last executing test programs: 5.500152086s ago: executing program 2 (id=1881): r0 = socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) r3 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r3, 0x0, 0x0) close(0xffffffffffffffff) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x11) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) socket$kcm(0x11, 0x3, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffc}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x26, 0xc, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x382a, 0xffffffffffff0001}, 0x8000, 0x3, 0x43a1bd76, 0x7, 0x9, 0x658, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) (async) socket$kcm(0x29, 0x5, 0x0) (async) write$cgroup_pressure(r3, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xb) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socket$kcm(0xa, 0x2, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x0, 0x4, 0x0, 0x11) (async) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) (async) socket$kcm(0x10, 0x2, 0x0) (async) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) 4.957979537s ago: executing program 3 (id=1884): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x2, 0x2, 0xfffffffd}, {0x0, 0x4, 0x0, 0x2}, {0x0, 0x4, 0x10009, 0x1}], 0x10, 0xccd6}, 0x94) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803001d000b0ad25a80648c2594f90124fc60100c050000040009053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x3500000000000000) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x20000840) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7f, 0x2, @perf_bp={0x0, 0x9}, 0x0, 0x32, 0x43a1bd76, 0x6, 0x9, 0x2, 0x812, 0x0, 0x0, 0x0, 0x22009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r6 = socket$kcm(0xf, 0x3, 0x2) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x4, 0x0, r2, 0x85, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={r5, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000940)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000980)=[0x0, 0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0], 0x0, 0x47, &(0x7f0000000a00)=[{}], 0x8, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'gretap0\x00', 0xa00}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000c80)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000cc0)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x4, 0x24, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffff8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5890}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x18e}}}, &(0x7f0000000900)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x11, '\x00', r9, @fallback=0x36, r11, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, &(0x7f0000000dc0)=[r12, 0xffffffffffffffff, r13, r14], &(0x7f0000000e00)=[{0x0, 0x5, 0x1, 0x8}, {0x0, 0x1, 0x2, 0x7}, {0x1, 0x3, 0xa, 0xc89f4289fa95951a}, {0x5, 0x3, 0x2, 0xc}], 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) sendmsg$inet(r6, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) 4.615776195s ago: executing program 0 (id=1885): r0 = perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef001e000000002c"], 0x66) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) (async) r3 = socket$kcm(0xa, 0x5, 0x0) (async) r4 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'\x00', 0x202}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x890b, &(0x7f0000000000)) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) ioctl$TUNGETFILTER(r6, 0x801054db, &(0x7f00000002c0)=""/1) (async) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x8}) 4.084767434s ago: executing program 0 (id=1886): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x3, 0x0, 0x0, {0xa, 0x1000, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x80, 0x0}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) (async) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) (async, rerun: 64) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (rerun: 64) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000090401a80016000a00014006f5ff00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) openat$cgroup_ro(r10, &(0x7f00000011c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000000000000010000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000edffffffffffffff00000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) (async, rerun: 64) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r13, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000380), 0x98) 3.983751501s ago: executing program 2 (id=1888): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x48) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/time\x00') perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYRES16=r0], 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000040)=ANY=[], 0x20) r1 = socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x4000, 0x0, @mcast2, 0x41}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x10, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)={0x1b, 0x0, 0x0, 0x101, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x50) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@map=r4, r3, 0xd, 0x0, 0x0, @void, @value=r3}, 0x20) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x7a, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x4}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r5, 0x58, &(0x7f0000000140)}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1b, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x38}, 0x94) 3.958905445s ago: executing program 3 (id=1889): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000180000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b2777a06fbdae3af93c682cfafad9213176e4489323a40fcc4cf850ca3f256b53ef98c905d6af7326db6209b1cbd421a601f7a7bedbca8bfdd18816a4380dcd2ffa125ae95bdc29a9f9efc"], 0x50) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x21, 0x2, 0x2) socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xb8}, 0x40002160) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x3, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x9, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, 0xfffffffffffffffd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, &(0x7f00000002c0)=r3, 0x161) sendmsg$inet(r4, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000380), 0xff7a}], 0x1, &(0x7f0000007880)=ANY=[@ANYBLOB="1100000000000000004003000100000000000000000000001c00000000000000000f00fd08000000", @ANYRES32=0x0, @ANYBLOB="ac1414bbe0000001000000001c0000000000000000078f0208000000", @ANYRES32=0x0, @ANYBLOB="a00500000000000000000000240000000000000000000000070000009404000044108800000000000000000000000000000000001100000000000000000000c2d63c67000000000000000000"], 0x98}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'rose0\x00', 0x10}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x8946, &(0x7f0000000080)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x1f) 3.817110609s ago: executing program 2 (id=1891): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.792387143s ago: executing program 0 (id=1892): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x10000000000001d3, 0x0, &(0x7f0000000c40), 0x10, 0xfffffff6}, 0x94) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000b80fc0b09000300", 0x33fe0}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) 3.646491038s ago: executing program 2 (id=1894): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x2, @perf_bp={0x0, 0x8}, 0x8000, 0x5, 0x43a1bd76, 0x1, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x2, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="1400000016000b63d25a80648c2594f90d24fc60", 0x14}], 0x1}, 0x0) 3.552292933s ago: executing program 0 (id=1895): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x88c6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) socket$kcm(0xa, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000003100)=""/4083, 0xff3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f00000003c0)=""/130, 0x30}, {&(0x7f0000004100)=""/4103, 0x1007}, {&(0x7f0000000580)=""/234, 0xea}], 0x9}, 0x2122) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) socket$kcm(0x10, 0x2, 0x0) (async) socket$kcm(0x2, 0x3, 0x2) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x88c6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x50) (async) socket$kcm(0xa, 0x5, 0x0) (async) socket$kcm(0x29, 0x5, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000380)="1400000016000b63d25a80648c2594f90b24fc60", 0x14}], 0x1}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f0000000480)=""/185, 0xb9}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000002d80)=""/196, 0xc4}, {&(0x7f0000003100)=""/4083, 0xff3}, {&(0x7f00000002c0)=""/169, 0xa9}, {&(0x7f00000003c0)=""/130, 0x30}, {&(0x7f0000004100)=""/4103, 0x1007}, {&(0x7f0000000580)=""/234, 0xea}], 0x9}, 0x2122) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x104, 0x8, 0x2}, 0x50) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r1, &(0x7f0000000580), &(0x7f0000000780)=""/140}, 0x20) (async) 3.540821045s ago: executing program 2 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce2200000000"], 0xfdef) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000940)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f, 0x2, @perf_config_ext={0x40000000000000, 0x3fef8000}, 0x0, 0x701, 0x43a1bd76, 0x0, 0x5, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x3, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x8, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa66a6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f375ffff86dd6317ce62070000000000000000431ccaf57b00000000000000000104"], 0xfe1b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="f0f605748aed0000000000000c00000045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f2, &(0x7f0000000080)) recvmsg$kcm(r3, &(0x7f0000000680)={&(0x7f00000002c0)=@pppol2tpv3, 0x80, &(0x7f0000000580)=[{&(0x7f00000005c0)=""/157, 0x9d}], 0x1, &(0x7f0000000340)=""/176, 0xb0}, 0x2000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000010000000000000000000000370001000000000095002b43990800125e0000"], &(0x7f0000001a40)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3.476745546s ago: executing program 1 (id=1897): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r1, 0x20, &(0x7f0000000300)={&(0x7f00000001c0)=""/233, 0xe9, 0x0, &(0x7f00000002c0)}}, 0x10) (async) r2 = socket$kcm(0x2, 0x0, 0x2) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x69, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000e40)=[{0x0, 0x1008}, {&(0x7f0000000f40)=""/213, 0xd5}], 0x2}, 0x40012100) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000002c00)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000000800000018110000", @ANYRES32=r3, @ANYRES64=r1, @ANYRES16=r5, @ANYRES64=r1, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYRESHEX=r0, @ANYRESHEX=r4, @ANYRESOCT=r4, @ANYRES64=r5, @ANYRESDEC=r2, @ANYRES64=r1], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f00000000c0)=r8, 0x4) sendmsg$unix(r7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe8a}, 0x0) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) close(r0) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r9) (async) r10 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r10, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r11}, &(0x7f0000000000), &(0x7f0000000080)=r9}, 0x20) (async) socket$kcm(0xf, 0x3, 0x2) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) (async) r12 = perf_event_open$cgroup(&(0x7f0000000380)={0x5, 0x80, 0x8f, 0x4, 0xff, 0x7, 0x0, 0xf586, 0x84160, 0x2, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa, 0x3}, 0x10100, 0x3, 0x9, 0x5, 0x9, 0x800, 0x9, 0x0, 0xa, 0x0, 0x1}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x6) ioctl$PERF_EVENT_IOC_REFRESH(r12, 0x2402, 0x1) 3.388764621s ago: executing program 3 (id=1898): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40810) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) recvmsg$unix(0xffffffffffffffff, 0x0, 0x10020) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000440)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2, 0x4, 0x0, 0x2}}, 0x80, 0x0}, 0x20044010) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0xfffffd88, &(0x7f0000000440), 0x1}, 0x2002) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000004c0)={&(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x6}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000100)='dB', 0x2}], 0x1}, 0x22044880) sendmsg$inet(r5, &(0x7f0000002700)={&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}, 0x8040) sendmsg$inet(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000280)=[{&(0x7f00000001c0)="e9", 0x34000}], 0x1}, 0x8054) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000240)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x31) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) recvmsg$kcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}, 0x10100) 3.295653897s ago: executing program 0 (id=1899): r0 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000), 0x4) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"/2762], &(0x7f00000001c0)='GPL\x00'}, 0x48) 2.920941929s ago: executing program 0 (id=1900): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x72463, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x9, 0x0, 0x0, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x3efd7ab4c41335d9, @perf_config_ext={0x8, 0x54e}, 0x0, 0xf452, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="89000000120081ae08060cdc030000007f1be3f74001000000e2ffca1b1f0000000004c00e72f7", 0x27}], 0x1}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x183081, 0x0) close(r4) socket$kcm(0x29, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000029"], 0x280) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)={'\x00', 0x52d35ce30131f272}) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xb) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x30a) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r6 = socket$kcm(0x10, 0x2, 0x4) close(r6) r7 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000100)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) socket$kcm(0xa, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 2.92034095s ago: executing program 1 (id=1901): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8, 0x0, @perf_bp={0x0}, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffbbfe, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8001, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7fff}, [@map_val={0x18, 0x4, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x13, &(0x7f0000000280)=""/19, 0x41100, 0x32, '\x00', r6, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000003c0)=[r2], &(0x7f0000000400)=[{0x3, 0x4, 0x9, 0x1}, {0x0, 0x1, 0xe, 0xa}, {0x3, 0x4, 0x8, 0x6}, {0x2, 0x1, 0x7}, {0x4, 0x7fffffff, 0x6, 0x5}, {0x4, 0x4, 0xc, 0x5}], 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000600)=@o_path={&(0x7f00000005c0)='./file0\x00', 0x0, 0x4008, r4}, 0x18) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x10, 0x800, 0x100, &(0x7f0000000540)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r8, 0x89e0, &(0x7f0000000580)={r3, r1}) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0x8}, 0x40, 0x0, 0x0, 0x5, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r7) 2.02216976s ago: executing program 2 (id=1902): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xf, 0xe1bf}, 0x0, 0x10000, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000008c0)=@bpf_tracing={0x1a, 0x22, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x0, 0x8, 0x4, 0x9, 0xfffffffffffffffe, 0x10}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ldst={0x3, 0x3, 0x3, 0x8, 0xf, 0xfffffffffffffffc}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='syzkaller\x00', 0x59, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x3, 0x2}, 0xffffffffffffff23, 0x10, 0x0, 0x0, 0x85ec, 0xffffffffffffffff, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x1, 0x6, 0xf, 0x1}]}, 0x94) close(r1) 1.820724194s ago: executing program 1 (id=1903): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x80000000}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.528697193s ago: executing program 1 (id=1904): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000f00), 0x15}, 0x1000, 0x2, 0x6e, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) (async) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5a}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000002a00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, &(0x7f00000029c0), 0x0, 0x2, 0x0, 0x8}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x20000000000003a7, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x7, 0x80, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}, 0x0, 0x7, 0x80, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe80, 0x6000002c, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000084000000000100000100000000", @ANYRES32, @ANYRESHEX=0x0], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f1, &(0x7f0000000f80)='\xe0\x87\rlk\xa6\xd9h8\x86\x031\xeb%\xf7\"\xe1j$\xeb\xeeE\x9a2.\xf3\x03\xa6Pu?