last executing test programs: 48m53.604260454s ago: executing program 1 (id=832): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x63) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f00000000c0)='THAWED\x00', 0x7) 48m52.697439734s ago: executing program 1 (id=844): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x101000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 48m51.98406839s ago: executing program 1 (id=841): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b9040a000000e8fe55a1180015000600142603600e1209001800030004", 0x2b}], 0xe}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="0239000020"], 0x33fe0) 48m51.738788815s ago: executing program 1 (id=842): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 48m51.487988711s ago: executing program 1 (id=848): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000002980), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) 48m37.233332086s ago: executing program 1 (id=889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e682a5f746f5f6261746164763231"], 0x12) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 48m22.170272829s ago: executing program 32 (id=889): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="76658e682a5f746f5f6261746164763231"], 0x12) syz_clone(0x111, 0x0, 0x9, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r2 = socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e0800000709000000000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000fc0)={&(0x7f0000001340)=@hci={0x1f, 0x200, 0x31}, 0x80, &(0x7f0000000000)=[{&(0x7f0000001040)="b8b2cc1e00c1dba49dbb66ca3a66", 0xe}], 0x1}, 0x0) 3.13161123s ago: executing program 5 (id=24359): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x2c, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xe9, &(0x7f0000000240)=""/233, 0x0, 0x11}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x7}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r5, 0x4, r6}, 0x10) 2.907254266s ago: executing program 5 (id=24361): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x50}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 2.815013388s ago: executing program 3 (id=24364): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x50}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 2.410433417s ago: executing program 5 (id=24369): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff77, 0x9}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd635f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 2.316965719s ago: executing program 3 (id=24373): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff77, 0x9}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd635f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 1.932561147s ago: executing program 3 (id=24374): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.881232958s ago: executing program 0 (id=24375): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfff5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x845) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 1.873017899s ago: executing program 5 (id=24376): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.654246724s ago: executing program 0 (id=24377): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, 0x0, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.653985104s ago: executing program 2 (id=24378): close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 1.448444318s ago: executing program 0 (id=24380): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r1, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x90, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x402000a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.448237088s ago: executing program 2 (id=24381): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r1, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x90, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x402000a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.274230642s ago: executing program 4 (id=24382): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r1, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x90, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x402000a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.271409262s ago: executing program 2 (id=24392): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xd}, 0x1008, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext={0xc3, 0x4}, 0x4100, 0x0, 0x0, 0x9, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000088) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 1.165594654s ago: executing program 4 (id=24383): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r1, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x90, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x402000a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.164462744s ago: executing program 0 (id=24394): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, 0x0, 0x106) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x100) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0xa, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000001001000001000000dc00000000000000edf8b94e5b510056aa0cae89788c1f82aefe0433df4de56a905c3f5e46e8e4aab714c77be3a35865ec3b5dcb3db9543b9922252ef22e932e7aaf2e"], 0x18}, 0x0) close(r1) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000740)="5c00000013006bcc9e3be35c6e17aa33074b876c1d0000007ea60864160af36514000cc0080019000300000006001dc00200bc24eab5008000001e618294ff4051f60a84c9f4d4938037e786a6d00010000400000000000000c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4004004) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 965.862228ms ago: executing program 4 (id=24384): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000"], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.net/syz1\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r3, 0x2c, 0x1, 0x4, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0]}, 0x40) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x3, 0x0, [0x0, 0x0, 0x0]}) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x7}, 0x50) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x3, 0x12) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r2, r4, 0x4, r5}, 0x10) 921.95518ms ago: executing program 2 (id=24385): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000016c0)={&(0x7f0000000100)=@llc={0x1a, 0x337, 0x7, 0xfe, 0x9, 0xd}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000200)}, {&(0x7f00000002c0)="8460225ad3bf5603c0cbc7eeea41a595c655462cb36e2831288d57f3c17ec4689f7e981ca2ea45c881f4404dfdd2b9bc1229", 0x32}, {&(0x7f0000000340)="f4ce68686f5c612c09726a412a890eb3bae42f665b127d40181c71cc12f054d7e4f72723d651370e71b9354cc837b175b530b029bacabe4242b15e4ef8d5d9034b8f49cf071ecc5c2a11ad76a8dbcefc07dc637c7d086d4dc309bccaf315892b373a20e8833cb34df616a31b05af73249d2f17558041d2bd6cf6", 0x7a}, {&(0x7f0000000440)="39ffd7bc46d496798f6bf9ef0c77bb368192203d887d0b92d796737a10e50ce8ff010cbd9910b631e448fd64a0e77e19fbf54aea66a6b960e9121f5047c05a9072c25ec446af9ec88042dbe4a0a1a78125d0ac76bf614c3382c2fa7e6418aab23ba0d107008eb8f59106fc7632b8fb1f90363b2e12f1d166c6ecd1b0b3b3a21670e4e2df7ce049ce5ad8a0cf29fd94010b9d7d56", 0x94}, {&(0x7f0000000500)="66fd7d09d0f2bd7aa8f7979e8a2c566319a95567ad5053ff403d0f190b9e92ab09cd513d6911b3c027e10ede077a2143a540685f1335fa7f045f04d21b61c9cc1aca50c8d5045e2a5246ef727abe4c59df7cdd49a3c329a07aa46d829b1bc32cfd942a189acf", 0x66}], 0x5, &(0x7f0000000600)=[{0x38, 0x103, 0xd16, "59e6d1bac9cfc3caf6416478162dea5b5b2966b1dd3465bf75d858707ec33a6b3a844530"}], 0x38}, 0x20000000) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="cb000000150081054e81f7820244b904021f08010a000000040000a118010200ac479fefecbfdc7c43af73eba443fe141414ffff0d1208000f010081040188001603000803600cfab94dcf5c046181d67f6f94007134cf6ee080005c4ab0f45312b3429fdae408f456211bef32d400000000cb09efff001fb791643a5ecb001b146218a09345d600a7214f842ea90300000000d9d322fe7c9fd60100730d16a4683f5aeb4edbb57a5025ccca9e00360db7d3ac000040fad95667e0060000000000000080bb9ad809d5e1ca", 0xcb}], 0x1, 0x0, 0x0, 0x7400}, 0x24008804) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73f72cc9f0ba1f848390000005e1006", 0x1b}], 0x1}, 0x20000800) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000005c0)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) sendmsg(r3, &(0x7f00000001c0)={&(0x7f0000000300)=@isdn={0x22, 0xb, 0xd1, 0xff, 0x1}, 0x80, &(0x7f0000001740), 0x0, &(0x7f0000003c40)=ANY=[@ANYBLOB="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"], 0x1228}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8946, &(0x7f0000000080)) 891.58766ms ago: executing program 3 (id=24386): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x50}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 854.223681ms ago: executing program 5 (id=24387): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x115046, 0x0, 0x0, 0x9, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_bp={0x0, 0x5}, 0x880, 0x800, 0x0, 0x0, 0x0, 0x7, 0xffff, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$inet(r0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000680)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa15}, 0x0, 0x0, r1, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x3002500, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x2, 0x0) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0500"/12, @ANYRES32, @ANYBLOB="db393a5fb0e898d18040522dd10f98f704c861186f767277ec3f9f133047fa6fdb3b74bb"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) close(0xffffffffffffffff) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000000c0)=r2, 0x8) r6 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r6}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x43cd, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) close(0x4) 830.337731ms ago: executing program 4 (id=24388): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfff5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x845) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 816.595172ms ago: executing program 0 (id=24389): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) close(r0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff77, 0x9}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd635f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfdef) 508.965849ms ago: executing program 4 (id=24390): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff77, 0x9}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd635f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 489.104109ms ago: executing program 2 (id=24402): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xc}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="02000000040000000100000009"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0x7, 0x0, &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00H'], 0xfe33) sendmsg$inet(0xffffffffffffffff, 0x0, 0xfff5) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x845) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) 265.840464ms ago: executing program 0 (id=24391): close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4004004) socket$kcm(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x28, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socket$kcm(0x2, 0x3, 0x106) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x8000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x546}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) 218.058985ms ago: executing program 3 (id=24393): sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)}, 0x800) perf_event_open(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xa, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6820000}, 0xff00) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x3, 0x3}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x3, 0x80, 0x8, 0x6, 0x94, 0x7, 0x0, 0x0, 0x400, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x39a, 0x2, @perf_config_ext={0x7fffffffffffffff, 0x80000000}, 0x8, 0x0, 0x10, 0x0, 0x8, 0x4, 0x2, 0x0, 0x7fffffff, 0x0, 0xb}, 0x0, 0xf, r1, 0x8) perf_event_open(&(0x7f0000000000)={0x0, 0x90, 0x0, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x1, @perf_config_ext={0xfffffffffffffffd}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x402000a}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x23, &(0x7f0000000040), 0xcf) r3 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r3, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212970902000000e4a17c45c85686605e85da4a", 0x10}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 202.014466ms ago: executing program 2 (id=24395): r0 = gettid() perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xd}, 0x1008, 0x2, 0xfffffffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00') r1 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000f00)={0x6, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x41000, 0x60}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x8e}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x10, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x91f, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000088) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa310b6b8703100000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4014) 171.993726ms ago: executing program 5 (id=24396): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)) close(0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff77, 0x9}, 0x0, 0xc8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd635f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000), 0xfdef) 167.347046ms ago: executing program 4 (id=24397): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x50}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f0000000400000004000000"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, 0x0}, 0x20) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x84}, {0x6}]}) 0s ago: executing program 3 (id=24398): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0x100000001}, 0x4000, 0x2, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x200}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) kernel console output (not intermixed with test programs): : link becomes ready [ 2913.714675][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2913.742613][ T2861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2913.758421][ T2861] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2913.781846][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2913.814198][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2913.825634][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2913.836277][T32143] Bluetooth: hci2: command 0x041b tx timeout [ 2913.845412][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2913.855076][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2913.873297][ T2795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2913.884315][ T2795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.894605][ T2795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2913.907435][ T2795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.918930][ T2795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2913.929665][ T2795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2913.941721][ T2795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2913.965618][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2913.980846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2914.003116][ T2795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2914.013868][T32143] Bluetooth: hci1: command 0x0419 tx timeout [ 2914.036166][ T2795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.048259][ T2795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2914.059517][ T2795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.075861][ T2795] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2914.087208][ T2795] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2914.099261][ T2795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2914.132550][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2914.142330][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2914.157467][ T2795] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.167841][T27407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.176674][ T2795] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.185406][ T2795] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.194215][T27407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2914.202271][ T2795] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2914.214782][ T2923] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2914.232127][T31652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2914.291426][ T2923] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2914.348961][ T2923] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2914.423998][ T2923] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2914.436303][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2914.444085][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2914.467144][ T2861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2914.549233][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2914.565167][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2914.589658][ T3001] netlink: 'syz.4.22297': attribute type 10 has an invalid length. [ 2914.600873][ T3001] netlink: 40 bytes leftover after parsing attributes in process `syz.4.22297'. [ 2914.613982][ T3001] batman_adv: batadv0: Adding interface: vlan1 [ 2914.620694][ T3001] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2914.649068][ T3001] batman_adv: batadv0: Interface activated: vlan1 [ 2914.693784][T27407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.705390][T27407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2914.768922][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2914.806283][T27407] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2914.828615][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2914.841290][T27407] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2914.850566][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2914.866288][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2914.874787][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2914.887009][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2914.899755][ T2861] device veth0_vlan entered promiscuous mode [ 2915.445686][ T2861] device veth1_vlan entered promiscuous mode [ 2915.623483][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2915.648577][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2915.687653][ T2861] device veth0_macvtap entered promiscuous mode [ 2915.722581][ T2923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2915.734582][ T2861] device veth1_macvtap entered promiscuous mode [ 2915.789081][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2915.790353][T19975] Bluetooth: hci3: command 0x0419 tx timeout [ 2915.811943][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2915.837704][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2915.871728][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2915.895496][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2915.926066][T30965] Bluetooth: hci2: command 0x040f tx timeout [ 2915.933298][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2915.953064][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2915.974073][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.006051][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.030192][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.042032][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2916.053657][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.074089][ T2861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2916.119844][ T2923] 8021q: adding VLAN 0 to HW filter on device team0 [ 2916.150773][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2916.169604][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2916.195674][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2916.216273][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.236248][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2916.278388][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.307769][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2916.342250][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.374952][ T2861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2916.405539][ T2861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2916.449457][ T2861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2917.049773][ T3035] device batadv0 entered promiscuous mode [ 2917.071566][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2917.094128][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2917.151914][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 2917.161618][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2917.190153][T22894] bridge0: port 1(bridge_slave_0) entered blocking state [ 2917.197377][T22894] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2917.206415][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 2917.215656][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2917.224876][T22894] bridge0: port 2(bridge_slave_1) entered blocking state [ 2917.232270][T22894] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2917.240710][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 2917.284656][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 2917.319292][ T2861] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2917.342527][ T2861] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2917.366576][ T2861] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2917.391590][ T2861] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2917.466491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 2917.479191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 2917.510284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 2917.602532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 2917.637523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 2917.657466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 2917.715024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 2917.737656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2917.773058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 2917.803043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2918.007828][T19975] Bluetooth: hci2: command 0x0419 tx timeout [ 2918.521011][ T2923] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2918.608887][ T3054] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22315'. [ 2918.892587][T27407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2918.912727][T27407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2918.955563][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2918.974299][ T3066] netlink: 175 bytes leftover after parsing attributes in process `syz.0.22318'. [ 2919.066680][ T3061] device syzkaller0 entered promiscuous mode [ 2919.092655][T31652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2919.101423][T31652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2919.124410][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2919.145253][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 2919.179966][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 2919.238071][ T2923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2919.386056][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 2919.408054][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2919.450132][ T3074] netlink: 144 bytes leftover after parsing attributes in process `syz.0.22319'. [ 2919.554833][ T3082] bY4`Ҙ: renamed from lo [ 2919.841880][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 2919.874028][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2919.930432][ T2923] device veth0_vlan entered promiscuous mode [ 2919.955365][ T3087] netlink: 144 bytes leftover after parsing attributes in process `syz.0.22333'. [ 2920.043139][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2920.062481][T27407] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2920.116935][ T2923] device veth1_vlan entered promiscuous mode [ 2920.271995][ T3092] device batadv0 entered promiscuous mode [ 2920.446739][T31652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 2920.485594][T31652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2920.539253][ T2923] device veth0_macvtap entered promiscuous mode [ 2920.581371][ T2923] device veth1_macvtap entered promiscuous mode [ 2920.706667][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.755109][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.783617][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.840091][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.870662][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2920.909257][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2920.953770][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2921.005346][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2921.050005][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2921.095144][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2921.135700][ T2923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2923.034629][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 2923.075865][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 2923.103126][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 2923.135193][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2923.168439][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2923.189539][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2923.205124][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2923.216700][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2923.235949][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2923.253427][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2923.265016][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2923.283717][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2923.304388][ T2923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2923.323367][ T2923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2923.335677][ T2923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2923.353210][ T5151] tipc: Left network mode [ 2923.357791][ T3124] netlink: 'syz.5.22345': attribute type 10 has an invalid length. [ 2923.405454][ T3124] batman_adv: batadv0: Adding interface: netdevsim0 [ 2923.436137][ T3124] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2923.466049][ T3124] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2923.491471][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 2923.507117][T27393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2923.535119][ T5151] tipc: Left network mode [ 2923.541418][ T2923] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2923.555905][ T2923] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2923.565025][ T2923] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2923.575949][ T2923] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2923.625069][ T5151] tipc: Left network mode [ 2923.724518][ T3137] netlink: 144 bytes leftover after parsing attributes in process `syz.5.22339'. [ 2923.944226][T27407] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2923.954723][T27407] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2923.983376][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 2924.008550][T22894] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2924.038036][T22894] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2925.080920][T22894] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2925.092336][ T3142] netlink: 'syz.0.22351': attribute type 4 has an invalid length. [ 2925.108041][ T3142] netlink: 152 bytes leftover after parsing attributes in process `syz.0.22351'. [ 2925.154530][ T3142] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2928.558783][ T3181] netlink: 'syz.4.22350': attribute type 10 has an invalid length. [ 2928.613446][ T3181] batman_adv: batadv0: Adding interface: netdevsim0 [ 2928.654291][ T3181] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2928.701988][ T3181] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2928.885479][ T3186] device syzkaller0 entered promiscuous mode [ 2930.574235][ T3194] netlink: 'syz.5.22360': attribute type 4 has an invalid length. [ 2930.593730][ T3194] netlink: 152 bytes leftover after parsing attributes in process `syz.5.22360'. [ 2930.678325][ T3194] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 2930.936269][ T5151] device gretap0 left promiscuous mode [ 2930.941879][ T5151] : port 1(gretap0) entered disabled state [ 2931.008211][ T5151] device gretap0 left promiscuous mode [ 2931.013808][ T5151] : port 1(gretap0) entered disabled state [ 2934.264896][ T3229] netlink: 'syz.2.22369': attribute type 10 has an invalid length. [ 2934.323135][ T3229] batman_adv: batadv0: Adding interface: netdevsim0 [ 2934.350270][ T3229] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2934.386647][ T3229] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 2934.407422][ T3239] netlink: 144 bytes leftover after parsing attributes in process `syz.0.22371'. [ 2934.603115][ T3254] netlink: 175 bytes leftover after parsing attributes in process `syz.0.22376'. [ 2934.628476][ T3250] netlink: 'syz.4.22373': attribute type 10 has an invalid length. [ 2934.864692][ T3260] netlink: 'syz.3.22379': attribute type 4 has an invalid length. [ 2934.897209][ T3260] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.22379'. [ 2935.133776][T19977] syzkaller0: tun_net_xmit 76 [ 2935.146271][T19977] syzkaller0: tun_net_xmit 48 [ 2935.333729][ T3275] netlink: 'syz.2.22384': attribute type 3 has an invalid length. [ 2935.348165][ T3275] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.22384'. [ 2935.832959][ T3284] device syzkaller0 entered promiscuous mode [ 2935.916146][ T3289] netlink: 144 bytes leftover after parsing attributes in process `syz.0.22388'. [ 2936.287885][ T3302] netlink: 'syz.0.22393': attribute type 27 has an invalid length. [ 2936.304579][ T3302] netlink: 'syz.0.22393': attribute type 3 has an invalid length. [ 2936.358963][ T3302] netlink: 'syz.0.22393': attribute type 3 has an invalid length. [ 2936.367349][ T3302] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.22393'. [ 2936.481816][ T3310] netlink: 175 bytes leftover after parsing attributes in process `syz.5.22394'. [ 2936.875552][ T3321] netlink: 'syz.3.22399': attribute type 3 has an invalid length. [ 2936.910891][ T3321] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.22399'. [ 2936.922990][ T3316] syzkaller0: create flow: hash 3563599410 index 1 [ 2936.976398][ T3314] syzkaller0: delete flow: hash 3563599410 index 1 [ 2937.148524][ T3329] netlink: 'syz.2.22411': attribute type 10 has an invalid length. [ 2937.200988][ T3329] team0: Port device virt_wifi0 added [ 2937.437683][ T3340] netlink: 144 bytes leftover after parsing attributes in process `syz.4.22404'. [ 2938.024023][ T3351] netlink: 144 bytes leftover after parsing attributes in process `syz.3.22418'. [ 2938.233427][ T3353] netlink: 175 bytes leftover after parsing attributes in process `syz.4.22408'. [ 2938.840169][ T3365] netlink: 'syz.5.22414': attribute type 3 has an invalid length. [ 2938.901517][ T3365] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.22414'. [ 2938.950716][ T3370] netlink: 144 bytes leftover after parsing attributes in process `syz.2.22423'. [ 2939.192028][ T3378] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.22416'. [ 2939.341201][T15770] syzkaller0: tun_net_xmit 76 [ 2939.354730][T15770] syzkaller0: tun_net_xmit 48 [ 2939.370712][T15772] syzkaller0: tun_net_xmit 76 [ 2939.424533][ T3387] validate_nla: 1 callbacks suppressed [ 2939.424589][ T3387] netlink: 'syz.5.22421': attribute type 10 has an invalid length. [ 2939.596619][T15772] syzkaller0: tun_net_xmit 76 [ 2939.749628][ T3387] team0: Device wg1 is of different type [ 2939.906255][T15772] syzkaller0: tun_net_xmit 76 [ 2939.946194][T15772] syzkaller0: tun_net_xmit 76 [ 2940.064584][ T3375] syzkaller0: delete flow: hash 3563599410 index 1 [ 2940.229010][ T3407] netlink: 'syz.2.22427': attribute type 27 has an invalid length. [ 2940.258421][ T3407] netlink: 'syz.2.22427': attribute type 3 has an invalid length. [ 2940.273541][ T3398] device syzkaller0 entered promiscuous mode [ 2940.301374][ T3407] netlink: 'syz.2.22427': attribute type 3 has an invalid length. [ 2940.451022][ T3412] netlink: 'syz.4.22430': attribute type 3 has an invalid length. [ 2940.519708][ T3414] netlink: 'syz.5.22431': attribute type 10 has an invalid length. [ 2940.891628][ T3414] 8021q: adding VLAN 0 to HW filter on device team0 [ 2940.942444][ T3414] bond0: (slave team0): Enslaving as an active interface with an up link [ 2941.091188][ T3426] netlink: 'syz.3.22433': attribute type 10 has an invalid length. [ 2941.139086][ T3426] team0: Port device virt_wifi0 added [ 2941.151417][ T3424] netlink: 'syz.5.22432': attribute type 4 has an invalid length. [ 2941.172028][ T3424] __nla_validate_parse: 4 callbacks suppressed [ 2941.172120][ T3424] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.22432'. [ 2941.461738][ T3435] netlink: 175 bytes leftover after parsing attributes in process `syz.3.22437'. [ 2941.753595][ T3439] netlink: 144 bytes leftover after parsing attributes in process `syz.4.22434'. [ 2941.930996][ T3440] netlink: 'syz.0.22438': attribute type 10 has an invalid length. [ 2942.302400][ T3440] team0: Device wg1 is of different type [ 2942.804275][ T3469] netlink: 'syz.2.22444': attribute type 10 has an invalid length. [ 2943.093459][ T3469] 8021q: adding VLAN 0 to HW filter on device team0 [ 2943.202546][ T3469] bond0: (slave team0): Enslaving as an active interface with an up link [ 2943.262376][ T3484] team0: Port device virt_wifi0 added [ 2943.581857][ T3485] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.22447'. [ 2943.754963][ T3491] netlink: 144 bytes leftover after parsing attributes in process `syz.2.22451'. [ 2943.907634][ T3496] netlink: 175 bytes leftover after parsing attributes in process `syz.0.22453'. [ 2945.056892][ T3512] device syzkaller0 left promiscuous mode [ 2945.099768][ T3512] syzkaller0: create flow: hash 3563599410 index 1 [ 2945.559306][ T3511] syzkaller0: delete flow: hash 3563599410 index 1 [ 2945.764025][ T3525] validate_nla: 2 callbacks suppressed [ 2945.764069][ T3525] netlink: 'syz.5.22470': attribute type 27 has an invalid length. [ 2945.817963][ T3525] netlink: 'syz.5.22470': attribute type 3 has an invalid length. [ 2945.865216][ T3531] netlink: 'syz.5.22470': attribute type 3 has an invalid length. [ 2945.874714][ T3531] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.22470'. [ 2945.936692][ T3533] netlink: 'syz.3.22460': attribute type 3 has an invalid length. [ 2945.968129][ T3533] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.22460'. [ 2949.122549][T15772] syzkaller0: tun_net_xmit 76 [ 2949.127556][T15772] syzkaller0: tun_net_xmit 48 [ 2949.146801][T27397] syzkaller0: tun_net_xmit 76 [ 2949.153121][ T3557] syzkaller0: create flow: hash 3563599410 index 1 [ 2949.186622][ T3564] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.22472'. [ 2949.289283][T15770] syzkaller0: tun_net_xmit 76 [ 2949.470594][ T3555] syzkaller0: delete flow: hash 3563599410 index 1 [ 2949.905469][ T3582] netlink: 'syz.5.22480': attribute type 3 has an invalid length. [ 2949.914251][ T3582] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.22480'. [ 2950.180528][ T3592] netlink: 'syz.3.22483': attribute type 10 has an invalid length. [ 2950.381553][ T3592] device hsr0 entered promiscuous mode [ 2950.698429][ T3592] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 2950.890868][ T3592] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 2950.923509][ T3592] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 2950.953440][ T3592] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 2951.238958][ T3605] netlink: 'syz.4.22488': attribute type 10 has an invalid length. [ 2952.232831][ T3639] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.22498'. [ 2952.431303][ T3639] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 2952.484808][ T3639] CPU: 1 PID: 3639 Comm: syz.4.22498 Not tainted syzkaller #0 [ 2952.492365][ T3639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2952.502466][ T3639] Call Trace: [ 2952.505788][ T3639] [ 2952.508764][ T3639] dump_stack_lvl+0x188/0x250 [ 2952.513511][ T3639] ? show_regs_print_info+0x20/0x20 [ 2952.518763][ T3639] ? load_image+0x410/0x410 [ 2952.523367][ T3639] sysfs_warn_dup+0x8a/0xa0 [ 2952.527934][ T3639] sysfs_do_create_link_sd+0xc0/0x110 [ 2952.533374][ T3639] device_add+0x83b/0x1050 [ 2952.537858][ T3639] wiphy_register+0x1e74/0x2c40 [ 2952.542896][ T3639] ? cfg80211_event_work+0x40/0x40 [ 2952.548068][ T3639] ? minstrel_ht_alloc+0x807/0x980 [ 2952.553247][ T3639] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2952.559391][ T3639] ieee80211_register_hw+0x2a03/0x3a60 [ 2952.564928][ T3639] ? ieee80211_register_hw+0xac1/0x3a60 [ 2952.570551][ T3639] ? ieee80211_tasklet_handler+0x20/0x20 [ 2952.576437][ T3639] ? rcu_is_watching+0x11/0xa0 [ 2952.581273][ T3639] ? hrtimer_init+0x10c/0x220 [ 2952.586106][ T3639] mac80211_hwsim_new_radio+0x209d/0x4050 [ 2952.591937][ T3639] hwsim_new_radio_nl+0xa7d/0xc50 [ 2952.597054][ T3639] genl_rcv_msg+0xd0b/0xfa0 [ 2952.601637][ T3639] ? genl_bind+0x370/0x370 [ 2952.606139][ T3639] ? verify_lock_unused+0x140/0x140 [ 2952.611395][ T3639] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2952.617191][ T3639] ? perf_trace_lock+0x301/0x390 [ 2952.622199][ T3639] ? hwsim_tx_info_frame_received_nl+0xec0/0xec0 [ 2952.628633][ T3639] netlink_rcv_skb+0x1e9/0x430 [ 2952.633493][ T3639] ? genl_bind+0x370/0x370 [ 2952.638429][ T3639] ? netlink_ack+0xb10/0xb10 [ 2952.643108][ T3639] ? down_read+0x1aa/0x2e0 [ 2952.647682][ T3639] genl_rcv+0x24/0x40 [ 2952.651731][ T3639] netlink_unicast+0x78f/0x940 [ 2952.656613][ T3639] netlink_sendmsg+0x8ba/0xbe0 [ 2952.661459][ T3639] ? netlink_getsockopt+0x570/0x570 [ 2952.666732][ T3639] ? aa_sock_msg_perm+0x94/0x150 [ 2952.671743][ T3639] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2952.677090][ T3639] ? security_socket_sendmsg+0x7c/0xa0 [ 2952.682607][ T3639] ? netlink_getsockopt+0x570/0x570 [ 2952.687881][ T3639] ____sys_sendmsg+0x5be/0x8f0 [ 2952.692745][ T3639] ? __sys_sendmsg_sock+0x30/0x30 [ 2952.697853][ T3639] ? import_iovec+0x6f/0xa0 [ 2952.702519][ T3639] ___sys_sendmsg+0x236/0x2e0 [ 2952.707449][ T3639] ? __sys_sendmsg+0x290/0x290 [ 2952.712369][ T3639] __se_sys_sendmsg+0x1b7/0x2a0 [ 2952.717380][ T3639] ? __x64_sys_sendmsg+0x80/0x80 [ 2952.722386][ T3639] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 2952.728461][ T3639] ? lockdep_hardirqs_on+0x94/0x140 [ 2952.733740][ T3639] do_syscall_64+0x4c/0xa0 [ 2952.738244][ T3639] ? clear_bhb_loop+0x30/0x80 [ 2952.743214][ T3639] ? clear_bhb_loop+0x30/0x80 [ 2952.747959][ T3639] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2952.753902][ T3639] RIP: 0033:0x7fb6ffca7e59 [ 2952.758369][ T3639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2952.778210][ T3639] RSP: 002b:00007fb6fdf00028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2952.786685][ T3639] RAX: ffffffffffffffda RBX: 00007fb6fff2ffa0 RCX: 00007fb6ffca7e59 [ 2952.794716][ T3639] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 2952.802754][ T3639] RBP: 00007fb6ffd3de6f R08: 0000000000000000 R09: 0000000000000000 [ 2952.810781][ T3639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2952.818805][ T3639] R13: 00007fb6fff30038 R14: 00007fb6fff2ffa0 R15: 00007ffd8f9ce9f8 [ 2952.826869][ T3639] [ 2952.893049][ T3637] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22497'. [ 2959.038666][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.045068][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 2959.923881][ T3723] netlink: 'syz.4.22525': attribute type 3 has an invalid length. [ 2959.984475][ T3729] device syzkaller0 entered promiscuous mode [ 2959.991194][ T3723] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.22525'. [ 2960.031733][ T3727] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.22526'. [ 2960.517824][ T3749] netlink: 'syz.3.22530': attribute type 3 has an invalid length. [ 2960.550490][ T3749] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.22530'. [ 2960.705554][ T3753] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.22534'. [ 2960.731267][ T3747] ref_ctr_offset mismatch. inode: 0xd7 offset: 0xe ref_ctr_offset(old): 0x7602 ref_ctr_offset(new): 0x0 [ 2960.763480][ T3752] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2962.693691][ T3770] netlink: 'syz.5.22540': attribute type 3 has an invalid length. [ 2962.707513][ T3770] netlink: 132 bytes leftover after parsing attributes in process `syz.5.22540'. [ 2962.971830][ T3777] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.22542'. [ 2963.984883][ T3806] netlink: 'syz.5.22552': attribute type 10 has an invalid length. [ 2964.192575][ T3806] bond0: (slave team0): Releasing backup interface [ 2964.377739][ T3806] team0 (unregistering): Port device team_slave_0 removed [ 2964.456540][ T3806] team0 (unregistering): Port device team_slave_1 removed [ 2964.531316][ T3806] team0 (unregistering): Port device virt_wifi0 removed [ 2964.549260][ T3826] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.22558'. [ 2964.896280][ T3838] netlink: 'syz.3.22560': attribute type 2 has an invalid length. [ 2964.938448][ T3838] netlink: 'syz.3.22560': attribute type 8 has an invalid length. [ 2964.978631][ T3838] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22560'. [ 2965.371025][ T3842] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.22562'. [ 2966.042777][ T3857] netlink: 140 bytes leftover after parsing attributes in process `syz.0.22567'. [ 2966.116209][ T3857] netlink: 10 bytes leftover after parsing attributes in process `syz.0.22567'. [ 2966.796956][ T3857] bond0: (slave bond_slave_0): Releasing backup interface [ 2966.815727][ T3857] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 2967.026368][ T3877] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.22572'. [ 2967.122056][ T3881] netlink: 'syz.0.22575': attribute type 10 has an invalid length. [ 2967.399875][ T3881] team0 (unregistering): Port device team_slave_0 removed [ 2967.482801][ T3881] team0 (unregistering): Port device team_slave_1 removed [ 2970.564445][ T3909] netlink: 175 bytes leftover after parsing attributes in process `syz.4.22584'. [ 2970.773661][ T3917] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.22585'. [ 2970.815210][ T3917] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2970.854854][ T3917] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2971.090518][ T3929] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.22589'. [ 2971.242095][ T3932] netlink: 'syz.3.22591': attribute type 10 has an invalid length. [ 2971.562116][ T3938] netlink: 'syz.2.22593': attribute type 29 has an invalid length. [ 2971.627138][ T3948] netlink: 'syz.2.22593': attribute type 4 has an invalid length. [ 2971.655374][ T3948] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.22593'. [ 2972.111261][ T3932] team0 (unregistering): Port device team_slave_0 removed [ 2972.235369][ T3932] team0 (unregistering): Port device team_slave_1 removed [ 2972.316251][ T3932] team0 (unregistering): Port device virt_wifi0 removed [ 2972.366123][ T3944] netlink: 'syz.0.22594': attribute type 25 has an invalid length. [ 2972.374349][ T3944] netlink: 'syz.0.22594': attribute type 25 has an invalid length. [ 2972.394103][ T3938] netlink: 'syz.2.22593': attribute type 29 has an invalid length. [ 2972.408080][ T3947] device batadv0 entered promiscuous mode [ 2972.653743][ T3961] netlink: 144 bytes leftover after parsing attributes in process `syz.5.22606'. [ 2972.803475][ T3967] netlink: 175 bytes leftover after parsing attributes in process `syz.4.22599'. [ 2975.280095][ T3981] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.22605'. [ 2975.337286][ T3981] netlink: 20624 bytes leftover after parsing attributes in process `syz.0.22605'. [ 2975.370109][ T3981] tipc: Started in network mode [ 2975.398961][ T3981] tipc: Node identity d, cluster identity 46 [ 2975.424201][ T3981] tipc: Node number set to 13 [ 2975.606249][ T3994] netlink: 'syz.3.22608': attribute type 29 has an invalid length. [ 2975.690088][ T4003] netlink: 'syz.3.22608': attribute type 4 has an invalid length. [ 2975.715454][ T4003] netlink: 206236 bytes leftover after parsing attributes in process `syz.3.22608'. [ 2975.786106][ T3994] netlink: 'syz.3.22608': attribute type 29 has an invalid length. [ 2975.868954][ T3997] netlink: 'syz.3.22608': attribute type 29 has an invalid length. [ 2976.157309][ T4018] netlink: 175 bytes leftover after parsing attributes in process `syz.5.22614'. [ 2976.239843][ T4012] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.22612'. [ 2976.282222][ T4012] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2976.354486][ T4012] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2979.123639][ T4021] netlink: 144 bytes leftover after parsing attributes in process `syz.0.22616'. [ 2979.562704][ T4028] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22619'. [ 2979.580127][ T4033] netlink: 'syz.5.22617': attribute type 15 has an invalid length. [ 2979.613803][ T4033] netlink: 11834 bytes leftover after parsing attributes in process `syz.5.22617'. [ 2979.638321][ T4028] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.22619'. [ 2979.770928][ T4028] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.22619'. [ 2980.298219][ T4057] netlink: 'syz.4.22626': attribute type 4 has an invalid length. [ 2980.356119][ T4057] netlink: 206236 bytes leftover after parsing attributes in process `syz.4.22626'. [ 2980.393931][ T4051] netlink: 'syz.4.22626': attribute type 29 has an invalid length. [ 2980.604509][ T4051] netlink: 'syz.4.22626': attribute type 29 has an invalid length. [ 2980.692786][ T4056] netlink: 'syz.4.22626': attribute type 29 has an invalid length. [ 2981.014633][ T4074] sctp: [Deprecated]: syz.4.22629 (pid 4074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2981.014633][ T4074] Use struct sctp_sack_info instead [ 2981.035492][ T4073] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.22631'. [ 2981.085961][ T4073] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2981.094283][ T4073] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 2981.146833][ T4069] netlink: 144 bytes leftover after parsing attributes in process `syz.3.22632'. [ 2984.474508][ T4108] netlink: 'syz.5.22639': attribute type 29 has an invalid length. [ 2984.517796][ T4108] netlink: 'syz.5.22639': attribute type 29 has an invalid length. [ 2984.564498][ T4114] netlink: 'syz.5.22639': attribute type 4 has an invalid length. [ 2984.587646][ T4114] netlink: 206236 bytes leftover after parsing attributes in process `syz.5.22639'. [ 2984.609418][ T4114] netlink: 203516 bytes leftover after parsing attributes in process `syz.5.22639'. [ 2984.624461][ T4114] netlink: zone id is out of range [ 2984.640754][ T4114] netlink: del zone limit has 8 unknown bytes [ 2984.689476][ T4117] netlink: 121460 bytes leftover after parsing attributes in process `syz.4.22643'. [ 2984.754942][ T4112] netlink: 'syz.5.22639': attribute type 29 has an invalid length. [ 2984.769798][ T4117] netlink: 20624 bytes leftover after parsing attributes in process `syz.4.22643'. [ 2984.831919][ T4117] tipc: Started in network mode [ 2984.842099][ T4117] tipc: Node identity d, cluster identity 46 [ 2984.866087][ T4117] tipc: Node number set to 13 [ 2984.907787][ T4122] netlink: 'syz.2.22644': attribute type 2 has an invalid length. [ 2984.949024][ T4122] netlink: 'syz.2.22644': attribute type 8 has an invalid length. [ 2984.991318][ T4122] netlink: 132 bytes leftover after parsing attributes in process `syz.2.22644'. [ 2985.145254][ T4127] sctp: [Deprecated]: syz.5.22646 (pid 4127) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2985.145254][ T4127] Use struct sctp_sack_info instead [ 2985.185938][ T4133] netlink: 'syz.3.22645': attribute type 10 has an invalid length. [ 2985.185973][ T4133] netlink: 55 bytes leftover after parsing attributes in process `syz.3.22645'. [ 2985.453984][ T4129] netlink: 144 bytes leftover after parsing attributes in process `syz.0.22647'. [ 2985.704393][ T4148] netlink: 'syz.5.22651': attribute type 9 has an invalid length. [ 2985.735061][ T4148] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.22651'. [ 2990.333899][ T4182] netlink: 'syz.3.22669': attribute type 9 has an invalid length. [ 2990.357914][ T4184] netlink: 'syz.0.22659': attribute type 29 has an invalid length. [ 2990.409129][ T4182] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.22669'. [ 2990.473649][ T4195] netlink: 'syz.0.22659': attribute type 4 has an invalid length. [ 2990.525200][ T4192] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.22661'. [ 2990.545914][ T4195] netlink: 206236 bytes leftover after parsing attributes in process `syz.0.22659'. [ 2990.556159][ T4184] netlink: 'syz.0.22659': attribute type 29 has an invalid length. [ 2990.628230][ T4192] netlink: 20624 bytes leftover after parsing attributes in process `syz.2.22661'. [ 2990.647651][ T4192] tipc: Started in network mode [ 2990.652946][ T4192] tipc: Node identity d, cluster identity 46 [ 2990.669571][ T4203] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.22662'. [ 2990.700157][ T4192] tipc: Node number set to 13 [ 2990.736258][ T4193] netlink: 'syz.0.22659': attribute type 29 has an invalid length. [ 2990.802270][ T4200] netlink: 144 bytes leftover after parsing attributes in process `syz.5.22663'. [ 2990.905365][ T4207] netlink: 'syz.3.22664': attribute type 15 has an invalid length. [ 2990.924013][ T4207] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.22664'. [ 2990.971959][ T4211] netlink: 'syz.3.22664': attribute type 4 has an invalid length. [ 2990.982793][ T4211] netlink: 'syz.3.22664': attribute