last executing test programs: 2.791431911s ago: executing program 4 (id=3614): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000633377fbac141416ac14141689089f034d2f8702440c6aab845013f2325f1a39018303048da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c) 2.507851955s ago: executing program 4 (id=3621): syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x41, 0x0, 0x11}, 0x0) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000001940)='{', 0x1}], 0x1}, 0x80d1) close(r0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) write$cgroup_subtree(r3, &(0x7f0000000100), 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @remote}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@generic={0x44, 0xd, "09000008ea6e1900000000"}]}}}], 0x40}, 0x20002880) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x1d, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0xb3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x10001}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x20, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188008", 0x29}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 2.182892021s ago: executing program 0 (id=3636): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef43b000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa1103", 0x4e}], 0x1}, 0x20000000) 2.095899235s ago: executing program 0 (id=3628): bpf$PROG_LOAD(0x5, 0x0, 0xc7c832517bed1bab) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r9 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) recvmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) close(r0) socket$kcm(0x10, 0x2, 0x0) 1.951297793s ago: executing program 2 (id=3629): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random=' \x00'}) 1.898611035s ago: executing program 3 (id=3631): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x7, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x1, 0x2}, 0x2006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001c00)=ANY=[], 0x50) mkdir(0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000bc000000bc00000003000000060000000000000700000000070000000000000e01000000010000f40b00000000000008030000000a00000001cc04"], 0x0, 0xd7, 0x0, 0x0, 0x7, 0x10000}, 0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r2 = gettid() sendmsg$unix(r1, &(0x7f0000000740)={&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f00000001c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0xee01, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r1]}}], 0x38, 0x800}, 0x40800) r3 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r3, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0}, 0xe900) sendmsg(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000740)="ecfd5dd05d6c0e6578521ac4e478af07c681a27448cc50044f340c5dc69cc58e120af98a620e851653d5faa8f685f8d3fc9db17b661ea653826bc6f0b912291acd05d2e8defb939fdb46ed4e5d3ee7e2fa62617977c3e3ec5370804dd0630720b5dc04a43c1fa19f4b14a46589d79849e4efb468e2149e7a256f0beeb2f36ff416e61e0ca1037f77375ee261912ef24892cbc7b198091681e0fca61ecc5326b11f0f0f93007e", 0xa6}, {&(0x7f0000000040)="68ca218686a9c9e719fa8197085e22ebd0f1", 0x12}, {&(0x7f0000002800)}], 0x3}, 0x40e4804) r4 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000001340)=@hci={0x1f, 0xc00, 0xe}, 0x80, &(0x7f0000002540)=[{&(0x7f00000006c0)='b', 0x10}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600073582c137153e37080c188005ac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) 1.79447883s ago: executing program 2 (id=3632): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d08020e0000008100e0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a0000", 0xcf}], 0x1, 0x0, 0x0, 0x7400}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.755736033s ago: executing program 1 (id=3633): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e145802000000000e000a", 0x23}], 0x1}, 0x40004) 1.679141776s ago: executing program 4 (id=3634): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) socketpair(0xa, 0x1, 0x3, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 1.61584723s ago: executing program 1 (id=3635): socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xd5, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000b80), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) 1.538708813s ago: executing program 2 (id=3637): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x4}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = openat$cgroup_ro(r0, &(0x7f0000000d00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000060000000000000000000000185a000006000000000000000000000085100000080000001d7268d7f0ffffff8520000002000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000"], &(0x7f0000000cc0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xd, 0x6}, 0x10, 0x10f2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000400)='=', 0x0}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000001d80)=""/4042, 0xfca}, {&(0x7f0000002d80)=""/4110, 0x100e}, {0x0}, {0x0}, {&(0x7f0000000600)=""/160, 0xa0}], 0x6}, 0x12020) recvmsg$kcm(r3, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 1.535280903s ago: executing program 0 (id=3638): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16d02409819180179714ed0a6e1f0f755d8583da60f27c162dbba0706002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000f07bf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b924275cb1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cece48c38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5ff01000000000000b69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b366bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe69de8bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c0000000000000000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac6ed77718098b2f722bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b4073f300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee751ec294584d23d9008bdf046f55c030ab941a0b87234a30900000000000068133c76770d5e7dabcc48d47685404cc540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca02bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf11211"], 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) 1.437188098s ago: executing program 1 (id=3639): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef43b000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa1103", 0x4e}], 0x1}, 0x20000000) 1.40517684s ago: executing program 2 (id=3640): r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8b35, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg(r0, 0x0, 0x91) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a"], 0xfe33) r4 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r4, 0x29, 0x18, 0x0, 0xfcd8) close(r2) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000"], 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(0xffffffffffffffff, 0x40042409, 0x0) socket$kcm(0x2, 0x5, 0x106) sendmsg$inet(r1, 0x0, 0x34004000) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20040010) 1.314700024s ago: executing program 3 (id=3641): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x12, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x40000004, 0xa021, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0, 0xc}, 0x100084, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x48) getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfe33) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, 0x0}, 0x24000008) 1.282209086s ago: executing program 1 (id=3642): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000001340)={0x2, 0x6, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x41}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x8000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1000001}, 0x11000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$kcm(0x2, 0x1, 0x84) syz_open_procfs$namespace(0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x12) 1.273035277s ago: executing program 0 (id=3643): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r2, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) recvmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000cc0)=""/4085, 0xff5}, {&(0x7f0000001ec0)=""/4096, 0x1000}], 0x2}, 0x12000) 1.180153051s ago: executing program 4 (id=3644): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe1, 0x4, @perf_bp={0x0}, 0xc9b2397897f8dcae, 0x400004}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000006000000aa0b"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, &(0x7f00000002c0)=""/251, &(0x7f0000000940), &(0x7f0000000200), 0xa7c, r0, 0x0, 0xfffe}, 0x38) 1.106778155s ago: executing program 3 (id=3645): socketpair(0x1, 0x1, 0x0, 0x0) close(0xffffffffffffffff) socket$kcm(0x28, 0x1, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x34, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x4048050) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a65}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) socket$kcm(0x10, 0x2, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000000), 0x8) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x400000002, 0x0) socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7, 0xffffffffffffffff}, 0x828, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0xfc, 0x0, 0x0, 0x1, 0x0, 0x100000000, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000080)}, 0x0, 0xcc05, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r3) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x2000, 0x0, 0x0, 0x1, 0x40000, 0x0, 0xffff}, 0x0, 0x200, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r2, &(0x7f0000000200)="bfab9cfd", &(0x7f0000000240)=""/202}, 0x20) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x29, 0x23, &(0x7f0000000040), 0xcf) sendmsg$kcm(r4, &(0x7f0000001240)={&(0x7f0000000180)=@in6={0xa, 0x4e24, 0xe, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x80, 0x0}, 0x24000010) 1.019504809s ago: executing program 1 (id=3646): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000740)="2e00000010008188e6b62aa73f72cc9f0ba1f8483d0000005e145802000000000e000a001000000002", 0x29}], 0x1}, 0x40004) 980.868491ms ago: executing program 2 (id=3647): perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xee, 0x0, 0x0, 0x0, 0x0, 0x400000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x11efa, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x24}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x4001f93}, 0x114905, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004000000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x40000) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x3}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r4, &(0x7f0000000280), 0x9) r5 = openat$cgroup_int(r3, &(0x7f00000003c0)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000400)=0x9, 0x12) r6 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000c40), 0x12) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0x1d, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000010000000000002000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) r8 = openat$cgroup_ro(r7, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000200)=0x1, 0x12) 896.975295ms ago: executing program 3 (id=3648): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x77, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xa0c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x4846, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80102, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x18944, 0x401, 0x25, 0x0, 0x1, 0x200, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="1400000017000b63d25a80648c2594f945a3cb0b", 0x14}], 0x1}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) r6 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r6, &(0x7f00000010c0)={&(0x7f0000000140)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000480)='\\', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)}], 0x1}, 0x8040) close(r6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map, r3, 0xa, 0x2028}, 0x20) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 678.647486ms ago: executing program 1 (id=3649): bpf$PROG_LOAD(0x5, 0x0, 0xc7c832517bed1bab) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x60}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x2, 0x1006, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r6 = openat$cgroup_devices(r5, 0x0, 0x2, 0x0) write$cgroup_devices(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='c 1223'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000300)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000040)='syz1\x00', 0x1ff) socket$kcm(0x2, 0x200000000000003, 0x106) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r9 = socket$kcm(0x2, 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(r9, 0x1, 0x2e, &(0x7f0000000640)=r8, 0x4) recvmsg$kcm(r9, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x0) close(r2) socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c096) close(r0) socket$kcm(0x10, 0x2, 0x0) 246.422548ms ago: executing program 0 (id=3650): socket$kcm(0x10, 0x400000002, 0x0) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r1, 0xe0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000009c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0), 0x0, 0xd5, &(0x7f0000000b00)=[{}, {}, {}, {}], 0x20, 0x0, 0x0, &(0x7f0000000b80), 0x8, 0x47, 0x8, 0x8, &(0x7f0000000bc0)}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4fb5b6f85a83c771}, 0x0, 0xc8}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x2}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x4a}, 0x20) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000640)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce810203290800000000000000000000ffffac14140a000000000000000000000000ac1414aa"], 0xfdef) 198.78118ms ago: executing program 4 (id=3651): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@enum64={0x3, 0x0, 0x0, 0x13, 0x1, 0x4}]}, {0x0, [0x5f, 0x5f, 0x5f, 0x61]}}, 0x0, 0x2a, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x7, 0x0, &(0x7f0000000580)="b9ff0307680426", 0x0, 0x53e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = openat$cgroup_ro(r0, &(0x7f0000000d00)='blkio.bfq.time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e00)=@bpf_ext={0x1c, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000010000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000060000000000000000000000185a000006000000000000000000000085100000080000001d7268d7f0ffffff8520000002000000bf91000000000000b7020000010000008500000084000000b70000000000000095000000"], &(0x7f0000000cc0)='syzkaller\x00', 0xffff, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000d40)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000d80)={0x5, 0xd, 0x6}, 0x10, 0x10f2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000009c0)=""/182, 0xb6}, {&(0x7f0000001d80)=""/4042, 0xfca}, {&(0x7f0000002d80)=""/4110, 0x100e}, {0x0}, {0x0}, {&(0x7f0000000600)=""/160, 0xa0}], 0x6}, 0x12020) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) 181.052571ms ago: executing program 3 (id=3652): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188041f56ecdb4cb9cca7480ef43b000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa1103", 0x4e}], 0x1}, 0x20000000) 130.344123ms ago: executing program 4 (id=3653): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000c80)=""/230, 0xe6}, {&(0x7f0000001880)=""/4090, 0xffa}, {&(0x7f0000003800)=""/174, 0xae}, {&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000d80)=""/113, 0x71}], 0x6}, 0x100) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000480)={0x2, &(0x7f00000004c0)=[{}, {0x9}]}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="83", 0x1}], 0x1}, 0x48040) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xc0189436, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000400), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32, @ANYBLOB="000000000400000900000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_config_ext={0x1ff, 0x200}, 0x8000, 0xcdd, 0x43a1bd76, 0x4, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000000)='^+,!z,-\x00') socket$kcm(0x2, 0x200000000000001, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x47}, 0x48) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000008f00000095010000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={0x0, 0x0, 0x3a, 0x0, 0x1}, 0x28) r4 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32], 0x50) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x890b, &(0x7f0000000000)) socket$kcm(0xa, 0x2, 0x0) 27.760408ms ago: executing program 2 (id=3654): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r1}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000400000009"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f020033000b35d25a806c8c6f94f90f24fc60586507000c000300053582c137153e37000c0980fc0b10070300", 0x33fe0}], 0x1}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) socketpair(0xa, 0x1, 0x3, &(0x7f0000000100)) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) 27.281749ms ago: executing program 3 (id=3655): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000040)="2703022b590200c90000002f1eafbcf706e105000000894f000f1102ee1680ca82973d2bd4b8bf4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d7649496db72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000280)="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", 0x1a1}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b581440284", 0xfe69}], 0x4}, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000"], 0x50) setsockopt$sock_attach_bpf(r0, 0x84, 