has an invalid length. [ 230.667811][ T9651] netlink: 'syz.1.1051': attribute type 2 has an invalid length. [ 230.686394][ T9651] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.1051'. [ 230.773879][ T9657] netlink: 'syz.3.1053': attribute type 39 has an invalid length. [ 230.838601][ T9657] bridge0: port 3(syz_tun) entered disabled state [ 230.976822][ T9657] syz_tun (unregistering): left allmulticast mode [ 230.992389][ T9665] netlink: 21 bytes leftover after parsing attributes in process `syz.1.1056'. [ 231.029123][ T9657] syz_tun (unregistering): left promiscuous mode [ 231.034418][ T9665] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 231.041765][ T9657] bridge0: port 3(syz_tun) entered disabled state [ 231.341034][ T9688] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 231.418400][ T9692] raw_sendmsg: syz.3.1061 forgot to set AF_INET. Fix it! [ 231.559575][ T9688] netlink: 'syz.0.1062': attribute type 29 has an invalid length. [ 232.006443][ T9716] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1065'. [ 232.017281][ T9716] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1065'. [ 232.758608][ T9710] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1065'. [ 232.845189][ T9704] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1065'. [ 233.440012][ T9743] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.1075'. [ 233.577507][ T9755] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.1079'. [ 233.619926][ T9755] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 233.943163][ T9766] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 234.548633][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.594704][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.632795][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.669462][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.700376][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.718538][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.744327][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.759569][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.804894][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.844681][ T7483] hsr_slave_0: left promiscuous mode [ 234.859314][ T9782] netlink: 'syz.2.1084': attribute type 11 has an invalid length. [ 234.879207][ T9782] validate_nla: 8 callbacks suppressed [ 234.879223][ T9782] netlink: 'syz.2.1084': attribute type 4 has an invalid length. [ 234.922591][ T9782] netlink: 'syz.2.1084': attribute type 5 has an invalid length. [ 234.933265][ T7483] hsr_slave_1: left promiscuous mode [ 234.947880][ T7483] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.956401][ T7483] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.970412][ T7483] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.977857][ T7483] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.991011][ T7483] batman_adv: batadv0: Removing interface: veth0_vlan [ 235.024596][ T7483] veth0_macvtap: left promiscuous mode [ 235.036034][ T7483] veth1_vlan: left promiscuous mode [ 236.878651][ T7483] team0 (unregistering): Port device team_slave_1 removed [ 236.995092][ T7483] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.052267][ T7483] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.354565][ T7483] bond0 (unregistering): (slave team0): Releasing backup interface [ 237.390903][ T7483] bond0 (unregistering): Released all slaves [ 237.434985][ T9786] __nla_validate_parse: 1 callbacks suppressed [ 237.435008][ T9786] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1086'. [ 237.661953][ T9777] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1083'. [ 238.211296][ T9821] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1093'. [ 238.272260][ T9821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 238.897487][ T9831] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1092'. [ 238.925597][ T9831] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1092'. [ 238.938689][ T9828] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1092'. [ 238.976451][ T9831] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1092'. [ 238.995375][ T9828] netlink: 'syz.2.1092': attribute type 10 has an invalid length. [ 239.019075][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1092'. [ 239.039218][ T9828] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 239.046669][ T9828] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.088450][ T9828] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 239.122002][ T9834] netlink: 'syz.3.1097': attribute type 10 has an invalid length. [ 239.189624][ T9834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.220770][ T9834] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 239.780836][ T9840] lo: entered allmulticast mode [ 239.849858][ T9856] lo: entered promiscuous mode [ 239.854726][ T9856] lo: left allmulticast mode [ 240.115651][ T9866] netlink: 4068 bytes leftover after parsing attributes in process `syz.2.1105'. [ 241.544173][ T9877] netlink: 'syz.0.1108': attribute type 39 has an invalid length. [ 243.258704][ T9877] hsr_slave_1 (unregistering): left promiscuous mode [ 243.401241][ T9886] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1110'. [ 243.687762][ T9893] netlink: 'syz.1.1111': attribute type 39 has an invalid length. [ 243.941933][ T9905] netlink: 'syz.2.1115': attribute type 3 has an invalid length. [ 243.962182][ T9905] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1115'. [ 244.115539][ T9907] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1116'. [ 244.484209][ T9916] netlink: 'syz.1.1118': attribute type 6 has an invalid length. [ 244.492240][ T9916] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1118'. [ 244.983614][ T9934] sctp: [Deprecated]: syz.2.1124 (pid 9934) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.983614][ T9934] Use struct sctp_sack_info instead [ 245.025778][ T9935] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1123'. [ 245.048323][ T9935] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1123'. [ 245.069388][ T9932] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1123'. [ 245.081122][ T9937] netlink: 'syz.1.1125': attribute type 10 has an invalid length. [ 245.088990][ T9937] netlink: 65015 bytes leftover after parsing attributes in process `syz.1.1125'. [ 245.288196][ T9945] sctp: [Deprecated]: syz.1.1127 (pid 9945) Use of int in max_burst socket option deprecated. [ 245.288196][ T9945] Use struct sctp_assoc_value instead [ 245.663153][ T9959] syzkaller0: entered promiscuous mode [ 245.689242][ T9959] syzkaller0: entered allmulticast mode [ 246.127383][ T9991] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.1139'. [ 246.515994][T10004] netlink: 'syz.2.1142': attribute type 3 has an invalid length. [ 246.539296][T10004] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1142'. [ 248.439442][ T9991] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1139'. [ 251.163951][T10040] can: request_module (can-proto-5) failed. [ 252.131779][T10089] netlink: 'syz.3.1168': attribute type 21 has an invalid length. [ 252.143924][T10089] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.152207][T10089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.159491][T10089] IPv6: NLM_F_CREATE should be set when creating new route [ 252.166764][T10089] IPv6: NLM_F_CREATE should be set when creating new route [ 252.174073][T10089] IPv6: NLM_F_CREATE should be set when creating new route [ 252.182950][T10089] netlink: 'syz.3.1168': attribute type 21 has an invalid length. [ 252.191162][T10089] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.202276][T10084] netlink: 'syz.0.1167': attribute type 27 has an invalid length. [ 252.213473][T10084] netlink: 'syz.0.1167': attribute type 4 has an invalid length. [ 252.226212][T10084] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1167'. [ 252.462732][T10100] netlink: 'syz.1.1171': attribute type 21 has an invalid length. [ 252.489110][T10100] IPv6: NLM_F_CREATE should be specified when creating new route [ 252.585479][T10102] netlink: 'syz.0.1173': attribute type 29 has an invalid length. [ 252.640237][T10109] netlink: 'syz.0.1173': attribute type 29 has an invalid length. [ 252.664472][T10102] netlink: 'syz.0.1173': attribute type 29 has an invalid length. [ 252.791329][T10102] netlink: 'syz.0.1173': attribute type 21 has an invalid length. [ 252.808374][T10102] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1173'. [ 252.994592][T10117] netlink: 1042 bytes leftover after parsing attributes in process `syz.2.1176'. [ 253.054540][T10119] netlink: 'syz.0.1177': attribute type 28 has an invalid length. [ 253.253922][T10126] tap0: tun_chr_ioctl cmd 1074025677 [ 253.264763][T10126] tap0: linktype set to 778 [ 253.487623][T10137] netlink: 196 bytes leftover after parsing attributes in process `syz.1.1183'. [ 253.512242][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 253.562814][T10141] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 253.624030][T10135] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 253.666843][T10140] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1182'. [ 253.899895][T10150] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1187'. [ 254.126490][T10152] netlink: 208052 bytes leftover after parsing attributes in process `syz.0.1188'. [ 254.187491][T10157] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1189'. [ 255.904888][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911408][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.730233][T10165] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 256.751606][T10165] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 259.417497][T10228] validate_nla: 4 callbacks suppressed [ 259.417542][T10228] netlink: 'syz.3.1207': attribute type 29 has an invalid length. [ 259.427588][T10232] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1209'. [ 259.460931][T10233] netlink: 'syz.3.1207': attribute type 29 has an invalid length. [ 259.650549][T10223] syzkaller0: entered promiscuous mode [ 259.656306][T10223] syzkaller0: entered allmulticast mode [ 259.664008][T10228] netlink: 'syz.3.1207': attribute type 29 has an invalid length. [ 259.678220][T10234] netlink: 'syz.3.1207': attribute type 21 has an invalid length. [ 259.686435][T10234] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1207'. [ 261.175600][T10287] netlink: 'syz.2.1223': attribute type 29 has an invalid length. [ 261.197292][T10292] netlink: 'syz.2.1223': attribute type 29 has an invalid length. [ 261.200594][T10287] netlink: 'syz.2.1223': attribute type 29 has an invalid length. [ 261.333368][T10293] netlink: 'syz.3.1224': attribute type 9 has an invalid length. [ 