last executing test programs: 11.872804204s ago: executing program 2 (id=2012): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12000000040000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000800000095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffed0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2], 0x48) r4 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000000)='cpu&\t0_&&') bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000008c0)=ANY=[@ANYRES32, @ANYBLOB="2200000019"], 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) 10.767722935s ago: executing program 2 (id=2022): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101040, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x6, 0xfd, 0x9, 0x1}, {0x9, 0x12, 0x1, 0x1d88076c}, {0x6, 0x4, 0x4, 0x6}]}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r3 = getpid() r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000240)={&(0x7f0000000500)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="0204000000001eafbcf742e105000000000000001104ee16", 0x18}], 0x1}, 0x40000) write$cgroup_pid(r2, &(0x7f0000000880)=r3, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000380), 0x12) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_clone(0x80004000, &(0x7f0000002780)="77381c7355a5860f9c9140b1ef1c035b8ff55b72a02fb11fdd96ec89a1ad3d74c647db5654bc1474519091e6a5cf4a18edb5a5ef0649dbaafda85cb940b648f9f29203cbe40958", 0x47, &(0x7f00000001c0), &(0x7f0000002800), &(0x7f0000002840)="3e47411f4a6d3c5091d5672bf65f5967e0277d85cc9aebbd9b6d41d84107de2e0d9fd099b1b1bae527ca9baf72a873a091f269b922236b990e9592aed490a116f420862285a1d6e1db52fdfa5f9b89f21a25476464b5171d129650c943938a9273ec616865625cdf06803ca41438b336a22d3ac9bcec00") r9 = getpid() r10 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4000}, r9, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r10, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x3}, 0x408}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r9, r10, 0x0, 0xa, &(0x7f00000000c0)='syzkaller\x00'}, 0x30) sendmsg$unix(r7, &(0x7f0000002900)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000026c0)=[{&(0x7f0000000180)}, {&(0x7f0000000240)="c92380a06e474f5987810017897d138ca952a2a736329b523dc1081ac227d02fdbad47d94c559bfee212e9992d169ed6f962826e2482019c7edb48c8a5621073768b69c2812e78fe2b4234fc0be85d9219b9df204ab3385350bef6d1136a87f472d415c386034165724f555bb3aad38d33c8af33733898405571e5349def3525705634eb1404e18b1c75cb2bcd49f82d6fe9e3eac9de5aeeda00d1738e90c7075d", 0xa1}, {&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="719f4fdd27f2634064fb6528681e93a909f014bd1dc029fb0b3a48e6e189c3b61ef9132ad43530347a799f7fdba7a6d7084bdfd9384ba47192f24166413f460d1ff2e52534184ae06e5ea938639e438c29b32fb628cc5b908a5c51cd7e079681e580ee78e51496fa518c7ca424c20af9e7f031b50c25e7943cdd4e14e98d", 0x7e}, {&(0x7f0000001380)="31fbe8f59d73c5df936415e050b5f616bf6ce8de37b9690bd50648a00d5f8b413657d88248ff813e409708903b95585c3b969bb837207f45111aabe2e1633444730ff6c6b66aba36cbb3f6a9dd532f4ca53c211cbf80be5653b49551c9f73a7ded5458a2ac907381ab6a5bf2b10ca174c0099b418aaccb5232b6bfed732bd1595f0756d9290d9f444705b8c102e5227a6ecdb9d77c56d8905f08c4baef60fd2d5674f6427066aff49a014b3b1fa89ef2b6a023592c9eca2439f59a61aa2eeb22609b16f35fc814a0e8f93fa29ba42f28163b", 0xd2}, {&(0x7f0000001480)="b920b378cb9f415fd0cfca6f6013380ed19a1dc6e184a2167b21e2f2addf6250cce0db517559d7b44375c2530f2046f4af60753593c3d78652d852fc7060da6300e3a959772850", 0x47}, {&(0x7f0000001500)="23b416015132260c27c93149d30bb375cd7a8d14bd6d6a43f5cbb1ad653987ee642da28b73048f54e4d1f5a8baabec020cb4537acecbf726e0977d7bd7ed57654ac79c66b86f45cfabd452385fe807a0608fa1848c2601db95d81b0b898c39a2da434d4ce058622c908ddbe6d0fde3672ed8f5ea8e5849be04f59827e28a5b5e2bb175e6dd984d2ed7feed2d72cb80162f3d2c04c2347e94cc4f35f23aa842c33f078695da2aae9f177ebe92", 0xac}, {&(0x7f00000015c0)="3f318c7932599da53c2c9e91e9f0381915ce77f362a382881d1b19a133bed509dabfdf2d7ed36209ddd566acc30d66cc9a1bf61d8115928546597ad050007d8c4cc1a22c476beb654253b69bd5021d9372cb3722a47925446e425291dac79394cc5f536a3eceacc2b0687996af51698c98f6bbf372285367bbd0726fd67070336ede95e3afb15a98cb3132e5de35b223bf34089c48184290d6ba44ad5dcc8de36d25b7af7b9e71d951a5b11cf346bf7448d7b86723cd8ba83f1b2de1ac461ee496de70df068401d7a83eaa38bec8343127da3dcebba0f8127f89b8eb4104", 0xde}, {&(0x7f00000016c0)="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", 0x1000}], 0x9, &(0x7f00000028c0)=[@cred={{0x1c, 0x1, 0x2, {r8, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xee01}}}], 0x40, 0x4000810}, 0x20004000) 10.113169298s ago: executing program 2 (id=2026): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) (async) close(0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b05d25a806f8c6394f91a24fc6007020f", 0x17}], 0x1, 0x0, 0x0, 0x400300}, 0x0) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000054000001b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000c309000050000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x2, 0x9}}, 0x10, 0x0}, 0x44) (async) r3 = socket$kcm(0x10, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f00000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000001100"/28], 0x48) (async) recvmsg$kcm(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000300)=""/40, 0x28}, {&(0x7f0000000540)=""/43, 0x2b}, {&(0x7f00000006c0)=""/147, 0x93}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000000580)=""/8, 0x8}, {&(0x7f00000005c0)=""/11, 0xb}, {&(0x7f0000000a40)=""/255, 0xff}], 0x7, &(0x7f0000000780)=""/18, 0x12}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b40)={0x0, r2}, 0x8) (async) mkdir(&(0x7f0000000b80)='./file0\x00', 0xa2) (async) write$cgroup_devices(r6, 0x0, 0x9) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r4}, 0x18) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="5eaa0000000095000000000000b1b920ab8f836c0e00000000000000000000009d067079c6bd127cf4f83b8a5ff6f4da509f10b2fd8bbb6510b6c4ca42e45b12ed"], &(0x7f0000000480)='syzkaller\x00'}, 0x80) 6.557701605s ago: executing program 2 (id=2032): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = perf_event_open(&(0x7f0000000400)={0x1, 0x80, 0x10, 0x71, 0x1, 0x6b, 0x0, 0xfff, 0x8400, 0x1a, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x1, @perf_bp={&(0x7f00000003c0)}, 0x36, 0x2, 0xfffffffc, 0x5, 0x6, 0xb, 0x7, 0x0, 0x2, 0x0, 0xfffffffffffffffb}, 0x0, 0xd, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0x3, r1, 0xa) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000040), 0x0}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40107447, &(0x7f0000000180)) r4 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={0xffffffffffffffff, 0x8}, 0xc) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000640)=ANY=[@ANYBLOB="e595ca83d76aa80000325d94e2f01801000021000000000001f4810e1b495f85f176a83db5d36a00003b810000850000"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r6}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000003c0)={r7, r6, 0x0, r6}, 0x10) r8 = openat$cgroup_ro(r0, &(0x7f0000000580)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) write$cgroup_subtree(r8, &(0x7f00000005c0)={[{0x2d, 'devices'}, {0x2b, 'cpuacct'}, {0x2b, 'perf_event'}, {0x2d, 'net_cls'}, {0x2d, 'cpuacct'}, {0x2b, 'devices'}, {0x2b, 'freezer'}]}, 0x42) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000004c0)=@o_path={&(0x7f0000000480)='./file0\x00', r6, 0x4000, r6}, 0x18) r9 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0x9fe, 0x452}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000540)={0xffffffffffffffff, r9, 0x0, 0x9, &(0x7f0000000500)='-\\./!]@/\x00'}, 0x30) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000380)={&(0x7f0000000280)="1e1e7fd6ba02de76574c99d86a2886c0fdb239e10680416c63866b1dcb74957d6562fcbdc69170ae498cb33c5792cce77c224e02ca654903815a2911437e90addffd40c5d52a62922eaf297f47444eabbd7cf67931a67bc31e7078575f45f58d45ec194281c0d0c5065441eebd18cd6dfe44893e43d1fdddebb545e57bd3638dd4f57edfaa847d2775ca6dcaabec0ff2002ed4bfd04042749abc9e805c02c9694c2b2439898d83ced006457856320b3bd3755b18adc6b2fcc22781a9376780a97fd12d061e21738eb85419217683d700c76ee06c66b49b3dff76ee61f9e0304f354247", &(0x7f0000000040)=""/23, &(0x7f00000000c0)="e8b3336132e179febd9917fe48a88fddd7780c404ad3b1b47d56445f435f2a6d1e0fc217426c4257c85527109a4d71ffb62c", &(0x7f0000000180)="285bac9a272869fb066263fde1ca6a6a4d786f9f3805458038e853d67df33ecd2ea93e30a95a25363bd5fae6262bc647aed705830b8bbb556006df2bfdf792a24c2a004d4b4467427ea837d786606dbe86164e47a7e712d566e478e9fc", 0x4, r5}, 0x38) syz_clone(0x4001000, 0x0, 0x408, &(0x7f0000000140), 0x0, 0x0) 6.155040383s ago: executing program 2 (id=2035): r0 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000200)=""/137, 0x9}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x4004000) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0xd1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x12280, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002200000007000000000000089500000000000000e26c9bd1a63619"], 0x0}, 0x90) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="364000001a0091000b00b80000fc005f02"], 0xfe33) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0xd, 0x7, 0x0, 0x80000000, 0x7a5d4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x1, @perf_bp={0x0, 0x9}, 0x101000, 0x7ff, 0x10000007, 0x0, 0xaf, 0x3, 0x34, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x409, 0xffffffffffffffff, 0x3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$kcm(0x2, 0x3, 0x2) close(0xffffffffffffffff) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'wg1\x00', @random="0200ac7f7f00"}) ioctl$SIOCSIFHWADDR(r5, 0x8916, &(0x7f0000000040)={'veth1_macvtap\x00', @random="0200ac7f7f00"}) 3.868416277s ago: executing program 2 (id=2040): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1700000007000000ec04009ac0f9ab6fe04969e50000ff000000000000", @ANYRES32=0x1, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYRES8=r0], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0xa, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) 3.458370624s ago: executing program 1 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001dc0)=@bloom_filter={0x1e, 0xffffffff, 0x80000001, 0x200, 0x100, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000001500000000000000ea3d00000000000000"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000380)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x72, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x7e, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680), 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x9, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001900)={0x18, 0xb, &(0x7f0000001ac0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000002b7020000000100000000000000000000850000007d00000025a2ffffffffffff18120000a251e57c163683d1b7c7f1827877f3bafcc07fb1e257ee555b5e94c199a9b994431e404c4fa9ef4a2af84c8dc88f0a1c99ea6fec1635500fc16f2eb90cb3e8f5924a6db38c5e35b250a313cf7fbc6bb986308a2a1f08f16f084092a053eaa9c3f683b20f9989bff3a9df6b93b7a1154a22bed273a08850e9d1cdf9d9ad00962a3c25df116321db1711ccda173bbe000000000000000000000000000000005d5cbc6b8e8de20a40c2", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000"], &(0x7f00000007c0)='GPL\x00', 0xff, 0xff3, &(0x7f0000000800)=""/4083, 0x40f00, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001800)={0x8, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001840)=[0x1, 0x1, 0x1, r2, 0x1, 0x1], &(0x7f0000001880)=[{0x4, 0x2, 0xb, 0x3}, {0x5, 0x2, 0x6, 0x6}, {0x1, 0x3, 0x5, 0x1}, {0x2, 0x2, 0xc, 0x3}, {0x0, 0x4, 0x1}, {0x1, 0x1, 0x6, 0x5}, {0x1, 0x5, 0x0, 0xa}, {0x1, 0x3, 0x5, 0x3}], 0x10, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0xa, 0x24, &(0x7f0000000140)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffff1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @generic={0xf, 0x1, 0x6, 0x6, 0xd}], &(0x7f00000000c0)='syzkaller\x00', 0x1000, 0xc2, &(0x7f0000000280)=""/194, 0x40f00, 0x64, '\x00', r3, @fallback=0xf, r4, 0x8, &(0x7f00000006c0)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x3, 0x2, 0x1ff}, 0x10, r5, r7, 0x0, 0x0, &(0x7f00000019c0), 0x10, 0x2}, 0x94) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@o_path={0x0}, 0x18) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000740)=ANY=[@ANYRES8=r6, @ANYRES32=r5, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) r9 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001200)={0x1, 0x80, 0x2, 0x6, 0xd, 0x4, 0x0, 0x0, 0x1011, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={&(0x7f00000011c0), 0xd}, 0x4428, 0x81, 0xf, 0x8, 0x0, 0x2, 0x5, 0x0, 0x8bcd, 0x0, 0x4}, 0xffffffffffffffff, 0x4, r9, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r10, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x12061) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1e0000000200000009000000060000000a800500", @ANYRES32=r0, @ANYBLOB="b60400"/20, @ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="040000000100000001008dbaf6eef7fb7bd1380000f600c29e94360000034b0cb530c9f1bb5f89ca45719ae5ce3994a043b40d4a73c13232b2e99455f5ce99e4ae9ffd4a60e4d33162dcad9b2589dffcdf2e4811a308c3cf07d0251606bc3b38d035d3ae2c82", @ANYRES32=r4, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r11}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r11, 0x0, 0x11000000}, 0x38) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x9}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4ed", 0xd1}], 0x1}, 0x4000000) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0, 0x3}, 0x800, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r12 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90124fc601006034002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 3.456067524s ago: executing program 3 (id=2044): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1e000000000000000000001b0000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup, 0xc, 0x1, 0x3d, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000004c0), &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x2, &(0x7f0000000240)=@raw=[@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffa}], &(0x7f0000000280)='GPL\x00', 0xfac, 0x6b, &(0x7f00000002c0)=""/107, 0x41100, 0x31, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000340)={0x0, 0x2}, 0x8, 0x10, &(0x7f0000000380)={0x1, 0x3, 0xd9ee, 0x10}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@fallback, r1, 0x2d, 0x4, r2, @void, @value=r4, @void, @void, r3}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x40) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x100) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3000000}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)="a6", 0xffffff58}], 0x1}, 0x40001) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) r8 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r8, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$kcm(r8, &(0x7f00000003c0)={&(0x7f0000000740)=@in={0x2, 0x4e21, @loopback=0x7f0000e0}, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000000880)='\r', 0x1}], 0x1}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xf}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) 3.455310684s ago: executing program 0 (id=2045): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x0, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9b}, 0x94) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000240)=0xffeffffffffffffe) r0 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000180), 0x43) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32, @ANYBLOB="ac1414bb008000000000000038000000000000000000000007000000070e43aa5889c23ef593ae6bcd1844187c8073b5c9e00000000600000003000000080000000900001400000000000000000000000100000005000000000000001400000000000000000000000700000001000000000000001400000000000000000000000100000003000000000000001c000000000000000000000008"], 0xc0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8ca7}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3ff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x75}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000007000000e27f000003"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x5, 0x6, 0x8, 0x0, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r5, 0xd}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r6}, &(0x7f0000000880), &(0x7f00000008c0)=r4}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x14}, 0x18) 3.200901839s ago: executing program 3 (id=2046): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) socket$kcm(0x29, 0x7, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x2000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r2 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) 3.16699833s ago: executing program 1 (id=2047): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)="d80000001e0081054e81f78206000000000000000a0014260360cf9808000f00245bde1625fcb8b20800094014000000035c0461c1d67f6f94007134cf6efb8000d74748420a963aa007a290457f01898102e807ad522a4807f13af8030ab316277ce07bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d322fe7c9f8716a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1ca9781ed0bffece0b42a9eca0200e6d5d40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1, 0x0, 0xfffffffffffffd83}, 0x40800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="e03f03002a000b27c105d25a806c8c6f94f90424fc6004", 0x17}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r0}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fc, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000500000085000000d0000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8", 0x0, 0x1200}, 0x50) openat$ppp(0xffffffffffffff9c, &(0x7f0000002ec0), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) 3.031041532s ago: executing program 3 (id=2048): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x6, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x66, 0x0, 0x0, 0x0, 0x0, 0x8264, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffe01, 0x8}, 0xa91a, 0x0, 0x0, 0x7, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2f}, 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x88, 0x67, &(0x7f00000002c0)=r5, 0x4) sendmsg$inet(r4, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @private=0xa010102}}}], 0x20}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000140)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82, 0x0, 0x0, 0x0, 0x8}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b03d25a806c8c6394f90324fc60100000000a000200053582c137153e37000c0a80fc0b1000f835", 0x33fe0}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) 2.960953114s ago: executing program 0 (id=2049): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffff8, 0x7}, 0x1c004, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r1, 0x400454cc, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x337) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, 0x0, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff29, &(0x7f0000000040), 0x1, 0x0, 0x8}, 0x44883) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782ca9fb9040a1d08020a000000040000a118000200fe80000000000e1208000f0100810401a80016eaa40006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775570d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.764270998s ago: executing program 1 (id=2050): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0xf, 0x3, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socket$kcm(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="b3ffe14e4d56"}) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c", @ANYRESHEX=r5], 0x66) 2.64287834s ago: executing