0x22, 0x0, 0x0) 0s ago: executing program 0 (id=3656): syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r0, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) kernel console output (not intermixed with test programs): es in process `syz.4.2064'. [ 399.156947][T10547] validate_nla: 8 callbacks suppressed [ 399.156988][T10547] netlink: 'syz.3.2077': attribute type 21 has an invalid length. [ 399.179746][T10547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2077'. [ 399.214715][T10547] netlink: 'syz.3.2077': attribute type 1 has an invalid length. [ 399.245613][T10547] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2077'. [ 399.573428][T10552] netlink: 'syz.0.2079': attribute type 3 has an invalid length. [ 399.583150][T10552] netlink: 61203 bytes leftover after parsing attributes in process `syz.0.2079'. [ 399.682708][T10556] netlink: 'syz.3.2081': attribute type 5 has an invalid length. [ 399.912408][T10563] netlink: 'syz.1.2082': attribute type 5 has an invalid length. [ 400.023356][T10558] netlink: 'syz.3.2081': attribute type 10 has an invalid length. [ 400.106197][T10562] netlink: 'syz.1.2082': attribute type 10 has an invalid length. [ 400.215631][T10570] netlink: 'syz.2.2084': attribute type 10 has an invalid length. [ 401.715564][T10591] netlink: 'syz.3.2092': attribute type 21 has an invalid length. [ 401.759425][T10591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2092'. [ 401.781717][T10593] netlink: 'syz.2.2094': attribute type 3 has an invalid length. [ 401.815186][T10593] netlink: 61203 bytes leftover after parsing attributes in process `syz.2.2094'. [ 401.861670][T10591] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2092'. [ 402.177609][T10604] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2098'. [ 402.264097][T10604] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2098'. [ 404.397614][T10629] validate_nla: 8 callbacks suppressed [ 404.397652][T10629] netlink: 'syz.3.2109': attribute type 21 has an invalid length. [ 404.438060][T10629] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2109'. [ 404.492148][T10629] netlink: 'syz.3.2109': attribute type 1 has an invalid length. [ 404.511500][T10629] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2109'. [ 404.522978][T10637] netlink: 'syz.4.2111': attribute type 21 has an invalid length. [ 404.541242][T10637] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2111'. [ 404.605984][T10637] netlink: 'syz.4.2111': attribute type 1 has an invalid length. [ 404.615651][T10637] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2111'. [ 405.136122][T10654] netlink: 'syz.0.2116': attribute type 3 has an invalid length. [ 405.198740][T10654] netlink: 'syz.0.2116': attribute type 1 has an invalid length. [ 405.260831][T10654] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.2116'. [ 405.554320][T10667] netlink: 'syz.4.2122': attribute type 21 has an invalid length. [ 405.573136][T10668] netlink: 'syz.3.2121': attribute type 5 has an invalid length. [ 405.614679][T10667] netlink: 'syz.4.2122': attribute type 1 has an invalid length. [ 405.668763][T10672] netlink: 'syz.0.2123': attribute type 21 has an invalid length. [ 406.767404][T10691] __nla_validate_parse: 5 callbacks suppressed [ 406.767435][T10691] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2129'. [ 407.083650][T10704] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2134'. [ 407.113211][T10702] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2134'. [ 407.322808][T10710] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2136'. [ 407.453410][T10711] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2147'. [ 407.481545][T10714] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2147'. [ 407.534313][T10716] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2136'. [ 407.795922][T10721] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2139'. [ 407.922531][T10721] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2139'. [ 408.527177][T10732] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.2144'. [ 409.812974][T10761] validate_nla: 27 callbacks suppressed [ 409.813028][T10761] netlink: 'syz.0.2155': attribute type 3 has an invalid length. [ 409.965754][T10761] netlink: 'syz.0.2155': attribute type 1 has an invalid length. [ 410.430884][T10767] netlink: 'syz.0.2158': attribute type 5 has an invalid length. [ 410.536950][T10773] netlink: 'syz.4.2160': attribute type 3 has an invalid length. [ 410.616364][T10775] netlink: 'syz.0.2158': attribute type 10 has an invalid length. [ 410.660369][T10773] netlink: 'syz.4.2160': attribute type 1 has an invalid length. [ 411.317743][T10787] netlink: 'syz.0.2164': attribute type 21 has an invalid length. [ 411.401477][T10785] netlink: 'syz.2.2163': attribute type 5 has an invalid length. [ 411.518489][T10787] netlink: 'syz.0.2164': attribute type 1 has an invalid length. [ 411.556372][T10791] netlink: 'syz.2.2163': attribute type 10 has an invalid length. [ 412.530350][T10813] __nla_validate_parse: 9 callbacks suppressed [ 412.530389][T10813] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2183'. [ 412.783386][T10816] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2173'. [ 412.841652][T10813] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2183'. [ 412.998435][T10816] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2173'. [ 415.057314][T10844] validate_nla: 15 callbacks suppressed [ 415.057334][T10844] netlink: 'syz.2.2182': attribute type 5 has an invalid length. [ 415.318123][T10841] netlink: 'syz.0.2181': attribute type 10 has an invalid length. [ 415.817145][T10844] netlink: 'syz.2.2182': attribute type 10 has an invalid length. [ 416.229493][T10855] netlink: 'syz.4.2187': attribute type 5 has an invalid length. [ 416.517823][T10857] netlink: 'syz.3.2186': attribute type 5 has an invalid length. [ 416.792690][T10863] netlink: 'syz.3.2186': attribute type 10 has an invalid length. [ 416.917396][T10862] netlink: 'syz.0.2189': attribute type 5 has an invalid length. [ 416.971461][T10855] netlink: 'syz.4.2187': attribute type 10 has an invalid length. [ 417.164484][T10866] netlink: 'syz.0.2189': attribute type 10 has an invalid length. [ 417.310108][T10871] netlink: 'syz.2.2190': attribute type 10 has an invalid length. [ 420.385837][T10899] validate_nla: 6 callbacks suppressed [ 420.385858][T10899] netlink: 'syz.1.2201': attribute type 5 has an invalid length. [ 420.836426][T10899] netlink: 'syz.1.2201': attribute type 10 has an invalid length. [ 420.893222][T10904] netlink: 'syz.2.2204': attribute type 5 has an invalid length. [ 421.031772][T10903] netlink: 'syz.2.2204': attribute type 10 has an invalid length. [ 421.556099][T10913] netlink: 'syz.3.2205': attribute type 10 has an invalid length. [ 421.736882][T10909] netlink: 'syz.3.2205': attribute type 5 has an invalid length. [ 421.806620][T10915] netlink: 'syz.0.2218': attribute type 5 has an invalid length. [ 421.900397][T10921] netlink: 'syz.0.2218': attribute type 10 has an invalid length. [ 422.512268][T10934] netlink: 'syz.0.2211': attribute type 21 has an invalid length. [ 422.531166][T10934] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2211'. [ 422.593207][T10934] netlink: 'syz.0.2211': attribute type 1 has an invalid length. [ 422.631205][T10934] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2211'. [ 423.001547][T10941] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2216'. [ 423.116143][T10941] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2216'. [ 425.299354][T10971] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2227'. [ 425.375960][T10971] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2227'. [ 426.496928][T10988] validate_nla: 12 callbacks suppressed [ 426.496951][T10988] netlink: 'syz.0.2231': attribute type 5 has an invalid length. [ 428.762188][T11037] netlink: 'syz.4.2246': attribute type 5 has an invalid length. [ 428.876990][T11035] netlink: 'syz.4.2246': attribute type 10 has an invalid length. [ 429.879695][T11050] netlink: 'syz.1.2251': attribute type 21 has an invalid length. [ 429.894055][T11050] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2251'. [ 430.024666][T11050] netlink: 'syz.1.2251': attribute type 1 has an invalid length. [ 430.059790][T11050] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2251'. [ 431.261292][T11063] netlink: 'syz.3.2257': attribute type 5 has an invalid length. [ 431.564754][T11076] netlink: 'syz.3.2257': attribute type 10 has an invalid length. [ 431.688320][T11077] netlink: 'syz.0.2262': attribute type 5 has an invalid length. [ 431.759250][T11072] netlink: 'syz.1.2260': attribute type 5 has an invalid length. [ 431.817570][T11080] netlink: 'syz.1.2260': attribute type 10 has an invalid length. [ 432.144615][T11088] netlink: 'syz.2.2266': attribute type 21 has an invalid length. [ 432.199963][T11088] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2266'. [ 432.234782][T11088] netlink: 'syz.2.2266': attribute type 1 has an invalid length. [ 432.243473][T11088] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2266'. [ 432.759529][T11099] netlink: 'syz.1.2270': attribute type 21 has an invalid length. [ 432.792035][T11099] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2270'. [ 432.823354][T11099] netlink: 'syz.1.2270': attribute type 1 has an invalid length. [ 432.831482][T11099] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2270'. [ 433.139475][T11112] netlink: 'syz.0.2274': attribute type 5 has an invalid length. [ 433.549385][T11122] netlink: 'syz.2.2278': attribute type 5 has an invalid length. [ 433.801214][T11125] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2280'. [ 433.829621][T11127] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2280'. [ 436.604403][T11166] validate_nla: 16 callbacks suppressed [ 436.604425][T11166] netlink: 'syz.1.2293': attribute type 10 has an invalid length. [ 437.149561][T11170] netlink: 'syz.4.2296': attribute type 5 has an invalid length. [ 437.213938][T11169] netlink: 'syz.2.2295': attribute type 5 has an invalid length. [ 437.423836][T11169] netlink: 'syz.2.2295': attribute type 10 has an invalid length. [ 437.645494][T11174] netlink: 'syz.4.2296': attribute type 10 has an invalid length. [ 438.132885][T11180] netlink: 'syz.2.2299': attribute type 5 has an invalid length. [ 439.212862][T11193] netlink: 'syz.3.2303': attribute type 5 has an invalid length. [ 439.233052][T11197] netlink: 'syz.0.2304': attribute type 5 has an invalid length. [ 439.267817][T11199] netlink: 'syz.3.2303': attribute type 10 has an invalid length. [ 439.301399][T11201] netlink: 'syz.0.2304': attribute type 10 has an invalid length. [ 439.422567][T11203] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2316'. [ 439.541466][T11203] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2316'. [ 440.050488][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.056922][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.027377][T11248] validate_nla: 15 callbacks suppressed [ 442.027413][T11248] netlink: 'syz.3.2321': attribute type 21 has an invalid length. [ 442.076596][T11248] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2321'. [ 442.166034][T11249] netlink: 'syz.3.2321': attribute type 1 has an invalid length. [ 442.350167][T11249] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2321'. [ 442.456986][T11251] netlink: 'syz.2.2320': attribute type 10 has an invalid length. [ 442.578975][T11261] netlink: 'syz.0.2324': attribute type 21 has an invalid length. [ 442.594457][T11261] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2324'. [ 442.658931][T11263] netlink: 'syz.0.2324': attribute type 1 has an invalid length. [ 442.674101][T11263] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2324'. [ 442.915588][T11268] netlink: 'syz.0.2326': attribute type 5 has an invalid length. [ 443.299876][T11277] netlink: 'syz.4.2328': attribute type 5 has an invalid length. [ 443.512462][T11280] netlink: 'syz.0.2326': attribute type 10 has an invalid length. [ 443.642876][T11281] netlink: 'syz.3.2329': attribute type 10 has an invalid length. [ 444.561470][T11288] netlink: 'syz.1.2332': attribute type 5 has an invalid length. [ 444.824098][T11295] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2335'. [ 444.884838][T11293] device wlan0 entered promiscuous mode [ 444.952648][T11295] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2335'. [ 447.438208][T11319] device wlan0 left promiscuous mode [ 447.578035][T11328] validate_nla: 7 callbacks suppressed [ 447.578056][T11328] netlink: 'syz.4.2341': attribute type 10 has an invalid length. [ 448.106872][T11340] netlink: 'syz.1.2347': attribute type 21 has an invalid length. [ 448.261596][T11340] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2347'. [ 448.351920][T11345] netlink: 'syz.0.2348': attribute type 5 has an invalid length. [ 448.389180][T11336] netlink: 'syz.3.2345': attribute type 5 has an invalid length. [ 448.437290][T11347] netlink: 'syz.1.2347': attribute type 1 has an invalid length. [ 448.478326][T11347] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2347'. [ 448.513361][T11345] netlink: 'syz.0.2348': attribute type 10 has an invalid length. [ 449.610250][T11365] netlink: 'syz.4.2355': attribute type 5 has an invalid length. [ 449.647416][T11366] netlink: 'syz.4.2355': attribute type 10 has an invalid length. [ 450.586616][T11373] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2359'. [ 450.645146][T11388] netlink: 'syz.0.2360': attribute type 10 has an invalid length. [ 451.315244][T11392] netlink: 'syz.3.2363': attribute type 21 has an invalid length. [ 451.325759][T11392] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2363'. [ 451.409150][T11397] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2363'. [ 451.887676][T11403] device wlan0 entered promiscuous mode [ 453.478935][T11415] validate_nla: 3 callbacks suppressed [ 453.478997][T11415] netlink: 'syz.4.2370': attribute type 5 has an invalid length. [ 453.575472][T11418] device wlan0 entered promiscuous mode [ 453.641956][T11415] netlink: 'syz.4.2370': attribute type 10 has an invalid length. [ 453.783371][T11426] device wlan0 entered promiscuous mode [ 454.595159][T11433] netlink: 184 bytes leftover after parsing attributes in process `syz.4.2374'. [ 454.626380][T11436] netlink: 'syz.3.2376': attribute type 21 has an invalid length. [ 454.634265][T11436] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.029668][T11440] device wlan0 left promiscuous mode [ 455.222044][T11436] netlink: 'syz.3.2376': attribute type 1 has an invalid length. [ 455.254385][T11436] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2376'. [ 455.432359][T11453] device wlan0 entered promiscuous mode [ 456.205553][T11462] netlink: 'syz.2.2385': attribute type 5 has an invalid length. [ 456.260968][T11467] netlink: 'syz.2.2385': attribute type 10 has an invalid length. [ 457.755664][T11486] netlink: 'syz.3.2402': attribute type 5 has an invalid length. [ 457.904142][T11490] netlink: 'syz.3.2402': attribute type 10 has an invalid length. [ 458.184390][T11500] netlink: 'syz.1.2394': attribute type 21 has an invalid length. [ 458.266275][T11500] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2394'. [ 458.531317][T11505] netlink: 'syz.1.2394': attribute type 1 has an invalid length. [ 458.713842][T11505] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2394'. [ 458.855006][T11496] netlink: 184 bytes leftover after parsing attributes in process `syz.0.2393'. [ 459.047797][T11510] netlink: 'syz.2.2397': attribute type 5 has an invalid length. [ 459.193235][T11517] netlink: 'syz.0.2401': attribute type 21 has an invalid length. [ 459.252425][T11517] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2401'. [ 459.341496][T11519] netlink: 'syz.2.2397': attribute type 10 has an invalid length. [ 459.412529][T11521] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 459.438940][T11521] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2401'. [ 459.492862][T11520] device wlan0 entered promiscuous mode [ 460.472235][T11524] device wlan0 left promiscuous mode [ 460.572289][T11529] device wlan0 left promiscuous mode [ 460.733912][T11537] device wlan0 left promiscuous mode [ 461.195309][T11540] netlink: 'syz.3.2409': attribute type 5 has an invalid length. [ 461.272863][T11548] netlink: 'syz.3.2409': attribute type 10 has an invalid length. [ 461.505413][T11550] netlink: 'syz.0.2411': attribute type 10 has an invalid length. [ 461.952468][T11557] netlink: 'syz.1.2415': attribute type 21 has an invalid length. [ 462.003387][T11557] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2415'. [ 462.205193][T11562] netlink: 'syz.3.2416': attribute type 5 has an invalid length. [ 462.290591][T11560] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2415'. [ 463.813343][T11603] validate_nla: 5 callbacks suppressed [ 463.813363][T11603] netlink: 'syz.4.2423': attribute type 10 has an invalid length. [ 464.175836][T11605] netlink: 'syz.3.2428': attribute type 10 has an invalid length. [ 464.560356][T11612] netlink: 'syz.1.2432': attribute type 21 has an invalid length. [ 464.684492][T11612] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2432'. [ 464.833987][T11611] netlink: 'syz.1.2432': attribute type 1 has an invalid length. [ 464.965278][T11611] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2432'. [ 465.327462][T11627] netlink: 'syz.3.2436': attribute type 5 has an invalid length. [ 465.605395][T11635] netlink: 'syz.3.2436': attribute