261.346263][T10287] netlink: 'syz.2.1223': attribute type 21 has an invalid length. [ 261.367877][T10293] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1224'. [ 261.377560][T10287] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1223'. [ 261.839683][T10301] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1226'. [ 263.715500][T10361] netlink: 'syz.2.1242': attribute type 2 has an invalid length. [ 263.731322][T10361] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.1242'. [ 263.784806][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.794924][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.804418][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.813862][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.823263][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.832828][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.842257][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.851727][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.861175][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 263.870690][T10355] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 264.701946][T10366] bridge0: port 4(hsr0) entered disabled state [ 264.708342][T10366] bridge0: port 2(team0) entered disabled state [ 264.715056][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.732293][T10366] bridge0: entered allmulticast mode [ 264.875695][T10367] hsr0: left allmulticast mode [ 264.882782][T10367] hsr_slave_0: left allmulticast mode [ 264.890860][T10367] hsr_slave_1: left allmulticast mode [ 264.897396][T10367] bridge0: port 4(hsr0) entered disabled state [ 264.922275][T10367] team0: left allmulticast mode [ 264.952873][T10367] team_slave_0: left allmulticast mode [ 264.958758][T10367] team_slave_1: left allmulticast mode [ 264.968507][T10367] dummy0: left allmulticast mode [ 264.981377][T10367] bridge0: port 2(team0) entered disabled state [ 264.996044][T10367] bridge_slave_0: left promiscuous mode [ 265.003018][T10367] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.051869][T10383] netlink: 'syz.0.1248': attribute type 9 has an invalid length. [ 265.060364][T10383] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1248'. [ 265.520910][T10386] netlink: 'syz.1.1249': attribute type 3 has an invalid length. [ 265.533253][T10388] netlink: 'syz.2.1250': attribute type 3 has an invalid length. [ 265.549550][T10386] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1249'. [ 265.570673][T10388] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1250'. [ 265.760116][T10391] netlink: 'syz.3.1251': attribute type 26 has an invalid length. [ 265.768160][T10391] netlink: 62827 bytes leftover after parsing attributes in process `syz.3.1251'. [ 266.009843][T10404] netlink: 'syz.3.1253': attribute type 4 has an invalid length. [ 266.020665][T10407] netlink: 'syz.1.1255': attribute type 21 has an invalid length. [ 266.033703][T10404] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1253'. [ 266.165844][T10404] .`: renamed from bond0 (while UP) [ 266.247900][T10418] netlink: 'syz.0.1259': attribute type 19 has an invalid length. [ 266.295196][T10418] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1259'. [ 266.317764][T10427] netlink: 'syz.1.1261': attribute type 8 has an invalid length. [ 266.326159][T10427] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.1261'. [ 266.341092][T10418] netlink: 'syz.0.1259': attribute type 3 has an invalid length. [ 266.359258][T10418] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1259'. [ 267.365896][T10452] À: port 1(vlan0) entered blocking state [ 267.386965][T10452] À: port 1(vlan0) entered disabled state [ 267.413487][T10452] vlan0: entered allmulticast mode [ 267.458426][T10452] vlan0: entered promiscuous mode [ 267.493270][T10457] À: port 1(vlan0) entered blocking state [ 267.499172][T10457] À: port 1(vlan0) entered forwarding state [ 267.646772][T10462] netlink: 'syz.0.1276': attribute type 33 has an invalid length. [ 267.654852][T10462] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1276'. [ 267.672025][T10463] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1276'. [ 271.505886][T10526] can: request_module (can-proto-5) failed. [ 271.845318][T10526] can: request_module (can-proto-5) failed. [ 271.931388][T10528] can: request_module (can-proto-5) failed. [ 272.618045][T10550] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1299'. [ 273.239269][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 273.298514][T10557] validate_nla: 1 callbacks suppressed [ 273.298562][T10557] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 273.478847][T10557] netlink: 'syz.1.1301': attribute type 29 has an invalid length. [ 273.852117][T10564] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1302'. [ 273.914154][T10566] netlink: 64535 bytes leftover after parsing attributes in process `syz.1.1302'. [ 274.069299][T10570] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1304'. [ 274.117022][T10570] net_ratelimit: 3126 callbacks suppressed [ 274.117291][T10570] openvswitch: netlink: Key type 29 is not supported [ 274.655225][T10584] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1306'. [ 275.217514][T10588] netlink: 'syz.0.1308': attribute type 3 has an invalid length. [ 275.239854][T10588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1308'. [ 277.388374][T10664] syzkaller0: entered promiscuous mode [ 277.410584][T10664] syzkaller0: entered allmulticast mode [ 279.184129][T10712] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1342'. [ 279.362096][T10721] netlink: 'syz.2.1345': attribute type 10 has an invalid length. [ 279.373581][T10721] team0: Port device wlan1 added [ 279.558905][T10726] netlink: 'syz.3.1347': attribute type 41 has an invalid length. [ 279.589890][T10726] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1347'. [ 279.723841][T10730] netlink: 'syz.0.1349': attribute type 21 has an invalid length. [ 279.732015][T10730] netlink: 'syz.0.1349': attribute type 4 has an invalid length. [ 279.749227][T10730] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1349'. [ 279.841685][T10735] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1351'. [ 279.879376][T10735] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 280.382237][T10749] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1355'. [ 280.533810][T10755] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1356'. [ 280.567741][T10757] netlink: 26 bytes leftover after parsing attributes in process `syz.0.1356'. [ 280.699518][T10740] netlink: 'syz.1.1353': attribute type 13 has an invalid length. [ 280.707422][T10740] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1353'. [ 284.485085][T10820] netlink: 'syz.1.1373': attribute type 1 has an invalid length. [ 285.775992][T10851] netlink: 'syz.0.1378': attribute type 29 has an invalid length. [ 285.838815][T10851] netlink: 'syz.0.1378': attribute type 29 has an invalid length. [ 286.900547][T10878] netlink: 36515 bytes leftover after parsing attributes in process `syz.0.1390'. [ 287.157308][T10893] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1394'. [ 288.431668][T10944] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1410'. [ 288.610659][T10950] : port 1(gretap0) entered blocking state [ 288.617445][T10950] : port 1(gretap0) entered disabled state [ 288.624167][T10950] gretap0: entered allmulticast mode [ 288.634173][T10950] gretap0: entered promiscuous mode [ 288.882852][T10970] netlink: 'syz.2.1418': attribute type 29 has an invalid length. [ 288.905637][T10970] netlink: 'syz.2.1418': attribute type 29 has an invalid length. [ 288.952170][T10969] netlink: 'syz.2.1418': attribute type 29 has an invalid length. [ 288.962308][T10973] netlink: 'syz.0.1419': attribute type 21 has an invalid length. [ 288.972641][T10973] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 288.979900][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 288.987187][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 288.994469][T10973] IPv6: NLM_F_CREATE should be set when creating new route [ 289.876546][T11000] IPv6: NLM_F_CREATE should be specified when creating new route [ 290.441846][T11008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1427'. [ 290.810710][T11008] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1427'. [ 291.541823][T11055] vcan0: entered allmulticast mode [ 291.568834][T11055] netlink: 'syz.1.1439': attribute type 10 has an invalid length. [ 291.620751][ T5782] Bluetooth: hci3: unexpected event 0x09 length: 15 > 3 [ 291.650542][T11055] veth0_macvtap: left promiscuous mode [ 291.842080][T11058] netlink: 'syz.3.1441': attribute type 33 has an invalid length. [ 291.865810][T11058] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1441'. [ 291.911953][T11065] netlink: 'syz.1.1439': attribute type 6 has an invalid length. [ 291.929940][T11065] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1439'. [ 294.000535][T11094] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 294.020869][T11093] netlink: 'syz.0.1448': attribute type 3 has an invalid length. [ 294.040358][T11093] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1448'. [ 294.635292][T11120] netlink: 'syz.0.1453': attribute type 12 has an invalid length. [ 294.670225][T11120] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1453'. [ 294.954487][T11129] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1455'. [ 294.967845][T11129] netlink: get zone limit has 4 unknown bytes [ 296.037700][T11150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1461'. [ 296.709298][T11175] netlink: 'syz.0.1467': attribute type 2 has an invalid length. [ 296.731573][T11175] netlink: 'syz.0.1467': attribute type 1 has an invalid length. [ 296.770583][T11175] netlink: 'syz.0.1467': attribute type 8 has an invalid length. [ 296.778652][T11175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1467'. [ 297.255107][T11196] netlink: 'syz.3.1471': attribute type 1 has an invalid length. [ 297.303067][T11196] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1471'. [ 297.340256][T11196] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1471'. [ 297.635504][T11213] tun0: tun_chr_ioctl cmd 1074025681 [ 297.658612][T11209] delete_channel: no stack [ 299.027254][T11239] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1485'. [ 299.046709][T11240] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1483'. [ 299.201771][T11240] team0: Port device dummy0 removed [ 299.241728][T11247] À: mtu less than device minimum [ 299.460934][T11253] netlink: 'syz.2.1489': attribute type 10 has an invalid length. [ 299.819831][T11234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.391438][T11290] tap0: tun_chr_ioctl cmd 1074025681 [ 300.412037][T11290] netlink: 'syz.1.1501': attribute type 10 has an invalid length. [ 300.429690][T11290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.866653][T11290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 300.916649][T11290] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 302.355685][T11323] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.966242][T11340] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1515'. [ 303.033161][T11340] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 305.625015][T11340] syz.1.1515 (11340) used greatest stack depth: 18512 bytes left [ 306.702122][T11395] netlink: 'syz.3.1528': attribute type 10 has an invalid length. [ 306.755863][T11395] nlmon0: entered promiscuous mode [ 306.772066][T11395] team0: Device nlmon0 is of different type [ 306.963024][T11403] netlink: 'syz.1.1529': attribute type 3 has an invalid length. [ 306.989234][T11403] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1529'. [ 307.100259][T11414] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1532'. [ 307.367151][T11423] netlink: 'syz.2.1536': attribute type 21 has an invalid length. [ 307.377035][T11423] IPv6: NLM_F_CREATE should be specified when creating new route [ 307.756091][T11434] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1541'. [ 307.789749][T11434] netlink: zone id is out of range [ 308.628447][T11475] C: renamed from team_slave_0 (while UP) [ 308.646824][T11475] netlink: 'syz.2.1552': attribute type 3 has an invalid length. [ 308.663808][T11475] netlink: 'syz.2.1552': attribute type 1 has an invalid length. [ 308.672363][T11475] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1552'. [ 308.683290][T11475] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 309.569325][T11489] netlink: 'syz.3.1556': attribute type 10 has an invalid length. [ 309.598119][T11489] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1556'. [ 309.644218][T11489] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 309.679925][T11489] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 312.612129][T11565] netlink: 'syz.3.1577': attribute type 2 has an invalid length. [ 312.623754][T11565] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1577'. [ 314.031339][T11581] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1579'. [ 315.013481][T11612] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1587'. [ 315.037122][T11614] netlink: 'syz.3.1589': attribute type 21 has an invalid length. [ 315.058789][T11614] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1589'. [ 315.334949][T11623] netlink: 'syz.2.1590': attribute type 4 has an invalid length. [ 315.344403][T11623] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1590'. [ 315.354618][T11618] netlink: 'syz.3.1589': attribute type 10 has an invalid length. [ 315.369293][T11618] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.1589'. [ 315.734738][T11632] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 317.244437][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.254403][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.527546][T11628] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1591'. [ 317.553622][T11632] netlink: 'syz.0.1592': attribute type 29 has an invalid length. [ 317.702751][T11639] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.1594'. [ 317.724885][T11639] netlink: 4612 bytes leftover after parsing attributes in process `syz.0.1594'. [ 317.747599][T11639] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1594'. [ 317.776363][T11645] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 317.788875][T11645] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 317.822900][T11639] netlink: 'syz.0.1594': attribute type 29 has an invalid length. [ 318.028259][T11651] can: request_module (can-proto-5) failed. [ 318.768783][T11668] netlink: 'syz.2.1602': attribute type 10 has an invalid length. [ 318.796265][T11668] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1602'. [ 319.054094][T11668] À: port 1(vlan0) entered disabled state [ 319.087122][T11668] vlan0 (unregistering): left allmulticast mode [ 319.094955][T11668] vlan0 (unregistering): left promiscuous mode [ 319.101984][T11668] À: port 1(vlan0) entered disabled state [ 321.066397][T11692] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1608'. [ 321.187746][T11708] netlink: 7674 bytes leftover after parsing attributes in process `syz.1.1612'. [ 322.228580][T11748] can: request_module (can-proto-5) failed. [ 322.464392][T11777] netlink: 'syz.2.1628': attribute type 4 has an invalid length. [ 322.482305][T11777] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1628'. [ 323.007159][T11782] netlink: 115020 bytes leftover after parsing attributes in process `syz.3.1632'. [ 323.023511][T11781] netlink: 115020 bytes leftover after parsing attributes in process `syz.3.1632'. [ 323.050977][T11788] netlink: 'syz.1.1634': attribute type 21 has an invalid length. [ 323.058999][T11788] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1634'. [ 323.551882][T11811] netlink: 38831 bytes leftover after parsing attributes in process `syz.3.1639'. [ 323.605630][T11814] netlink: 'syz.2.1641': attribute type 1 has an invalid length. [ 323.655896][T11814] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1641'. [ 323.882422][T11821] netlink: 'syz.1.1643': attribute type 9 has an invalid length. [ 323.891582][T11821] netlink: 184904 bytes leftover after parsing attributes in process `syz.1.1643'. [ 323.900846][T11818] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1642'. [ 324.381250][T11825] netlink: 'syz.3.1644': attribute type 3 has an invalid length. [ 325.565647][T11868] syzkaller0: entered promiscuous mode [ 325.571480][T11868] syzkaller0: entered allmulticast mode [ 325.683112][T11878] netlink: 'syz.3.1661': attribute type 21 has an invalid length. [ 325.693591][T11878] netlink: 'syz.3.1661': attribute type 5 has an invalid length. [ 325.709343][T11880] netlink: 'syz.2.1662': attribute type 21 has an invalid length. [ 330.977590][T11887] netlink: 'syz.2.1663': attribute type 21 has an invalid length. [ 331.095284][T11897] netlink: 'syz.1.1667': attribute type 29 has an invalid length. [ 331.153252][T11897] netlink: 'syz.1.1667': attribute type 29 has an invalid length. [ 331.542614][T11912] syzkaller0: entered promiscuous mode [ 331.548356][T11912] syzkaller0: entered allmulticast mode [ 332.069684][T11939] __nla_validate_parse: 8 callbacks suppressed [ 332.069699][T11939] netlink: 6 bytes leftover after parsing attributes in process `syz.3.1677'. [ 332.091673][T11939] openvswitch: netlink: Flow key attr not present in new flow. [ 332.513359][T11946] tap0: tun_chr_ioctl cmd 1074025684 [ 332.537006][T11946] tap0: tun_chr_ioctl cmd 21731 [ 333.368669][T11981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.417827][T11982] netlink: 'syz.2.1688': attribute type 29 has an invalid length. [ 333.450416][T11982] netlink: 'syz.2.1688': attribute type 29 has an invalid length. [ 333.845248][T11981] netlink: 'syz.2.1688': attribute type 29 has an invalid length. [ 333.893543][T11982] netlink: 'syz.2.1688': attribute type 29 has an invalid length. [ 334.132320][T11995] netlink: 'syz.1.1691': attribute type 4 has an invalid length. [ 334.171510][T11995] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1691'. [ 334.590595][T12012] netlink: 'syz.2.1695': attribute type 10 has an invalid length. [ 334.612810][T12012] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1695'. [ 334.826169][T12017] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 335.436762][T12035] netlink: 'syz.2.1702': attribute type 29 has an invalid length. [ 335.904779][T12058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 335.922784][T12058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 335.967939][T12058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 335.997743][T12060] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.1709'. [ 336.012099][T12062] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1710'. [ 336.022432][T12058] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1707'. [ 336.060874][T12062] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1710'. [ 336.214546][T12069] validate_nla: 5 callbacks suppressed [ 336.214560][T12069] netlink: 'syz.2.1711': attribute type 9 has an invalid length. [ 336.572457][T12083] netlink: 'syz.0.1717': attribute type 2 has an invalid length. [ 336.599400][T12083] netlink: 'syz.0.1717': attribute type 1 has an invalid length. [ 337.885311][T12119] netlink: 'syz.0.1727': attribute type 29 has an invalid length. [ 337.963849][T12119] netlink: 'syz.0.1727': attribute type 29 has an invalid length. [ 338.017634][T12124] netlink: 'syz.0.1727': attribute type 29 has an invalid length. [ 338.049308][T12125] netlink: 'syz.0.1727': attribute type 29 has an invalid length. [ 338.245434][T12119] netlink: 'syz.0.1727': attribute type 29 has an invalid length. [ 338.993805][T12147] __nla_validate_parse: 2 callbacks suppressed [ 338.993842][T12147] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1735'. [ 339.108504][T12147] netlink: 21056 bytes leftover after parsing attributes in process `syz.0.1735'. [ 339.119459][T12147] tipc: Started in network mode [ 339.125226][T12147] tipc: Node identity 1a, cluster identity 4711 [ 339.135741][T12147] tipc: Node number set to 26 [ 339.391323][T12174] netlink: 'syz.2.1742': attribute type 11 has an invalid length. [ 339.398506][T12175] netlink: 'syz.3.1743': attribute type 3 has an invalid length. [ 339.407777][T12174] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1742'. [ 339.410276][T12175] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1743'. [ 339.664730][T12179] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1745'. [ 339.696384][T12179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 340.066645][T12189] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1741'. [ 340.159735][T12196] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1748'. [ 340.510972][T12204] delete_channel: no stack [ 340.892247][T12224] sctp: [Deprecated]: syz.1.1758 (pid 12224) Use of struct sctp_assoc_value in delayed_ack socket option. [ 340.892247][T12224] Use struct sctp_sack_info instead [ 340.937287][T12224] netlink: 14568 bytes leftover after parsing attributes in process `syz.1.1758'. [ 341.122549][T12230] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1760'. [ 342.914507][T12262] delete_channel: no stack [ 343.108533][T12273] validate_nla: 35 callbacks suppressed [ 343.108548][T12273] netlink: 'syz.1.1774': attribute type 2 has an invalid length. [ 343.306786][T12285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.569808][T12296] netlink: 'syz.0.1779': attribute type 9 has an invalid length. [ 344.274043][ T5782] Bluetooth: hci2: ISO packet for unknown connection handle 3869 [ 345.079594][T12354] __nla_validate_parse: 5 callbacks suppressed [ 345.079611][T12354] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1795'. [ 345.704635][T12361] netlink: 'syz.2.1799': attribute type 10 has an invalid length. [ 345.764727][T12361] team0: Device hsr_slave_0 failed to register rx_handler [ 348.008328][T12394] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1809'. [ 348.054722][T12399] netlink: 'syz.1.1810': attribute type 2 has an invalid length. [ 348.069400][T12399] netlink: 'syz.1.1810': attribute type 8 has an invalid length. [ 348.087158][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1810'. [ 348.354148][T12405] netlink: 'syz.3.1811': attribute type 153 has an invalid length. [ 348.381389][T12405] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1811'. [ 349.513385][T12429] netlink: 'syz.2.1819': attribute type 4 has an invalid length. [ 351.711699][ T7474] tipc: Subscription rejected, illegal request [ 353.561001][T12482] tap0: tun_chr_ioctl cmd 35108 [ 354.899734][T12552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1867'. [ 354.949094][T12552] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1867'. [ 354.982024][T12559] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1870'. [ 355.065930][T12559] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.083459][T12559] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.163408][T12559] .