type 5 has an invalid length. [ 2990.991303][ T4211] netlink: 'syz.3.22664': attribute type 6 has an invalid length. [ 2990.999702][ T4211] netlink: 'syz.3.22664': attribute type 7 has an invalid length. [ 2991.007921][ T4211] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.22664'. [ 2991.027711][ T4218] netlink: 132 bytes leftover after parsing attributes in process `syz.0.22666'. [ 2991.424344][ T4236] netlink: 40 bytes leftover after parsing attributes in process `syz.2.22670'. [ 2994.710807][ T4255] tipc: Started in network mode [ 2994.748017][ T4255] tipc: Node identity d, cluster identity 46 [ 2994.773010][ T4255] tipc: Node number set to 13 [ 2995.581846][ T4284] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2995.590646][ T4284] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2995.685049][ T4290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2995.692948][ T4290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2999.050741][ T4302] __nla_validate_parse: 5 callbacks suppressed [ 2999.050780][ T4302] netlink: 175 bytes leftover after parsing attributes in process `syz.4.22696'. [ 2999.222721][ T4309] netlink: 121460 bytes leftover after parsing attributes in process `syz.5.22692'. [ 2999.251464][ T4309] netlink: 20624 bytes leftover after parsing attributes in process `syz.5.22692'. [ 2999.305941][ T4309] tipc: Started in network mode [ 2999.311470][ T4309] tipc: Node identity d, cluster identity 46 [ 2999.320480][ T4309] tipc: Node number set to 13 [ 2999.402258][ T4319] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.22697'. [ 2999.866315][ T4338] validate_nla: 12 callbacks suppressed [ 2999.866335][ T4338] netlink: 'syz.4.22704': attribute type 4 has an invalid length. [ 2999.867379][ T4335] netlink: 'syz.2.22702': attribute type 27 has an invalid length. [ 2999.892387][ T4338] netlink: 'syz.4.22704': attribute type 16 has an invalid length. [ 2999.909355][ T4338] netlink: 132 bytes leftover after parsing attributes in process `syz.4.22704'. [ 2999.937147][ T4335] netlink: 'syz.2.22702': attribute type 25 has an invalid length. [ 3000.151561][ T4343] netlink: 'syz.3.22706': attribute type 10 has an invalid length. [ 3000.171507][ T4343] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22706'. [ 3000.193443][ T4343] device ipvlan1 entered promiscuous mode [ 3000.242389][ T4343] bridge0: port 3(ipvlan1) entered blocking state [ 3000.291421][ T4343] bridge0: port 3(ipvlan1) entered disabled state [ 3000.321595][ T4343] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3000.356708][ T4351] netlink: 175 bytes leftover after parsing attributes in process `syz.4.22708'. [ 3000.745103][ T4359] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.22711'. [ 3000.772376][ T4364] netlink: 'syz.0.22714': attribute type 25 has an invalid length. [ 3000.809851][ T4364] netlink: 'syz.0.22714': attribute type 29 has an invalid length. [ 3000.846610][ T4359] netlink: 20624 bytes leftover after parsing attributes in process `syz.3.22711'. [ 3001.097579][ T4372] netlink: 'syz.2.22716': attribute type 25 has an invalid length. [ 3001.156344][ T4372] netlink: 'syz.2.22716': attribute type 29 has an invalid length. [ 3001.338476][ T4386] netlink: 'syz.5.22719': attribute type 4 has an invalid length. [ 3001.352239][ T4388] netlink: 175 bytes leftover after parsing attributes in process `syz.2.22722'. [ 3001.630746][ T4393] device ipvlan1 entered promiscuous mode [ 3001.702536][ T4393] bridge0: port 3(ipvlan1) entered blocking state [ 3001.740921][ T4393] bridge0: port 3(ipvlan1) entered disabled state [ 3001.834491][ T4393] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3002.175289][ T4405] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3002.182516][ T4405] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3003.153890][ T4444] device ipvlan1 entered promiscuous mode [ 3003.234849][ T4444] bridge0: port 3(ipvlan1) entered blocking state [ 3003.254100][ T4444] bridge0: port 3(ipvlan1) entered disabled state [ 3003.321125][ T4444] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 3003.725274][ T4470] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 3003.736759][ T4470] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 3004.162729][ T4486] __nla_validate_parse: 10 callbacks suppressed [ 3004.162768][ T4486] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.22767'. [ 3004.478910][ T4501] netlink: 5 bytes leftover after parsing attributes in process `syz.0.22762'. [ 3004.577968][ T4504] netlink: 5 bytes leftover after parsing attributes in process `syz.3.22765'. [ 3004.672203][ T4507] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22768'. [ 3004.734552][ T4509] netlink: 5 bytes leftover after parsing attributes in process `syz.4.22766'. [ 3004.939983][ T4523] netlink: 5 bytes leftover after parsing attributes in process `syz.5.22774'. [ 3005.134488][ T4533] validate_nla: 32 callbacks suppressed [ 3005.134529][ T4533] netlink: 'syz.5.22776': attribute type 25 has an invalid length. [ 3005.175376][ T4534] netlink: 'syz.4.22775': attribute type 9 has an invalid length. [ 3005.189593][ T4533] netlink: 'syz.5.22776': attribute type 29 has an invalid length. [ 3005.217045][ T4534] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.22775'. [ 3005.332303][ T4537] netlink: 'syz.0.22777': attribute type 25 has an invalid length. [ 3005.351406][ T4537] netlink: 'syz.0.22777': attribute type 29 has an invalid length. [ 3005.432757][ T4545] netlink: 5 bytes leftover after parsing attributes in process `syz.5.22779'. [ 3005.484402][ T4547] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22781'. [ 3005.533007][ T4550] netlink: 'syz.0.22780': attribute type 27 has an invalid length. [ 3005.569355][ T4550] netlink: 'syz.0.22780': attribute type 25 has an invalid length. [ 3005.599568][ T4551] netlink: 'syz.4.22782': attribute type 25 has an invalid length. [ 3005.616833][ T4551] netlink: 'syz.4.22782': attribute type 29 has an invalid length. [ 3005.656626][ T4556] netlink: 'syz.3.22783': attribute type 25 has an invalid length. [ 3005.791295][ T4563] netlink: 132 bytes leftover after parsing attributes in process `syz.3.22787'. [ 3009.217945][ T4715] __nla_validate_parse: 40 callbacks suppressed [ 3009.217985][ T4715] netlink: 5 bytes leftover after parsing attributes in process `syz.5.22851'. [ 3009.289049][ T4716] netlink: 175 bytes leftover after parsing attributes in process `syz.0.22852'. [ 3009.385294][ T4719] netlink: 144 bytes leftover after parsing attributes in process `syz.4.22849'. [ 3009.459138][ T4718] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22853'. [ 3009.605517][ T4730] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22857'. [ 3009.908505][ T4739] netlink: 5 bytes leftover after parsing attributes in process `syz.4.22862'. [ 3010.092156][ T4747] netlink: 5 bytes leftover after parsing attributes in process `syz.4.22864'. [ 3010.277162][ T4754] netlink: 5 bytes leftover after parsing attributes in process `syz.4.22867'. [ 3010.348058][ T4756] validate_nla: 29 callbacks suppressed [ 3010.348095][ T4756] netlink: 'syz.3.22868': attribute type 25 has an invalid length. [ 3010.378687][ T4756] netlink: 'syz.3.22868': attribute type 29 has an invalid length. [ 3010.430378][ T4761] netlink: 5 bytes leftover after parsing attributes in process `syz.3.22868'. [ 3010.453093][ T4760] netlink: 'syz.4.22870': attribute type 27 has an invalid length. [ 3010.467172][ T4760] netlink: 'syz.4.22870': attribute type 25 has an invalid length. [ 3010.871542][ T4763] netlink: 144 bytes leftover after parsing attributes in process `syz.5.22871'. [ 3011.521955][ T4795] netlink: 'syz.2.22883': attribute type 25 has an invalid length. [ 3011.535302][ T4795] netlink: 'syz.2.22883': attribute type 29 has an invalid length. [ 3012.172426][ T4822] netlink: 'syz.3.22893': attribute type 27 has an invalid length. [ 3012.213353][ T4822] netlink: 'syz.3.22893': attribute type 25 has an invalid length. [ 3012.659208][ T4842] netlink: 'syz.0.22898': attribute type 25 has an invalid length. [ 3012.674418][ T4842] netlink: 'syz.0.22898': attribute type 29 has an invalid length. [ 3014.367176][ T4897] __nla_validate_parse: 22 callbacks suppressed [ 3014.367218][ T4897] netlink: 5 bytes leftover after parsing attributes in process `syz.3.22921'. [ 3014.628264][ T4909] netlink: 5 bytes leftover after parsing attributes in process `syz.5.22925'. [ 3014.958211][ T4922] netlink: 5 bytes leftover after parsing attributes in process `syz.0.22930'. [ 3015.079153][ T4928] netlink: 5 bytes leftover after parsing attributes in process `syz.5.22931'. [ 3015.252664][ T4937] netlink: 5 bytes leftover after parsing attributes in process `syz.4.22935'. [ 3015.264462][ T4938] netlink: 5 bytes leftover after parsing attributes in process `syz.5.22934'. [ 3015.630993][ T4951] validate_nla: 18 callbacks suppressed [ 3015.631021][ T4951] netlink: 'syz.0.22940': attribute type 25 has an invalid length. [ 3015.648569][ T4951] netlink: 'syz.0.22940': attribute type 29 has an invalid length. [ 3015.669292][ T4953] netlink: 5 bytes leftover after parsing attributes in process `syz.0.22940'. [ 3015.881934][ T4957] netlink: 'syz.0.22941': attribute type 25 has an invalid length. [ 3015.903413][ T4957] netlink: 'syz.0.22941': attribute type 29 has an invalid length. [ 3015.914381][ T4959] netlink: 'syz.4.22943': attribute type 25 has an invalid length. [ 3015.935289][ T4959] netlink: 'syz.4.22943': attribute type 29 has an invalid length. [ 3015.972634][ T4965] netlink: 5 bytes leftover after parsing attributes in process `syz.0.22941'. [ 3015.987475][ T4964] netlink: 5 bytes leftover after parsing attributes in process `syz.2.22945'. [ 3015.997409][ T4967] netlink: 5 bytes leftover after parsing attributes in process `syz.4.22943'. [ 3016.472710][ T4981] netlink: 'syz.5.22951': attribute type 25 has an invalid length. [ 3016.484362][ T4981] netlink: 'syz.5.22951': attribute type 29 has an invalid length. [ 3016.497131][ T4984] netlink: 'syz.4.22952': attribute type 25 has an invalid length. [ 3016.512140][ T4984] netlink: 'syz.4.22952': attribute type 29 has an invalid length. [ 3019.473067][ T5102] __nla_validate_parse: 20 callbacks suppressed [ 3019.473105][ T5102] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23001'. [ 3019.576308][ T5105] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23012'. [ 3019.868049][ T5120] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23006'. [ 3020.339969][ T5140] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23014'. [ 3020.538221][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 3020.544639][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 3020.702271][ T5154] validate_nla: 36 callbacks suppressed [ 3020.702310][ T5154] netlink: 'syz.4.23018': attribute type 25 has an invalid length. [ 3020.717797][ T5154] netlink: 'syz.4.23018': attribute type 29 has an invalid length. [ 3020.743292][ T5159] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23018'. [ 3021.805918][ T5198] netlink: 175 bytes leftover after parsing attributes in process `syz.2.23031'. [ 3021.884324][ T5202] netlink: 'syz.0.23030': attribute type 25 has an invalid length. [ 3021.893185][ T5202] netlink: 'syz.0.23030': attribute type 29 has an invalid length. [ 3021.945352][ T5203] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23030'. [ 3022.144947][ T5209] netlink: 'syz.5.23034': attribute type 25 has an invalid length. [ 3022.166036][ T5209] netlink: 'syz.5.23034': attribute type 29 has an invalid length. [ 3022.221948][ T5215] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23034'. [ 3022.768680][ T5234] netlink: 175 bytes leftover after parsing attributes in process `syz.5.23044'. [ 3023.614089][ T5255] netlink: 144 bytes leftover after parsing attributes in process `syz.0.23048'. [ 3024.488233][ T5291] netlink: 'syz.2.23061': attribute type 25 has an invalid length. [ 3024.525077][ T5291] netlink: 'syz.2.23061': attribute type 29 has an invalid length. [ 3024.537334][ T5290] __nla_validate_parse: 4 callbacks suppressed [ 3024.537374][ T5290] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23062'. [ 3024.609675][ T5291] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23061'. [ 3024.944024][ T5308] netlink: 144 bytes leftover after parsing attributes in process `syz.0.23067'. [ 3025.093274][ T5313] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23070'. [ 3025.168064][ T5316] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.23070'. [ 3025.230840][ T5310] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.23070'. [ 3025.731470][ T5334] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23076'. [ 3025.809201][ T5342] netlink: 'syz.0.23080': attribute type 25 has an invalid length. [ 3025.818975][ T5342] netlink: 'syz.0.23080': attribute type 29 has an invalid length. [ 3025.830020][ T5342] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23080'. [ 3026.006504][ T5348] netlink: 'syz.3.23081': attribute type 25 has an invalid length. [ 3026.014641][ T5348] netlink: 'syz.3.23081': attribute type 29 has an invalid length. [ 3026.058143][ T5354] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23081'. [ 3026.310125][ T5358] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23085'. [ 3026.512491][ T5364] netlink: 'syz.3.23088': attribute type 10 has an invalid length. [ 3026.556965][ T5366] netlink: 'syz.0.23089': attribute type 25 has an invalid length. [ 3026.591884][ T5366] netlink: 'syz.0.23089': attribute type 29 has an invalid length. [ 3026.804928][ T5377] netlink: 'syz.4.23092': attribute type 25 has an invalid length. [ 3026.906023][ T5377] netlink: 'syz.4.23092': attribute type 29 has an invalid length. [ 3027.544270][ T5405] netlink: 'syz.0.23102': attribute type 25 has an invalid length. [ 3027.677434][T30966] Bluetooth: hci5: command 0x0406 tx timeout [ 3029.694817][ T5483] __nla_validate_parse: 21 callbacks suppressed [ 3029.694856][ T5483] netlink: 175 bytes leftover after parsing attributes in process `syz.2.23126'. [ 3030.372906][ T5509] netlink: 132 bytes leftover after parsing attributes in process `syz.0.23132'. [ 3030.451385][ T5517] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.23132'. [ 3030.527330][ T5515] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23135'. [ 3030.555580][ T5509] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.23132'. [ 3030.889864][ T5528] netlink: 175 bytes leftover after parsing attributes in process `syz.4.23141'. [ 3031.470559][ T5543] validate_nla: 17 callbacks suppressed [ 3031.470633][ T5543] netlink: 'syz.4.23145': attribute type 10 has an invalid length. [ 3031.958814][ T5556] netlink: 'syz.4.23149': attribute type 10 has an invalid length. [ 3032.006259][ T5558] netlink: 'syz.0.23150': attribute type 10 has an invalid length. [ 3032.025978][ T5565] netlink: 'syz.2.23152': attribute type 25 has an invalid length. [ 3032.034044][ T5565] netlink: 'syz.2.23152': attribute type 29 has an invalid length. [ 3032.116721][ T5568] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23152'. [ 3032.235501][ T5571] netlink: 'syz.0.23154': attribute type 25 has an invalid length. [ 3032.268946][ T5571] netlink: 'syz.0.23154': attribute type 29 has an invalid length. [ 3032.308974][ T5575] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23154'. [ 3032.364524][ T5574] netlink: 175 bytes leftover after parsing attributes in process `syz.3.23155'. [ 3032.483874][ T5580] netlink: 'syz.2.23158': attribute type 10 has an invalid length. [ 3032.805973][T30965] Bluetooth: hci3: command 0x0406 tx timeout [ 3032.816499][T30965] Bluetooth: hci1: command 0x0406 tx timeout [ 3032.832917][T30965] Bluetooth: hci2: command 0x0406 tx timeout [ 3033.098390][ T5600] netlink: 'syz.3.23161': attribute type 10 has an invalid length. [ 3033.127066][ T5596] netlink: 'syz.3.23161': attribute type 10 has an invalid length. [ 3033.135505][ T5596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23161'. [ 3034.076597][ T5635] device team0 entered promiscuous mode [ 3034.082446][ T5635] device team_slave_0 entered promiscuous mode [ 3034.123676][ T5635] device team_slave_1 entered promiscuous mode [ 3034.133498][ T5635] device virt_wifi0 entered promiscuous mode [ 3034.213072][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 3034.334990][ T5635] bond0: (slave team0): Releasing backup interface [ 3034.370692][ T5635] bridge0: port 3(team0) entered blocking state [ 3034.378250][ T5635] bridge0: port 3(team0) entered disabled state [ 3035.252675][ T5668] __nla_validate_parse: 10 callbacks suppressed [ 3035.252713][ T5668] netlink: 175 bytes leftover after parsing attributes in process `syz.3.23187'. [ 3035.378402][ T5680] mac80211_hwsim hwsim339 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3035.452312][ T5682] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23192'. [ 3035.553347][ T5684] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23193'. [ 3035.923078][ T5697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23198'. [ 3036.363390][ T5716] device team0 left promiscuous mode [ 3036.446649][ T5716] device team_slave_0 left promiscuous mode [ 3036.469936][ T5716] device team_slave_1 left promiscuous mode [ 3036.484466][ T5716] device virt_wifi0 left promiscuous mode [ 3036.492107][ T5716] bridge0: port 3(team0) entered disabled state [ 3036.559600][ T5716] 8021q: adding VLAN 0 to HW filter on device team0 [ 3036.568327][ T5716] bond0: (slave team0): Enslaving as an active interface with an up link [ 3036.621354][ T5719] validate_nla: 15 callbacks suppressed [ 3036.621408][ T5719] netlink: 'syz.0.23206': attribute type 10 has an invalid length. [ 3037.301889][ T5737] netlink: 'syz.5.23211': attribute type 10 has an invalid length. [ 3037.373900][ T5744] netlink: 'syz.5.23211': attribute type 10 has an invalid length. [ 3037.385910][ T5744] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23211'. [ 3037.717726][ T5750] netlink: 132 bytes leftover after parsing attributes in process `syz.3.23217'. [ 3037.772918][ T5754] netlink: 'syz.2.23219': attribute type 25 has an invalid length. [ 3037.799112][ T5760] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.23217'. [ 3037.806661][ T5754] netlink: 'syz.2.23219': attribute type 29 has an invalid length. [ 3037.839086][ T5754] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23219'. [ 3037.885506][ T5750] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.23217'. [ 3037.900631][ T5759] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3038.358178][ T5780] netlink: 'syz.2.23226': attribute type 10 has an invalid length. [ 3038.415066][ T5780] netlink: 'syz.2.23226': attribute type 10 has an invalid length. [ 3038.430518][ T5780] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23226'. [ 3038.450399][ T5780] device team0 entered promiscuous mode [ 3038.457040][ T5780] device team_slave_0 entered promiscuous mode [ 3038.474940][ T5780] device team_slave_1 entered promiscuous mode [ 3038.492714][ T5780] device virt_wifi0 entered promiscuous mode [ 3038.540150][ T5780] 8021q: adding VLAN 0 to HW filter on device team0 [ 3038.588378][ T5780] bond0: (slave team0): Releasing backup interface [ 3038.629787][ T5780] bridge0: port 3(team0) entered blocking state [ 3038.648486][ T5780] bridge0: port 3(team0) entered disabled state [ 3038.827011][ T5788] netlink: 'syz.0.23228': attribute type 10 has an invalid length. [ 3038.872715][ T5788] netlink: 'syz.0.23228': attribute type 10 has an invalid length. [ 3039.151700][ T5799] netlink: 'syz.0.23236': attribute type 25 has an invalid length. [ 3040.035534][ T5839] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3040.369791][ T5849] __nla_validate_parse: 10 callbacks suppressed [ 3040.369827][ T5849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.23254'. [ 3040.465476][ T5849] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.23254'. [ 3040.781617][ T5868] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23259'. [ 3040.797063][ T5871] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23262'. [ 3040.819193][ T5867] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23261'. [ 3040.907471][ T5873] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23263'. [ 3041.001449][ T5875] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3041.060894][ T5877] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23265'. [ 3041.336427][ T5890] netlink: 132 bytes leftover after parsing attributes in process `syz.4.23271'. [ 3041.381980][ T5890] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.23271'. [ 3041.396968][ T5891] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23270'. [ 3041.786328][ T5907] validate_nla: 25 callbacks suppressed [ 3041.786371][ T5907] netlink: 'syz.3.23277': attribute type 25 has an invalid length. [ 3041.840654][ T5907] netlink: 'syz.3.23277': attribute type 29 has an invalid length. [ 3041.994335][ T5916] netlink: 'syz.5.23278': attribute type 10 has an invalid length. [ 3042.181387][ T5913] netlink: 'syz.5.23278': attribute type 10 has an invalid length. [ 3042.259973][ T5923] netlink: 'syz.5.23281': attribute type 10 has an invalid length. [ 3042.270073][ T5923] netlink: 'syz.5.23281': attribute type 10 has an invalid length. [ 3042.358618][ T5925] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3042.480773][ T5929] netlink: 'syz.4.23283': attribute type 10 has an invalid length. [ 3042.790029][ T5942] netlink: 'syz.5.23288': attribute type 10 has an invalid length. [ 3042.822061][ T5942] netlink: 'syz.5.23288': attribute type 10 has an invalid length. [ 3042.943799][ T5946] mac80211_hwsim hwsim341 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3043.184114][ T5951] netlink: 'syz.4.23293': attribute type 10 has an invalid length. [ 3043.483314][ T5963] mac80211_hwsim hwsim341 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3043.840580][T27407] wlan1: Trigger new scan to find an IBSS to join [ 3044.455680][ T5993] device team0 left promiscuous mode [ 3044.491371][ T5993] device team_slave_0 left promiscuous mode [ 3044.501973][ T5993] device team_slave_1 left promiscuous mode [ 3044.510686][ T5993] device virt_wifi0 left promiscuous mode [ 3044.520218][ T5993] bridge0: port 3(team0) entered disabled state [ 3044.578231][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 3044.620724][ T5993] bond0: (slave team0): Enslaving as an active interface with an up link [ 3044.633079][ T5994] device team0 entered promiscuous mode [ 3044.641169][ T5994] device team_slave_0 entered promiscuous mode [ 3044.647719][ T5994] device team_slave_1 entered promiscuous mode [ 3044.654259][ T5994] device virt_wifi0 entered promiscuous mode [ 3044.661929][ T5994] bond0: (slave team0): Releasing backup interface [ 3044.684841][ T5994] bridge0: port 3(team0) entered blocking state [ 3044.693055][ T5994] bridge0: port 3(team0) entered disabled state [ 3045.613062][ T6038] device team0 left promiscuous mode [ 3045.618675][ T6038] device team_slave_0 left promiscuous mode [ 3045.624921][ T6038] device team_slave_1 left promiscuous mode [ 3045.631180][ T6038] device virt_wifi0 left promiscuous mode [ 3045.638119][ T6038] bridge0: port 3(team0) entered disabled state [ 3045.648981][ T6038] 8021q: adding VLAN 0 to HW filter on device team0 [ 3045.658002][ T6038] bond0: (slave team0): Enslaving as an active interface with an up link [ 3045.842133][ T6044] __nla_validate_parse: 21 callbacks suppressed [ 3045.842172][ T6044] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23324'. [ 3045.874852][ T6050] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23326'. [ 3045.886910][ T6049] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23327'. [ 3046.452020][ T6068] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.23331'. [ 3046.570725][ T6073] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.23331'. [ 3046.684267][ T6075] netlink: 144 bytes leftover after parsing attributes in process `syz.4.23344'. [ 3046.878138][T27407] wlan1: Trigger new scan to find an IBSS to join [ 3046.965214][ T6085] validate_nla: 18 callbacks suppressed [ 3046.965256][ T6085] netlink: 'syz.0.23335': attribute type 25 has an invalid length. [ 3047.050114][ T6085] netlink: 'syz.0.23335': attribute type 29 has an invalid length. [ 3047.076314][ T6088] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23335'. [ 3047.292606][ T6095] netlink: 'syz.4.23339': attribute type 25 has an invalid length. [ 3047.305230][ T6095] netlink: 'syz.4.23339': attribute type 29 has an invalid length. [ 3047.331401][ T6095] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23339'. [ 3047.346033][ T6097] netlink: 'syz.0.23338': attribute type 25 has an invalid length. [ 3047.365276][ T6097] netlink: 'syz.0.23338': attribute type 29 has an invalid length. [ 3047.389877][ T6099] netlink: 'syz.5.23340': attribute type 25 has an invalid length. [ 3047.406301][ T6099] netlink: 'syz.5.23340': attribute type 29 has an invalid length. [ 3047.450192][ T6097] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23338'. [ 3047.463904][ T6103] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23340'. [ 3047.749603][ T6117] netlink: 'syz.5.23349': attribute type 10 has an invalid length. [ 3047.966277][T31652] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 3048.047150][ T6125] netlink: 'syz.4.23351': attribute type 25 has an invalid length. [ 3050.026077][ T6195] device team0 entered promiscuous mode [ 3050.033313][ T6195] device team_slave_0 entered promiscuous mode [ 3050.052250][ T6195] device team_slave_1 entered promiscuous mode [ 3050.059400][ T6195] device virt_wifi0 entered promiscuous mode [ 3050.075582][ T6195] 8021q: adding VLAN 0 to HW filter on device team0 [ 3050.090911][ T6195] bond0: (slave team0): Releasing backup interface [ 3050.111793][ T6195] bridge0: port 3(team0) entered blocking state [ 3050.119081][ T6195] bridge0: port 3(team0) entered disabled state [ 3050.492921][ T6221] bridge0: port 3(team0) entered blocking state [ 3050.499529][ T6221] bridge0: port 3(team0) entered forwarding state [ 3050.574345][ T6221] 8021q: adding VLAN 0 to HW filter on device team0 [ 3051.367779][ T6241] __nla_validate_parse: 20 callbacks suppressed [ 3051.367796][ T6241] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23386'. [ 3051.590667][ T6249] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23389'. [ 3052.014698][ T6263] validate_nla: 25 callbacks suppressed [ 3052.014739][ T6263] netlink: 'syz.3.23396': attribute type 25 has an invalid length. [ 3052.128769][ T6263] netlink: 'syz.3.23396': attribute type 29 has an invalid length. [ 3052.165364][ T6270] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23396'. [ 3052.325458][ T6276] netlink: 175 bytes leftover after parsing attributes in process `syz.5.23397'. [ 3052.467050][ T6279] netlink: 'syz.3.23399': attribute type 10 has an invalid length. [ 3052.507169][ T6280] netlink: 'syz.2.23400': attribute type 10 has an invalid length. [ 3052.571815][ T6280] bridge0: port 3(team0) entered disabled state [ 3052.604777][ T6280] device team0 left promiscuous mode [ 3052.611497][ T6280] device team_slave_0 left promiscuous mode [ 3052.621569][ T6280] device team_slave_1 left promiscuous mode [ 3052.634746][ T6280] device virt_wifi0 left promiscuous mode [ 3052.650826][ T6280] bridge0: port 3(team0) entered disabled state [ 3052.674970][ T6280] 8021q: adding VLAN 0 to HW filter on device team0 [ 3052.701285][ T6280] bond0: (slave team0): Enslaving as an active interface with an up link [ 3052.716663][ T6279] netlink: 'syz.3.23399': attribute type 10 has an invalid length. [ 3052.725473][ T6279] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23399'. [ 3052.746561][ T6286] netlink: 'syz.2.23400': attribute type 10 has an invalid length. [ 3052.755886][ T6286] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23400'. [ 3052.767456][ T6286] device team0 entered promiscuous mode [ 3052.773275][ T6286] device team_slave_0 entered promiscuous mode [ 3052.779923][ T6286] device team_slave_1 entered promiscuous mode [ 3052.788529][ T6286] device virt_wifi0 entered promiscuous mode [ 3052.797923][ T6286] bond0: (slave team0): Releasing backup interface [ 3052.833474][ T6286] bridge0: port 3(team0) entered blocking state [ 3052.845910][ T6286] bridge0: port 3(team0) entered disabled state [ 3053.088358][ T6293] netlink: 'syz.2.23404': attribute type 10 has an invalid length. [ 3053.129727][ T6293] device team0 left promiscuous mode [ 3053.136277][ T6293] device team_slave_0 left promiscuous mode [ 3053.150995][ T6293] device team_slave_1 left promiscuous mode [ 3053.179010][ T6293] device virt_wifi0 left promiscuous mode [ 3053.211811][ T6293] bridge0: port 3(team0) entered disabled state [ 3053.270413][ T6293] 8021q: adding VLAN 0 to HW filter on device team0 [ 3053.290555][ T6293] bond0: (slave team0): Enslaving as an active interface with an up link [ 3053.325917][ T6294] netlink: 'syz.2.23404': attribute type 10 has an invalid length. [ 3053.366433][ T6294] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23404'. [ 3053.401550][ T6294] device team0 entered promiscuous mode [ 3053.454829][ T6294] device team_slave_0 entered promiscuous mode [ 3053.464716][ T6294] device team_slave_1 entered promiscuous mode [ 3053.471650][ T6294] device virt_wifi0 entered promiscuous mode [ 3053.483370][ T6294] bond0: (slave team0): Releasing backup interface [ 3053.504507][ T6294] bridge0: port 3(team0) entered blocking state [ 3053.511257][ T6294] bridge0: port 3(team0) entered disabled state [ 3053.525058][ T6298] netlink: 'syz.0.23415': attribute type 10 has an invalid length. [ 3053.546223][ T6298] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23415'. [ 3053.562738][ T6302] netlink: 'syz.4.23406': attribute type 10 has an invalid length. [ 3053.599814][ T6307] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23406'. [ 3053.900200][ T6319] netlink: 175 bytes leftover after parsing attributes in process `syz.5.23412'. [ 3055.364522][ T6371] device team0 left promiscuous mode [ 3055.372953][ T6371] device team_slave_0 left promiscuous mode [ 3055.387975][ T6371] device team_slave_1 left promiscuous mode [ 3055.396608][ T6371] device virt_wifi0 left promiscuous mode [ 3055.407837][ T6371] bridge0: port 3(team0) entered disabled state [ 3055.621397][ T6371] 8021q: adding VLAN 0 to HW filter on device team0 [ 3055.693436][ T6371] bond0: (slave team0): Enslaving as an active interface with an up link [ 3055.720742][ T6377] device team0 entered promiscuous mode [ 3055.736004][ T6377] device team_slave_0 entered promiscuous mode [ 3055.742536][ T6377] device team_slave_1 entered promiscuous mode [ 3055.749224][ T6377] device virt_wifi0 entered promiscuous mode [ 3055.757932][ T6377] bond0: (slave team0): Releasing backup interface [ 3055.781239][ T6377] bridge0: port 3(team0) entered blocking state [ 3055.788023][ T6377] bridge0: port 3(team0) entered disabled state [ 3056.585549][ T6402] __nla_validate_parse: 7 callbacks suppressed [ 3056.585609][ T6402] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23447'. [ 3056.788251][ T6411] device team0 left promiscuous mode [ 3056.825944][ T6411] device team_slave_0 left promiscuous mode [ 3056.840751][ T6411] device team_slave_1 left promiscuous mode [ 3056.875575][ T6411] device virt_wifi0 left promiscuous mode [ 3056.924253][ T6411] bridge0: port 3(team0) entered disabled state [ 3057.053298][ T6411] 8021q: adding VLAN 0 to HW filter on device team0 [ 3057.121550][ T6411] bond0: (slave team0): Enslaving as an active interface with an up link [ 3057.131770][ T6417] validate_nla: 25 callbacks suppressed [ 3057.131785][ T6417] netlink: 'syz.2.23450': attribute type 10 has an invalid length. [ 3057.148653][ T6417] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23450'. [ 3057.166913][ T6417] device team0 entered promiscuous mode [ 3057.200531][ T6417] device team_slave_0 entered promiscuous mode [ 3057.211315][ T6417] device team_slave_1 entered promiscuous mode [ 3057.219242][ T6417] device virt_wifi0 entered promiscuous mode [ 3057.226607][ T6417] bond0: (slave team0): Releasing backup interface [ 3057.244892][ T6417] bridge0: port 3(team0) entered blocking state [ 3057.251552][ T6417] bridge0: port 3(team0) entered disabled state [ 3057.320061][ T6423] netlink: 'syz.3.23454': attribute type 25 has an invalid length. [ 3057.336084][ T6423] netlink: 'syz.3.23454': attribute type 29 has an invalid length. [ 3057.346383][ T6425] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23454'. [ 3057.356709][ T6428] netlink: 'syz.5.23455': attribute type 25 has an invalid length. [ 3057.420888][ T6428] netlink: 'syz.5.23455': attribute type 29 has an invalid length. [ 3057.526453][ T6429] netlink: 'syz.0.23456': attribute type 10 has an invalid length. [ 3057.555059][ T6431] netlink: 'syz.0.23456': attribute type 10 has an invalid length. [ 3057.572350][ T6431] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23456'. [ 3057.861023][ T6448] netlink: 'syz.4.23461': attribute type 25 has an invalid length. [ 3057.922161][ T6448] netlink: 'syz.4.23461': attribute type 29 has an invalid length. [ 3057.937395][ T6447] netlink: 'syz.3.23472': attribute type 10 has an invalid length. [ 3057.970833][ T6453] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23472'. [ 3058.014525][ T6451] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23464'. [ 