last executing test programs: 13.548424629s ago: executing program 2 (id=1862): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x4000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1000, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x23, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x8050) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7050000000000006110a80000000000dc0500001000000095000000000000009abb1723bf24203831c9545b21c751ee4024f479cbe4b89f9808837203000000000000c2d182c7a3221481f5009edaf5f5ac058299e10e790a198f42a715b99fb3d2a73dd025848710155ad1efd7d991408000000000000085a0db0401fa29e075b7ab0408a0d8cfceeb23465bb027ee1151c02af21d8f9aa57e673a6724441d08087aff070eda8abef22b3a806c8226f5a2886c93bd29b37252ba4a6e9cc5f69e75680c431aa855e487ae513abd6c4ee973fce29a26018ed5e0780f8778a602a3533a3dac7da4fe491edf3abfa7bf871c58848ac46ada6776bd9b85df01e626026a59ddfa7a9c879acbfb0bf426785dec7d8611dc850df49ed8633bdb83dd505fb20649f53841a0e200c91f5bf1bb186ed87efc7b6f8859d029c8376ca19265e281fea0a6fd2222f8850c8445758503ede0ce1b3f73ecd8989e8c53c5e679b13802bddf80f3b1d07d6d68bfa12ab34697d40ac1150a842f8bb381344b994c19642a10eb30845a993daaa8bd4aebc595475feb3475d8e802498382e73edb98fcf2df96ab3c870490c4"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 12.963765784s ago: executing program 2 (id=1866): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30) r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r1, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r1, 0x400454cd, 0x301) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) sendmsg$inet(r0, &(0x7f0000002c80)={&(0x7f0000000180)={0x2, 0x4e22, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000002bc0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @remote}}}], 0x1}, 0x2c000040) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x118944, 0x0, 0x8, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={0xffffffffffffffff, &(0x7f00000001c0)="6c69b9483ac1af279a97febc4586c27b3bfb83e0fd3320f0c926abf21b9465ebbafc559398575ae138eb6113b8d3ae00e96c255a60ac04a7a7f59a67d2fc85f31ac2e1da514195beb9d7d8e10d7a864a179d4f133481ffcdae1be35a52ee9041852e1cc46fbea3616f584680fea7c7d41e63406554c239d9225129f440e0835affdb1b63e9dc11ac390482ecdb2ad9aa90b86be0563976c6bf680221d514e4372c392b2a1eed429747bccb820d846595d9f3855e7536b52b6354b61144a4fa2ef1f045b0a5317d1337bb8b24b2ed19c38cfac4b7836b5c397491f3fe8bf920825efeaf5f163d39e38f3b37bb5e8b71235fd3690c15", &(0x7f00000002c0)=""/130, 0x4}, 0x20) mkdirat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x1ff) 12.571956354s ago: executing program 1 (id=1869): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6e", 0x1b}], 0x1, 0x0, 0x0, 0xc9e}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 12.565812084s ago: executing program 2 (id=1870): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) 12.244713752s ago: executing program 1 (id=1871): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fec, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x8206, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6f6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0xa0}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f0000000480)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, @perf_config_ext={0xffffffffffffffff}, 0x8000, 0x5, 0x3, 0xaaf04684de878bda, 0x3, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35f022eb"], 0xcfa4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x40800) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) socketpair(0x1, 0x1, 0x1, &(0x7f0000000200)) 10.248123172s ago: executing program 3 (id=1872): r0 = socket$kcm(0x23, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x10004000) sendmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0xc040) r1 = socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x8) socket$kcm(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000800000001801000030244589c9343cb77c2614fbb594009ff8bcc3040e237ea44fc3963d2ed662f12cc37825c8f59cfd82083da00f0b118fea2aa3a1161467a631e4efbf9fa1904edd67530254b2d3353cdebde8f7a0ee32d5781ac15a9cc28db5e741aa56ebf91b16053451735a3290c623eb063fd46b6790889b71b532903c8dc2a131cdf08d030331c65ce389ce4a9ad37531f15dad2bb5706c053833d0761f1d1cc6738f2a53551e22f314d50461cf2a9950d32c1c2abddd93214e2d91e71791215b", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r4, @ANYRES64=0x0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x52, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) recvmsg$kcm(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000080)=""/64, 0x40}, {&(0x7f0000000140)=""/152, 0x98}, {&(0x7f00000003c0)=""/238, 0xee}, {&(0x7f0000000580)=""/244, 0xf4}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x5, &(0x7f00000019c0)=""/154, 0x9a}, 0x10001) sendmsg$inet(r1, &(0x7f0000000040), 0x40) 10.150113014s ago: executing program 1 (id=1874): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x5}, 0x100e64, 0xc78, 0x3, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xf, 0x8, 0xe0000000, 0x2, 0x7644, 0x1, 0x60000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x50) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x9, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071183a"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001010000df7f0000ff00000000000000", @ANYRES32, @ANYBLOB="0000000000000025a593f66b01000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xe, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x56d}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) gettid() socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013301300108"}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xfffffffc}, {0x35, 0x1}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffff7}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x0) close(0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x54}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8516, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 10.016668518s ago: executing program 0 (id=1875): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xe}, 0x10a194, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x5a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd030000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff8ba}, 0x94) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40001) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) r5 = socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x6e, &(0x7f0000000000)=r7, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x14, 0xc, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@generic={0x4, 0x5, 0x7, 0x3, 0x4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000180)='GPL\x00', 0x2932cea5, 0xa8, &(0x7f0000000380)=""/168, 0x41100, 0x0, '\x00', r4, @lirc_mode2=0x10, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x0, 0x3, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xe7}, 0x94) 9.835377902s ago: executing program 3 (id=1877): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x3, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) syz_clone(0x5080200, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000240)="9e3d624d6a5165d84a9c832afac3a69eedcfcdc6d9266de9eefcbfcb277010b0bb22fbf563720b73b099b97332ce230b12e6a737071123a947bcd3f527123258161e6d4440f23abdf9fe0fdfabb0205816eadf7456e1d66ec99627") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r4 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x2}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720a23fe000000008500000012000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd32abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f58d305000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc928b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d4573aad5f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40453f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d51e3d167a2b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259f717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195833106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21da55b7497dd7ed385ac2e8cb916390a3a0ed52e7371e1a141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5fc1db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc9feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb89ee1c95361debf58f671170cfa57fb0c9cbad5c70244a2b6de2062cbd1ba2c85f73689d3ffcd37022ab9fcabd17fd40bfd316088dffe92728016ec5c72e21da52d09f849ab4a4b2d9b4799bab3a6d7f2ba57e100e7ffec0bd4c0659ebaf7b225edaa0af3f5aa99d1551d34b2d2faf0971dbe852142088b1c9b052e1177c47365d950e22c2b04283f62fec31837b5068dab60c5c2c1547acd52ab5e5cde41d24563b05e223e2aafe2c55ba3001d12e4de86597487e99c3b2bf193d7d6d0821481c16fd7cece5df2567182ca1ad6028028bf9f72d503b3d70e1c3c4b5e73ac286abb2b3b069f2ccda4c6a7a3759302b02034e8217b4ecdb9f1118a4117fd49d5467a84b70fae675af118bd885ee7798782765438caaf69856e236bf4b37bff5f971df3fd5e03a9ea39d5397b4e5c5a0d7eacf2"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x22f, 0x10, 0x0, 0xff6a}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r6, 0x300f000, 0xe, 0x88a8, &(0x7f0000000080)="0069c2704ade28eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0xc00000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000380)={&(0x7f0000000040)={0xa, 0xfffd, @local}, 0x1b, &(0x7f0000000180)=[{&(0x7f0000000080)="a2", 0xff0e}], 0x4, 0x0, 0x0, 0xa6820000}, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85feff0fc9"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000020000000000000001000084040000000000000002000000050000000000000000000005feffffff000000000700000d200000000a000000010000000f"], &(0x7f0000000040)=""/270, 0x82, 0x10e, 0x1}, 0x28) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r2], 0x12) 6.933348325s ago: executing program 3 (id=1878): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x2000}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x20000000}, 0x20) recvmsg$unix(r2, 0x0, 0x40010040) socket$kcm(0x2c, 0x3, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x2000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='c 75:', @ANYRESDEC=r5], 0x9) getpid() gettid() perf_event_open(&(0x7f0000000600)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x3, 0xfffc, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0xfffffffe, 0x28}, 0x50) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) 6.75368002s ago: executing program 0 (id=1886): r0 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1e}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@o_path={&(0x7f0000000200)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40010000000000269328a00000000080400000040000000950000000000000094bf2aa2116204c04ed6e28647853b89248f7258ccff064c3425ffc6883272c4dc29a6a29001dedd3b1728e4c074df3177ff43efca7c4aeea7d7bcc600fd9fcc"], &(0x7f0000000080)='GPL\x00', 0x400002, 0xca, &(0x7f0000000100)=""/202, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1b, 0x0, r2}, 0x94) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000002e000b12d25a80648c2594f90224fc60", 0x14}], 0x1}, 0x2000d084) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) 6.255610423s ago: executing program 0 (id=1879): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000004000000030000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000bc7a007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20, 0x480783, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602, 0x403, 0x6, 0x0, 0x34d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000071123700000000009500000000000000b15de6ef7eaae06026"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x50) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000011660800000000000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) 5.663311347s ago: executing program 0 (id=1880): perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef42b000000e3bd6e", 0x1b}], 0x1, 0x0, 0x0, 0xc9e}, 0x1) r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xfe33) 5.55316041s ago: executing program 3 (id=1881): close(0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001580)="d80000001a0081044e81f782db4cb9041c1d0800fe007c05e8fe55a109000100ff02142603600e12080005007a010401a80016002000034004020000035c0461c9d67f6f940071342e875fab7cb6cec6cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b141993c034e653fe8efe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9ee5350db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd7}], 0x1}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0f40000009000000000000009200000000000000006c0eddf5d48981b6c842e567d432ff9c01a6d1bafb90986c3bb3b31dd7274ebd97a9f3946dab14e5c801f6730a1865dd6214ee2a4d674bf98e7cc4f5ad6c2888d980bf2baa85d0897827efe1284ea6fcbff4bed70db59b6bf07742b95fed028630a533bb48a9b90fb4340aef320451c00240", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b00)={{r4}, &(0x7f0000000a80), &(0x7f0000000ac0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)}, 0x0) recvmsg$kcm(r5, 0x0, 0x10122) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r7, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40000000) write$cgroup_subtree(r8, 0x0, 0x55) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r8, 0xc, 0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r9 = socket$kcm(0x21, 0x2, 0x2) setsockopt$sock_attach_bpf(r9, 0x110, 0x5, 0x0, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x2b, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x6, 0x0, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000740)}, 0x94) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) 1.471654112s ago: executing program 2 (id=1882): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000003c0)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000400), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffff56a, 0x100000000}, 0x250a, 0x7, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x64099, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b81, 0x2, @perf_config_ext={0xfffffffffffffffd, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x9, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000800ffffff7f00230000", @ANYRES32=0x1, @ANYBLOB="00000000060000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3fffc, 0x95, &(0x7f00000000c0)=""/149, 0x41100, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x6, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x1, 0x2}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000200)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000240)=[{0x0, 0x5}], 0x10, 0x1}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000380)={r0, r2}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd00fe05e8fe55a10a00050000feff0000000e41b0940900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) 1.343081036s ago: executing program 1 (id=1883): bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x30f, [{0x2, 0x1, 0x10001}]}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x35, 0x0, 0x1, 0x2c}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b40)={&(0x7f0000000a80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@union={0x3, 0x1, 0x0, 0x5, 0x1, 0x30f, [{0x2, 0x1, 0x10001}]}]}, {0x0, [0x30, 0x2e, 0x61]}}, 0x0, 0x35, 0x0, 0x1, 0x2c}, 0x28) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x3, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000011008188040f80ec59acbc0413a181000a000000000100000010001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socket$kcm(0xa, 0x3, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x71}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fd1ff7907001175f37538e486dd6317010000213a00db536873f45f08c6feaa70e2aef57b20000000000000000000000000ac1414aa"], 0xfdef) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000021c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r3, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r4, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 957.463736ms ago: executing program 0 (id=1884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000010000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x20, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 820.959989ms ago: executing program 3 (id=1885): perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0x65, 0x1, 0x0, 0x0, 0x0, 0x3, 0x472, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x6, 0x104804}, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1}, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="16000000000000000700000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r0, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22101, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8903, 0x0) 664.417983ms ago: executing program 2 (id=1887): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000140)=""/80, 0x50, 0x0, &(0x7f00000001c0)=""/3, 0x3}}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)=@hci={0x1f, 0x1, 0x2}, 0x80, 0x0}, 0x4080) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a118001500060014ea000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x20000880) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40, '\x00', r3}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x6, '\x00', r3, r0, 0x1, 0x4, 0x4}, 0x50) 652.686663ms ago: executing program 0 (id=1888): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x8c4) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r2 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0xc, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8004}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000080)=ANY=[@ANYRES8=r1], &(0x7f0000000280)='syzkaller\x00', 0xf, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x40068, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x6, 0xc07, 0xfffd, 0x0, 0x0, 0x0, 0x8000000000000001}, 0x0, 0x2, 0xffffffffffffffff, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYBLOB="0085fcaf8a00007cd406f336d0b1070000000000000000acd1398c0000005f6c2c685902000000cee5b7002100c9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x40, r4}, 0x38) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r5, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x103842, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r7) ioctl$TUNSETLINK(r6, 0x400454cd, 0x118) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r9 = syz_clone(0x100900, &(0x7f00000004c0)="0d53514cc5195f041cfce5faa1293693e91547261de57a3a29a032cc2863970ef6d003481c511e7363640d9bd0a44779c7acc5d7766ab1b8703a15c6085b3c669e562985ca82ce915995f6c95e3cbbf1fd6c92ae949ad342fe9b7583d0813c2708e27f19b34ebd880cfbbe9af68a4d198097b9641dd1160261ff27f90f76c56d511ac9ba6412881791962f2b02", 0x8d, &(0x7f0000000580), &(0x7f0000000680), &(0x7f00000006c0)="433876d5b61d0c5f7464b874b30e55e13e0899da8c651ab34155aa528e92a9eaf3816a2e34a5571ed0dc0657d0c240221de4c56df6d26faae29d6ab048dafdd23d48c985fdf9c183252c21da572d5b66c7a9a5b5bc9c2a563cba636fcf4db50d6104e284f4e56135dd780aa5a62ba5") r10 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x2, 0x1}, 0x114105, 0x6, 0x9, 0x8, 0x4000000000000000, 0x40000, 0x2}, r9, 0x0, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r8) 574.921955ms ago: executing program 1 (id=1889): perf_event_open$cgroup(&(0x7f0000000200)={0xf448f22a14f5b999, 0x80, 0x3, 0x6, 0x6e, 0x6, 0x0, 0x3, 0x56168, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_config_ext={0x7fffffff, 0x6}, 0x440, 0x6, 0x800, 0xa, 0x3, 0x5, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffd6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) (async) r0 = perf_event_open$cgroup(&(0x7f0000000200)={0xf448f22a14f5b999, 