program 0 (id=2051): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000ea000000008a000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x29, &(0x7f00000002c0)=[{&(0x7f00000000c0)="309cd99890484a1233ef615db60416107c2d195505a316d3e34c5622b1cfb51fd5b78d29447afa44955aec39fb01352fd98df3d1570d088838aa87a0105f499bcf0e6d"}], 0x1294, 0x0, 0xfffffffffffffdca}, 0x20040081) close(0xffffffffffffffff) (async) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x9a) socket$kcm(0x10, 0x2, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002400)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000010"], 0x0, 0x56}, 0x28) (async) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x8080) (async) sendmsg$kcm(r5, 0x0, 0x80) (async) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80060, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_config_ext={0x10001, 0x2c500000}, 0x100080, 0x0, 0x0, 0x4, 0x9, 0x1bb, 0x4}, 0x0, 0x4, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = socket$kcm(0xa, 0x1, 0x106) (async) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) (async) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x29, 0x4b, 0x0, 0x4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socket$kcm(0x29, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) 2.477537513s ago: executing program 3 (id=2052): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x444, 0x8, 0x0, 0x0}}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000ff0d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000bd000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r1, r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r3}, 0x20) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="d8000000100081044e81f782db44b904021d006a0f000000dafe55a1290015000600142603600e120900040044000500a80016470a0001400200000000060000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81508ff60d7fed0bffece0b42a9ecbee5de6cc357b17c160d40dd6e4edef3d93", 0xd8}], 0x1}, 0x20000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000020000008500000008000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000000000000000000085000000b000000095000000000000002aa846d9335b15926fccecceac65fa0ff0ddfbf8a0c63aed31c36668bcf1600b26bf107a5df30bd1a5648411bf83645339b3fa46497ca220a132be04bfb4994a4d5febe80551048e92aa97d26c84ef868ee9b4aef61daff12aedc767dea830df4bba51078889da85fbd8fa38"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) 2.268579387s ago: executing program 0 (id=2053): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"/1367], &(0x7f0000000100)='GPL\x00', 0x9}, 0x48) (async, rerun: 32) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f00000001c0)='%pK \x00'}, 0x20) (async, rerun: 64) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000380)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x18}, 0x18) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) (async) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x1}, @enum64={0xb, 0x1, 0x0, 0x13, 0x1, 0x0, [{0xf, 0x5, 0x80000000}]}, @var={0x3, 0x0, 0x0, 0xe, 0x4}, @var={0xe, 0x0, 0x0, 0xe, 0x5}]}, {0x0, [0x2e, 0x30, 0x2e, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f00000007c0)=""/235, 0x65, 0xeb, 0x0, 0xc1f, 0x10000}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f00000008c0)='%ps \x00'}, 0x20) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)={0x1b, 0x0, 0x0, 0x200, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x4}, 0x50) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{0x1, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r1}, 0x20) (rerun: 64) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ac0)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8, r0}, 0x18) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b00)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4}, 0x50) r13 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x8, &(0x7f0000001340)=@framed={{0xbe, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}]}, &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="1e00000007000000824300000600004c3803eb361970090c020000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0200000001000000010000000200"/28], 0x50) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x21, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x3, 0x1, 0x0, r3}, @map_fd={0x18, 0xa, 0x1, 0x0, r4}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0xffe00000}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}]}, &(0x7f0000000480)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x5, 0x1, 0x7, 0x542cc851}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[r7, r8, r15, r10, r11, r12, r13, r14, r15], 0x0, 0x10, 0x1}, 0x94) (async, rerun: 64) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) (rerun: 64) socket$kcm(0x11, 0x2, 0x300) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r16, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e086dd200000006006000aac14140ce0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) (async) r17 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r17) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async, rerun: 32) r19 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x6, 0x8, 0x2, 0x0, 0x1}, 0x50) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r19}, &(0x7f0000000180), &(0x7f0000000100)=r18}, 0x20) 2.244305847s ago: executing program 1 (id=2054): r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x2, 0x40000, 0x0, 0x3}], 0x10, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x76, &(0x7f0000000000)=r3, 0x8) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf5, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0x81, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', r7, 0x0, r6}, 0x94) r8 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r8, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="020a000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.205014888s ago: executing program 3 (id=2055): perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80100, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x100904, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000640), 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, @perf_config_ext={0x81}, 0x800, 0x0, 0x20, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2ff}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) 2.07680548s ago: executing program 0 (id=2056): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYBLOB='>'], 0x9a) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x16, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(r3, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef289a630182700008"], 0xffdd) 1.954103603s ago: executing program 1 (id=2057): socket$kcm(0x10, 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="750a000000ffffffc3119c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f00000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000310ad7a6000000000000000000000088950534f8dd09d09441916c42da0c96611d9201bf4c5e8fd2cce9b0da1d14b9c80fe867d83ea41f3f464df3a8569e64dab25956db1d5338907ba7d5134b09953fcbefe3ccc7d13dcf8e101918ec22a8c89fe93e3cb72501f7c9f4d954286230062f9381e10f985788", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0500000000f01f00810000007f00000001"], 0x48) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000430033"], 0xfe33) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0xf00, &(0x7f0000000040)=[{&(0x7f00000000c0)="5c00000014006b02c84e21100af32c6e0a0675f8d3446040fe00000000005c1e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d493803792684b71bdd70000b6c0504bb9183132be471b93c91b5d7870743719b4b53cf2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYBLOB="04000000000000000000000000000000000d0000", @ANYRES32=0x0, @ANYRES8=0x0, @ANYBLOB="010000000400"/28], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000000400000003"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000180), &(0x7f0000000240)='%pB \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040afb07020a000000040000a118000200fe80ffff00000e1208000f01008104017f0016ea1f000b400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000f400000000000000009500000000000000"], &(0x7f0000000300)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) r9 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="33fe000076003146"], 0xfe33) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="89dc699a2a207700"], 0x8) socket$kcm(0x2, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000800000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000f00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 78.204359ms ago: executing program 0 (id=2058): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000097000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe, 0x66c}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x20300000, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x2, &(0x7f0000000000)=@raw=[@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f00000000c0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000280)="fb0f210fa008c52898", 0x9}, {&(0x7f0000000400)="b5510c79a83fb84598ec5e7dabca6790310917b7e0b320dc434043b62e21318098668ca21c34f4fe1d6de5b0dc4dc570669bfa922f225c994a8813b46243aacb23a06a2c1ba987cdbea93bd0c03ed415d5b3a42e63c85d4ec2d5bdf1b0a892edd99c4a7b44a0b77e148863a9ae38395f7a1dfa5a6ed901afa198f503ca5a802071ad2e656bcfd9a3219f3b2ec09ba089a1f559b0883a3beb6fe2e402", 0x9c}, {&(0x7f0000000340)="566d610feab0226844ae75", 0xb}], 0x3, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x80000000}}, @ip_retopts={{0x48, 0x0, 0x7, {[@cipso={0x86, 0x2e, 0x3, [{0x280066d67b690a2e, 0x8, "a52e6e243c62"}, {0x2, 0xb, "64a10a8f85a47a2353"}, {0x6, 0xf, "d3b6298ec17e81c74a36a1fc8f"}, {0x1, 0x2}, {0x0, 0x4, "18d1"}]}, @noop, @generic={0x89, 0x8, "3204d5d155e6"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd3}}, @ip_ttl={{0x14, 0x0, 0x2, 0x101}}], 0xc8}, 0x40100) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800d00000003600e1208000f0000000406a80016c0080009", 0x37}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x7, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x59, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="020f000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) recvmsg(r5, &(0x7f0000002340)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001e40)=""/39, 0x27}], 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 891.29µs ago: executing program 1 (id=2059): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x79, &(0x7f0000000000), 0x8) r1 = socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400000000004, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7a, 0x2, @perf_bp={0x0, 0x4}, 0x19122, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xfffffffeffffffff}, 0xc001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x300, &(0x7f0000000300)=[{&(0x7f0000000340)="d8000000210081044e81f782db44b9040200", 0x12}, {&(0x7f0000004200)="3d8c5ddb30a3718cef4f5210732f747226e8d7f41c83b136ac097b9a3c24c45639c2d70ee16c4b00790aca819a43b054bd01626eb0402783358806f064ef1fd963ab9b3f56cd18c60b0906d39e860184856b478f1ba6888cc780673762b0ee290d2b7dc0c21ff48175f779a7249c3f043c08a71a2f5abe07c7374fb92b8b3b61da1fa2d87a5263140bb672027b87cacc1b26a07901697eab4911135583935d28d3deb4720aad045d01d80f00db35ede34e1db4a9b9c9e4c8521575a0c0641a92ff7327130f1c", 0xc6}], 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) close(0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000d00)=""/242, 0xfffffd63}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/210, 0xd2}, {&(0x7f00000006c0)=""/188, 0xc9}, {&(0x7f0000000f40)=""/213, 0xd5}, {&(0x7f0000002100)=""/4077, 0xfed}, {&(0x7f00000007c0)=""/211, 0xd3}, {&(0x7f0000000b00)=""/231, 0xe7}, {&(0x7f0000000480)=""/176, 0xb0}, {&(0x7f0000000c00)=""/208, 0xd0}], 0xa}, 0x40012100) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000900), 0x404, r4, 0x0, 0x1ba8847c99}, 0x38) recvmsg$kcm(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3 (id=2060): r0 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000000)="a0ee97b38714bfc3f36c4ad00a7ee7686509bfd0569e702c82b6f34e87e58a3b8312c37680dbf366b8fa618bf8b8e03e1ca2", 0x1}], 0x1, 0x0, 0xfff0}, 0x10) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) kernel console output (not intermixed with test programs): 048576kB [ 100.229441][ T6152] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.250401][ T6152] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 100.268754][ T6168] netlink: 'syz.1.96': attribute type 4 has an invalid length. [ 100.282534][ T6168] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.96'. [ 100.305648][ T6152] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 100.390895][ T6152] 42364 total pagecache pages [ 100.395672][ T6152] 0 pages in swap cache [ 100.404121][ T6152] Free swap = 124996kB [ 100.409042][ T6152] Total swap = 124996kB [ 100.414772][ T6152] 2097051 pages RAM [ 100.418731][ T6152] 0 pages HighMem/MovableOnly [ 100.450089][ T6152] 416139 pages reserved [ 100.464690][ T6152] 0 pages cma reserved [ 100.680806][ T6179] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 100.707754][ T6183] pim6reg1: entered promiscuous mode [ 100.722855][ T6183] pim6reg1: entered allmulticast mode [ 101.105169][ T6197] netlink: 140 bytes leftover after parsing attributes in process `syz.3.108'. [ 101.114669][ T6197] netlink: 6 bytes leftover after parsing attributes in process `syz.3.108'. [ 101.426032][ T6209] sctp: [Deprecated]: syz.0.114 (pid 6209) Use of int in max_burst socket option deprecated. [ 101.426032][ T6209] Use struct sctp_assoc_value instead [ 101.639979][ T6219] netlink: 'syz.0.117': attribute type 9 has an invalid length. [ 101.654719][ T6219] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.117'. [ 101.668894][ T6219] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 102.367849][ T6243] macvlan0: entered promiscuous mode [ 102.381635][ T6243] macvlan0: entered allmulticast mode [ 102.397490][ T6243] veth1_vlan: entered allmulticast mode [ 103.107182][ T6271] netlink: 'syz.3.134': attribute type 2 has an invalid length. [ 103.138732][ T6269] pim6reg1: entered promiscuous mode [ 103.146780][ T6271] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 103.156984][ T6269] pim6reg1: entered allmulticast mode [ 103.170419][ T6271] netlink: 'syz.3.134': attribute type 2 has an invalid length. [ 103.190359][ T6271] netlink: 198048 bytes leftover after parsing attributes in process `syz.3.134'. [ 103.659903][ T6284] netlink: 35347 bytes leftover after parsing attributes in process `syz.1.140'. [ 104.062065][ T1139] wlan1: Trigger new scan to find an IBSS to join [ 104.296155][ T6300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.145'. [ 104.308399][ T6300] netlink: get zone limit has 4 unknown bytes [ 104.318911][ T6300] netlink: 'syz.3.145': attribute type 10 has an invalid length. [ 104.351012][ T6300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.362313][ T6300] team0: Port device batadv0 added [ 104.429220][ T6300] syz.3.145 (6300) used greatest stack depth: 19784 bytes left [ 104.592215][ T6307] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.146'. [ 104.637963][ T6307] netlink: 'syz.2.146': attribute type 13 has an invalid length. [ 104.660380][ T6307] netlink: 24859 bytes leftover after parsing attributes in process `syz.2.146'. [ 104.678408][ T6306] pim6reg1: entered promiscuous mode [ 104.684048][ T6306] pim6reg1: entered allmulticast mode [ 105.210564][ T6320] netlink: 'syz.1.152': attribute type 19 has an invalid length. [ 105.549341][ T6341] C: renamed from team_slave_0 (while UP) [ 105.568434][ T6341] netlink: 'syz.2.160': attribute type 4 has an invalid length. [ 105.586980][ T6341] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 105.673735][ T6343] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 105.674326][ T6344] netlink: 'syz.0.161': attribute type 40 has an invalid length. [ 105.799662][ T6344] pim6reg1: entered promiscuous mode [ 105.807446][ T6344] pim6reg1: entered allmulticast mode [ 105.820572][ T6346] netlink: 'syz.1.162': attribute type 10 has an invalid length. [ 105.829874][ T6346] netlink: 55 bytes leftover after parsing attributes in process `syz.1.162'. [ 106.396343][ T6354] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.162'. [ 106.413231][ T6357] tap0: tun_chr_ioctl cmd 1074025680 [ 106.918256][ T6380] syzkaller0: entered allmulticast mode [ 106.944908][ T6379] syzkaller0: entered promiscuous mode [ 106.974668][ T6379] syzkaller0: left allmulticast mode [ 107.351751][ T6391] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.175'. [ 107.539478][ T6392] pim6reg1: entered promiscuous mode [ 107.548435][ T6392] pim6reg1: entered allmulticast mode [ 109.031587][ T2915] wlan1: Trigger new scan to find an IBSS to join [ 109.911068][ T11] wlan1: Creating new IBSS network, BSSID 46:39:8c:13:e5:93 [ 110.314585][ T6416] netlink: 'syz.0.184': attribute type 2 has an invalid length. [ 110.337108][ T6416] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.385586][ T6417] netlink: 'syz.0.184': attribute type 25 has an invalid length. [ 110.404202][ T6417] netlink: 2418 bytes leftover after parsing attributes in process `syz.0.184'. [ 110.963562][ T6441] pim6reg1: entered promiscuous mode [ 110.969687][ T6441] pim6reg1: entered allmulticast mode [ 111.678308][ T6456] Zero length message leads to an empty skb [ 112.188984][ T6474] wg2: entered promiscuous mode [ 112.206391][ T6474] wg2: entered allmulticast mode [ 113.658122][ T6511] netlink: 168 bytes leftover after parsing attributes in process `syz.1.209'. [ 116.207069][ T6546] lo: entered allmulticast mode [ 116.329605][ T6551] netlink: 'syz.0.223': attribute type 2 has an invalid length. [ 116.350308][ T6551] netlink: 'syz.0.223': attribute type 8 has an invalid length. [ 116.363109][ T6551] netlink: 132 bytes leftover after parsing attributes in process `syz.0.223'. [ 116.724211][ T6565] netlink: 'syz.3.228': attribute type 10 has an invalid length. [ 117.074808][ T6575] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.231'. [ 117.089522][ T6575] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 117.439588][ T6576] macsec0: entered promiscuous mode [ 117.613232][ T6576] macsec0: entered allmulticast mode [ 117.659624][ T6576] veth1_macvtap: entered allmulticast mode [ 117.716399][ T6592] netlink: 'syz.3.235': attribute type 10 has an invalid length. [ 117.781377][ T6592] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 117.836414][ T6585] netlink: 'syz.1.234': attribute type 21 has an invalid length. [ 118.379666][ T6601] pim6reg1: entered promiscuous mode [ 118.400524][ T6601] pim6reg1: entered allmulticast mode [ 119.117382][ T6625] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.245'. [ 119.186265][ T6625] netlink: 'syz.2.245': attribute type 1 has an invalid length. [ 119.221240][ T6625] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.245'. [ 119.794774][ T6643] netlink: 'syz.2.250': attribute type 17 has an invalid length. [ 119.807372][ T6643] netlink: 'syz.2.250': attribute type 16 has an invalid length. [ 119.818114][ T6643] netlink: 152 bytes leftover after parsing attributes in process `syz.2.250'. [ 119.996747][ T6648] syz.0.254 uses obsolete (PF_INET,SOCK_PACKET) [ 120.297405][ T6656] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.358584][ T6660] pim6reg1: entered promiscuous mode [ 120.369896][ T6660] pim6reg1: entered allmulticast mode [ 120.380776][ T6656] netlink: 'syz.3.257': attribute type 9 has an invalid length. [ 120.393924][ T6656] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.257'. [ 121.697982][ T6690] sit0: entered allmulticast mode [ 121.787208][ T6690] sit0: entered promiscuous mode [ 122.088412][ T6690] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.268'. [ 124.160988][ T6743] netlink: 'syz.2.282': attribute type 4 has an invalid length. [ 124.225674][ T6743] netlink: 116 bytes leftover after parsing attributes in process `syz.2.282'. [ 124.789714][ T6770] netlink: 'syz.1.289': attribute type 12 has an invalid length. [ 124.814144][ T6770] netlink: 132 bytes leftover after parsing attributes in process `syz.1.289'. [ 125.430617][ T6782] netlink: 'syz.0.292': attribute type 21 has an invalid length. [ 125.438464][ T6782] netlink: 'syz.0.292': attribute type 30 has an invalid length. [ 125.539415][ T5786] cgroup: fork rejected by pids controller in /syz2 [ 125.716101][ T6794] syz.0.295[6794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.716233][ T6794] syz.0.295[6794] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.021812][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.160056][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.256975][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.388354][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.672639][ T6814] netlink: 'syz.0.301': attribute type 11 has an invalid length. [ 127.078731][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 127.092692][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 127.116899][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 127.157957][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 127.167935][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 127.175514][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 127.885313][ T6843] netlink: 'syz.3.307': attribute type 10 has an invalid length. [ 127.975218][ T6843] team0: Port device geneve1 added [ 128.081347][ T6842] delete_channel: no stack [ 128.109547][ T6825] chnl_net:caif_netlink_parms(): no params data found [ 128.246739][ T6843] syz.3.307 (6843) used greatest stack depth: 19048 bytes left [ 128.386019][ T6864] netlink: 'syz.3.310': attribute type 6 has an invalid length. [ 128.400481][ T6864] netlink: 164 bytes leftover after parsing attributes in process `syz.3.310'. [ 128.683639][ T6875] netlink: 'syz.3.311': attribute type 9 has an invalid length. [ 128.706937][ T6875] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.311'. [ 128.922830][ T6876] netlink: 'syz.0.319': attribute type 21 has an invalid length. [ 128.962087][ T6875] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 129.001356][ T6825] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.008644][ T6825] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.071047][ T6825] bridge_slave_0: entered allmulticast mode [ 129.107784][ T6825] bridge_slave_0: entered promiscuous mode [ 129.139162][ T6825] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.170504][ T6825] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.177801][ T6825] bridge_slave_1: entered allmulticast mode [ 129.206086][ T6825] bridge_slave_1: entered promiscuous mode [ 129.261387][ T5796] Bluetooth: hci2: command tx timeout [ 129.405282][ T6887] netlink: 'syz.0.312': attribute type 39 has an invalid length. [ 129.753447][ T6825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.815107][ T58] hsr_slave_0: left promiscuous mode [ 129.829671][ T58] hsr_slave_1: left promiscuous mode [ 129.861961][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.869486][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.878644][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.886701][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.926273][ T58] veth1_macvtap: left allmulticast mode [ 129.933462][ T58] veth1_macvtap: left promiscuous mode [ 129.940107][ T58] veth0_macvtap: left promiscuous mode [ 129.946195][ T58] veth1_vlan: left allmulticast mode [ 129.956311][ T58] veth1_vlan: left promiscuous mode [ 129.966339][ T58] veth0_vlan: left promiscuous mode [ 130.689677][ T58] team0 (unregistering): Port device team_slave_1 removed [ 130.752572][ T58] team0 (unregistering): Port device C removed [ 130.799517][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.817195][ T58] bond_slave_1 (unregistering): left promiscuous mode [ 130.895995][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.913778][ T58] bond_slave_0 (unregistering): left promiscuous mode [ 131.350364][ T5796] Bluetooth: hci2: command tx timeout [ 131.615808][ T58] bond0 (unregistering): Released all slaves [ 131.703170][ T6825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.869835][ T6825] team0: Port device team_slave_0 added [ 131.943745][ T6825] team0: Port device team_slave_1 added [ 132.067377][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.322'. [ 132.088644][ T6931] netlink: 60 bytes leftover after parsing attributes in process `syz.3.322'. [ 132.137736][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.169488][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.255348][ T6935] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.330'. [ 132.295833][ T6825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.351857][ T6927] netlink: 60 bytes leftover after parsing attributes in process `syz.3.322'. [ 132.417194][ T6825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.430391][ T6825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.496999][ T6825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.503637][ T6940] netlink: 'syz.1.323': attribute type 9 has an invalid length. [ 132.552344][ T6940] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.323'. [ 132.653080][ T6825] hsr_slave_0: entered promiscuous mode [ 132.684217][ T6825] hsr_slave_1: entered promiscuous mode [ 132.737324][ T6825] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 132.750506][ T6825] Cannot create hsr debugfs directory [ 132.756724][ T6940] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 133.042573][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.049292][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.406658][ T6963] netlink: 'syz.0.328': attribute type 39 has an invalid length. [ 133.421134][ T5796] Bluetooth: hci2: command tx timeout [ 133.839324][ T6975] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.333'. [ 134.125681][ T6825] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 134.141580][ T6825] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 134.156481][ T6825] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 134.179855][ T6825] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 134.479148][ T6825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.547235][ T6825] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.611608][ T2915] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.618817][ T2915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.704809][ T2915] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.712207][ T2915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.856146][ T7009] netlink: 'syz.3.339': attribute type 39 has an invalid length. [ 135.141325][ T7021] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 135.188438][ T7021] netlink: 51 bytes leftover after parsing attributes in process `syz.3.342'. [ 135.222930][ T7022] netlink: 'syz.3.342': attribute type 2 has an invalid length. [ 135.280438][ T7022] netlink: 51 bytes leftover after parsing attributes in process `syz.3.342'. [ 135.501479][ T5796] Bluetooth: hci2: command tx timeout [ 135.599553][ T6825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.765893][ T6825] veth0_vlan: entered promiscuous mode [ 135.809084][ T6825] veth1_vlan: entered promiscuous mode [ 135.889750][ T7035] netlink: 'syz.1.344': attribute type 10 has an invalid length. [ 135.945884][ T7035] team0: Port device netdevsim0 added [ 135.993819][ T6825] veth0_macvtap: entered promiscuous mode [ 136.029204][ T6825] veth1_macvtap: entered promiscuous mode [ 136.133435][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.167536][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.205842][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.239087][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.266403][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.296423][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.322324][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.353097][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.400386][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.419844][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.440258][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.460582][ T6825] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.480241][ T6825] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.502764][ T6825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.544438][ T6825] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.575344][ T6825] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.600272][ T6825] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.609035][ T6825] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.871829][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.879743][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.007000][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.040628][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.473190][ T7068] netlink: 'syz.0.350': attribute type 39 has an invalid length. [ 137.715174][ T7078] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.352'. [ 137.913883][ T7082] netlink: 212424 bytes leftover after parsing attributes in process `syz.1.354'. [ 138.866101][ T7115] tap0: tun_chr_ioctl cmd 1074025677 [ 138.875600][ T7115] tap0: linktype set to 825 [ 138.965443][ T7118] netlink: 'syz.1.360': attribute type 39 has an invalid length. [ 139.201053][ T7134] netlink: 'syz.3.364': attribute type 10 has an invalid length. [ 139.242941][ T7134] syz_tun: entered promiscuous mode [ 139.304786][ T7134] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 139.934483][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 143.141193][ T7206] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.370'. [ 143.167189][ T7206] tc_dump_action: action bad kind [ 143.402492][ T7217] netlink: 'syz.2.374': attribute type 39 has an invalid length. [ 143.619082][ T7221] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.375'. [ 143.652977][ T7224] netlink: 'syz.1.375': attribute type 10 has an invalid length. [ 143.691253][ T7224] netlink: 55 bytes leftover after parsing attributes in process `syz.1.375'. [ 144.428414][ T7238] netlink: 'syz.2.379': attribute type 21 has an invalid length. [ 144.450468][ T7238] netlink: 'syz.2.379': attribute type 1 has an invalid length. [ 144.936224][ T7242] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 144.980997][ T7242] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 145.182579][ T7242] netlink: 'syz.2.381': attribute type 29 has an invalid length. [ 145.784468][ T7257] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 145.792275][ T7257] IPv6: NLM_F_CREATE should be set when creating new route [ 145.799686][ T7257] IPv6: NLM_F_CREATE should be set when creating new route [ 145.807057][ T7257] IPv6: NLM_F_CREATE should be set when creating new route [ 146.395268][ T7266] tap0: tun_chr_ioctl cmd 1074025680 [ 149.598686][ T7271] netlink: 'syz.3.387': attribute type 39 has an invalid length. [ 151.164556][ T7305] netlink: 'syz.3.396': attribute type 39 has an invalid length. [ 151.173555][ T7308] netlink: 1057 bytes leftover after parsing attributes in process `syz.2.397'. [ 151.504940][ T7323] netlink: 'syz.2.401': attribute type 1 has an invalid length. [ 151.514519][ T7323] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.401'. [ 151.536772][ T7320] netlink: 16154 bytes leftover after parsing attributes in process `syz.3.400'. [ 152.693359][ T7359] netlink: 'syz.1.408': attribute type 39 has an invalid length. [ 153.188485][ T7377] pim6reg1: entered promiscuous mode [ 153.194459][ T7377] pim6reg1: entered allmulticast mode [ 153.617624][ T7390] netlink: 'syz.0.418': attribute type 39 has an invalid length. [ 154.017534][ T7400] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 154.208503][ T7400] team0: Port device netdevsim0 added [ 154.448490][ T7406] netlink: 'syz.0.421': attribute type 10 has an invalid length. [ 154.488325][ T7406] team0: Port device netdevsim0 removed [ 154.505865][ T7406] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 154.515999][ T7410] netlink: 830 bytes leftover after parsing attributes in process `syz.1.424'. [ 155.059191][ T7425] netlink: 'syz.2.429': attribute type 39 has an invalid length. [ 155.278332][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.433'. [ 155.305684][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.433'. [ 155.324721][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.433'. [ 155.337539][ T7436] netlink: 142556 bytes leftover after parsing attributes in process `syz.2.434'. [ 155.356654][ T7436] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 155.371493][ T7436] netlink: 'syz.2.434': attribute type 2 has an invalid length. [ 155.379510][ T7436] netlink: 'syz.2.434': attribute type 3 has an invalid length. [ 155.398962][ T7436] netlink: 'syz.2.434': attribute type 4 has an invalid length. [ 155.420720][ T7433] netlink: 60 bytes leftover after parsing attributes in process `syz.1.433'. [ 155.430762][ T7438] netlink: 'syz.1.433': attribute type 29 has an invalid length. [ 155.456114][ T7438] netlink: 'syz.1.433': attribute type 29 has an invalid length. [ 156.109022][ T7462] netlink: 'syz.2.442': attribute type 39 has an invalid length. [ 158.652069][ T7496] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 158.974866][ T7514] netlink: 'syz.2.455': attribute type 4 has an invalid length. [ 158.984724][ T7514] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.455'. [ 159.029265][ T7496] team0 (unregistering): Port device team_slave_0 removed [ 159.057295][ T7496] team0 (unregistering): Port device team_slave_1 removed [ 159.090556][ T7496] team0 (unregistering): Port device batadv0 removed [ 159.111829][ T7496] team0 (unregistering): Port device geneve1 removed [ 159.370742][ T7523] netlink: 144 bytes leftover after parsing attributes in process `syz.2.456'. [ 159.426939][ T7520] netlink: 132 bytes leftover after parsing attributes in process `syz.2.456'. [ 159.659918][ T7535] netlink: 132 bytes leftover after parsing attributes in process `syz.0.462'. [ 160.236650][ T7557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.470'. [ 160.248760][ T7557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.470'. [ 160.272351][ T7552] netlink: 44 bytes leftover after parsing attributes in process `syz.3.470'. [ 160.293235][ T7557] netlink: 44 bytes leftover after parsing attributes in process `syz.3.470'. [ 160.679350][ T7560] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 160.919380][ T7578] validate_nla: 4 callbacks suppressed [ 160.919421][ T7578] netlink: 'syz.2.478': attribute type 39 has an invalid length. [ 161.895603][ T7611] netlink: 'syz.2.488': attribute type 9 has an invalid length. [ 161.918465][ T7611] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.488'. [ 162.193800][ T7619] netlink: 'syz.1.490': attribute type 39 has an invalid length. [ 162.679817][ T7643] netlink: 'syz.2.497': attribute type 21 has an invalid length. [ 163.440080][ T7660] netlink: 'syz.3.503': attribute type 39 has an invalid length. [ 163.686472][ T7674] netlink: 132 bytes leftover after parsing attributes in process `syz.3.506'. [ 163.729967][ T7674] IPv6: …: Disabled Multicast RS [ 163.760024][ T7676] netlink: 'syz.1.508': attribute type 10 has an invalid length. [ 164.221412][ T7699] netlink: 'syz.2.514': attribute type 39 has an invalid length. [ 165.187441][ T7730] netlink: 'syz.3.524': attribute type 39 has an invalid length. [ 165.488512][ T7737] netlink: 'syz.2.526': attribute type 10 has an invalid length. [ 166.041146][ T7755] netlink: 'syz.1.536': attribute type 39 has an invalid length. [ 166.896139][ T7777] __nla_validate_parse: 2 callbacks suppressed [ 166.896158][ T7777] netlink: 763 bytes leftover after parsing attributes in process `syz.1.541'. [ 166.928234][ T7777] netlink: 'syz.1.541': attribute type 10 has an invalid length. [ 167.026457][ T7777] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.078160][ T7782] netlink: 'syz.2.542': attribute type 29 has an invalid length. [ 167.088139][ T7777] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.127500][ T7782] netlink: 'syz.2.542': attribute type 29 has an invalid length. [ 167.136552][ T7780] netlink: 'syz.2.542': attribute type 29 has an invalid length. [ 167.369020][ T7792] netlink: 'syz.1.546': attribute type 39 has an invalid length. [ 167.619191][ T7802] netlink: 2192 bytes leftover after parsing attributes in process `syz.1.550'. [ 168.249376][ T7829] syzkaller0: entered promiscuous mode [ 168.255710][ T7829] syzkaller0: entered allmulticast mode [ 168.633244][ T7836] netlink: 'syz.2.559': attribute type 39 has an invalid length. [ 168.827015][ T7846] syz.2.563[7846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 168.827274][ T7846] syz.2.563[7846] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 170.676649][ T7855] netlink: 'syz.2.566': attribute type 13 has an invalid length. [ 170.696174][ T7855] netlink: 160 bytes leftover after parsing attributes in process `syz.2.566'. [ 170.714440][ T7855] erspan0: refused to change device tx_queue_len [ 170.730601][ T7855] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 170.750374][ T7863] netlink: 'syz.0.568': attribute type 21 has an invalid length. [ 170.760398][ T7863] netlink: 156 bytes leftover after parsing attributes in process `syz.0.568'. [ 170.949716][ T7869] netlink: 'syz.1.571': attribute type 39 has an invalid length. [ 170.969918][ T7186] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 171.800466][ T7895] netlink: 'syz.3.581': attribute type 39 has an invalid length. [ 171.990695][ T7907] netlink: 'syz.0.587': attribute type 10 has an invalid length. [ 172.232967][ T7918] netlink: 'syz.3.589': attribute type 7 has an invalid length. [ 172.920456][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 172.988161][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 173.129172][ T7933] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.593'. [ 173.235729][ T7931] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 173.297571][ T7930] netlink: 60 bytes leftover after parsing attributes in process `syz.1.592'. [ 173.604202][ T7937] netlink: 'syz.1.594': attribute type 39 has an invalid length. [ 174.760593][ T7963] delete_channel: no stack [ 174.765288][ T7963] delete_channel: no stack [ 176.064806][ T7977] netlink: 'syz.0.605': attribute type 39 has an invalid length. [ 176.473561][ T7986] netlink: 'syz.0.609': attribute type 1 has an invalid length. [ 176.481777][ T7986] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.609'. [ 177.665535][ T8019] netlink: 'syz.3.617': attribute type 39 has an invalid length. [ 178.390109][ T8033] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.622'. [ 178.429172][ T8033] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 178.446000][ T8035] ref_ctr_offset mismatch. inode: 0x387 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 178.747839][ T8039] netlink: 'syz.1.623': attribute type 3 has an invalid length. [ 