3058.208099][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23465'. [ 3058.409018][ T6462] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23469'. [ 3058.459233][ T6468] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23470'. [ 3058.557837][ T6470] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23474'. [ 3059.315781][ T6490] mac80211_hwsim hwsim341 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3060.187117][ T6525] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3060.519266][ T6536] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3060.543765][ T6539] device team0 left promiscuous mode [ 3060.581733][ T6539] device team_slave_0 left promiscuous mode [ 3060.648613][ T6539] device team_slave_1 left promiscuous mode [ 3060.684743][ T6539] device virt_wifi0 left promiscuous mode [ 3060.711570][ T6539] bridge0: port 3(team0) entered disabled state [ 3060.761855][ T6539] 8021q: adding VLAN 0 to HW filter on device team0 [ 3060.780939][ T6539] bond0: (slave team0): Enslaving as an active interface with an up link [ 3060.802035][ T6541] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3060.817087][ T6543] device team0 entered promiscuous mode [ 3060.834269][ T6543] device team_slave_0 entered promiscuous mode [ 3060.842691][ T6543] device team_slave_1 entered promiscuous mode [ 3060.852624][ T6543] device virt_wifi0 entered promiscuous mode [ 3060.863046][ T6543] bond0: (slave team0): Releasing backup interface [ 3060.890239][ T6543] bridge0: port 3(team0) entered blocking state [ 3060.896762][ T6543] bridge0: port 3(team0) entered disabled state [ 3061.684304][ T6574] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3061.837744][ T6581] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3061.923757][ T6582] mac80211_hwsim hwsim339 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3061.946922][ T6584] __nla_validate_parse: 16 callbacks suppressed [ 3061.946944][ T6584] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23519'. [ 3062.037229][ T6588] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23520'. [ 3062.180559][ T6593] validate_nla: 31 callbacks suppressed [ 3062.180595][ T6593] netlink: 'syz.5.23522': attribute type 10 has an invalid length. [ 3062.216473][ T6593] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23522'. [ 3062.272961][ T6601] netlink: 144 bytes leftover after parsing attributes in process `syz.4.23524'. [ 3062.538322][ T6610] netlink: 'syz.5.23528': attribute type 10 has an invalid length. [ 3062.564718][ T6610] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23528'. [ 3062.583113][ T6609] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23529'. [ 3062.855147][ T6621] netlink: 144 bytes leftover after parsing attributes in process `syz.0.23540'. [ 3062.878306][T31652] wlan1: Trigger new scan to find an IBSS to join [ 3062.955160][ T6625] netlink: 'syz.2.23532': attribute type 10 has an invalid length. [ 3063.009108][ T6616] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3063.038941][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23532'. [ 3063.125857][ T6625] bridge0: port 3(team0) entered blocking state [ 3063.132249][ T6625] bridge0: port 3(team0) entered forwarding state [ 3063.186275][ T6625] 8021q: adding VLAN 0 to HW filter on device team0 [ 3063.620107][ T6637] netlink: 'syz.2.23536': attribute type 10 has an invalid length. [ 3063.969485][ T6637] bridge0: port 3(team0) entered disabled state [ 3064.100186][ T6637] device team0 left promiscuous mode [ 3064.121622][ T6637] device team_slave_0 left promiscuous mode [ 3064.212855][ T6637] device team_slave_1 left promiscuous mode [ 3064.226841][ T6637] device virt_wifi0 left promiscuous mode [ 3064.233802][ T6637] bridge0: port 3(team0) entered disabled state [ 3064.245464][ T6637] 8021q: adding VLAN 0 to HW filter on device team0 [ 3064.254279][ T6637] bond0: (slave team0): Enslaving as an active interface with an up link [ 3064.263440][ T6652] netlink: 'syz.2.23536': attribute type 10 has an invalid length. [ 3064.291392][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23536'. [ 3064.328067][ T6652] device team0 entered promiscuous mode [ 3064.342713][ T6652] device team_slave_0 entered promiscuous mode [ 3064.357831][ T6652] device team_slave_1 entered promiscuous mode [ 3064.380608][ T6652] device virt_wifi0 entered promiscuous mode [ 3064.391170][ T6652] bond0: (slave team0): Releasing backup interface [ 3064.412393][ T6652] bridge0: port 3(team0) entered blocking state [ 3064.421917][ T6652] bridge0: port 3(team0) entered disabled state [ 3064.433890][ T6659] netlink: 'syz.4.23543': attribute type 10 has an invalid length. [ 3064.444549][ T6659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23543'. [ 3064.465109][ T6664] netlink: 'syz.3.23545': attribute type 25 has an invalid length. [ 3064.484308][ T6664] netlink: 'syz.3.23545': attribute type 29 has an invalid length. [ 3064.615188][ T6668] netlink: 'syz.2.23546': attribute type 10 has an invalid length. [ 3064.780798][ T6668] bridge0: port 3(team0) entered blocking state [ 3064.788170][ T6668] bridge0: port 3(team0) entered forwarding state [ 3064.801637][ T6668] 8021q: adding VLAN 0 to HW filter on device team0 [ 3064.896527][ T6671] netlink: 'syz.0.23548': attribute type 10 has an invalid length. [ 3066.135653][ T6718] bridge0: port 3(team0) entered disabled state [ 3066.157183][ T6718] device team0 left promiscuous mode [ 3066.162541][ T6718] device team_slave_0 left promiscuous mode [ 3066.181353][ T6718] device team_slave_1 left promiscuous mode [ 3066.198787][ T6718] device virt_wifi0 left promiscuous mode [ 3066.205394][ T6718] bridge0: port 3(team0) entered disabled state [ 3066.225535][ T6718] 8021q: adding VLAN 0 to HW filter on device team0 [ 3066.242562][ T6718] bond0: (slave team0): Enslaving as an active interface with an up link [ 3066.301637][ T6716] device team0 entered promiscuous mode [ 3066.323773][ T6716] device team_slave_0 entered promiscuous mode [ 3066.343852][ T6716] device team_slave_1 entered promiscuous mode [ 3066.363097][ T6716] device virt_wifi0 entered promiscuous mode [ 3066.424708][ T6716] bond0: (slave team0): Releasing backup interface [ 3066.478484][ T6716] bridge0: port 3(team0) entered blocking state [ 3066.484951][ T6716] bridge0: port 3(team0) entered disabled state [ 3067.079233][ T6744] __nla_validate_parse: 8 callbacks suppressed [ 3067.079255][ T6744] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23574'. [ 3067.322776][ T6750] validate_nla: 12 callbacks suppressed [ 3067.322796][ T6750] netlink: 'syz.0.23575': attribute type 10 has an invalid length. [ 3067.458063][ T6747] netlink: 'syz.0.23575': attribute type 10 has an invalid length. [ 3067.490333][ T6747] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23575'. [ 3067.512785][ T6754] netlink: 'syz.2.23587': attribute type 25 has an invalid length. [ 3067.541500][ T6754] netlink: 'syz.2.23587': attribute type 29 has an invalid length. [ 3067.563356][ T6758] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23587'. [ 3067.876929][T22894] wlan1: Trigger new scan to find an IBSS to join [ 3067.894477][ T6770] netlink: 'syz.2.23581': attribute type 25 has an invalid length. [ 3067.909863][ T6770] netlink: 'syz.2.23581': attribute type 29 has an invalid length. [ 3067.919334][ T6767] netlink: 'syz.4.23582': attribute type 10 has an invalid length. [ 3067.972509][ T6767] netlink: 'syz.4.23582': attribute type 10 has an invalid length. [ 3067.981264][ T6767] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23582'. [ 3068.054531][ T6776] netlink: 'syz.5.23583': attribute type 25 has an invalid length. [ 3068.066827][ T6776] netlink: 'syz.5.23583': attribute type 29 has an invalid length. [ 3068.316967][ T6790] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23588'. [ 3068.661186][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23591'. [ 3068.730366][ T6799] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3068.761147][ T6801] device team0 left promiscuous mode [ 3068.775185][ T6801] device team_slave_0 left promiscuous mode [ 3068.807886][ T6801] device team_slave_1 left promiscuous mode [ 3068.828583][ T6801] device virt_wifi0 left promiscuous mode [ 3068.888891][ T6801] bridge0: port 3(team0) entered disabled state [ 3068.918271][T16302] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 3069.015358][ T6801] 8021q: adding VLAN 0 to HW filter on device team0 [ 3069.051919][ T6801] bond0: (slave team0): Enslaving as an active interface with an up link [ 3069.061998][ T6804] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23594'. [ 3069.073021][ T6804] device team0 entered promiscuous mode [ 3069.078689][ T6804] device team_slave_0 entered promiscuous mode [ 3069.085127][ T6804] device team_slave_1 entered promiscuous mode [ 3069.093952][ T6804] device virt_wifi0 entered promiscuous mode [ 3069.114440][ T6804] bond0: (slave team0): Releasing backup interface [ 3069.145321][ T6804] bridge0: port 3(team0) entered blocking state [ 3069.163642][ T6804] bridge0: port 3(team0) entered disabled state [ 3069.319970][ T6816] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23609'. [ 3069.837149][ T6837] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3069.866528][ T6840] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23608'. [ 3070.264225][ T6844] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3070.304424][ T6855] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23613'. [ 3070.588411][ T6866] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3070.907035][ T6872] device team0 left promiscuous mode [ 3070.925138][ T6872] device team_slave_0 left promiscuous mode [ 3070.955467][ T6872] device team_slave_1 left promiscuous mode [ 3070.964604][ T6872] device virt_wifi0 left promiscuous mode [ 3070.993112][ T6872] bridge0: port 3(team0) entered disabled state [ 3071.131854][ T6872] 8021q: adding VLAN 0 to HW filter on device team0 [ 3071.244838][ T6872] bond0: (slave team0): Enslaving as an active interface with an up link [ 3071.262741][ T6878] device team0 entered promiscuous mode [ 3071.270532][ T6878] device team_slave_0 entered promiscuous mode [ 3071.279806][ T6885] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3071.292191][ T6878] device team_slave_1 entered promiscuous mode [ 3071.312321][ T6878] device virt_wifi0 entered promiscuous mode [ 3071.328410][ T6878] bond0: (slave team0): Releasing backup interface [ 3071.348668][ T6878] bridge0: port 3(team0) entered blocking state [ 3071.366126][ T6878] bridge0: port 3(team0) entered disabled state [ 3071.875241][ T6894] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3072.231376][ T6922] __nla_validate_parse: 8 callbacks suppressed [ 3072.231395][ T6922] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23635'. [ 3072.330234][ T6924] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23638'. [ 3072.602633][ T6932] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3072.622886][ T6939] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23644'. [ 3072.651041][ T6938] validate_nla: 34 callbacks suppressed [ 3072.651083][ T6938] netlink: 'syz.2.23643': attribute type 25 has an invalid length. [ 3072.710215][ T6938] netlink: 'syz.2.23643': attribute type 29 has an invalid length. [ 3072.745852][ T6941] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23643'. [ 3072.876431][T22894] wlan1: Trigger new scan to find an IBSS to join [ 3072.956550][ T6948] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3073.661370][ T6969] netlink: 'syz.4.23654': attribute type 10 has an invalid length. [ 3073.740364][ T6969] netlink: 'syz.4.23654': attribute type 10 has an invalid length. [ 3073.765262][ T6969] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23654'. [ 3073.797272][ T6975] netlink: 'syz.2.23657': attribute type 10 has an invalid length. [ 3073.850104][ T6975] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23657'. [ 3073.861889][ T6975] bridge0: port 3(team0) entered blocking state [ 3073.868309][ T6975] bridge0: port 3(team0) entered forwarding state [ 3073.882060][ T6973] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3073.896062][ T6975] 8021q: adding VLAN 0 to HW filter on device team0 [ 3073.936833][ T6976] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3073.985300][ T6978] netlink: 'syz.4.23659': attribute type 10 has an invalid length. [ 3074.053107][ T6978] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23659'. [ 3074.118310][ T6982] netlink: 'syz.5.23660': attribute type 25 has an invalid length. [ 3074.174206][ T6982] netlink: 'syz.5.23660': attribute type 29 has an invalid length. [ 3074.224577][ T6987] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23660'. [ 3074.281197][ T6986] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3074.711467][ T7001] netlink: 'syz.3.23669': attribute type 25 has an invalid length. [ 3074.730905][ T7006] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3074.767003][ T7001] netlink: 'syz.3.23669': attribute type 29 has an invalid length. [ 3074.787538][ T7007] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23669'. [ 3074.874080][ T7005] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3074.901510][ T7009] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23671'. [ 3075.162053][ T7012] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3075.707953][ T7039] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3076.651344][ T7077] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3076.664137][ T7076] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3077.641458][ T7108] __nla_validate_parse: 5 callbacks suppressed [ 3077.641493][ T7108] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23708'. [ 3077.716462][ T7110] validate_nla: 12 callbacks suppressed [ 3077.716502][ T7110] netlink: 'syz.0.23710': attribute type 25 has an invalid length. [ 3077.744252][ T7110] netlink: 'syz.0.23710': attribute type 29 has an invalid length. [ 3077.838535][T22894] wlan1: Trigger new scan to find an IBSS to join [ 3077.897832][ T7116] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3077.920990][ T7117] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23710'. [ 3077.934009][ T7119] netlink: 'syz.4.23713': attribute type 10 has an invalid length. [ 3077.945899][ T7119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23713'. [ 3077.967955][ T7115] netlink: 'syz.4.23713': attribute type 10 has an invalid length. [ 3078.177860][ T7125] netlink: 'syz.0.23715': attribute type 25 has an invalid length. [ 3078.274520][ T7125] netlink: 'syz.0.23715': attribute type 29 has an invalid length. [ 3078.355836][ T7135] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23715'. [ 3078.394667][ T7128] netlink: 'syz.5.23716': attribute type 10 has an invalid length. [ 3078.451344][ T7128] netlink: 'syz.5.23716': attribute type 10 has an invalid length. [ 3078.491853][ T7128] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23716'. [ 3078.802809][ T7145] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3078.919024][ T7154] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3079.002662][ T7159] netlink: 'syz.3.23726': attribute type 25 has an invalid length. [ 3079.015240][ T7159] netlink: 'syz.3.23726': attribute type 29 has an invalid length. [ 3079.052214][ T7159] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23726'. [ 3079.234087][ T7163] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3079.689246][ T7186] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3080.007352][ T7195] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3080.440270][ T7213] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23744'. [ 3081.061996][ T7228] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3081.337545][ T7235] mac80211_hwsim hwsim341 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3081.484821][ T7242] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3081.826827][ T7255] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23760'. [ 3081.972268][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.978686][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 3082.263678][ T7266] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23763'. [ 3082.517930][ T7284] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23767'. [ 3082.735631][ T7286] validate_nla: 8 callbacks suppressed [ 3082.735649][ T7286] netlink: 'syz.4.23769': attribute type 10 has an invalid length. [ 3082.757931][ T7286] netlink: 'syz.4.23769': attribute type 10 has an invalid length. [ 3082.766324][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23769'. [ 3082.845227][ T7293] netlink: 'syz.2.23772': attribute type 25 has an invalid length. [ 3082.893837][T16302] wlan1: Trigger new scan to find an IBSS to join [ 3082.901739][ T7293] netlink: 'syz.2.23772': attribute type 29 has an invalid length. [ 3082.979958][ T7291] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3083.818551][ T7328] netlink: 'syz.3.23786': attribute type 10 has an invalid length. [ 3083.832758][ T7328] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23786'. [ 3083.845287][ T7329] netlink: 'syz.5.23785': attribute type 25 has an invalid length. [ 3083.855017][ T7329] netlink: 'syz.5.23785': attribute type 29 has an invalid length. [ 3083.867079][ T6809] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 3083.905108][ T7331] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23785'. [ 3084.175574][ T7344] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3084.879652][ T7366] netlink: 'syz.2.23800': attribute type 10 has an invalid length. [ 3085.066702][ T7366] bridge0: port 3(team0) entered disabled state [ 3085.105185][ T7366] device team0 left promiscuous mode [ 3085.114737][ T7366] device team_slave_0 left promiscuous mode [ 3085.132054][ T7366] device team_slave_1 left promiscuous mode [ 3085.144292][ T7366] device virt_wifi0 left promiscuous mode [ 3085.156880][ T7366] bridge0: port 3(team0) entered disabled state [ 3085.295659][ T7366] 8021q: adding VLAN 0 to HW filter on device team0 [ 3085.348830][ T7366] bond0: (slave team0): Enslaving as an active interface with an up link [ 3085.370750][ T7373] netlink: 'syz.2.23800': attribute type 10 has an invalid length. [ 3085.395371][ T7373] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23800'. [ 3085.414695][ T7373] device team0 entered promiscuous mode [ 3085.443717][ T7373] device team_slave_0 entered promiscuous mode [ 3085.463611][ T7373] device team_slave_1 entered promiscuous mode [ 3085.476135][ T7373] device virt_wifi0 entered promiscuous mode [ 3085.487128][ T7373] bond0: (slave team0): Releasing backup interface [ 3085.505586][ T7373] bridge0: port 3(team0) entered blocking state [ 3085.512257][ T7373] bridge0: port 3(team0) entered disabled state [ 3085.754205][ T7388] netlink: 'syz.3.23807': attribute type 10 has an invalid length. [ 3085.785120][ T7388] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23807'. [ 3085.969787][ T7400] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23813'. [ 3086.018816][ T7405] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23814'. [ 3086.604927][ T7425] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23824'. [ 3087.044532][ T7439] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23828'. [ 3087.389852][ T7449] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3087.853930][ T7467] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23839'. [ 3087.866330][ T7472] validate_nla: 11 callbacks suppressed [ 3087.866368][ T7472] netlink: 'syz.2.23842': attribute type 25 has an invalid length. [ 3087.898000][ T7472] netlink: 'syz.2.23842': attribute type 29 has an invalid length. [ 3087.930048][ T7474] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23842'. [ 3088.009195][ T7476] netlink: 'syz.5.23843': attribute type 25 has an invalid length. [ 3088.033040][ T7476] netlink: 'syz.5.23843': attribute type 29 has an invalid length. [ 3088.057203][ T7478] netlink: 'syz.0.23844': attribute type 25 has an invalid length. [ 3088.075002][ T7478] netlink: 'syz.0.23844': attribute type 29 has an invalid length. [ 3088.094969][ T7481] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23843'. [ 3088.112666][ T7482] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23844'. [ 3088.373815][ T7485] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3088.463524][ T7492] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3088.512478][ T7496] netlink: 'syz.5.23850': attribute type 25 has an invalid length. [ 3088.528890][ T7496] netlink: 'syz.5.23850': attribute type 29 has an invalid length. [ 3088.712106][ T7503] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23853'. [ 3088.880730][ T7511] netlink: 'syz.5.23856': attribute type 25 has an invalid length. [ 3088.906075][ T7511] netlink: 'syz.5.23856': attribute type 29 has an invalid length. [ 3088.925180][ T7515] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23855'. [ 3088.944092][ T7518] netlink: 5 bytes leftover after parsing attributes in process `syz.5.23856'. [ 3089.098741][ T7524] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23858'. [ 3089.203008][ T7522] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23870'. [ 3089.298093][ T7523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23860'. [ 3089.544102][ T7533] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3090.867646][ T7594] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3092.066721][ T7635] mac80211_hwsim hwsim341 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3092.875937][ T9] wlan1: Trigger new scan to find an IBSS to join [ 3092.983628][ T7669] validate_nla: 36 callbacks suppressed [ 3092.983909][ T7669] netlink: 'syz.0.23931': attribute type 25 has an invalid length. [ 3093.041255][ T7669] netlink: 'syz.0.23931': attribute type 29 has an invalid length. [ 3093.111975][ T7669] __nla_validate_parse: 16 callbacks suppressed [ 3093.112015][ T7669] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23931'. [ 3093.237120][ T7674] netlink: 'syz.4.23922': attribute type 10 has an invalid length. [ 3093.276761][ T7680] netlink: 'syz.4.23922': attribute type 10 has an invalid length. [ 3093.295129][ T7680] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23922'. [ 3093.329834][ T7679] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3093.719113][ T7695] netlink: 'syz.0.23929': attribute type 25 has an invalid length. [ 3093.795376][ T7695] netlink: 'syz.0.23929': attribute type 29 has an invalid length. [ 3093.865799][ T7699] netlink: 5 bytes leftover after parsing attributes in process `syz.0.23929'. [ 3093.997977][ T7702] netlink: 'syz.3.23944': attribute type 25 has an invalid length. [ 3094.026575][ T7702] netlink: 'syz.3.23944': attribute type 29 has an invalid length. [ 3094.049432][ T7702] netlink: 5 bytes leftover after parsing attributes in process `syz.3.23944'. [ 3094.262340][ T7704] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3094.388260][ T7715] netlink: 'syz.3.23938': attribute type 10 has an invalid length. [ 3094.423829][ T7719] netlink: 'syz.2.23939': attribute type 25 has an invalid length. [ 3094.447253][ T7715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23938'. [ 3094.485981][ T7719] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23939'. [ 3094.503564][ T7718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23940'. [ 3094.746297][ T7724] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3094.777053][ T7727] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23945'. [ 3094.812565][ T7729] netlink: 40 bytes leftover after parsing attributes in process `syz.5.23946'. [ 3095.150365][ T7743] netlink: 5 bytes leftover after parsing attributes in process `syz.4.23951'. [ 3095.612948][ T7755] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3096.717484][ T7795] bridge0: port 3(team0) entered blocking state [ 3096.724658][ T7795] bridge0: port 3(team0) entered forwarding state [ 3096.738144][ T7795] 8021q: adding VLAN 0 to HW filter on device team0 [ 3097.836189][ T9] wlan1: Trigger new scan to find an IBSS to join [ 3098.064815][ T7840] bridge0: port 3(team0) entered disabled state [ 3098.103172][ T7840] device team0 left promiscuous mode [ 3098.116059][ T7840] device team_slave_0 left promiscuous mode [ 3098.135115][ T7840] device team_slave_1 left promiscuous mode [ 3098.171486][ T7840] device virt_wifi0 left promiscuous mode [ 3098.214136][ T7840] bridge0: port 3(team0) entered disabled state [ 3098.252076][ T7852] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3098.359643][ T7840] 8021q: adding VLAN 0 to HW filter on device team0 [ 3098.435094][ T7840] bond0: (slave team0): Enslaving as an active interface with an up link [ 3098.453364][ T7846] validate_nla: 32 callbacks suppressed [ 3098.453378][ T7846] netlink: 'syz.2.23990': attribute type 10 has an invalid length. [ 3098.470257][ T7846] __nla_validate_parse: 12 callbacks suppressed [ 3098.470275][ T7846] netlink: 40 bytes leftover after parsing attributes in process `syz.2.23990'. [ 3098.487166][ T7846] device team0 entered promiscuous mode [ 3098.492763][ T7846] device team_slave_0 entered promiscuous mode [ 3098.507396][ T7846] device team_slave_1 entered promiscuous mode [ 3098.513798][ T7846] device virt_wifi0 entered promiscuous mode [ 3098.521869][ T7846] bond0: (slave team0): Releasing backup interface [ 3098.547236][ T7846] bridge0: port 3(team0) entered blocking state [ 3098.553794][ T7846] bridge0: port 3(team0) entered disabled state [ 3098.563260][ T7857] netlink: 'syz.3.23995': attribute type 10 has an invalid length. [ 3098.581054][ T7857] netlink: 40 bytes leftover after parsing attributes in process `syz.3.23995'. [ 3098.593413][ T7856] netlink: 'syz.3.23995': attribute type 10 has an invalid length. [ 3098.873778][T27393] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00 [ 3099.174659][ T7864] netlink: 'syz.2.23998': attribute type 25 has an invalid length. [ 3099.184369][ T7864] netlink: 'syz.2.23998': attribute type 29 has an invalid length. [ 3099.197404][ T7872] netlink: 5 bytes leftover after parsing attributes in process `syz.2.23998'. [ 3099.766564][ T7901] netlink: 'syz.3.24009': attribute type 10 has an invalid length. [ 3099.858233][ T7893] netlink: 'syz.3.24009': attribute type 10 has an invalid length. [ 3099.901640][ T7893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24009'. [ 3100.072014][ T7907] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3101.085562][ T7935] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3101.212493][ T7943] netlink: 'syz.2.24024': attribute type 25 has an invalid length. [ 3101.245522][ T7943] netlink: 'syz.2.24024': attribute type 29 has an invalid length. [ 3101.294014][ T7950] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24024'. [ 3101.339928][ T7947] netlink: 'syz.4.24026': attribute type 10 has an invalid length. [ 3101.405574][ T7949] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3101.415494][ T7947] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24026'. [ 3101.776283][ T7967] device team0 left promiscuous mode [ 3101.807739][ T7967] device team_slave_0 left promiscuous mode [ 3101.814071][ T7967] device team_slave_1 left promiscuous mode [ 3101.875141][ T7967] device virt_wifi0 left promiscuous mode [ 3101.956650][ T7967] bridge0: port 3(team0) entered disabled state [ 3102.032601][ T7967] 8021q: adding VLAN 0 to HW filter on device team0 [ 3102.042323][ T7967] bond0: (slave team0): Enslaving as an active interface with an up link [ 3102.072771][ T7979] netlink: 5 bytes leftover after parsing attributes in process `syz.3.24035'. [ 3102.146832][ T7962] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24031'. [ 3102.179639][ T7962] device team0 entered promiscuous mode [ 3102.199060][ T7962] device team_slave_0 entered promiscuous mode [ 3102.214890][ T7962] device team_slave_1 entered promiscuous mode [ 3102.221784][ T7962] device virt_wifi0 entered promiscuous mode [ 3102.240934][ T7962] bond0: (slave team0): Releasing backup interface [ 3102.287114][ T7962] bridge0: port 3(team0) entered blocking state [ 3102.293814][ T7962] bridge0: port 3(team0) entered disabled state [ 3102.325465][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24034'. [ 3102.689001][ T7995] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24040'. [ 3102.746223][ T7993] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3103.409483][ T8015] device team0 left promiscuous mode [ 3103.421501][ T8015] device team_slave_0 left promiscuous mode [ 3103.461407][ T8015] device team_slave_1 left promiscuous mode [ 3103.498035][ T8015] device virt_wifi0 left promiscuous mode [ 3103.508156][ T8015] bridge0: port 3(team0) entered disabled state [ 3103.592062][ T8015] 8021q: adding VLAN 0 to HW filter on device team0 [ 3103.633981][ T8015] bond0: (slave team0): Enslaving as an active interface with an up link [ 3103.644369][ T8017] validate_nla: 12 callbacks suppressed [ 3103.644389][ T8017] netlink: 'syz.2.24049': attribute type 10 has an invalid length. [ 3103.659463][ T8017] __nla_validate_parse: 1 callbacks suppressed [ 3103.659481][ T8017] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24049'. [ 3103.675223][ T8017] device team0 entered promiscuous mode [ 3103.687020][ T8017] device team_slave_0 entered promiscuous mode [ 3103.693573][ T8017] device team_slave_1 entered promiscuous mode [ 3103.704509][ T8017] device virt_wifi0 entered promiscuous mode [ 3103.712385][ T8017] bond0: (slave team0): Releasing backup interface [ 3103.730825][ T8017] bridge0: port 3(team0) entered blocking state [ 3103.737574][ T8017] bridge0: port 3(team0) entered disabled state [ 3103.748091][ T8026] netlink: 'syz.5.24051': attribute type 10 has an invalid length. [ 3103.764510][ T8025] netlink: 'syz.5.24051': attribute type 10 has an invalid length. [ 3103.814365][ T8025] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24051'. [ 3103.894564][ T8031] netlink: 'syz.4.24054': attribute type 25 has an invalid length. [ 3103.915622][ T8031] netlink: 'syz.4.24054': attribute type 29 has an invalid length. [ 3104.043687][ T8036] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3104.098982][ T8031] netlink: 5 bytes leftover after parsing attributes in process `syz.4.24054'. [ 3104.147242][ T8039] netlink: 'syz.5.24057': attribute type 25 has an invalid length. [ 3104.155327][ T8039] netlink: 'syz.5.24057': attribute type 29 has an invalid length. [ 3104.173554][ T8039] netlink: 5 bytes leftover after parsing attributes in process `syz.5.24057'. [ 3104.483994][ T8050] netlink: 'syz.5.24060': attribute type 10 has an invalid length. [ 3104.599922][ T8049] netlink: 'syz.5.24060': attribute type 10 has an invalid length. [ 3104.635051][ T8049] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24060'. [ 3104.707342][ T8056] netlink: 'syz.0.24062': attribute type 10 has an invalid length. [ 3104.755658][ T8060] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24062'. [ 3104.925209][ T8064] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24065'. [ 3105.184002][ T8073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24067'. [ 3105.213258][ T8076] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24068'. [ 3105.296891][ T8078] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24069'. [ 3108.053311][ T8182] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3108.269718][ T8184] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3108.309954][ T8188] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3109.069323][ T8220] validate_nla: 37 callbacks suppressed [ 3109.069342][ T8220] netlink: 'syz.0.24117': attribute type 10 has an invalid length. [ 3109.085330][ T8220] netlink: 'syz.0.24117': attribute type 10 has an invalid length. [ 3109.096049][ T8220] __nla_validate_parse: 14 callbacks suppressed [ 3109.104449][ T8220] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24117'. [ 3109.284716][ T8224] netlink: 'syz.5.24120': attribute type 25 has an invalid length. [ 3109.303667][ T8224] netlink: 'syz.5.24120': attribute type 29 has an invalid length. [ 3109.322839][ T8224] netlink: 5 bytes leftover after parsing attributes in process `syz.5.24120'. [ 3109.985406][ T8251] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3110.213936][ T8254] netlink: 'syz.3.24130': attribute type 10 has an invalid length. [ 3110.252993][ T8257] netlink: 'syz.3.24130': attribute type 10 has an invalid length. [ 3110.270535][ T8257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24130'. [ 3110.360525][ T8264] netlink: 'syz.5.24132': attribute type 10 has an invalid length. [ 3110.390128][ T8264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24132'. [ 3110.529463][ T8274] netlink: 175 bytes leftover after parsing attributes in process `syz.5.24137'. [ 3110.560438][ T8271] mac80211_hwsim hwsim339 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3110.682549][ T8281] netlink: 175 bytes leftover after parsing attributes in process `syz.5.24149'. [ 3110.939337][ T8283] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3111.049690][ T8287] netlink: 'syz.4.24142': attribute type 25 has an invalid length. [ 3111.065944][ T8287] netlink: 'syz.4.24142': attribute type 29 has an invalid length. [ 3111.105558][ T8293] netlink: 5 bytes leftover after parsing attributes in process `syz.4.24142'. [ 3111.244751][ T8291] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3111.474973][ T8298] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3111.593359][ T8307] netlink: 'syz.3.24148': attribute type 10 has an invalid length. [ 3111.642015][ T8307] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24148'. [ 3111.697603][ T8304] device team0 left promiscuous mode [ 3111.703510][ T8304] device team_slave_0 left promiscuous mode [ 3111.759321][ T8310] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3111.771299][ T8304] device team_slave_1 left promiscuous mode [ 3111.802388][ T8304] device virt_wifi0 left promiscuous mode [ 3111.825787][ T8304] bridge0: port 3(team0) entered disabled state [ 3111.932700][ T8304] 8021q: adding VLAN 0 to HW filter on device team0 [ 3112.029367][ T8304] bond0: (slave team0): Enslaving as an active interface with an up link [ 3112.042844][ T8311] netlink: 175 bytes leftover after parsing attributes in process `syz.0.24152'. [ 3112.063527][ T8316] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24150'. [ 3112.092757][ T8316] device team0 entered promiscuous mode [ 3112.103885][ T8316] device team_slave_0 entered promiscuous mode [ 3112.116031][ T8316] device team_slave_1 entered promiscuous mode [ 3112.122647][ T8316] device virt_wifi0 entered promiscuous mode [ 3112.154750][ T8316] bond0: (slave team0): Releasing backup interface [ 3112.195290][ T8316] bridge0: port 3(team0) entered blocking state [ 3112.210406][ T8316] bridge0: port 3(team0) entered disabled state [ 3112.748029][ T8345] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3113.004113][ T8353] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3113.401602][ T8365] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3113.893313][ T8382] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3114.095624][ T8396] validate_nla: 12 callbacks suppressed [ 3114.095660][ T8396] netlink: 'syz.2.24181': attribute type 25 has an invalid length. [ 3114.171770][ T8396] netlink: 'syz.2.24181': attribute type 29 has an invalid length. [ 3114.191781][ T8401] __nla_validate_parse: 7 callbacks suppressed [ 3114.191802][ T8401] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24181'. [ 3114.346749][ T8405] netlink: 'syz.5.24184': attribute type 10 has an invalid length. [ 3114.372042][ T8405] netlink: 'syz.5.24184': attribute type 10 has an invalid length. [ 3114.381775][ T8405] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24184'. [ 3114.437612][ T8407] netlink: 'syz.0.24185': attribute type 10 has an invalid length. [ 3114.477472][ T8407] netlink: 'syz.0.24185': attribute type 10 has an invalid length. [ 3114.494797][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24185'. [ 3114.513688][ T8409] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3114.699095][ T8418] netlink: 'syz.2.24198': attribute type 10 has an invalid length. [ 3114.744571][ T8418] device team0 left promiscuous mode [ 3114.771182][ T8418] device team_slave_0 left promiscuous mode [ 3114.800180][ T8418] device team_slave_1 left promiscuous mode [ 3114.806749][ T8418] device virt_wifi0 left promiscuous mode [ 3114.813304][ T8418] bridge0: port 3(team0) entered disabled state [ 3114.828781][ T8418] 8021q: adding VLAN 0 to HW filter on device team0 [ 3114.837931][ T8418] bond0: (slave team0): Enslaving as an active interface with an up link [ 3114.847884][ T8416] netlink: 'syz.0.24187': attribute type 10 has an invalid length. [ 3114.864045][ T8420] netlink: 'syz.2.24198': attribute type 10 has an invalid length. [ 3114.892533][ T8420] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24198'. [ 3114.904291][ T8420] device team0 entered promiscuous mode [ 3114.935832][ T8420] device team_slave_0 entered promiscuous mode [ 3114.942234][ T8420] device team_slave_1 entered promiscuous mode [ 3114.949643][ T8420] device virt_wifi0 entered promiscuous mode [ 3114.958042][ T8420] bond0: (slave team0): Releasing backup interface [ 3114.978934][ T8420] bridge0: port 3(team0) entered blocking state [ 3114.985326][ T8420] bridge0: port 3(team0) entered disabled state [ 3114.997258][ T8419] netlink: 'syz.0.24187': attribute type 10 has an invalid length. [ 3115.007658][ T8419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24187'. [ 3115.107358][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24190'. [ 3115.454012][ T8431] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3115.685051][ T8440] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3115.704003][ T8445] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3115.819702][ T8450] device team0 left promiscuous mode [ 3115.829393][ T8450] device team_slave_0 left promiscuous mode [ 3115.838470][ T8450] device team_slave_1 left promiscuous mode [ 3115.850437][ T8450] device virt_wifi0 left promiscuous mode [ 3115.865344][ T8450] bridge0: port 3(team0) entered disabled state [ 3115.934237][ T8450] 8021q: adding VLAN 0 to HW filter on device team0 [ 3115.950639][ T8450] bond0: (slave team0): Enslaving as an active interface with an up link [ 3115.966130][ T8460] netlink: 5 bytes leftover after parsing attributes in process `syz.4.24202'. [ 3115.997996][ T8457] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24201'. [ 3116.014761][ T8457] device team0 entered promiscuous mode [ 3116.021579][ T8457] device team_slave_0 entered promiscuous mode [ 3116.029000][ T8457] device team_slave_1 entered promiscuous mode [ 3116.035645][ T8457] device virt_wifi0 entered promiscuous mode [ 3116.043761][ T8457] bond0: (slave team0): Releasing backup interface [ 3116.063869][ T8457] bridge0: port 3(team0) entered blocking state [ 3116.070345][ T8457] bridge0: port 3(team0) entered disabled state [ 3116.085839][ T8459] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24203'. [ 3116.828469][ T8480] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3116.843239][ T8483] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3117.134846][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24220'. [ 3117.171269][ T8496] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3118.004026][ T8520] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3118.308905][ T8532] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3118.557586][ T8544] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3119.213477][ T8566] validate_nla: 20 callbacks suppressed [ 3119.213532][ T8566] netlink: 'syz.0.24246': attribute type 10 has an invalid length. [ 3119.250236][ T8566] netlink: 'syz.0.24246': attribute type 10 has an invalid length. [ 3119.261641][ T8566] __nla_validate_parse: 4 callbacks suppressed [ 3119.261716][ T8566] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24246'. [ 3119.446741][ T8575] netlink: 'syz.0.24251': attribute type 10 has an invalid length. [ 3119.467599][ T8575] netlink: 'syz.0.24251': attribute type 10 has an invalid length. [ 3119.476425][ T8575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24251'. [ 3119.578069][ T8579] netlink: 'syz.4.24253': attribute type 10 has an invalid length. [ 3119.622644][ T8579] netlink: 'syz.4.24253': attribute type 10 has an invalid length. [ 3119.638343][ T8579] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24253'. [ 3119.659254][ T8583] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3120.193411][ T8594] netlink: 'syz.3.24258': attribute type 10 has an invalid length. [ 3120.239874][ T8601] netlink: 175 bytes leftover after parsing attributes in process `syz.2.24261'. [ 3120.283034][ T8599] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3120.294799][ T8594] netlink: 'syz.3.24258': attribute type 10 has an invalid length. [ 3120.314257][ T8594] netlink: 40 bytes leftover after parsing attributes in process `syz.3.24258'. [ 3120.664802][ T8614] mac80211_hwsim hwsim339 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3120.918857][ T8621] netlink: 'syz.5.24269': attribute type 10 has an invalid length. [ 3120.980739][ T8623] netlink: 'syz.4.24267': attribute type 10 has an invalid length. [ 3121.030571][ T8627] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24269'. [ 3121.053976][ T8631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24267'. [ 3121.276848][ T8636] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3121.310594][ T8641] netlink: 175 bytes leftover after parsing attributes in process `syz.2.24276'. [ 3121.508241][ T8643] netlink: 40 bytes leftover after parsing attributes in process `syz.5.24287'. [ 3121.800708][ T8656] netlink: 5 bytes leftover after parsing attributes in process `syz.3.24281'. [ 3122.070100][ T8669] device team0 left promiscuous mode [ 3122.087401][ T8669] device team_slave_0 left promiscuous mode [ 3122.138530][ T8669] device team_slave_1 left promiscuous mode [ 3122.190142][ T8669] device virt_wifi0 left promiscuous mode [ 3122.293928][ T8669] bridge0: port 3(team0) entered disabled state [ 3122.460550][ T8678] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3122.606333][ T8669] 8021q: adding VLAN 0 to HW filter on device team0 [ 3122.622017][ T8669] bond0: (slave team0): Enslaving as an active interface with an up link [ 3122.633389][ T8672] device team0 entered promiscuous mode [ 3122.656695][ T8672] device team_slave_0 entered promiscuous mode [ 3122.663408][ T8672] device team_slave_1 entered promiscuous mode [ 3122.676731][ T8672] device virt_wifi0 entered promiscuous mode [ 3122.684669][ T8672] bond0: (slave team0): Releasing backup interface [ 3122.703616][ T8672] bridge0: port 3(team0) entered blocking state [ 3122.710835][ T8672] bridge0: port 3(team0) entered disabled state [ 3123.916652][ T8720] mac80211_hwsim hwsim341 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3124.267800][ T8739] __nla_validate_parse: 13 callbacks suppressed [ 3124.267872][ T8739] netlink: 144 bytes leftover after parsing attributes in process `syz.0.24311'. [ 3124.385060][ T8741] validate_nla: 19 callbacks suppressed [ 3124.385103][ T8741] netlink: 'syz.4.24312': attribute type 25 has an invalid length. [ 3124.430269][ T8745] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3124.450060][ T8744] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3124.461747][ T8741] netlink: 'syz.4.24312': attribute type 29 has an invalid length. [ 3124.481471][ T8746] netlink: 5 bytes leftover after parsing attributes in process `syz.4.24312'. [ 3124.619035][ T8750] netlink: 'syz.3.24315': attribute type 25 has an invalid length. [ 3124.632358][ T8750] netlink: 'syz.3.24315': attribute type 29 has an invalid length. [ 3124.641947][ T8748] netlink: 'syz.2.24314': attribute type 10 has an invalid length. [ 3124.656911][ T8748] device team0 left promiscuous mode [ 3124.672167][ T8748] device team_slave_0 left promiscuous mode [ 3124.697883][ T8748] device team_slave_1 left promiscuous mode [ 3124.712079][ T8748] device virt_wifi0 left promiscuous mode [ 3124.745658][ T8748] bridge0: port 3(team0) entered disabled state [ 3124.935725][ T8748] 8021q: adding VLAN 0 to HW filter on device team0 [ 3124.993749][ T8748] bond0: (slave team0): Enslaving as an active interface with an up link [ 3125.003792][ T8761] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24318'. [ 3125.026826][ T8750] netlink: 5 bytes leftover after parsing attributes in process `syz.3.24315'. [ 3125.053081][ T8755] netlink: 'syz.2.24314': attribute type 10 has an invalid length. [ 3125.072727][ T8755] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24314'. [ 3125.090900][ T8755] device team0 entered promiscuous mode [ 3125.120427][ T8755] device team_slave_0 entered promiscuous mode [ 3125.138375][ T8755] device team_slave_1 entered promiscuous mode [ 3125.153226][ T8755] device virt_wifi0 entered promiscuous mode [ 3125.172194][ T8755] bond0: (slave team0): Releasing backup interface [ 3125.193519][ T8755] bridge0: port 3(team0) entered blocking state [ 3125.200207][ T8755] bridge0: port 3(team0) entered disabled state [ 3125.209858][ T8759] netlink: 'syz.0.24318': attribute type 25 has an invalid length. [ 3125.237703][ T8759] netlink: 'syz.0.24318': attribute type 29 has an invalid length. [ 3125.334016][ T8767] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3125.401629][ T8770] mac80211_hwsim hwsim335 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3125.527419][ T8777] netlink: 'syz.2.24326': attribute type 25 has an invalid length. [ 3125.535410][ T8777] netlink: 'syz.2.24326': attribute type 29 has an invalid length. [ 3125.693497][ T8775] netlink: 5 bytes leftover after parsing attributes in process `syz.2.24326'. [ 3125.711609][ T8776] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3125.743921][ T8783] netlink: 144 bytes leftover after parsing attributes in process `syz.3.24328'. [ 3126.148944][ T8799] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24329'. [ 3126.201521][ T8801] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24334'. [ 3126.364687][ T8804] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3126.447374][ T8808] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24335'. [ 3127.088063][ T8838] mac80211_hwsim hwsim339 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3127.596442][ T8841] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3128.410161][ T8886] mac80211_hwsim hwsim318 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3128.551729][ T8888] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3128.905122][ T8894] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3128.936376][T27393] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 3129.393214][ T8916] mac80211_hwsim hwsim339 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3129.433377][ T8920] validate_nla: 20 callbacks suppressed [ 3129.433415][ T8920] netlink: 'syz.0.24377': attribute type 25 has an invalid length. [ 3129.465537][ T8920] netlink: 'syz.0.24377': attribute type 29 has an invalid length. [ 3129.477776][ T8918] netlink: 'syz.4.24379': attribute type 10 has an invalid length. [ 3129.490158][ T8921] __nla_validate_parse: 9 callbacks suppressed [ 3129.490177][ T8921] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24377'. [ 3129.518500][ T8918] netlink: 'syz.4.24379': attribute type 10 has an invalid length. [ 3129.554427][ T8918] netlink: 40 bytes leftover after parsing attributes in process `syz.4.24379'. [ 3129.806577][ T8928] netlink: 'syz.2.24392': attribute type 10 has an invalid length. [ 3129.830971][ T8928] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24392'. [ 3129.961667][ T8928] bridge0: port 3(team0) entered blocking state [ 3129.968981][ T8928] bridge0: port 3(team0) entered forwarding state [ 3129.978473][ T8928] 8021q: adding VLAN 0 to HW filter on device team0 [ 3129.991196][ T8931] netlink: 'syz.0.24394': attribute type 25 has an invalid length. [ 3130.037165][ T8931] netlink: 'syz.0.24394': attribute type 29 has an invalid length. [ 3130.062805][ T8934] netlink: 5 bytes leftover after parsing attributes in process `syz.0.24394'. [ 3130.155329][ T8939] netlink: 175 bytes leftover after parsing attributes in process `syz.2.24385'. [ 3130.702261][ T8957] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 3130.906403][ T5151] unregister_netdevice: waiting for Q6`Ҙ to become free. Usage count = 2 [ 3130.937677][ T8964] mac80211_hwsim hwsim337 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3131.007437][ T8970] netlink: 'syz.2.24395': attribute type 10 has an invalid length. [ 3131.103656][ T8970] bridge0: port 3(team0) entered disabled state [ 3131.126862][ T8970] device team0 left promiscuous mode [ 3131.134634][ T8970] device team_slave_0 left promiscuous mode [ 3131.144111][ T8970] device team_slave_1 left promiscuous mode [ 3131.152787][ T8970] device virt_wifi0 left promiscuous mode [ 3131.162044][ T8970] bridge0: port 3(team0) entered disabled state [ 3131.174881][ T8970] 8021q: adding VLAN 0 to HW filter on device team0 [ 3131.188996][ T8970] bond0: (slave team0): Enslaving as an active interface with an up link [ 3131.209302][ T8965] netlink: 'syz.2.24395': attribute type 10 has an invalid length. [ 3131.221380][ T8965] netlink: 40 bytes leftover after parsing attributes in process `syz.2.24395'. [ 3131.254893][ T8965] device team0 entered promiscuous mode [ 3131.261404][ T8965] device team_slave_0 entered promiscuous mode [ 3131.269885][ T8965] device team_slave_1 entered promiscuous mode [ 3131.280631][ T8965] device virt_wifi0 entered promiscuous mode [ 3131.293182][ T8965] bond0: (slave team0): Releasing backup interface [ 3131.324013][ T8965] bridge0: port 3(team0) entered blocking state [ 3131.331681][ T8965] bridge0: port 3(team0) entered disabled state [ 3134.796772][T22894] wlan1: Trigger new scan to find an IBSS to join [ 3137.847141][T22894] wlan1: Trigger new scan to find an IBSS to join [ 3138.776030][T22894] wlan1: Creating new IBSS network, BSSID 00:00:00:08:00:00