` (unregistering): (slave netdevsim0): Releasing backup interface [ 355.186777][T12559] .` (unregistering): (slave bridge_slave_1): Releasing backup interface [ 355.204747][T12559] .` (unregistering): (slave macvlan0): Releasing backup interface [ 355.215646][T12559] veth1_vlan: left allmulticast mode [ 355.247182][T12559] .` (unregistering): (slave batadv0): Releasing backup interface [ 355.260239][T12559] .` (unregistering): Released all slaves [ 355.269851][T12557] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1867'. [ 355.792495][T12587] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1879'. [ 355.881043][T12595] netlink: 'syz.1.1881': attribute type 10 has an invalid length. [ 355.896801][T12595] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1881'. [ 355.923865][T12595] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 356.023615][T12595] batman_adv: batadv0: Removing interface: virt_wifi0 [ 357.619603][T12649] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.1897'. [ 357.927077][T12658] netlink: 'syz.0.1900': attribute type 5 has an invalid length. [ 361.352067][T12702] netlink: 'syz.1.1913': attribute type 2 has an invalid length. [ 361.935025][T12717] tun0: tun_chr_ioctl cmd 1074025675 [ 361.958674][T12717] tun0: persist enabled [ 361.971944][T12717] tun0: tun_chr_ioctl cmd 1074025675 [ 362.009723][T12717] tun0: persist disabled [ 362.859821][T12733] netlink: 'syz.3.1920': attribute type 10 has an invalid length. [ 362.892670][T12733] hsr0: left promiscuous mode [ 362.916883][T12733] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 364.248784][T12761] netlink: 'syz.0.1929': attribute type 10 has an invalid length. [ 364.383310][T12761] team0: Device hsr_slave_0 failed to register rx_handler [ 364.519838][T12765] netlink: 'syz.1.1930': attribute type 3 has an invalid length. [ 364.538328][T12765] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.1930'. [ 364.842930][T12778] netlink: 'syz.2.1934': attribute type 10 has an invalid length. [ 364.905893][T12778] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1934'. [ 364.926680][ T5774] cgroup: fork rejected by pids controller in /syz0 [ 365.562048][T12783] netlink: 'syz.1.1935': attribute type 10 has an invalid length. [ 365.579512][T12783] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1935'. [ 365.588659][T12783] hsr0: entered promiscuous mode [ 365.599314][T12783] bridge0: port 3(hsr0) entered blocking state [ 365.609245][T12783] bridge0: port 3(hsr0) entered disabled state [ 365.619367][T12783] hsr0: entered allmulticast mode [ 365.629109][T12783] hsr_slave_0: entered allmulticast mode [ 365.642077][T12783] hsr_slave_1: entered allmulticast mode [ 365.655925][T12783] bridge0: port 3(hsr0) entered blocking state [ 365.662306][T12783] bridge0: port 3(hsr0) entered forwarding state [ 365.834572][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.082323][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.273012][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.566283][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.917255][T12802] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1944'. [ 367.099734][ T12] tipc: Left network mode [ 367.467860][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 367.478312][ T5777] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 367.488681][ T5777] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 367.499094][ T5777] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 367.513464][ T5777] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 367.521127][ T5777] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.003164][T12832] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1949'. [ 368.771912][T12829] delete_channel: no stack [ 369.338896][T12861] batadv0: entered promiscuous mode [ 369.504796][ T12] gretap0 (unregistering): left allmulticast mode [ 369.559231][ T5782] Bluetooth: hci3: command tx timeout [ 369.566923][ T12] gretap0 (unregistering): left promiscuous mode [ 369.616111][ T12] : port 1(gretap0) entered disabled state [ 369.731536][T12819] chnl_net:caif_netlink_parms(): no params data found [ 370.124321][T12819] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.152053][T12819] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.169433][T12819] bridge_slave_0: entered allmulticast mode [ 370.177078][T12819] bridge_slave_0: entered promiscuous mode [ 370.189752][T12890] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1959'. [ 370.251174][T12819] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.258335][T12819] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.278581][T12819] bridge_slave_1: entered allmulticast mode [ 370.291376][T12819] bridge_slave_1: entered promiscuous mode [ 370.407117][T12819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.466872][T12819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.593285][T12819] team0: Port device team_slave_0 added [ 370.654694][T12819] team0: Port device team_slave_1 added [ 370.885207][T12911] netlink: 'syz.3.1964': attribute type 9 has an invalid length. [ 370.922701][T12911] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1964'. [ 370.951149][T12819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.963546][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.995623][T12819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.045929][T12819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.059440][T12819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.096132][T12819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.183610][T12914] netlink: 'syz.3.1964': attribute type 9 has an invalid length. [ 371.196788][T12914] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1964'. [ 371.225486][ T12] hsr_slave_0: left promiscuous mode [ 371.280268][ T12] veth1_macvtap: left promiscuous mode [ 371.304435][ T12] veth1_vlan: left promiscuous mode [ 371.326092][ T12] veth0_vlan: left promiscuous mode [ 371.639292][ T5782] Bluetooth: hci3: command tx timeout [ 372.337687][ T12] team_slave_1 (unregistering): left promiscuous mode [ 372.352667][ T12] team0 (unregistering): Port device team_slave_1 removed [ 372.426971][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.442272][ T12] bond_slave_1 (unregistering): left promiscuous mode [ 372.505904][ T12] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 372.514866][ T12] @ÿ (unregistering): left promiscuous mode [ 372.896180][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 372.905573][ T12] team0 (unregistering): left promiscuous mode [ 372.950643][ T12] bond0 (unregistering): Released all slaves [ 373.028600][T12935] netlink: 16158 bytes leftover after parsing attributes in process `syz.2.1968'. [ 373.089178][T12936] netlink: 'syz.2.1968': attribute type 4 has an invalid length. [ 373.105156][T12940] netlink: 'syz.3.1969': attribute type 21 has an invalid length. [ 373.297196][T12819] hsr_slave_0: entered promiscuous mode [ 373.310920][T12819] hsr_slave_1: entered promiscuous mode [ 373.571409][T12958] netlink: 'syz.1.1974': attribute type 29 has an invalid length. [ 373.625290][T12958] netlink: 'syz.1.1974': attribute type 29 has an invalid length. [ 373.719084][ T5782] Bluetooth: hci3: command tx timeout [ 373.954274][T12978] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1976'. [ 374.842651][T12987] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1978'. [ 374.890907][T12992] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0000:0023 with DS=0x3f [ 375.245247][T13008] netlink: 15487 bytes leftover after parsing attributes in process `syz.3.1984'. [ 375.439263][T13012] netlink: 'syz.1.1985': attribute type 2 has an invalid length. [ 375.447310][T13012] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.1985'. [ 375.525642][T13015] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1987'. [ 375.581103][T13015] C: renamed from team_slave_0 (while UP) [ 375.598509][T13015] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1987'. [ 375.677371][T12819] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 375.716600][T12819] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 375.754237][T12819] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.779956][T12819] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.799098][ T5782] Bluetooth: hci3: command tx timeout [ 375.979705][T12819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.065862][T12819] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.123264][ T7474] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.130482][ T7474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.196691][ T7474] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.203929][ T7474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.320839][T12819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.359730][T12819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.547530][T13046] netlink: 'syz.3.1993': attribute type 4 has an invalid length. [ 376.589495][T13046] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1993'. [ 376.616784][T13046] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 