\xe0\x11\xaa\x0e\xfd') sendmsg(r5, &(0x7f0000000740)={&(0x7f00000002c0)=@llc={0x1a, 0x204, 0xc, 0x7, 0x2, 0xa9, @broadcast}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000340)="b6c0dd084192bee72805c0c725aa2f6390b1526d3c716181894181de0951b78399e860645ab8334485062f858c7c2937", 0x30}, {&(0x7f0000000440)="d0fe95d1964e8e43a1b54eec3610acbc2c54051378b168339ae4fd7e25f2b0a5193d1cd5599425bbd9a297ad84cf7d224524bdd109b633cfa72fd581a3efe53e87e7275f608fb3ec03b3dc3d5f58", 0x4e}, {&(0x7f00000004c0)="1bde24cb9b280767a9a93700c635e80baf00003144fe7af7af59502e2aadd088658334c494b7dd40101846102c9c06b636e9a27d778886ead5c630e4706411fca49219cc4dde0a9484dd80cb55756c4e8e68dbdf51c632b81ef6ce25824d05f31931a383ef1fb799686bd66a99f91c177304b1de1ca989674b03147fbc9d8d71c9e46e1500c7c2da22cf1785c1a13936bfe42b053718ae3fb03f590e", 0x9c}, {&(0x7f0000000580)="dbb62e90f15b07b28640c44dded110491a3a71fa362f8a720fb24c487b719708974c58a93359b3c4e74954bda8b2c3fcbdc1bdd5a7163f08532c0d03d4afb3f0", 0x40}, {&(0x7f00000005c0)="1355172b16875e6033b3dba139a083f66db7c31324ce9f7fe54ed81fb541d2db2c44e3ee8eaf2154e2cff6ac6d0349b3ff93b2b1f5178856674425d75c69cb2c5c3f731fa3904d26b2c74652666ec9bad216ab358bedf0f8d1", 0x59}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="80000000000000001301000007000000405548c458d1ef545eb3f2e86fe2284c6ebfbfba1511a0f7f2caa85698006a3a0475be6e6d698aff8acd8b402514f911182ae386cfbc3dde174776ebc97d4fda74a89f5fcb6fc5d61821cd4cf8124a775f7cbeac91ba5530f4990ff150c21b0000009394f1f72a898200000000000000"], 0x80}, 0x20004040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000000)) (async) ioctl$TUNGETVNETBE(r6, 0x800454df, &(0x7f0000000000)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f0000000fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x5e, &(0x7f00000007c0)=[{}], 0x8, 0x10, &(0x7f0000000800), &(0x7f0000000840), 0x8, 0x8a, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000a00)=r7) 1.031507307s ago: executing program 1 (id=1905): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000a40)="f9b5", &(0x7f0000000a80), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 584.648582ms ago: executing program 1 (id=1906): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x64, 0x9, 0x3, 0x8}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x81, 0xfc, &(0x7f0000000080)="375ebf373165f04efc671f91526b8396be688a180e9a4d7ccd54215fb5704eae6073823d9746c9b5d3858fde214e711a0ad7c0484228320bc9ac6f456b2c9878716779672ee6d9e80ae9451f01fe5a28cd8eea22b3a449a331afebb420d00f3faf60754b3347a675f2fe2008ce2a429c8847ec51a566b356175e76c1d14a2245c2", &(0x7f00000004c0)=""/252, 0xa577, 0x0, 0x68, 0x48, &(0x7f0000000300)="9e56dd5e7eba1b5e01031a3724f81246879f08e9b25b742462ad2bffe5d33b08d137fdeade3aeac1ba9a3efcfcffc49506f28104c4978caebc9b3382db188f2a3e422c91b81e972f5f998bfeb871a9f537050406df095351396e9c42bfe05a979a5bf568a06f61de", &(0x7f0000000380)="f85ffd34012078570ba655ddc6cc3d8838e2fce35e7e69ef6142d5816cf0299b06450e65df9c528f10f2dc28f410096ba07b53586ae7f495e21c90a0d148b815d0f69be0b7fcc0d3", 0x4, 0x0, 0x6}, 0x50) (async) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000480)={r0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x18, &(0x7f00000002c0)=r4, 0x4) (async) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r1, r4}, 0xc) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000001c0)="2e00000010008102b78cc358f86515e00000000025000000e3bd6efb4400490009002e0010000000ba8000051201", 0x2e}], 0x1}, 0x0) 157.099953ms ago: executing program 3 (id=1907): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYRES32], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x10}, 0x94) 117.04981ms ago: executing program 3 (id=1908): r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8458, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) close(r0) 0s ago: executing program 3 (id=1909): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0xf5, 0x0, 0x0, 0x187c0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={&(0x7f00000003c0), 0x2}, 0x0, 0x11000, 0x49e4, 0x1, 0x8, 0x20005, 0x3, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x8010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x15, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="3daa0080000000007110110000000000950000f55872060093e38d6b8a44b0bcd14777c02d4f14f0e0b86ec134032f356dc1cca08bda039db0258059c1aceb"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000020040)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0x2d, 0x0, &(0x7f0000000300)="e0b9546f5bec20f391e402ccebf9732347dfa0287273cf931fa720dfc83532ead4f77e82f88300000000000000", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0xa5, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x32, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000e10000000000000000008500000053000000850000007d000000"], 0x0, 0x4}, 0x94) r5 = perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) r7 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r7, 0x84, 0x9, &(0x7f0000000380), 0x98) r8 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r8, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x9) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, 0x0, 0x2, 0x0) write$cgroup_pid(r10, &(0x7f0000000380), 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xd, 0x0, &(0x7f0000000000)="e0b9092dc1b6dbe9ab5becdcc7", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, &(0x7f0000000040), 0x3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000e00)='cpuset.mems\x00', 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0xd, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x6}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0f00000024000000", @ANYRES32, @ANYBLOB="17bacde11b73568ff1e19aa4f803bbe9525b88f295988a45d4857805921246a84084018bdff81f50af0e6cd43b61", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.142' (ED25519) to the list of known hosts. [ 62.100947][ T5754] cgroup: Unknown subsys name 'net' [ 62.229218][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 63.576541][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 65.374402][ T5768] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 65.385184][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 65.394166][ T5777] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 65.402364][ T5777] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 65.410279][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 65.419313][ T5777] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 65.421654][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 65.427454][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 65.434619][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 65.448228][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 65.455854][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 65.464829][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 65.472667][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 65.480281][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 65.489375][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 65.497195][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 65.498221][ T5778] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 65.522295][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 65.526469][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 65.537406][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 65.545087][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 65.552633][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.559832][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 65.574193][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 65.895549][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 65.968281][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 65.992018][ T5765] chnl_net:caif_netlink_parms(): no params data found [ 66.078622][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 66.136737][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.144348][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.151587][ T5770] bridge_slave_0: entered allmulticast mode [ 66.158458][ T5770] bridge_slave_0: entered promiscuous mode [ 66.166697][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.174566][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.181766][ T5770] bridge_slave_1: entered allmulticast mode [ 66.188509][ T5770] bridge_slave_1: entered promiscuous mode [ 66.201411][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.208913][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.216147][ T5769] bridge_slave_0: entered allmulticast mode [ 66.222707][ T5769] bridge_slave_0: entered promiscuous mode [ 66.257753][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.265067][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.272157][ T5769] bridge_slave_1: entered allmulticast mode [ 66.278992][ T5769] bridge_slave_1: entered promiscuous mode [ 66.285865][ T5765] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.293115][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.300244][ T5765] bridge_slave_0: entered allmulticast mode [ 66.309106][ T5765] bridge_slave_0: entered promiscuous mode [ 66.347251][ T5765] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.354539][ T5765] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.361644][ T5765] bridge_slave_1: entered allmulticast mode [ 66.369169][ T5765] bridge_slave_1: entered promiscuous mode [ 66.385418][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.398264][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.444523][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.451673][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.461078][ T5771] bridge_slave_0: entered allmulticast mode [ 66.468196][ T5771] bridge_slave_0: entered promiscuous mode [ 66.476776][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.483939][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.491053][ T5771] bridge_slave_1: entered allmulticast mode [ 66.498162][ T5771] bridge_slave_1: entered promiscuous mode [ 66.506702][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.520365][ T5765] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.540547][ T5770] team0: Port device team_slave_0 added [ 66.559223][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.570990][ T5765] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.589508][ T5770] team0: Port device team_slave_1 added [ 66.617692][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.624787][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.651199][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.691909][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.704056][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.713913][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.720856][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.746800][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.760735][ T5765] team0: Port device team_slave_0 added [ 66.769885][ T5769] team0: Port device team_slave_0 added [ 66.778430][ T5769] team0: Port device team_slave_1 added [ 66.807516][ T5765] team0: Port device team_slave_1 added [ 66.837605][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.844731][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.871222][ T5765] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.887997][ T5771] team0: Port device team_slave_0 added [ 66.909501][ T5765] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.917718][ T5765] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.944209][ T5765] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.962062][ T5771] team0: Port device team_slave_1 added [ 66.968655][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.978026][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.006418][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.042043][ T5770] hsr_slave_0: entered promiscuous mode [ 67.048983][ T5770] hsr_slave_1: entered promiscuous mode [ 67.076033][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.083207][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.110717][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.146986][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.154043][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.180335][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.206292][ T5765] hsr_slave_0: entered promiscuous mode [ 67.213897][ T5765] hsr_slave_1: entered promiscuous mode [ 67.220023][ T5765] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.227920][ T5765] Cannot create hsr debugfs directory [ 67.234094][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.241037][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.267216][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.345017][ T5771] hsr_slave_0: entered promiscuous mode [ 67.351572][ T5771] hsr_slave_1: entered promiscuous mode [ 67.358368][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.366033][ T5771] Cannot create hsr debugfs directory [ 67.410273][ T5769] hsr_slave_0: entered promiscuous mode [ 67.417357][ T5769] hsr_slave_1: entered promiscuous mode [ 67.424639][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 67.432190][ T5769] Cannot create hsr debugfs directory [ 67.583398][ T5777] Bluetooth: hci1: command tx timeout [ 67.589570][ T5086] Bluetooth: hci3: command tx timeout [ 67.663337][ T5777] Bluetooth: hci2: command tx timeout [ 67.669241][ T5086] Bluetooth: hci0: command tx timeout [ 67.746024][ T5770] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.757798][ T5770] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.768626][ T5770] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.793262][ T5770] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.829351][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.840094][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.850830][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.859836][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.948029][ T5765] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 67.957184][ T5765] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 67.968437][ T5765] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 67.978057][ T5765] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.048615][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.076752][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.087801][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.118318][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.161301][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.229607][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.244771][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.254528][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.288825][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.296047][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.310767][ T5765] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.344700][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.351882][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.361258][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.368548][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.380203][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.387300][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.398478][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.414066][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.421143][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.447617][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.454734][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.485587][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.583787][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.637227][ T1128] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.644394][ T1128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.657323][ T1128] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.664482][ T1128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.966851][ T5765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.069457][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.084570][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.123669][ T5765] veth0_vlan: entered promiscuous mode [ 69.137728][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.153195][ T5765] veth1_vlan: entered promiscuous mode [ 69.209297][ T5770] veth0_vlan: entered promiscuous mode [ 69.254144][ T5765] veth0_macvtap: entered promiscuous mode [ 69.264494][ T5770] veth1_vlan: entered promiscuous mode [ 69.271652][ T5765] veth1_macvtap: entered promiscuous mode [ 69.286931][ T5771] veth0_vlan: entered promiscuous mode [ 69.299199][ T5771] veth1_vlan: entered promiscuous mode [ 69.309400][ T5769] veth0_vlan: entered promiscuous mode [ 69.336874][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.358587][ T5769] veth1_vlan: entered promiscuous mode [ 69.366538][ T5765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.379321][ T5765] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.389405][ T5765] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.400410][ T5765] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.409784][ T5765] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.466263][ T5771] veth0_macvtap: entered promiscuous mode [ 69.488986][ T5771] veth1_macvtap: entered promiscuous mode [ 69.518512][ T5770] veth0_macvtap: entered promiscuous mode [ 69.550504][ T5770] veth1_macvtap: entered promiscuous mode [ 69.570601][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.586977][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.599311][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.608481][ T5769] veth0_macvtap: entered promiscuous mode [ 69.619742][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.632497][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.643846][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.654373][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.666037][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.673357][ T5777] Bluetooth: hci1: command tx timeout [ 69.679270][ T5086] Bluetooth: hci3: command tx timeout [ 69.696395][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.706953][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.719054][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.729478][ T5769] veth1_macvtap: entered promiscuous mode [ 69.744344][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.754700][ T5086] Bluetooth: hci0: command tx timeout [ 69.760252][ T5086] Bluetooth: hci2: command tx timeout [ 69.765581][ T5770] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.766818][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.784135][ T5770] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.793068][ T5770] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.801750][ T5770] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.812251][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.828693][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.838875][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.852435][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.864929][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.884619][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.894086][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.902768][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.912156][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.941057][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.952525][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.962462][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.973150][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.985166][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.995826][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.007343][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.019300][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.030325][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.040682][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.051135][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.061257][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.076729][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.087927][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.111180][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.124465][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.133977][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.141923][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.157441][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.167407][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.324137][ T1128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.331988][ T1128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.355299][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.379110][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.428057][ T1128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.439478][ T1128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.452622][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.466907][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.472928][ C1] hrtimer: interrupt took 53713 ns [ 70.499448][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.520605][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.569806][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.598481][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.254435][ T5849] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8'. [ 71.413596][ T5855] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 71.430151][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.438618][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.454583][ T5856] netlink: 'syz.3.9': attribute type 1 has an invalid length. [ 71.454656][ T5849] syz.0.8 (5849) used greatest stack depth: 20904 bytes left [ 71.619403][ T5863] netlink: 'syz.3.11': attribute type 21 has an invalid length. [ 71.634154][ T5863] netlink: 168 bytes leftover after parsing attributes in process `syz.3.11'. [ 71.689418][ T5865] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12'. [ 71.747470][ T5863] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.11'. [ 71.757255][ T5086] Bluetooth: hci3: command tx timeout [ 71.758733][ T5777] Bluetooth: hci1: command tx timeout [ 71.823630][ T5777] Bluetooth: hci0: command tx timeout [ 71.824667][ T5086] Bluetooth: hci2: command tx timeout [ 72.445196][ T5889] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.20'. [ 72.484749][ T5889] openvswitch: netlink: Flow key attribute not present in set flow. [ 72.529098][ T5891] netlink: 'syz.3.20': attribute type 8 has an invalid length. [ 72.573256][ T5891] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.20'. [ 72.648774][ T5889] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.20'. [ 72.671709][ T5883] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 72.735042][ T5883] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 72.868747][ T5883] syz.1.17 (5883) used greatest stack depth: 20840 bytes left [ 73.211796][ T5889] syz.3.20 (5889) used greatest stack depth: 20272 bytes left [ 73.286817][ T5901] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.436100][ T5912] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 73.522314][ T5912] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 73.780492][ T5919] Zero length message leads to an empty skb [ 73.780744][ T5922] netlink: 'syz.3.30': attribute type 21 has an invalid length. [ 73.798881][ T5922] netlink: 164 bytes leftover after parsing attributes in process `syz.3.30'. [ 73.818145][ T5923] netlink: 'syz.3.30': attribute type 21 has an invalid length. [ 73.827290][ T5086] Bluetooth: hci1: command tx timeout [ 73.827308][ T5777] Bluetooth: hci3: command tx timeout [ 73.845096][ T5923] netlink: 164 bytes leftover after parsing attributes in process `syz.3.30'. [ 73.905121][ T5777] Bluetooth: hci2: command tx timeout [ 73.905135][ T5086] Bluetooth: hci0: command tx timeout [ 73.919309][ T5930] netlink: 'syz.0.29': attribute type 39 has an invalid length. [ 74.470572][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 74.747643][ T5957] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.36'. [ 74.758508][ T5933] Illegal XDP return value 2373143886 on prog (id 38) dev N/A, expect packet loss! [ 75.155630][ T5970] netlink: 'syz.2.40': attribute type 9 has an invalid length. [ 76.077616][ T5973] netlink: 'syz.1.41': attribute type 10 has an invalid length. [ 76.239319][ T5973] team0: Port device macvlan0 added [ 76.252097][ T5975] netlink: 'syz.3.42': attribute type 19 has an invalid length. [ 76.667577][ T5973] syz.1.41 (5973) used greatest stack depth: 18408 bytes left [ 76.685559][ T5986] __nla_validate_parse: 1 callbacks suppressed [ 76.685572][ T5986] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.45'. [ 77.656703][ T6013] veth0_vlan: entered allmulticast mode [ 78.092358][ T6018] ÿÿÿÿÿÿ: renamed from vlan1 [ 78.107361][ T6015] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 78.113375][ T6015] dvmrp1: linktype set to 804 [ 78.240069][ T6023] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 78.746252][ T6028] pim6reg1: entered promiscuous mode [ 78.751842][ T6028] pim6reg1: entered allmulticast mode [ 80.176976][ T6074] netlink: 'syz.1.70': attribute type 2 has an invalid length. [ 80.204757][ T6074] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.70'. [ 80.645137][ T6086] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.71'. [ 80.767151][ T6085] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.73'. [ 86.796200][ T28] cfg80211: failed to load regulatory.db [ 87.602004][ T6119] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.82'. [ 87.621919][ T6119] bridge_slave_1: default FDB implementation only supports local addresses [ 87.845018][ T6124] netlink: 'syz.1.83': attribute type 2 has an invalid length. [ 87.852693][ T6124] netlink: 132 bytes leftover after parsing attributes in process `syz.1.83'. [ 88.133215][ T6132] netlink: 'syz.2.84': attribute type 21 has an invalid length. [ 88.155632][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 88.255555][ T6132] netlink: 132 bytes leftover after parsing attributes in process `syz.2.84'. [ 89.145949][ T6155] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.91'. [ 89.155737][ T6157] netlink: 'syz.2.92': attribute type 21 has an invalid length. [ 89.231780][ T6160] raw_sendmsg: syz.0.93 forgot to set AF_INET. Fix it! [ 89.254539][ T6161] TCP: TCP_TX_DELAY enabled [ 89.437756][ T6168] sctp: [Deprecated]: syz.0.97 (pid 6168) Use of int in maxseg socket option. [ 89.437756][ T6168] Use struct sctp_assoc_value instead [ 89.673953][ T6177] IPv6: Can't replace route, no match found [ 89.718478][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'. [ 89.752175][ T6177] netlink: 'syz.0.99': attribute type 10 has an invalid length. [ 89.767170][ T6181] netlink: 60 bytes leftover after parsing attributes in process `syz.3.101'. [ 89.911283][ T6177] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 89.942152][ T6179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'. [ 89.962703][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.1.100'. [ 90.319318][ T6194] : port 1(ip6gretap0) entered blocking state [ 90.326191][ T6194] : port 1(ip6gretap0) entered disabled state [ 90.332749][ T6194] ip6gretap0: entered allmulticast mode [ 90.364432][ T6194] ip6gretap0: entered promiscuous mode [ 92.371520][ T6256] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.123'. [ 93.826754][ T6289] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.132'. [ 94.952162][ T6326] syz.2.143 uses obsolete (PF_INET,SOCK_PACKET) [ 94.989878][ T6326] syzkaller1: tun_chr_ioctl cmd 1074025673 [ 95.002073][ T6327] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 95.021884][ T6327] syzkaller1: Linktype set failed because interface is up [ 95.793858][ T6343] netlink: 763 bytes leftover after parsing attributes in process `syz.3.146'. [ 95.813025][ T6344] netlink: 763 bytes leftover after parsing attributes in process `syz.3.146'. [ 96.593257][ T6363] mac80211_hwsim hwsim5 »»»»»»: renamed from wlan0 [ 97.221735][ T6376] netlink: 'syz.0.158': attribute type 21 has an invalid length. [ 97.243768][ T6376] netlink: 156 bytes leftover after parsing attributes in process `syz.0.158'. [ 98.959534][ T6406] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.169'. [ 98.999189][ T6406] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 99.030501][ T6404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.168'. [ 99.184679][ T6406] syzkaller0: entered promiscuous mode [ 99.223622][ T6406] syzkaller0: entered allmulticast mode [ 99.244370][ T6413] netlink: 'syz.2.171': attribute type 10 has an invalid length. [ 99.285949][ T6413] syz_tun: entered promiscuous mode [ 99.307796][ T6413] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 102.247632][ T6435] netlink: 'syz.1.176': attribute type 19 has an invalid length. [ 102.258878][ T6435] netlink: 40 bytes leftover after parsing attributes in process `syz.1.176'. [ 102.268845][ T6448] netlink: 'syz.0.179': attribute type 27 has an invalid length. [ 102.278283][ T6448] netlink: 'syz.0.179': attribute type 4 has an invalid length. [ 102.302916][ T6448] netlink: 132 bytes leftover after parsing attributes in process `syz.0.179'. [ 103.487473][ T6492] netlink: 10 bytes leftover after parsing attributes in process `syz.0.190'. [ 107.121840][ T6554] netlink: 763 bytes leftover after parsing attributes in process `syz.0.205'. [ 107.245806][ T6550] sit0: entered promiscuous mode [ 107.740453][ T6571] ref_ctr_offset mismatch. inode: 0x121 offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 107.762434][ T6562] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.208'. [ 107.996590][ T6577] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.212'. [ 108.493636][ T6591] aaaaaaaaaaaaaaa: entered promiscuous mode [ 108.865752][ T6600] netlink: 'syz.3.219': attribute type 7 has an invalid length. [ 108.883195][ T6600] netlink: 'syz.3.219': attribute type 1 has an invalid length. [ 108.912916][ T6600] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.219'. [ 109.269319][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.221'. [ 110.197477][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.233'. [ 110.234373][ T6643] netlink: 60 bytes leftover after parsing attributes in process `syz.3.233'. [ 110.272637][ T6652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.233'. [ 110.815315][ T6669] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.240'. [ 110.833481][ T6669] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 110.859691][ T6669] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 111.026089][ T6669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.240'. [ 111.427145][ T6677] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 111.463763][ T6677] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 111.507576][ T6686] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 111.545463][ T6677] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 111.606821][ T6692] netlink: 'syz.0.243': attribute type 29 has an invalid length. [ 112.133875][ T6697] GPL: port 1(team0) entered blocking state [ 112.140080][ T6697] GPL: port 1(team0) entered disabled state [ 112.146670][ T6697] team0: entered allmulticast mode [ 112.159945][ T6697] team_slave_0: entered allmulticast mode [ 112.160745][ T6707] netlink: 'syz.0.250': attribute type 3 has an invalid length. [ 112.174245][ T6697] team_slave_1: entered allmulticast mode [ 112.182710][ T6697] team0: entered promiscuous mode [ 112.188246][ T6707] netlink: 'syz.0.250': attribute type 4 has an invalid length. [ 112.196291][ T6697] team_slave_0: entered promiscuous mode [ 112.203320][ T6697] team_slave_1: entered promiscuous mode [ 112.225490][ T6707] __nla_validate_parse: 2 callbacks suppressed [ 112.225503][ T6707] netlink: 9067 bytes leftover after parsing attributes in process `syz.0.250'. [ 112.495762][ T6714] sit0: entered allmulticast mode [ 113.861029][ T6748] syzkaller0: entered promiscuous mode [ 113.866704][ T6748] syzkaller0: entered allmulticast mode [ 113.894362][ T6754] syzkaller0: create flow: hash 3970953936 index 1 [ 113.916122][ T3460] syzkaller0: tun_net_xmit 48 [ 113.967041][ T6757] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 114.059498][ T6748] syzkaller0: delete flow: hash 3970953936 index 1 [ 114.610380][ T6793] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.270'. [ 115.899952][ T6794] netlink: 'syz.3.270': attribute type 2 has an invalid length. [ 115.910683][ T6794] netlink: 132 bytes leftover after parsing attributes in process `syz.3.270'. [ 116.200374][ T6811] netlink: 'syz.0.275': attribute type 39 has an invalid length. [ 116.347809][ T6822] netlink: 'syz.0.279': attribute type 23 has an invalid length. [ 116.595246][ T6833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.282'. [ 116.652314][ T6833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.891079][ T6846] netlink: 'syz.3.289': attribute type 10 has an invalid length. [ 116.947049][ T6844] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 116.959776][ T6846] netlink: 'syz.3.289': attribute type 3 has an invalid length. [ 116.972475][ T6846] netlink: 'syz.3.289': attribute type 1 has an invalid length. [ 116.975132][ T6844] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 116.983199][ T6846] netlink: 193404 bytes leftover after parsing attributes in process `syz.3.289'. [ 117.028939][ T6844] netlink: 'syz.0.288': attribute type 29 has an invalid length. [ 117.147956][ T6844] C: renamed from team_slave_0 (while UP) [ 117.189515][ T6844] netlink: 140 bytes leftover after parsing attributes in process `syz.0.288'. [ 117.767203][ T6861] syzkaller0: entered promiscuous mode [ 117.772786][ T6861] syzkaller0: entered allmulticast mode [ 118.349000][ T6882] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.300'. [ 119.454366][ T6877] netlink: 14556 bytes leftover after parsing attributes in process `syz.3.299'. [ 119.476934][ T6882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.300'. [ 119.512211][ T6885] IPv6: Can't replace route, no match found [ 119.543102][ T6887] IPv6: Can't replace route, no match found [ 120.017183][ T6899] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.302'. [ 120.379811][ T6901] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.306'. [ 120.419520][ T6899] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 120.443670][ T6899] CPU: 0 PID: 6899 Comm: syz.0.302 Not tainted syzkaller #0 [ 120.451005][ T6899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 120.461088][ T6899] Call Trace: [ 120.464390][ T6899] [ 120.467338][ T6899] dump_stack_lvl+0x18c/0x250 [ 120.472051][ T6899] ? show_regs_print_info+0x20/0x20 [ 120.477259][ T6899] ? load_image+0x420/0x420 [ 120.481778][ T6899] sysfs_warn_dup+0x8e/0xa0 [ 120.486290][ T6899] sysfs_do_create_link_sd+0xc0/0x110 [ 120.491694][ T6899] device_add_class_symlinks+0x1cf/0x240 [ 120.497363][ T6899] device_add+0x507/0xc20 [ 120.501723][ T6899] wiphy_register+0x1dad/0x2ae0 [ 120.506621][ T6899] ? cfg80211_event_work+0x40/0x40 [ 120.511755][ T6899] ? minstrel_ht_alloc+0x88a/0x990 [ 120.516909][ T6899] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 120.523010][ T6899] ieee80211_register_hw+0x3464/0x4250 [ 120.528523][ T6899] ? ieee80211_tasklet_handler+0x20/0x20 [ 120.534180][ T6899] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 