type 10 has an invalid length. [ 466.743586][T11657] device wlan0 entered promiscuous mode [ 466.952561][T11658] netlink: 'syz.3.2446': attribute type 10 has an invalid length. [ 467.561027][T11670] netlink: 'syz.3.2450': attribute type 21 has an invalid length. [ 467.594558][T11670] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2450'. [ 467.668213][T11670] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 467.718104][T11670] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2450'. [ 468.019565][T11684] device veth1_macvtap left promiscuous mode [ 468.257726][T11687] device veth1_macvtap entered promiscuous mode [ 468.283859][T11687] device macsec0 entered promiscuous mode [ 468.442281][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 470.585196][T11739] device veth0_vlan left promiscuous mode [ 470.596389][T11739] device veth0_vlan entered promiscuous mode [ 470.692330][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 470.706087][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 470.758968][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 471.006999][T11750] device veth0_vlan left promiscuous mode [ 471.056235][T11750] device veth0_vlan entered promiscuous mode [ 472.370119][T11787] device veth0_vlan left promiscuous mode [ 472.414407][T11787] device veth0_vlan entered promiscuous mode [ 472.543176][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 472.553737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 472.606170][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 473.166051][T11795] device veth0_vlan left promiscuous mode [ 473.215724][T11795] device veth0_vlan entered promiscuous mode [ 473.320665][T11804] device veth0_vlan left promiscuous mode [ 473.342960][T11804] device veth0_vlan entered promiscuous mode [ 474.302024][T11843] netlink: 'syz.1.2517': attribute type 21 has an invalid length. [ 474.328000][T11843] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2517'. [ 474.407131][T11843] netlink: 'syz.1.2517': attribute type 1 has an invalid length. [ 474.436321][T11843] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2517'. [ 475.761597][T11871] device veth0_vlan left promiscuous mode [ 475.858603][T11871] device veth0_vlan entered promiscuous mode [ 475.890412][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 475.917644][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 475.962860][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 476.169121][T11885] netlink: 'syz.2.2531': attribute type 21 has an invalid length. [ 476.309855][T11885] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2531'. [ 476.424971][T11890] netlink: 'syz.2.2531': attribute type 1 has an invalid length. [ 476.432803][T11890] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2531'. [ 477.401173][T11901] netlink: 'syz.2.2537': attribute type 5 has an invalid length. [ 477.646216][T11908] netlink: 'syz.2.2537': attribute type 10 has an invalid length. [ 478.586220][T11925] device veth0_vlan left promiscuous mode [ 478.628099][T11925] device veth0_vlan entered promiscuous mode [ 478.747953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 478.797447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 478.826598][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 478.926322][T11934] netlink: 'syz.0.2547': attribute type 21 has an invalid length. [ 478.934312][T11934] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2547'. [ 479.127878][T11935] netlink: 'syz.0.2547': attribute type 1 has an invalid length. [ 479.222272][T11935] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2547'. [ 479.815778][T11953] netlink: 'syz.1.2555': attribute type 5 has an invalid length. [ 480.038133][T11957] netlink: 'syz.1.2555': attribute type 10 has an invalid length. [ 480.669282][T11973] netlink: 'syz.3.2562': attribute type 21 has an invalid length. [ 480.717130][T11973] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2562'. [ 480.842665][T11973] netlink: 'syz.3.2562': attribute type 1 has an invalid length. [ 480.887681][T11973] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2562'. [ 482.179724][T11991] device veth0_vlan left promiscuous mode [ 482.217416][T11991] device veth0_vlan entered promiscuous mode [ 482.446680][T12004] netlink: 'syz.4.2571': attribute type 5 has an invalid length. [ 482.767229][T12013] netlink: 'syz.4.2571': attribute type 10 has an invalid length. [ 483.260200][T12018] netlink: 'syz.3.2576': attribute type 21 has an invalid length. [ 483.449707][T12018] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2576'. [ 483.655353][T12020] netlink: 'syz.3.2576': attribute type 1 has an invalid length. [ 483.715155][T12020] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2576'. [ 485.270531][T12052] netlink: 'syz.3.2589': attribute type 5 has an invalid length. [ 485.295119][T12057] device veth0_vlan left promiscuous mode [ 485.356044][T12057] device veth0_vlan entered promiscuous mode [ 485.506412][T12065] netlink: 'syz.3.2593': attribute type 21 has an invalid length. [ 485.525771][T12065] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2593'. [ 485.550419][T12070] netlink: 'syz.3.2593': attribute type 1 has an invalid length. [ 485.576404][T12070] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2593'. [ 485.587049][T12071] device veth0_vlan left promiscuous mode [ 485.595823][T12071] device veth0_vlan entered promiscuous mode [ 485.636776][T12067] device wlan0 left promiscuous mode [ 486.338568][T12095] device wlan0 entered promiscuous mode [ 486.486929][T12098] netlink: 'syz.2.2604': attribute type 5 has an invalid length. [ 486.588175][T12098] netlink: 'syz.2.2604': attribute type 10 has an invalid length. [ 487.642403][T12112] device veth0_vlan left promiscuous mode [ 487.739203][T12112] device veth0_vlan entered promiscuous mode [ 487.935773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 487.966275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 488.028567][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 488.069200][T12140] netlink: 'syz.2.2619': attribute type 5 has an invalid length. [ 488.164300][T12142] netlink: 'syz.2.2619': attribute type 10 has an invalid length. [ 488.433645][T12150] device wlan0 left promiscuous mode [ 489.307979][T12177] netlink: 'syz.0.2644': attribute type 5 has an invalid length. [ 489.653086][T12177] netlink: 'syz.0.2644': attribute type 10 has an invalid length. [ 490.155238][T12213] netlink: 'syz.1.2649': attribute type 5 has an invalid length. [ 490.458179][T12213] netlink: 'syz.1.2649': attribute type 10 has an invalid length. [ 490.937317][T12230] netlink: 'syz.0.2655': attribute type 5 has an invalid length. [ 491.278077][T12236] netlink: 'syz.0.2655': attribute type 10 has an invalid length. [ 492.131572][T12255] netlink: 'syz.1.2665': attribute type 21 has an invalid length. [ 492.148128][T12255] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2665'. [ 492.214099][T12255] netlink: 'syz.1.2665': attribute type 1 has an invalid length. [ 492.263208][T12255] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2665'. [ 492.479071][T12264] netlink: 'syz.2.2672': attribute type 5 has an invalid length. [ 492.642697][T12264] netlink: 'syz.2.2672': attribute type 10 has an invalid length. [ 492.864754][T12286] netlink: 'syz.4.2680': attribute type 21 has an invalid length. [ 492.886805][T12286] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2680'. [ 492.934177][T12290] netlink: 'syz.4.2680': attribute type 1 has an invalid length. [ 492.996549][T12290] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2680'. [ 493.027519][T12292] netlink: 'syz.3.2681': attribute type 21 has an invalid length. [ 493.036602][T12292] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2681'. [ 493.086693][T12296] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2681'. [ 493.741350][T12323] device veth1_macvtap left promiscuous mode [ 493.800836][T12323] device veth1_macvtap entered promiscuous mode [ 493.842425][T12323] device macsec0 entered promiscuous mode [ 493.856537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 495.604542][T12391] device macsec0 entered promiscuous mode [ 495.715348][T12392] validate_nla: 12 callbacks suppressed [ 495.715368][T12392] netlink: 'syz.0.2719': attribute type 5 has an invalid length. [ 495.764294][T12395] netlink: 'syz.1.2716': attribute type 10 has an invalid length. [ 495.841118][T12392] netlink: 'syz.0.2719': attribute type 10 has an invalid length. [ 496.386875][T12401] netlink: 'syz.2.2724': attribute type 21 has an invalid length. [ 496.445332][T12401] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2724'. [ 496.554008][T12402] netlink: 'syz.2.2724': attribute type 1 has an invalid length. [ 496.579085][T12402] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2724'. [ 496.707114][T12408] netlink: 'syz.4.2727': attribute type 21 has an invalid length. [ 496.767577][T12408] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2727'. [ 496.927488][T12410] netlink: 'syz.1.2726': attribute type 5 has an invalid length. [ 496.977341][T12411] netlink: 'syz.4.2727': attribute type 1 has an invalid length. [ 497.019959][T12411] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2727'. [ 497.235260][T12418] netlink: 'syz.1.2726': attribute type 10 has an invalid length. [ 498.368820][T12457] netlink: 'syz.0.2743': attribute type 21 has an invalid length. [ 498.395093][T12457] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2743'. [ 498.501717][T12457] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2743'. [ 499.962495][T12493] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2757'. [ 500.111139][T12493] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2757'. [ 501.029468][T12519] validate_nla: 7 callbacks suppressed [ 501.029487][T12519] netlink: 'syz.1.2776': attribute type 5 has an invalid length. [ 501.343249][T12523] netlink: 'syz.1.2776': attribute type 10 has an invalid length. [ 501.428061][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.434454][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.981712][T12538] netlink: 'syz.3.2771': attribute type 21 has an invalid length. [ 502.025262][T12538] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2771'. [ 502.115673][T12541] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 502.173108][T12541] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2771'. [ 502.195209][T12540] netlink: 'syz.1.2785': attribute type 5 has an invalid length. [ 502.219892][T12546] netlink: 'syz.0.2774': attribute type 5 has an invalid length. [ 502.307828][T12540] netlink: 'syz.1.2785': attribute type 10 has an invalid length. [ 502.336903][T12546] netlink: 'syz.0.2774': attribute type 10 has an invalid length. [ 502.651746][T12559] netlink: 'syz.3.2780': attribute type 5 has an invalid length. [ 502.997831][T12559] netlink: 'syz.3.2780': attribute type 10 has an invalid length. [ 504.088197][T12593] tap0: tun_chr_ioctl cmd 1074025675 [ 504.097112][T12593] tap0: persist enabled [ 504.132725][T12592] tap0: tun_chr_ioctl cmd 1074025675 [ 504.154279][T12592] tap0: persist enabled [ 504.169370][T12592] tap0: tun_chr_ioctl cmd 2147767520 [ 504.262510][T12600] device wlan0 entered promiscuous mode [ 504.806746][T12623] device veth1_macvtap left promiscuous mode [ 504.831193][T12623] device macsec0 left promiscuous mode [ 504.864256][T12621] device wlan0 entered promiscuous mode [ 506.334463][T12646] validate_nla: 5 callbacks suppressed [ 506.334480][T12646] netlink: 'syz.3.2820': attribute type 10 has an invalid length. [ 506.717635][T12651] tap0: tun_chr_ioctl cmd 1074025675 [ 506.724948][T12651] tap0: persist enabled [ 506.773253][T12659] tap0: tun_chr_ioctl cmd 2147767520 [ 506.803158][T12657] tap0: tun_chr_ioctl cmd 1074025675 [ 506.811527][T12657] tap0: persist enabled [ 507.447758][T12668] tap1: tun_chr_ioctl cmd 2147767520 [ 507.801756][T12688] device wlan0 left promiscuous mode [ 508.074747][T12685] tap0: tun_chr_ioctl cmd 1074025675 [ 508.083029][T12685] tap0: persist enabled [ 508.102303][T12692] tap0: tun_chr_ioctl cmd 2147767520 [ 508.422716][T12705] tap1: tun_chr_ioctl cmd 1074025675 [ 508.453581][T12705] tap1: persist enabled [ 508.469835][T12705] tap1: tun_chr_ioctl cmd 1074025675 [ 508.487297][T12705] tap1: persist enabled [ 508.498111][T12705] tap1: tun_chr_ioctl cmd 2147767520 [ 508.678106][T12717] tap0: tun_chr_ioctl cmd 2147767520 [ 509.530357][T12743] tap1: tun_chr_ioctl cmd 1074025675 [ 509.555001][T12743] tap1: persist enabled [ 509.562799][T12743] tap1: tun_chr_ioctl cmd 2147767520 [ 510.099695][T12764] netlink: 'syz.1.2863': attribute type 21 has an invalid length. [ 510.126865][T12764] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2863'. [ 510.198973][T12764] netlink: 'syz.1.2863': attribute type 1 has an invalid length. [ 510.221638][T12764] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2863'. [ 510.762331][T12784] tap2: tun_chr_ioctl cmd 1074025675 [ 510.769992][T12784] tap2: persist enabled [ 510.780762][T12782] tap2: tun_chr_ioctl cmd 2147767520 [ 510.813868][T12786] tap0: tun_chr_ioctl cmd 1074025675 [ 510.839226][T12786] tap0: persist enabled [ 510.881849][T12786] tap0: tun_chr_ioctl cmd 2147767520 [ 511.293571][T12799] tap1: tun_chr_ioctl cmd 1074025675 [ 511.316907][T12799] tap1: persist enabled [ 511.344537][T12807] tap1: tun_chr_ioctl cmd 2147767520 [ 511.387826][T12812] netlink: 'syz.2.2872': attribute type 21 has an invalid length. [ 511.402011][T12812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2872'. [ 511.454243][T12815] netlink: 'syz.2.2872': attribute type 1 has an invalid length. [ 511.492357][T12815] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.2872'. [ 511.800100][T12827] tap2: tun_chr_ioctl cmd 1074025675 [ 511.836411][T12827] tap2: persist enabled [ 511.886206][T12822] tap2: tun_chr_ioctl cmd 2147767520 [ 512.300408][T12837] tap3: tun_chr_ioctl cmd 1074025675 [ 512.331281][T12837] tap3: persist enabled [ 512.403986][T12836] tap3: tun_chr_ioctl cmd 2147767520 [ 512.588403][T12855] netlink: 'syz.1.2888': attribute type 21 has an invalid length. [ 512.627972][T12855] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2888'. [ 512.665062][T12857] netlink: 'syz.1.2888': attribute type 1 has an invalid length. [ 512.710513][T12857] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2888'. [ 512.906194][T12866] tap0: tun_chr_ioctl cmd 1074025675 [ 512.955215][T12866] tap0: persist enabled [ 512.960657][T12861] tap2: tun_chr_ioctl cmd 1074025675 [ 512.974688][T12861] tap2: persist enabled [ 512.983182][T12861] tap2: tun_chr_ioctl cmd 2147767520 [ 513.008447][T12858] tap0: tun_chr_ioctl cmd 2147767520 [ 513.256065][T12884] netlink: 'syz.0.2906': attribute type 5 has an invalid length. [ 513.288598][T12881] device wlan0 left promiscuous mode [ 513.423447][T12885] netlink: 'syz.0.2906': attribute type 10 has an invalid length. [ 513.477074][T12875] tap3: tun_chr_ioctl cmd 1074025675 [ 513.484682][T12875] tap3: persist enabled [ 513.507506][T12883] tap3: tun_chr_ioctl cmd 2147767520 [ 513.811405][T12900] device wlan0 entered promiscuous mode [ 514.153403][T12905] netlink: 'syz.0.2904': attribute type 21 has an invalid length. [ 514.204970][T12905] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2904'. [ 514.231444][T12908] netlink: 'syz.0.2904': attribute type 1 has an invalid length. [ 514.252905][T12908] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.2904'. [ 514.314213][T12914] tap4: tun_chr_ioctl cmd 1074025675 [ 514.324967][T12914] tap4: persist enabled [ 514.363595][T12916] tap4: tun_chr_ioctl cmd 2147767520 [ 514.428459][T12919] netlink: 'syz.3.2910': attribute type 5 has an invalid length. [ 514.462112][T12926] netlink: 'syz.4.2923': attribute type 21 has an invalid length. [ 514.485392][T12926] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2923'. [ 514.610568][T12926] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2923'. [ 514.873114][T12934] tap1: tun_chr_ioctl cmd 1074025675 [ 514.914321][T12934] tap1: persist enabled [ 514.943304][T12934] tap1: tun_chr_ioctl cmd 2147767520 [ 515.096526][T12947] device wlan0 entered promiscuous mode [ 515.210532][T12949] device wlan0 entered promiscuous mode [ 516.923917][T12976] validate_nla: 2 callbacks suppressed [ 516.924419][T12976] netlink: 'syz.1.2934': attribute type 5 has an invalid length. [ 517.044185][T12987] netlink: 'syz.1.2934': attribute type 10 has an invalid length. [ 517.098008][T12993] tap2: tun_chr_ioctl cmd 1074025675 [ 517.103389][T12993] tap2: persist enabled [ 517.433502][T13004] netlink: 'syz.3.2947': attribute type 5 has an invalid length. [ 517.488642][T12990] chnl_net:caif_netlink_parms(): no params data found [ 517.593799][T13004] netlink: 'syz.3.2947': attribute type 10 has an invalid length. [ 517.774713][T12990] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.865109][T12990] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.900879][T12990] device bridge_slave_0 entered promiscuous mode [ 517.942621][T13015] tap3: tun_chr_ioctl cmd 1074025675 [ 517.981952][T13015] tap3: persist enabled [ 518.002993][T13014] tap3: tun_chr_ioctl cmd 2147767520 [ 518.013301][T12990] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.051153][T12990] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.095805][T12990] device bridge_slave_1 entered promiscuous mode [ 518.103840][T13019] device wlan0 entered promiscuous mode [ 518.272193][T12990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 