376.888881][T13068] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1996'. [ 377.014118][T13076] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 377.026487][T13068] team0: Port device team_slave_0 removed [ 377.038672][T13076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'. [ 377.191818][T13076] netlink: 'syz.3.1997': attribute type 10 has an invalid length. [ 377.203075][T13076] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1997'. [ 377.250676][T12819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.345601][T12819] veth0_vlan: entered promiscuous mode [ 377.381641][T12819] veth1_vlan: entered promiscuous mode [ 377.540631][T12819] veth0_macvtap: entered promiscuous mode [ 377.568521][T12819] veth1_macvtap: entered promiscuous mode [ 377.650389][T13083] netlink: 'syz.3.1998': attribute type 10 has an invalid length. [ 377.698471][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.709579][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.729106][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.746899][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.772124][T12819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.815005][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.849069][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.863704][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.875029][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.884993][T12819] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.900382][T12819] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.911817][T12819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.970152][T12819] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.980685][T12819] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.009090][T12819] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.033956][T12819] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.309630][ T7467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.329995][ T7467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.419427][ T7467] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.427300][ T7467] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.543690][T13108] netlink: 'syz.1.2005': attribute type 21 has an invalid length. [ 378.583400][T13108] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2005'. [ 378.620214][T13108] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2005'. [ 378.684431][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.699291][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.074501][T13164] netlink: 'syz.1.2017': attribute type 3 has an invalid length. [ 380.128560][T13171] netlink: 'syz.1.2017': attribute type 3 has an invalid length. [ 380.255523][T13173] tun0: tun_chr_ioctl cmd 1074025681 [ 380.270075][T13177] netlink: 'syz.2.2020': attribute type 2 has an invalid length. [ 380.278020][T13177] __nla_validate_parse: 3 callbacks suppressed [ 380.278034][T13177] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2020'. [ 381.124981][T13201] netlink: 'syz.0.2025': attribute type 10 has an invalid length. [ 381.161729][T13201] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2025'. [ 381.192716][T13201] batman_adv: batadv0: Adding interface: veth0_vlan [ 381.225627][T13201] batman_adv: batadv0: The MTU of interface veth0_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.288185][T13201] batman_adv: batadv0: Interface activated: veth0_vlan [ 381.536795][T13211] can: request_module (can-proto-5) failed. [ 381.686465][T13225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.697827][T13223] netlink: 'syz.1.2029': attribute type 21 has an invalid length. [ 381.749218][T13223] netlink: 'syz.1.2029': attribute type 12 has an invalid length. [ 381.757345][T13223] netlink: 'syz.1.2029': attribute type 13 has an invalid length. [ 381.824598][T13223] netlink: 'syz.1.2029': attribute type 14 has an invalid length. [ 381.849135][T13223] netlink: 'syz.1.2029': attribute type 15 has an invalid length. [ 381.857219][T13223] netlink: 'syz.1.2029': attribute type 16 has an invalid length. [ 381.888288][T13223] netlink: 'syz.1.2029': attribute type 19 has an invalid length. [ 381.915167][T13223] netlink: 'syz.1.2029': attribute type 21 has an invalid length. [ 381.935729][T13223] netlink: 'syz.1.2029': attribute type 22 has an invalid length. [ 381.960355][T13223] netlink: 'syz.1.2029': attribute type 4 has an invalid length. [ 381.978785][T13223] netlink: 3534 bytes leftover after parsing attributes in process `syz.1.2029'. [ 382.234970][T13247] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 382.245538][T13247] syzkaller1: linktype set to 786 [ 383.452949][T13293] netlink: 197792 bytes leftover after parsing attributes in process `syz.3.2048'. [ 383.642400][T13304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2050'. [ 383.674562][T13303] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2051'. [ 384.719553][T13329] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2054'. [ 384.792857][T13336] mac80211_hwsim hwsim34 wlan1: entered promiscuous mode [ 384.817948][T13336] mac80211_hwsim hwsim34 wlan1: entered allmulticast mode [ 384.856612][T13342] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.2057'. [ 384.889214][T13339] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.2057'. [ 384.971514][T13339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2057'. [ 385.399644][T13357] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2063'. [ 385.458384][T13357] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.235177][T13374] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.2068'. [ 386.665812][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.665812][T13396] Use struct sctp_assoc_value instead [ 386.729065][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.729065][T13396] Use struct sctp_assoc_value instead [ 386.790348][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.790348][T13396] Use struct sctp_assoc_value instead [ 386.854849][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.854849][T13396] Use struct sctp_assoc_value instead [ 386.907713][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.907713][T13396] Use struct sctp_assoc_value instead [ 386.920104][T13393] syzkaller0: entered promiscuous mode [ 386.933564][T13393] syzkaller0: entered allmulticast mode [ 386.941591][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.941591][T13396] Use struct sctp_assoc_value instead [ 386.977778][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 386.977778][T13396] Use struct sctp_assoc_value instead [ 387.015767][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 387.015767][T13396] Use struct sctp_assoc_value instead [ 387.053299][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 387.053299][T13396] Use struct sctp_assoc_value instead [ 387.088642][T13396] sctp: [Deprecated]: syz.3.2074 (pid 13396) Use of int in max_burst socket option deprecated. [ 387.088642][T13396] Use struct sctp_assoc_value instead [ 389.295618][T13408] validate_nla: 18 callbacks suppressed [ 389.295645][T13408] netlink: 'syz.1.2079': attribute type 10 has an invalid length. [ 389.359920][T13408] team0: Device hsr_slave_0 failed to register rx_handler [ 389.447568][T13430] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.2085'. [ 389.477767][T13425] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2084'. [ 389.607139][T13434] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2086'. [ 389.625868][T13437] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2087'. [ 389.701667][T13438] netlink: 'syz.0.2088': attribute type 21 has an invalid length. [ 389.714080][T13438] netlink: 'syz.0.2088': attribute type 1 has an invalid length. [ 389.746037][T13438] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2088'. [ 389.782194][T13438] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 389.797561][T13444] netlink: 'syz.1.2090': attribute type 19 has an invalid length. [ 390.276730][T13471] netlink: 'syz.1.2097': attribute type 1 has an invalid length. [ 390.323570][T13471] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.2097'. [ 390.372288][T13475] netlink: 'syz.0.2099': attribute type 10 has an invalid length. [ 390.484536][T13475] team0: Device wg1 is of different type [ 390.579257][T13480] syzkaller0: entered promiscuous mode [ 390.594344][T13480] syzkaller0: entered allmulticast mode [ 391.578584][T13514] netlink: 192436 bytes leftover after parsing attributes in process `syz.0.2108'. [ 391.598345][T13514] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 393.293133][T13491] netlink: 'syz.2.2103': attribute type 11 has an invalid length. [ 393.301269][T13491] netlink: 176 bytes leftover after parsing attributes in process `syz.2.2103'. [ 393.431091][T13516] netlink: 1039 bytes leftover after parsing attributes in process `syz.2.2109'. [ 393.519831][T13518] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.538075][T13518] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.572672][T13518] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.596113][T13518] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 393.615306][T13518] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 393.622905][T13518] batman_adv: batadv0: Removing interface: veth0_vlan [ 393.998159][T13538] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2117'. [ 394.230375][T13548] netlink: 'syz.2.2121': attribute type 21 has an invalid length. [ 398.891732][T13585] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2127'. [ 398.901035][T13585] bridge_slave_1: default FDB implementation only supports local addresses [ 399.231409][T13612] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2139'. [ 399.257829][T13609] netlink: 'syz.2.2138': attribute type 10 has an invalid length. [ 399.271568][T13612] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 399.719990][T13609] team0: Port device geneve1 added [ 399.746109][T13621] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.2141'. [ 399.832723][T13609] syz.2.2138 (13609) used greatest stack depth: 18280 bytes left [ 399.923272][T13625] netlink: 'syz.1.2142': attribute type 10 has an invalid length. [ 400.109979][T13634] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2145'. [ 400.123045][T13641] netlink: 3752 bytes leftover after parsing attributes in process `syz.2.2145'. [ 400.843046][T13675] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2151'. [ 400.887103][T13674] netlink: 'syz.1.2154': attribute type 2 has an invalid length. [ 400.948301][T13674] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.2154'. [ 401.264611][T13690] netlink: 'syz.1.2158': attribute type 21 has an invalid length. [ 401.294372][T13694] netlink: 