120.540090][ T6899] ? __debug_object_init+0xec/0x450 [ 120.545304][ T6899] ? __asan_memset+0x22/0x40 [ 120.549925][ T6899] ? __hrtimer_init+0x186/0x270 [ 120.554806][ T6899] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 120.560579][ T6899] ? mac80211_hwsim_free+0x220/0x220 [ 120.565888][ T6899] ? rcu_is_watching+0x15/0xb0 [ 120.570679][ T6899] ? kstrndup+0xbd/0x140 [ 120.574961][ T6899] hwsim_new_radio_nl+0xdc9/0x1a90 [ 120.580102][ T6899] ? __nla_validate+0x50/0x50 [ 120.584808][ T6899] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 120.591191][ T6899] ? __nla_parse+0x40/0x50 [ 120.595631][ T6899] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 120.601965][ T6899] genl_family_rcv_msg_doit+0x211/0x310 [ 120.607503][ T6899] ? end_current_label_crit_section+0x170/0x170 [ 120.613739][ T6899] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 120.619629][ T6899] ? bpf_lsm_capable+0x9/0x10 [ 120.624319][ T6899] ? security_capable+0x89/0xb0 [ 120.629172][ T6899] genl_rcv_msg+0x619/0x7a0 [ 120.633668][ T6899] ? genl_bind+0x360/0x360 [ 120.638071][ T6899] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 120.644055][ T6899] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 120.650386][ T6899] ? ref_tracker_free+0x690/0x840 [ 120.655423][ T6899] netlink_rcv_skb+0x241/0x4d0 [ 120.660199][ T6899] ? genl_bind+0x360/0x360 [ 120.664615][ T6899] ? netlink_ack+0x1180/0x1180 [ 120.669387][ T6899] ? __lock_acquire+0x7d40/0x7d40 [ 120.674412][ T6899] ? down_read+0x1ac/0x2e0 [ 120.678824][ T6899] genl_rcv+0x28/0x40 [ 120.682810][ T6899] netlink_unicast+0x751/0x8d0 [ 120.687591][ T6899] netlink_sendmsg+0x8d0/0xbf0 [ 120.692350][ T6899] ? lockdep_hardirqs_on+0x98/0x150 [ 120.697550][ T6899] ? netlink_getsockopt+0x590/0x590 [ 120.702752][ T6899] ? aa_sock_msg_perm+0x94/0x150 [ 120.707701][ T6899] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 120.712986][ T6899] ? security_socket_sendmsg+0x80/0xa0 [ 120.718448][ T6899] ? netlink_getsockopt+0x590/0x590 [ 120.723648][ T6899] ____sys_sendmsg+0x5ba/0x960 [ 120.728412][ T6899] ? __asan_memset+0x22/0x40 [ 120.732995][ T6899] ? __sys_sendmsg_sock+0x30/0x30 [ 120.738009][ T6899] ? __import_iovec+0x5f2/0x850 [ 120.742875][ T6899] ? import_iovec+0x73/0xa0 [ 120.747374][ T6899] ___sys_sendmsg+0x2a6/0x360 [ 120.752047][ T6899] ? __sys_sendmsg+0x2a0/0x2a0 [ 120.756844][ T6899] __se_sys_sendmsg+0x1c2/0x2b0 [ 120.761690][ T6899] ? __x64_sys_sendmsg+0x80/0x80 [ 120.766654][ T6899] ? lockdep_hardirqs_on+0x98/0x150 [ 120.771853][ T6899] do_syscall_64+0x55/0xa0 [ 120.776262][ T6899] ? clear_bhb_loop+0x40/0x90 [ 120.780931][ T6899] ? clear_bhb_loop+0x40/0x90 [ 120.785609][ T6899] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 120.791497][ T6899] RIP: 0033:0x7f62a219c819 [ 120.795916][ T6899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.815512][ T6899] RSP: 002b:00007f62a3102028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 120.823925][ T6899] RAX: ffffffffffffffda RBX: 00007f62a2416090 RCX: 00007f62a219c819 [ 120.831889][ T6899] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000009 [ 120.839850][ T6899] RBP: 00007f62a2232c91 R08: 0000000000000000 R09: 0000000000000000 [ 120.847816][ T6899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.855779][ T6899] R13: 00007f62a2416128 R14: 00007f62a2416090 R15: 00007ffcdd5a9f78 [ 120.863764][ T6899] [ 121.076900][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.183491][ T6911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.612066][ T6928] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 121.735331][ T6941] netlink: 144 bytes leftover after parsing attributes in process `syz.0.315'. [ 122.230716][ T6954] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.320'. [ 122.565605][ T6953] lo: entered allmulticast mode [ 122.578826][ T6955] lo: entered promiscuous mode [ 122.591869][ T6955] lo: left allmulticast mode [ 122.642486][ T6959] validate_nla: 1 callbacks suppressed [ 122.642499][ T6959] netlink: 'syz.1.322': attribute type 8 has an invalid length. [ 122.697011][ T6959] netlink: 156 bytes leftover after parsing attributes in process `syz.1.322'. [ 123.572570][ T6981] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.325'. [ 124.616067][ T6996] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 124.728166][ T7005] lo: entered allmulticast mode [ 124.744592][ T7005] lo: entered promiscuous mode [ 124.749781][ T7005] lo: left allmulticast mode [ 124.773943][ T7006] netlink: 'syz.3.334': attribute type 8 has an invalid length. [ 124.781638][ T7006] netlink: 156 bytes leftover after parsing attributes in process `syz.3.334'. [ 124.856677][ T7008] netlink: 'syz.2.335': attribute type 21 has an invalid length. [ 124.904742][ T7008] netlink: 156 bytes leftover after parsing attributes in process `syz.2.335'. [ 124.971418][ T7010] mac80211_hwsim hwsim6 ..ãc¤±: renamed from wlan1 (while UP) [ 126.347828][ T7048] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 126.903149][ T7056] netlink: 'syz.2.347': attribute type 8 has an invalid length. [ 126.911102][ T7056] netlink: 156 bytes leftover after parsing attributes in process `syz.2.347'. [ 126.941510][ T7060] lo: entered allmulticast mode [ 126.967061][ T7059] syzkaller0: tun_chr_ioctl cmd 1074812117 [ 126.988500][ T7060] lo: entered promiscuous mode [ 127.012911][ T7060] lo: left allmulticast mode [ 127.293994][ T7069] netlink: 'syz.1.352': attribute type 21 has an invalid length. [ 127.301879][ T7069] netlink: 156 bytes leftover after parsing attributes in process `syz.1.352'. [ 127.337644][ T7068] netlink: 'syz.0.351': attribute type 10 has an invalid length. [ 127.386715][ T7068] netlink: 212412 bytes leftover after parsing attributes in process `syz.0.351'. [ 127.444459][ T7068] openvswitch: netlink: Flow key attr not present in new flow. [ 130.539453][ T7093] netlink: 'syz.1.359': attribute type 21 has an invalid length. [ 130.566443][ T7093] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 130.582893][ T7093] netlink: 'syz.1.359': attribute type 2 has an invalid length. [ 130.590585][ T7093] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.359'. [ 130.792260][ T7106] netlink: 'syz.0.361': attribute type 8 has an invalid length. [ 130.821584][ T7106] netlink: 156 bytes leftover after parsing attributes in process `syz.0.361'. [ 131.715714][ T7137] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.732590][ T7137] netlink: 22828 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.770998][ T7137] C: renamed from team_slave_0 (while UP) [ 131.846536][ T7137] netlink: 'syz.2.370': attribute type 3 has an invalid length. [ 131.868942][ T7137] netlink: 'syz.2.370': attribute type 1 has an invalid length. [ 131.900114][ T7137] netlink: 116 bytes leftover after parsing attributes in process `syz.2.370'. [ 131.948715][ T7137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 132.157311][ T7142] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.371'. [ 132.193602][ T7144] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.372'. [ 132.224126][ T7142] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.371'. [ 132.284207][ T7142] tipc: Started in network mode [ 132.289138][ T7142] tipc: Node identity b, cluster identity 73 [ 132.401234][ T7142] tipc: Node number set to 11 [ 132.429198][ T7150] netlink: 'syz.2.373': attribute type 33 has an invalid length. [ 132.870937][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.877363][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.963447][ T7167] sit0: entered allmulticast mode [ 133.069478][ T7170] netlink: 'syz.0.382': attribute type 8 has an invalid length. [ 133.082890][ T7170] netlink: 161700 bytes leftover after parsing attributes in process `syz.0.382'. [ 133.119463][ T7175] netlink: 'syz.1.384': attribute type 21 has an invalid length. [ 133.137409][ T7175] netlink: 'syz.1.384': attribute type 10 has an invalid length. [ 133.148410][ T7175] netlink: 55 bytes leftover after parsing attributes in process `syz.1.384'. [ 133.620599][ T7175] team0: Port device macvlan0 removed [ 133.758156][ T7178] team0: Port device macvlan0 added [ 134.179246][ T7203] tipc: Started in network mode [ 134.187208][ T7203] tipc: Node identity b, cluster identity 73 [ 134.203160][ T7203] tipc: Node number set to 11 [ 134.475036][ T7211] syzkaller0: entered promiscuous mode [ 134.905174][ T7216] syzkaller0: entered promiscuous mode [ 134.910719][ T7216] syzkaller0: entered allmulticast mode [ 134.929964][ T7221] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 136.560256][ T7225] validate_nla: 6 callbacks suppressed [ 136.560290][ T7225] netlink: 'syz.3.399': attribute type 10 has an invalid length. [ 136.797704][ T7225] macvlan0: entered promiscuous mode [ 136.830794][ T7225] macvlan0: entered allmulticast mode [ 136.852204][ T7225] veth1_vlan: entered allmulticast mode [ 136.887033][ T7225] team0: Port device macvlan0 added [ 137.204357][ T7239] netlink: 'syz.0.401': attribute type 1 has an invalid length. [ 137.236958][ T7239] __nla_validate_parse: 6 callbacks suppressed [ 137.236972][ T7239] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.401'. [ 137.575701][ T7254] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.404'. [ 137.617786][ T7254] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.404'. [ 137.627921][ T7254] tipc: Started in network mode [ 137.632949][ T7254] tipc: Node identity b, cluster identity 73 [ 137.639249][ T7254] tipc: Node number set to 11 [ 137.891195][ T7264] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.409'. [ 137.998905][ T7266] netlink: 'syz.0.410': attribute type 8 has an invalid length. [ 138.018961][ T7266] netlink: 'syz.0.410': attribute type 1 has an invalid length. [ 138.032222][ T7266] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.410'. [ 138.702314][ T7277] netlink: 'syz.1.413': attribute type 10 has an invalid length. [ 138.824882][ T7272] netlink: 'syz.3.412': attribute type 10 has an invalid length. [ 138.918141][ T7272] team0: Device ipvlan1 failed to register rx_handler [ 139.257872][ T7280] netlink: 'syz.3.414': attribute type 1 has an invalid length. [ 139.287071][ T7280] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.414'. [ 139.614985][ T7294] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.419'. [ 139.639592][ T7294] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.419'. [ 139.661875][ T7294] tipc: Started in network mode [ 139.689110][ T7294] tipc: Node identity b, cluster identity 73 [ 139.718240][ T7294] tipc: Node number set to 11 [ 140.180148][ T7304] netlink: 'syz.2.425': attribute type 10 has an invalid length. [ 140.254054][ T7311] netlink: 'syz.2.425': attribute type 9 has an invalid length. [ 140.273075][ T7311] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.425'. [ 140.477264][ T7318] netlink: 'syz.1.427': attribute type 10 has an invalid length. [ 140.485315][ T7318] netlink: 40 bytes leftover after parsing attributes in process `syz.1.427'. [ 141.294487][ T7343] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 141.301364][ T7343] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 143.673932][ T7408] __nla_validate_parse: 5 callbacks suppressed [ 143.673947][ T7408] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.449'. [ 143.722504][ T7408] openvswitch: netlink: Flow key attribute not present in set flow. [ 143.731094][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.448'. [ 143.810553][ T7404] validate_nla: 4 callbacks suppressed [ 143.810569][ T7404] netlink: 'syz.2.448': attribute type 10 has an invalid length. [ 143.860313][ T7404] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 143.905480][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz.2.448'. [ 144.067796][ T7419] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.450'. [ 145.528637][ T7457] syzkaller0: entered promiscuous mode [ 145.534605][ T7457] syzkaller0: entered allmulticast mode [ 148.210460][ T7475] bridge_slave_1: left allmulticast mode [ 148.216584][ T7475] bridge_slave_1: left promiscuous mode [ 148.223639][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.268297][ T7475] bridge_slave_0: left promiscuous mode [ 148.283384][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.337945][ T7485] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.468'. [ 148.504559][ T7477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 148.525982][ T7483] C: renamed from team_slave_0 (while UP) [ 148.567029][ T7483] netlink: 'syz.1.467': attribute type 3 has an invalid length. [ 148.585022][ T7483] netlink: 'syz.1.467': attribute type 1 has an invalid length. [ 148.608189][ T7483] netlink: 116 bytes leftover after parsing attributes in process `syz.1.467'. [ 148.632882][ T7483] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 148.664574][ T7485] netlink: 14568 bytes leftover after parsing attributes in process `syz.3.468'. [ 148.684155][ T7493] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 148.751115][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.813218][ T7493] bond0: (slave team0): Enslaving as an active interface with an up link [ 148.841351][ T7494] netlink: 'syz.2.470': attribute type 10 has an invalid length. [ 149.679333][ T7511] netlink: 152 bytes leftover after parsing attributes in process `syz.0.474'. [ 149.761190][ T7511] tc_dump_action: action bad kind [ 153.071773][ T7584] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 153.883902][ T7574] netlink: 132 bytes leftover after parsing attributes in process `syz.3.483'. [ 153.898467][ T7582] netlink: 132 bytes leftover after parsing attributes in process `syz.3.483'. [ 153.908320][ T7584] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 153.932202][ T7586] netlink: 'syz.1.484': attribute type 29 has an invalid length. [ 154.343835][ T7604] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.489'. [ 155.649592][ T7635] syzkaller0: entered promiscuous mode [ 155.655583][ T7635] syzkaller0: entered allmulticast mode [ 155.667041][ T7643] netlink: 'syz.0.496': attribute type 10 has an invalid length. [ 155.695387][ T7643] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.714841][ T7643] bond0: (slave team0): Enslaving as an active interface with an up link [ 155.723794][ T7649] netlink: 'syz.2.499': attribute type 10 has an invalid length. [ 155.737664][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.2.499'. [ 155.748598][ T7649] batadv0: entered promiscuous mode [ 155.755018][ T7649] batadv0: entered allmulticast mode [ 155.763350][ T7649] bridge0: port 3(batadv0) entered blocking state [ 155.770346][ T7649] bridge0: port 3(batadv0) entered disabled state [ 155.859498][ T7649] bridge0: port 3(batadv0) entered blocking state [ 155.866938][ T7649] bridge0: port 3(batadv0) entered forwarding state [ 155.887337][ T1128] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 155.897242][ T1128] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 157.610442][ T7660] netlink: 'syz.2.503': attribute type 21 has an invalid length. [ 157.618881][ T7660] netlink: 164 bytes leftover after parsing attributes in process `syz.2.503'. [ 157.780103][ T7665] netlink: 'syz.0.506': attribute type 2 has an invalid length. [ 158.012761][ T7675] netlink: 'syz.3.509': attribute type 10 has an invalid length. [ 160.883425][ T7675] team0: left allmulticast mode [ 160.888396][ T7675] team_slave_1: left allmulticast mode [ 160.907780][ T7675] macvlan0: left allmulticast mode [ 160.914058][ T7675] veth1_vlan: left allmulticast mode [ 160.929886][ T7675] team0: left promiscuous mode [ 160.939301][ T7675] team_slave_0: left promiscuous mode [ 160.963242][ T7675] team_slave_1: left promiscuous mode [ 160.969083][ T7675] macvlan0: left promiscuous mode [ 160.974927][ T7675] GPL: port 1(team0) entered disabled state [ 160.988351][ T7675] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.020357][ T7675] bond0: (slave team0): Enslaving as an active interface with an up link [ 161.513025][ T7702] netlink: 'syz.1.511': attribute type 10 has an invalid length. [ 161.542627][ T7702] netlink: 40 bytes leftover after parsing attributes in process `syz.1.511'. [ 161.572708][ T7702] batadv0: entered promiscuous mode [ 161.602573][ T7702] batadv0: entered allmulticast mode [ 161.622693][ T7702] bridge0: port 3(batadv0) entered blocking state [ 161.633796][ T7702] bridge0: port 3(batadv0) entered disabled state [ 161.702307][ T7702] bridge0: port 3(batadv0) entered blocking state [ 161.711398][ T7702] bridge0: port 3(batadv0) entered forwarding state [ 161.750847][ T7712] netlink: 10 bytes leftover after parsing attributes in process `syz.2.517'. [ 162.206086][ T998] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 162.215740][ T998] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 162.340924][ T7731] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.523'. [ 162.471516][ T7735] netlink: 'syz.2.522': attribute type 10 has an invalid length. [ 163.118665][ T7750] netlink: 'syz.0.529': attribute type 10 has an invalid length. [ 163.153450][ T7750] netlink: 40 bytes leftover after parsing attributes in process `syz.0.529'. [ 163.200412][ T7750] batadv0: entered promiscuous mode [ 163.218324][ T7750] batadv0: entered allmulticast mode [ 163.243865][ T7750] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 163.871256][ T7771] netlink: 'syz.1.535': attribute type 10 has an invalid length. [ 163.930682][ T7771] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.985155][ T7771] bond0: (slave team0): Enslaving as an active interface with an up link [ 166.653109][ T7800] netlink: 'syz.0.542': attribute type 