178.759474][ T8039] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.623'. [ 178.886318][ T8045] netlink: 'syz.2.627': attribute type 39 has an invalid length. [ 179.155936][ T8060] netlink: 'syz.1.632': attribute type 10 has an invalid length. [ 179.177739][ T8060] netlink: 212412 bytes leftover after parsing attributes in process `syz.1.632'. [ 179.210412][ T8060] openvswitch: netlink: Flow key attr not present in new flow. [ 179.492184][ T8065] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.634'. [ 179.602141][ T8068] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.635'. [ 179.648815][ T8068] syzkaller0: entered promiscuous mode [ 179.657438][ T8068] syzkaller0: entered allmulticast mode [ 179.905712][ T8080] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.638'. [ 179.913095][ T8084] netlink: 'syz.2.639': attribute type 39 has an invalid length. [ 179.946331][ T8085] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.640'. [ 180.070986][ T8087] netlink: 'syz.0.641': attribute type 33 has an invalid length. [ 180.080001][ T8087] netlink: 152 bytes leftover after parsing attributes in process `syz.0.641'. [ 180.116507][ T8091] netlink: 105120 bytes leftover after parsing attributes in process `syz.2.643'. [ 180.128664][ T8091] netlink: 'syz.2.643': attribute type 2 has an invalid length. [ 180.262472][ T8094] netlink: 'syz.3.644': attribute type 153 has an invalid length. [ 180.297428][ T8094] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.644'. [ 182.270760][ T8114] tap0: tun_chr_ioctl cmd 1074025677 [ 182.276291][ T8114] tap0: linktype set to 769 [ 182.411734][ T8119] netlink: 'syz.0.651': attribute type 39 has an invalid length. [ 182.513277][ T8121] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 182.625785][ T8130] tun0: tun_chr_ioctl cmd 1074025677 [ 182.650494][ T8130] tun0: linktype set to 270 [ 182.789065][ T8135] netlink: 'syz.2.656': attribute type 9 has an invalid length. [ 183.260703][ T8156] netlink: 'syz.2.663': attribute type 39 has an invalid length. [ 183.527793][ T8170] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.535691][ T8170] bridge0: port 1(bridge_slave_0) entered disabled state [ 183.560895][ T8170] bridge0: entered allmulticast mode [ 183.769511][ T8175] netlink: 'syz.2.669': attribute type 16 has an invalid length. [ 183.788890][ T8175] __nla_validate_parse: 4 callbacks suppressed [ 183.788908][ T8175] netlink: 152 bytes leftover after parsing attributes in process `syz.2.669'. [ 184.394793][ T8194] netlink: 2 bytes leftover after parsing attributes in process `syz.1.674'. [ 184.419541][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.455242][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.483269][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.512446][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.534607][ T8194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.553704][ T8194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.572272][ T8194] batadv_slave_1: entered promiscuous mode [ 184.586241][ T8193] netlink: 2 bytes leftover after parsing attributes in process `syz.1.674'. [ 184.596324][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.612714][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.623790][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.634755][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.645319][ T8193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.656474][ T8193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.859928][ T8203] netlink: 'syz.3.676': attribute type 39 has an invalid length. [ 185.732867][ T8229] netlink: 'syz.1.687': attribute type 39 has an invalid length. [ 185.916526][ T8235] netlink: 'syz.2.688': attribute type 21 has an invalid length. [ 186.025524][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 186.045112][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 186.064208][ T8238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 186.183549][ T8238] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 186.200622][ T8240] netlink: 60 bytes leftover after parsing attributes in process `syz.1.689'. [ 186.212194][ T8238] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.689'. [ 186.469588][ T8249] netlink: 15743 bytes leftover after parsing attributes in process `syz.1.694'. [ 186.514776][ T8246] netlink: 26 bytes leftover after parsing attributes in process `syz.3.693'. [ 187.561249][ T8269] netlink: 'syz.1.699': attribute type 39 has an invalid length. [ 189.338594][ T8309] netlink: 'syz.0.711': attribute type 39 has an invalid length. [ 189.429999][ T8315] netlink: 'syz.1.713': attribute type 6 has an invalid length. [ 189.461019][ T8315] netlink: 'syz.1.713': attribute type 1 has an invalid length. [ 189.483239][ T8315] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.713'. [ 190.299710][ T8341] syzkaller0: entered promiscuous mode [ 190.319491][ T8341] syzkaller0: entered allmulticast mode [ 190.389085][ T5796] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 192.609895][ T8348] netlink: 'syz.1.723': attribute type 39 has an invalid length. [ 192.617889][ T8353] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.724'. [ 193.678518][ T8376] netlink: 'syz.0.731': attribute type 2 has an invalid length. [ 193.718469][ T8379] GPL: port 1(erspan0) entered blocking state [ 193.726986][ T8376] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.731'. [ 193.752704][ T8379] GPL: port 1(erspan0) entered disabled state [ 193.770074][ T8379] erspan0: entered allmulticast mode [ 193.785485][ T8379] erspan0: entered promiscuous mode [ 193.820032][ T8378] GPL: port 1(erspan0) entered blocking state [ 193.826544][ T8378] GPL: port 1(erspan0) entered forwarding state [ 194.027115][ T8386] netlink: 'syz.1.733': attribute type 39 has an invalid length. [ 194.481892][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.488330][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.257984][ T8407] netlink: 15119 bytes leftover after parsing attributes in process `syz.1.741'. [ 196.267605][ T8411] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 196.274890][ T8411] IPv6: NLM_F_CREATE should be set when creating new route [ 196.282216][ T8411] IPv6: NLM_F_CREATE should be set when creating new route [ 196.289437][ T8411] IPv6: NLM_F_CREATE should be set when creating new route [ 196.309718][ T8425] netlink: 'syz.3.746': attribute type 39 has an invalid length. [ 196.448145][ T8428] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.747'. [ 196.526345][ T8433] netlink: 'syz.0.749': attribute type 13 has an invalid length. [ 196.561014][ T8433] netlink: 'syz.0.749': attribute type 58 has an invalid length. [ 196.568826][ T8433] netlink: 152 bytes leftover after parsing attributes in process `syz.0.749'. [ 197.683756][ T8441] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 197.711158][ T8441] netlink: 'syz.3.751': attribute type 10 has an invalid length. [ 197.718965][ T8441] netlink: 2 bytes leftover after parsing attributes in process `syz.3.751'. [ 198.249549][ T8449] delete_channel: no stack [ 198.342467][ T8462] netlink: 'syz.0.756': attribute type 39 has an invalid length. [ 198.752324][ T8479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.761'. [ 199.261234][ T8502] netlink: 'syz.1.767': attribute type 39 has an invalid length. [ 199.499612][ T8513] netlink: 'syz.1.772': attribute type 10 has an invalid length. [ 199.518317][ T8513] netlink: 40 bytes leftover after parsing attributes in process `syz.1.772'. [ 199.528486][ T8513] team0: entered promiscuous mode [ 199.535250][ T8513] team_slave_0: entered promiscuous mode [ 199.541724][ T8513] team_slave_1: entered promiscuous mode [ 199.547568][ T8513] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 199.555992][ T8513] team0: entered allmulticast mode [ 199.561471][ T8513] team_slave_0: entered allmulticast mode [ 199.567393][ T8513] team_slave_1: entered allmulticast mode [ 199.573557][ T8513] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 199.604905][ T8513] bond0: (slave team0): Releasing backup interface [ 199.626301][ T8513] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 199.693004][ T8519] netlink: 'syz.0.771': attribute type 3 has an invalid length. [ 199.714958][ T8524] netlink: 'syz.3.774': attribute type 1 has an invalid length. [ 199.722904][ T8519] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.771'. [ 199.746258][ T8524] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.774'. [ 199.776390][ T8524] netlink: 9 bytes leftover after parsing attributes in process `syz.3.774'. [ 201.663759][ T5793] Bluetooth: hci0: command 0x0406 tx timeout [ 201.669865][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 201.675946][ T5799] Bluetooth: hci3: command 0x0406 tx timeout [ 201.743262][ T8541] netlink: 16255 bytes leftover after parsing attributes in process `syz.2.778'. [ 202.093674][ T7182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 202.935475][ T8545] netlink: 'syz.2.780': attribute type 39 has an invalid length. [ 203.250782][ T8559] netlink: 128 bytes leftover after parsing attributes in process `syz.2.784'. [ 203.269024][ T8559] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 203.541272][ T8573] netlink: 'syz.0.790': attribute type 39 has an invalid length. [ 204.819099][ T5156] udevd[5156]: worker [5801] terminated by signal 33 (Unknown signal 33) [ 204.845403][ T5156] udevd[5156]: worker [5801] failed while handling '/devices/virtual/block/loop1' [ 205.191583][ T8603] netlink: 'syz.2.800': attribute type 39 has an invalid length. [ 205.232148][ T8604] netlink: 'syz.1.799': attribute type 10 has an invalid length. [ 205.263677][ T8604] team0: left promiscuous mode [ 205.269156][ T8604] team_slave_0: left promiscuous mode [ 205.309581][ T8604] team_slave_1: left promiscuous mode [ 205.348740][ T8604] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 205.391118][ T8604] team0: left allmulticast mode [ 205.396055][ T8604] team_slave_0: left allmulticast mode [ 205.489347][ T8604] team_slave_1: left allmulticast mode [ 205.533180][ T8604] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 205.573018][ T8604] batman_adv: batadv0: Adding interface: team0 [ 205.603022][ T8604] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.673303][ T8604] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 206.000641][ T8611] netlink: 'syz.3.803': attribute type 10 has an invalid length. [ 206.689689][ T8634] netlink: 14 bytes leftover after parsing attributes in process `syz.2.806'. [ 206.711223][ T8634] hsr_slave_0: left promiscuous mode [ 206.724617][ T8634] hsr_slave_1: left promiscuous mode [ 207.129840][ T8642] netlink: 'syz.2.810': attribute type 39 has an invalid length. [ 207.403689][ T8658] netlink: 'syz.2.815': attribute type 22 has an invalid length. [ 207.430999][ T8658] netlink: 4 bytes leftover after parsing attributes in process `syz.2.815'. [ 207.539456][ T8663] C: renamed from team_slave_0 (while UP) [ 207.565236][ T8663] netlink: 'syz.1.818': attribute type 3 has an invalid length. [ 207.580627][ T8663] netlink: 152 bytes leftover after parsing attributes in process `syz.1.818'. [ 207.601309][ T8663] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 207.674087][ T8667] netlink: 'syz.3.819': attribute type 7 has an invalid length. [ 207.730241][ T8667] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 207.744758][ T8667] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.819'. [ 208.043090][ T8678] netlink: 'syz.1.823': attribute type 39 has an invalid length. [ 208.743622][ T8700] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 208.761003][ T8700] syzkaller1: linktype set to 0 [ 208.777539][ T8700] netlink: 'syz.3.831': attribute type 10 has an invalid length. [ 208.830062][ T8702] netlink: 'syz.1.832': attribute type 1 has an invalid length. [ 208.866460][ T8702] netlink: 'syz.1.832': attribute type 4 has an invalid length. [ 208.925652][ T8702] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.832'. [ 208.998890][ T8706] netlink: 'syz.2.833': attribute type 39 has an invalid length. [ 209.226737][ T8718] netlink: 14568 bytes leftover after parsing attributes in process `syz.2.836'. [ 209.978291][ T8745] netlink: 'syz.1.845': attribute type 39 has an invalid length. [ 210.675156][ T8775] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 210.690716][ T8775] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 210.783133][ T8774] netlink: 'syz.1.853': attribute type 21 has an invalid length. [ 210.859750][ T8777] netlink: 'syz.2.852': attribute type 21 has an invalid length. [ 211.147410][ T8784] netlink: set zone limit has 8 unknown bytes [ 211.344548][ T8788] netlink: 'syz.3.857': attribute type 39 has an invalid length. [ 211.814257][ T8807] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 211.823314][ T8807] syzkaller1: linktype set to 823 [ 211.863669][ T8811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.865'. [ 211.883811][ T8815] netlink: 'syz.1.863': attribute type 2 has an invalid length. [ 211.900321][ T8815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.863'. [ 211.932767][ T8815] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 212.190479][ T8823] netlink: 132 bytes leftover after parsing attributes in process `syz.3.869'. [ 212.561197][ T8820] macsec0: entered promiscuous mode [ 212.573030][ T8820] macsec0: entered allmulticast mode [ 212.580858][ T8820] veth1_macvtap: entered allmulticast mode [ 212.813006][ T8844] netlink: 3 bytes leftover after parsing attributes in process `syz.0.871'. [ 212.834576][ T8846] tap0: tun_chr_ioctl cmd 2148553947 [ 212.864925][ T8830] netlink: 31639 bytes leftover after parsing attributes in process `syz.0.871'. [ 212.879812][ T8830] delete_channel: no stack [ 214.569502][ T8858] validate_nla: 4 callbacks suppressed [ 214.569518][ T8858] netlink: 'syz.1.878': attribute type 10 has an invalid length. [ 214.583539][ T8858] netlink: 'syz.1.878': attribute type 19 has an invalid length. [ 214.591414][ T8858] netlink: 14536 bytes leftover after parsing attributes in process `syz.1.878'. [ 214.614983][ T8865] netlink: 'syz.3.880': attribute type 39 has an invalid length. [ 214.902215][ T8873] netlink: 'syz.2.883': attribute type 39 has an invalid length. [ 215.734788][ T8910] netlink: 830 bytes leftover after parsing attributes in process `syz.1.896'. [ 215.835933][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 215.851708][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 215.873445][ T8914] netlink: 44 bytes leftover after parsing attributes in process `syz.2.898'. [ 216.028760][ T8917] netlink: 'syz.1.899': attribute type 39 has an invalid length. [ 216.064600][ T8921] syz.0.900[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.064736][ T8921] syz.0.900[8921] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.250036][ T8925] syz.0.900[8925] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 216.911185][ T8944] netlink: 'syz.1.908': attribute type 9 has an invalid length. [ 216.974661][ T8944] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.908'. [ 217.021877][ T8944] netlink: 'syz.1.908': attribute type 21 has an invalid length. [ 217.029740][ T8944] netlink: 'syz.1.908': attribute type 6 has an invalid length. [ 217.090283][ T8944] netlink: 132 bytes leftover after parsing attributes in process `syz.1.908'. [ 217.643999][ T8967] netlink: 'syz.2.911': attribute type 39 has an invalid length. [ 218.029237][ T8978] netlink: 'syz.3.913': attribute type 6 has an invalid length. [ 218.090933][ T8978] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.913'. [ 218.335202][ T8984] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.917'. [ 218.507237][ T8989] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.918'. [ 218.586628][ T8996] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.920'. [ 218.615993][ T8996] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 218.655615][ T8996] openvswitch: netlink: Message has 1 unknown bytes. [ 219.647061][ T9007] netlink: 2 bytes leftover after parsing attributes in process `syz.3.922'. [ 219.672344][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.709724][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.730032][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.745931][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.759139][ T9007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.813751][ T9007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.825539][ T9007] batadv_slave_1: entered promiscuous mode [ 219.839713][ T9009] validate_nla: 3 callbacks suppressed [ 219.839749][ T9009] netlink: 'syz.2.923': attribute type 39 has an invalid length. [ 220.370346][ T9019] netlink: 132 bytes leftover after parsing attributes in process `syz.1.924'. [ 220.911376][ T9038] netlink: 'syz.1.929': attribute type 33 has an invalid length. [ 220.930510][ T9038] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.929'. [ 221.232387][ T9045] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.931'. [ 221.254273][ T9046] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.931'. [ 221.303330][ T9048] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 221.345103][ T9048] netlink: 146340 bytes leftover after parsing attributes in process `syz.3.930'. [ 221.521090][ T9052] netlink: 'syz.0.934': attribute type 39 has an invalid length. [ 221.720955][ T9066] netlink: 'syz.2.933': attribute type 21 has an invalid length. [ 221.894585][ T9066] netlink: 'syz.2.933': attribute type 21 has an invalid length. [ 222.656463][ T9084] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 222.670301][ T9084] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 222.700419][ T9084] netlink: 'syz.1.942': attribute type 4 has an invalid length. [ 222.762650][ T9084] .