0x80, 0x3, 0x6, 0x6e, 0x6, 0x0, 0x3, 0x56168, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xd, 0x2, @perf_config_ext={0x7fffffff, 0x6}, 0x440, 0x6, 0x800, 0xa, 0x3, 0x5, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffd6}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca1164010102000003ef7f00000100009f029344a5ee0a01010200000000ac141427ffffffff"], 0x40}, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="4000000000000000000000060700000001441cca1164010102000003ef7f00000100009f029344a5ee0a01010200000000ac141427ffffffff"], 0x40}, 0x0) socket$kcm(0x2, 0x3, 0x84) (async) r1 = socket$kcm(0x2, 0x3, 0x84) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000000002"], 0x50) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x890b, &(0x7f0000000100)) r2 = gettid() perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000011, 0x5}, 0x100ee4, 0xc78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, r2, 0xffffffffffffffff, r0, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x400, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000000000011, 0x5}, 0x100ee4, 0xc78, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, r2, 0xffffffffffffffff, r0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000780)=ANY=[@ANYBLOB="2b40000048009125745c7388641f9c0e0a", @ANYBLOB="e6b4"], 0xfe33) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x0, 0x0, 0x0, 0x6, 0xa8, &(0x7f0000001ec0)=""/168, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000000)=r5, 0x40) r6 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) (async) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x48, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000003c21c00b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0xfca6}, {&(0x7f0000001400)="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", 0xa91}], 0x3}, 0x0) 288.893402ms ago: executing program 2 (id=1890): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@ptr={0xa, 0x0, 0x0, 0x2, 0x1}, @type_tag={0x10, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x5f, 0x2e, 0x30]}}, &(0x7f0000000040)=""/248, 0x35, 0xf8, 0x1, 0x5, 0x10000, @value=r0}, 0x28) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f00000001c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_type(r1, &(0x7f0000000200), 0x2, 0x0) r2 = syz_clone(0x25981480, &(0x7f0000000240)="41da07f38a7a45810fc5e1d222f9d30b7e4971fd20ee46", 0x17, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)="3a47913b4d4280753b043f32f18820f5ad07ced8ab0498254edc5a7072b2e429a8d4bfe2ffb1704fea8fb94bbf368f0cec27721da39236e1aa25bae5fafebeaa9a9e59e3d04469aa7a2453d03a08ba45b913529005bf4fd0306cc477207730f8ffb5a485dbc2eaf22161c2e0dfd469a8c65df61bd3703b3b85dd7c8f7495429eac96472d99080d81774640e257ce754f50eeb72bc62b83130c678989d5c93a07aec992d10a3feafbc09ab238062046b2cddf9f9551694b9b10c0005fa4b350d6d5f48f33e41c67a05c7ef3995e64a56aaba2420f3ad5ae1499bf946cab3fcd9a6e757c") perf_event_open(&(0x7f0000000400)={0x0, 0x80, 0x4, 0xe2, 0x1e, 0x0, 0x0, 0x6, 0x24840, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x6, 0x3}, 0x5002, 0x1, 0x3, 0x4, 0x1ff, 0x6, 0x8, 0x0, 0x7764, 0x0, 0x5}, r2, 0x4, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup/syz0\x00', 0x200002, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x101001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000500)={'caif0\x00', @broadcast}) r5 = openat$cgroup_ro(r3, &(0x7f0000000540)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r6 = openat$cgroup_ro(r3, &(0x7f0000000580)='cgroup.events\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000600)={0x5, 0x80, 0x7, 0x6, 0x7, 0xa, 0x0, 0x8, 0x4081, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_bp={&(0x7f00000005c0), 0x4}, 0x1001, 0x1dc, 0x5, 0x8, 0x80000001, 0x6478, 0x1, 0x0, 0xe0cc}, r2, 0x10, 0xffffffffffffffff, 0x3) r7 = openat$cgroup_subtree(r3, &(0x7f0000000680), 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x15, 0xea1b, 0xfffffff7, 0x9, 0x20a0, r5, 0x1, '\x00', 0x0, r5, 0x3, 0x1, 0x2}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x309100, 0x0) recvmsg$kcm(r5, &(0x7f0000000980)={&(0x7f0000000780)=@nfc, 0x80, &(0x7f0000000840)=[{&(0x7f0000000800)}], 0x1, &(0x7f0000000880)=""/216, 0xd8}, 0x61) openat$cgroup_procs(r6, &(0x7f00000009c0)='cgroup.procs\x00', 0x2, 0x0) openat$cgroup_procs(r5, &(0x7f0000000a00)='cgroup.procs\x00', 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x18}, 0x18) r8 = openat$cgroup(r5, &(0x7f0000000ac0)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r8, &(0x7f0000000b00)='devices.allow\x00', 0x2, 0x0) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f0000000b40)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b80)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000cc0)={@fallback=r7, 0x32, 0x0, 0xfffffffb, &(0x7f0000000bc0)=[0x0], 0x1, 0x0, &(0x7f0000000c00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000c40)=[0x0, 0x0], &(0x7f0000000c80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000d00)={@fallback=r8, r6, 0x15, 0x4, 0x0, @void, @value=r6, @void, @void, r9}, 0x20) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000d40)={'vlan0\x00', 0x20}) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d80)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r10, &(0x7f0000000dc0), 0x2, 0x0) recvmsg$unix(r6, &(0x7f00000013c0)={&(0x7f0000000e00), 0x6e, &(0x7f0000001300)=[{&(0x7f0000000e80)=""/211, 0xd3}, {&(0x7f0000000f80)=""/4, 0x4}, {&(0x7f0000000fc0)=""/27, 0x1b}, {&(0x7f0000001000)=""/1, 0x1}, {&(0x7f0000001040)=""/149, 0x95}, {&(0x7f0000001100)=""/198, 0xc6}, {&(0x7f0000001200)=""/211, 0xd3}], 0x7, &(0x7f0000001380)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x100) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001700)={&(0x7f0000001400)="5ae174c07e328f4b8ec162b0f5b727c7836027ab0f4f5b5c0c4dc96598d8a37726f249a3d96b7334726db865ebe50e4a9c6639e24a836f1da01e88b3191657f35ea86782eb319c5a5da35ddaef75ed8b1ba6ea423374f138a6c87aff1ce5812856a1bb5ec1a87a66e20159807994c2ca9cb2ba0198a0198a3b929610748a2f114db45bfb675254260de92f17e6c6722995b8ea", &(0x7f00000014c0)=""/65, &(0x7f0000001540)="bccc9a96a7bd81fcd2acaecb8a9fc22e2d8423bfda45a81d275bcc8ecc45", &(0x7f0000001580)="6ec06450e6b255858f5651a02acc2f0ed16a6d744011a8fb7f789c2ba412e8c27b90731b4aeb7219fe14a8e4838eb4dab29ad96112de51f0833bf12c30386125413544c03cd8574ba8a40a9822a0206c9c00b7c9f5798449d7aba64af68ff295ee3a1352dbe067caba59f0239abb7069e306b08111366e797ecaaf3254c285739d86c079d9c6c930191efae2c71be440857cc5eba6e55df759dc2b0c13cd4ccfee03f3b6986491002752d44b852fadf820700d3926dd89df8492a29a1dbbb52d8c37c90a742feb3c74c8a02ab36b755446055389f91a8ecb1ba054473bd7c67e1edd8da352dcf9ca3908bc59", 0xbff}, 0x38) 138.541666ms ago: executing program 3 (id=1891): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x4, {0xa, 0x4e24, 0x960, @mcast2, 0xffffffbb}}}, 0x80, 0x0}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, @perf_bp={0x0, 0x6}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0xfffffffffffffd51, &(0x7f00000003c0)=[{&(0x7f0000000080), 0x803e}, {&(0x7f0000000140)="ec", 0x1}, {0x0}], 0x308}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000008"], 0x0, 0xc}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) close(r3) (async) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff23, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)={0x1b, 0x0, 0x0, 0x5, 0x0, r7, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, &(0x7f00000002c0)="9878aed67fce94ecce8ae503ed10b8a827ed25407dd309103d74a9db62ca5cd9d50e588539ad3746312df84252f67121463a2bdb1aa6f13d3453285386e91209397f9ef48705", &(0x7f0000000340)=""/8, 0x4}, 0x20) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) (async) ioctl$PERF_EVENT_IOC_RESET(r4, 0x2403, 0xffffffffffffffb3) (async) socket$kcm(0x10, 0x2, 0x4) (async) close(0x3) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0xa}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f260006d2688a84c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (async) sendmsg$inet(r1, 0x0, 0x0) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000002a00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x7) 0s ago: executing program 1 (id=1892): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x806, 0x0, 0x0, 0x8, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0}, 0x20) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000002c0)={'syzkaller0\x00', @link_local}) kernel console output (not intermixed with test programs): m netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.092262][ T5782] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.136116][ T51] Bluetooth: hci3: command tx timeout [ 96.149339][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.180733][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.239188][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.286774][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.312542][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.329138][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.365753][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.812001][ T5784] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.821931][ T5784] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.831372][ T5784] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.840294][ T5784] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.997399][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.005333][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.144878][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.171048][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.280696][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.310748][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.636288][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.644842][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.879505][ T51] Bluetooth: hci1: command tx timeout [ 97.885025][ T51] Bluetooth: hci0: command tx timeout [ 97.904634][ T175] cfg80211: failed to load regulatory.db [ 98.043171][ T51] Bluetooth: hci2: command tx timeout [ 98.189375][ T51] Bluetooth: hci3: command tx timeout [ 98.576247][ T5859] warning: `syz.1.8' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.235293][ T5861] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 99.685730][ T5877] netlink: 'syz.0.12': attribute type 10 has an invalid length. [ 99.782013][ T5877] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12'. [ 99.816647][ T5877] hsr0: entered promiscuous mode [ 99.855234][ T5877] bridge0: port 3(hsr0) entered blocking state [ 99.880417][ T5877] bridge0: port 3(hsr0) entered disabled state [ 99.895411][ T5877] hsr0: entered allmulticast mode [ 99.910010][ T5877] hsr_slave_0: entered allmulticast mode [ 99.922303][ T5877] hsr_slave_1: entered allmulticast mode [ 99.936725][ T5877] bridge0: port 3(hsr0) entered blocking state [ 99.943282][ T5877] bridge0: port 3(hsr0) entered forwarding state [ 102.625318][ T5906] netlink: 'syz.2.24': attribute type 2 has an invalid length. [ 102.859728][ T5914] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 102.895034][ T5914] netlink: 2 bytes leftover after parsing attributes in process `syz.3.25'. [ 102.955863][ T5914] hsr0: entered promiscuous mode [ 103.119900][ T5914] bridge0: port 3(hsr0) entered blocking state [ 103.195819][ T5914] bridge0: port 3(hsr0) entered disabled state [ 103.235531][ T5914] hsr0: entered allmulticast mode [ 103.256503][ T5914] hsr_slave_0: entered allmulticast mode [ 103.262449][ T5914] hsr_slave_1: entered allmulticast mode [ 103.281614][ T5914] bridge0: port 3(hsr0) entered blocking state [ 103.288240][ T5914] bridge0: port 3(hsr0) entered forwarding state [ 105.037685][ T5942] netlink: 'syz.0.46': attribute type 5 has an invalid length. [ 105.295947][ T5948] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 105.322718][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 106.683447][ T5948] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 106.722836][ T5945] netlink: 'syz.2.39': attribute type 10 has an invalid length. [ 108.439851][ T6001] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 108.449587][ T6001] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.57'. [ 108.475362][ T5999] netlink: 'syz.1.58': attribute type 3 has an invalid length. [ 108.488290][ T5999] netlink: 'syz.1.58': attribute type 1 has an invalid length. [ 108.498700][ T5999] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.58'. [ 108.515723][ T6000] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 108.541722][ T6000] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.57'. [ 108.709687][ T5999] netlink: 198800 bytes leftover after parsing attributes in process `syz.1.58'. [ 109.356364][ T6025] netlink: 3076 bytes leftover after parsing attributes in process `syz.1.66'. [ 109.378693][ T6025] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.66'. [ 109.519223][ T6030] netlink: set zone limit has 8 unknown bytes [ 110.687379][ T6045] netlink: 'syz.1.73': attribute type 3 has an invalid length. [ 110.695127][ T6045] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 110.751354][ T6045] netlink: 132 bytes leftover after parsing attributes in process `syz.1.73'. [ 110.800133][ T6045] netlink: 'syz.1.73': attribute type 4 has an invalid length. [ 110.822244][ T6045] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.73'. [ 114.179587][ T6068] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.80'. [ 114.532376][ T6070] netlink: 'syz.3.82': attribute type 2 has an invalid length. [ 114.548476][ T6070] netlink: 1045 bytes leftover after parsing attributes in process `syz.3.82'. [ 114.740943][ T6076] netlink: 'syz.3.83': attribute type 21 has an invalid length. [ 114.755589][ T6076] netlink: 'syz.3.83': attribute type 1 has an invalid length. [ 114.771860][ T6076] netlink: 'syz.3.83': attribute type 2 has an invalid length. [ 114.786815][ T6076] netlink: 9062 bytes leftover after parsing attributes in process `syz.3.83'. [ 115.226572][ T6090] sit0: entered allmulticast mode [ 115.406753][ T6090] sit0: entered promiscuous mode [ 116.110351][ T6114] netlink: 60 bytes leftover after parsing attributes in process `syz.3.95'. [ 116.967048][ T6124] netlink: 'syz.3.98': attribute type 9 has an invalid length. [ 116.986094][ T6124] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.98'. [ 117.229530][ T6133] syz.2.100 uses obsolete (PF_INET,SOCK_PACKET) [ 117.606555][ T6150] netlink: 14 bytes leftover after parsing attributes in process `syz.2.103'. [ 117.792160][ T6150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 118.001414][ T6150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 118.051421][ T6150] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 118.069342][ T6150] bond0 (unregistering): Released all slaves [ 118.844889][ T6174] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.110'. [ 119.182051][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.202340][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.235248][ T6187] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.249257][ T6185] netlink: 60 bytes leftover after parsing attributes in process `syz.1.113'. [ 119.354327][ T6188] netlink: 'syz.3.110': attribute type 39 has an invalid length. [ 119.446017][ T6191] Zero length message leads to an empty skb [ 119.934666][ T6203] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.118'. [ 120.564657][ T6193] netlink: 703 bytes leftover after parsing attributes in process `syz.1.116'. [ 120.574914][ T6197] netlink: 'syz.2.117': attribute type 6 has an invalid length. [ 120.583647][ T6197] netlink: 168 bytes leftover after parsing attributes in process `syz.2.117'. [ 120.597656][ T6200] netlink: 164 bytes leftover after parsing attributes in process `syz.0.118'. [ 121.358308][ T6220] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.472481][ T6222] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 121.497203][ T6222] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.511255][ T6222] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.526388][ T6224] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.125'. [ 122.993359][ T6250] netlink: 'syz.3.134': attribute type 7 has an invalid length. [ 123.018767][ T6256] sock: sock_timestamping_bind_phc: sock not bind to device [ 123.042574][ T6255] netlink: 64 bytes leftover after parsing attributes in process `syz.1.135'. [ 123.071733][ T6257] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.133'. [ 123.205156][ T6257] netlink: 'syz.2.133': attribute type 9 has an invalid length. [ 123.820957][ T6261] netlink: 'syz.3.138': attribute type 1 has an invalid length. [ 123.829047][ T6261] netlink: 'syz.3.138': attribute type 2 has an invalid length. [ 124.046397][ T6266] netlink: 'syz.3.138': attribute type 3 has an invalid length. [ 125.245509][ T6291] __nla_validate_parse: 2 callbacks suppressed [ 125.245537][ T6291] netlink: 64 bytes leftover after parsing attributes in process `syz.0.147'. [ 126.268060][ T6305] netlink: 208052 bytes leftover after parsing attributes in process `syz.2.153'. [ 126.279724][ T6305] netlink: 'syz.2.153': attribute type 1 has an invalid length. [ 126.329986][ T6305] netlink: 'syz.2.153': attribute type 2 has an invalid length. [ 126.346318][ T6305] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 126.375439][ T6305] netlink: 'syz.2.153': attribute type 4 has an invalid length. [ 126.389546][ T6311] netlink: 'syz.2.153': attribute type 3 has an invalid length. [ 126.433401][ T6311] netlink: 'syz.2.153': attribute type 5 has an invalid length. [ 128.570608][ T6356] netlink: 'syz.3.173': attribute type 10 has an invalid length. [ 128.608525][ T6356] bridge0: port 3(hsr0) entered disabled state [ 128.615179][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.623218][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.701116][ T6356] bridge0: port 3(hsr0) entered blocking state [ 128.707829][ T6356] bridge0: port 3(hsr0) entered forwarding state [ 128.716928][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.724309][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.732046][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.732902][ T6360] netlink: 208052 bytes leftover after parsing attributes in process `syz.1.166'. [ 128.739399][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.793619][ T6360] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 128.811606][ T6356] team0: Port device bridge0 added [ 128.838076][ T6360] netlink: 'syz.1.166': attribute type 2 has an invalid length. [ 128.860853][ T6360] netlink: 'syz.1.166': attribute type 3 has an invalid length. [ 130.566005][ T6387] netlink: 135056 bytes leftover after parsing attributes in process `syz.2.172'. [ 130.605080][ T6387] openvswitch: netlink: Tunnel attr 8545 out of range max 16 [ 130.827014][ T6395] IPv6: pim6reg1: Disabled Multicast RS [ 131.479194][ T6401] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.175'. [ 131.489608][ T6402] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.175'. [ 131.532514][ T6402] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.175'. [ 131.551097][ T6400] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.175'. [ 132.504816][ T6413] netlink: 1010 bytes leftover after parsing attributes in process `syz.3.179'. [ 132.516136][ T6413] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 132.909541][ T6415] validate_nla: 3 callbacks suppressed [ 132.909565][ T6415] netlink: 