10 has an invalid length. [ 166.693285][ T7800] netlink: 40 bytes leftover after parsing attributes in process `syz.0.542'. [ 166.727938][ T7800] ipvlan1: entered promiscuous mode [ 166.741016][ T7800] ipvlan1: entered allmulticast mode [ 166.751104][ T7800] veth0_vlan: entered allmulticast mode [ 166.761508][ T7800] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 167.432283][ T7810] netlink: 'syz.3.543': attribute type 10 has an invalid length. [ 167.441672][ T7810] netlink: 40 bytes leftover after parsing attributes in process `syz.3.543'. [ 167.457236][ T7810] batadv0: entered promiscuous mode [ 167.464810][ T7810] batadv0: entered allmulticast mode [ 167.532395][ T7810] bridge0: port 3(batadv0) entered blocking state [ 167.570218][ T7810] bridge0: port 3(batadv0) entered disabled state [ 167.716590][ T7810] bridge0: port 3(batadv0) entered blocking state [ 167.724895][ T7810] bridge0: port 3(batadv0) entered forwarding state [ 168.168003][ T3536] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 168.177503][ T3536] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 170.299586][ T7831] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 170.311361][ T7831] bridge0: port 3(batadv0) entered disabled state [ 170.318654][ T7831] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.326852][ T7831] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.365757][ T7831] bridge0: port 3(batadv0) entered blocking state [ 170.372387][ T7831] bridge0: port 3(batadv0) entered forwarding state [ 170.379539][ T7831] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.386743][ T7831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.394243][ T7831] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.401413][ T7831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.488501][ T7831] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 170.529733][ T7840] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.553'. [ 170.602002][ T7842] netlink: 'syz.3.551': attribute type 2 has an invalid length. [ 170.711952][ T7848] netlink: 'syz.1.556': attribute type 10 has an invalid length. [ 170.779155][ T7848] team0: Port device geneve1 added [ 171.222770][ T7862] pim6reg0: tun_chr_ioctl cmd 2147767520 [ 171.417936][ T7867] pim6reg0: tun_chr_ioctl cmd 2147767520 [ 171.519207][ T7873] netlink: 'syz.0.565': attribute type 39 has an invalid length. [ 171.830093][ T7878] netlink: 'syz.1.566': attribute type 21 has an invalid length. [ 171.846467][ T7878] netlink: 120 bytes leftover after parsing attributes in process `syz.1.566'. [ 171.869706][ T7879] netlink: 822 bytes leftover after parsing attributes in process `syz.2.567'. [ 171.894258][ T7879] veth0_to_bond: invalid flags given to default FDB implementation [ 172.580248][ T7902] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.573'. [ 173.143919][ T7916] netlink: 'syz.2.579': attribute type 10 has an invalid length. [ 173.748125][ T7916] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.772539][ T7916] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.792943][ T7916] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.812944][ T7916] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.841385][ T7916] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.850435][ T7916] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.859804][ T7916] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.868918][ T7916] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.887059][ T7916] team0: Port device geneve1 added [ 174.237796][ T7933] netlink: 60 bytes leftover after parsing attributes in process `syz.0.583'. [ 174.315326][ T7937] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.582'. [ 174.602991][ T7947] netlink: 'syz.3.585': attribute type 27 has an invalid length. [ 174.611080][ T7947] netlink: 152 bytes leftover after parsing attributes in process `syz.3.585'. [ 174.621623][ T7947] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 175.115795][ T7956] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.588'. [ 175.137726][ T7956] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 175.937559][ T7982] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.597'. [ 176.299400][ T8003] netlink: 'syz.2.601': attribute type 2 has an invalid length. [ 176.485961][ T8010] netlink: 'syz.1.603': attribute type 9 has an invalid length. [ 177.041090][ T8023] netlink: 'syz.0.608': attribute type 39 has an invalid length. [ 178.194712][ T8028] delete_channel: no stack [ 178.348376][ T8037] netlink: 112 bytes leftover after parsing attributes in process `syz.0.613'. [ 178.360764][ T5086] Bluetooth: hci3: unexpected subevent 0x01 length: 150 > 18 [ 178.372690][ T5086] Bluetooth: hci3: Invalid handle: 0xf800 > 0x0eff [ 178.725538][ T8054] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.618'. [ 179.239306][ T8073] netlink: 'syz.2.621': attribute type 2 has an invalid length. [ 179.275589][ T8073] netlink: 14 bytes leftover after parsing attributes in process `syz.2.621'. [ 179.848834][ T8086] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.626'. [ 180.879095][ T8088] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.689314][ T8090] netlink: 'syz.3.627': attribute type 10 has an invalid length. [ 181.711728][ T8090] team0: Port device wlan1 added [ 182.064832][ T8114] netlink: 'syz.3.633': attribute type 2 has an invalid length. [ 182.072530][ T8114] netlink: 198112 bytes leftover after parsing attributes in process `syz.3.633'. [ 182.498441][ T8131] netlink: 132 bytes leftover after parsing attributes in process `syz.3.638'. [ 182.586497][ T8132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 182.849257][ T8137] netlink: 763 bytes leftover after parsing attributes in process `syz.1.641'. [ 183.213603][ T8145] hsr0: entered promiscuous mode [ 183.236693][ T8145] hsr0: entered allmulticast mode [ 183.259663][ T8145] hsr_slave_0: entered allmulticast mode [ 183.286531][ T8145] hsr_slave_1: entered allmulticast mode [ 183.602382][ T8158] netlink: 'syz.0.646': attribute type 2 has an invalid length. [ 183.622319][ T8158] netlink: 198112 bytes leftover after parsing attributes in process `syz.0.646'. [ 185.287659][ T8206] netlink: 'syz.2.659': attribute type 3 has an invalid length. [ 185.554896][ T8220] netlink: 'syz.2.660': attribute type 2 has an invalid length. [ 185.573720][ T8220] netlink: 198112 bytes leftover after parsing attributes in process `syz.2.660'. [ 186.526453][ T8288] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.677'. [ 186.585724][ T8294] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 186.592208][ T8294] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 186.787522][ T8298] netlink: 'syz.0.680': attribute type 10 has an invalid length. [ 186.946933][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.992406][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.353452][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.362028][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.192492][ T8336] netlink: 'syz.3.689': attribute type 39 has an invalid length. [ 189.297231][ T8353] veth0_vlan: entered allmulticast mode [ 189.347177][ T8353] syzkaller0: entered promiscuous mode [ 189.390707][ T8353] syzkaller0: entered allmulticast mode [ 189.419138][ T8354] netlink: 'syz.3.694': attribute type 3 has an invalid length. [ 189.481902][ T8354] netlink: 132 bytes leftover after parsing attributes in process `syz.3.694'. [ 190.125110][ T8363] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 190.181025][ T8363] bridge0: port 3(batadv0) entered disabled state [ 190.187939][ T8363] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.195323][ T8363] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.248709][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.268833][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.375576][ T8363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.400650][ T8363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.469758][ T8361] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 190.477044][ T8361] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 190.791262][ T8363] bridge0: port 3(batadv0) entered disabled state [ 191.187001][ T8395] netlink: 'syz.0.705': attribute type 21 has an invalid length. [ 191.262917][ T5775] Bluetooth: hci2: command 0x0406 tx timeout [ 191.264555][ T5778] Bluetooth: hci0: command 0x0406 tx timeout [ 191.330705][ T8398] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.704'. [ 191.508933][ T8414] netlink: 128 bytes leftover after parsing attributes in process `syz.3.710'. [ 191.582901][ T5777] Bluetooth: hci1: command 0x0406 tx timeout [ 191.589021][ T5086] Bluetooth: hci3: command 0x0406 tx timeout [ 191.615556][ T8422] netlink: 'syz.2.709': attribute type 3 has an invalid length. [ 191.706786][ T8422] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.709'. [ 191.836283][ T8428] netlink: 'syz.3.715': attribute type 10 has an invalid length. [ 191.846976][ T8428] bridge0: port 3(batadv0) entered disabled state [ 191.854046][ T8428] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.953294][ T8428] bridge0: port 3(batadv0) entered blocking state [ 191.959917][ T8428] bridge0: port 3(batadv0) entered forwarding state [ 191.967036][ T8428] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.974320][ T8428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.989124][ T8428] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 192.136423][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.151273][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.193824][ T8437] netlink: 'syz.0.717': attribute type 28 has an invalid length. [ 192.197763][ T8428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.201893][ T8437] netlink: 'syz.0.717': attribute type 29 has an invalid length. [ 192.201913][ T8437] netlink: 132 bytes leftover after parsing attributes in process `syz.0.717'. [ 192.247213][ T8428] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.379667][ T8428] bridge0: port 3(batadv0) entered disabled state [ 192.571005][ T8428] bridge0: port 3(batadv0) entered disabled state [ 192.716104][ T8450] netlink: 'syz.1.721': attribute type 10 has an invalid length. [ 192.738263][ T8450] netlink: 2 bytes leftover after parsing attributes in process `syz.1.721'. [ 192.762620][ T8450] bridge0: port 3(hsr0) entered blocking state [ 192.780787][ T8450] bridge0: port 3(hsr0) entered disabled state [ 193.012510][ T8454] netlink: 128 bytes leftover after parsing attributes in process `syz.1.722'. [ 194.318297][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326098][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.450546][ T8474] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.730'. [ 195.520498][ T8478] pim6reg1: entered promiscuous mode [ 195.526298][ T8478] pim6reg1: entered allmulticast mode [ 197.357012][ T8501] netlink: 'syz.2.735': attribute type 10 has an invalid length. [ 197.383479][ T8501] bridge0: port 3(batadv0) entered disabled state [ 197.390361][ T8501] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.397997][ T8501] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.446454][ T8501] bridge0: port 3(batadv0) entered blocking state [ 197.453076][ T8501] bridge0: port 3(batadv0) entered forwarding state [ 197.459955][ T8501] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.467178][ T8501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.474668][ T8501] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.481845][ T8501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.526153][ T8501] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 197.571541][ T8505] netlink: 128 bytes leftover after parsing attributes in process `syz.0.736'. [ 197.675707][ T8501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.689258][ T8501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.745407][ T8501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.751591][ T8515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 197.777754][ T8501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.103040][ T8501] bridge0: port 3(batadv0) entered disabled state [ 200.158908][ T8501] bridge0: port 3(batadv0) entered disabled state [ 200.234530][ T8515] netlink: 60 bytes leftover after parsing attributes in process `syz.0.739'. [ 200.672136][ T8540] netlink: 'syz.1.756': attribute type 21 has an invalid length. [ 200.704606][ T8540] netlink: 156 bytes leftover after parsing attributes in process `syz.1.756'. [ 200.722189][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.756'. [ 200.866478][ T8547] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 200.880984][ T8547] syzkaller1: Linktype set failed because interface is up [ 201.027345][ T8557] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 201.061523][ T8557] bond0: (slave ..ãc¤±): Enslaving as an active interface with an up link [ 201.214444][ T8561] netlink: 4 bytes leftover after parsing attributes in process `syz.0.757'. [ 201.599928][ T8581] macvlan1: entered promiscuous mode [ 201.619073][ T8572] netlink: 'syz.1.760': attribute type 8 has an invalid length. [ 201.642278][ T8572] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.760'. [ 201.770427][ T8587] netlink: 'syz.3.765': attribute type 21 has an invalid length. [ 203.042146][ T8617] pim6reg1: entered promiscuous mode [ 203.067005][ T8617] pim6reg1: entered allmulticast mode [ 205.803586][ T8668] netlink: 'syz.3.790': attribute type 10 has an invalid length. [ 205.863853][ T8668] team0: Port device wlan1 removed [ 205.921526][ T8668] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 206.407330][ T8678] netlink: 132 bytes leftover after parsing attributes in process `syz.3.792'. [ 206.694655][ T8678] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.792'. [ 207.062900][ T8683] netlink: 'syz.0.793': attribute type 16 has an invalid length. [ 207.084512][ T8683] netlink: 156 bytes leftover after parsing attributes in process `syz.0.793'. [ 207.302457][ T8681] netlink: 'syz.0.793': attribute type 1 has an invalid length. [ 207.347969][ T8681] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.793'. [ 208.274688][ T8707] netlink: 'syz.2.800': attribute type 4 has an invalid length. [ 208.296669][ T8707] netlink: 152 bytes leftover after parsing attributes in process `syz.2.800'. [ 208.331228][ T8707] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 209.123704][ T8717] netlink: 'syz.2.804': attribute type 21 has an invalid length. [ 209.144873][ T8717] netlink: 'syz.2.804': attribute type 4 has an invalid length. [ 209.153968][ T8717] netlink: 156 bytes leftover after parsing attributes in process `syz.2.804'. [ 210.054755][ T8746] netlink: 'syz.0.812': attribute type 4 has an invalid length. [ 210.086159][ T8746] netlink: 152 bytes leftover after parsing attributes in process `syz.0.812'. [ 210.144546][ T8746] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 211.425322][ T8787] netlink: 'syz.1.824': attribute type 2 has an invalid length. [ 211.448568][ T8787] netlink: 17267 bytes leftover after parsing attributes in process `syz.1.824'. [ 211.670619][ T8795] netlink: 'syz.3.828': attribute type 4 has an invalid length. [ 211.703753][ T8795] netlink: 152 bytes leftover after parsing attributes in process `syz.3.828'. [ 211.762383][ T8795] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 212.400393][ T8830] netlink: 'syz.3.838': attribute type 9 has an invalid length. [ 212.418419][ T8830] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.838'. [ 212.562744][ T8833] netlink: 'syz.3.838': attribute type 9 has an invalid length. [ 212.571186][ T8833] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.838'. [ 213.209722][ T8839] netlink: 'syz.1.841': attribute type 4 has an invalid length. [ 213.231969][ T8839] netlink: 152 bytes leftover after parsing attributes in process `syz.1.841'. [ 213.272137][ T8839] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 213.438225][ T8851] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.845'. [ 213.475575][ T8851] netlink: 'syz.0.845': attribute type 2 has an invalid length. [ 213.917651][ T8240] wlan1: Trigger new scan to find an IBSS to join [ 214.081250][ T8876] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.853'. [ 214.781025][ T8893] netlink: 'syz.1.860': attribute type 2 has an invalid length. [ 214.796209][ T8893] netlink: 184 bytes leftover after parsing attributes in process `syz.1.860'. [ 215.214377][ T8906] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.864'. [ 216.764654][ T8932] netlink: 'syz.2.874': attribute type 10 has an invalid length. [ 217.394929][ T8940] delete_channel: no stack [ 217.902948][ T8236] wlan1: Trigger new scan to find an IBSS to join [ 218.301674][ T8968] netlink: 'syz.0.884': attribute type 21 has an invalid length. [ 219.476611][ T8983] netlink: 'syz.1.887': attribute type 11 has an invalid length. [ 219.484530][ T8983] netlink: 212788 bytes leftover after parsing attributes in process `syz.1.887'. [ 220.943119][ T8240] wlan1: Trigger new scan to find an IBSS to join [ 221.410107][ T8236] wlan1: Creating new IBSS network, BSSID fe:54:3c:cb:b8:ef [ 222.118434][ T9001] netlink: 'syz.3.896': attribute type 28 has an invalid length. [ 222.128800][ T51] Bluetooth: hci2: unexpected event 0x2c length: 151 > 17 [ 222.131496][ T9001] netlink: 'syz.3.896': attribute type 3 has an invalid length. [ 222.147910][ T9001] netlink: 132 bytes leftover after parsing attributes in process `syz.3.896'. [ 222.216265][ T9001] netlink: 'syz.3.896': attribute type 39 has an invalid length. [ 222.756106][ T9015] netlink: 188 bytes leftover after parsing attributes in process `syz.1.902'. [ 222.772364][ T9015] netlink: 'syz.1.902': attribute type 1 has an invalid length. [ 222.781517][ T9015] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.902'. [ 222.795676][ T9018] tap0: tun_chr_ioctl cmd 1074025677 [ 222.801101][ T9018] tap0: linktype set to 780 [ 223.228714][ T9041] netlink: 212912 bytes leftover after parsing attributes in process `syz.0.910'. [ 223.239149][ T9041] openvswitch: netlink: IP tunnel dst address not specified [ 223.239359][ T9039] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.909'. [ 223.318782][ T9045] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 223.327242][ T9045] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 223.354117][ T9045] netlink: 'syz.0.911': attribute type 10 has an invalid length. [ 224.722209][ T9068] Ÿë: port 1(veth0_to_team) entered blocking state [ 224.730907][ T9068] Ÿë: port 1(veth0_to_team) entered disabled state [ 224.739217][ T9068] veth0_to_team: entered allmulticast mode [ 224.747135][ T9068] veth0_to_team: entered promiscuous mode [ 224.757816][ T9069] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 224.774643][ T9069] netlink: 55 bytes leftover after parsing attributes in process `syz.3.917'. [ 224.811772][ T9067] netlink: 'syz.3.917': attribute type 10 has an invalid length. [ 224.821459][ T9067] netlink: 55 bytes leftover after parsing attributes in process `syz.3.917'. [ 224.852367][ T9075] netlink: 'syz.0.918': attribute type 30 has an invalid length. [ 224.875000][ T9076] netlink: 'syz.0.918': attribute type 30 has an invalid length. [ 225.246265][ T51] Bluetooth: hci0: unknown advertising packet type: 0x80 [ 225.246334][ T51] Bluetooth: hci0: Malformed LE Event: 0x02 [ 225.933179][ T9098] netlink: 'syz.0.926': attribute type 21 has an invalid length. [ 225.943325][ T9098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.926'. [ 226.025629][ T9089] delete_channel: no stack [ 226.146321][ T9105] lo: entered allmulticast mode [ 226.256036][ T9105] lo: entered promiscuous mode [ 226.260898][ T9105] lo: left allmulticast mode [ 226.376701][ T9105] netlink: 132 bytes leftover after parsing attributes in process `syz.2.927'. [ 227.014089][ T9132] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.937'. [ 227.274319][ T51] Bluetooth: hci1: unknown advertising packet type: 0x80 [ 227.274389][ T51] Bluetooth: hci1: Malformed LE Event: 0x02 [ 227.289482][ T9130] team0: Device veth0_macvtap failed to register rx_handler [ 227.729825][ T9138] validate_nla: 2 callbacks suppressed [ 227.729842][ T9138] netlink: 'syz.0.939': attribute type 9 has an invalid length. [ 227.764122][ T9138] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.939'. [ 227.892134][ T9133] delete_channel: no stack [ 228.213016][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.1.940'. [ 229.064798][ T9166] netlink: 'syz.2.948': attribute type 10 has an invalid length. [ 229.983598][ T51] Bluetooth: hci2: unknown advertising packet type: 0x80 [ 229.983669][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 230.574547][ T9173] delete_channel: no stack [ 231.044586][ T9196] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.956'. [ 231.925999][ T9201] netlink: 'syz.1.958': attribute type 10 has an invalid length. [ 231.948774][ T9201] team0: Device veth0_macvtap failed to register rx_handler [ 231.971797][ T9200] netlink: 'syz.3.960': attribute type 33 has an invalid length. [ 231.980039][ T9200] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.960'. [ 233.182737][ T9237] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 233.191997][ T9237] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.969'. [ 234.595320][ T9277] netlink: 'syz.1.978': attribute type 10 has an invalid length. [ 234.614011][ T9277] netlink: 40 bytes leftover after parsing attributes in process `syz.1.978'. [ 234.631373][ T9277] team0: entered promiscuous mode [ 234.640699][ T9277] C: entered promiscuous mode [ 234.651509][ T9277] team_slave_1: entered promiscuous mode [ 234.670223][ T9277] geneve1: entered promiscuous mode [ 234.697592][ T9277] team0: entered allmulticast mode [ 234.725725][ T9277] C: entered allmulticast mode [ 234.733056][ T9269] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.977'. [ 234.746758][ T9277] team_slave_1: entered allmulticast mode [ 234.759157][ T9277] geneve1: entered allmulticast mode [ 234.879315][ T9277] bond0: (slave team0): Releasing backup interface [ 234.922404][ T9277] bridge0: port 4(team0) entered blocking state [ 235.006969][ T9277] bridge0: port 4(team0) entered disabled state [ 235.099473][ T9269] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 236.256024][ T9323] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.991'. [ 236.275900][ T9323] openvswitch: netlink: Key type 29 is not supported [ 236.346610][ T9323] netlink: 'syz.0.991': attribute type 9 has an invalid length. [ 236.354839][ T9323] netlink: 399 bytes leftover after parsing attributes in process `syz.0.991'. [ 236.494908][ T9326] netlink: 196 bytes leftover after parsing attributes in process `syz.1.992'. [ 237.215778][ T9344] netlink: 'syz.3.996': attribute type 9 has an invalid length. [ 237.232610][ T9344] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.996'. [ 237.392645][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.998'. [ 237.433686][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.998'. [ 237.445038][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.998'. [ 237.458154][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.998'. [ 237.470003][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.998'. [ 237.482614][ T9349] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.998'. [ 237.537146][ T9355] netlink: 'syz.0.1000': attribute type 10 has an invalid length. [ 237.949976][ T9370] openvswitch: netlink: Flow key attribute not present in set flow. [ 239.646977][ T9424] netlink: 'syz.3.1020': attribute type 21 has an invalid length. [ 239.673099][ T9424] netlink: 'syz.3.1020': attribute type 10 has an invalid length. [ 239.787363][ T9424] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 239.980252][ T9429] netlink: 'syz.3.1022': attribute type 21 has an invalid length. [ 239.989907][ T9429] netlink: 'syz.3.1022': attribute type 20 has an invalid length. [ 240.842624][ T9458] netlink: 'syz.0.1029': attribute type 21 has an invalid length. [ 241.230188][ T9471] netlink: 'syz.0.1034': attribute type 10 has an invalid length. [ 241.422671][ T9483] __nla_validate_parse: 67 callbacks suppressed [ 241.422682][ T9483] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.1037'. [ 242.389794][ T9504] netlink: 'syz.1.1043': attribute type 21 has an invalid length. [ 242.415393][ T9504] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1043'. [ 242.611679][ T9504] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1043'. [ 242.869368][ T9523] IPv6: Can't replace route, no match found [ 242.887104][ T9524] IPv6: Can't replace route, no match found [ 243.033645][ T9528] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1050'. [ 243.290614][ T9554] syz.0.1059: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 243.328351][ T9554] CPU: 0 PID: 9554 Comm: syz.0.1059 Not tainted syzkaller #0 [ 243.335767][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.345848][ T9554] Call Trace: [ 243.349151][ T9554] [ 243.352096][ T9554] dump_stack_lvl+0x18c/0x250 [ 243.356802][ T9554] ? show_regs_print_info+0x20/0x20 [ 243.362030][ T9554] ? load_image+0x420/0x420 [ 243.366565][ T9554] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 243.373002][ T9554] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 243.379525][ T9554] warn_alloc+0x246/0x340 [ 243.383879][ T9554] ? stack_trace_save+0xaa/0x100 [ 243.388842][ T9554] ? zone_watermark_ok_safe+0x230/0x230 [ 243.394418][ T9554] ? kasan_set_track+0x5f/0x70 [ 243.399197][ T9554] ? kasan_set_track+0x4e/0x70 [ 243.403969][ T9554] ? __kasan_kmalloc+0x8f/0xa0 [ 243.408743][ T9554] ? xsk_init_queue+0xad/0x100 [ 243.413512][ T9554] ? xsk_setsockopt+0x4e5/0x760 [ 243.418428][ T9554] ? do_sock_setsockopt+0x175/0x1a0 [ 243.423629][ T9554] ? __x64_sys_setsockopt+0x182/0x200 [ 243.429017][ T9554] __vmalloc_node_range+0x126/0x1330 [ 243.434350][ T9554] ? free_vm_area+0x50/0x50 [ 243.438868][ T9554] vmalloc_user+0x74/0x80 [ 243.443212][ T9554] ? xskq_create+0xbf/0x170 [ 243.447721][ T9554] xskq_create+0xbf/0x170 [ 243.452057][ T9554] xsk_init_queue+0xad/0x100 [ 243.456664][ T9554] xsk_setsockopt+0x4e5/0x760 [ 243.461352][ T9554] ? xsk_poll+0x680/0x680 [ 243.465687][ T9554] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 243.471848][ T9554] ? xsk_poll+0x680/0x680 [ 243.476179][ T9554] ? do_sock_setsockopt+0x15e/0x1a0 [ 243.481387][ T9554] ? xsk_poll+0x680/0x680 [ 243.485730][ T9554] do_sock_setsockopt+0x175/0x1a0 [ 243.490752][ T9554] __x64_sys_setsockopt+0x182/0x200 [ 243.495955][ T9554] do_syscall_64+0x55/0xa0 [ 243.500372][ T9554] ? clear_bhb_loop+0x40/0x90 [ 243.505049][ T9554] ? clear_bhb_loop+0x40/0x90 [ 243.509725][ T9554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 243.515623][ T9554] RIP: 0033:0x7f62a219c819 [ 243.520050][ T9554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.539663][ T9554] RSP: 002b:00007f62a3123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 243.548084][ T9554] RAX: ffffffffffffffda RBX: 00007f62a2415fa0 RCX: 00007f62a219c819 [ 243.556072][ T9554] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 243.564036][ T9554] RBP: 00007f62a2232c91 R08: 0000000000000004 R09: 0000000000000000 [ 243.572004][ T9554] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 243.579972][ T9554] R13: 00007f62a2416038 R14: 00007f62a2415fa0 R15: 00007ffcdd5a9f78 [ 243.587963][ T9554] [ 243.605232][ T9554] Mem-Info: [ 243.609988][ T9554] active_anon:17713 inactive_anon:0 isolated_anon:0 [ 243.609988][ T9554] active_file:16793 inactive_file:39991 isolated_file:0 [ 243.609988][ T9554] unevictable:768 dirty:153 writeback:0 [ 243.609988][ T9554] slab_reclaimable:10581 slab_unreclaimable:92612 [ 243.609988][ T9554] mapped:24069 shmem:1361 pagetables:581 [ 243.609988][ T9554] sec_pagetables:0 bounce:0 [ 243.609988][ T9554] kernel_misc_reclaimable:0 [ 243.609988][ T9554] free:1329162 free_pcp:12766 free_cma:0 [ 243.659103][ T9554] Node 0 active_anon:70852kB inactive_anon:0kB active_file:67172kB inactive_file:159760kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:96276kB dirty:612kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11772kB pagetables:2324kB sec_pagetables:0kB all_unreclaimable? no [ 243.699554][ T9554] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 243.730185][ T9554] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.801442][ T9552] netlink: 'syz.1.1058': attribute type 1 has an invalid length. [ 243.810042][ T9554] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 243.816484][ T9554] Node 0 DMA32 free:1407880kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:70912kB inactive_anon:0kB active_file:67172kB inactive_file:158936kB unevictable:1536kB writepending:612kB present:3129332kB managed:2586952kB mlocked:0kB bounce:0kB free_pcp:29032kB local_pcp:16188kB free_cma:0kB [ 243.854699][ T9552] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1058'. [ 243.855994][ T9562] netlink: 'syz.1.1058': attribute type 4 has an invalid length. [ 243.873097][ T9562] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1058'. [ 243.893887][ T9554] lowmem_reserve[]: 0 0 0 0 0 [ 243.901677][ T9554] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 243.958637][ T9554] lowmem_reserve[]: 0 0 0 0 0 [ 243.967442][ T9554] Node 1 Normal free:3893336kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:17824kB local_pcp:7936kB free_cma:0kB [ 243.995584][ T9562] .`: renamed from bond0 (while UP) [ 244.005147][ T9554] lowmem_reserve[]: 0 0 0 0 0 [ 244.054018][ T9554] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 244.099142][ T9554] Node 0 DMA32: 374*4kB (UME) 592*8kB (UM) 315*16kB (UM) 418*32kB (UME) 1241*64kB (UME) 550*128kB (UME) 217*256kB (UME) 72*512kB (UM) 28*1024kB (UME) 13*2048kB (UM) 265*4096kB (UM) = 1407624kB [ 244.126045][ T9554] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 244.139914][ T9554] Node 1 Normal: 178*4kB (UM) 40*8kB (UME) 27*16kB (UME) 81*32kB (UME) 22*64kB (UME) 6*128kB (UME) 2*256kB (ME) 1*512kB (U) 1*1024kB (E) 1*2048kB (E) 948*4096kB (M) = 3893336kB [ 244.162601][ T9554] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.174184][ T9554] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.184374][ T9554] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 244.196463][ T9554] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 244.207028][ T9554] 58145 total pagecache pages [ 244.211910][ T9554] 0 pages in swap cache [ 244.217079][ T9554] Free swap = 124996kB [ 244.221398][ T9554] Total swap = 124996kB [ 244.230807][ T9554] 2097051 pages RAM [ 244.237340][ T9554] 0 pages HighMem/MovableOnly [ 244.242182][ T9554] 416927 pages reserved [ 244.247748][ T9554] 0 pages cma reserved [ 244.330848][ T9571] netlink: 'syz.2.1062': attribute type 21 has an invalid length. [ 244.339893][ T9571] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1062'. [ 244.437831][ T9571] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1062'. [ 244.793892][ T9598] netlink: 'syz.0.1069': attribute type 9 has an invalid length. [ 245.132554][ T9616] netlink: 'syz.0.1075': attribute type 2 has an invalid length. [ 245.739040][ T9633] netlink: 'syz.2.1078': attribute type 21 has an invalid length. [ 245.752843][ T9633] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1078'. [ 245.762877][ T9633] netlink: 'syz.2.1078': attribute type 4 has an invalid length. [ 245.781100][ T9633] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1078'. [ 245.815828][ T9622] netlink: 'syz.1.1084': attribute type 9 has an invalid length. [ 245.874449][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 245.881333][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 245.901245][ T51] Bluetooth: hci2: Dropping invalid advertising data [ 245.908575][ T51] Bluetooth: hci2: Malformed LE Event: 0x02 [ 245.987477][ T9638] netlink: 'syz.0.1080': attribute type 21 has an invalid length. [ 246.215899][ T9645] delete_channel: no stack [ 246.821305][ T9663] __nla_validate_parse: 3 callbacks suppressed [ 246.821320][ T9663] netlink: 142528 bytes leftover after parsing attributes in process `syz.2.1088'. [ 246.842236][ T9663] netlink: 'syz.2.1088': attribute type 1 has an invalid length. [ 246.984650][ T9668] netlink: 'syz.2.1090': attribute type 9 has an invalid length. [ 247.001048][ T9668] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1090'. [ 247.086783][ T9673] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1092'. [ 247.114697][ T9673] openvswitch: netlink: Key type 29 is not supported [ 247.401431][ T9678] syzkaller0: entered promiscuous mode [ 247.407424][ T9678] syzkaller0: entered allmulticast mode [ 247.906333][ T5825] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 248.119489][ T9692] netlink: 'syz.3.1094': attribute type 9 has an invalid length. [ 249.532168][ T9717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1104'. [ 249.546598][ T9717] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1104'. [ 249.796239][ T9731] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1108'. [ 250.441730][ T9751] netlink: 'syz.1.1116': attribute type 21 has an invalid length. [ 251.044685][ T51] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 251.185957][ T9764] netlink: 'syz.3.1118': attribute type 28 has an invalid length. [ 252.097053][ T9797] netlink: 'syz.3.1128': attribute type 9 has an invalid length. [ 252.112676][ T9797] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1128'. [ 252.180029][ T9800] netlink: 'syz.0.1135': attribute type 21 has an invalid length. [ 252.202982][ T9800] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1135'. [ 252.297523][ T9800] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1135'. [ 252.953397][ T5766] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 253.141003][ T9809] syzkaller0: entered promiscuous mode [ 253.146656][ T9809] syzkaller0: entered allmulticast mode [ 253.727294][ T9821] netlink: 'syz.3.1134': attribute type 21 has an invalid length. [ 254.075644][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1137'. [ 254.153340][ T9835] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1137'. [ 254.315714][ T9839] netlink: 'syz.1.1139': attribute type 21 has an invalid length. [ 254.355651][ T9839] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1139'. [ 254.549578][ T9839] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1139'. [ 255.104595][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 255.113813][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 255.121904][ T5772] Bluetooth: hci3: hardware error 0x00 [ 255.773968][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780285][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.125630][ T9864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.363593][ T5772] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 257.378663][ T9877] syzkaller0: entered promiscuous mode [ 257.443754][ T9877] syzkaller0: entered allmulticast mode [ 257.818540][ T9892] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1152'. [ 258.626451][ T966] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 259.344765][ T9891] netlink: 'syz.3.1152': attribute type 21 has an invalid length. [ 259.352934][ T9891] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1152'. [ 259.365037][ T9907] netlink: 'syz.0.1157': attribute type 2 has an invalid length. [ 259.376526][ T9907] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1157'. [ 259.486357][ T9910] netlink: 65055 bytes leftover after parsing attributes in process `syz.1.1158'. [ 260.010059][ T9934] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1165'. [ 260.121162][ T9937] IPv6: NLM_F_CREATE should be specified when creating new route [ 260.130121][ T9937] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1166'. [ 260.197457][ T9940] netlink: 'syz.3.1167': attribute type 21 has an invalid length. [ 260.209234][ T9940] netlink: 'syz.3.1167': attribute type 1 has an invalid length. [ 260.232413][ T9940] netlink: 16098 bytes leftover after parsing attributes in process `syz.3.1167'. [ 260.277708][ T9944] netlink: 'syz.2.1169': attribute type 5 has an invalid length. [ 260.410435][ T9949] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 260.417999][ T9949] IPv6: NLM_F_CREATE should be set when creating new route [ 260.425750][ T9949] IPv6: NLM_F_CREATE should be set when creating new route [ 260.433320][ T9949] IPv6: NLM_F_CREATE should be set when creating new route [ 260.470358][ T9953] netlink: 'syz.3.1171': attribute type 21 has an invalid length. [ 260.485533][ T9953] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1171'. [ 260.629017][ T9953] netlink: 207508 bytes leftover after parsing attributes in process `syz.3.1171'. [ 261.157040][ T9970] netlink: 'syz.1.1173': attribute type 9 has an invalid length. [ 261.171736][ T9970] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1173'. [ 262.427711][ T9967] netlink: 'syz.1.1173': attribute type 10 has an invalid length. [ 262.532890][ T9971] netlink: 'syz.1.1173': attribute type 9 has an invalid length. [ 262.863743][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 263.117468][ T9997] __nla_validate_parse: 1 callbacks suppressed [ 263.117482][ T9997] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1182'. [ 263.126482][ T9996] netlink: 'syz.1.1181': attribute type 21 has an invalid length. [ 263.143292][ T9997] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 263.869084][ T9997] syzkaller0: entered promiscuous mode [ 263.879101][ T9997] syzkaller0: entered allmulticast mode [ 263.887964][T10009] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1184'. [ 265.913724][ T8237] wlan1: Trigger new scan to find an IBSS to join [ 266.657891][T10064] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1198'. [ 266.668112][T10064] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 266.979690][T10064] syzkaller0: entered promiscuous mode [ 266.985872][T10064] syzkaller0: entered allmulticast mode [ 266.997133][T10074] validate_nla: 1 callbacks suppressed [ 266.997141][T10074] netlink: 'syz.1.1199': attribute type 10 has an invalid length. [ 268.625993][T10094] tap0: tun_chr_ioctl cmd 1074025677 [ 268.631418][T10094] tap0: linktype set to 6 [ 268.943299][ T8234] wlan1: Trigger new scan to find an IBSS to join [ 269.786568][ T8236] tipc: Subscription rejected, illegal request [ 270.605227][T10120] sit0: entered allmulticast mode [ 270.605494][ T8234] wlan1: Creating new IBSS network, BSSID 92:7c:cc:ab:f6:77 [ 270.646616][T10126] netlink: 52015 bytes leftover after parsing attributes in process `syz.0.1212'. [ 271.035671][T10146] netlink: 'syz.1.1220': attribute type 10 has an invalid length. [ 271.045258][T10146] .`: (slave bridge0): Releasing backup interface [ 271.052155][T10146] .`: (slave bridge0): last VLAN challenged slave left bond - VLAN blocking is removed [ 271.064646][T10146] team0: Device bridge0 is already an upper device of the team interface [ 271.128808][T10150] netlink: 199816 bytes leftover after parsing attributes in process `syz.0.1222'. [ 271.412513][T10159] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1225'. [ 271.855447][T10149] delete_channel: no stack [ 277.571275][T10211] netlink: 'syz.2.1237': attribute type 33 has an invalid length. [ 277.579928][T10211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1237'. [ 277.665243][T10212] delete_channel: no stack [ 277.803715][T10216] netlink: 'syz.0.1238': attribute type 10 has an invalid length. [ 278.221337][T10167] delete_channel: no stack [ 278.671136][T10238] netlink: 'syz.0.1246': attribute type 10 has an invalid length. [ 278.793368][T10238] bond0: (slave team0): Releasing backup interface [ 278.865806][T10249] netlink: 'syz.3.1240': attribute type 1 has an invalid length. [ 278.874506][T10249] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1240'. [ 279.099887][T10238] team0 (unregistering): Port device C removed [ 279.307394][T10238] team0 (unregistering): Port device team_slave_1 removed [ 279.412922][T10247] netlink: 'syz.3.1240': attribute type 40 has an invalid length. [ 279.819190][T10265] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1252'. [ 280.080503][T10277] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1256'. [ 280.101107][T10266] netlink: 'syz.2.1251': attribute type 10 has an invalid length. [ 280.600981][T10289] netlink: 'syz.3.1260': attribute type 6 has an invalid length. [ 280.611355][T10289] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1260'. [ 281.094029][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 281.144282][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 281.154368][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 281.164111][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 281.195439][T10306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1264'. [ 281.407614][T10310] netlink: 'syz.2.1265': attribute type 29 has an invalid length. [ 281.418489][T10310] netlink: 'syz.2.1265': attribute type 29 has an invalid length. [ 281.428323][T10310] netlink: 'syz.2.1265': attribute type 29 has an invalid length. [ 283.038861][T10332] validate_nla: 3 callbacks suppressed [ 283.038876][T10332] netlink: 'syz.1.1271': attribute type 10 has an invalid length. [ 283.407859][T10358] __nla_validate_parse: 61 callbacks suppressed [ 283.407874][T10358] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.1277'. [ 283.428714][T10358] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.1277'. [ 283.494775][T10361] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 283.502071][T10361] IPv6: NLM_F_CREATE should be set when creating new route [ 283.509394][T10361] IPv6: NLM_F_CREATE should be set when creating new route [ 283.516692][T10361] IPv6: NLM_F_CREATE should be set when creating new route [ 283.699227][T10375] pim6reg1: entered promiscuous mode [ 283.714985][T10375] pim6reg1: entered allmulticast mode [ 283.951690][T10386] netlink: 'syz.3.1286': attribute type 29 has an invalid length. [ 283.979712][T10386] netlink: 'syz.3.1286': attribute type 29 has an invalid length. [ 283.996495][T10386] netlink: 'syz.3.1286': attribute type 29 has an invalid length. [ 284.005596][T10386] netlink: 'syz.3.1286': attribute type 29 has an invalid length. [ 284.014718][T10386] netlink: 'syz.3.1286': attribute type 29 has an invalid length. [ 284.241730][T10396] netlink: 'syz.2.1291': attribute type 28 has an invalid length. [ 284.250387][T10396] netlink: 'syz.2.1291': attribute type 29 has an invalid length. [ 284.262417][T10396] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1291'. [ 284.421455][T10405] netlink: 'syz.0.1293': attribute type 10 has an invalid length. [ 284.450258][T10405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1293'. [ 284.464087][T10405] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 284.561459][ T5772] Bluetooth: hci0: ISO packet for unknown connection handle 7 [ 284.579593][T10410] netlink: 'syz.1.1295': attribute type 39 has an invalid length. [ 285.284914][T10422] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1299'. [ 285.366059][ T5772] Bluetooth: hci1: unexpected subevent 0x01 length: 150 > 18 [ 285.614169][T10428] delete_channel: no stack [ 286.138102][T10448] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1309'. [ 286.348652][T10457] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1312'. [ 286.456139][T10457] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1312'. [ 287.288978][T10470] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 287.400062][T10479] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1318'. [ 287.422939][ T5772] Bluetooth: hci1: command 0x0406 tx timeout [ 287.753061][T10485] netlink: 199824 bytes leftover after parsing attributes in process `syz.1.1320'. [ 288.874063][T10504] pim6reg1: entered promiscuous mode [ 288.890639][T10504] pim6reg1: entered allmulticast mode [ 289.116739][T10515] validate_nla: 5 callbacks suppressed [ 289.116757][T10515] netlink: 'syz.0.1326': attribute type 21 has an invalid length. [ 289.220548][T10515] __nla_validate_parse: 2 callbacks suppressed [ 289.220562][T10515] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1326'. [ 289.260712][T10515] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1326'. [ 289.782146][T10539] syzkaller0: entered promiscuous mode [ 289.816885][T10539] syzkaller0: entered allmulticast mode [ 290.268423][T10542] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.1334'. [ 290.904627][T10547] netlink: 'syz.0.1336': attribute type 29 has an invalid length. [ 290.974854][T10547] netlink: 'syz.0.1336': attribute type 29 has an invalid length. [ 291.023672][T10550] netlink: 'syz.0.1336': attribute type 29 has an invalid length. [ 291.616546][T10565] netlink: 'syz.2.1342': attribute type 21 has an invalid length. [ 291.632974][T10565] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1342'. [ 291.658571][T10568] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1343'. [ 291.685611][T10571] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1343'. [ 291.726941][T10565] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1342'. [ 292.307867][T10581] netlink: 'syz.1.1346': attribute type 39 has an invalid length. [ 292.577423][T10592] netlink: 'syz.2.1349': attribute type 21 has an invalid length. [ 292.942715][T10603] netlink: 'syz.1.1353': attribute type 21 has an invalid length. [ 292.974618][T10603] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1353'. [ 293.180117][T10603] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1353'. [ 293.692722][T10625] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1360'. [ 294.373038][T10645] netlink: 'syz.1.1366': attribute type 21 has an invalid length. [ 294.387005][T10645] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1366'. [ 294.471826][T10645] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.1366'. [ 294.723922][T10665] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1373'. [ 294.783348][T10666] netlink: 'syz.1.1372': attribute type 3 has an invalid length. [ 294.791423][T10666] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1372'. [ 294.957983][T10683] sctp: [Deprecated]: syz.3.1376 (pid 10683) Use of int in max_burst socket option deprecated. [ 294.957983][T10683] Use struct sctp_assoc_value instead [ 295.014905][T10685] syz.1.1380[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.015029][T10685] syz.1.1380[10685] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 295.088467][T10688] netlink: 'syz.2.1381': attribute type 21 has an invalid length. [ 295.107968][T10688] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1381'. [ 295.135088][T10686] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1379'. [ 295.255232][T10688] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1381'. [ 295.283296][T10695] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1383'. [ 295.527278][T10710] netlink: 'syz.1.1387': attribute type 46 has an invalid length. [ 295.535271][T10710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1387'. [ 295.970080][T10725] netlink: 'syz.3.1393': attribute type 21 has an invalid length. [ 295.978487][T10725] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1393'. [ 296.489410][T10758] netlink: 'syz.1.1403': attribute type 21 has an invalid length. [ 296.659660][T10765] netlink: 'syz.3.1405': attribute type 21 has an invalid length. [ 297.918106][T10792] netlink: 'syz.0.1414': attribute type 1 has an invalid length. [ 297.941520][T10792] netlink: 'syz.0.1414': attribute type 4 has an invalid length. [ 298.245765][ T5772] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 298.272000][T10811] netlink: 'syz.0.1419': attribute type 21 has an invalid length. [ 298.715450][T10826] erspan0: refused to change device tx_queue_len [ 298.743252][T10826] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 299.457888][T10857] validate_nla: 4 callbacks suppressed [ 299.457903][T10857] netlink: 'syz.0.1434': attribute type 21 has an invalid length. [ 299.475190][T10857] __nla_validate_parse: 13 callbacks suppressed [ 299.475205][T10857] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1434'. [ 299.570292][T10857] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1434'. [ 299.721365][T10876] netlink: 'syz.1.1441': attribute type 2 has an invalid length. [ 299.736158][T10876] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1441'. [ 299.887097][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1442'. [ 299.896334][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1442'. [ 299.907523][T10883] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1442'. [ 299.933302][T10882] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1440'. [ 300.021865][T10885] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 300.039858][T10885] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 300.074553][T10885] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1443'. [ 300.126496][T10890] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1445'. [ 300.976712][T10914] netlink: 'syz.2.1451': attribute type 15 has an invalid length. [ 300.989890][T10914] netlink: 11254 bytes leftover after parsing attributes in process `syz.2.1451'. [ 301.011591][T10914] netlink: 'syz.2.1451': attribute type 6 has an invalid length. [ 301.031539][T10914] netlink: 'syz.2.1451': attribute type 7 has an invalid length. [ 301.047261][T10914] netlink: 'syz.2.1451': attribute type 11 has an invalid length. [ 301.064721][T10914] netlink: 'syz.2.1451': attribute type 15 has an invalid length. [ 301.083974][T10914] netlink: 'syz.2.1451': attribute type 16 has an invalid length. [ 301.103237][T10914] netlink: 'syz.2.1451': attribute type 21 has an invalid length. [ 301.122356][T10914] netlink: 'syz.2.1451': attribute type 25 has an invalid length. [ 302.084287][T10930] tc_dump_action: action bad kind [ 302.187455][T10936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.996011][T10972] cgroup: fork rejected by pids controller in /syz3 [ 303.114203][ T2992] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 303.185481][ T5772] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 304.209583][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 304.225716][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 304.234395][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 304.242596][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 304.250852][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 304.259646][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 306.303219][ T51] Bluetooth: hci2: command tx timeout [ 306.828800][T11005] chnl_net:caif_netlink_parms(): no params data found [ 306.870461][T11009] validate_nla: 9 callbacks suppressed [ 306.870593][T11009] netlink: 'syz.0.1476': attribute type 10 has an invalid length. [ 306.886259][T11009] __nla_validate_parse: 11 callbacks suppressed [ 306.886337][T11009] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1476'. [ 306.906682][T11009] hsr0: entered promiscuous mode [ 306.976933][T11024] netlink: 'syz.2.1481': attribute type 21 has an invalid length. [ 307.000419][T11027] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1481'. [ 307.020898][T11024] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1481'. [ 307.086600][T11030] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1482'. [ 307.288815][T11005] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.305685][T11005] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.318852][T11005] bridge_slave_0: entered allmulticast mode [ 307.328041][T11005] bridge_slave_0: entered promiscuous mode [ 307.328673][T11039] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1483'. [ 307.336964][T11005] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.351109][T11005] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.364423][T11005] bridge_slave_1: entered allmulticast mode [ 307.371214][T11005] bridge_slave_1: entered promiscuous mode [ 307.445663][T11005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.496053][T11005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.658771][T11047] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1485'. [ 307.710521][T11047] openvswitch: netlink: Key type 4112 is out of range max 32 [ 307.839764][ T8237] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.860102][T11005] team0: Port device team_slave_0 added [ 307.884387][T11005] team0: Port device team_slave_1 added [ 307.989812][ T8237] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.107477][ T8237] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.146828][T11005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.156048][T11005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.183316][T11005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.202234][T11005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.209470][T11005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.237250][T11005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.261970][ T8237] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.306918][T11061] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1490'. [ 308.320913][T11061] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 308.383142][ T51] Bluetooth: hci2: command tx timeout [ 308.405898][T11005] hsr_slave_0: entered promiscuous mode [ 308.414265][T11005] hsr_slave_1: entered promiscuous mode [ 308.423276][T11005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.430856][T11005] Cannot create hsr debugfs directory [ 308.679207][ T8237] tipc: Left network mode [ 308.846134][ T8237] ip6gretap0 (unregistering): left allmulticast mode [ 308.864150][ T8237] ip6gretap0 (unregistering): left promiscuous mode [ 308.871636][ T8237] : port 1(ip6gretap0) entered disabled state [ 309.013412][T11084] netlink: 'syz.2.1494': attribute type 21 has an invalid length. [ 309.021446][T11084] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1494'. [ 309.101092][T11084] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1494'. [ 310.463009][ T51] Bluetooth: hci2: command tx timeout [ 312.547300][ T51] Bluetooth: hci2: command tx timeout [ 312.856484][T11005] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 312.907655][T11005] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 312.925683][T11005] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 312.936985][T11005] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 313.089718][T11005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.144673][T11005] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.159085][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.166282][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.182859][ T8240] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.190047][ T8240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.694853][ T8237] bond0: (slave wlan1): Releasing backup interface [ 313.736479][T11005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.834811][T11153] netlink: 763 bytes leftover after parsing attributes in process `syz.1.1503'. [ 313.856022][T11155] netlink: 'syz.2.1504': attribute type 21 has an invalid length. [ 313.874042][T11155] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1504'. [ 313.874142][ T51] Bluetooth: hci0: unexpected subevent 0x03 length: 150 > 9 [ 313.974307][T11155] netlink: 207508 bytes leftover after parsing attributes in process `syz.2.1504'. [ 314.010531][ T8237] hsr_slave_0: left promiscuous mode [ 314.035311][ T8237] hsr_slave_1: left promiscuous mode [ 314.053185][ T8237] bridge_slave_1: left allmulticast mode [ 314.058873][ T8237] bridge_slave_1: left promiscuous mode [ 314.073654][ T8237] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.099572][ T8237] bridge_slave_0: left allmulticast mode [ 314.118079][ T8237] bridge_slave_0: left promiscuous mode [ 314.131849][ T8237] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.245264][ T8237] veth1_macvtap: left promiscuous mode [ 314.251150][ T8237] veth0_macvtap: left promiscuous mode [ 314.257965][ T8237] veth1_vlan: left promiscuous mode [ 314.263732][ T8237] veth0_vlan: left promiscuous mode [ 314.694763][ T8237] team0 (unregistering): Port device macvlan0 removed [ 314.931917][ T8237] team0 (unregistering): Port device team_slave_1 removed [ 314.972909][ T8237] team0 (unregistering): Port device team_slave_0 removed [ 315.015677][ T8237] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.055971][ T8237] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.267069][ T8237] bond0 (unregistering): (slave team0): Releasing backup interface [ 315.298269][ T8237] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 315.307171][ T8237] bond0 (unregistering): Released all slaves [ 315.391656][T11177] netlink: 'syz.0.1508': attribute type 2 has an invalid length. [ 315.398300][T11005] veth0_vlan: entered promiscuous mode [ 315.405129][T11177] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1508'. [ 315.433161][T11183] netlink: 'syz.1.1510': attribute type 10 has an invalid length. [ 315.441008][T11183] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1510'. [ 315.497167][T11005] veth1_vlan: entered promiscuous mode [ 315.678647][T11005] veth0_macvtap: entered promiscuous mode [ 315.702531][T11005] veth1_macvtap: entered promiscuous mode [ 315.765327][T11005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.789156][T11005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.807430][T11005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.817713][T11005] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.828136][T11005] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.838605][T11005] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.888778][ T8236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.920839][ T8236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.000447][ T8236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.021410][ T8236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.036184][T11236] netlink: 'syz.2.1517': attribute type 28 has an invalid length. [ 317.050002][T11236] netlink: 'syz.2.1517': attribute type 29 has an invalid length. [ 317.073809][T11236] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1517'. [ 317.191197][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.200008][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.398372][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 317.407808][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 317.420111][T11251] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1520'. [ 317.439670][T11253] netlink: 'syz.3.1521': attribute type 21 has an invalid length. [ 317.447952][T11253] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1521'. [ 318.019418][T11293] C: renamed from team_slave_0 (while UP) [ 318.035118][T11293] netlink: 'syz.3.1531': attribute type 1 has an invalid length. [ 318.187622][T11296] netlink: 'syz.0.1533': attribute type 21 has an invalid length. [ 318.476922][T11300] netlink: 'syz.1.1534': attribute type 153 has an invalid length. [ 318.512667][T11305] netlink: 'syz.3.1535': attribute type 39 has an invalid length. [ 318.641892][T11305] hsr_slave_1 (unregistering): left promiscuous mode [ 319.050550][T11317] syzkaller0: entered promiscuous mode [ 319.075837][T11317] syzkaller0: entered allmulticast mode [ 319.449076][T11324] netlink: 'syz.3.1542': attribute type 21 has an invalid length. [ 319.497395][T11330] netlink: 'syz.1.1543': attribute type 21 has an invalid length. [ 319.676870][T11334] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 319.702063][T11335] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 319.720036][T11337] netlink: 'syz.0.1546': attribute type 21 has an invalid length. [ 319.728960][T11337] __nla_validate_parse: 7 callbacks suppressed [ 319.728973][T11337] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1546'. [ 319.747578][T11335] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 319.757074][T11338] netlink: 'syz.3.1545': attribute type 29 has an invalid length. [ 319.845974][T11337] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.1546'. [ 320.204901][T11361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.721513][T11386] netlink: 'syz.1.1559': attribute type 10 has an invalid length. [ 320.743134][T11386] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.1559'. [ 321.292673][T11412] netlink: 'syz.0.1565': attribute type 21 has an invalid length. [ 321.300620][T11412] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1565'. [ 321.365629][T11410] ref_ctr_offset mismatch. inode: 0x5f offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 321.885770][T11431] netlink: 'syz.2.1570': attribute type 10 has an invalid length. [ 321.907729][T11434] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1571'. [ 322.924113][T11454] netlink: 16150 bytes leftover after parsing attributes in process `syz.1.1577'. [ 322.960213][T11461] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1579'. [ 323.005416][T11468] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1580'. [ 323.169817][T11475] sctp: [Deprecated]: syz.1.1583 (pid 11475) Use of struct sctp_assoc_value in delayed_ack socket option. [ 323.169817][T11475] Use struct sctp_sack_info instead [ 323.263717][T11477] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1584'. [ 324.410852][T11505] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1593'. [ 324.458625][T11507] validate_nla: 4 callbacks suppressed [ 324.458641][T11507] netlink: 'syz.3.1594': attribute type 21 has an invalid length. [ 325.425361][T11549] netlink: 'syz.3.1604': attribute type 10 has an invalid length. [ 325.575272][T11549] team0: Port device geneve1 added [ 325.588132][T11555] netlink: 'syz.0.1607': attribute type 5 has an invalid length. [ 325.731122][T11562] netlink: 'syz.0.1609': attribute type 21 has an invalid length. [ 325.766233][T11562] __nla_validate_parse: 1 callbacks suppressed [ 325.766244][T11562] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1609'. [ 325.787355][T11567] netlink: 'syz.2.1610': attribute type 21 has an invalid length. [ 325.813972][T11567] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1610'. [ 325.962343][T11579] team0: Device macvlan0 failed to change mtu [ 326.357651][T11593] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1619'. [ 326.436862][T11581] netlink: 'syz.1.1614': attribute type 21 has an invalid length. [ 326.447776][T11581] netlink: 'syz.1.1614': attribute type 11 has an invalid length. [ 326.472391][T11581] syzkaller0: entered promiscuous mode [ 326.496022][T11581] syzkaller0: entered allmulticast mode [ 326.523486][T11590] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 326.535017][T11601] netlink: 703 bytes leftover after parsing attributes in process `syz.0.1621'. [ 326.682272][T11610] netlink: 'syz.0.1624': attribute type 2 has an invalid length. [ 326.699689][T11612] netlink: 'syz.1.1625': attribute type 21 has an invalid length. [ 326.704228][T11610] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.1624'. [ 326.708206][T11612] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1625'. [ 327.007249][T11625] netlink: 'syz.2.1628': attribute type 10 has an invalid length. [ 327.180326][T11635] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1631'. [ 327.217524][T11637] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1632'. [ 327.328977][T11643] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1635'. [ 327.401221][T11646] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1636'. [ 329.571919][T11716] validate_nla: 7 callbacks suppressed [ 329.571933][T11716] netlink: 'syz.2.1661': attribute type 21 has an invalid length. [ 329.629140][T11720] netlink: 'syz.1.1662': attribute type 6 has an invalid length. [ 330.192682][T11734] veth0_to_bond: entered promiscuous mode [ 330.646814][T11741] sctp: [Deprecated]: syz.0.1668 (pid 11741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 330.646814][T11741] Use struct sctp_sack_info instead [ 330.713986][T11740] mac80211_hwsim hwsim26 wlan0: entered promiscuous mode [ 330.721216][T11740] mac80211_hwsim hwsim26 wlan0: entered allmulticast mode [ 330.751726][T11740] syz.3.1669[11740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.752137][T11740] syz.3.1669[11740] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.997777][T11762] netlink: 'syz.1.1675': attribute type 21 has an invalid length. [ 331.023004][T11762] __nla_validate_parse: 9 callbacks suppressed [ 331.023019][T11762] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1675'. [ 331.377676][T11779] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1680'. [ 331.579579][T11785] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1681'. [ 331.771192][T11792] netlink: 61967 bytes leftover after parsing attributes in process `syz.0.1683'. [ 333.144483][T11848] netlink: 'syz.0.1700': attribute type 6 has an invalid length. [ 333.162671][T11848] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1700'. [ 333.561942][T11858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1703'. [ 333.906958][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1711'. [ 333.940328][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1711'. [ 333.988794][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1711'. [ 334.189550][T11890] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1715'. [ 334.386125][T11903] delete_channel: no stack [ 334.391815][T11903] delete_channel: no stack [ 334.420873][T11903] netlink: 'syz.3.1718': attribute type 10 has an invalid length. [ 334.898834][T11925] syzkaller0: entered promiscuous mode [ 334.933938][T11925] syzkaller0: entered allmulticast mode [ 334.986124][T11922] »»»»»»: renamed from virt_wifi0 [ 335.103573][T11936] netlink: 'syz.2.1730': attribute type 10 has an invalid length. [ 335.139888][T11936] team0: Device wg1 is of different type [ 335.734230][T11960] syzkaller0: entered promiscuous mode [ 335.739853][T11960] syzkaller0: entered allmulticast mode [ 337.250022][T11971] __nla_validate_parse: 3 callbacks suppressed [ 337.250037][T11971] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.1742'. [ 337.485424][T11987] netlink: 'syz.3.1747': attribute type 1 has an invalid length. [ 337.524003][T11987] netlink: 157116 bytes leftover after parsing attributes in process `syz.3.1747'. [ 337.535309][T11982] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1746'. [ 337.547933][T11987] netlink: 'syz.3.1747': attribute type 16 has an invalid length. [ 337.561468][T11987] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1747'. [ 337.669281][T11993] syzkaller0: entered promiscuous mode [ 337.676029][T11993] syzkaller0: entered allmulticast mode [ 337.808551][T11994] syzkaller0: create flow: hash 1236450713 index 1 [ 337.871632][T11992] syzkaller0: delete flow: hash 1236450713 index 1 [ 339.514465][T12031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.740401][T12043] netlink: 40227 bytes leftover after parsing attributes in process `syz.3.1764'. [ 340.132434][T12071] pim6reg1: entered promiscuous mode [ 340.139199][T12071] pim6reg1: entered allmulticast mode [ 340.637198][T12081] netlink: 'syz.2.1776': attribute type 10 has an invalid length. [ 340.646104][T12081] netlink: 'syz.2.1776': attribute type 10 has an invalid length. [ 340.672434][T12081] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1776'. [ 340.696537][T12081] mac80211_hwsim hwsim4 »»»»»»: renamed from wlan0 [ 340.751714][T12087] netlink: 'syz.1.1778': attribute type 1 has an invalid length. [ 340.806681][T12087] netlink: 15487 bytes leftover after parsing attributes in process `syz.1.1778'. [ 345.250175][T12112] netlink: 'syz.2.1783': attribute type 10 has an invalid length. [ 345.319723][T12112] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.327410][T12112] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.996115][T12138] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1791'. [ 347.928043][T12148] netlink: 'syz.1.1794': attribute type 9 has an invalid length. [ 347.944003][T12148] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1794'. [ 348.079086][T12150] netlink: 'syz.0.1793': attribute type 10 has an invalid length. [ 348.149132][T12147] netlink: 'syz.1.1794': attribute type 9 has an invalid length. [ 348.213099][T12147] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1794'. [ 349.682115][T12161] sctp: [Deprecated]: syz.2.1797 (pid 12161) Use of struct sctp_assoc_value in delayed_ack socket option. [ 349.682115][T12161] Use struct sctp_sack_info instead [ 350.287834][T12172] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.1801'. [ 350.409468][T12186] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1805'. [ 350.445472][T12188] netlink: 64859 bytes leftover after parsing attributes in process `syz.1.1803'. [ 350.915588][T12200] netlink: 'syz.0.1808': attribute type 29 has an invalid length. [ 350.957881][T12200] netlink: 'syz.0.1808': attribute type 29 has an invalid length. [ 350.983302][T12201] netlink: 'syz.0.1808': attribute type 29 has an invalid length. [ 351.042384][T12200] netlink: 'syz.0.1808': attribute type 3 has an invalid length. [ 351.051310][T12200] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1808'. [ 351.205399][T12205] netlink: 'syz.3.1810': attribute type 9 has an invalid length. [ 351.221194][T12205] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1810'. [ 351.300506][T12206] netlink: 'syz.3.1810': attribute type 9 has an invalid length. [ 351.314746][T12206] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1810'. [ 351.415388][T12208] netlink: 'syz.2.1811': attribute type 10 has an invalid length. [ 351.476371][T12208] team0: Device xfrm0 is of different type [ 351.506130][T12221] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.1814'. [ 351.507393][T12217] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 351.550432][T12217] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 351.638460][T12208] syz.2.1811 (12208) used greatest stack depth: 17000 bytes left [ 352.034828][T12236] __nla_validate_parse: 1 callbacks suppressed [ 352.034842][T12236] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1816'. [ 352.081045][T12236] A link change request failed with some changes committed already. Interface veth1_virt_wifi may have been left with an inconsistent configuration, please check. Connection to us-central1-ssh-serialport.googleapis.com closed by remote host.