'syz.2.2159': attribute type 9 has an invalid length. [ 401.312536][T13694] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.2159'. [ 401.334372][T13691] netlink: 61211 bytes leftover after parsing attributes in process `syz.3.2156'. [ 401.430372][T13697] netlink: 'syz.1.2160': attribute type 10 has an invalid length. [ 401.449029][T13697] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2160'. [ 401.848356][T13708] netlink: 'syz.0.2163': attribute type 10 has an invalid length. [ 401.947715][T13708] team0: Device vxcan1 is of different type [ 402.683770][T13742] netlink: zone id is out of range [ 402.698798][T13742] netlink: zone id is out of range [ 402.719436][T13742] netlink: zone id is out of range [ 402.724609][T13742] netlink: zone id is out of range [ 402.739869][T13742] netlink: zone id is out of range [ 402.756384][T13742] netlink: zone id is out of range [ 402.766608][T13742] netlink: zone id is out of range [ 402.779050][T13742] netlink: zone id is out of range [ 402.796038][T13742] netlink: zone id is out of range [ 403.773971][T13781] netlink: 'syz.2.2188': attribute type 10 has an invalid length. [ 403.940061][T13792] batadv0: left allmulticast mode [ 404.238881][T13798] lo: entered allmulticast mode [ 404.308645][T13798] lo: entered promiscuous mode [ 404.369159][T13798] lo: left allmulticast mode [ 404.572569][T13799] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 407.092142][T13799] macvlan1: entered allmulticast mode [ 407.116754][T13799] veth1_vlan: entered allmulticast mode [ 407.136336][T13799] team0: Port device macvlan1 added [ 407.144593][T13807] netlink: 'syz.3.2191': attribute type 10 has an invalid length. [ 407.155143][T13807] __nla_validate_parse: 1 callbacks suppressed [ 407.155157][T13807] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2191'. [ 407.172089][T13807] net_ratelimit: 103 callbacks suppressed [ 407.172104][T13807] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 407.194707][T13808] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 407.201985][T13808] IPv6: NLM_F_CREATE should be set when creating new route [ 407.209294][T13808] IPv6: NLM_F_CREATE should be set when creating new route [ 407.216526][T13808] IPv6: NLM_F_CREATE should be set when creating new route [ 407.328776][T13816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2196'. [ 407.339255][T13816] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2196'. [ 407.353782][T13815] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2196'. [ 407.551981][T13820] netlink: 'syz.0.2197': attribute type 10 has an invalid length. [ 407.733327][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.757850][T13820] bridge_slave_1: left allmulticast mode [ 407.764509][T13820] bridge_slave_1: left promiscuous mode [ 407.790118][T13820] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.996520][T13820] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 408.063610][T13827] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2197'. [ 408.104683][T13846] netlink: 'syz.1.2203': attribute type 21 has an invalid length. [ 409.300609][T13858] netlink: 'syz.3.2207': attribute type 10 has an invalid length. [ 409.344744][T13858] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.370510][T13858] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.396281][T13858] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.428688][T13858] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.536966][T13858] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.561085][T13858] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.579491][T13858] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.599351][T13858] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.637190][T13858] geneve1: entered promiscuous mode [ 409.681820][T13858] team0: Port device geneve1 added [ 410.612967][T13896] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2217'. [ 410.667838][T13902] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 410.677403][ T5782] Bluetooth: hci3: ISO packet for unknown connection handle 3089 [ 410.961626][T13916] netlink: 'syz.2.2224': attribute type 1 has an invalid length. [ 410.974951][T13916] netlink: 63743 bytes leftover after parsing attributes in process `syz.2.2224'. [ 411.178798][T13929] netlink: 'syz.2.2229': attribute type 19 has an invalid length. [ 411.187585][T13929] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2229'. [ 411.797819][T13950] netlink: 'syz.3.2236': attribute type 2 has an invalid length. [ 411.822323][T13950] netlink: 'syz.3.2236': attribute type 8 has an invalid length. [ 411.839371][T13950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2236'. [ 411.896543][T13960] netlink: 'syz.2.2237': attribute type 10 has an invalid length. [ 412.101080][T13960] team0: Device wg1 is of different type [ 412.470837][T13961] delete_channel: no stack [ 413.270657][T13994] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2247'. [ 413.297827][T13994] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 413.345420][T13996] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.2246'. [ 413.538585][T14009] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2250'. [ 413.562393][T14009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 413.832071][T14017] netlink: 'syz.3.2253': attribute type 4 has an invalid length. [ 413.849141][T14017] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2253'. [ 413.890921][T14021] bridge_slave_0: left allmulticast mode [ 413.903237][T14021] bridge_slave_0: left promiscuous mode [ 413.911422][T14021] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.072720][T14029] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2256'. [ 414.086643][T14030] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2256'. [ 414.504707][T14040] pim6reg1: entered promiscuous mode [ 414.516704][T14040] pim6reg1: entered allmulticast mode [ 414.724288][T14049] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2262'. [ 414.963954][T14059] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2266'. [ 414.983422][T14059] netlink: 'syz.3.2266': attribute type 27 has an invalid length. [ 415.626026][T14081] netlink: 'syz.0.2271': attribute type 2 has an invalid length. [ 415.635208][T14081] netlink: 'syz.0.2271': attribute type 1 has an invalid length. [ 415.643765][T14081] netlink: 'syz.0.2271': attribute type 8 has an invalid length. [ 415.657271][T14081] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2271'. [ 416.249258][T14097] netlink: 'syz.1.2273': attribute type 10 has an invalid length. [ 416.258606][T14098] netlink: 'syz.3.2274': attribute type 10 has an invalid length. [ 416.264215][T14097] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2273'. [ 416.297165][T14098] openvswitch: netlink: Flow key attr not present in new flow. [ 416.756247][T14117] cgroup: fork rejected by pids controller in /syz3 [ 416.801496][T14125] netlink: 'syz.2.2283': attribute type 4 has an invalid length. [ 417.159911][T14236] netlink: 'syz.1.2286': attribute type 2 has an invalid length. [ 417.385036][ T7481] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.522998][ T7481] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.723282][ T7481] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 418.122287][T14260] netlink: 'syz.2.2292': attribute type 1 has an invalid length. [ 418.201076][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 418.215659][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 418.224234][ T5777] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 418.237819][ T5777] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 418.246366][ T5777] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 418.254257][ T5777] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 418.495121][ T7481] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.279458][ T5777] Bluetooth: hci1: command tx timeout [ 420.545239][T14261] chnl_net:caif_netlink_parms(): no params data found [ 421.448192][T14261] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.484523][T14261] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.506834][T14261] bridge_slave_0: entered allmulticast mode [ 421.521096][T14261] bridge_slave_0: entered promiscuous mode [ 421.665283][T14261] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.681405][T14261] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.708263][T14261] bridge_slave_1: entered allmulticast mode [ 421.719993][T14261] bridge_slave_1: entered promiscuous mode [ 421.726894][T14371] netlink: 'syz.0.2313': attribute type 10 has an invalid length. [ 421.749333][T14371] __nla_validate_parse: 3 callbacks suppressed [ 421.749350][T14371] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2313'. [ 421.815731][T14376] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.2314'. [ 421.954763][T14261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.373041][ T5777] Bluetooth: hci1: command tx timeout [ 422.823779][T14261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.950487][T14261] team0: Port device team_slave_0 added [ 422.959988][T14261] team0: Port device team_slave_1 added [ 423.092199][T14261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.119201][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.158638][T14398] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2319'. [ 423.168715][T14261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.194150][T14398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2319'. [ 423.201146][T14261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.221739][T14261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.249115][T14261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.448737][T14261] hsr_slave_0: entered promiscuous mode [ 423.468566][T14407] netlink: 'syz.1.2321': attribute type 10 has an invalid length. [ 423.487269][T14407] netlink: 209280 bytes leftover after parsing attributes in process `syz.1.2321'. [ 423.497450][T14261] hsr_slave_1: entered promiscuous mode [ 423.498211][T14407] openvswitch: netlink: Flow key attr not present in new flow. [ 423.514939][T14261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.532407][T14261] Cannot create hsr debugfs directory [ 423.550506][T14408] veth1_macvtap: entered allmulticast mode [ 424.439202][ T5777] Bluetooth: hci1: command tx timeout [ 424.585389][T14434] netlink: 'syz.0.2325': attribute type 10 has an invalid length. [ 424.896395][T14446] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.2328'. [ 425.006166][T14449] netlink: 'syz.2.2329': attribute type 29 has an invalid length. [ 425.098770][T14449] netlink: 'syz.2.2329': attribute type 29 has an invalid length. [ 425.166360][T14454] netlink: 