'syz.1.181': attribute type 1 has an invalid length. [ 133.048354][ T6415] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.181'. [ 133.752765][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.761292][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.221416][ T6444] netlink: 132 bytes leftover after parsing attributes in process `syz.0.189'. [ 135.282745][ T6448] netlink: 65055 bytes leftover after parsing attributes in process `syz.3.188'. [ 135.298710][ T6448] netlink: 144 bytes leftover after parsing attributes in process `syz.3.188'. [ 135.590512][ T6448] team0: Port device team_slave_0 removed [ 135.625566][ T6448] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 135.872436][ T6456] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 135.905089][ T6456] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.912965][ T6456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.922827][ T6456] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.930334][ T6456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.954165][ T6456] team0: Port device bridge0 added [ 136.497760][ T6475] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.678181][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.196'. [ 137.653554][ T6479] netlink: 156 bytes leftover after parsing attributes in process `syz.0.198'. [ 137.675317][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.3.196'. [ 137.831687][ T6474] netlink: 60 bytes leftover after parsing attributes in process `syz.3.196'. [ 137.857894][ T6475] netlink: 60 bytes leftover after parsing attributes in process `syz.3.196'. [ 139.181769][ T6525] netlink: 'syz.1.206': attribute type 10 has an invalid length. [ 139.235565][ T6525] bridge0: port 3(hsr0) entered disabled state [ 139.242760][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.250998][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.415443][ T6525] bridge0: port 3(hsr0) entered blocking state [ 139.422412][ T6525] bridge0: port 3(hsr0) entered forwarding state [ 139.431793][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.440931][ T6525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.448877][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.456713][ T6525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.533161][ T6525] team0: Port device bridge0 added [ 139.546347][ T6527] netlink: 156 bytes leftover after parsing attributes in process `syz.2.209'. [ 140.205220][ T6530] €Â0: renamed from batadv_slave_1 (while UP) [ 140.591037][ T6535] sctp: [Deprecated]: syz.1.211 (pid 6535) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.591037][ T6535] Use struct sctp_sack_info instead [ 144.715762][ T6576] netlink: 156 bytes leftover after parsing attributes in process `syz.1.221'. [ 145.156760][ T6579] €Â0: renamed from batadv_slave_1 (while UP) [ 145.652350][ T6591] dvmrp1: tun_chr_ioctl cmd 1074025675 [ 145.667428][ T6591] dvmrp1: persist disabled [ 146.197837][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.230'. [ 146.206995][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.230'. [ 146.261221][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.230'. [ 146.288626][ T6604] netlink: 60 bytes leftover after parsing attributes in process `syz.3.230'. [ 146.857700][ T6623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.235'. [ 146.883114][ T6623] netlink: 60 bytes leftover after parsing attributes in process `syz.1.235'. [ 146.976685][ T6622] netlink: 60 bytes leftover after parsing attributes in process `syz.1.235'. [ 146.990724][ T6620] €Â0: renamed from batadv_slave_1 (while UP) [ 147.265342][ T6628] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.236'. [ 147.393496][ T6636] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.236'. [ 147.406815][ T6636] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 147.422192][ T6636] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.568170][ T6661] netlink: 'syz.3.247': attribute type 10 has an invalid length. [ 148.591292][ T6661] macvlan0: entered promiscuous mode [ 148.596964][ T6661] macvlan0: entered allmulticast mode [ 148.646472][ T6661] veth1_vlan: entered allmulticast mode [ 148.683237][ T6661] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 149.413892][ T6682] netlink: 'syz.3.251': attribute type 21 has an invalid length. [ 149.472371][ T6682] netlink: 'syz.3.251': attribute type 4 has an invalid length. [ 151.294383][ T6716] __nla_validate_parse: 2 callbacks suppressed [ 151.294474][ T6716] netlink: 132 bytes leftover after parsing attributes in process `syz.1.262'. [ 151.673314][ T6721] netlink: 'syz.0.264': attribute type 9 has an invalid length. [ 151.705183][ T6721] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.264'. [ 151.780616][ T6729] netlink: 'syz.1.266': attribute type 7 has an invalid length. [ 152.417266][ T6732] sit0: left promiscuous mode [ 152.589638][ T6733] sit0: entered promiscuous mode [ 153.462034][ T6757] netlink: 132 bytes leftover after parsing attributes in process `syz.2.276'. [ 154.804746][ T6773] netlink: 188 bytes leftover after parsing attributes in process `syz.3.280'. [ 156.412317][ T6797] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.634103][ T6809] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.291'. [ 157.651830][ T6809] openvswitch: netlink: IP tunnel attribute has 3040 unknown bytes. [ 158.297581][ T6820] sit0: entered allmulticast mode [ 158.350989][ T6811] sit0: entered promiscuous mode [ 158.531553][ T6834] netlink: 22 bytes leftover after parsing attributes in process `syz.2.300'. [ 159.176855][ T6843] netlink: 'syz.2.302': attribute type 29 has an invalid length. [ 159.836654][ T6843] netlink: 'syz.2.302': attribute type 29 has an invalid length. [ 159.856430][ T6840] netlink: 'syz.3.301': attribute type 10 has an invalid length. [ 159.887335][ T6840] netlink: 55 bytes leftover after parsing attributes in process `syz.3.301'. [ 160.763664][ T6857] netlink: 830 bytes leftover after parsing attributes in process `syz.0.307'. [ 160.898695][ T6860] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.307'. [ 160.910550][ T6859] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.306'. [ 160.950536][ T6857] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.307'. [ 161.420901][ T6860] syzkaller0: entered promiscuous mode [ 161.426617][ T6860] syzkaller0: entered allmulticast mode [ 161.546522][ T6869] netlink: 14556 bytes leftover after parsing attributes in process `syz.1.309'. [ 163.526809][ T51] Bluetooth: hci1: Dropping invalid advertising data [ 163.542016][ T51] Bluetooth: hci1: Malformed LE Event: 0x02 [ 164.663276][ T6885] delete_channel: no stack [ 165.644177][ T6886] netlink: 12 bytes leftover after parsing attributes in process `syz.1.314'. [ 165.989093][ T6895] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.317'. [ 171.030185][ T6922] syz.0.325 (6922) used greatest stack depth: 19944 bytes left [ 172.863029][ T6971] netlink: 156 bytes leftover after parsing attributes in process `syz.3.341'. [ 173.508077][ T6996] netlink: 'syz.0.344': attribute type 27 has an invalid length. [ 174.275592][ T7002] netlink: 1030 bytes leftover after parsing attributes in process `syz.1.353'. [ 174.450919][ T7006] hsr0: left allmulticast mode [ 174.467393][ T7006] hsr_slave_0: left allmulticast mode [ 174.472982][ T7006] hsr_slave_1: left allmulticast mode [ 174.497543][ T7006] bridge0: port 3(hsr0) entered disabled state [ 174.596048][ T7006] bridge_slave_1: left allmulticast mode [ 174.622618][ T7006] bridge_slave_1: left promiscuous mode [ 174.632021][ T7006] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.643747][ T7013] netlink: 'syz.1.348': attribute type 9 has an invalid length. [ 174.661327][ T7013] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.348'. [ 174.693493][ T7006] bridge_slave_0: left allmulticast mode [ 174.700755][ T7006] bridge_slave_0: left promiscuous mode [ 174.710816][ T7006] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.151659][ T7008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 175.160365][ T7008] IPv6: NLM_F_CREATE should be set when creating new route [ 175.169668][ T7008] IPv6: NLM_F_CREATE should be set when creating new route [ 175.177668][ T7008] IPv6: NLM_F_CREATE should be set when creating new route [ 175.197467][ T7031] netlink: 180 bytes leftover after parsing attributes in process `syz.2.354'. [ 175.215551][ T7017] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.350'. [ 175.262281][ T7031] netlink: 'syz.2.354': attribute type 10 has an invalid length. [ 175.410554][ T7031] team0 (unregistering): Port device team_slave_0 removed [ 175.438394][ T7031] team0 (unregistering): Port device team_slave_1 removed [ 175.462850][ T7031] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.470890][ T7031] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.522872][ T7031] team0 (unregistering): Port device bridge0 removed [ 175.624819][ T7015] netlink: 'syz.1.348': attribute type 9 has an invalid length. [ 175.641540][ T7015] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.348'. [ 177.931016][ T7067] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 177.949666][ T7067] netlink: 65015 bytes leftover after parsing attributes in process `syz.3.367'. [ 178.251003][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 178.443662][ T7079] netlink: 'syz.3.369': attribute type 12 has an invalid length. [ 178.469246][ T7079] netlink: 'syz.3.369': attribute type 15 has an invalid length. [ 178.517564][ T7081] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 178.550117][ T7083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.369'. [ 178.701792][ T7087] netlink: 'syz.0.370': attribute type 21 has an invalid length. [ 178.731887][ T7087] netlink: 168 bytes leftover after parsing attributes in process `syz.0.370'. [ 178.790048][ T7088] netlink: 830 bytes leftover after parsing attributes in process `syz.0.370'. [ 178.876326][ T7092] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.373'. [ 180.758879][ T7114] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.379'. [ 181.135708][ T7136] sctp: [Deprecated]: syz.0.391 (pid 7136) Use of int in max_burst socket option deprecated. [ 181.135708][ T7136] Use struct sctp_assoc_value instead [ 181.841241][ T7151] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.386'. [ 183.462752][ T5784] cgroup: fork rejected by pids controller in /syz2 [ 184.044241][ T7192] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.402'. [ 184.656583][ T2915] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.930751][ T2915] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.981889][ T7199] netlink: 'syz.3.404': attribute type 12 has an invalid length. [ 184.997382][ T7199] netlink: 112 bytes leftover after parsing attributes in process `syz.3.404'. [ 185.062006][ T2915] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.083727][ T5780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 185.129446][ T5780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 185.140994][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 185.178231][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 185.197393][ T5780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 185.208035][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 185.395256][ T2915] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.041768][ T7226] netlink: 'syz.1.411': attribute type 21 has an invalid length. [ 186.071325][ T7226] netlink: 128 bytes leftover after parsing attributes in process `syz.1.411'. [ 186.090911][ T7226] netlink: 3 bytes leftover after parsing attributes in process `syz.1.411'. [ 186.131027][ T7201] chnl_net:caif_netlink_parms(): no params data found [ 186.265634][ T7225] delete_channel: no stack [ 187.317680][ T5780] Bluetooth: hci3: command tx timeout [ 187.379931][ T7201] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.431810][ T7201] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.442564][ T7201] bridge_slave_0: entered allmulticast mode [ 187.459558][ T7201] bridge_slave_0: entered promiscuous mode [ 187.492574][ T7241] netlink: 128 bytes leftover after parsing attributes in process `syz.1.414'. [ 187.585652][ T7201] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.610789][ T7201] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.627901][ T7201] bridge_slave_1: entered allmulticast mode [ 187.649839][ T7201] bridge_slave_1: entered promiscuous mode [ 187.981474][ T7201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.030298][ T7201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.363932][ T7201] team0: Port device team_slave_0 added [ 188.386819][ T7274] netlink: 'syz.3.420': attribute type 8 has an invalid length. [ 188.478483][ T7274] netlink: 174904 bytes leftover after parsing attributes in process `syz.3.420'. [ 188.514532][ T7201] team0: Port device team_slave_1 added [ 189.387434][ T5780] Bluetooth: hci3: command tx timeout [ 189.404264][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.417041][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.443891][ T7201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.458078][ T7201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.465699][ T7201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.514843][ T7201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.661630][ T7294] raw_sendmsg: syz.1.426 forgot to set AF_INET. Fix it! [ 189.980270][ T7301] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 190.020101][ T7301] netlink: 'syz.1.428': attribute type 4 has an invalid length. [ 190.046117][ T7301] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.428'. [ 190.090562][ T7201] hsr_slave_0: entered promiscuous mode [ 190.115647][ T7201] hsr_slave_1: entered promiscuous mode [ 190.131050][ T7201] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.157290][ T7201] Cannot create hsr debugfs directory [ 190.473312][ T7324] netlink: 'syz.0.433': attribute type 16 has an invalid length. [ 190.496486][ T7324] netlink: 'syz.0.433': attribute type 3 has an invalid length. [ 190.516776][ T7324] netlink: 132 bytes leftover after parsing attributes in process `syz.0.433'. [ 191.467557][ T5780] Bluetooth: hci3: command tx timeout [ 193.557803][ T5780] Bluetooth: hci3: command tx timeout [ 194.112890][ T2915] hsr_slave_0: left promiscuous mode [ 194.155484][ T2915] hsr_slave_1: left promiscuous mode [ 194.188948][ T2915] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.210081][ T2915] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.220573][ T2915] batman_adv: batadv0: Interface deactivated: €Â0 [ 194.237876][ T2915] batman_adv: batadv0: Removing interface: €Â0 [ 194.256518][ T2915] bridge_slave_1: left allmulticast mode [ 194.264521][ T2915] bridge_slave_1: left promiscuous mode [ 194.283683][ T2915] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.033261][ T2915] bridge_slave_0: left promiscuous mode [ 195.040944][ T2915] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.104646][ T2915] veth1_macvtap: left promiscuous mode [ 195.116983][ T2915] veth0_macvtap: left promiscuous mode [ 195.127546][ T2915] veth1_vlan: left promiscuous mode [ 195.134363][ T2915] veth0_vlan: left promiscuous mode [ 195.151824][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.158505][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.228590][ T7377] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.443'. [ 199.686198][ T7410] netlink: 40 bytes leftover after parsing attributes in process `syz.3.449'. [ 199.703078][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 199.716741][ T7410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.449'. [ 200.154154][ T7429] netlink: 128 bytes leftover after parsing attributes in process `syz.0.455'. [ 200.239027][ T7429] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 200.439281][ T7201] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 200.932361][ T7201] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 200.942801][ T7429] syz.0.455 (7429) used greatest stack depth: 19304 bytes left [ 201.001215][ T7201] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 201.119873][ T7201] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 201.550635][ T7201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.741400][ T7201] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.859723][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.867192][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.940294][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.947601][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.051586][ T7484] netlink: 16399 bytes leftover after parsing attributes in process `syz.3.464'. [ 202.135389][ T7486] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 202.164626][ T7486] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 202.184089][ T7486] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 202.224858][ T7486] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 202.240847][ T7486] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 202.729087][ T7501] netlink: 'syz.0.465': attribute type 29 has an invalid length. [ 203.472346][ T7201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.554853][ T7201] veth0_vlan: entered promiscuous mode [ 203.613788][ T7201] veth1_vlan: entered promiscuous mode [ 203.783247][ T7201] veth0_macvtap: entered promiscuous mode [ 203.861885][ T7201] veth1_macvtap: entered promiscuous mode [ 203.998291][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.016193][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.034215][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.053259][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.080393][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.096155][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.134921][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.162301][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 204.173873][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.185179][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.212385][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.235173][ T7201] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: €Â0 [ 204.253500][ T7201] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.266588][ T7201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.303370][ T7201] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.314863][ T7201] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.332693][ T7201] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.359473][ T7201] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.041269][ T7541] netlink: 'syz.3.473': attribute type 3 has an invalid length. [ 205.070545][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.086436][ T7541] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.473'. [ 205.111239][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.202798][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.226992][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.238581][ T7574] syzkaller0: entered promiscuous mode [ 206.244165][ T7574] syzkaller0: entered allmulticast mode [ 209.013387][ T7612] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.486'. [ 212.601576][ T5776] Bluetooth: hci2: command 0x0406 tx timeout [ 212.609665][ T5778] Bluetooth: hci1: command 0x0406 tx timeout [ 212.612356][ T5776] Bluetooth: hci0: command 0x0406 tx timeout [ 218.524718][ T7685] netlink: 132 bytes leftover after parsing attributes in process `syz.0.507'. [ 218.536497][ T7697] netlink: 'syz.1.511': attribute type 2 has an invalid length. [ 218.545302][ T7697] netlink: 'syz.1.511': attribute type 8 has an invalid length. [ 218.553839][ T7697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.511'. [ 218.576135][ T7698] netlink: 'syz.1.511': attribute type 11 has an invalid length. [ 219.052974][ T7713] netlink: 'syz.0.514': attribute type 2 has an invalid length. [ 219.063563][ T7713] netlink: 119 bytes leftover after parsing attributes in process `syz.0.514'. [ 222.333619][ T7722] netlink: 'syz.0.517': attribute type 21 has an invalid length. [ 222.401477][ T7722] netlink: 176 bytes leftover after parsing attributes in process `syz.0.517'. [ 222.434222][ T7725] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.518'. [ 222.444814][ T7725] tc_dump_action: action bad kind [ 222.465471][ T7728] netlink: 'syz.3.519': attribute type 19 has an invalid length. [ 222.491565][ T7728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.519'. [ 224.313840][ T7764] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 224.339933][ T7764] netlink: 'syz.3.526': attribute type 29 has an invalid length. [ 227.184687][ T7805] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 227.231424][ T7805] netlink: 55 bytes leftover after parsing attributes in process `syz.0.540'. [ 227.298342][ T7807] netlink: 'syz.0.540': attribute type 10 has an invalid length. [ 227.306293][ T7807] netlink: 55 bytes leftover after parsing attributes in process `syz.0.540'. [ 228.254696][ T7821] netlink: 'syz.1.544': attribute type 39 has an invalid length. [ 229.618461][ T7830] netlink: 'syz.2.546': attribute type 8 has an invalid length. [ 229.848250][ T7830] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.546'. [ 232.526864][ T7838] can: request_module (can-proto-0) failed. [ 232.608692][ T7841] tap0: tun_chr_ioctl cmd 2148553947 [ 232.849238][ T5085] Bluetooth: hci1: unexpected subevent 0x0c length: 150 > 5 [ 235.169313][ T7879] netlink: 'syz.0.556': attribute type 10 has an invalid length. [ 235.557222][ T7879] team0: Port device wlan1 added [ 235.750408][ T7869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.763628][ T7890] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.560'. [ 236.042968][ T7893] netlink: 63503 bytes leftover after parsing attributes in process `syz.3.562'. [ 236.066455][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.564'. [ 236.097339][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.564'. [ 236.113271][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.564'. [ 236.133119][ T7898] netlink: 60 bytes leftover after parsing attributes in process `syz.0.564'. [ 238.516724][ T7928] sctp: [Deprecated]: syz.1.574 (pid 7928) Use of int in maxseg socket option. [ 238.516724][ T7928] Use struct sctp_assoc_value instead [ 239.160191][ T7947] syzkaller0: entered promiscuous mode [ 239.166621][ T7947] syzkaller0: entered allmulticast mode [ 241.647026][ T7988] hsr0: left allmulticast mode [ 241.669475][ T7988] hsr_slave_0: left allmulticast mode [ 241.685969][ T7988] hsr_slave_1: left allmulticast mode [ 241.708256][ T7988] bridge0: port 3(hsr0) entered disabled state [ 241.991454][ T7988] bridge_slave_1: left allmulticast mode [ 242.021501][ T7988] bridge_slave_1: left promiscuous mode [ 242.051202][ T7988] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.265828][ T7988] bridge_slave_0: left promiscuous mode [ 242.307628][ T7988] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.579336][ T7988] team0: Port device bridge0 removed [ 243.117181][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.124727][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.163356][ T8023] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.171647][ T8023] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.341433][ T8031] netlink: 'syz.0.600': attribute type 10 has an invalid length. [ 243.373651][ T8031] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 244.129219][ T8046] netlink: 140 bytes leftover after parsing attributes in process `syz.0.605'. [ 244.151900][ T8046] netlink: 10 bytes leftover after parsing attributes in process `syz.0.605'. [ 244.176455][ T8048] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.606'. [ 244.203186][ T8046] bond0: (slave bond_slave_0): Releasing backup interface [ 244.245536][ T8046] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 244.263961][ T8050] netlink: 132 bytes leftover after parsing attributes in process `syz.2.607'. [ 245.191576][ T8057] syzkaller0: entered promiscuous mode [ 245.242981][ T8057] syzkaller0: entered allmulticast mode [ 245.368427][ T8074] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.612'. [ 245.563566][ T8077] netlink: 'syz.2.614': attribute type 21 has an invalid length. [ 245.577438][ T8077] netlink: 'syz.2.614': attribute type 4 has an invalid length. [ 245.585465][ T8077] netlink: 132 bytes leftover after parsing attributes in process `syz.2.614'. [ 245.612976][ T8074] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.612'. [ 245.635234][ T8074] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 245.681695][ T8074] CPU: 0 PID: 8074 Comm: syz.1.612 Not tainted syzkaller #0 [ 245.689120][ T8074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 245.699451][ T8074] Call Trace: [ 245.702978][ T8074] [ 245.705974][ T8074] dump_stack_lvl+0x18c/0x250 [ 245.710834][ T8074] ? show_regs_print_info+0x20/0x20 [ 245.716466][ T8074] ? load_image+0x420/0x420 [ 245.721077][ T8074] sysfs_warn_dup+0x8e/0xa0 [ 245.725747][ T8074] sysfs_do_create_link_sd+0xc0/0x110 [ 245.731197][ T8074] device_add_class_symlinks+0x1cf/0x240 [ 245.736896][ T8074] device_add+0x4f9/0xc40 [ 245.741298][ T8074] wiphy_register+0x1d99/0x2ac0 [ 245.746203][ T8074] ? cfg80211_event_work+0x40/0x40 [ 245.751462][ T8074] ? minstrel_ht_alloc+0x88a/0x990 [ 245.756648][ T8074] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 245.762797][ T8074] ieee80211_register_hw+0x2dd8/0x3b30 [ 245.768386][ T8074] ? ieee80211_register_hw+0xfb1/0x3b30 [ 245.774066][ T8074] ? ieee80211_tasklet_handler+0x20/0x20 [ 245.779731][ T8074] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 245.785756][ T8074] ? __debug_object_init+0xec/0x450 [ 245.790996][ T8074] ? __asan_memset+0x22/0x40 [ 245.795735][ T8074] ? __hrtimer_init+0x189/0x270 [ 245.800628][ T8074] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 245.806499][ T8074] ? mac80211_hwsim_free+0x220/0x220 [ 245.811828][ T8074] ? rcu_is_watching+0x15/0xb0 [ 245.816746][ T8074] ? kstrndup+0xbd/0x140 [ 245.821045][ T8074] hwsim_new_radio_nl+0xdad/0x1a70 [ 245.826242][ T8074] ? __nla_validate+0x50/0x50 [ 245.830976][ T8074] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 245.837356][ T8074] ? __nla_parse+0x40/0x50 [ 245.842113][ T8074] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 245.848482][ T8074] genl_family_rcv_msg_doit+0x21a/0x310 [ 245.854083][ T8074] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 245.860272][ T8074] ? bpf_lsm_capable+0x9/0x10 [ 245.864987][ T8074] ? security_capable+0x89/0xb0 [ 245.869876][ T8074] genl_rcv_msg+0x611/0x7a0 [ 245.874422][ T8074] ? genl_bind+0x360/0x360 [ 245.879045][ T8074] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 245.885414][ T8074] ? ref_tracker_free+0x686/0x830 [ 245.890479][ T8074] ? __kasan_kmalloc_large+0x8b/0xa0 [ 245.896175][ T8074] netlink_rcv_skb+0x235/0x4c0 [ 245.900975][ T8074] ? genl_bind+0x360/0x360 [ 245.905428][ T8074] ? netlink_ack+0x1160/0x1160 [ 245.910231][ T8074] ? __lock_acquire+0x7d80/0x7d80 [ 245.915304][ T8074] ? down_read+0x1ac/0x2e0 [ 245.919762][ T8074] genl_rcv+0x28/0x40 [ 245.923778][ T8074] netlink_unicast+0x7b1/0x930 [ 245.928599][ T8074] netlink_sendmsg+0x8d0/0xbf0 [ 245.933496][ T8074] ? netlink_getsockopt+0x590/0x590 [ 245.938732][ T8074] ? apparmor_socket_sendmsg+0x8e/0x330 [ 245.944311][ T8074] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 245.949637][ T8074] ? security_socket_sendmsg+0x80/0xa0 [ 245.955134][ T8074] ? netlink_getsockopt+0x590/0x590 [ 245.960379][ T8074] ____sys_sendmsg+0x61b/0x980 [ 245.965184][ T8074] ? __asan_memset+0x22/0x40 [ 245.969819][ T8074] ? __sys_sendmsg_sock+0x30/0x30 [ 245.974957][ T8074] ? __import_iovec+0x5f2/0x850 [ 245.979899][ T8074] ? import_iovec+0x73/0xa0 [ 245.984638][ T8074] ___sys_sendmsg+0x2a6/0x360 [ 245.989378][ T8074] ? __sys_sendmsg+0x2b0/0x2b0 [ 245.994225][ T8074] __se_sys_sendmsg+0x1d0/0x2c0 [ 245.999205][ T8074] ? __x64_sys_sendmsg+0x80/0x80 [ 246.004188][ T8074] ? lockdep_hardirqs_on+0x98/0x150 [ 246.009439][ T8074] do_syscall_64+0x55/0xb0 [ 246.013985][ T8074] ? clear_bhb_loop+0x40/0x90 [ 246.018781][ T8074] ? clear_bhb_loop+0x40/0x90 [ 246.023534][ T8074] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.029570][ T8074] RIP: 0033:0x7f6d2419e0d9 [ 246.034237][ T8074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.055298][ T8074] RSP: 002b:00007f6d250c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 246.063770][ T8074] RAX: ffffffffffffffda RBX: 00007f6d24426090 RCX: 00007f6d2419e0d9 [ 246.071992][ T8074] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 246.080296][ T8074] RBP: 00007f6d24235024 R08: 0000000000000000 R09: 0000000000000000 [ 246.088312][ T8074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.096593][ T8074] R13: 00007f6d24426128 R14: 00007f6d24426090 R15: 00007ffc1c114728 [ 246.104808][ T8074] [ 246.354584][ T8080] netlink: 'syz.3.615': attribute type 1 has an invalid length. [ 246.371153][ T8080] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.615'. [ 246.856944][ T8099] netlink: 'syz.2.621': attribute type 21 has an invalid length. [ 246.982757][ T8099] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.621'. [ 248.222267][ T8116] netlink: 140 bytes leftover after parsing attributes in process `syz.1.627'. [ 248.275208][ T8116] bond0: (slave bond_slave_0): Releasing backup interface [ 248.361687][ T8116] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 250.772600][ T8144] __nla_validate_parse: 1 callbacks suppressed [ 250.772620][ T8144] netlink: 12 bytes leftover after parsing attributes in process `syz.0.634'. [ 250.797864][ T8144] netlink: 152 bytes leftover after parsing attributes in process `syz.0.634'. [ 250.999536][ T8154] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 251.022503][ T8154] netlink: 14207 bytes leftover after parsing attributes in process `syz.0.636'. [ 254.587700][ T8190] sit0: left promiscuous mode [ 255.482497][ T8199] netlink: 'syz.1.650': attribute type 10 has an invalid length. [ 255.682175][ T8199] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 256.156775][ T8224] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.654'. [ 256.607353][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.613980][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.733774][ T8224] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.654'. [ 259.021973][ T8249] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 259.087838][ T8249] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.659'. [ 261.194073][ T8288] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.668'. [ 261.498578][ T8293] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.670'. [ 263.051124][ T8339] netlink: 'syz.0.682': attribute type 10 has an invalid length. [ 263.491941][ T8339] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 263.511495][ T8345] netlink: 10 bytes leftover after parsing attributes in process `syz.3.684'. [ 263.827731][ T8357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.687'. [ 263.859370][ T8357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.687'. [ 263.883882][ T8358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.687'. [ 263.931815][ T8357] netlink: 60 bytes leftover after parsing attributes in process `syz.0.687'. [ 264.057104][ T8357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.065633][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 264.077955][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 264.087343][ T8357] IPv6: NLM_F_CREATE should be set when creating new route [ 264.134193][ T8358] netlink: 'syz.0.687': attribute type 9 has an invalid length. [ 264.152351][ T8358] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.687'. [ 264.295704][ T8357] netlink: 'syz.0.687': attribute type 9 has an invalid length. [ 264.317932][ T8357] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.687'. [ 264.887581][ T8368] netlink: 'syz.1.689': attribute type 2 has an invalid length. [ 265.082716][ T8372] netlink: 'syz.3.692': attribute type 21 has an invalid length. [ 265.267186][ T8383] netlink: 'syz.1.694': attribute type 21 has an invalid length. [ 265.296005][ T8383] netlink: 'syz.1.694': attribute type 1 has an invalid length. [ 265.488612][ T8387] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.696'. [ 265.831230][ T8394] netlink: 'syz.2.698': attribute type 2 has an invalid length. [ 265.867347][ T8394] netlink: 'syz.2.698': attribute type 8 has an invalid length. [ 265.902494][ T8393] netlink: 'syz.2.698': attribute type 2 has an invalid length. [ 265.940590][ T8393] netlink: 'syz.2.698': attribute type 8 has an invalid length. [ 266.815806][ T8422] __nla_validate_parse: 3 callbacks suppressed [ 266.815844][ T8422] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.705'. [ 267.285816][ T8432] bridge0: entered promiscuous mode [ 267.292455][ T8432] bridge0: entered allmulticast mode [ 268.594915][ T8433] team0 (unregistering): Port device team_slave_0 removed [ 268.656462][ T8433] team0 (unregistering): Port device team_slave_1 removed [ 272.163866][ T8482] netlink: 40 bytes leftover after parsing attributes in process `syz.0.723'. [ 273.366274][ T8509] netlink: 128 bytes leftover after parsing attributes in process `syz.0.732'. [ 273.391192][ T8509] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 273.428615][ T8515] validate_nla: 2 callbacks suppressed [ 273.428658][ T8515] netlink: 'syz.3.733': attribute type 27 has an invalid length. [ 273.481102][ T8515] netlink: 'syz.3.733': attribute type 3 has an invalid length. [ 273.536660][ T8515] netlink: 132 bytes leftover after parsing attributes in process `syz.3.733'. [ 273.953266][ T8523] netlink: 14 bytes leftover after parsing attributes in process `syz.2.734'. [ 275.713430][ T8523] hsr_slave_0: left promiscuous mode [ 276.169443][ T8523] hsr_slave_1: left promiscuous mode [ 277.013144][ T8542] netlink: 'syz.2.741': attribute type 22 has an invalid length. [ 277.023925][ T8542] netlink: 14380 bytes leftover after parsing attributes in process `syz.2.741'. [ 277.286491][ T8555] netlink: 'syz.1.744': attribute type 27 has an invalid length. [ 277.316724][ T8555] netlink: 'syz.1.744': attribute type 3 has an invalid length. [ 277.361448][ T8555] netlink: 132 bytes leftover after parsing attributes in process `syz.1.744'. [ 277.472986][ T8552] syzkaller0: entered promiscuous mode [ 277.489711][ T8552] syzkaller0: entered allmulticast mode [ 277.773286][ T8569] netlink: 'syz.0.747': attribute type 11 has an invalid length. [ 280.717449][ T8593] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 280.735976][ T8593] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 281.442571][ T8598] netlink: 15743 bytes leftover after parsing attributes in process `syz.2.757'. [ 283.256816][ T8660] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.776'. [ 283.419555][ T8660] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.776'. [ 283.543335][ T8657] netlink: 'syz.2.775': attribute type 153 has an invalid length. [ 283.577656][ T8657] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.775'. [ 283.700435][ T8671] syz.3.779 (8671) used obsolete PPPIOCDETACH ioctl [ 283.804341][ T8674] netlink: 128 bytes leftover after parsing attributes in process `syz.0.780'. [ 283.819431][ T8678] netlink: 'syz.2.781': attribute type 11 has an invalid length. [ 283.827571][ T8674] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 283.843529][ T8678] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.781'. [ 283.900213][ T8678] netlink: 'syz.2.781': attribute type 11 has an invalid length. [ 283.949534][ T8678] netlink: 184116 bytes leftover after parsing attributes in process `syz.2.781'. [ 284.165447][ T8691] netlink: 'syz.2.785': attribute type 1 has an invalid length. [ 284.187305][ T8691] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.785'. [ 284.201905][ T8695] netlink: 'syz.0.783': attribute type 2 has an invalid length. [ 284.221328][ T8695] netlink: 'syz.0.783': attribute type 4 has an invalid length. [ 284.235153][ T8695] netlink: 132 bytes leftover after parsing attributes in process `syz.0.783'. [ 284.422012][ T8700] netlink: 'syz.1.787': attribute type 5 has an invalid length. [ 284.547673][ T8704] netlink: 'syz.0.788': attribute type 10 has an invalid length. [ 284.567550][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.788'. [ 284.792632][ T8715] netlink: 144 bytes leftover after parsing attributes in process `syz.0.788'. [ 285.523521][ T8724] syzkaller0: entered promiscuous mode [ 285.566111][ T8724] syzkaller0: entered allmulticast mode [ 289.264105][ T8739] tap0: tun_chr_ioctl cmd 1074025677 [ 289.273895][ T8739] tap0: linktype set to 1 [ 289.294370][ T8742] netlink: 'syz.2.796': attribute type 10 has an invalid length. [ 289.346234][ T8742] syz_tun: entered promiscuous mode [ 289.392895][ T8742] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 289.407360][ T5085] Bluetooth: hci2: unexpected event 0x0f length: 151 > 4 [ 289.654529][ T8762] netlink: 132 bytes leftover after parsing attributes in process `syz.1.803'. [ 289.694699][ T8762] netlink: 'syz.1.803': attribute type 10 has an invalid length. [ 289.704906][ T8762] netlink: 55 bytes leftover after parsing attributes in process `syz.1.803'. [ 289.962213][ T8757] netlink: 'syz.3.802': attribute type 153 has an invalid length. [ 289.977414][ T8757] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.802'. [ 291.475446][ T8798] netlink: 'syz.3.812': attribute type 10 has an invalid length. [ 292.046034][ T8798] team0: Port device wlan1 added [ 292.207914][ T8811] netlink: 'syz.2.815': attribute type 10 has an invalid length. [ 293.423008][ T8847] netlink: 'syz.1.822': attribute type 29 has an invalid length. [ 293.453626][ T8847] netlink: 'syz.1.822': attribute type 29 has an invalid length. [ 293.462800][ T8849] netlink: 'syz.1.822': attribute type 29 has an invalid length. [ 293.473309][ T5085] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 293.482315][ T5085] Bluetooth: hci2: Injecting HCI hardware error event [ 293.492312][ T5780] Bluetooth: hci2: hardware error 0x00 [ 294.285671][ T8867] netlink: 'syz.0.826': attribute type 153 has an invalid length. [ 294.294108][ T8867] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.826'. [ 294.499135][ T8873] netlink: 'syz.2.830': attribute type 21 has an invalid length. [ 294.539955][ T8870] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.829'. [ 294.731443][ T8877] netlink: 'syz.0.832': attribute type 3 has an invalid length. [ 294.750518][ T8877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.832'. [ 294.781958][ T8880] netlink: 36 bytes leftover after parsing attributes in process `syz.1.834'. [ 294.808660][ T8880] : renamed