`: renamed from bond0 (while UP) [ 222.916530][ T9083] netlink: 'syz.2.944': attribute type 21 has an invalid length. [ 222.952154][ T9083] netlink: 'syz.2.944': attribute type 30 has an invalid length. [ 222.962905][ T9086] netlink: 'syz.1.942': attribute type 39 has an invalid length. [ 223.038435][ T9086] veth0_macvtap: left promiscuous mode [ 223.888107][ T9109] syzkaller0: entered promiscuous mode [ 223.908390][ T9119] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:0603:0500:0023 with DS=0x32 [ 223.918288][ T9109] syzkaller0: entered allmulticast mode [ 224.001406][ T9121] __nla_validate_parse: 3 callbacks suppressed [ 224.001421][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 224.059704][ T9121] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 224.120920][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 224.200302][ T9117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.953'. [ 224.268347][ T9132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.333853][ T9135] IPv6: NLM_F_CREATE should be specified when creating new route [ 225.108037][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'. [ 225.125436][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'. [ 225.138670][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'. [ 225.153733][ T9169] netlink: 60 bytes leftover after parsing attributes in process `syz.3.968'. [ 225.227394][ T9171] netlink: 163260 bytes leftover after parsing attributes in process `syz.0.969'. [ 225.285882][ T9174] validate_nla: 4 callbacks suppressed [ 225.285899][ T9174] netlink: 'syz.3.971': attribute type 10 has an invalid length. [ 225.322462][ T9174] netlink: 2 bytes leftover after parsing attributes in process `syz.3.971'. [ 225.331972][ T9174] bond0: entered promiscuous mode [ 225.337841][ T9174] bond_slave_0: entered promiscuous mode [ 225.345816][ T9174] bond_slave_1: entered promiscuous mode [ 225.359405][ T9175] netlink: 'syz.2.970': attribute type 39 has an invalid length. [ 225.759031][ T9187] tap0: tun_chr_ioctl cmd 1074025677 [ 225.791193][ T9187] tap0: linktype set to 769 [ 226.321745][ T5790] Bluetooth: hci0: unexpected event 0x06 length: 15 > 3 [ 226.439410][ T9205] netlink: 'syz.3.980': attribute type 39 has an invalid length. [ 227.791784][ T9246] netlink: 'syz.3.993': attribute type 39 has an invalid length. [ 228.031125][ T9254] netlink: 'syz.1.997': attribute type 28 has an invalid length. [ 228.060450][ T9254] netlink: 'syz.1.997': attribute type 4 has an invalid length. [ 228.315889][ T9261] wg2: entered promiscuous mode [ 228.371623][ T9261] wg2: entered allmulticast mode [ 228.393222][ T9257] syzkaller0: entered promiscuous mode [ 228.399116][ T9257] syzkaller0: entered allmulticast mode [ 228.550968][ T9269] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 229.286919][ T9294] netlink: 'syz.3.1006': attribute type 39 has an invalid length. [ 229.303281][ T29] tipc: Subscription rejected, illegal request [ 230.564413][ T9315] netlink: 'syz.2.1012': attribute type 21 has an invalid length. [ 230.596520][ T9315] __nla_validate_parse: 5 callbacks suppressed [ 230.596562][ T9315] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1012'. [ 230.640579][ T9315] netlink: 'syz.2.1012': attribute type 4 has an invalid length. [ 231.101399][ T9315] pim6reg1: entered promiscuous mode [ 231.119551][ T9315] pim6reg1: entered allmulticast mode [ 231.538050][ T9334] netlink: 'syz.1.1017': attribute type 39 has an invalid length. [ 232.474509][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 232.778434][ T9347] netlink: 'syz.1.1019': attribute type 2 has an invalid length. [ 232.809415][ T9347] netlink: 'syz.1.1019': attribute type 8 has an invalid length. [ 232.830376][ T9347] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1019'. [ 233.119552][ T7182] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 233.487633][ T9358] netlink: 'syz.3.1022': attribute type 3 has an invalid length. [ 233.522633][ T9358] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1022'. [ 236.107738][ T9384] netlink: 'syz.1.1030': attribute type 10 has an invalid length. [ 236.120265][ T9384] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1030'. [ 236.169910][ T9384] team0: Port device geneve0 added [ 236.443595][ T2902] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.626767][ T2902] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.774344][ T2902] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.909978][ T2902] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.090223][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 237.109097][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 237.114054][ T9402] netlink: 'syz.3.1037': attribute type 9 has an invalid length. [ 237.117523][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 237.133990][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 237.143027][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 237.150869][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 237.156173][ T9402] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1037'. [ 237.357131][ T9402] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1037'. [ 237.582537][ T9416] netlink: 'syz.3.1041': attribute type 40 has an invalid length. [ 237.749464][ T9416] pim6reg1: entered promiscuous mode [ 237.755334][ T9416] pim6reg1: entered allmulticast mode [ 237.763948][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 238.077612][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.086350][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.094557][ T9399] bridge_slave_0: entered allmulticast mode [ 238.102351][ T9399] bridge_slave_0: entered promiscuous mode [ 238.129949][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.138154][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.149818][ T9399] bridge_slave_1: entered allmulticast mode [ 238.168696][ T9399] bridge_slave_1: entered promiscuous mode [ 238.184418][ T9427] netlink: 'syz.3.1044': attribute type 28 has an invalid length. [ 238.196317][ T9427] netlink: 'syz.3.1044': attribute type 4 has an invalid length. [ 238.221037][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1044'. [ 238.288833][ T9423] delete_channel: no stack [ 238.323833][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.367247][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 238.549791][ T9399] team0: Port device team_slave_0 added [ 238.568828][ T9399] team0: Port device team_slave_1 added [ 238.779378][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.843824][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.992085][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.084364][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.159923][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.261316][ T50] Bluetooth: hci2: command tx timeout [ 239.336508][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.399844][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.443476][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.498023][ T2902] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.601781][ T2902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.751857][ T2902] bridge_slave_1: left allmulticast mode [ 239.757608][ T2902] bridge_slave_1: left promiscuous mode [ 239.804233][ T2902] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.982405][ T2902] bridge_slave_0: left allmulticast mode [ 239.988260][ T2902] bridge_slave_0: left promiscuous mode [ 240.011216][ T2902] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.218749][ T2902] veth1_macvtap: left allmulticast mode [ 240.239677][ T2902] veth1_macvtap: left promiscuous mode [ 240.251632][ T2902] veth0_macvtap: left promiscuous mode [ 240.257468][ T2902] veth1_vlan: left promiscuous mode [ 240.281020][ T2902] veth0_vlan: left promiscuous mode [ 241.336196][ T2902] team0 (unregistering): Port device team_slave_1 removed [ 241.341957][ T50] Bluetooth: hci2: command tx timeout [ 241.442858][ T2902] team0 (unregistering): Port device team_slave_0 removed [ 241.509971][ T2902] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.606916][ T2902] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.197137][ T9465] netlink: 'syz.0.1055': attribute type 28 has an invalid length. [ 242.209890][ T9465] netlink: 'syz.0.1055': attribute type 4 has an invalid length. [ 242.228148][ T9465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1055'. [ 242.394066][ T2902] bond0 (unregistering): Released all slaves [ 242.495587][ T9446] netlink: 'syz.3.1050': attribute type 4 has an invalid length. [ 242.508127][ T9446] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1050'. [ 242.551918][ T9446] .`: renamed from bond0 (while UP) [ 242.635871][ T9399] hsr_slave_0: entered promiscuous mode [ 242.647344][ T9399] hsr_slave_1: entered promiscuous mode [ 242.656345][ T9399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.667517][ T9399] Cannot create hsr debugfs directory [ 242.677790][ T9449] netlink: 'syz.3.1050': attribute type 39 has an invalid length. [ 242.719508][ T9457] netlink: 'syz.1.1053': attribute type 40 has an invalid length. [ 243.159210][ T9468] delete_channel: no stack [ 243.421366][ T50] Bluetooth: hci2: command tx timeout [ 243.556476][ T9488] netlink: 'syz.3.1063': attribute type 39 has an invalid length. [ 243.916505][ T9399] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 243.965272][ T9399] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 244.063622][ T9399] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 244.110399][ T9399] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 244.338679][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.389572][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.408905][ T9501] netlink: 'syz.3.1073': attribute type 12 has an invalid length. [ 244.440608][ T9501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1073'. [ 244.463209][ T9503] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 244.492905][ T9503] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 244.522550][ T9504] netlink: 'syz.0.1065': attribute type 4 has an invalid length. [ 244.540878][ T9504] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1065'. [ 244.613141][ T9504] .`: renamed from bond0 (while UP) [ 244.937299][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.944749][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.025132][ T29] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.032479][ T29] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.128430][ T9504] netlink: 'syz.0.1065': attribute type 39 has an invalid length. [ 245.209915][ T9504] veth0_macvtap: left promiscuous mode [ 245.500703][ T50] Bluetooth: hci2: command tx timeout [ 246.064628][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.239317][ T9399] veth0_vlan: entered promiscuous mode [ 246.279229][ T9399] veth1_vlan: entered promiscuous mode [ 246.462185][ T9399] veth0_macvtap: entered promiscuous mode [ 246.496992][ T9399] veth1_macvtap: entered promiscuous mode [ 246.594060][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.628292][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.676937][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.703263][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.782678][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.832569][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.863483][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.238707][ T9542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 247.335619][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.360586][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.380495][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.410564][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.428270][ T9399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.450620][ T9399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.482537][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.520974][ T9549] netlink: 'syz.0.1078': attribute type 12 has an invalid length. [ 247.561205][ T9549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1078'. [ 247.637342][ T9399] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.668572][ T9399] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.701827][ T9399] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.711610][ T9399] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.048531][ T7182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.061768][ T7182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.091606][ T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.099688][ T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.318106][ T9560] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 251.335070][ T9560] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 251.359523][ T9560] netlink: 'syz.2.1079': attribute type 4 has an invalid length. [ 251.405830][ T9560] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1079'. [ 251.449444][ T9560] .`: renamed from bond0 (while UP) [ 251.640778][ T9560] netlink: 'syz.2.1079': attribute type 39 has an invalid length. [ 251.663615][ T9560] veth0_macvtap: left promiscuous mode [ 253.757528][ T9614] netlink: 'syz.2.1097': attribute type 10 has an invalid length. [ 253.766965][ T9614] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 253.780306][ T9614] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 253.817527][ T9614] team0: Port device netdevsim0 added [ 254.769210][ T9637] netlink: 'syz.2.1104': attribute type 21 has an invalid length. [ 254.812145][ T9637] netlink: 'syz.2.1104': attribute type 21 has an invalid length. [ 254.948736][ T9645] netlink: 'syz.2.1105': attribute type 21 has an invalid length. [ 254.965003][ T9648] netlink: 'syz.1.1106': attribute type 39 has an invalid length. [ 255.005755][ T9645] netlink: 'syz.2.1105': attribute type 2 has an invalid length. [ 255.051546][ T9645] netlink: 'syz.2.1105': attribute type 8 has an invalid length. [ 255.059348][ T9645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1105'. [ 255.123367][ T9652] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1108'. [ 255.145606][ T9652] netlink: 'syz.3.1108': attribute type 3 has an invalid length. [ 255.157235][ T9652] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1108'. [ 255.905239][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.911857][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.028308][ T9687] netlink: 'syz.2.1117': attribute type 3 has an invalid length. [ 256.048749][ T9687] netlink: 'syz.2.1117': attribute type 16 has an invalid length. [ 256.057830][ T9687] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1117'. [ 256.077991][ T9689] netlink: 703 bytes leftover after parsing attributes in process `syz.2.1117'. [ 259.122398][ T50] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 260.166327][ T9747] validate_nla: 3 callbacks suppressed [ 260.166343][ T9747] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 260.172127][ T9748] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 260.220914][ T9747] netlink: 'syz.3.1136': attribute type 29 has an invalid length. [ 260.403310][ T9755] tap0: tun_chr_ioctl cmd 2147767519 [ 260.415099][ T9761] netlink: 'syz.0.1139': attribute type 1 has an invalid length. [ 260.421514][ T9755] tap0: tun_chr_ioctl cmd 1074025675 [ 260.438459][ T9761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1139'. [ 260.448347][ T9755] tap0: persist disabled [ 260.453524][ T9762] netlink: 'syz.2.1140': attribute type 12 has an invalid length. [ 260.465084][ T9762] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1140'. [ 260.739175][ T9770] pim6reg1: entered promiscuous mode [ 260.748589][ T9770] pim6reg1: entered allmulticast mode [ 260.762382][ T9774] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1141'. [ 260.775563][ T9774] openvswitch: netlink: Flow key attribute not present in set flow. [ 261.825254][ T9803] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1148'. [ 262.356113][ T9818] netlink: 'syz.0.1153': attribute type 39 has an invalid length. [ 263.163373][ T9830] netlink: 'syz.3.1159': attribute type 1 has an invalid length. [ 263.171538][ T9830] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1159'. [ 263.312335][ T9839] netlink: 'syz.1.1161': attribute type 10 has an invalid length. [ 263.338892][ T9839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.376767][ T9839] .`: (slave batadv0): Enslaving as an active interface with an up link [ 263.391222][ T9841] netlink: 'syz.1.1161': attribute type 10 has an invalid length. [ 263.399296][ T9841] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1161'. [ 263.413699][ T9841] batadv0: entered promiscuous mode [ 263.418953][ T9841] batadv0: entered allmulticast mode [ 263.428641][ T9841] .`: (slave batadv0): Releasing backup interface [ 263.468399][ T9841] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 263.907863][ T9857] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1166'. [ 264.155339][ T9870] netlink: 'syz.3.1171': attribute type 153 has an invalid length. [ 264.177461][ T9878] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1173'. [ 264.181399][ T9870] netlink: 70436 bytes leftover after parsing attributes in process `syz.3.1171'. [ 264.246407][ T9878] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 264.249396][ T7186] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 264.560509][ T9887] raw_sendmsg: syz.0.1175 forgot to set AF_INET. Fix it! [ 265.620120][ T9922] sit0: entered promiscuous mode [ 265.637409][ T9922] sit0: entered allmulticast mode [ 265.673241][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 265.684812][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 265.692890][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 265.703374][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 265.711837][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 265.719556][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 265.904882][ T9935] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1189'. [ 265.937026][ T9935] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1189'. [ 265.973150][ T9935] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1189'. [ 266.341376][ T9925] chnl_net:caif_netlink_parms(): no params data found [ 266.624274][ T9925] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.645771][ T9925] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.656632][ T9925] bridge_slave_0: entered allmulticast mode [ 266.665054][ T9925] bridge_slave_0: entered promiscuous mode [ 266.687752][ T9925] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.706828][ T9925] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.729727][ T9925] bridge_slave_1: entered allmulticast mode [ 266.741713][ T9925] bridge_slave_1: entered promiscuous mode [ 266.858823][ T9925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.897862][ T9925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.052322][ T9925] team0: Port device team_slave_0 added [ 267.171121][ T9925] team0: Port device team_slave_1 added [ 267.284481][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.302675][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.395248][ T9925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.455022][ T9925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.475872][ T9925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.518733][ T9925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.605865][ T9925] hsr_slave_0: entered promiscuous mode [ 267.614576][ T9925] hsr_slave_1: entered promiscuous mode [ 267.629941][ T9925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.637679][ T9925] Cannot create hsr debugfs directory [ 267.712172][ T9958] macsec0: entered promiscuous mode [ 267.723460][ T9958] macsec0: entered allmulticast mode [ 267.740859][ T5790] Bluetooth: hci2: command tx timeout [ 267.743030][ T9958] veth1_macvtap: entered allmulticast mode [ 267.964389][ T9925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.105615][ T9925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.240005][ T9925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.391244][ T9980] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1204'. [ 268.407767][ T9980] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 268.447731][ T9925] team0: Port device netdevsim0 removed [ 268.471275][ T9925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.607570][ T9978] macsec0: entered promiscuous mode [ 268.643101][ T9978] macsec0: entered allmulticast mode [ 268.650963][ T9978] veth1_macvtap: entered allmulticast mode [ 268.748759][ T9925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.771499][ T9925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.804166][ T9925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.824400][ T9925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.907631][ T9988] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.1207'. [ 268.921200][ T9996] syzkaller1: tun_chr_ioctl cmd 1074025675 [ 268.927042][ T9996] syzkaller1: persist disabled [ 269.009589][ T9925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.055431][ T9925] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.071567][ T7186] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.078921][ T7186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.100717][ T7808] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.107901][ T7808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.148211][T10000] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 269.155259][T10000] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 269.177334][T10000] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1209'. [ 269.588549][T10012] netlink: 'syz.1.1211': attribute type 3 has an invalid length. [ 269.607439][T10012] netlink: 'syz.1.1211': attribute type 1 has an invalid length. [ 269.624377][T10012] netlink: 199820 bytes leftover after parsing attributes in process `syz.1.1211'. [ 269.729346][T10015] IPv6: Can't replace route, no match found [ 269.745261][ T9925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.830911][ T5790] Bluetooth: hci2: command tx timeout [ 269.867248][ T9925] veth0_vlan: entered promiscuous mode [ 269.868565][T10019] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.1214'. [ 269.906149][ T9925] veth1_vlan: entered promiscuous mode [ 269.974391][ T9925] veth0_macvtap: entered promiscuous mode [ 269.988121][ T9925] veth1_macvtap: entered promiscuous mode [ 270.047434][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.079258][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.096519][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.114405][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.128245][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.150395][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.167831][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.178666][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.193818][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.209258][T10025] netlink: 'syz.3.1217': attribute type 10 has an invalid length. [ 270.218125][T10025] .