518.313834][T12990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 518.415207][T12990] team0: Port device team_slave_0 added [ 518.456062][T12990] team0: Port device team_slave_1 added [ 518.542212][T12990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 518.634972][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 518.877574][T12990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 518.944904][ T4227] Bluetooth: hci2: command 0x0409 tx timeout [ 518.965503][T12990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 518.976525][T12990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 519.003751][T12990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 519.242382][T12990] device hsr_slave_0 entered promiscuous mode [ 519.293179][T12990] device hsr_slave_1 entered promiscuous mode [ 519.308596][T12990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 519.317836][T12990] Cannot create hsr debugfs directory [ 519.363582][T13041] netlink: 'syz.0.2950': attribute type 5 has an invalid length. [ 519.416383][T13044] netlink: 'syz.0.2950': attribute type 10 has an invalid length. [ 519.789982][T13054] device veth0_vlan left promiscuous mode [ 519.833182][T13054] device veth0_vlan entered promiscuous mode [ 519.940965][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 519.966008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 519.997458][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 520.249948][T12990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.343450][T13061] device macsec0 entered promiscuous mode [ 520.423193][T13064] tap1: tun_chr_ioctl cmd 1074025675 [ 520.525720][T13064] tap1: persist enabled [ 520.604428][T12990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.642211][T13067] tap1: tun_chr_ioctl cmd 2147767520 [ 520.794082][T12990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.920335][T12990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.973469][T13078] netlink: 'syz.1.2967': attribute type 5 has an invalid length. [ 521.025423][ T4228] Bluetooth: hci2: command 0x041b tx timeout [ 521.071354][T13080] netlink: 'syz.1.2967': attribute type 10 has an invalid length. [ 521.377528][T13090] netlink: 'syz.4.2972': attribute type 5 has an invalid length. [ 521.470137][T12990] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 521.724539][T12990] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 521.759648][T13094] netlink: 'syz.4.2972': attribute type 10 has an invalid length. [ 521.785399][T12990] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 521.807217][T12990] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 522.036448][T13097] netlink: 'syz.3.2974': attribute type 21 has an invalid length. [ 522.125337][T13097] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2974'. [ 522.294640][T13099] netlink: 'syz.3.2974': attribute type 1 has an invalid length. [ 522.309822][T13099] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2974'. [ 522.531647][T13105] tap4: tun_chr_ioctl cmd 1074025675 [ 522.550195][T13105] tap4: persist enabled [ 522.629482][T12990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 522.768260][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 522.802677][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 522.910226][T12990] 8021q: adding VLAN 0 to HW filter on device team0 [ 522.956375][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 522.976383][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 523.002052][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 523.009308][T11534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 523.075606][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 523.105068][T12639] Bluetooth: hci2: command 0x040f tx timeout [ 523.153574][T13118] netlink: 'syz.3.2982': attribute type 39 has an invalid length. [ 523.792472][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 523.802280][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 523.811566][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 523.818709][T11534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 523.828999][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 523.841133][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 523.851699][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 523.862379][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 523.897006][T12990] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 523.908631][T12990] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 523.925853][T13127] netlink: 'syz.0.2986': attribute type 5 has an invalid length. [ 523.951756][T13130] netlink: 'syz.0.2986': attribute type 10 has an invalid length. [ 523.964738][T13132] netlink: 'syz.4.2987': attribute type 21 has an invalid length. [ 523.982334][T13132] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2987'. [ 523.994168][T13133] netlink: 'syz.4.2987': attribute type 1 has an invalid length. [ 524.033437][T13133] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.2987'. [ 524.052477][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 524.084428][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 524.103794][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 524.139254][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 524.194372][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 524.213608][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 524.234559][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 524.270991][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 524.286906][T13139] netlink: 'syz.1.2988': attribute type 21 has an invalid length. [ 524.309918][T13139] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2988'. [ 524.346810][T13142] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 524.355459][T13142] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.2988'. [ 524.373097][T13140] netlink: 'syz.0.2989': attribute type 5 has an invalid length. [ 524.402403][T13143] device wlan0 left promiscuous mode [ 524.670639][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 524.700500][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 524.755581][T12990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 524.958242][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 525.032206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 525.111940][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 525.133244][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 525.185654][ T1111] Bluetooth: hci2: command 0x0419 tx timeout [ 525.254739][T12990] device veth0_vlan entered promiscuous mode [ 525.275263][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 525.338391][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 525.392802][T12990] device veth1_vlan entered promiscuous mode [ 525.434579][T13174] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3000'. [ 525.487601][T13174] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3000'. [ 525.571154][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 525.590634][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 525.614564][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 525.655520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 525.673239][T13179] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3002'. [ 525.724382][T13182] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3002'. [ 525.787383][T12990] device veth0_macvtap entered promiscuous mode [ 525.846540][T12990] device veth1_macvtap entered promiscuous mode [ 525.980769][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 526.022677][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 526.102197][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.140838][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.210978][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.234906][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.265402][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.276450][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.286732][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.299611][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.313627][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 526.327477][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.386838][T12990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.459174][T13192] device wlan0 left promiscuous mode [ 526.534316][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 526.573627][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 526.662662][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.720880][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.764410][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.794651][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.856740][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.880872][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.898537][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 526.922055][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 526.968996][T12990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 527.029306][T12990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 527.057284][T12990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 527.089709][T13202] validate_nla: 7 callbacks suppressed [ 527.089752][T13202] netlink: 'syz.1.3010': attribute type 5 has an invalid length. [ 527.118237][T13207] netlink: 'syz.1.3010': attribute type 10 has an invalid length. [ 527.143680][T13208] device wlan0 entered promiscuous mode [ 527.169683][T13213] netlink: 'syz.4.3013': attribute type 21 has an invalid length. [ 527.220098][T13213] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3013'. [ 527.232732][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 527.243560][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 527.265757][T12990] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.274985][T12990] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.284618][T12990] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.325136][T12990] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.343826][T13215] netlink: 'syz.4.3013': attribute type 1 has an invalid length. [ 527.370622][T13215] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3013'. [ 527.392224][T13218] netlink: 'syz.3.3015': attribute type 21 has an invalid length. [ 527.455334][T13218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3015'. [ 527.499709][T13219] netlink: 'syz.3.3015': attribute type 1 has an invalid length. [ 527.522511][T13219] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3015'. [ 527.743873][T13231] device macsec0 left promiscuous mode [ 527.832706][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 527.868591][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 527.939697][T13234] device macsec0 entered promiscuous mode [ 527.959663][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 528.025649][T11534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.033640][T11534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 528.102895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 528.314423][T13240] netlink: 'syz.3.3023': attribute type 5 has an invalid length. [ 529.062409][T13258] netlink: 'syz.3.3030': attribute type 21 has an invalid length. [ 529.107867][T13258] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3030'. [ 529.119435][T13263] netlink: 'syz.3.3030': attribute type 1 has an invalid length. [ 529.136219][T13263] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3030'. [ 529.640326][T13285] netlink: 'syz.3.3040': attribute type 5 has an invalid length. [ 529.758987][T13269] chnl_net:caif_netlink_parms(): no params data found [ 530.009737][T13269] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.042080][T13269] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.058456][T13269] device bridge_slave_0 entered promiscuous mode [ 530.076546][T13269] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.115003][T13269] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.206774][T13269] device bridge_slave_1 entered promiscuous mode [ 530.472726][T13269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.548312][T13307] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3046'. [ 530.578321][T13309] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3046'. [ 530.623551][T13311] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3047'. [ 530.643685][T13269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.689411][T13311] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3047'. [ 530.821402][T13269] team0: Port device team_slave_0 added [ 530.943295][T13318] device wlan0 left promiscuous mode [ 530.999412][T13269] team0: Port device team_slave_1 added [ 531.106063][ T4225] Bluetooth: hci4: command 0x0409 tx timeout [ 531.152389][T13269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 531.174529][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.221074][T13269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.243644][T13269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.251642][T13269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 531.279434][T13269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.413547][T13329] device wlan0 entered promiscuous mode [ 531.628565][T13269] device hsr_slave_0 entered promiscuous mode [ 531.676397][T13269] device hsr_slave_1 entered promiscuous mode [ 531.683411][T13269] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 531.694941][T13269] Cannot create hsr debugfs directory [ 532.055227][T13269] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.126175][T13343] validate_nla: 12 callbacks suppressed [ 532.126535][T13343] netlink: 'syz.2.3060': attribute type 5 has an invalid length. [ 532.158804][T13353] netlink: 'syz.2.3060': attribute type 10 has an invalid length. [ 532.169899][T13353] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.177564][T13353] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.204576][T13353] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.211869][T13353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.219420][T13353] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.226769][T13353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.253670][T13353] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 532.296602][T13269] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.352558][T13356] netlink: 'syz.3.3065': attribute type 5 has an invalid length. [ 532.407710][T13359] netlink: 'syz.3.3065': attribute type 10 has an invalid length. [ 532.459000][T13269] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.688151][T13269] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.743143][T13364] tap0: tun_chr_ioctl cmd 1074025675 [ 532.759216][T13364] tap0: persist enabled [ 532.768998][T13369] tap0: tun_chr_ioctl cmd 2147767520 [ 532.825812][T13374] netlink: 'syz.0.3070': attribute type 21 has an invalid length. [ 532.847691][T13374] __nla_validate_parse: 4 callbacks suppressed [ 532.847728][T13374] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3070'. [ 532.877208][T13374] netlink: 'syz.0.3070': attribute type 1 has an invalid length. [ 532.890495][T13374] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3070'. [ 532.901708][T13376] device veth1_macvtap entered promiscuous mode [ 532.930427][T13376] device macsec0 entered promiscuous mode [ 532.948170][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 533.033718][T13269] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.071803][T13269] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.140005][T13384] netlink: 'syz.0.3074': attribute type 21 has an invalid length. [ 533.162213][T13384] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3074'. [ 533.178126][T13386] device wlan0 entered promiscuous mode [ 533.184930][T12639] Bluetooth: hci4: command 0x041b tx timeout [ 533.210744][T13269] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.562236][T13389] netlink: 'syz.0.3074': attribute type 1 has an invalid length. [ 533.572735][T13389] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3074'. [ 533.583976][T13269] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 533.602634][T13394] tap3: tun_chr_ioctl cmd 1074025675 [ 533.608155][T13394] tap3: persist enabled [ 533.621040][T13393] netlink: 'syz.1.3078': attribute type 5 has an invalid length. [ 533.651801][T13395] netlink: 'syz.1.3078': attribute type 10 has an invalid length. [ 533.738129][T13404] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3090'. [ 533.832906][T13404] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.3090'. [ 533.844766][T13410] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3083'. [ 533.902384][T13410] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3083'. [ 533.932183][T13269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.960921][T13414] device veth1_macvtap left promiscuous mode [ 534.008059][T13414] device veth1_macvtap entered promiscuous mode [ 534.014494][T13414] device macsec0 entered promiscuous mode [ 534.039186][T13409] tap4: tun_chr_ioctl cmd 1074025675 [ 534.072690][T13409] tap4: persist enabled [ 534.095354][T13411] tap4: tun_chr_ioctl cmd 2147767520 [ 534.103684][T13269] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.143433][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 534.155679][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 534.211602][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 