from caif0 [ 294.881658][ T8880] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 295.405636][ T8899] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.840'. [ 295.548018][ T5780] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 296.116958][ T8921] netlink: 134736 bytes leftover after parsing attributes in process `syz.1.847'. [ 297.501264][ T8955] netlink: 'syz.1.857': attribute type 49 has an invalid length. [ 297.514426][ T8955] netlink: set zone limit has 8 unknown bytes [ 297.796854][ T8964] netlink: 'syz.3.859': attribute type 21 has an invalid length. [ 297.808896][ T8964] netlink: 'syz.3.859': attribute type 6 has an invalid length. [ 297.817567][ T8964] netlink: 132 bytes leftover after parsing attributes in process `syz.3.859'. [ 297.835246][ T8965] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.860'. [ 297.877357][ T8965] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.860'. [ 297.981276][ T8960] netlink: 'syz.3.859': attribute type 21 has an invalid length. [ 298.090238][ T8960] netlink: 'syz.3.859': attribute type 6 has an invalid length. [ 298.136032][ T8960] netlink: 132 bytes leftover after parsing attributes in process `syz.3.859'. [ 298.180086][ T8963] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.860'. [ 298.218280][ T8967] netlink: 'syz.1.860': attribute type 2 has an invalid length. [ 298.226075][ T8967] netlink: 'syz.1.860': attribute type 8 has an invalid length. [ 298.284997][ T8967] netlink: 132 bytes leftover after parsing attributes in process `syz.1.860'. [ 298.685257][ T8958] netlink: 'syz.2.858': attribute type 3 has an invalid length. [ 299.799368][ T8994] bridge0: port 3(batadv0) entered blocking state [ 299.838257][ T8994] bridge0: port 3(batadv0) entered disabled state [ 299.856723][ T8994] batadv0: entered allmulticast mode [ 299.937836][ T8994] batadv0: entered promiscuous mode [ 299.954198][ T8989] __nla_validate_parse: 1 callbacks suppressed [ 299.954425][ T8989] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.865'. [ 299.976102][ T8994] bridge0: port 3(batadv0) entered blocking state [ 299.984667][ T8994] bridge0: port 3(batadv0) entered forwarding state [ 300.071753][ T8995] netlink: 36 bytes leftover after parsing attributes in process `syz.0.866'. [ 300.084223][ T8995] : renamed from caif0 [ 300.133077][ T8995] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 300.414635][ T2995] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 300.424673][ T2995] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 300.971515][ T9015] netlink: 134744 bytes leftover after parsing attributes in process `syz.2.872'. [ 300.993593][ T9022] netlink: 164 bytes leftover after parsing attributes in process `syz.3.874'. [ 302.294840][ T9062] netlink: 'syz.1.880': attribute type 3 has an invalid length. [ 302.314036][ T9060] netlink: 'syz.3.884': attribute type 10 has an invalid length. [ 302.332434][ T9060] netlink: 40 bytes leftover after parsing attributes in process `syz.3.884'. [ 302.346160][ T9062] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.880'. [ 302.365102][ T9060] team0: entered promiscuous mode [ 302.385211][ T9060] team_slave_1: entered promiscuous mode [ 302.398853][ T9060] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 302.431383][ T9060] team0: entered allmulticast mode [ 302.444736][ T9060] team_slave_1: entered allmulticast mode [ 302.463678][ T9060] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 302.518165][ T9060] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 302.818924][ T9071] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.887'. [ 303.186501][ T9077] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 303.201066][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.888'. [ 303.227324][ T9077] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 303.235428][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz.2.888'. [ 303.304469][ T9076] netlink: 'syz.2.888': attribute type 10 has an invalid length. [ 303.345641][ T9076] netlink: 40 bytes leftover after parsing attributes in process `syz.2.888'. [ 304.572029][ T9111] FAULT_INJECTION: forcing a failure. [ 304.572029][ T9111] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 304.657350][ T9111] CPU: 1 PID: 9111 Comm: syz.2.900 Not tainted syzkaller #0 [ 304.664742][ T9111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.675146][ T9111] Call Trace: [ 304.678540][ T9111] [ 304.681610][ T9111] dump_stack_lvl+0x18c/0x250 [ 304.686364][ T9111] ? show_regs_print_info+0x20/0x20 [ 304.691731][ T9111] ? load_image+0x420/0x420 [ 304.696323][ T9111] ? __might_fault+0xaa/0x120 [ 304.701075][ T9111] ? __lock_acquire+0x7d80/0x7d80 [ 304.706267][ T9111] should_fail_ex+0x394/0x4c0 [ 304.711022][ T9111] _copy_from_user+0x2f/0xe0 [ 304.715805][ T9111] __sys_bpf+0x23e/0x890 [ 304.720134][ T9111] ? read_tsc+0x9/0x20 [ 304.724535][ T9111] ? bpf_link_show_fdinfo+0x390/0x390 [ 304.730030][ T9111] ? lock_chain_count+0x20/0x20 [ 304.735162][ T9111] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 304.741555][ T9111] __x64_sys_bpf+0x7c/0x90 [ 304.746172][ T9111] do_syscall_64+0x55/0xb0 [ 304.750765][ T9111] ? clear_bhb_loop+0x40/0x90 [ 304.755530][ T9111] ? clear_bhb_loop+0x40/0x90 [ 304.760628][ T9111] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 304.766971][ T9111] RIP: 0033:0x7fec25f9e0d9 [ 304.771566][ T9111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.791949][ T9111] RSP: 002b:00007fec26f13028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 304.800628][ T9111] RAX: ffffffffffffffda RBX: 00007fec26225fa0 RCX: 00007fec25f9e0d9 [ 304.808761][ T9111] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 304.817419][ T9111] RBP: 00007fec26f13090 R08: 0000000000000000 R09: 0000000000000000 [ 304.825832][ T9111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.834845][ T9111] R13: 00007fec26226038 R14: 00007fec26225fa0 R15: 00007fff184d9558 [ 304.843119][ T9111] [ 305.132565][ T9116] netlink: 'syz.1.902': attribute type 29 has an invalid length. [ 305.157313][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 305.178120][ T9116] netlink: 'syz.1.902': attribute type 29 has an invalid length. [ 305.216237][ T9116] netlink: 4 bytes leftover after parsing attributes in process `syz.1.902'. [ 305.694181][ T9123] netlink: 16046 bytes leftover after parsing attributes in process `syz.1.906'. [ 306.578281][ T9146] FAULT_INJECTION: forcing a failure. [ 306.578281][ T9146] name failslab, interval 1, probability 0, space 0, times 1 [ 306.619679][ T9146] CPU: 1 PID: 9146 Comm: syz.3.913 Not tainted syzkaller #0 [ 306.627079][ T9146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.637310][ T9146] Call Trace: [ 306.640650][ T9146] [ 306.643639][ T9146] dump_stack_lvl+0x18c/0x250 [ 306.648391][ T9146] ? show_regs_print_info+0x20/0x20 [ 306.653675][ T9146] ? load_image+0x420/0x420 [ 306.658286][ T9146] ? __lock_acquire+0x7d80/0x7d80 [ 306.663512][ T9146] should_fail_ex+0x394/0x4c0 [ 306.668421][ T9146] should_failslab+0x9/0x20 [ 306.673292][ T9146] slab_pre_alloc_hook+0x59/0x300 [ 306.678579][ T9146] ? trace_event_raw_event_lock_acquire+0x290/0x290 [ 306.685249][ T9146] ? bpf_test_init+0x9f/0x140 [ 306.690009][ T9146] ? bpf_test_init+0x9f/0x140 [ 306.694857][ T9146] __kmem_cache_alloc_node+0x53/0x250 [ 306.700419][ T9146] ? bpf_test_init+0x9f/0x140 [ 306.705163][ T9146] __kmalloc+0xa7/0x240 [ 306.709661][ T9146] bpf_test_init+0x9f/0x140 [ 306.714424][ T9146] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 306.719869][ T9146] ? __lock_acquire+0x7d80/0x7d80 [ 306.724975][ T9146] ? dev_put+0x80/0x80 [ 306.729151][ T9146] ? dev_put+0x80/0x80 [ 306.733319][ T9146] bpf_prog_test_run+0x31f/0x390 [ 306.738329][ T9146] __sys_bpf+0x49d/0x890 [ 306.742641][ T9146] ? bpf_link_show_fdinfo+0x390/0x390 [ 306.748181][ T9146] ? lock_chain_count+0x20/0x20 [ 306.753118][ T9146] __x64_sys_bpf+0x7c/0x90 [ 306.757608][ T9146] do_syscall_64+0x55/0xb0 [ 306.762089][ T9146] ? clear_bhb_loop+0x40/0x90 [ 306.766826][ T9146] ? clear_bhb_loop+0x40/0x90 [ 306.771840][ T9146] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.777815][ T9146] RIP: 0033:0x7f5cc419e0d9 [ 306.782461][ T9146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.802313][ T9146] RSP: 002b:00007f5cc5007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 306.810796][ T9146] RAX: ffffffffffffffda RBX: 00007f5cc4425fa0 RCX: 00007f5cc419e0d9 [ 306.818873][ T9146] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 306.826922][ T9146] RBP: 00007f5cc5007090 R08: 0000000000000000 R09: 0000000000000000 [ 306.835119][ T9146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 306.843180][ T9146] R13: 00007f5cc4426038 R14: 00007f5cc4425fa0 R15: 00007ffc5f900578 [ 306.851423][ T9146] [ 309.040813][ T9185] FAULT_INJECTION: forcing a failure. [ 309.040813][ T9185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.068590][ T9185] CPU: 0 PID: 9185 Comm: syz.3.923 Not tainted syzkaller #0 [ 309.076448][ T9185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 309.086984][ T9185] Call Trace: [ 309.090620][ T9185] [ 309.093620][ T9185] dump_stack_lvl+0x18c/0x250 [ 309.098575][ T9185] ? show_regs_print_info+0x20/0x20 [ 309.103952][ T9185] ? load_image+0x420/0x420 [ 309.108569][ T9185] ? __lock_acquire+0x7d80/0x7d80 [ 309.113762][ T9185] should_fail_ex+0x394/0x4c0 [ 309.118495][ T9185] _copy_from_user+0x2f/0xe0 [ 309.123132][ T9185] bpf_test_init+0xde/0x140 [ 309.127691][ T9185] bpf_prog_test_run_xdp+0x4cd/0x1140 [ 309.133372][ T9185] ? __lock_acquire+0x7d80/0x7d80 [ 309.138488][ T9185] ? dev_put+0x80/0x80 [ 309.142623][ T9185] ? dev_put+0x80/0x80 [ 309.146947][ T9185] bpf_prog_test_run+0x31f/0x390 [ 309.152032][ T9185] __sys_bpf+0x49d/0x890 [ 309.156764][ T9185] ? bpf_link_show_fdinfo+0x390/0x390 [ 309.162279][ T9185] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 309.168596][ T9185] __x64_sys_bpf+0x7c/0x90 [ 309.173274][ T9185] do_syscall_64+0x55/0xb0 [ 309.177746][ T9185] ? clear_bhb_loop+0x40/0x90 [ 309.182467][ T9185] ? clear_bhb_loop+0x40/0x90 [ 309.187192][ T9185] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 309.193121][ T9185] RIP: 0033:0x7f5cc419e0d9 [ 309.197574][ T9185] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.217228][ T9185] RSP: 002b:00007f5cc5007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 309.226141][ T9185] RAX: ffffffffffffffda RBX: 00007f5cc4425fa0 RCX: 00007f5cc419e0d9 [ 309.234252][ T9185] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 309.242616][ T9185] RBP: 00007f5cc5007090 R08: 0000000000000000 R09: 0000000000000000 [ 309.250621][ T9185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.258618][ T9185] R13: 00007f5cc4426038 R14: 00007f5cc4425fa0 R15: 00007ffc5f900578 [ 309.266913][ T9185] [ 309.568810][ T9195] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.925'. [ 309.867388][ T5085] Bluetooth: hci3: command 0x0406 tx timeout [ 310.405717][ T9218] netlink: 123072 bytes leftover after parsing attributes in process `syz.0.929'. [ 310.637222][ T9223] netlink: 'syz.3.931': attribute type 4 has an invalid length. [ 311.175440][ T9242] netlink: 16046 bytes leftover after parsing attributes in process `syz.0.933'. [ 312.239987][ T9269] netlink: 'syz.0.938': attribute type 3 has an invalid length. [ 312.265260][ T9269] netlink: 'syz.0.938': attribute type 1 has an invalid length. [ 312.278654][ T9269] netlink: 193404 bytes leftover after parsing attributes in process `syz.0.938'. [ 312.841694][ T9289] netlink: 'syz.3.945': attribute type 3 has an invalid length. [ 312.888018][ T9289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.945'. [ 312.917780][ T9291] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.946'. [ 313.469801][ T9300] netlink: 16046 bytes leftover after parsing attributes in process `syz.3.947'. [ 313.776408][ T9311] syzkaller0: entered promiscuous mode [ 313.797425][ T9311] syzkaller0: entered allmulticast mode [ 313.905516][ T9312] netlink: 128 bytes leftover after parsing attributes in process `syz.1.949'. [ 313.952836][ T9312] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.556898][ T39] syzkaller0: tun_net_xmit 76 [ 314.565682][ T9325] syzkaller0: create flow: hash 2621409884 index 2 [ 314.573598][ T39] syzkaller0: tun_net_xmit 48 [ 314.579600][ T5763] syzkaller0: tun_net_xmit 76 [ 314.629842][ T9326] netlink: 'syz.3.954': attribute type 8 has an invalid length. [ 314.676277][ T9326] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.954'. [ 314.798649][ T9325] syzkaller0: delete flow: hash 2621409884 index 2 [ 314.807838][ T5834] syzkaller0: tun_net_xmit 76 [ 314.857578][ T5834] syzkaller0: tun_net_xmit 76 [ 316.957446][ T9350] netlink: 16046 bytes leftover after parsing attributes in process `syz.2.960'. [ 318.037997][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.044611][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.991226][ T9359] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.962'. [ 319.385721][ T9375] @0Ù: renamed from bridge_slave_0 (while UP) [ 319.537609][ T9377] sctp: [Deprecated]: syz.1.967 (pid 9377) Use of int in max_burst socket option deprecated. [ 319.537609][ T9377] Use struct sctp_assoc_value instead [ 324.697939][ T9418] FAULT_INJECTION: forcing a failure. [ 324.697939][ T9418] name failslab, interval 1, probability 0, space 0, times 0 [ 324.736570][ T9414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.975'. [ 324.760212][ T9418] CPU: 0 PID: 9418 Comm: syz.2.976 Not tainted syzkaller #0 [ 324.767883][ T9418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.778118][ T9418] Call Trace: [ 324.781481][ T9418] [ 324.784487][ T9418] dump_stack_lvl+0x18c/0x250 [ 324.789499][ T9418] ? show_regs_print_info+0x20/0x20 [ 324.794815][ T9418] ? load_image+0x420/0x420 [ 324.799521][ T9418] ? __might_sleep+0xe0/0xe0 [ 324.804271][ T9418] ? __lock_acquire+0x7d80/0x7d80 [ 324.809380][ T9418] should_fail_ex+0x394/0x4c0 [ 324.814149][ T9418] should_failslab+0x9/0x20 [ 324.818798][ T9418] slab_pre_alloc_hook+0x59/0x300 [ 324.824243][ T9418] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 324.829684][ T9418] __kmem_cache_alloc_node+0x53/0x250 [ 324.835117][ T9418] ? __asan_memset+0x22/0x40 [ 324.839946][ T9418] ? __xdp_reg_mem_model+0x1e3/0x5a0 [ 324.845297][ T9418] kmalloc_trace+0x2a/0xe0 [ 324.849802][ T9418] __xdp_reg_mem_model+0x1e3/0x5a0 [ 324.854971][ T9418] ? kvmalloc_node+0x70/0x180 [ 324.859713][ T9418] ? kvmalloc_node+0x70/0x180 [ 324.864482][ T9418] ? xdp_reg_mem_model+0x40/0x40 [ 324.869614][ T9418] xdp_reg_mem_model+0x22/0x40 [ 324.874681][ T9418] bpf_test_run_xdp_live+0x262/0x1b30 [ 324.880283][ T9418] ? 0xffffffffa0004740 [ 324.884536][ T9418] ? 0xffffffffa0004740 [ 324.888793][ T9418] ? bpf_dispatcher_change_prog+0xc96/0xf10 [ 324.894789][ T9418] ? xdp_convert_md_to_buff+0x330/0x330 [ 324.900705][ T9418] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 324.907055][ T9418] ? _copy_from_user+0xa5/0xe0 [ 324.912123][ T9418] ? bpf_test_init+0x119/0x140 [ 324.917160][ T9418] ? xdp_convert_md_to_buff+0x5b/0x330 [ 324.922715][ T9418] bpf_prog_test_run_xdp+0x7d8/0x1140 [ 324.928430][ T9418] ? __lock_acquire+0x7d80/0x7d80 [ 324.933563][ T9418] ? dev_put+0x80/0x80 [ 324.937779][ T9418] ? dev_put+0x80/0x80 [ 324.941925][ T9418] bpf_prog_test_run+0x31f/0x390 [ 324.947037][ T9418] __sys_bpf+0x49d/0x890 [ 324.951382][ T9418] ? bpf_link_show_fdinfo+0x390/0x390 [ 324.956956][ T9418] ? lock_chain_count+0x20/0x20 [ 324.961907][ T9418] __x64_sys_bpf+0x7c/0x90 [ 324.966401][ T9418] do_syscall_64+0x55/0xb0 [ 324.970889][ T9418] ? clear_bhb_loop+0x40/0x90 [ 324.976069][ T9418] ? clear_bhb_loop+0x40/0x90 [ 324.980922][ T9418] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 324.987106][ T9418] RIP: 0033:0x7fec25f9e0d9 [ 324.991622][ T9418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.011669][ T9418] RSP: 002b:00007fec26ef2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 325.020158][ T9418] RAX: ffffffffffffffda RBX: 00007fec26226090 RCX: 00007fec25f9e0d9 [ 325.028636][ T9418] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 325.036695][ T9418] RBP: 00007fec26ef2090 R08: 0000000000000000 R09: 0000000000000000 [ 325.044825][ T9418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.052952][ T9418] R13: 00007fec26226128 R14: 00007fec26226090 R15: 00007fff184d9558 [ 325.061178][ T9418] [ 325.662347][ T9432] netlink: 7054 bytes leftover after parsing attributes in process `syz.1.981'. [ 325.916691][ T9438] netlink: 'syz.2.983': attribute type 6 has an invalid length. [ 325.928953][ T9438] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.983'. [ 325.942000][ T9437] netlink: 'syz.2.983': attribute type 6 has an invalid length. [ 325.956846][ T9437] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.983'. [ 329.417668][ T9461] netlink: 'syz.2.991': attribute type 9 has an invalid length. [ 329.426485][ T9461] netlink: 154020 bytes leftover after parsing attributes in process `syz.2.991'. [ 329.691243][ T9468] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 329.773160][ T9468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.805660][ T9468] bond0: entered promiscuous mode [ 329.837197][ T9468] bond_slave_0: entered promiscuous mode [ 329.843302][ T9468] bond_slave_1: entered promiscuous mode [ 329.859704][ T9468] bond0: entered allmulticast mode [ 329.865041][ T9468] bond_slave_0: entered allmulticast mode [ 329.877208][ T9468] bond_slave_1: entered allmulticast mode [ 329.886161][ T9468] team0: Port device bond0 added [ 329.898050][ T9471] netlink: 'syz.3.994': attribute type 10 has an invalid length. [ 330.162867][ T9477] syzkaller0: entered promiscuous mode [ 330.177086][ T9477] syzkaller0: entered allmulticast mode [ 331.241923][ T9501] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1003'. [ 331.292156][ T9501] netlink: get zone limit has 4 unknown bytes [ 333.668864][ T9498] netlink: 176 bytes leftover after parsing attributes in process `syz.3.1002'. [ 337.064914][ T9528] netlink: 'syz.2.1011': attribute type 21 has an invalid length. [ 337.275898][ T9538] netlink: 'syz.3.1013': attribute type 27 has an invalid length. [ 337.285267][ T9538] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1013'. [ 337.560027][ T9542] netlink: 'syz.3.1015': attribute type 27 has an invalid length. [ 338.024188][ T9542] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1015'. [ 338.034581][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 338.062737][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 338.106939][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 338.149139][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 338.179411][ T9562] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1020'. [ 338.472428][ T9573] hsr0: left allmulticast mode [ 338.490450][ T9573] hsr_slave_0: left allmulticast mode [ 338.520873][ T9579] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1025'. [ 338.530771][ T9573] hsr_slave_1: left allmulticast mode [ 338.599219][ T9579] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 338.609573][ T9573] bridge0: port 3(hsr0) entered disabled state [ 338.672479][ T9579] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 338.852306][ T9573] bridge_slave_1: left allmulticast mode [ 338.868409][ T9573] bridge_slave_1: left promiscuous mode [ 338.875436][ T9573] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.924556][ T9573] @0Ù: left allmulticast mode [ 338.947269][ T9573] @0Ù: left promiscuous mode [ 338.960210][ T9573] bridge0: port 1(c@0Ù) entered disabled state [ 339.370356][ T9573] team0: Port device bridge0 removed [ 339.581797][ T9594] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.1028'. [ 341.241631][ T9626] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1039'. [ 341.324664][ T9626] bridge_slave_1: default FDB implementation only supports local addresses [ 341.793055][ T9639] netlink: 'syz.1.1044': attribute type 10 has an invalid length. [ 341.848844][ T9639] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 342.912192][ T9656] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.1048'. [ 343.830581][ T9670] netlink: 'syz.1.1051': attribute type 3 has an invalid length. [ 343.852658][ T9670] netlink: 11254 bytes leftover after parsing attributes in process `syz.1.1051'. [ 343.873053][ T9670] netlink: 'syz.1.1051': attribute type 7 has an invalid length. [ 345.204614][ T9710] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1064'. [ 345.613450][ T9719] netlink: 'syz.1.1065': attribute type 9 has an invalid length. [ 345.674197][ T9719] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1065'. [ 348.630623][ T9728] netlink: 'syz.2.1068': attribute type 27 has an invalid length. [ 351.311738][ T9762] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.1077'. [ 351.363078][ T9762] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.1077'. [ 351.474393][ T9762] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1077'. [ 351.514197][ T9762] tc_dump_action: action bad kind [ 352.022961][ T9773] netlink: 'syz.0.1079': attribute type 21 has an invalid length. [ 352.049231][ T9773] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1079'. [ 352.067368][ T9773] netlink: 'syz.0.1079': attribute type 4 has an invalid length. [ 352.285513][ T9776] -1: renamed from syzkaller0 [ 352.324102][ T9783] netlink: 'syz.2.1082': attribute type 2 has an invalid length. [ 352.334795][ T9783] netlink: 'syz.2.1082': attribute type 2 has an invalid length. [ 352.346889][ T9783] netlink: 199676 bytes leftover after parsing attributes in process `syz.2.1082'. [ 352.562556][ T9785] sit0: left promiscuous mode [ 353.318839][ T9802] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1086'. [ 353.398006][ T9801] netlink: 'syz.1.1088': attribute type 21 has an invalid length. [ 353.422675][ T9801] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1088'. [ 354.319391][ T9812] netlink: 69552 bytes leftover after parsing attributes in process `syz.0.1091'. [ 355.219410][ T9834] netlink: 'syz.3.1099': attribute type 16 has an invalid length. [ 355.252427][ T9834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1099'. [ 355.283580][ T9834] veth1_macvtap: entered allmulticast mode [ 355.364481][ T9838] netlink: 'syz.1.1100': attribute type 29 has an invalid length. [ 355.379830][ T9834] netlink: 'syz.3.1099': attribute type 16 has an invalid length. [ 355.408373][ T9834] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1099'. [ 355.429423][ T9838] netlink: 'syz.1.1100': attribute type 29 has an invalid length. [ 355.450328][ T9840] netlink: 'syz.1.1100': attribute type 29 has an invalid length. [ 361.738398][ T9912] validate_nla: 2 callbacks suppressed [ 361.738549][ T9912] netlink: 'syz.1.1121': attribute type 10 has an invalid length. [ 361.946718][ T9912] team0: Port device geneve1 added [ 362.461537][ T9919] netlink: 'syz.2.1123': attribute type 21 has an invalid length. [ 362.567608][ T9919] netlink: 'syz.2.1123': attribute type 6 has an invalid length. [ 362.633984][ T9919] __nla_validate_parse: 1 callbacks suppressed [ 362.634011][ T9919] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1123'. [ 362.782038][ T9921] netlink: 'syz.3.1122': attribute type 21 has an invalid length. [ 362.820331][ T9921] netlink: 'syz.3.1122': attribute type 6 has an invalid length. [ 362.837962][ T9921] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1122'. [ 363.032102][ T9921] netlink: 'syz.3.1122': attribute type 10 has an invalid length. [ 363.145375][ T9921] virt_wifi0: entered promiscuous mode [ 363.172039][ T9921] virt_wifi0: entered allmulticast mode [ 363.228456][ T9921] team0: Port device virt_wifi0 added [ 363.298335][ T9936] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1129'. [ 363.435845][ T9937] netlink: 'syz.2.1128': attribute type 1 has an invalid length. [ 363.491314][ T9937] netlink: 112860 bytes leftover after parsing attributes in process `syz.2.1128'. [ 363.620985][ T9940] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.1130'. [ 363.669367][ T9940] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.1130'. [ 363.691183][ T9940] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.1130'. [ 364.662319][ T9958] netlink: 'syz.0.1135': attribute type 1 has an invalid length. [ 364.685624][ T9958] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.1135'. [ 367.827111][ T9991] netlink: 'syz.0.1141': attribute type 21 has an invalid length. [ 367.835110][ T9991] netlink: 'syz.0.1141': attribute type 6 has an invalid length. [ 367.843849][ T9991] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1141'. [ 368.095308][ T9991] netlink: 'syz.0.1141': attribute type 10 has an invalid length. [ 369.706874][T10017] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1150'. [ 369.722579][T10017] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1150'. [ 369.752128][T10017] sctp: [Deprecated]: syz.0.1150 (pid 10017) Use of int in maxseg socket option. [ 369.752128][T10017] Use struct sctp_assoc_value instead [ 370.191066][T10023] netlink: 'syz.1.1153': attribute type 16 has an invalid length. [ 370.200113][T10023] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1153'. [ 371.875811][T10053] netlink: 16211 bytes leftover after parsing attributes in process `syz.3.1160'. [ 372.274194][T10061] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 372.317168][T10064] syzkaller0: entered promiscuous mode [ 372.322890][T10064] syzkaller0: entered allmulticast mode [ 372.340325][T10064] PF_CAN: dropped non conform CAN skbuff: dev type 280, len 65487 [ 372.355361][T10063] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 372.397263][T10061] netlink: 'syz.1.1165': attribute type 29 has an invalid length. [ 372.649539][T10080] netlink: 'syz.0.1179': attribute type 27 has an invalid length. [ 372.665405][T10080] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1179'. [ 374.343319][T10112] netlink: 'syz.3.1182': attribute type 3 has an invalid length. [ 374.360564][T10112] netlink: 201372 bytes leftover after parsing attributes in process `syz.3.1182'. [ 374.712348][T10121] netlink: 64859 bytes leftover after parsing attributes in process `syz.2.1186'. [ 375.990775][T10156] netlink: 'syz.2.1199': attribute type 2 has an invalid length. [ 376.006843][T10156] netlink: 199828 bytes leftover after parsing attributes in process `syz.2.1199'. [ 376.156184][T10153] netlink: 'syz.1.1197': attribute type 4 has an invalid length. [ 376.444131][T10169] : renamed from veth1 (while UP) [ 376.462811][T10170] netlink: 'syz.3.1201': attribute type 22 has an invalid length. [ 376.550471][T10170] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.1201'. [ 377.582059][T10190] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1208'. [ 377.620077][T10190] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 377.835363][T10188] netlink: 'syz.2.1208': attribute type 10 has an invalid length. [ 377.857729][T10188] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1208'. [ 378.191362][T10206] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.1214'. [ 378.357604][T10208] netlink: 'syz.0.1213': attribute type 39 has an invalid length. [ 378.457959][T10207] netlink: 'syz.0.1213': attribute type 39 has an invalid length. [ 378.681298][T10213] netlink: 'syz.1.1215': attribute type 2 has an invalid length. [ 378.707091][T10213] netlink: 198112 bytes leftover after parsing attributes in process `syz.1.1215'. [ 378.768853][T10214] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 378.776757][T10214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'. [ 378.840898][T10214] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 378.873340][T10213] netlink: 'syz.1.1215': attribute type 10 has an invalid length. [ 378.905333][T10213] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1215'. [ 378.950655][T10213] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 379.489931][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.496707][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.566961][T10256] delete_channel: no stack [ 381.898960][T10272] __nla_validate_parse: 1 callbacks suppressed [ 381.898984][T10272] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1229'. [ 381.967216][T10275] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1229'. [ 382.156943][T10274] lo: entered promiscuous mode [ 382.641785][T10291] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.1236'. [ 385.853419][T10307] netlink: 209832 bytes leftover after parsing attributes in process `syz.0.1240'. [ 386.052933][T10315] syzkaller0: entered promiscuous mode [ 386.063305][T10315] syzkaller0: entered allmulticast mode [ 386.082111][T10319] netlink: 'syz.2.1243': attribute type 21 has an invalid length. [ 386.090752][T10319] netlink: 14548 bytes leftover after parsing attributes in process `syz.2.1243'. [ 386.762563][T10331] netlink: 16211 bytes leftover after parsing attributes in process `syz.0.1244'. [ 387.404117][ T5780] Bluetooth: hci0: unexpected event 0x0f length: 15 > 4 [ 387.646755][T10342] netlink: 64859 bytes leftover after parsing attributes in process `syz.3.1248'. [ 390.443006][ T5780] Bluetooth: hci0: Malformed LE Event: 0x1d [ 391.472583][ T5780] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 391.481715][ T5780] Bluetooth: hci0: Injecting HCI hardware error event [ 391.492356][ T5085] Bluetooth: hci0: hardware error 0x00 [ 392.034215][T10335] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1246'. [ 392.057460][T10363] netlink: 'syz.0.1254': attribute type 21 has an invalid length. [ 392.317998][T10379] netlink: 'syz.1.1258': attribute type 5 has an invalid length. [ 392.615011][T10384] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1259'. [ 392.736726][T10384] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1259'. [ 393.667673][ T5085] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 394.412365][T10404] netlink: 65051 bytes leftover after parsing attributes in process `syz.2.1266'. [ 394.420027][T10405] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1265'. [ 394.503578][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 394.579484][T10411] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1268'. [ 394.607758][T10414] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1268'. [ 395.242531][T10439] netlink: 'syz.1.1275': attribute type 1 has an invalid length. [ 395.266249][T10439] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.1275'. [ 395.751150][T10453] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.1279'. [ 395.806852][T10453] netlink: del zone limit has 8 unknown bytes [ 396.293463][T10467] netlink: 'syz.3.1282': attribute type 6 has an invalid length. [ 396.330591][T10467] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1282'. [ 400.215699][T10489] lo: left promiscuous mode [ 400.220822][T10489] lo: entered allmulticast mode [ 400.650641][T10503] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 400.907236][T10523] netlink: 'syz.3.1298': attribute type 21 has an invalid length. [ 400.916244][T10523] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1298'. [ 401.018039][T10523] sit0: entered promiscuous mode [ 402.381300][T10536] netlink: 'syz.1.1300': attribute type 10 has an invalid length. [ 402.437261][T10536] netlink: 55 bytes leftover after parsing attributes in process `syz.1.1300'. [ 402.753923][ T8015] wlan1: Trigger new scan to find an IBSS to join [ 402.864791][T10550] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1305'. [ 402.915439][T10551] netlink: 'syz.0.1305': attribute type 10 has an invalid length. [ 402.976902][T10551] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1305'. [ 403.043056][T10558] netlink: 'syz.3.1308': attribute type 21 has an invalid length. [ 403.073970][T10558] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1308'. [ 403.191557][T10563] netlink: 6 bytes leftover after parsing attributes in process `syz.2.1309'. [ 403.251624][T10563] netlink: 'syz.2.1309': attribute type 3 has an invalid length. [ 403.272077][T10563] netlink: 'syz.2.1309': attribute type 6 has an invalid length. [ 403.304588][T10563] netlink: 144448 bytes leftover after parsing attributes in process `syz.2.1309'. [ 403.790729][T10581] syz.1.1313[10581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 403.791010][T10581] syz.1.1313[10581] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 406.893543][T10592] netlink: 'syz.2.1315': attribute type 10 has an invalid length. [ 406.934704][T10592] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1315'. [ 407.170020][T10602] netlink: 'syz.3.1317': attribute type 6 has an invalid length. [ 407.178860][T10602] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1317'. [ 407.799798][ T1093] wlan1: Trigger new scan to find an IBSS to join [ 407.841255][T10606] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1318'. [ 408.375148][T10617] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1321'. [ 408.542635][T10622] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1321'. [ 409.033280][T10625] netlink: 'syz.2.1324': attribute type 49 has an invalid length. [ 409.051338][ T8015] wlan1: Creating new IBSS network, BSSID 1a:6a:55:0a:32:92 [ 410.234646][T10646] netlink: 'syz.0.1328': attribute type 10 has an invalid length. [ 410.242907][T10646] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1328'. [ 410.528999][T10655] netlink: 'syz.2.1332': attribute type 2 has an invalid length. [ 410.548385][T10655] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1332'. [ 413.580714][T10670] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1335'. [ 413.654211][T10668] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1334'. [ 413.685755][T10670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1335'. [ 413.869378][T10674] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1336'. [ 415.059417][T10696] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 415.072211][T10696] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1341'. [ 415.998231][T10710] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 416.090141][T10712] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 416.313155][T10720] netlink: 'syz.0.1349': attribute type 29 has an invalid length. [ 416.445072][T10718] netlink: 'syz.1.1347': attribute type 10 has an invalid length. [ 416.513450][T10720] netlink: 'syz.0.1349': attribute type 29 has an invalid length. [ 416.643138][T10731] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1354'. [ 417.006566][T10743] netlink: set zone limit has 8 unknown bytes [ 417.864470][T10755] netlink: 'syz.1.1360': attribute type 49 has an invalid length. [ 417.926902][T10757] netlink: 'syz.0.1361': attribute type 6 has an invalid length. [ 417.996899][T10757] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1361'. [ 418.249706][T10764] netlink: 16358 bytes leftover after parsing attributes in process `syz.3.1363'. [ 418.545286][T10768] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1364'. [ 418.572971][T10768] : renamed from caif0 [ 418.607707][T10768] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 418.787417][T10770] netlink: 'syz.2.1366': attribute type 10 has an invalid length. [ 419.134886][T10784] netlink: 'syz.2.1370': attribute type 8 has an invalid length. [ 419.184999][T10784] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1370'. [ 419.616757][T10799] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1376'. [ 420.380656][T10810] validate_nla: 1 callbacks suppressed [ 420.380714][T10810] netlink: 'syz.0.1377': attribute type 21 has an invalid length. [ 420.479754][T10812] netlink: 'syz.0.1377': attribute type 1 has an invalid length. [ 420.859823][T10822] netdevsim netdevsim3 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 421.616361][T10852] netlink: 'syz.0.1386': attribute type 10 has an invalid length. [ 422.083795][T10852] team0 (unregistering): Port device team_slave_0 removed [ 422.113088][T10852] team0 (unregistering): Port device team_slave_1 removed [ 422.164270][T10852] team0 (unregistering): Port device wlan1 removed [ 422.234134][T10857] lo: mtu less than device minimum [ 422.424202][T10868] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 422.446815][T10868] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1391'. [ 423.067964][T10887] sctp: [Deprecated]: syz.3.1396 (pid 10887) Use of struct sctp_assoc_value in delayed_ack socket option. [ 423.067964][T10887] Use struct sctp_sack_info instead [ 423.205427][T10893] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1398'. [ 426.444433][T10918] netlink: 'syz.0.1406': attribute type 9 has an invalid length. [ 426.457105][T10918] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1406'. [ 426.859037][T10922] -1: renamed from syzkaller0 [ 426.870649][T10924] netlink: 'syz.0.1409': attribute type 2 has an invalid length. [ 426.887175][T10924] netlink: 'syz.0.1409': attribute type 1 has an invalid length. [ 426.926870][T10924] netlink: 198036 bytes leftover after parsing attributes in process `syz.0.1409'. [ 428.510856][T10953] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1416'. [ 428.931616][T10961] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.1418'. [ 428.967084][T10961] netlink: 4548 bytes leftover after parsing attributes in process `syz.3.1418'. [ 429.546943][T10973] netlink: 'syz.3.1422': attribute type 10 has an invalid length. [ 429.613678][T10978] netlink: 'syz.3.1422': attribute type 9 has an invalid length. [ 429.676921][T10978] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1422'. [ 429.702403][T10973] team_slave_1: left promiscuous mode [ 429.709629][T10973] team_slave_1: left allmulticast mode [ 429.886364][T10984] netlink: 'syz.3.1422': attribute type 29 has an invalid length. [ 429.913396][T10973] team0 (unregistering): Port device team_slave_1 removed [ 429.924249][T10973] mac80211_hwsim hwsim7 wlan1: left promiscuous mode [ 429.933690][T10973] mac80211_hwsim hwsim7 wlan1: left allmulticast mode [ 430.049842][T10973] team0 (unregistering): Port device wlan1 removed [ 430.059093][T10973] bond0: left promiscuous mode [ 430.065097][T10973] bond_slave_0: left promiscuous mode [ 430.073122][T10973] bond_slave_1: left promiscuous mode [ 430.082370][T10973] bond0: left allmulticast mode [ 430.092915][T10973] bond_slave_0: left allmulticast mode [ 430.100056][T10973] bond_slave_1: left allmulticast mode [ 430.115725][T10973] team0 (unregistering): Port device bond0 removed [ 430.126300][T10973] virt_wifi0: left promiscuous mode [ 430.134570][T10973] virt_wifi0: left allmulticast mode [ 430.190477][T10973] team0 (unregistering): Port device virt_wifi0 removed [ 430.286007][T10972] netlink: 'syz.2.1430': attribute type 10 has an invalid length. [ 430.329387][T10972] bond0: (slave veth1_to_bridge): Enslaving as an active interface with an up link [ 430.380110][T10984] netlink: 