`: left promiscuous mode [ 270.223449][T10025] bond_slave_0: left promiscuous mode [ 270.230143][T10025] bond_slave_1: left promiscuous mode [ 270.242193][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.252890][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.262894][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.274110][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.284116][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.295028][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.305333][ T9925] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.317096][ T9925] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.329203][ T9925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.352996][ T9925] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.361906][ T9925] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.371124][ T9925] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.379941][ T9925] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.478584][ T7186] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.486983][ T7186] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.517174][ T2902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.526653][ T2902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.599623][T10034] C: renamed from team_slave_0 (while UP) [ 270.611515][T10034] netlink: 'syz.2.1178': attribute type 3 has an invalid length. [ 270.619304][T10034] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1178'. [ 270.628634][T10034] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 270.649358][T10034] netlink: 'syz.2.1178': attribute type 10 has an invalid length. [ 270.658774][T10034] veth1_vlan: entered allmulticast mode [ 270.676821][T10034] team0: Device veth1_vlan failed to register rx_handler [ 271.085729][T10053] netlink: 13951 bytes leftover after parsing attributes in process `syz.2.1222'. [ 271.901938][ T5790] Bluetooth: hci2: command tx timeout [ 272.042428][T10065] netlink: 'syz.2.1224': attribute type 3 has an invalid length. [ 272.077148][T10065] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1224'. [ 272.215428][T10072] netlink: 'syz.2.1228': attribute type 10 has an invalid length. [ 272.224773][T10072] vlan0: entered allmulticast mode [ 272.230586][T10072] veth0_vlan: entered allmulticast mode [ 272.264794][T10072] team0: Port device vlan0 added [ 272.421176][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'. [ 272.449649][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'. [ 272.469119][T10081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1231'. [ 272.490828][T10081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.210710][T10096] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 273.223935][T10096] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 273.249411][T10097] netlink: 'syz.1.1235': attribute type 29 has an invalid length. [ 273.423814][T10104] syzkaller0: entered promiscuous mode [ 273.441691][T10104] syzkaller0: entered allmulticast mode [ 273.980764][ T5790] Bluetooth: hci2: command tx timeout [ 275.894428][T10146] validate_nla: 3 callbacks suppressed [ 275.894447][T10146] netlink: 'syz.2.1248': attribute type 10 has an invalid length. [ 275.923797][T10146] macvlan0: entered allmulticast mode [ 275.947491][T10146] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 276.594980][T10173] syzkaller0: entered promiscuous mode [ 276.601806][T10173] syzkaller0: entered allmulticast mode [ 276.614605][T10181] netlink: 'syz.2.1261': attribute type 10 has an invalid length. [ 276.687306][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.766052][T10181] bond0: (slave team0): Enslaving as an active interface with an up link [ 278.867672][T10192] C: renamed from team_slave_0 [ 278.877279][T10192] netlink: 'syz.3.1264': attribute type 2 has an invalid length. [ 278.885239][T10192] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1264'. [ 278.895290][T10192] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 278.910608][T10194] netlink: 'syz.2.1265': attribute type 5 has an invalid length. [ 279.174102][T10214] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.1270'. [ 279.187461][T10217] netlink: 'syz.2.1269': attribute type 7 has an invalid length. [ 279.221381][T10217] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 279.229179][T10217] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1269'. [ 279.417761][T10222] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.1271'. [ 279.556572][T10227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1273'. [ 279.570370][T10227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1273'. [ 279.591696][T10229] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1273'. [ 279.619310][T10227] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1273'. [ 279.950328][T10235] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1275'. [ 280.427536][T10259] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1282'. [ 280.458335][T10259] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 281.216973][T10285] netlink: 'syz.2.1287': attribute type 9 has an invalid length. [ 281.633855][T10290] tun0: tun_chr_ioctl cmd 1074025677 [ 281.668862][T10290] tun0: linktype set to 776 [ 282.044039][T10304] netlink: 'syz.0.1295': attribute type 28 has an invalid length. [ 282.529578][T10324] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 282.557968][T10324] netlink: 'syz.2.1300': attribute type 1 has an invalid length. [ 282.847357][T10332] netlink: 'syz.2.1301': attribute type 10 has an invalid length. [ 282.863601][T10332] hsr0: entered promiscuous mode [ 282.889028][T10332] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 282.926965][T10332] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 282.953355][T10332] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 282.984293][T10332] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 283.170552][T10337] netlink: 'syz.2.1303': attribute type 4 has an invalid length. [ 283.264552][T10340] netlink: 'syz.1.1302': attribute type 2 has an invalid length. [ 283.349310][T10346] netlink: 'syz.3.1305': attribute type 3 has an invalid length. [ 284.260099][T10376] __nla_validate_parse: 11 callbacks suppressed [ 284.266619][T10376] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1313'. [ 284.285073][T10376] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1313'. [ 284.296068][T10375] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1313'. [ 284.306266][T10376] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1313'. [ 284.761906][T10387] netlink: 'syz.2.1317': attribute type 9 has an invalid length. [ 284.782338][T10388] netlink: 'syz.0.1318': attribute type 29 has an invalid length. [ 284.802946][T10387] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1317'. [ 284.951687][T10391] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1320'. [ 285.066367][T10391] netlink: 102536 bytes leftover after parsing attributes in process `syz.3.1320'. [ 286.358731][T10415] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 286.904458][T10455] validate_nla: 6 callbacks suppressed [ 286.904478][T10455] netlink: 'syz.1.1336': attribute type 10 has an invalid length. [ 286.964153][T10455] team0: Port device geneve1 added [ 287.006769][T10459] pim6reg: tun_chr_ioctl cmd 1074812118 [ 287.021961][T10459] netlink: 'syz.3.1337': attribute type 10 has an invalid length. [ 287.423168][T10484] syzkaller0: entered promiscuous mode [ 287.433701][T10484] syzkaller0: entered allmulticast mode [ 287.628468][T10495] netlink: 'syz.0.1346': attribute type 2 has an invalid length. [ 287.640103][T10495] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1346'. [ 288.244522][T10515] netlink: 'syz.0.1352': attribute type 21 has an invalid length. [ 288.260569][T10515] netlink: 'syz.0.1352': attribute type 6 has an invalid length. [ 288.290289][T10515] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1352'. [ 288.956865][T10528] netlink: 'syz.1.1356': attribute type 153 has an invalid length. [ 288.965027][T10528] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1356'. [ 289.290804][T10541] syzkaller0: entered promiscuous mode [ 289.296351][T10541] syzkaller0: entered allmulticast mode [ 292.032296][T10564] netlink: 'syz.3.1366': attribute type 9 has an invalid length. [ 292.041948][T10564] netlink: 399 bytes leftover after parsing attributes in process `syz.3.1366'. [ 292.046705][T10572] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1369'. [ 292.071814][T10573] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1369'. [ 292.165399][T10576] netlink: 'syz.2.1371': attribute type 10 has an invalid length. [ 292.211975][T10576] bond0: (slave team0): Releasing backup interface [ 292.237823][T10576] batman_adv: batadv0: Adding interface: team0 [ 292.252716][T10576] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.288027][T10576] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 292.633751][T10590] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1376'. [ 292.677049][T10590] netlink: 'syz.3.1376': attribute type 1 has an invalid length. [ 292.698946][T10590] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.1376'. [ 293.159424][T10607] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 293.176501][T10607] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1381'. [ 293.202883][T10602] netlink: 'syz.0.1379': attribute type 1 has an invalid length. [ 293.220405][T10602] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1379'. [ 293.250752][T10602] netlink: 9 bytes leftover after parsing attributes in process `syz.0.1379'. [ 293.380940][T10618] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1384'. [ 293.656129][T10617] netlink: 'syz.1.1383': attribute type 9 has an invalid length. [ 293.671899][T10617] netlink: 399 bytes leftover after parsing attributes in process `syz.1.1383'. [ 294.100692][T10638] netlink: 'syz.1.1388': attribute type 12 has an invalid length. [ 295.228161][T10660] syzkaller0: entered promiscuous mode [ 295.242164][T10660] syzkaller0: entered allmulticast mode [ 295.278806][ T2902] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 295.963878][T10679] netlink: 'syz.2.1402': attribute type 8 has an invalid length. [ 296.171204][T10684] netlink: 'syz.0.1404': attribute type 10 has an invalid length. [ 296.269704][T10684] batman_adv: batadv0: Adding interface: team0 [ 296.302107][T10684] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.351766][T10684] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 298.586502][T10712] __nla_validate_parse: 7 callbacks suppressed [ 298.586520][T10712] netlink: 212912 bytes leftover after parsing attributes in process `syz.1.1413'. [ 298.637978][T10712] openvswitch: netlink: IP tunnel dst address not specified [ 302.302678][T10743] netlink: 'syz.1.1421': attribute type 1 has an invalid length. [ 302.321208][T10743] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.1421'. [ 306.398809][T10803] netlink: 'syz.0.1438': attribute type 29 has an invalid length. [ 306.433032][T10803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1438'. [ 306.465539][T10803] netlink: 'syz.0.1438': attribute type 29 has an invalid length. [ 306.475971][T10803] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1438'. [ 306.548454][T10809] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1440'. [ 306.702378][T10804] delete_channel: no stack [ 308.386934][T10816] netlink: 'syz.3.1442': attribute type 12 has an invalid length. [ 308.395745][T10816] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1442'. [ 308.405867][T10822] netlink: 'syz.1.1443': attribute type 10 has an invalid length. [ 308.425260][T10822] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1443'. [ 308.434733][T10822] dummy0: entered promiscuous mode [ 308.439901][T10822] dummy0: entered allmulticast mode [ 308.448495][T10822] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 308.892044][T10837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1448'. [ 308.902288][T10837] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1448'. [ 309.169332][T10841] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1448'. [ 309.189696][T10842] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1448'. [ 310.437879][T10876] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.1459'. [ 310.771822][T10881] batman_adv: batadv0: Removing interface: team0 [ 310.837173][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.856932][T10881] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.879932][T10881] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.899103][T10881] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.129377][T10889] žÿ: renamed from team_slave_1 (while UP) [ 311.487227][T10899] syz.2.1467 (10899) used obsolete PPPIOCDETACH ioctl [ 312.474505][T10911] netlink: 'syz.0.1471': attribute type 29 has an invalid length. [ 312.483157][T10911] netlink: 'syz.0.1471': attribute type 29 has an invalid length. [ 312.512311][T10911] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1471'. [ 313.065875][T10917] netlink: 'syz.3.1474': attribute type 10 has an invalid length. [ 313.111285][T10917] netlink: 'syz.3.1474': attribute type 19 has an invalid length. [ 313.119570][T10917] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1474'. [ 313.552457][T10945] netlink: 'syz.1.1479': attribute type 33 has an invalid length. [ 313.570242][T10945] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1479'. [ 313.899539][T10950] netlink: 'syz.3.1482': attribute type 28 has an invalid length. [ 313.937762][T10950] netlink: 'syz.3.1482': attribute type 29 has an invalid length. [ 313.956363][T10950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1482'. [ 314.410655][T10961] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 314.466932][T10961] netlink: 3827 bytes leftover after parsing attributes in process `syz.0.1485'. [ 314.487817][T10964] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1486'. [ 314.523386][T10964] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1486'. [ 317.344666][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.352918][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.451642][T10968] netlink: 56537 bytes leftover after parsing attributes in process `syz.2.1487'. [ 317.483293][T10984] netlink: 'syz.1.1491': attribute type 21 has an invalid length. [ 317.664090][T10991] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1495'. [ 317.679309][T10991] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 317.688238][T10991] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 318.180659][T11005] sit0: left promiscuous mode [ 318.316748][T11010] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1499'. [ 318.371965][T11015] netlink: 'syz.3.1501': attribute type 2 has an invalid length. [ 318.386370][T11015] netlink: 'syz.3.1501': attribute type 8 has an invalid length. [ 318.404696][T11015] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1501'. [ 318.432138][T11015] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.1501'. [ 318.909092][T11022] netlink: 'syz.3.1503': attribute type 21 has an invalid length. [ 318.920608][T11022] netlink: 'syz.3.1503': attribute type 1 has an invalid length. [ 319.114066][T11032] netlink: 'syz.2.1507': attribute type 3 has an invalid length. [ 319.126935][T11032] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.1507'. [ 319.465510][T11053] netlink: 'syz.1.1511': attribute type 6 has an invalid length. [ 319.482715][T11053] netlink: 'syz.1.1511': attribute type 1 has an invalid length. [ 319.499803][T11053] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.1511'. [ 320.306929][T11081] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1518'. [ 321.847302][T11139] IPv6: Can't replace route, no match found [ 321.855606][T11140] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.065526][T11149] pim6reg1: entered promiscuous mode [ 322.071137][T11149] pim6reg1: entered allmulticast mode [ 322.387886][T11154] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.1540'. [ 322.802987][T11169] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.1544'. [ 323.205783][T11181] netlink: 'syz.0.1548': attribute type 21 has an invalid length. [ 323.252356][T11181] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1548'. [ 323.289478][T11185] netlink: 'syz.3.1549': attribute type 39 has an invalid length. [ 324.045593][T11205] netlink: 'syz.3.1555': attribute type 10 has an invalid length. [ 324.061200][T11205] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1555'. [ 324.095919][T11205] ipvlan1: entered promiscuous mode [ 324.110337][T11205] ipvlan1: entered allmulticast mode [ 324.135158][T11206] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1555'. [ 324.162377][T11205] veth0_vlan: entered allmulticast mode [ 324.182385][T11205] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 324.213452][T11206] netlink: 8446 bytes leftover after parsing attributes in process `syz.3.1555'. [ 324.536710][T11221] netlink: 'syz.3.1560': attribute type 1 has an invalid length. [ 325.480618][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1569'. [ 326.411647][T11280] netlink: 'syz.0.1574': attribute type 10 has an invalid length. [ 326.430326][T11280] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 326.441157][T11280] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 326.491644][T11280] .