534.248886][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 534.278663][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.285831][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.303966][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 534.312917][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 534.323180][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 534.333121][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.340246][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 534.376745][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 534.402387][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 534.435284][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 534.516223][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 534.578119][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 534.591972][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 534.630761][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 534.640148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 534.649051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 534.658032][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 534.667394][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 534.685701][T13438] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3095'. [ 534.700830][T13433] tap1: tun_chr_ioctl cmd 1074025675 [ 534.724725][T13433] tap1: persist enabled [ 534.734085][T13434] tap1: tun_chr_ioctl cmd 2147767520 [ 534.769206][T13269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 534.782889][T13442] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3095'. [ 534.904343][T13447] device syzkaller0 entered promiscuous mode [ 534.922490][T13453] device macsec0 entered promiscuous mode [ 535.265779][ T4225] Bluetooth: hci4: command 0x040f tx timeout [ 535.348661][T13269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.362563][T13467] tap6: tun_chr_ioctl cmd 1074025675 [ 535.380079][T13467] tap6: persist enabled [ 535.404413][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 535.421210][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 535.562505][T13476] device syzkaller0 entered promiscuous mode [ 536.158545][T13499] device wlan0 entered promiscuous mode [ 536.326179][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 536.353232][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 536.371466][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 536.384707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 536.402029][T13269] device veth0_vlan entered promiscuous mode [ 536.423149][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 536.449822][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 536.480935][T13269] device veth1_vlan entered promiscuous mode [ 536.611424][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 536.642550][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 536.724595][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 536.761827][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 536.777167][T13269] device veth0_macvtap entered promiscuous mode [ 536.825951][T13269] device veth1_macvtap entered promiscuous mode [ 536.924654][T13508] device syzkaller0 entered promiscuous mode [ 536.981869][T13514] device wlan0 left promiscuous mode [ 537.039085][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.053614][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.064323][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.075488][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.085709][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.096450][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.107577][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.118812][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.129046][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.144421][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.162263][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.173154][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.194641][T13269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.234194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 537.254461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 537.282490][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.303248][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.313639][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.325068][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.336530][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.345467][ T1111] Bluetooth: hci4: command 0x0419 tx timeout [ 537.350733][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.363255][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.374272][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.384516][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.395758][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.405887][T13269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.416728][T13269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.429088][T13269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.491683][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 537.502461][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 537.518976][T13269] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.548291][T13269] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.560289][T13526] validate_nla: 16 callbacks suppressed [ 537.560370][T13526] netlink: 'syz.2.3121': attribute type 25 has an invalid length. [ 537.586079][T13269] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.622751][T13269] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.783843][T13530] device wlan0 entered promiscuous mode [ 537.846377][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.926300][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.963219][T13532] netlink: 'syz.1.3125': attribute type 25 has an invalid length. [ 537.980118][T13532] __nla_validate_parse: 6 callbacks suppressed [ 537.980157][T13532] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3125'. [ 538.005561][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.060132][T13534] netlink: 'syz.3.3127': attribute type 5 has an invalid length. [ 538.060727][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.060749][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.130501][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 538.163781][T13538] netlink: 'syz.3.3127': attribute type 10 has an invalid length. [ 538.500273][T13543] netlink: 'syz.1.3128': attribute type 25 has an invalid length. [ 538.545755][T13543] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3128'. [ 538.558806][T13541] tap0: tun_chr_ioctl cmd 1074025675 [ 538.564623][T13541] tap0: persist enabled [ 538.589471][T13547] netlink: 'syz.3.3129': attribute type 21 has an invalid length. [ 538.633555][T13547] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3129'. [ 538.674953][T13550] netlink: 'syz.3.3129': attribute type 1 has an invalid length. [ 538.682761][T13550] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3129'. [ 539.065661][T13564] netlink: 'syz.2.3134': attribute type 25 has an invalid length. [ 539.073862][T13564] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3134'. [ 539.136813][T13565] netlink: 'syz.1.3135': attribute type 25 has an invalid length. [ 539.151096][T13567] netlink: 'syz.3.3138': attribute type 25 has an invalid length. [ 539.160586][T13567] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3138'. [ 539.177407][T13565] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3135'. [ 539.272751][T13570] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3140'. [ 539.477857][T13578] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3143'. [ 539.610764][T13576] tap7: tun_chr_ioctl cmd 1074025675 [ 539.648838][T13576] tap7: persist enabled [ 539.733657][T13579] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.741438][T13579] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.795946][T13579] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.803108][T13579] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.810675][T13579] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.817873][T13579] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.860014][T13579] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 539.882883][T13587] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3144'. [ 540.126761][T13556] chnl_net:caif_netlink_parms(): no params data found [ 540.374465][T13600] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.382276][T13600] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.639941][T13556] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.685151][T13556] bridge0: port 1(bridge_slave_0) entered disabled state [ 540.727054][T13556] device bridge_slave_0 entered promiscuous mode [ 540.736095][T13556] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.743366][T13556] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.751801][T13556] device bridge_slave_1 entered promiscuous mode [ 540.780092][T13556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.792643][T13556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.823899][T13556] team0: Port device team_slave_0 added [ 540.833913][T13556] team0: Port device team_slave_1 added [ 540.864094][T13556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 540.886831][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 540.919561][T13556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 540.970470][T13556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 540.990568][T13556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.024946][ T4226] Bluetooth: hci1: command 0x0409 tx timeout [ 541.034494][T13556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.087574][T13613] device veth1_macvtap left promiscuous mode [ 541.245554][T13619] device wlan0 entered promiscuous mode [ 541.270892][T13556] device hsr_slave_0 entered promiscuous mode [ 541.282769][T13556] device hsr_slave_1 entered promiscuous mode [ 541.300875][T13556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 541.350686][T13556] Cannot create hsr debugfs directory [ 541.377704][T13618] device wlan0 left promiscuous mode [ 541.575984][T13623] tap8: tun_chr_ioctl cmd 1074025675 [ 541.595438][T13623] tap8: persist enabled [ 541.996444][T13556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.351385][T13556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.461935][T13641] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.469299][T13641] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.576675][T13644] validate_nla: 18 callbacks suppressed [ 542.576695][T13644] netlink: 'syz.2.3159': attribute type 10 has an invalid length. [ 542.727593][T13643] device veth1_macvtap left promiscuous mode [ 543.159926][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 543.186171][T13556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.387553][T13652] netlink: 'syz.3.3165': attribute type 25 has an invalid length. [ 543.440070][T13652] __nla_validate_parse: 8 callbacks suppressed [ 543.440111][T13652] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.3165'. [ 543.517068][T13556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.785984][T13661] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.3168'. [ 543.801551][T13664] netlink: 'syz.4.3171': attribute type 21 has an invalid length. [ 543.810472][T13664] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3171'. [ 543.823626][T13556] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 543.954500][T13556] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.003282][T13664] netlink: 'syz.4.3171': attribute type 1 has an invalid length. [ 544.016969][T13664] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3171'. [ 544.030090][T13556] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.061060][T13556] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.082622][T13665] tap5: tun_chr_ioctl cmd 1074025675 [ 544.098974][T13665] tap5: persist enabled [ 544.137048][T13676] netlink: 'syz.2.3173': attribute type 21 has an invalid length. [ 544.193487][T13676] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3173'. [ 544.219287][T13679] netlink: 'syz.2.3173': attribute type 1 has an invalid length. [ 544.278228][T13681] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.3176'. [ 544.291121][T13679] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3173'. [ 544.363829][T13683] device wlan0 left promiscuous mode [ 544.509568][T13687] netlink: 'syz.4.3177': attribute type 5 has an invalid length. [ 544.656363][T13556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 544.725033][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 544.747036][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 544.789991][T13556] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.818412][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 544.836394][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 544.887118][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.894245][T11534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 544.902540][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 544.916921][T13695] netlink: 'syz.4.3177': attribute type 10 has an invalid length. [ 544.974367][T13693] netlink: 'syz.1.3179': attribute type 25 has an invalid length. [ 544.994298][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 545.023525][T11534] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 545.038883][T13693] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3179'. [ 545.140288][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.147500][T11534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.266467][ T4228] Bluetooth: hci1: command 0x040f tx timeout [ 545.309040][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 545.346074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 545.407055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 545.455321][T13705] netlink: 16410 bytes leftover after parsing attributes in process `syz.1.3183'. [ 545.482756][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 545.497915][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 545.672441][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 545.755165][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 545.783735][T13708] device macsec0 left promiscuous mode [ 545.797846][T13709] netlink: 'syz.3.3184': attribute type 21 has an invalid length. [ 545.815229][T13709] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3184'. [ 545.857291][T13703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 545.875862][T13703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 545.942247][T13556] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.992950][T13556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 546.002882][T13703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 546.013015][T13703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 546.522645][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.540167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.576009][T13556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 547.132536][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 547.155815][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 547.274436][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 547.286843][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 547.306669][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 547.344956][ T4228] Bluetooth: hci1: command 0x0419 tx timeout [ 547.353728][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 547.380282][T13556] device veth0_vlan entered promiscuous mode [ 547.415390][T13556] device veth1_vlan entered promiscuous mode [ 547.592031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 547.653655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 547.713899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 547.764529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 547.823059][T13556] device veth0_macvtap entered promiscuous mode [ 547.868856][T13556] device veth1_macvtap entered promiscuous mode [ 547.957580][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.993377][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.129399][T13774] validate_nla: 9 callbacks suppressed [ 548.129443][T13774] netlink: 'syz.4.3205': attribute type 25 has an invalid length. [ 548.190269][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.256568][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.290280][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.321426][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.496773][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.529439][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.540239][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.551825][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.562170][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.573156][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.583768][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 548.596217][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.611233][T13556] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.623362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 548.633255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 548.642444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 548.673731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 