'syz.2.2329': attribute type 29 has an invalid length. [ 425.177399][T14449] netlink: 'syz.2.2329': attribute type 29 has an invalid length. [ 425.195813][T14454] netlink: 'syz.2.2329': attribute type 29 has an invalid length. [ 425.246300][ T7481] hsr_slave_0: left promiscuous mode [ 425.262428][ T7481] hsr_slave_1: left promiscuous mode [ 425.279501][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 425.298064][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.306791][ T7481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 425.319065][ T7481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.333058][ T7481] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 425.343359][ T7481] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 425.355342][ T7481] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 425.365927][ T7481] batman_adv: batadv0: Removing interface: veth0_vlan [ 425.400597][ T7481] veth0_macvtap: left promiscuous mode [ 425.413378][ T7481] veth1_vlan: left promiscuous mode [ 425.423272][ T7481] veth0_vlan: left promiscuous mode [ 425.583460][ T7481] geneve1 (unregistering): left promiscuous mode [ 425.593574][ T7481] team0 (unregistering): Port device geneve1 removed [ 426.061527][ T7481] team_slave_1 (unregistering): left promiscuous mode [ 426.071195][ T7481] team0 (unregistering): Port device team_slave_1 removed [ 426.120806][ T7481] C (unregistering): left promiscuous mode [ 426.127479][ T7481] team0 (unregistering): Port device C removed [ 426.411397][ T7481] dummy0 (unregistering): left promiscuous mode [ 426.418599][ T7481] team0 (unregistering): Port device dummy0 removed [ 426.519529][ T5777] Bluetooth: hci1: command tx timeout [ 426.636238][T14261] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 426.685176][T14261] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 426.721636][T14475] netlink: 'syz.0.2336': attribute type 12 has an invalid length. [ 426.729749][T14475] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2336'. [ 426.767856][T14261] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 426.806465][T14261] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 427.104897][T14261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 427.193965][T14261] 8021q: adding VLAN 0 to HW filter on device team0 [ 427.233160][ T7481] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.240364][ T7481] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.369714][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.376903][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.380045][T14511] netlink: 'syz.2.2342': attribute type 2 has an invalid length. [ 427.409640][T14511] netlink: 17267 bytes leftover after parsing attributes in process `syz.2.2342'. [ 427.537517][T14514] mac80211_hwsim hwsim34 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 427.563705][T14511] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.2342'. [ 427.808735][ T5777] Bluetooth: hci0: ISO packet for unknown connection handle 2622 [ 427.818291][T14525] netlink: 'syz.1.2346': attribute type 10 has an invalid length. [ 427.843284][T14525] team0: Device nlmon0 is of different type [ 428.044694][T14261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 428.159840][T14539] sock: sock_set_timeout: `syz.2.2349' (pid 14539) tries to set negative timeout [ 428.166633][T14261] veth0_vlan: entered promiscuous mode [ 428.320775][T14261] veth1_vlan: entered promiscuous mode [ 428.637772][T14261] veth0_macvtap: entered promiscuous mode [ 428.711108][T14261] veth1_macvtap: entered promiscuous mode [ 428.834300][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 428.891389][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 428.950347][T14261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.028103][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.122502][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.209713][T14261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.283805][T14261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.342834][T14261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.458013][T14261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.543681][T14261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.566810][T14261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.623299][T14261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.026541][ T7462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.064218][ T7462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.242042][ T7463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.298355][ T7463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.404752][T14569] netlink: 'syz.0.2355': attribute type 1 has an invalid length. [ 430.415166][T14569] netlink: 'syz.0.2355': attribute type 4 has an invalid length. [ 430.428448][T14569] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2355'. [ 430.607530][T14583] netlink: 'syz.1.2350': attribute type 10 has an invalid length. [ 430.638386][T14583] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2350'. [ 430.703800][T14583] batman_adv: batadv0: Adding interface: veth1_virt_wifi [ 430.720302][T14583] batman_adv: batadv0: The MTU of interface veth1_virt_wifi is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 430.810791][T14583] batman_adv: batadv0: Interface activated: veth1_virt_wifi [ 430.848984][T14586] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2350'. [ 431.034720][T14590] syzkaller0: entered promiscuous mode [ 431.089073][T14590] syzkaller0: entered allmulticast mode [ 431.280890][ T5782] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 431.290932][ T5782] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 431.300469][ T5782] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 431.309575][ T5782] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 431.340419][ T5782] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 431.350996][ T5782] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 433.418824][ T5777] Bluetooth: hci4: command tx timeout [ 434.394835][T14607] netlink: 'syz.1.2359': attribute type 10 has an invalid length. [ 434.402757][T14607] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2359'. [ 434.411892][T14607] batadv0: entered allmulticast mode [ 434.417376][T14607] bridge0: port 4(batadv0) entered blocking state [ 434.423995][T14607] bridge0: port 4(batadv0) entered disabled state [ 434.735538][ T7449] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 434.745327][ T7449] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 434.783926][T14632] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2363'. [ 435.373845][ T7462] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.406357][T14632] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 435.481849][ T5777] Bluetooth: hci4: command tx timeout [ 435.517562][ T7462] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.726382][ T7462] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.904929][ T7462] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.047427][T14605] chnl_net:caif_netlink_parms(): no params data found [ 436.141179][T14653] netlink: 'syz.1.2369': attribute type 10 has an invalid length. [ 436.150977][T14653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2369'. [ 436.161626][T14652] netlink: 1057 bytes leftover after parsing attributes in process `syz.0.2368'. [ 436.180718][T14653] netlink: 'syz.1.2369': attribute type 10 has an invalid length. [ 436.188680][T14653] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2369'. [ 436.209983][T14652] netlink: 'syz.0.2368': attribute type 3 has an invalid length. [ 436.224973][T14652] netlink: 'syz.0.2368': attribute type 6 has an invalid length. [ 436.233334][T14652] netlink: 144448 bytes leftover after parsing attributes in process `syz.0.2368'. [ 436.460187][T14605] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.467371][T14605] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.474867][T14605] bridge_slave_0: entered allmulticast mode [ 436.485762][T14605] bridge_slave_0: entered promiscuous mode [ 436.495668][T14605] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.505577][T14605] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.513264][T14605] bridge_slave_1: entered allmulticast mode [ 436.520960][T14605] bridge_slave_1: entered promiscuous mode [ 436.662067][T14669] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2373'. [ 436.861652][T14605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.068354][T14605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.559851][ T5777] Bluetooth: hci4: command tx timeout [ 437.625580][T14605] team0: Port device team_slave_0 added [ 437.670247][T14605] team0: Port device team_slave_1 added [ 437.922180][T14685] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2376'. [ 437.996825][T14605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.007119][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.055847][T14605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.079131][T14685] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.2376'. [ 438.176221][T14605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.195768][T14605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.248051][T14605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.968269][T14605] hsr_slave_0: entered promiscuous mode [ 438.987752][T14605] hsr_slave_1: entered promiscuous mode [ 439.008063][T14605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.028590][T14605] Cannot create hsr debugfs directory [ 439.621494][T14727] C: renamed from team_slave_0 (while UP) [ 439.635997][T14727] netlink: 'syz.0.2385': attribute type 3 has an invalid length. [ 439.644391][ T5777] Bluetooth: hci4: command tx timeout [ 439.655666][T14727] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2385'. [ 439.666488][T14727] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 439.724073][T14729] ƒ: renamed from tunl0 (while UP) [ 439.981198][T14737] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2386'. [ 439.995778][T14740] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2387'. [ 440.125990][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.132407][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.312738][T14747] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.2388'. [ 440.553185][T14753] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.2389'. [ 441.294273][ T7462] [ 441.296649][ T7462] ====================================================== [ 441.303666][ T7462] WARNING: possible circular locking dependency detected [ 441.310681][ T7462] syzkaller #0 Not tainted [ 441.315086][ T7462] ------------------------------------------------------ [ 441.322083][ T7462] kworker/u4:25/7462 is trying to acquire lock: [ 441.328300][ T7462] ffff888030344d80 (team->team_lock_key#2){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 441.337855][ T7462] [ 441.337855][ T7462] but task is already holding lock: [ 441.345202][ T7462] ffff88807a548768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 441.355545][ T7462] [ 441.355545][ T7462] which lock already depends on the new lock. [ 441.355545][ T7462] [ 441.365935][ T7462] [ 441.365935][ T7462] the existing dependency chain (in reverse order) is: [ 441.374943][ T7462] [ 441.374943][ T7462] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 441.382670][ T7462] __mutex_lock+0x136/0xcc0 [ 441.387684][ T7462] ieee80211_open+0x144/0x200 [ 441.392868][ T7462] __dev_open+0x2cb/0x430 [ 441.397711][ T7462] dev_open+0xab/0x190 [ 441.402299][ T7462] team_add_slave+0x75f/0x29a0 [ 441.407589][ T7462] do_setlink+0xdfe/0x4130 [ 441.412522][ T7462] rtnl_newlink+0x17da/0x20a0 [ 441.417714][ T7462] rtnetlink_rcv_msg+0x869/0xfa0 [ 441.423160][ T7462] netlink_rcv_skb+0x241/0x4d0 [ 441.428429][ T7462] netlink_unicast+0x751/0x8d0 [ 441.433697][ T7462] netlink_sendmsg+0x8d0/0xbf0 [ 441.438975][ T7462] ____sys_sendmsg+0x5ba/0x960 [ 441.444248][ T7462] ___sys_sendmsg+0x2a6/0x360 [ 441.449433][ T7462] __se_sys_sendmsg+0x1c2/0x2b0 [ 441.454792][ T7462] do_syscall_64+0x55/0xb0 [ 441.459719][ T7462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 441.466131][ T7462] [ 441.466131][ T7462] -> #0 (team->team_lock_key#2){+.