`: (slave netdevsim0): Releasing backup interface [ 326.521936][T11280] team0: Port device netdevsim0 added [ 327.362851][T11305] delete_channel: no stack [ 327.386023][T11308] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1582'. [ 327.410898][T11308] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1582'. [ 327.721898][T11320] netlink: 'syz.0.1583': attribute type 10 has an invalid length. [ 327.757375][T11320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1583'. [ 327.784638][T11320] ipvlan1: entered promiscuous mode [ 327.812160][T11325] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.1583'. [ 327.836119][T11320] ipvlan1: entered allmulticast mode [ 327.848263][T11320] veth0_vlan: entered allmulticast mode [ 327.901197][T11320] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 327.992485][T11325] netlink: 8446 bytes leftover after parsing attributes in process `syz.0.1583'. [ 328.928192][T11333] netlink: 'syz.3.1587': attribute type 10 has an invalid length. [ 328.950537][T11333] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1587'. [ 329.241595][T11338] netlink: 'syz.0.1590': attribute type 10 has an invalid length. [ 329.306370][T11338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1590'. [ 329.586501][T11338] team0: Port device geneve0 added [ 329.666665][T11347] pim6reg0: tun_chr_ioctl cmd 1074025675 [ 329.696262][T11347] pim6reg0: persist enabled [ 330.644961][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1598'. [ 330.706538][T11370] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1598'. [ 333.684332][T11373] netlink: 'syz.3.1599': attribute type 10 has an invalid length. [ 334.690623][T11400] Dead loop on virtual device ip6_vti0, fix it urgently! [ 334.764576][T11401] netlink: 'syz.2.1608': attribute type 9 has an invalid length. [ 334.790327][T11401] netlink: 399 bytes leftover after parsing attributes in process `syz.2.1608'. [ 335.265642][T11417] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1614'. [ 335.353467][T11417] caif0: entered promiscuous mode [ 335.358707][T11417] caif0: entered allmulticast mode [ 336.900897][T11446] netlink: 'syz.3.1622': attribute type 10 has an invalid length. [ 337.331650][T11453] netlink: 'syz.3.1623': attribute type 2 has an invalid length. [ 337.375095][T11453] netlink: 'syz.3.1623': attribute type 8 has an invalid length. [ 337.409179][T11453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1623'. [ 337.745528][T11444] Dead loop on virtual device ip6_vti0, fix it urgently! [ 338.762463][T11477] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1630'. [ 338.926873][T11481] netlink: 'syz.0.1630': attribute type 21 has an invalid length. [ 339.098357][T11481] netlink: 'syz.0.1630': attribute type 12 has an invalid length. [ 339.220267][T11481] netlink: 'syz.0.1630': attribute type 13 has an invalid length. [ 339.287710][T11481] netlink: 'syz.0.1630': attribute type 14 has an invalid length. [ 339.335641][T11481] netlink: 'syz.0.1630': attribute type 15 has an invalid length. [ 339.394629][T11481] netlink: 'syz.0.1630': attribute type 16 has an invalid length. [ 339.460391][T11481] netlink: 12914 bytes leftover after parsing attributes in process `syz.0.1630'. [ 339.707617][T11498] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1638'. [ 339.780440][T11498] validate_nla: 1 callbacks suppressed [ 339.780470][T11498] netlink: 'syz.2.1638': attribute type 10 has an invalid length. [ 339.863425][T11498] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 339.930284][T11504] netlink: 'syz.0.1637': attribute type 10 has an invalid length. [ 339.938335][T11504] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1637'. [ 339.991149][T11504] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 340.400784][T11522] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 340.410754][T11522] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 340.594055][T11531] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1645'. [ 341.986243][T11568] sit0: entered allmulticast mode [ 342.023055][T11566] netlink: 'syz.3.1658': attribute type 3 has an invalid length. [ 342.079873][T11566] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1658'. [ 342.092273][T11568] sit0: entered promiscuous mode [ 342.285796][T11571] netlink: 'syz.1.1660': attribute type 21 has an invalid length. [ 342.294294][T11571] netlink: 'syz.1.1660': attribute type 20 has an invalid length. [ 343.110694][T11592] syzkaller0: entered promiscuous mode [ 343.117648][T11592] syzkaller0: entered allmulticast mode [ 345.271911][T11617] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1674'. [ 345.704501][T11630] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.1676'. [ 346.202097][T11646] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1680'. [ 347.940044][T11701] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1695'. [ 348.667366][T11721] netlink: 'syz.2.1702': attribute type 10 has an invalid length. [ 348.676193][T11721] netlink: 'syz.2.1702': attribute type 19 has an invalid length. [ 348.685021][T11721] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1702'. [ 349.261591][T11739] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1705'. [ 349.523951][T11747] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1707'. [ 349.680910][T11760] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1711'. [ 349.709212][T11761] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1712'. [ 349.831102][ T5790] Bluetooth: hci2: ISO packet for unknown connection handle 2366 [ 350.468153][ T5790] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 351.018552][T11807] netlink: 'syz.1.1726': attribute type 21 has an invalid length. [ 351.031357][T11807] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1726'. [ 351.585801][T11838] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.1734'. [ 351.705814][T11847] batman_adv: batadv0: Removing interface: team0 [ 351.713174][T11847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.720787][T11847] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.729382][T11847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.737233][T11847] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.290434][T11867] syzkaller0: entered promiscuous mode [ 352.296051][T11867] syzkaller0: entered allmulticast mode [ 352.694832][T11881] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 352.739824][T11881] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.1748'. [ 354.368781][T11889] netlink: 'syz.2.1750': attribute type 16 has an invalid length. [ 354.390231][T11889] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1750'. [ 354.468539][T11896] netlink: 15478 bytes leftover after parsing attributes in process `syz.3.1751'. [ 354.478763][T11896] geneve0: entered allmulticast mode [ 354.530883][T11897] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.1752'. [ 355.381363][T11921] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1758'. [ 355.610255][T11930] syzkaller0: entered promiscuous mode [ 355.615969][T11930] syzkaller0: entered allmulticast mode [ 355.710619][T11936] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1763'. [ 358.980309][T11993] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1781'. [ 358.998554][T11988] syzkaller0: entered promiscuous mode [ 359.013423][T11988] syzkaller0: entered allmulticast mode [ 361.048698][T12019] netlink: 'syz.2.1787': attribute type 21 has an invalid length. [ 361.068055][T12019] netlink: 'syz.2.1787': attribute type 4 has an invalid length. [ 361.086761][T12019] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1787'. [ 361.339494][T12038] netlink: 'syz.2.1793': attribute type 12 has an invalid length. [ 361.359305][T12038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1793'. [ 361.378676][T12035] netlink: 'syz.1.1791': attribute type 6 has an invalid length. [ 361.444380][ T5790] Bluetooth: hci3: ISO packet for unknown connection handle 29 [ 361.495521][T12043] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1796'. [ 361.518159][T12043] netlink: 'syz.2.1796': attribute type 21 has an invalid length. [ 361.648125][T12050] syzkaller0: entered promiscuous mode [ 361.653933][T12050] syzkaller0: entered allmulticast mode [ 361.917700][T12060] netlink: 'syz.1.1801': attribute type 3 has an invalid length. [ 361.936961][T12060] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1801'. [ 364.748899][T12095] netlink: 'syz.1.1808': attribute type 4 has an invalid length. [ 365.064300][T12109] netlink: 'syz.2.1814': attribute type 4 has an invalid length. [ 365.072841][T12109] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1814'. [ 365.468702][T12117] syzkaller0: entered promiscuous mode [ 365.474547][T12117] syzkaller0: entered allmulticast mode [ 367.724492][ T2896] hsr_slave_0: left promiscuous mode [ 367.755927][ T2896] hsr_slave_1: left promiscuous mode [ 367.764770][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.780446][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.805986][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.820479][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.834497][ T2896] bridge_slave_1: left allmulticast mode [ 367.850370][ T2896] bridge_slave_1: left promiscuous mode [ 367.860562][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.893464][ T2896] bridge_slave_0: left allmulticast mode [ 367.899171][ T2896] bridge_slave_0: left promiscuous mode [ 367.917130][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.152607][ T2896] veth1_macvtap: left promiscuous mode [ 368.173864][ T2896] veth1_vlan: left promiscuous mode [ 368.191267][ T2896] veth0_vlan: left promiscuous mode [ 368.949619][ T2896] team0 (unregistering): Port device team_slave_1 removed [ 368.992929][ T2896] team0 (unregistering): Port device team_slave_0 removed [ 369.034252][ T2896] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.078971][ T2896] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.511775][ T2896] .` (unregistering): Released all slaves [ 369.581899][T12169] netlink: 10255 bytes leftover after parsing attributes in process `syz.2.1833'. [ 369.595026][T12174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1834'. [ 374.525197][T12223] netlink: 10255 bytes leftover after parsing attributes in process `syz.1.1846'. [ 374.566223][T12228] netlink: 'syz.3.1848': attribute type 10 has an invalid length. [ 374.990689][T12246] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.1854'. [ 375.836766][T12267] netlink: 10255 bytes leftover after parsing attributes in process `syz.0.1859'. [ 375.870738][T12272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'. [ 375.996001][T12272] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'. [ 376.194387][T12269] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1858'. [ 378.790476][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.796848][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.441371][T12285] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1862'. [ 380.461285][T12285] tc_dump_action: action bad kind [ 380.466457][T12284] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1863'. [ 381.194711][T12310] syzkaller0: entered promiscuous mode [ 381.203800][T12310] syzkaller0: entered allmulticast mode [ 383.317410][T12336] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 383.335697][T12336] netlink: 146340 bytes leftover after parsing attributes in process `syz.0.1877'. [ 385.097141][T12328] syzkaller0: left promiscuous mode [ 385.102905][T12328] syzkaller0: left allmulticast mode [ 385.109087][T12335] netlink: 'syz.0.1877': attribute type 21 has an invalid length. [ 386.361770][T12366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1884'. [ 386.379357][T12366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1884'. [ 386.408958][T12363] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1884'. [ 386.439902][T12366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1884'. [ 387.913670][T12379] syzkaller0: entered promiscuous mode [ 387.933495][T12379] syzkaller0: entered allmulticast mode [ 388.085666][T12393] netlink: 'syz.3.1893': attribute type 9 has an invalid length. [ 388.149048][T12393] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1893'. [ 391.101817][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 391.349385][T12409] netlink: 202920 bytes leftover after parsing attributes in process `syz.0.1898'. [ 391.475484][T12414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1899'. [ 391.497777][T12414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1899'. [ 391.534313][T12412] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1899'. [ 391.557275][T12414] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1899'. [ 392.570201][T12438] syzkaller0: entered promiscuous mode [ 392.582356][T12438] syzkaller0: entered allmulticast mode [ 396.096627][T12469] syz.3.1917[12469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.096787][T12469] syz.3.1917[12469] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 396.147452][T12469] netlink: 'syz.3.1917': attribute type 2 has an invalid length. [ 396.218177][T12469] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.1917'. [ 396.851821][T12502] bond_slave_1: mtu less than device minimum [ 396.870827][T12492] syzkaller0: entered promiscuous mode [ 396.881770][T12492] syzkaller0: entered allmulticast mode [ 397.524829][T12519] netlink: 539 bytes leftover after parsing attributes in process `syz.3.1931'. [ 397.693719][T12525] syzkaller0: entered promiscuous mode [ 397.700420][T12525] syzkaller0: entered allmulticast mode [ 397.834743][T12539] syz.2.1938[12539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.834897][T12539] syz.2.1938[12539] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 397.950256][T12533] syzkaller0: entered promiscuous mode [ 397.997354][T12533] syzkaller0: entered allmulticast mode [ 401.782089][T12560] mac80211_hwsim hwsim3 .3#c„±: renamed from wlan1 (while UP) [ 401.963720][T12573] netlink: 'syz.1.1946': attribute type 64 has an invalid length. [ 402.204424][T12581] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.1949'. [ 402.230217][T12584] netlink: 16170 bytes leftover after parsing attributes in process `syz.3.1949'. [ 402.329529][T12580] cgroup: fork rejected by pids controller in /syz0 [ 402.586256][T12592] syzkaller0: entered promiscuous mode [ 402.600057][T12592] syzkaller0: entered allmulticast mode [ 403.136908][T12602] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.1956'. [ 404.411605][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.457605][T12602] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1956'. [ 404.526074][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.587620][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.915879][ T48] team0: Port device netdevsim0 removed [ 404.939458][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.247799][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.260079][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.269578][T12627] wg2: left promiscuous mode [ 405.286151][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.330524][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.343838][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 405.351325][T12627] wg2: left allmulticast mode [ 405.356376][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.977674][T12640] syzkaller0: entered promiscuous mode [ 405.983471][T12640] syzkaller0: entered allmulticast mode [ 407.422466][ T50] Bluetooth: hci0: command tx timeout [ 407.751633][T12654] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1970'. [ 407.877614][T12659] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1971'. [ 407.993406][T12658] sit0: left promiscuous mode [ 408.080977][T12630] chnl_net:caif_netlink_parms(): no params data found [ 408.102075][T12658] sit0: entered promiscuous mode [ 408.142503][T12667] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1974'. [ 408.762161][T12630] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.774170][T12630] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.781583][T12630] bridge_slave_0: entered allmulticast mode [ 408.789378][T12630] bridge_slave_0: entered promiscuous mode [ 408.868243][T12630] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.875604][T12630] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.883048][T12630] bridge_slave_1: entered allmulticast mode [ 408.893463][T12630] bridge_slave_1: entered promiscuous mode [ 409.015965][T12630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.038265][T12630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.181369][T12630] team0: Port device team_slave_0 added [ 409.278041][T12630] team0: Port device team_slave_1 added [ 409.361361][ T48] hsr_slave_0: left promiscuous mode [ 409.390211][ T48] hsr_slave_1: left promiscuous mode [ 409.442373][ T48] veth1_macvtap: left allmulticast mode [ 409.468589][ T48] veth1_macvtap: left promiscuous mode [ 409.477920][ T48] veth1_vlan: left promiscuous mode [ 409.485513][ T48] veth0_vlan: left promiscuous mode [ 409.502159][ T5790] Bluetooth: hci0: command tx timeout [ 409.776085][ T48] team0 (unregistering): Port device geneve0 removed [ 410.125594][ T48] team0 (unregistering): Port device team_slave_1 removed [ 410.175622][ T48] team0 (unregistering): Port device team_slave_0 removed [ 410.217637][ T48] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.259675][ T48] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.631666][ T48] .` (unregistering): Released all slaves [ 410.688858][T12630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 410.696197][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.728033][T12630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 410.794034][T12630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 410.810137][T12630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 410.848791][T12630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.905872][T12715] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1984'. [ 410.945423][T12630] hsr_slave_0: entered promiscuous mode [ 411.171805][T12630] hsr_slave_1: entered promiscuous mode [ 411.191856][T12630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 411.206729][T12630] Cannot create hsr debugfs directory [ 411.580200][ T50] Bluetooth: hci0: command tx timeout [ 411.904108][T12733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 412.037852][T12745] netlink: 'syz.3.1994': attribute type 39 has an invalid length. [ 412.293723][T12745] .