548.692902][T13780] netlink: 'syz.2.3206': attribute type 39 has an invalid length. [ 548.729885][T13784] device wlan0 entered promiscuous mode [ 548.751267][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.784302][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.806977][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.850729][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.882093][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.893134][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.903222][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.913837][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.925443][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.940851][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.953576][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 548.965761][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 548.991178][T13556] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 549.005928][T13556] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 549.029027][T13556] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 549.048784][T13793] netlink: 'syz.3.3209': attribute type 39 has an invalid length. [ 549.075745][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 549.100475][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 549.124330][T13556] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.172253][T13556] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.201509][T13556] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.222304][T13556] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 549.403792][T13806] device veth1_macvtap left promiscuous mode [ 549.466136][T13809] netlink: 'syz.1.3218': attribute type 25 has an invalid length. [ 549.475335][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.475364][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.476472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 549.501350][T13809] __nla_validate_parse: 10 callbacks suppressed [ 549.501382][T13809] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3218'. [ 549.523647][T13807] netlink: 'syz.3.3216': attribute type 21 has an invalid length. [ 549.545137][T13807] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3216'. [ 549.568415][T13810] netlink: 'syz.3.3216': attribute type 1 has an invalid length. [ 549.583701][T13810] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.3216'. [ 549.691741][T13817] netlink: 'syz.3.3219': attribute type 3 has an invalid length. [ 549.700255][T13817] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.3219'. [ 549.713793][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 549.746804][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.811693][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 549.942791][T13823] netlink: 'syz.2.3221': attribute type 25 has an invalid length. [ 549.965507][T13822] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3220'. [ 549.977288][T13823] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3221'. [ 550.107272][T13820] netlink: 'syz.4.3222': attribute type 10 has an invalid length. [ 550.128765][T13820] device hsr0 entered promiscuous mode [ 550.141461][T13829] netlink: 'syz.1.3223': attribute type 25 has an invalid length. [ 550.153657][T13829] netlink: 2418 bytes leftover after parsing attributes in process `syz.1.3223'. [ 550.256508][T13820] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 550.289934][T13820] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 550.366765][T13820] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 550.431858][T13820] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.552094][T13834] device wlan0 left promiscuous mode [ 550.801349][T13840] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3227'. [ 550.830493][T13842] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3228'. [ 550.848195][T13846] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3227'. [ 550.915893][T13854] device veth1_macvtap left promiscuous mode [ 551.384188][T13844] chnl_net:caif_netlink_parms(): no params data found [ 551.726143][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.769584][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.799855][T13844] device bridge_slave_0 entered promiscuous mode [ 551.853759][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.876478][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.885672][T13844] device bridge_slave_1 entered promiscuous mode [ 551.913361][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.925796][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 551.956333][T13844] team0: Port device team_slave_0 added [ 552.026287][T13844] team0: Port device team_slave_1 added [ 552.079791][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.096558][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.133999][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.176706][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.183690][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 552.296515][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.399368][T13844] device hsr_slave_0 entered promiscuous mode [ 552.506153][T13844] device hsr_slave_1 entered promiscuous mode [ 552.524653][T13844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 552.567278][T13844] Cannot create hsr debugfs directory [ 552.680101][T13908] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 552.722499][T13908] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 552.750016][T13908] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 552.765187][T13908] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 552.786698][ T4229] Bluetooth: hci3: command 0x0409 tx timeout [ 553.089175][T13927] device syzkaller0 entered promiscuous mode [ 553.408800][T13932] validate_nla: 19 callbacks suppressed [ 553.408818][T13932] netlink: 'syz.2.3254': attribute type 10 has an invalid length. [ 553.689306][T13939] netlink: 'syz.4.3263': attribute type 3 has an invalid length. [ 553.836383][T13844] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.063248][T13844] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.307052][T13844] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.341504][T13952] netlink: 'syz.1.3268': attribute type 21 has an invalid length. [ 554.374639][T13954] netlink: 'syz.2.3269': attribute type 21 has an invalid length. [ 554.390382][T13957] netlink: 'syz.1.3268': attribute type 1 has an invalid length. [ 554.409454][T13958] netlink: 'syz.2.3269': attribute type 1 has an invalid length. [ 554.502525][T13844] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.587845][T13968] netlink: 'syz.1.3280': attribute type 21 has an invalid length. [ 554.609585][T13968] __nla_validate_parse: 16 callbacks suppressed [ 554.609626][T13968] netlink: 156 bytes leftover after parsing attributes in process `syz.1.3280'. [ 554.656160][T13966] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3271'. [ 554.721043][T13959] device syzkaller0 entered promiscuous mode [ 554.772322][T13968] netlink: 'syz.1.3280': attribute type 1 has an invalid length. [ 554.815727][T13968] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.3280'. [ 554.865500][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 555.038807][T13844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 555.075997][T13844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 555.192645][T13984] netlink: 'syz.1.3279': attribute type 3 has an invalid length. [ 555.216443][T13984] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.3279'. [ 555.369820][T13844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 555.406066][T13985] netlink: 'syz.0.3278': attribute type 5 has an invalid length. [ 555.467750][T13989] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.475260][T13989] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.525673][T13989] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.532841][T13989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.540359][T13989] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.547526][T13989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.592828][T13989] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 555.626142][T13844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 555.649690][T13991] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3281'. [ 555.705005][T13996] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.3281'. [ 555.763448][T14001] netlink: 2418 bytes leftover after parsing attributes in process `syz.2.3284'. [ 556.019968][T13844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.035392][T14009] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3288'. [ 556.068893][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 556.105903][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 556.116990][T13844] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.157364][T14009] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.3288'. [ 556.233264][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 556.253866][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 556.312536][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.319788][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.536791][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 556.575754][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 556.584692][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 556.602629][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.609813][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.618976][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 556.638968][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 556.678849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 556.710656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 556.728060][T14005] syz.4.3286 (14005) used greatest stack depth: 18512 bytes left [ 556.834943][T14025] device syzkaller0 entered promiscuous mode [ 556.867002][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 556.878129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 556.906717][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 556.945468][T12639] Bluetooth: hci3: command 0x040f tx timeout [ 556.972740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 557.006518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 557.033025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 557.053222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 557.082557][T13844] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 557.183996][T14045] device syzkaller0 entered promiscuous mode [ 557.295006][T14047] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3303'. [ 557.555523][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 557.563558][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 557.610627][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.715677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 557.735311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 557.978644][T14066] team0: Device veth1_macvtap failed to register rx_handler [ 558.149366][T13844] device veth0_vlan entered promiscuous mode [ 558.230534][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 558.259666][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 558.304573][T14074] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.312423][T14074] IPv6: NLM_F_CREATE should be set when creating new route [ 558.319983][T14074] IPv6: NLM_F_CREATE should be set when creating new route [ 558.327453][T14074] IPv6: NLM_F_CREATE should be set when creating new route [ 558.389198][T14076] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.431410][T14076] bond0: (slave team0): Enslaving as an active interface with an up link [ 558.459101][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 558.495849][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 558.561191][T13844] device veth1_vlan entered promiscuous mode [ 558.727306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 558.741561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 558.777950][T13844] device veth0_macvtap entered promiscuous mode [ 558.844105][T13844] device veth1_macvtap entered promiscuous mode [ 558.883756][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.913473][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.933990][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 558.957749][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.981172][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.002503][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.026550][T12639] Bluetooth: hci3: command 0x0419 tx timeout [ 559.026571][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.046320][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.056514][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.069685][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.080847][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.094696][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.104764][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.115587][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.115630][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 559.115649][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.117508][T13844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.144921][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 559.145826][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 559.146534][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 559.147150][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 559.156531][T14107] nr0: port 1(hsr0) entered blocking state [ 559.156676][T14107] nr0: port 1(hsr0) entered disabled state [ 559.180747][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180771][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180785][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180801][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180815][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180830][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180843][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180858][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180872][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180887][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180904][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180919][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180933][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180948][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.180962][T13844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 559.180978][T13844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 559.182367][T13844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.197314][T13844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.197400][T13844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.197432][T13844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.197464][T13844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 559.211628][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 559.212377][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 559.539450][T14113] syz.4.3326 (14113) used obsolete PPPIOCDETACH ioctl [ 559.682123][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.754935][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.794137][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 559.849234][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 559.867054][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.887993][ T1276] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 560.242912][T14142] __nla_validate_parse: 5 callbacks suppressed [ 560.242931][T14142] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.3338'. [ 560.281409][T14142] netlink: 21648 bytes leftover after parsing attributes in process `syz.0.3338'. [ 560.307862][T14142] tipc: Started in network mode [ 560.333596][T14142] tipc: Node identity e, cluster identity 4711 [ 560.359343][T14142] tipc: Node number set to 14 [ 560.520694][T14140] device bridge_slave_0 left promiscuous mode [ 560.536442][T14140] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.762786][T14151] tap0: tun_chr_ioctl cmd 1074025698 [ 561.027138][T14164] validate_nla: 10 callbacks suppressed [ 561.027160][T14164] netlink: 'syz.0.3344': attribute type 10 has an invalid length. [ 561.054368][T14165] netlink: 'syz.4.3345': attribute type 1 has an invalid length. [ 561.070070][T14165] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.3345'. [ 561.106810][T14164] team0: Device veth1_macvtap failed to register rx_handler [ 561.211308][T14152] chnl_net:caif_netlink_parms(): no params data found [ 561.319451][T14175] sock: sock_set_timeout: `syz.0.3348' (pid 14175) tries to set negative timeout [ 561.471555][T14175] netlink: 'syz.0.3348': attribute type 1 has an invalid length. [ 561.535808][T14175] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.3348'. [ 561.591634][T14152] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.629745][T14152] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.670805][T14152] device bridge_slave_0 entered promiscuous mode [ 561.706456][T14152] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.742948][T14152] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.798705][T14152] device bridge_slave_1 entered promiscuous mode [ 