+.}-{3:3}: [ 441.474303][ T7462] __lock_acquire+0x2df1/0x7d40 [ 441.480111][ T7462] lock_acquire+0x19e/0x420 [ 441.485172][ T7462] __mutex_lock+0x136/0xcc0 [ 441.490204][ T7462] team_del_slave+0x32/0x1c0 [ 441.495321][ T7462] team_device_event+0x28d/0xa20 [ 441.500788][ T7462] notifier_call_chain+0x197/0x380 [ 441.506430][ T7462] unregister_netdevice_many_notify+0x100d/0x1900 [ 441.513372][ T7462] unregister_netdevice_queue+0x32c/0x370 [ 441.519625][ T7462] _cfg80211_unregister_wdev+0x16b/0x580 [ 441.525771][ T7462] ieee80211_remove_interfaces+0x49e/0x690 [ 441.532097][ T7462] ieee80211_unregister_hw+0x5d/0x2a0 [ 441.538000][ T7462] mac80211_hwsim_del_radio+0x289/0x480 [ 441.544414][ T7462] hwsim_exit_net+0x58d/0x650 [ 441.549611][ T7462] cleanup_net+0x70a/0xbb0 [ 441.554540][ T7462] process_scheduled_works+0xa5d/0x15d0 [ 441.560606][ T7462] worker_thread+0xa55/0xfc0 [ 441.565711][ T7462] kthread+0x2fa/0x390 [ 441.570291][ T7462] ret_from_fork+0x48/0x80 [ 441.575219][ T7462] ret_from_fork_asm+0x11/0x20 [ 441.580494][ T7462] [ 441.580494][ T7462] other info that might help us debug this: [ 441.580494][ T7462] [ 441.590709][ T7462] Possible unsafe locking scenario: [ 441.590709][ T7462] [ 441.598154][ T7462] CPU0 CPU1 [ 441.603508][ T7462] ---- ---- [ 441.608861][ T7462] lock(&rdev->wiphy.mtx); [ 441.613356][ T7462] lock(team->team_lock_key#2); [ 441.620830][ T7462] lock(&rdev->wiphy.mtx); [ 441.627850][ T7462] lock(team->team_lock_key#2); [ 441.632784][ T7462] [ 441.632784][ T7462] *** DEADLOCK *** [ 441.632784][ T7462] [ 441.640920][ T7462] 5 locks held by kworker/u4:25/7462: [ 441.646280][ T7462] #0: ffff88801a254938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 441.657152][ T7462] #1: ffffc9001948fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x96f/0x15d0 [ 441.667675][ T7462] #2: ffffffff8e3b9990 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x14c/0xbb0 [ 441.677071][ T7462] #3: ffffffff8e3c6988 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 441.686893][ T7462] #4: ffff88807a548768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x29a/0x690 [ 441.697685][ T7462] [ 441.697685][ T7462] stack backtrace: [ 441.703593][ T7462] CPU: 0 PID: 7462 Comm: kworker/u4:25 Not tainted syzkaller #0 [ 441.711217][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 441.721271][ T7462] Workqueue: netns cleanup_net [ 441.726053][ T7462] Call Trace: [ 441.729391][ T7462] [ 441.732315][ T7462] dump_stack_lvl+0x18c/0x250 [ 441.737026][ T7462] ? load_image+0x420/0x420 [ 441.741561][ T7462] ? show_regs_print_info+0x20/0x20 [ 441.746763][ T7462] ? print_circular_bug+0x12b/0x1a0 [ 441.751966][ T7462] check_noncircular+0x2fc/0x400 [ 441.756906][ T7462] ? print_deadlock_bug+0x5d0/0x5d0 [ 441.762105][ T7462] ? lockdep_lock+0xf5/0x230 [ 441.766714][ T7462] ? _find_first_zero_bit+0xd3/0x100 [ 441.772001][ T7462] __lock_acquire+0x2df1/0x7d40 [ 441.776870][ T7462] ? verify_lock_unused+0x140/0x140 [ 441.782073][ T7462] ? perf_trace_lock_acquire+0x104/0x410 [ 441.787707][ T7462] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 441.794295][ T7462] ? perf_trace_lock_acquire+0x104/0x410 [ 441.799947][ T7462] lock_acquire+0x19e/0x420 [ 441.804468][ T7462] ? team_del_slave+0x32/0x1c0 [ 441.809230][ T7462] ? __might_sleep+0xe0/0xe0 [ 441.813812][ T7462] ? read_lock_is_recursive+0x20/0x20 [ 441.819180][ T7462] __mutex_lock+0x136/0xcc0 [ 441.823678][ T7462] ? team_del_slave+0x32/0x1c0 [ 441.828440][ T7462] ? __lock_acquire+0x7d40/0x7d40 [ 441.833468][ T7462] ? rcu_is_watching+0x15/0xb0 [ 441.838224][ T7462] ? trace_contention_end+0x39/0xe0 [ 441.843429][ T7462] ? __mutex_lock+0x315/0xcc0 [ 441.848102][ T7462] ? team_del_slave+0x32/0x1c0 [ 441.852872][ T7462] ? mutex_lock_nested+0x20/0x20 [ 441.857809][ T7462] ? bond_netdev_event+0xeb/0xf20 [ 441.862827][ T7462] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 441.868475][ T7462] team_del_slave+0x32/0x1c0 [ 441.873072][ T7462] team_device_event+0x28d/0xa20 [ 441.878009][ T7462] notifier_call_chain+0x197/0x380 [ 441.883120][ T7462] unregister_netdevice_many_notify+0x100d/0x1900 [ 441.889540][ T7462] ? trace_event_raw_event_lock+0x250/0x250 [ 441.895440][ T7462] ? unregister_netdevice_many+0x20/0x20 [ 441.901083][ T7462] ? kernfs_remove_by_name_ns+0x117/0x150 [ 441.906809][ T7462] ? __lock_acquire+0x7d40/0x7d40 [ 441.911838][ T7462] unregister_netdevice_queue+0x32c/0x370 [ 441.917566][ T7462] ? list_netdevice+0x730/0x730 [ 441.922416][ T7462] ? kernfs_remove_by_name_ns+0x117/0x150 [ 441.928163][ T7462] _cfg80211_unregister_wdev+0x16b/0x580 [ 441.933796][ T7462] ieee80211_remove_interfaces+0x49e/0x690 [ 441.939602][ T7462] ? ieee80211_do_stop+0x1e20/0x1e20 [ 441.944881][ T7462] ? rcu_is_watching+0x15/0xb0 [ 441.949654][ T7462] ieee80211_unregister_hw+0x5d/0x2a0 [ 441.955052][ T7462] mac80211_hwsim_del_radio+0x289/0x480 [ 441.960605][ T7462] ? rhashtable_remove_fast+0xc00/0xc00 [ 441.966159][ T7462] hwsim_exit_net+0x58d/0x650 [ 441.970844][ T7462] ? hwsim_init_net+0x90/0x90 [ 441.975588][ T7462] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 441.981413][ T7462] cleanup_net+0x70a/0xbb0 [ 441.985908][ T7462] ? ops_free_list+0x3b0/0x3b0 [ 441.990690][ T7462] ? _raw_spin_unlock_irq+0x23/0x50 [ 441.995892][ T7462] ? process_scheduled_works+0x96f/0x15d0 [ 442.001620][ T7462] ? process_scheduled_works+0x96f/0x15d0 [ 442.007339][ T7462] process_scheduled_works+0xa5d/0x15d0 [ 442.012900][ T7462] ? worker_attach_to_pool+0x380/0x380 [ 442.018378][ T7462] ? assign_work+0x3d2/0x5d0 [ 442.022982][ T7462] worker_thread+0xa55/0xfc0 [ 442.027577][ T7462] kthread+0x2fa/0x390 [ 442.031638][ T7462] ? pr_cont_work+0x560/0x560 [ 442.036311][ T7462] ? kthread_blkcg+0xd0/0xd0 [ 442.040890][ T7462] ret_from_fork+0x48/0x80 [ 442.045307][ T7462] ? kthread_blkcg+0xd0/0xd0 [ 442.049902][ T7462] ret_from_fork_asm+0x11/0x20 [ 442.054702][ T7462] [ 442.063612][ T7462] team0: Port device wlan1 removed [ 442.174135][ T7462] hsr_slave_0: left promiscuous mode [ 442.184472][ T7462] hsr_slave_1: left promiscuous mode [ 442.191338][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.198869][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.211504][ T7462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.219211][ T7462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.227002][ T7462] batman_adv: batadv0: Interface deactivated: veth1_virt_wifi [ 442.245593][ T7462] batman_adv: batadv0: Removing interface: veth1_virt_wifi [ 443.996056][ T7462] team0 (unregistering): Port device geneve1 removed [ 444.096110][ T7462] team0 (unregistering): Port device team_slave_1 removed [ 444.122228][ T7462] team0 (unregistering): Port device C removed [ 444.159222][ T7462] .` (unregistering): (slave 4@0Ùÿÿ): Releasing backup interface [ 444.186298][ T7462] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.343710][ T7462] .` (unregistering): Released all slaves [ 444.370520][T14605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 444.382234][T14605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 444.397983][T14605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 444.411727][T14605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 444.524562][T14605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 444.553067][T14605] 8021q: adding VLAN 0 to HW filter on device team0 [ 444.564728][ T7467] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.571915][ T7467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 444.611929][ T7467] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.619108][ T7467] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.847097][T14605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.893251][T14605] veth0_vlan: entered promiscuous mode [ 444.907140][T14605] veth1_vlan: entered promiscuous mode [ 444.938942][T14605] veth0_macvtap: entered promiscuous mode [ 444.951249][T14605] veth1_macvtap: entered promiscuous mode [ 444.969428][T14605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.980891][T14605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.993050][T14605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.006543][T14605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.017986][T14605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.027969][T14605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.042292][T14605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.053441][T14605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.064841][T14605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.074130][T14605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.085077][T14605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.093910][T14605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.124681][T14605] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 445.146347][ T7462] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.147873][T14605] ieee80211 phy42: Selected rate control algorithm 'minstrel_ht' [ 445.157498][ T7462] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.182081][ T7462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.190377][ T7462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50