`: (slave syz_tun): Releasing backup interface [ 412.435587][T12630] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 412.453864][T12630] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 412.502049][T12630] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 412.551522][T12630] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 412.973672][T12630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 413.045755][T12630] 8021q: adding VLAN 0 to HW filter on device team0 [ 413.157730][ T7180] bridge0: port 1(bridge_slave_0) entered blocking state [ 413.165068][ T7180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.187979][ T7180] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.195271][ T7180] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.246294][T12777] netlink: 'syz.3.2000': attribute type 9 has an invalid length. [ 413.269473][T12777] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.2000'. [ 413.660667][ T50] Bluetooth: hci0: command tx timeout [ 413.746534][T12789] netlink: 'syz.1.2001': attribute type 19 has an invalid length. [ 413.758459][T12789] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2001'. [ 413.834464][T12792] netlink: 'syz.1.2001': attribute type 10 has an invalid length. [ 414.014734][T12630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.127659][T12630] veth0_vlan: entered promiscuous mode [ 414.149197][T12630] veth1_vlan: entered promiscuous mode [ 414.224703][T12630] veth0_macvtap: entered promiscuous mode [ 414.245237][T12630] veth1_macvtap: entered promiscuous mode [ 414.286901][T12630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.300730][T12630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.315628][T12630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 414.329279][T12630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.344429][T12630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.370034][T12630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.380804][T12630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.390675][T12630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 414.410129][T12630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 414.424785][T12630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.443977][T12630] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.465461][T12630] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.480210][T12630] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.488935][T12630] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 414.783916][T12811] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 414.832058][T12811] team0: Port device wlan1 added [ 414.940049][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.948145][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.991493][ T7176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.999376][ T7176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.599850][T12842] netlink: 'syz.3.2013': attribute type 10 has an invalid length. [ 415.625052][T12842] .`: (slave bond_slave_0): Releasing backup interface [ 416.243488][T12868] netlink: 'syz.1.2020': attribute type 21 has an invalid length. [ 416.260712][T12868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 416.267969][T12868] IPv6: NLM_F_CREATE should be set when creating new route [ 416.275328][T12868] IPv6: NLM_F_CREATE should be set when creating new route [ 416.282788][T12868] IPv6: NLM_F_CREATE should be set when creating new route [ 416.654355][T12878] syzkaller0: entered promiscuous mode [ 416.671069][T12878] syzkaller0: entered allmulticast mode [ 416.791843][T12889] netlink: 'syz.3.2025': attribute type 40 has an invalid length. [ 416.814771][T12889] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 416.840312][T12889] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 420.359118][T12892] netlink: 65055 bytes leftover after parsing attributes in process `syz.2.2026'. [ 420.369252][T12902] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2027'. [ 420.665547][T12921] netlink: 'syz.0.2033': attribute type 10 has an invalid length. [ 420.682112][T12921] veth1_macvtap: left promiscuous mode [ 420.797074][T12923] syzkaller0: entered promiscuous mode [ 420.802749][T12923] syzkaller0: entered allmulticast mode [ 423.282916][ T7180] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.328500][T12949] netlink: 'syz.3.2041': attribute type 2 has an invalid length. [ 423.337470][T12949] netlink: 'syz.3.2041': attribute type 8 has an invalid length. [ 423.345742][T12949] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2041'. [ 423.407346][ T7180] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.548024][ T7180] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.690910][T12960] netlink: 'syz.1.2043': attribute type 3 has an invalid length. [ 423.698733][T12960] netlink: 201372 bytes leftover after parsing attributes in process `syz.1.2043'. [ 423.732278][ T7180] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.975017][T12967] netlink: 40227 bytes leftover after parsing attributes in process `syz.1.2047'. [ 424.236049][T12974] netlink: 'syz.3.2048': attribute type 10 has an invalid length. [ 424.265538][T12974] netlink: 171476 bytes leftover after parsing attributes in process `syz.3.2048'. [ 424.286368][ T5790] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 424.300604][ T5790] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 424.310664][ T5790] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 424.319066][ T5790] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 424.336925][ T5790] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 424.346797][ T5790] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 424.550485][T12983] netlink: 'syz.0.2051': attribute type 10 has an invalid length. [ 424.592847][T12983] batman_adv: batadv0: Adding interface: team0 [ 424.599067][T12983] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.627111][T12983] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 424.678418][T12989] netlink: 'syz.3.2052': attribute type 4 has an invalid length. [ 424.687639][T12989] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2052'. [ 424.709335][T12989] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 424.970053][T12998] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.2055'. [ 426.383719][ T50] Bluetooth: hci2: command tx timeout [ 426.878658][T13005] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.2057'. [ 426.888132][T13007] netlink: 'syz.1.2057': attribute type 11 has an invalid length. [ 426.898905][T13007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2057'. [ 426.912929][T13008] netlink: 65051 bytes leftover after parsing attributes in process `syz.1.2057'. [ 427.048521][T13018] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2059'. [ 427.079953][T13018] netlink: 'syz.1.2059': attribute type 29 has an invalid length. [ 427.146756][ T7180] [ 427.149173][ T7180] ====================================================== [ 427.156185][ T7180] WARNING: possible circular locking dependency detected [ 427.163197][ T7180] syzkaller #0 Not tainted [ 427.167603][ T7180] ------------------------------------------------------ [ 427.174607][ T7180] kworker/u4:11/7180 is trying to acquire lock: [ 427.180836][ T7180] ffff88805cfb8d00 (team->team_lock_key#7){+.+.}-{3:3}, at: team_del_slave+0x32/0x1c0 [ 427.190418][ T7180] [ 427.190418][ T7180] but task is already holding lock: [ 427.197790][ T7180] ffff88805aa90768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 427.208236][ T7180] [ 427.208236][ T7180] which lock already depends on the new lock. [ 427.208236][ T7180] [ 427.218655][ T7180] [ 427.218655][ T7180] the existing dependency chain (in reverse order) is: [ 427.227665][ T7180] [ 427.227665][ T7180] -> #1 (&rdev->wiphy.mtx){+.+.}-{3:3}: [ 427.235419][ T7180] __mutex_lock+0x129/0xcc0 [ 427.240449][ T7180] ieee80211_open+0x144/0x200 [ 427.245667][ T7180] __dev_open+0x2bc/0x430 [ 427.250560][ T7180] dev_open+0xab/0x170 [ 427.255176][ T7180] team_add_slave+0xae7/0x2660 [ 427.260468][ T7180] do_setlink+0xe14/0x3fb0 [ 427.265408][ T7180] rtnl_newlink+0x175b/0x2020 [ 427.270614][ T7180] rtnetlink_rcv_msg+0x7c7/0xf10 [ 427.276084][ T7180] netlink_rcv_skb+0x216/0x480 [ 427.281398][ T7180] netlink_unicast+0x751/0x8d0 [ 427.286725][ T7180] netlink_sendmsg+0x8c1/0xbe0 [ 427.292022][ T7180] ____sys_sendmsg+0x5bf/0x950 [ 427.297346][ T7180] ___sys_sendmsg+0x220/0x290 [ 427.302587][ T7180] __se_sys_sendmsg+0x1a5/0x270 [ 427.307987][ T7180] do_syscall_64+0x55/0xb0 [ 427.312947][ T7180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 427.319467][ T7180] [ 427.319467][ T7180] -> #0 (team->team_lock_key#7){+.+.}-{3:3}: [ 427.327684][ T7180] __lock_acquire+0x2ddb/0x7c80 [ 427.333056][ T7180] lock_acquire+0x197/0x410 [ 427.338085][ T7180] __mutex_lock+0x129/0xcc0 [ 427.343142][ T7180] team_del_slave+0x32/0x1c0 [ 427.348254][ T7180] team_device_event+0x28d/0xa20 [ 427.353718][ T7180] notifier_call_chain+0x197/0x390 [ 427.359375][ T7180] unregister_netdevice_many_notify+0xf36/0x1810 [ 427.366246][ T7180] unregister_netdevice_queue+0x324/0x360 [ 427.372514][ T7180] _cfg80211_unregister_wdev+0x16b/0x580 [ 427.378678][ T7180] ieee80211_remove_interfaces+0x496/0x680 [ 427.385026][ T7180] ieee80211_unregister_hw+0x5d/0x2a0 [ 427.391044][ T7180] mac80211_hwsim_del_radio+0x274/0x450 [ 427.397213][ T7180] hwsim_exit_net+0x585/0x640 [ 427.402417][ T7180] cleanup_net+0x6f4/0xb90 [ 427.407365][ T7180] process_scheduled_works+0xa45/0x15b0 [ 427.413425][ T7180] worker_thread+0xa55/0xfc0 [ 427.418549][ T7180] kthread+0x2fa/0x390 [ 427.423138][ T7180] ret_from_fork+0x48/0x80 [ 427.428073][ T7180] ret_from_fork_asm+0x11/0x20 [ 427.433355][ T7180] [ 427.433355][ T7180] other info that might help us debug this: [ 427.433355][ T7180] [ 427.443574][ T7180] Possible unsafe locking scenario: [ 427.443574][ T7180] [ 427.451044][ T7180] CPU0 CPU1 [ 427.456420][ T7180] ---- ---- [ 427.461874][ T7180] lock(&rdev->wiphy.mtx); [ 427.466370][ T7180] lock(team->team_lock_key#7); [ 427.473843][ T7180] lock(&rdev->wiphy.mtx); [ 427.480891][ T7180] lock(team->team_lock_key#7); [ 427.485838][ T7180] [ 427.485838][ T7180] *** DEADLOCK *** [ 427.485838][ T7180] [ 427.493989][ T7180] 5 locks held by kworker/u4:11/7180: [ 427.499366][ T7180] #0: ffff888017873938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 427.510246][ T7180] #1: ffffc90003467d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x957/0x15b0 [ 427.520780][ T7180] #2: ffffffff8dfafad0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x136/0xb90 [ 427.530184][ T7180] #3: ffffffff8dfbc908 (rtnl_mutex){+.+.}-{3:3}, at: ieee80211_unregister_hw+0x55/0x2a0 [ 427.540020][ T7180] #4: ffff88805aa90768 (&rdev->wiphy.mtx){+.+.}-{3:3}, at: ieee80211_remove_interfaces+0x292/0x680 [ 427.550839][ T7180] [ 427.550839][ T7180] stack backtrace: [ 427.556751][ T7180] CPU: 1 PID: 7180 Comm: kworker/u4:11 Not tainted syzkaller #0 [ 427.564376][ T7180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 427.574441][ T7180] Workqueue: netns cleanup_net [ 427.579247][ T7180] Call Trace: [ 427.582531][ T7180] [ 427.585479][ T7180] dump_stack_lvl+0x16c/0x230 [ 427.590165][ T7180] ? load_image+0x3b0/0x3b0 [ 427.594672][ T7180] ? show_regs_print_info+0x20/0x20 [ 427.599890][ T7180] ? print_circular_bug+0x12b/0x1a0 [ 427.605113][ T7180] check_noncircular+0x2bd/0x3c0 [ 427.610069][ T7180] ? print_deadlock_bug+0x5d0/0x5d0 [ 427.615290][ T7180] ? lockdep_lock+0xe0/0x220 [ 427.619887][ T7180] ? __lock_acquire+0x1334/0x7c80 [ 427.624915][ T7180] ? _find_first_zero_bit+0xd3/0x100 [ 427.630211][ T7180] __lock_acquire+0x2ddb/0x7c80 [ 427.635096][ T7180] ? verify_lock_unused+0x140/0x140 [ 427.640314][ T7180] ? verify_lock_unused+0x140/0x140 [ 427.645522][ T7180] lock_acquire+0x197/0x410 [ 427.650025][ T7180] ? team_del_slave+0x32/0x1c0 [ 427.654828][ T7180] ? __might_sleep+0xe0/0xe0 [ 427.659433][ T7180] ? read_lock_is_recursive+0x20/0x20 [ 427.664827][ T7180] __mutex_lock+0x129/0xcc0 [ 427.669344][ T7180] ? team_del_slave+0x32/0x1c0 [ 427.674108][ T7180] ? __lock_acquire+0x7c80/0x7c80 [ 427.679132][ T7180] ? rcu_is_watching+0x15/0xb0 [ 427.683902][ T7180] ? trace_contention_end+0x39/0xe0 [ 427.689197][ T7180] ? __mutex_lock+0x304/0xcc0 [ 427.693884][ T7180] ? team_del_slave+0x32/0x1c0 [ 427.698646][ T7180] ? mutex_lock_nested+0x20/0x20 [ 427.703600][ T7180] ? bond_netdev_event+0xe1/0xef0 [ 427.708653][ T7180] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 427.714341][ T7180] ? bond_ipsec_offload_ok+0x410/0x410 [ 427.720250][ T7180] team_del_slave+0x32/0x1c0 [ 427.724857][ T7180] team_device_event+0x28d/0xa20 [ 427.729801][ T7180] notifier_call_chain+0x197/0x390 [ 427.734924][ T7180] unregister_netdevice_many_notify+0xf36/0x1810 [ 427.741263][ T7180] ? lock_chain_count+0x20/0x20 [ 427.746125][ T7180] ? unregister_netdevice_many+0x20/0x20 [ 427.751781][ T7180] ? kernfs_remove_by_name_ns+0x117/0x150 [ 427.757533][ T7180] ? __lock_acquire+0x7c80/0x7c80 [ 427.762569][ T7180] unregister_netdevice_queue+0x324/0x360 [ 427.768308][ T7180] ? list_netdevice+0x730/0x730 [ 427.773161][ T7180] ? kernfs_remove_by_name_ns+0x117/0x150 [ 427.778884][ T7180] _cfg80211_unregister_wdev+0x16b/0x580 [ 427.784534][ T7180] ieee80211_remove_interfaces+0x496/0x680 [ 427.790370][ T7180] ? ieee80211_do_stop+0x1db0/0x1db0 [ 427.795667][ T7180] ? rcu_is_watching+0x15/0xb0 [ 427.800461][ T7180] ieee80211_unregister_hw+0x5d/0x2a0 [ 427.805862][ T7180] mac80211_hwsim_del_radio+0x274/0x450 [ 427.811410][ T7180] ? rhashtable_remove_fast+0xbf0/0xbf0 [ 427.816958][ T7180] hwsim_exit_net+0x585/0x640 [ 427.821664][ T7180] ? hwsim_init_net+0x90/0x90 [ 427.826348][ T7180] ? __ip_vs_dev_cleanup_batch+0x238/0x250 [ 427.832150][ T7180] cleanup_net+0x6f4/0xb90 [ 427.836572][ T7180] ? ops_free_list+0x3b0/0x3b0 [ 427.841348][ T7180] ? _raw_spin_unlock_irq+0x23/0x50 [ 427.846565][ T7180] ? process_scheduled_works+0x957/0x15b0 [ 427.852317][ T7180] ? process_scheduled_works+0x957/0x15b0 [ 427.858113][ T7180] process_scheduled_works+0xa45/0x15b0 [ 427.863764][ T7180] ? assign_work+0x400/0x400 [ 427.868357][ T7180] ? assign_work+0x39e/0x400 [ 427.872947][ T7180] worker_thread+0xa55/0xfc0 [ 427.877550][ T7180] kthread+0x2fa/0x390 [ 427.881713][ T7180] ? pr_cont_work+0x560/0x560 [ 427.886407][ T7180] ? kthread_blkcg+0xd0/0xd0 [ 427.890999][ T7180] ret_from_fork+0x48/0x80 [ 427.895446][ T7180] ? kthread_blkcg+0xd0/0xd0 [ 427.900064][ T7180] ret_from_fork_asm+0x11/0x20 [ 427.904859][ T7180] [ 427.912408][ T7180] team0: Port device wlan1 removed [ 427.922678][T13018] netlink: 'syz.1.2059': attribute type 29 has an invalid length. [ 427.931533][T13015] netlink: 'syz.0.2058': attribute type 10 has an invalid length. [ 427.939447][T13015] netlink: 65015 bytes leftover after parsing attributes in process `syz.0.2058'. [ 427.954172][T13022] netlink: 'syz.1.2059': attribute type 29 has an invalid length. [ 428.007296][T12975] chnl_net:caif_netlink_parms(): no params data found [ 428.038912][ T7180] hsr_slave_0: left promiscuous mode [ 428.044764][ T7180] hsr_slave_1: left promiscuous mode [ 428.050706][ T7180] batman_adv: batadv0: Removing interface: team0 [ 428.057488][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.065994][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.076464][ T7180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.083899][ T7180] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.091872][ T7180] bridge_slave_1: left allmulticast mode [ 428.097510][ T7180] bridge_slave_1: left promiscuous mode [ 428.103209][ T7180] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.112120][ T7180] bridge_slave_0: left allmulticast mode [ 428.117773][ T7180] bridge_slave_0: left promiscuous mode [ 428.123507][ T7180] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.134408][ T7180] veth1_macvtap: left promiscuous mode [ 428.139949][ T7180] veth0_macvtap: left promiscuous mode [ 428.303552][ T7180] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 428.330984][ T7180] team0 (unregistering): Port device vlan0 removed [ 428.452518][ T7180] team0 (unregistering): Port device team_slave_1 removed [ 428.461273][ T50] Bluetooth: hci2: command tx timeout [ 428.469833][ T7180] team0 (unregistering): Port device C removed [ 428.495328][ T7180] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.523706][ T7180] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.596443][ T7180] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 428.720055][ T7180] bond0 (unregistering): Released all slaves [ 428.819846][T12975] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.828859][T12975] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.836301][T12975] bridge_slave_0: entered allmulticast mode [ 428.843035][T12975] bridge_slave_0: entered promiscuous mode [ 428.851483][T12975] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.858694][T12975] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.866103][T12975] bridge_slave_1: entered allmulticast mode [ 428.873568][T12975] bridge_slave_1: entered promiscuous mode [ 428.904131][T12975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.916805][T12975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.965004][T12975] team0: Port device team_slave_0 added [ 428.973760][T12975] team0: Port device team_slave_1 added [ 428.998680][T12975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.005818][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.032818][T12975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.045319][T12975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.060178][T12975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.096540][T12975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.159245][T12975] hsr_slave_0: entered promiscuous mode [ 429.166660][T12975] hsr_slave_1: entered promiscuous mode [ 429.172999][T12975] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.181667][T12975] Cannot create hsr debugfs directory [ 429.476003][T12975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 429.485450][T12975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 429.495234][T12975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 429.514357][T12975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.575888][T12975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.594870][T12975] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.607117][ T2902] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.614259][ T2902] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.627921][ T7188] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.635046][ T7188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 429.779208][T12975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 429.815517][T12975] veth0_vlan: entered promiscuous mode [ 429.827118][T12975] veth1_vlan: entered promiscuous mode [ 429.854524][T12975] veth0_macvtap: entered promiscuous mode [ 429.863416][T12975] veth1_macvtap: entered promiscuous mode [ 429.878647][T12975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.890509][T12975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.900623][T12975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.911206][T12975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.922502][T12975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 429.936296][T12975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.947077][T12975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.957133][T12975] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 429.967655][T12975] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.978747][T12975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 429.992931][T12975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.002117][T12975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.011049][T12975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.019778][T12975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.048589][T12975] ieee80211 phy29: Selected rate control algorithm 'minstrel_ht' [ 430.076015][ T7176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.078455][T12975] ieee80211 phy30: Selected rate control algorithm 'minstrel_ht' [ 430.090904][ T7176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.114153][ T7180] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 430.122221][ T7180] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 430.550184][ T50] Bluetooth: hci2: command tx timeout [ 432.631230][ T50] Bluetooth: hci2: command tx timeout