'syz.3.1422': attribute type 29 has an invalid length. [ 430.392297][T10983] netlink: 'syz.0.1424': attribute type 10 has an invalid length. [ 430.461778][T10980] -1: renamed from syzkaller0 [ 430.606838][T10990] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 430.626660][T10990] dvmrp1: linktype set to 768 [ 430.731005][T10996] netlink: 'syz.0.1426': attribute type 1 has an invalid length. [ 430.787428][T10996] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1426'. [ 430.932940][T11000] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.1428'. [ 431.119890][T11007] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1432'. [ 431.552761][T11021] -1: renamed from syzkaller0 [ 431.798568][T11031] validate_nla: 1 callbacks suppressed [ 431.798632][T11031] netlink: 'syz.0.1439': attribute type 9 has an invalid length. [ 431.819506][T11031] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1439'. [ 432.883884][T11063] netlink: 'syz.1.1448': attribute type 10 has an invalid length. [ 432.937315][T11063] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1448'. [ 432.946325][T11063] batadv_slave_1: entered promiscuous mode [ 432.959993][T11066] netlink: 'syz.1.1448': attribute type 2 has an invalid length. [ 432.977586][T11066] netlink: 17255 bytes leftover after parsing attributes in process `syz.1.1448'. [ 432.989526][T11068] netlink: 1057 bytes leftover after parsing attributes in process `syz.3.1449'. [ 433.157474][T11063] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.238066][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1448'. [ 433.327401][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1448'. [ 433.387729][T11066] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1448'. [ 433.481448][T11076] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1448'. [ 433.931930][T11086] netlink: 'syz.1.1456': attribute type 9 has an invalid length. [ 433.949793][T11086] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1456'. [ 434.546737][T11095] netlink: 'syz.3.1458': attribute type 10 has an invalid length. [ 435.579730][T11108] netlink: 'syz.3.1461': attribute type 39 has an invalid length. [ 435.759022][T11123] sock: sock_timestamping_bind_phc: sock not bind to device [ 436.044349][T11125] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'. [ 437.482517][T11137] netlink: 'syz.0.1467': attribute type 3 has an invalid length. [ 437.887717][T11156] netlink: 'syz.3.1472': attribute type 9 has an invalid length. [ 437.919060][T11156] __nla_validate_parse: 1 callbacks suppressed [ 437.919100][T11156] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.1472'. [ 438.090596][T11162] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1474'. [ 438.109387][T11162] netlink: 6 bytes leftover after parsing attributes in process `syz.1.1474'. [ 438.191609][T11165] netlink: 'syz.2.1475': attribute type 21 has an invalid length. [ 439.041861][T11180] netlink: 'syz.0.1478': attribute type 9 has an invalid length. [ 439.056451][ T1093] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 439.090926][T11180] netlink: 154020 bytes leftover after parsing attributes in process `syz.0.1478'. [ 440.342806][T11201] netlink: 'syz.2.1485': attribute type 10 has an invalid length. [ 440.475018][T11201] batman_adv: batadv0: Adding interface: netdevsim0 [ 440.518640][T11201] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.581286][T11201] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 440.619267][T11210] netlink: 'syz.0.1494': attribute type 2 has an invalid length. [ 440.694358][T11210] netlink: 17255 bytes leftover after parsing attributes in process `syz.0.1494'. [ 440.787504][T11209] netlink: 'syz.0.1494': attribute type 10 has an invalid length. [ 440.847943][T11209] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1494'. [ 440.918088][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.924622][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.967238][T11209] €Â0: entered promiscuous mode [ 440.973028][T11209] batman_adv: batadv0: Interface deactivated: €Â0 [ 441.053756][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1494'. [ 441.064969][T11209] batman_adv: batadv0: Removing interface: €Â0 [ 441.127864][T11210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 441.146296][T11215] netlink: 'syz.2.1487': attribute type 3 has an invalid length. [ 441.165578][T11216] netlink: 'syz.2.1487': attribute type 3 has an invalid length. [ 441.185836][T11215] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1487'. [ 441.212295][T11216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1487'. [ 441.234510][T11212] netlink: 'syz.1.1486': attribute type 3 has an invalid length. [ 441.296508][T11211] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1494'. [ 442.114033][T11247] syzkaller0: entered promiscuous mode [ 442.127764][T11247] syzkaller0: entered allmulticast mode [ 443.279779][T11261] validate_nla: 2 callbacks suppressed [ 443.279804][T11261] netlink: 'syz.3.1499': attribute type 3 has an invalid length. [ 444.088774][T11264] netlink: 'syz.2.1501': attribute type 10 has an invalid length. [ 444.118502][T11264] __nla_validate_parse: 2 callbacks suppressed [ 444.118525][T11264] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1501'. [ 444.177090][T11264] batadv_slave_1: entered promiscuous mode [ 444.217411][T11264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.224983][T11264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.370294][T11269] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1502'. [ 444.397295][T11269] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1502'. [ 444.486645][T11266] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.1502'. [ 444.775380][T11278] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1505'. [ 445.614763][T11300] netlink: 'syz.0.1520': attribute type 19 has an invalid length. [ 445.822895][T11307] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1516'. [ 445.855413][T11307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 446.072956][T11312] netlink: 'syz.2.1512': attribute type 3 has an invalid length. [ 446.151212][T11304] netlink: 'syz.3.1513': attribute type 21 has an invalid length. [ 446.370129][T11325] netlink: 'syz.1.1519': attribute type 27 has an invalid length. [ 446.410347][T11325] netlink: 'syz.1.1519': attribute type 3 has an invalid length. [ 446.649493][T11332] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 446.681289][T11332] netlink: 'syz.1.1523': attribute type 29 has an invalid length. [ 447.188475][T11344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1526'. [ 447.251666][T11344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1526'. [ 447.297784][T11348] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1526'. [ 447.328231][T11344] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1526'. [ 448.024009][T11360] netlink: 'syz.3.1529': attribute type 10 has an invalid length. [ 448.656888][T11372] validate_nla: 1 callbacks suppressed [ 448.656914][T11372] netlink: 'syz.3.1529': attribute type 9 has an invalid length. [ 449.018197][T11374] netlink: 'syz.1.1532': attribute type 21 has an invalid length. [ 449.053207][T11374] IPv6: NLM_F_CREATE should be specified when creating new route [ 449.103163][T11374] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 449.110640][T11374] IPv6: NLM_F_CREATE should be set when creating new route [ 449.118177][T11374] IPv6: NLM_F_CREATE should be set when creating new route [ 449.125489][T11374] IPv6: NLM_F_CREATE should be set when creating new route [ 450.793387][T11403] netlink: 'syz.0.1542': attribute type 14 has an invalid length. [ 450.826257][T11403] __nla_validate_parse: 3 callbacks suppressed [ 450.826278][T11403] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1542'. [ 450.909692][T11409] netlink: 209592 bytes leftover after parsing attributes in process `syz.1.1539'. [ 451.083463][T11409] netlink: 252 bytes leftover after parsing attributes in process `syz.1.1539'. [ 453.820971][T11469] netlink: 105940 bytes leftover after parsing attributes in process `syz.1.1557'. [ 454.150442][T11472] sit0: entered allmulticast mode [ 454.961234][T11479] netlink: 'syz.3.1560': attribute type 10 has an invalid length. [ 455.166612][T11493] netlink: 'syz.1.1564': attribute type 21 has an invalid length. [ 455.191548][T11493] netlink: 'syz.1.1564': attribute type 1 has an invalid length. [ 455.225645][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1564'. [ 455.568308][T11499] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.1566'. [ 456.134222][T11503] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1567'. [ 458.258164][T11530] netlink: 'syz.3.1575': attribute type 29 has an invalid length. [ 458.266618][T11530] netlink: 'syz.3.1575': attribute type 29 has an invalid length. [ 458.342605][T11538] netlink: 'syz.3.1575': attribute type 29 has an invalid length. [ 458.884257][T11542] netlink: 'syz.1.1578': attribute type 21 has an invalid length. [ 459.341816][T11550] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1581'. [ 459.359878][T11549] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.1581'. [ 459.395299][T11555] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1582'. [ 459.410079][T11555] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 459.733720][T11560] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1584'. [ 459.890172][T11563] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1583'. [ 461.496577][T11576] netlink: 'syz.3.1588': attribute type 3 has an invalid length. [ 461.507302][T11576] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.1588'. [ 461.960960][T11588] netlink: 'syz.0.1593': attribute type 21 has an invalid length. [ 464.157246][T11597] netlink: 57923 bytes leftover after parsing attributes in process `syz.3.1594'. [ 465.990177][T11619] netlink: 'syz.0.1599': attribute type 153 has an invalid length. [ 466.007229][T11619] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.1599'. [ 466.697137][T11637] netlink: 'syz.3.1606': attribute type 10 has an invalid length. [ 466.722682][T11637] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1606'. [ 466.764423][T11637] €Â0: entered promiscuous mode [ 466.783467][T11637] batman_adv: batadv0: Interface deactivated: €Â0 [ 466.800360][T11637] batman_adv: batadv0: Removing interface: €Â0 [ 467.028377][T11640] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 467.118434][T11640] netlink: 'syz.0.1607': attribute type 3 has an invalid length. [ 467.138785][T11640] netlink: 16066 bytes leftover after parsing attributes in process `syz.0.1607'. [ 467.681227][T11655] netlink: 'syz.2.1612': attribute type 153 has an invalid length. [ 467.697076][T11655] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.1612'. [ 467.883618][T11660] netlink: 'syz.0.1616': attribute type 10 has an invalid length. [ 467.892681][T11660] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1616'. [ 469.646293][T11692] netlink: 'syz.2.1625': attribute type 10 has an invalid length. [ 469.681575][T11692] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1625'. [ 470.010143][T11702] netlink: 'syz.3.1627': attribute type 153 has an invalid length. [ 470.027123][T11702] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.1627'. [ 470.223420][T11705] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 470.257980][T11708] netlink: 'syz.1.1629': attribute type 3 has an invalid length. [ 470.265846][T11708] netlink: 16066 bytes leftover after parsing attributes in process `syz.1.1629'. [ 470.737036][T11716] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1630'. [ 470.766342][T11716] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1630'. [ 470.900475][T11711] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.1630'. [ 472.760622][ T2915] wlan1: Trigger new scan to find an IBSS to join [ 475.798258][T11727] netlink: 'syz.2.1633': attribute type 10 has an invalid length. [ 475.806422][T11727] __nla_validate_parse: 2 callbacks suppressed [ 475.806437][T11727] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.1633'. [ 475.825149][T11735] netlink: 'syz.0.1635': attribute type 10 has an invalid length. [ 475.854232][T11740] netlink: 'syz.1.1636': attribute type 10 has an invalid length. [ 475.862472][T11740] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1636'. [ 476.067975][T11742] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1637'. [ 476.422011][T11746] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 476.470232][T11754] netlink: 'syz.3.1640': attribute type 3 has an invalid length. [ 476.487017][T11754] netlink: 16066 bytes leftover after parsing attributes in process `syz.3.1640'. [ 476.529513][T11753] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.1641'. [ 476.750419][ T8016] wlan1: Trigger new scan to find an IBSS to join [ 476.945821][T11769] netlink: 'syz.2.1645': attribute type 10 has an invalid length. [ 476.954465][T11769] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1645'. [ 476.964534][T11770] netlink: 'syz.0.1646': attribute type 21 has an invalid length. [ 476.974522][T11770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1646'. [ 477.008150][T11770] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1646'. [ 477.372183][T11787] netlink: 'syz.2.1651': attribute type 10 has an invalid length. [ 477.399580][T11787] netlink: 'syz.2.1651': attribute type 4 has an invalid length. [ 477.428218][T11787] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1651'. [ 477.753253][ T2977] wlan1: Creating new IBSS network, BSSID 4e:21:19:f3:6d:7d [ 477.818976][T11797] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 477.875493][T11805] netlink: 'syz.0.1658': attribute type 10 has an invalid length. [ 477.894002][T11805] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1658'. [ 478.183905][T11815] sctp: [Deprecated]: syz.0.1662 (pid 11815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 478.183905][T11815] Use struct sctp_sack_info instead [ 478.285886][T11815] syzkaller0: entered promiscuous mode [ 478.305197][T11815] syzkaller0: entered allmulticast mode [ 478.635606][T11824] syzkaller0: entered promiscuous mode [ 478.650881][T11824] syzkaller0: entered allmulticast mode [ 478.674008][T11830] netlink: 'syz.0.1667': attribute type 10 has an invalid length. [ 482.494434][T11844] __nla_validate_parse: 3 callbacks suppressed [ 482.494448][T11844] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.1670'. [ 483.966243][T11876] netlink: 16366 bytes leftover after parsing attributes in process `syz.3.1677'. [ 484.014372][T11878] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1679'. [ 484.239451][T11885] netlink: 'syz.1.1682': attribute type 39 has an invalid length. [ 485.637180][T11909] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1687'. [ 485.736468][T11911] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1688'. [ 485.832370][T11911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 486.046285][T11928] netlink: 'syz.3.1691': attribute type 21 has an invalid length. [ 486.075760][T11928] netlink: 14548 bytes leftover after parsing attributes in process `syz.3.1691'. [ 486.417304][T11944] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.1697'. [ 486.446218][T11948] netlink: 'syz.3.1697': attribute type 10 has an invalid length. [ 486.463996][T11948] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1697'. [ 486.841555][T11953] netlink: 1042 bytes leftover after parsing attributes in process `syz.0.1700'. [ 486.854226][T11958] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1701'. [ 487.056408][T11966] Ÿë: port 1(hsr_slave_0) entered blocking state [ 487.075307][T11966] Ÿë: port 1(hsr_slave_0) entered disabled state [ 487.093985][T11966] hsr_slave_0: entered allmulticast mode [ 487.114975][T11966] hsr_slave_0: left allmulticast mode [ 487.168202][T11963] netlink: 'syz.0.1703': attribute type 10 has an invalid length. [ 487.640932][T11983] syzkaller0: entered promiscuous mode [ 487.646738][T11983] syzkaller0: entered allmulticast mode [ 487.677939][T11983] __nla_validate_parse: 4 callbacks suppressed [ 487.677961][T11983] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1710'. [ 487.830021][T11991] can: request_module (can-proto-0) failed. [ 488.096558][T12001] netlink: 'syz.3.1713': attribute type 27 has an invalid length. [ 488.105245][T12001] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1713'. [ 490.796158][T11991] sit0: entered allmulticast mode [ 490.813952][T11996] sit0: entered promiscuous mode [ 491.097335][T12020] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1717'. [ 491.638470][T12025] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1719'. [ 491.735556][T12025] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.291108][T12038] netlink: 'syz.0.1722': attribute type 10 has an invalid length. [ 492.311895][T12038] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1722'. [ 494.090804][T12064] netlink: 'syz.0.1728': attribute type 29 has an invalid length. [ 497.526365][T12045] syzkaller0: entered promiscuous mode [ 497.532428][T12045] syzkaller0: entered allmulticast mode [ 497.539801][T12064] netlink: 'syz.0.1728': attribute type 29 has an invalid length. [ 497.549750][T12066] netlink: 10 bytes leftover after parsing attributes in process `syz.2.1729'. [ 497.803970][T12076] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.1731'. [ 497.823035][T12076] openvswitch: netlink: Geneve option length err (len 1788, max 255). [ 497.992192][T12084] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1733'. [ 498.188548][T12093] netlink: 'syz.2.1738': attribute type 3 has an invalid length. [ 498.221397][T12093] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 498.245982][T12093] netlink: 'syz.2.1738': attribute type 1 has an invalid length. [ 498.265880][T12093] netlink: 'syz.2.1738': attribute type 2 has an invalid length. [ 498.283944][T12093] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.1738'. [ 498.509685][T12102] netlink: 'syz.3.1741': attribute type 10 has an invalid length. [ 498.688432][T12110] netlink: 'syz.3.1746': attribute type 27 has an invalid length. [ 498.696356][T12110] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.1746'. [ 498.708181][T12108] macsec0: entered promiscuous mode [ 498.715578][T12108] macsec0: entered allmulticast mode [ 498.738269][T12108] veth1_macvtap: entered allmulticast mode [ 498.979474][T12121] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.1749'. [ 499.016250][T12121] netlink: zone id is out of range [ 499.033808][T12121] netlink: zone id is out of range [ 499.044176][T12121] netlink: zone id is out of range [ 499.057236][T12121] netlink: zone id is out of range [ 499.081320][T12121] netlink: zone id is out of range [ 499.100285][T12121] netlink: zone id is out of range [ 499.100678][T12125] netlink: 'syz.2.1751': attribute type 10 has an invalid length. [ 499.117215][T12121] netlink: zone id is out of range [ 499.122649][T12121] netlink: zone id is out of range [ 499.135063][T12121] netlink: zone id is out of range [ 499.430522][T12135] sit0: left promiscuous mode [ 499.507494][T12138] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1756'. [ 499.844373][T12149] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1759'. [ 500.036833][T12160] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1761'. [ 500.135387][T12160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 