561.995837][T14152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.035998][T14152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.108408][T14186] device syzkaller0 entered promiscuous mode [ 562.177673][T14188] device syzkaller0 entered promiscuous mode [ 562.411977][T14202] netlink: 'syz.2.3356': attribute type 1 has an invalid length. [ 562.431240][T14202] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.3356'. [ 562.446063][T14152] team0: Port device team_slave_0 added [ 562.476610][T14152] team0: Port device team_slave_1 added [ 562.581423][T14152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.624915][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.699388][T14152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.705434][ T13] Bluetooth: hci0: command 0x0409 tx timeout [ 562.722858][T14207] netlink: 'syz.0.3359': attribute type 10 has an invalid length. [ 562.737037][T14213] netlink: 16410 bytes leftover after parsing attributes in process `syz.0.3359'. [ 562.804677][T14152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.819968][T14152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.877619][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.884050][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.937674][T14152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.045914][T14224] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.3366'. [ 563.071631][T14152] device hsr_slave_0 entered promiscuous mode [ 563.085876][T14152] device hsr_slave_1 entered promiscuous mode [ 563.101281][T14152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 563.109581][T14152] Cannot create hsr debugfs directory [ 563.126291][T14224] netlink: 'syz.0.3366': attribute type 10 has an invalid length. [ 563.165442][T14224] netlink: 55 bytes leftover after parsing attributes in process `syz.0.3366'. [ 563.409626][T14230] syz.2.3369 uses obsolete (PF_INET,SOCK_PACKET) [ 563.603952][T14152] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.727426][T14152] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.836723][T14239] device syzkaller0 entered promiscuous mode [ 563.955452][T14152] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.124177][T14255] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3379'. [ 564.153653][T14255] netlink: 21648 bytes leftover after parsing attributes in process `syz.2.3379'. [ 564.171887][T14255] tipc: Started in network mode [ 564.182017][T14255] tipc: Node identity e, cluster identity 4711 [ 564.197510][T14255] tipc: Node number set to 14 [ 564.213261][T14257] device bridge_slave_1 left promiscuous mode [ 564.233490][T14257] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.372177][T14257] bond0: (slave bridge0): Releasing backup interface [ 564.636308][T14152] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 564.803215][T12639] Bluetooth: hci0: command 0x041b tx timeout [ 565.352586][T14283] netlink: 'syz.3.3387': attribute type 10 has an invalid length. [ 565.362580][T14283] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.370066][T14283] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.393981][T14283] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.401113][T14283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.408571][T14283] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.415745][T14283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.446552][T14283] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 565.467243][T14152] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 565.484955][T14152] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 565.499899][T14152] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 565.531860][T14152] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 565.572887][T14285] netlink: 'syz.4.3391': attribute type 10 has an invalid length. [ 565.623864][T14290] __nla_validate_parse: 1 callbacks suppressed [ 565.623881][T14290] netlink: 16410 bytes leftover after parsing attributes in process `syz.4.3391'. [ 565.802495][T14295] device syzkaller0 entered promiscuous mode [ 565.985630][T12639] Bluetooth: hci2: command 0x0406 tx timeout [ 566.118966][T14152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.271072][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 566.306148][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 566.374863][T14152] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.412480][T14313] netlink: 65055 bytes leftover after parsing attributes in process `syz.4.3399'. [ 566.427922][T14313] netlink: 'syz.4.3399': attribute type 10 has an invalid length. [ 566.452145][T14313] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3399'. [ 566.563111][T14316] netlink: 'syz.2.3400': attribute type 10 has an invalid length. [ 566.803440][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 566.814326][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 566.824216][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.831397][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.853402][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 566.865021][ T1111] Bluetooth: hci0: command 0x040f tx timeout [ 566.878454][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 566.897870][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.905039][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.927465][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 566.937438][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 566.947385][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 566.958478][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 566.968044][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 566.976547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 567.032299][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 567.051923][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 567.072171][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 567.087346][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 567.113371][T14152] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.184722][T14152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 567.206093][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 567.230693][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 567.441127][T14343] bond0: (slave bridge0): Error: Slave device does not support XDP [ 567.755987][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 567.773941][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 567.788435][T14357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3414'. [ 567.833493][T14152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.863997][T14357] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3414'. [ 568.222426][T14358] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3414'. [ 568.235583][T14361] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3414'. [ 568.313188][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 568.330977][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 568.384286][T14152] device veth0_vlan entered promiscuous mode [ 568.427632][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 568.446833][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 568.478930][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 568.497552][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 568.530277][T14152] device veth1_vlan entered promiscuous mode [ 568.624332][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 568.652898][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 568.665651][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 568.722813][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 568.760210][T14152] device veth0_macvtap entered promiscuous mode [ 568.799705][T14152] device veth1_macvtap entered promiscuous mode [ 568.816437][T14377] tap0: tun_chr_ioctl cmd 1074025675 [ 568.844060][T14377] tap0: persist enabled [ 568.864746][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.897503][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.910534][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.922166][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.933694][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.944467][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 568.946958][ T4226] Bluetooth: hci0: command 0x0419 tx timeout [ 568.968718][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 568.991938][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.009255][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.034441][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.056369][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.078946][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.097807][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.118027][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.136745][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.160057][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.181490][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.209834][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.259280][T14152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.296023][T14380] tap0: tun_chr_ioctl cmd 21731 [ 569.305567][T14377] tap0: tun_chr_ioctl cmd 1074025675 [ 569.315238][T14377] tap0: persist enabled [ 569.336840][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 569.350745][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 569.385978][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 569.430146][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 569.458238][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.495117][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.554859][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.585871][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.645094][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.685360][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.722762][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.752311][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.779406][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.803676][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.837155][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.861489][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.881324][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.899837][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.923067][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.940162][T14396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3428'. [ 569.944642][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.973973][T14152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.995678][T14152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.018361][T14152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 570.043440][T14396] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3428'. [ 570.076732][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 570.115233][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 570.148999][T14152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.185631][T14152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.199735][T14152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.249355][T14152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.300857][T14397] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3428'. [ 570.406613][T14406] netlink: 'syz.3.3432': attribute type 10 has an invalid length. [ 570.605327][T14412] netlink: 'syz.2.3433': attribute type 10 has an invalid length. [ 570.684051][T14412] batman_adv: batadv0: Adding interface: netdevsim0 [ 570.699426][T14414] can: request_module (can-proto-0) failed. [ 570.745986][T14412] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.844128][T14412] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 570.882950][T14423] __nla_validate_parse: 2 callbacks suppressed [ 570.882969][T14423] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3439'. [ 570.919634][ T1276] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.939334][ T1276] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.962692][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 571.076286][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 571.084552][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 571.123782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 571.256971][T14429] netlink: 'syz.4.3442': attribute type 10 has an invalid length. [ 571.360448][T14429] team0: Port device wlan1 added [ 571.592988][T14444] sctp: [Deprecated]: syz.4.3447 (pid 14444) Use of int in maxseg socket option. [ 571.592988][T14444] Use struct sctp_assoc_value instead [ 571.747306][T14451] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3452'. [ 572.155685][T14456] netlink: 'syz.1.3450': attribute type 10 has an invalid length. [ 572.228689][T14462] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.3454'. [ 575.283087][T14463] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 575.290496][T14463] IPv6: NLM_F_CREATE should be set when creating new route [ 575.297951][T14463] IPv6: NLM_F_CREATE should be set when creating new route [ 575.305219][T14463] IPv6: NLM_F_CREATE should be set when creating new route [ 575.374875][T14462] netlink: 21648 bytes leftover after parsing attributes in process `syz.2.3454'. [ 575.443963][T14470] netlink: 'syz.0.3456': attribute type 2 has an invalid length. [ 575.465631][T14470] netlink: 'syz.0.3456': attribute type 8 has an invalid length. [ 575.551471][T14470] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3456'. [ 575.596933][T14472] netlink: 'syz.0.3456': attribute type 2 has an invalid length. [ 575.611562][T14472] netlink: 'syz.0.3456': attribute type 8 has an invalid length. [ 575.666031][T14472] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3456'. [ 575.766271][T14473] tap1: tun_chr_ioctl cmd 1074025675 [ 575.771976][T14473] tap1: persist enabled [ 575.818770][T14490] netlink: 'syz.3.3461': attribute type 2 has an invalid length. [ 575.857183][T14490] netlink: 'syz.3.3461': attribute type 4 has an invalid length. [ 575.875836][T14490] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3461'. [ 575.945333][T14493] netlink: 'syz.3.3461': attribute type 6 has an invalid length. [ 576.147735][T14500] À: port 1(vlan0) entered blocking state [ 576.181236][T14500] À: port 1(vlan0) entered disabled state [ 576.194345][T14500] device vlan0 entered promiscuous mode [ 576.391392][T14505] netlink: 'syz.2.3469': attribute type 10 has an invalid length. [ 576.558006][T14505] team0: Port device wlan1 added [ 576.909633][T14519] device syzkaller0 entered promiscuous mode [ 577.065255][T14540] netlink: 'syz.4.3476': attribute type 10 has an invalid length. [ 577.162108][T14540] batman_adv: batadv0: Adding interface: netdevsim0 [ 577.181156][T14540] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.244248][T14540] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 577.276101][T14541] tap0: tun_chr_ioctl cmd 1074025675 [ 577.281554][T14541] tap0: persist enabled [ 577.296267][T14534] tap0: tun_chr_ioctl cmd 21731 [ 580.136128][T14539] tap0: tun_chr_ioctl cmd 1074025675 [ 580.141486][T14539] tap0: persist enabled [ 581.513762][T14587] device syzkaller0 entered promiscuous mode [ 581.619627][T14588] device syzkaller0 entered promiscuous mode [ 582.533301][T14631] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3511'. [ 582.773984][T14639] netlink: 'syz.3.3515': attribute type 29 has an invalid length. [ 582.830827][T14642] device syzkaller0 entered promiscuous mode [ 582.849373][T14639] netlink: 'syz.3.3515': attribute type 29 has an invalid length. [ 582.915771][T14648] netlink: 'syz.3.3515': attribute type 29 has an invalid length. [ 583.219703][T14663] netlink: 'syz.3.3525': attribute type 4 has an invalid length. [ 583.270666][T14663] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3525'. [ 583.340613][T14663] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 583.395213][T14666] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 583.402587][T14666] IPv6: NLM_F_CREATE should be set when creating new route [ 583.410335][T14666] IPv6: NLM_F_CREATE should be set when creating new route [ 583.417828][T14666] IPv6: NLM_F_CREATE should be set when creating new route [ 583.481435][T14666] netlink: 'syz.4.3526': attribute type 10 has an invalid length. [ 583.563109][T14682] netlink: 203516 bytes leftover after parsing attributes in process `syz.3.3531'. [ 583.635706][T14666] 8021q: adding VLAN 0 to HW filter on device team0 [ 583.663515][T14666] bond0: (slave team0): Enslaving as an active interface with an up link [ 583.675939][T14681] netlink: 'syz.0.3532': attribute type 25 has an invalid length. [ 583.684215][T14681] netlink: 'syz.0.3532': attribute type 28 has an invalid length. [ 583.709232][T14682] netlink: 5128 bytes leftover after parsing attributes in process `syz.3.3531'. [ 583.718570][T14682] netlink: 'syz.3.3531': attribute type 1 has an invalid length. [ 583.730233][T14685] pimreg: tun_chr_ioctl cmd 1074025677 [ 583.750524][T14685] pimreg: linktype set to 780 [ 583.832997][T14689] device syzkaller0 entered promiscuous mode [ 584.454026][T14708] netlink: 'syz.1.3542': attribute type 4 has an invalid length. [ 584.463146][T14708] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3542'. [ 584.491245][T14708] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 585.177127][T14728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 