500.178678][T12160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 500.224921][T12160] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 500.266485][T12160] bond0 (unregistering): Released all slaves [ 500.706540][T12162] netlink: 'syz.1.1764': attribute type 11 has an invalid length. [ 500.733846][T12162] netlink: 176 bytes leftover after parsing attributes in process `syz.1.1764'. [ 502.352443][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.359529][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.174268][T12253] __nla_validate_parse: 7 callbacks suppressed [ 503.174287][T12253] netlink: 16222 bytes leftover after parsing attributes in process `syz.3.1789'. [ 504.260769][T12293] netlink: 'syz.2.1798': attribute type 19 has an invalid length. [ 504.313041][T12293] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1798'. [ 506.562428][T12331] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1808'. [ 507.003816][ T2977] tipc: Subscription rejected, illegal request [ 507.036559][T12343] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1813'. [ 507.094667][T12347] netlink: 'syz.2.1814': attribute type 3 has an invalid length. [ 507.137402][T12347] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.1814'. [ 507.546179][T12357] netlink: 'syz.3.1818': attribute type 10 has an invalid length. [ 507.783358][T12362] netlink: 9287 bytes leftover after parsing attributes in process `syz.0.1817'. [ 509.473221][T12379] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1821'. [ 510.483910][T12399] netlink: 'syz.2.1828': attribute type 2 has an invalid length. [ 510.547119][T12399] netlink: 'syz.2.1828': attribute type 8 has an invalid length. [ 510.597340][T12399] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1828'. [ 511.231705][T12404] netlink: 'syz.1.1829': attribute type 10 has an invalid length. [ 511.256439][T12404] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1829'. [ 511.278409][T12404] bond0: entered promiscuous mode [ 511.285435][T12404] bond_slave_1: entered promiscuous mode [ 511.300598][T12404] veth1_to_bridge: entered promiscuous mode [ 511.325743][T12404] bridge_slave_1: entered promiscuous mode [ 511.386678][T12404] net_ratelimit: 82 callbacks suppressed [ 511.386705][T12404] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 511.766347][T12419] netlink: 'syz.1.1834': attribute type 27 has an invalid length. [ 511.801620][T12419] netlink: 164 bytes leftover after parsing attributes in process `syz.1.1834'. [ 512.064794][T12425] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1835'. [ 513.722891][T12451] netlink: 'syz.3.1842': attribute type 10 has an invalid length. [ 513.797155][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1842'. [ 513.817137][T12452] netlink: 'syz.1.1840': attribute type 10 has an invalid length. [ 514.514314][T12473] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1846'. [ 514.929049][T12484] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.1851'. [ 514.947867][T12481] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1849'. [ 514.971221][T12484] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 514.993587][T12484] openvswitch: netlink: Message has 1 unknown bytes. [ 514.998834][T12486] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1849'. [ 515.147633][T12486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 515.334895][T12487] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 518.347224][ T1093] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 520.164474][T12510] netlink: 'syz.2.1854': attribute type 10 has an invalid length. [ 520.173099][T12510] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1854'. [ 520.183175][T12510] bond0: entered promiscuous mode [ 520.188589][T12510] bond_slave_0: entered promiscuous mode [ 520.194902][T12510] bond_slave_1: entered promiscuous mode [ 520.201636][T12510] veth1_to_bridge: entered promiscuous mode [ 520.208634][T12510] bridge0: port 4(bond0) entered blocking state [ 520.215187][T12510] bridge0: port 4(bond0) entered disabled state [ 520.227221][T12510] bond0: entered allmulticast mode [ 520.232456][T12510] bond_slave_0: entered allmulticast mode [ 520.238419][T12510] bond_slave_1: entered allmulticast mode [ 520.244339][T12510] syz_tun: entered allmulticast mode [ 520.249812][T12510] veth1_to_bridge: entered allmulticast mode [ 520.259330][T12510] bridge0: port 4(bond0) entered blocking state [ 520.266161][T12510] bridge0: port 4(bond0) entered forwarding state [ 520.277382][T12518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1858'. [ 520.477564][T12526] netlink: 'syz.2.1860': attribute type 28 has an invalid length. [ 520.502479][T12526] netlink: 'syz.2.1860': attribute type 3 has an invalid length. [ 520.551419][T12526] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1860'. [ 520.637608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 521.542187][T12547] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 521.569039][T12547] syzkaller1: linktype set to 769 [ 521.595340][T12547] syzkaller1: tun_chr_ioctl cmd 2147767511 [ 521.643285][T12544] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1865'. [ 521.849814][T12553] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1869'. [ 522.112947][T12557] netlink: 'syz.0.1868': attribute type 10 has an invalid length. [ 522.143254][T12557] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1868'. [ 522.192021][T12557] bond0: entered promiscuous mode [ 522.211488][T12557] bond_slave_1: entered promiscuous mode [ 522.232763][T12557] veth1_to_bridge: entered promiscuous mode [ 522.265144][T12557] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 522.349160][T12551] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 524.109028][T12557] syz.0.1868 (12557) used greatest stack depth: 19176 bytes left [ 532.694635][T12569] : renamed from bond_slave_0 [ 533.041814][T12599] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1880'. [ 533.292371][T12604] netlink: 'syz.2.1882': attribute type 5 has an invalid length. [ 533.321043][T12604] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1882'. [ 533.347578][T12607] netlink: 'syz.1.1883': attribute type 39 has an invalid length. [ 533.731944][T12613] C: renamed from team_slave_0 [ 533.781024][T12613] netlink: 'syz.2.1887': attribute type 1 has an invalid length. [ 533.825521][T12613] netlink: 120 bytes leftover after parsing attributes in process `syz.2.1887'. [ 533.876046][T12613] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 533.928288][T12622] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1889'. [ 533.962670][T12623] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.1889'. [ 534.299194][T12617] syzkaller0: entered promiscuous mode [ 534.305223][T12617] syzkaller0: entered allmulticast mode [ 534.870727][T12626] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 550.538833][T10232] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 655.696882][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 655.704114][ C0] rcu: (detected by 0, t=10502 jiffies, g=58649, q=123 ncpus=2) [ 655.711901][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 9392 (4295002600-4294993208), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 655.725373][ C0] rcu: rcu_preempt kthread starved for 9393 jiffies! g58649 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 655.736551][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 655.746619][ C0] rcu: RCU grace-period kthread stack dump: [ 655.752833][ C0] task:rcu_preempt state:R running task stack:26504 pid:17 ppid:2 flags:0x00004000 [ 655.763944][ C0] Call Trace: [ 655.767297][ C0] [ 655.770370][ C0] __schedule+0x15ae/0x4660 [ 655.775241][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 655.780431][ C0] ? lock_chain_count+0x20/0x20 [ 655.785631][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 655.790966][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 655.797273][ C0] ? asan.module_dtor+0x20/0x20 [ 655.802181][ C0] ? rcu_is_watching+0x15/0xb0 [ 655.807032][ C0] schedule+0xbd/0x170 [ 655.811245][ C0] schedule_timeout+0x188/0x2d0 [ 655.816159][ C0] ? console_conditional_schedule+0x40/0x40 [ 655.822199][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 655.828173][ C0] ? update_process_times+0x1b0/0x1b0 [ 655.833616][ C0] ? prepare_to_swait_event+0x344/0x360 [ 655.839365][ C0] rcu_gp_fqs_loop+0x30d/0x1590 [ 655.844285][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 655.850674][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 655.856010][ C0] ? rcu_gp_init+0x1530/0x1530 [ 655.860822][ C0] ? rcu_gp_cleanup+0xade/0xc30 [ 655.865730][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 655.870992][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 655.876249][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 655.880898][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 655.886138][ C0] ? __kthread_parkme+0x71/0x1c0 [ 655.891192][ C0] ? __kthread_parkme+0x15b/0x1c0 [ 655.896357][ C0] kthread+0x2fa/0x390 [ 655.900483][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 655.905648][ C0] ? kthread_blkcg+0xd0/0xd0 [ 655.910544][ C0] ret_from_fork+0x48/0x80 [ 655.915133][ C0] ? kthread_blkcg+0xd0/0xd0 [ 655.919776][ C0] ret_from_fork_asm+0x11/0x20 [ 655.924650][ C0] [ 655.927708][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 655.934082][ C0] CPU: 0 PID: 12617 Comm: syz.0.1888 Not tainted syzkaller #0 [ 655.941590][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 655.951718][ C0] RIP: 0010:unwind_next_frame+0x67c/0x2990 [ 655.957591][ C0] Code: 8c e8 18 cc 4b 00 4d 85 f6 74 10 41 83 fe 01 75 14 e8 48 c7 4b 00 e9 ba 1b 00 00 e8 3e c7 4b 00 e9 94 1b 00 00 e8 34 c7 4b 00 <48> 8b 54 24 08 eb 54 e8 28 c7 4b 00 eb 25 e8 21 c7 4b 00 4c 8b 2c [ 655.977350][ C0] RSP: 0018:ffffc90000006ff8 EFLAGS: 00000246 [ 655.983480][ C0] RAX: ffffffff813baa4c RBX: ffffffff8f9570bc RCX: ffff88804e03da00 [ 655.991678][ C0] RDX: 0000000000000100 RSI: ffffffff8cfa05a0 RDI: 0000000000000002 [ 655.999842][ C0] RBP: ffffc90000007118 R08: ffff88804e03da00 R09: 0000000000000002 [ 656.007964][ C0] R10: 0000000000000001 R11: 0000000000000100 R12: ffffffff8f9570c1 [ 656.016169][ C0] R13: ffffc900000070c8 R14: 0000000000000002 R15: dffffc0000000000 [ 656.024281][ C0] FS: 00007f92f041b6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 656.033269][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 656.040100][ C0] CR2: 00007fe6684b7c06 CR3: 0000000023b7b000 CR4: 00000000003506f0 [ 656.048598][ C0] DR0: 0000000000000000 DR1: 0000200000000300 DR2: 0000200000000300 [ 656.056655][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 656.064726][ C0] Call Trace: [ 656.068140][ C0] [ 656.071146][ C0] ? ip_mc_up+0x124/0x300 [ 656.075656][ C0] ? ip_mc_up+0x125/0x300 [ 656.080044][ C0] ? ip_mc_up+0x125/0x300 [ 656.084425][ C0] ? stack_trace_save+0x100/0x100 [ 656.089509][ C0] arch_stack_walk+0x144/0x190 [ 656.094329][ C0] ? ip_mc_up+0x125/0x300 [ 656.098744][ C0] stack_trace_save+0xaa/0x100 [ 656.103584][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 656.108756][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 656.114003][ C0] ? sched_clock+0x3f/0x60 [ 656.118470][ C0] ? sched_clock_cpu+0x75/0x430 [ 656.123391][ C0] ? ktime_get+0x24b/0x280 [ 656.127909][ C0] kasan_set_track+0x4e/0x70 [ 656.132629][ C0] ? kasan_set_track+0x4e/0x70 [ 656.137467][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 656.142877][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 656.148602][ C0] ? kmem_cache_alloc+0x17e/0x2c0 [ 656.154053][ C0] ? skb_clone+0x1eb/0x370 [ 656.158590][ C0] ? br_flood+0x411/0x670 [ 656.163041][ C0] ? br_handle_frame_finish+0xf2d/0x15c0 [ 656.169123][ C0] ? br_handle_frame+0x7f6/0x14d0 [ 656.174243][ C0] ? __netif_receive_skb_core+0xf94/0x3ab0 [ 656.180415][ C0] ? __netif_receive_skb+0x74/0x290 [ 656.185875][ C0] ? process_backlog+0x380/0x710 [ 656.190915][ C0] ? __napi_poll+0xbb/0x460 [ 656.195531][ C0] ? net_rx_action+0x65f/0xcc0 [ 656.200376][ C0] ? handle_softirqs+0x27d/0x820 [ 656.205373][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 656.210192][ C0] ? irq_exit_rcu+0x9/0x20 [ 656.214949][ C0] ? sysvec_apic_timer_interrupt+0xa4/0xc0 [ 656.220918][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.227249][ C0] ? finish_task_switch+0x267/0x8f0 [ 656.232616][ C0] ? __schedule+0x15b6/0x4660 [ 656.237376][ C0] ? preempt_schedule_common+0x82/0xc0 [ 656.242980][ C0] ? preempt_schedule+0xc0/0xd0 [ 656.248052][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 656.253762][ C0] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 656.259923][ C0] ? __unfreeze_partials+0x190/0x210 [ 656.265549][ C0] ? put_cpu_partial+0x17c/0x250 [ 656.270558][ C0] ? __slab_free+0x319/0x400 [ 656.275294][ C0] ? qlist_free_all+0x75/0xd0 [ 656.280058][ C0] ? kasan_quarantine_reduce+0x143/0x160 [ 656.285755][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 656.291019][ C0] ? slab_post_alloc_hook+0x6a/0x4d0 [ 656.296474][ C0] ? __kmem_cache_alloc_node+0x194/0x250 [ 656.302259][ C0] ? kmalloc_trace+0x2a/0xe0 [ 656.306952][ C0] ? ____ip_mc_inc_group+0x2b3/0xac0 [ 656.312317][ C0] ? ip_mc_up+0x125/0x300 [ 656.316737][ C0] __kasan_slab_alloc+0x6c/0x80 [ 656.321746][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 656.326946][ C0] kmem_cache_alloc+0x17e/0x2c0 [ 656.331972][ C0] ? skb_clone+0x1eb/0x370 [ 656.336558][ C0] skb_clone+0x1eb/0x370 [ 656.340878][ C0] br_flood+0x411/0x670 [ 656.345109][ C0] br_handle_frame_finish+0xf2d/0x15c0 [ 656.350646][ C0] ? brport_get_ownership+0x80/0x80 [ 656.355916][ C0] ? net_generic+0x1e/0x240 [ 656.360545][ C0] ? br_cfm_config_fill_info+0x860/0x14a0 [ 656.366492][ C0] ? br_nf_pre_routing+0xbe8/0x1420 [ 656.371753][ C0] br_handle_frame+0x7f6/0x14d0 [ 656.376865][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 656.382206][ C0] ? brport_get_ownership+0x80/0x80 [ 656.387491][ C0] ? bond_handle_frame+0x358/0xba0 [ 656.392923][ C0] ? br_handle_frame_dummy+0x10/0x10 [ 656.398273][ C0] __netif_receive_skb_core+0xf94/0x3ab0 [ 656.404141][ C0] ? perf_trace_preemptirq_template+0x269/0x330 [ 656.410479][ C0] ? qdisc_run+0x230/0x230 [ 656.415047][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 656.421415][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 656.426509][ C0] ? read_lock_is_recursive+0x20/0x20 [ 656.431944][ C0] ? _raw_spin_lock_irq+0xbb/0xf0 [ 656.437066][ C0] ? process_backlog+0x2cf/0x710 [ 656.442077][ C0] __netif_receive_skb+0x74/0x290 [ 656.447191][ C0] ? process_backlog+0x2cf/0x710 [ 656.452331][ C0] process_backlog+0x380/0x710 [ 656.457180][ C0] ? trigger_rx_softirq+0x60/0x60 [ 656.462295][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.468626][ C0] __napi_poll+0xbb/0x460 [ 656.473031][ C0] net_rx_action+0x65f/0xcc0 [ 656.477685][ C0] ? net_tx_action+0x950/0x950 [ 656.482505][ C0] ? detach_timer+0x2b0/0x2b0 [ 656.487508][ C0] handle_softirqs+0x27d/0x820 [ 656.492412][ C0] ? read_tsc+0x9/0x20 [ 656.496554][ C0] ? ktime_get+0x24b/0x280 [ 656.501031][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 656.505899][ C0] ? do_softirq+0x1a0/0x1a0 [ 656.510495][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 656.515761][ C0] __irq_exit_rcu+0xd3/0x190 [ 656.520432][ C0] ? irq_exit_rcu+0x20/0x20 [ 656.524997][ C0] irq_exit_rcu+0x9/0x20 [ 656.529289][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 656.534986][ C0] [ 656.537970][ C0] [ 656.541043][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.547281][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 656.553235][ C0] Code: 2f 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 0f 1f 44 00 00 4c 89 e7 e8 93 d0 38 09 e8 1e 19 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 656.572902][ C0] RSP: 0018:ffffc90004dcf280 EFLAGS: 00000282 [ 656.579037][ C0] RAX: 73e7addc97b1c000 RBX: 0000000000000000 RCX: 73e7addc97b1c000 [ 656.587247][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d0ca0 [ 656.595280][ C0] RBP: ffffc90004dcf2d0 R08: ffffffff911eb52f R09: 1ffffffff223d6a5 [ 656.603828][ C0] R10: dffffc0000000000 R11: fffffbfff223d6a6 R12: ffff88804e03da00 [ 656.611868][ C0] R13: 1ffff110171c79a9 R14: dffffc0000000000 R15: ffff8880b8e3cd48 [ 656.620011][ C0] __schedule+0x15b6/0x4660 [ 656.624598][ C0] ? verify_lock_unused+0x140/0x140 [ 656.629856][ C0] ? lock_chain_count+0x20/0x20 [ 656.634755][ C0] ? asan.module_dtor+0x20/0x20 [ 656.639665][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.645885][ C0] ? preempt_schedule+0xc0/0xd0 [ 656.650800][ C0] ? preempt_schedule+0xc0/0xd0 [ 656.655811][ C0] preempt_schedule_common+0x82/0xc0 [ 656.661254][ C0] preempt_schedule+0xc0/0xd0 [ 656.666071][ C0] ? schedule_preempt_disabled+0x20/0x20 [ 656.671767][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 656.678187][ C0] preempt_schedule_thunk+0x1a/0x30 [ 656.683458][ C0] _raw_spin_unlock_irqrestore+0x111/0x120 [ 656.689362][ C0] ? _raw_spin_unlock+0x40/0x40 [ 656.694306][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 656.699592][ C0] __unfreeze_partials+0x190/0x210 [ 656.704985][ C0] put_cpu_partial+0x17c/0x250 [ 656.709991][ C0] ? put_cpu_partial+0x6e/0x250 [ 656.714919][ C0] __slab_free+0x319/0x400 [ 656.719392][ C0] ? ___cache_free+0x6e/0x150 [ 656.724137][ C0] qlist_free_all+0x75/0xd0 [ 656.728885][ C0] kasan_quarantine_reduce+0x143/0x160 [ 656.734413][ C0] __kasan_slab_alloc+0x22/0x80 [ 656.739325][ C0] slab_post_alloc_hook+0x6a/0x4d0 [ 656.744538][ C0] __kmem_cache_alloc_node+0x194/0x250 [ 656.750163][ C0] ? ____ip_mc_inc_group+0x2b3/0xac0 [ 656.755527][ C0] ? ____ip_mc_inc_group+0x2b3/0xac0 [ 656.760875][ C0] kmalloc_trace+0x2a/0xe0 [ 656.765551][ C0] ____ip_mc_inc_group+0x2b3/0xac0 [ 656.770785][ C0] ip_mc_up+0x125/0x300 [ 656.775061][ C0] inetdev_event+0x104b/0x1610 [ 656.779898][ C0] ? devinet_exit_net+0x220/0x220 [ 656.784998][ C0] notifier_call_chain+0x18f/0x380 [ 656.790186][ C0] __dev_notify_flags+0x1ab/0x310 [ 656.795360][ C0] ? __dev_change_flags+0x6a0/0x6a0 [ 656.800616][ C0] ? __dev_change_flags+0x51c/0x6a0 [ 656.805898][ C0] ? dev_get_flags+0x1c0/0x1c0 [ 656.810717][ C0] ? __sanitizer_cov_trace_pc+0x3b/0x60 [ 656.816436][ C0] dev_change_flags+0xde/0x1a0 [ 656.821256][ C0] dev_ioctl+0x7b4/0x1140 [ 656.825750][ C0] sock_do_ioctl+0x239/0x310 [ 656.830441][ C0] ? sock_show_fdinfo+0xb0/0xb0 [ 656.835383][ C0] sock_ioctl+0x5be/0x7e0 [ 656.839770][ C0] ? sock_poll+0x3e0/0x3e0 [ 656.844263][ C0] ? bpf_lsm_file_ioctl+0x9/0x10 [ 656.849367][ C0] ? security_file_ioctl+0x80/0xa0 [ 656.854605][ C0] ? sock_poll+0x3e0/0x3e0 [ 656.859256][ C0] __se_sys_ioctl+0xfd/0x170 [ 656.864126][ C0] do_syscall_64+0x55/0xb0 [ 656.868686][ C0] ? clear_bhb_loop+0x40/0x90 [ 656.873420][ C0] ? clear_bhb_loop+0x40/0x90 [ 656.878152][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 656.884615][ C0] RIP: 0033:0x7f92ef59e0d9 [ 656.889080][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.909008][ C0] RSP: 002b:00007f92f041b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 656.917593][ C0] RAX: ffffffffffffffda RBX: 00007f92ef825fa0 RCX: 00007f92ef59e0d9 [ 656.925632][ C0] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 0000000000000009 [ 656.933676][ C0] RBP: 00007f92ef635024 R08: 0000000000000000 R09: 0000000000000000 [ 656.941718][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.949752][ C0] R13: 00007f92ef826038 R14: 00007f92ef825fa0 R15: 00007ffe17378b68 [ 656.957903][ C0]