585.184669][T14728] IPv6: NLM_F_CREATE should be set when creating new route [ 585.383396][T14731] netlink: 'syz.3.3549': attribute type 10 has an invalid length. [ 585.864302][T14731] 8021q: adding VLAN 0 to HW filter on device team0 [ 585.877314][T14731] bond0: (slave team0): Enslaving as an active interface with an up link [ 586.039815][T14744] netlink: 55 bytes leftover after parsing attributes in process `syz.4.3559'. [ 586.250608][T14744] device vlan0 left promiscuous mode [ 586.256506][T14744] À: port 1(vlan0) entered disabled state [ 586.550652][T14759] team0: Port device geneve1 added [ 586.973750][T14781] netlink: 207508 bytes leftover after parsing attributes in process `syz.0.3570'. [ 587.435949][T14797] device syzkaller0 entered promiscuous mode [ 590.663713][T14837] validate_nla: 2 callbacks suppressed [ 590.663729][T14837] netlink: 'syz.3.3591': attribute type 7 has an invalid length. [ 591.158175][T14861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3602'. [ 591.210356][T14861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3602'. [ 591.246200][T14867] netlink: 'syz.1.3603': attribute type 21 has an invalid length. [ 591.282222][T14868] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3602'. [ 591.317166][T14861] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3602'. [ 591.871396][T14894] netlink: 181252 bytes leftover after parsing attributes in process `syz.2.3615'. [ 591.987319][T14903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3617'. [ 592.027563][T14903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3617'. [ 592.058566][T14906] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3617'. [ 592.116799][T14903] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3617'. [ 592.361160][T14919] device syzkaller0 entered promiscuous mode [ 592.398867][T14921] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3627'. [ 592.870439][T14940] netlink: 'syz.2.3632': attribute type 12 has an invalid length. [ 593.873313][T14982] netlink: 'syz.3.3648': attribute type 10 has an invalid length. [ 593.940130][T14982] device hsr0 entered promiscuous mode [ 593.983236][T14982] bridge0: port 3(hsr0) entered blocking state [ 594.015198][T14982] bridge0: port 3(hsr0) entered disabled state [ 594.085316][T14982] bridge0: port 3(hsr0) entered blocking state [ 594.091645][T14982] bridge0: port 3(hsr0) entered forwarding state [ 594.625186][ C1] ------------[ cut here ]------------ [ 594.631179][ C1] WARNING: CPU: 1 PID: 15002 at mm/maccess.c:226 copy_from_user_nofault+0x160/0x1c0 [ 594.640666][ C1] Modules linked in: [ 594.644602][ C1] CPU: 1 PID: 15002 Comm: syz.2.3654 Not tainted syzkaller #0 [ 594.652121][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 594.662219][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 594.668444][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 594.688235][ C1] RSP: 0018:ffffc90000dcfd28 EFLAGS: 00010246 [ 594.694431][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff888029b61dc0 [ 594.702533][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 594.710574][ C1] RBP: 0000000000000000 R08: ffffc90000dd0157 R09: ffffc90000dd0124 [ 594.718624][ C1] R10: dffffc0000000000 R11: fffff520001ba02b R12: ffff888029b63548 [ 594.726663][ C1] R13: ffffc9000147e030 R14: ffffc90000dcfd88 R15: 0000000000000000 [ 594.734677][ C1] FS: 00007f1c906176c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 594.743704][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 594.750364][ C1] CR2: 000000110c33a7e3 CR3: 000000002962d000 CR4: 00000000003506e0 [ 594.758426][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 594.766443][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000600 [ 594.774456][ C1] Call Trace: [ 594.777802][ C1] [ 594.780682][ C1] bpf_probe_read_user+0x26/0x70 [ 594.785713][ C1] bpf_prog_f2594087b0f175cc+0x32/0xe84 [ 594.791287][ C1] bpf_flow_dissect+0x12b/0x3f0 [ 594.796210][ C1] __skb_flow_dissect+0x792/0x60b0 [ 594.801362][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 594.806473][ C1] ? mark_lock+0x94/0x320 [ 594.810830][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 594.816042][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 594.821134][ C1] ? mark_lock+0x94/0x320 [ 594.825542][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 594.830633][ C1] ? mark_lock+0x94/0x320 [ 594.835034][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 594.840147][ C1] ? verify_lock_unused+0x140/0x140 [ 594.845428][ C1] ? look_up_lock_class+0x71/0x110 [ 594.850621][ C1] ? verify_lock_unused+0x140/0x140 [ 594.855909][ C1] ? register_lock_class+0xc0/0x890 [ 594.861150][ C1] ___skb_get_hash+0x55/0x680 [ 594.865908][ C1] __skb_get_hash+0xd2/0x270 [ 594.870629][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 594.876436][ C1] ? rcu_lock_release+0x9/0x20 [ 594.881272][ C1] netdev_pick_tx+0x335/0xad0 [ 594.886043][ C1] netdev_core_pick_tx+0x12e/0x2e0 [ 594.891225][ C1] __dev_queue_xmit+0x756/0x2f80 [ 594.896272][ C1] ? ndisc_send_skb+0xc2a/0x1500 [ 594.901249][ C1] ? dev_queue_xmit+0x20/0x20 [ 594.906011][ C1] ? mark_lock+0x94/0x320 [ 594.910425][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 594.916506][ C1] ? lock_chain_count+0x20/0x20 [ 594.921415][ C1] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 594.927310][ C1] ? ip6_finish_output2+0xcb6/0x1510 [ 594.932643][ C1] ? ip6_finish_output2+0xe80/0x1510 [ 594.938010][ C1] ip6_finish_output2+0x1051/0x1510 [ 594.943256][ C1] ? nf_hook+0x360/0x360 [ 594.947573][ C1] ndisc_send_skb+0xc2a/0x1500 [ 594.952392][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 594.957406][ C1] ? rcu_lock_release+0x20/0x20 [ 594.962318][ C1] ? ndisc_send_rs+0x544/0x730 [ 594.967193][ C1] addrconf_rs_timer+0x2d1/0x630 [ 594.972187][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 594.978322][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 594.984355][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 594.990496][ C1] call_timer_fn+0x17b/0x540 [ 594.995148][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 595.000821][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 595.006976][ C1] ? __run_timers+0x800/0x800 [ 595.011833][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 595.018017][ C1] __run_timers+0x53e/0x800 [ 595.022574][ C1] ? detach_timer+0x2b0/0x2b0 [ 595.027353][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 595.033380][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 595.038309][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 595.043643][ C1] run_timer_softirq+0x63/0xf0 [ 595.048505][ C1] handle_softirqs+0x339/0x830 [ 595.053316][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 595.058251][ C1] ? do_softirq+0x210/0x210 [ 595.062812][ C1] __irq_exit_rcu+0x13b/0x230 [ 595.067565][ C1] ? irq_exit_rcu+0x20/0x20 [ 595.072119][ C1] irq_exit_rcu+0x5/0x20 [ 595.076457][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 595.082134][ C1] [ 595.085119][ C1] [ 595.088080][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 595.094100][ C1] RIP: 0010:lock_acquire+0x208/0x400 [ 595.099445][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f1 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 595.119107][ C1] RSP: 0018:ffffc900032df660 EFLAGS: 00000206 [ 595.125263][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 277e348f2e86bd00 [ 595.133283][ C1] RDX: 0000000000000000 RSI: ffffffff8a2b3a20 RDI: ffffffff8a79f980 [ 595.141316][ C1] RBP: ffffc900032df780 R08: dffffc0000000000 R09: 1ffffffff203a818 [ 595.149350][ C1] R10: dffffc0000000000 R11: fffffbfff203a819 R12: ffffffff8c31eaa0 [ 595.157390][ C1] R13: 1ffff9200065bed8 R14: 0000000000000246 R15: dffffc0000000000 [ 595.165472][ C1] ? read_lock_is_recursive+0x10/0x10 [ 595.170890][ C1] ? deref_stack_reg+0xd0/0x120 [ 595.175813][ C1] ? preempt_count_add+0x8d/0x190 [ 595.180890][ C1] rcu_lock_acquire+0x2a/0x30 [ 595.185630][ C1] ? rcu_lock_acquire+0x5/0x30 [ 595.190430][ C1] is_bpf_text_address+0x1d/0x270 [ 595.195513][ C1] __kernel_text_address+0x9a/0x100 [ 595.200785][ C1] unwind_get_return_address+0x49/0x80 [ 595.206326][ C1] ? stack_trace_save+0xf0/0xf0 [ 595.211219][ C1] arch_stack_walk+0xf2/0x140 [ 595.215978][ C1] stack_trace_save+0xa6/0xf0 [ 595.220714][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 595.225912][ C1] ? memset+0x1e/0x40 [ 595.229935][ C1] __kasan_slab_alloc+0x9c/0xd0 [ 595.234864][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 595.239921][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 595.245274][ C1] ? kmem_cache_alloc+0x100/0x290 [ 595.250350][ C1] ? sk_prot_alloc+0x57/0x210 [ 595.255113][ C1] ? sk_alloc+0x2f/0x310 [ 595.259396][ C1] ? tipc_sk_create+0xdc/0x2530 [ 595.264287][ C1] ? __sock_create+0x47b/0x900 [ 595.269129][ C1] ? __sys_socketpair+0x1bd/0x540 [ 595.274213][ C1] ? __x64_sys_socketpair+0x97/0xb0 [ 595.279483][ C1] ? do_syscall_64+0x4c/0xa0 [ 595.284202][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.290421][ C1] slab_post_alloc_hook+0x4c/0x380 [ 595.295600][ C1] ? sk_prot_alloc+0x57/0x210 [ 595.300325][ C1] kmem_cache_alloc+0x100/0x290 [ 595.305353][ C1] sk_prot_alloc+0x57/0x210 [ 595.309890][ C1] ? sk_alloc+0x1d/0x310 [ 595.314265][ C1] sk_alloc+0x2f/0x310 [ 595.318419][ C1] tipc_sk_create+0xdc/0x2530 [ 595.323136][ C1] ? rcu_lock_release+0x5/0x20 [ 595.328085][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 595.333168][ C1] __sock_create+0x47b/0x900 [ 595.337865][ C1] __sys_socketpair+0x1bd/0x540 [ 595.342771][ C1] __x64_sys_socketpair+0x97/0xb0 [ 595.347997][ C1] do_syscall_64+0x4c/0xa0 [ 595.352455][ C1] ? clear_bhb_loop+0x30/0x80 [ 595.357217][ C1] ? clear_bhb_loop+0x30/0x80 [ 595.361945][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 595.367918][ C1] RIP: 0033:0x7f1c923bd799 [ 595.372366][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.392143][ C1] RSP: 002b:00007f1c90617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 595.400633][ C1] RAX: ffffffffffffffda RBX: 00007f1c92636fa0 RCX: 00007f1c923bd799 [ 595.408677][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 595.416713][ C1] RBP: 00007f1c92453c99 R08: 0000000000000000 R09: 0000000000000000 [ 595.424718][ C1] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 595.432777][ C1] R13: 00007f1c92637038 R14: 00007f1c92636fa0 R15: 00007fff565a5cf8 [ 595.440837][ C1] [ 595.443897][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 595.451194][ C1] CPU: 1 PID: 15002 Comm: syz.2.3654 Not tainted syzkaller #0 [ 595.458697][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.468767][ C1] Call Trace: [ 595.472163][ C1] [ 595.475039][ C1] dump_stack_lvl+0x188/0x250 [ 595.479763][ C1] ? show_regs_print_info+0x20/0x20 [ 595.485035][ C1] ? load_image+0x400/0x400 [ 595.489886][ C1] panic+0x2e5/0x810 [ 595.493839][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 595.498391][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 595.503995][ C1] __warn+0x248/0x2b0 [ 595.508019][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 595.513613][ C1] report_bug+0x1b7/0x2e0 [ 595.518004][ C1] handle_bug+0x3a/0x70 [ 595.522197][ C1] exc_invalid_op+0x16/0x40 [ 595.526743][ C1] asm_exc_invalid_op+0x16/0x20 [ 595.531653][ C1] RIP: 0010:copy_from_user_nofault+0x160/0x1c0 [ 595.537845][ C1] Code: 24 45 31 f6 31 ff 89 de e8 fd 94 d8 ff 85 db 48 c7 c0 f2 ff ff ff 49 0f 44 c6 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 80 91 d8 ff <0f> 0b e9 1c ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c ea fe [ 595.557592][ C1] RSP: 0018:ffffc90000dcfd28 EFLAGS: 00010246 [ 595.563705][ C1] RAX: ffffffff81a08f90 RBX: 0000000000000000 RCX: ffff888029b61dc0 [ 595.571850][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 595.579864][ C1] RBP: 0000000000000000 R08: ffffc90000dd0157 R09: ffffc90000dd0124 [ 595.587873][ C1] R10: dffffc0000000000 R11: fffff520001ba02b R12: ffff888029b63548 [ 595.595925][ C1] R13: ffffc9000147e030 R14: ffffc90000dcfd88 R15: 0000000000000000 [ 595.603981][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 595.609624][ C1] ? copy_from_user_nofault+0x160/0x1c0 [ 595.615214][ C1] bpf_probe_read_user+0x26/0x70 [ 595.620200][ C1] ? bpf_flow_dissect+0x12b/0x3f0 [ 595.625322][ C1] ? __skb_flow_dissect+0x792/0x60b0 [ 595.630652][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 595.635836][ C1] ? mark_lock+0x94/0x320 [ 595.640202][ C1] ? bpf_flow_dissect+0x3f0/0x3f0 [ 595.645266][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 595.650340][ C1] ? mark_lock+0x94/0x320 [ 595.654712][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 595.659812][ C1] ? mark_lock+0x94/0x320 [ 595.664180][ C1] ? __lock_acquire+0x12e8/0x7d10 [ 595.669268][ C1] ? verify_lock_unused+0x140/0x140 [ 595.674513][ C1] ? look_up_lock_class+0x71/0x110 [ 595.679673][ C1] ? verify_lock_unused+0x140/0x140 [ 595.684912][ C1] ? register_lock_class+0xc0/0x890 [ 595.690152][ C1] ? ___skb_get_hash+0x55/0x680 [ 595.695052][ C1] ? __skb_get_hash+0xd2/0x270 [ 595.699855][ C1] ? __skb_get_hash_symmetric+0x3b0/0x3b0 [ 595.705617][ C1] ? rcu_lock_release+0x9/0x20 [ 595.710443][ C1] ? netdev_pick_tx+0x335/0xad0 [ 595.715423][ C1] ? netdev_core_pick_tx+0x12e/0x2e0 [ 595.720759][ C1] ? __dev_queue_xmit+0x756/0x2f80 [ 595.725935][ C1] ? ndisc_send_skb+0xc2a/0x1500 [ 595.730921][ C1] ? dev_queue_xmit+0x20/0x20 [ 595.735909][ C1] ? mark_lock+0x94/0x320 [ 595.740275][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 595.746305][ C1] ? lock_chain_count+0x20/0x20 [ 595.751196][ C1] ? __ipv6_neigh_lookup_noref+0x61d/0x7d0 [ 595.757042][ C1] ? ip6_finish_output2+0xcb6/0x1510 [ 595.762365][ C1] ? ip6_finish_output2+0xe80/0x1510 [ 595.767690][ C1] ? ip6_finish_output2+0x1051/0x1510 [ 595.773104][ C1] ? nf_hook+0x360/0x360 [ 595.777488][ C1] ? ndisc_send_skb+0xc2a/0x1500 [ 595.782479][ C1] ? ndisc_alloc_skb+0x420/0x420 [ 595.787484][ C1] ? rcu_lock_release+0x20/0x20 [ 595.792402][ C1] ? ndisc_send_rs+0x544/0x730 [ 595.797218][ C1] ? addrconf_rs_timer+0x2d1/0x630 [ 595.802385][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 595.808490][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 595.814529][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 595.820642][ C1] ? call_timer_fn+0x17b/0x540 [ 595.825443][ C1] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 595.831114][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 595.837217][ C1] ? __run_timers+0x800/0x800 [ 595.841953][ C1] ? addrconf_disable_policy_idev+0x4b0/0x4b0 [ 595.848407][ C1] ? __run_timers+0x53e/0x800 [ 595.853144][ C1] ? detach_timer+0x2b0/0x2b0 [ 595.857875][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 595.863918][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 595.868835][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 595.874167][ C1] ? run_timer_softirq+0x63/0xf0 [ 595.879225][ C1] ? handle_softirqs+0x339/0x830 [ 595.884214][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 595.889140][ C1] ? do_softirq+0x210/0x210 [ 595.893710][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 595.898603][ C1] ? irq_exit_rcu+0x20/0x20 [ 595.903161][ C1] ? irq_exit_rcu+0x5/0x20 [ 595.907613][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 595.913450][ C1] [ 595.916400][ C1] [ 595.919350][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 595.925547][ C1] ? lock_acquire+0x208/0x400 [ 595.930265][ C1] ? read_lock_is_recursive+0x10/0x10 [ 595.935691][ C1] ? deref_stack_reg+0xd0/0x120 [ 595.940580][ C1] ? preempt_count_add+0x8d/0x190 [ 595.945633][ C1] ? rcu_lock_acquire+0x2a/0x30 [ 595.950515][ C1] ? rcu_lock_acquire+0x5/0x30 [ 595.955298][ C1] ? is_bpf_text_address+0x1d/0x270 [ 595.960611][ C1] ? __kernel_text_address+0x9a/0x100 [ 595.966129][ C1] ? unwind_get_return_address+0x49/0x80 [ 595.971806][ C1] ? stack_trace_save+0xf0/0xf0 [ 595.976718][ C1] ? arch_stack_walk+0xf2/0x140 [ 595.981656][ C1] ? stack_trace_save+0xa6/0xf0 [ 595.986550][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 595.991710][ C1] ? memset+0x1e/0x40 [ 595.995742][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 596.000914][ C1] ? __kasan_slab_alloc+0x9c/0xd0 [ 596.005976][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 596.011295][ C1] ? kmem_cache_alloc+0x100/0x290 [ 596.016347][ C1] ? sk_prot_alloc+0x57/0x210 [ 596.021054][ C1] ? sk_alloc+0x2f/0x310 [ 596.025319][ C1] ? tipc_sk_create+0xdc/0x2530 [ 596.030366][ C1] ? __sock_create+0x47b/0x900 [ 596.035166][ C1] ? __sys_socketpair+0x1bd/0x540 [ 596.040256][ C1] ? __x64_sys_socketpair+0x97/0xb0 [ 596.045498][ C1] ? do_syscall_64+0x4c/0xa0 [ 596.050127][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.056296][ C1] ? slab_post_alloc_hook+0x4c/0x380 [ 596.061606][ C1] ? sk_prot_alloc+0x57/0x210 [ 596.066340][ C1] ? kmem_cache_alloc+0x100/0x290 [ 596.071392][ C1] ? sk_prot_alloc+0x57/0x210 [ 596.076098][ C1] ? sk_alloc+0x1d/0x310 [ 596.080379][ C1] ? sk_alloc+0x2f/0x310 [ 596.084652][ C1] ? tipc_sk_create+0xdc/0x2530 [ 596.089523][ C1] ? rcu_lock_release+0x5/0x20 [ 596.094331][ C1] ? __lock_acquire+0x7d10/0x7d10 [ 596.099408][ C1] ? __sock_create+0x47b/0x900 [ 596.104228][ C1] ? __sys_socketpair+0x1bd/0x540 [ 596.109309][ C1] ? __x64_sys_socketpair+0x97/0xb0 [ 596.114562][ C1] ? do_syscall_64+0x4c/0xa0 [ 596.119218][ C1] ? clear_bhb_loop+0x30/0x80 [ 596.124022][ C1] ? clear_bhb_loop+0x30/0x80 [ 596.128825][ C1] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 596.134943][ C1] [ 596.138293][ C1] Kernel Offset: disabled [ 596.142793][ C1] Rebooting in 86400 seconds..