last executing test programs: 10m15.754871125s ago: executing program 2 (id=131): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/684], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m15.186846162s ago: executing program 2 (id=134): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0xf67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x64}, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) 10m10.493193991s ago: executing program 2 (id=157): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/685], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000000, 0xfe7f, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m10.193504515s ago: executing program 2 (id=148): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x4008000) 10m8.168785709s ago: executing program 2 (id=150): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fcffffff0000000007000000850000007b0000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xdf}, 0x266, 0x400000, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x8, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x2, 0xfa, 0x800, 0x40, 0x18043, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x0, 0x0, @value, @void, @value=r3}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xc, &(0x7f0000000200)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff0}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfffffff0}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x2}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="00000000000000fffffffe000000", 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 10m6.556349014s ago: executing program 2 (id=163): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0xf67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x64}, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 9m50.614949847s ago: executing program 32 (id=163): r0 = perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0xf67, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x64}, 0x18, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) 12.209003291s ago: executing program 0 (id=3693): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[], 0xb) socket$kcm(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3}, &(0x7f00000001c0), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x11, 0x4, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 9.467209629s ago: executing program 0 (id=3702): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3}, 0x94) 9.308082026s ago: executing program 0 (id=3705): perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffd5e, 0x8b, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x10a043, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x488c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r3) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) close(r6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="130000001000000008000000fffbffff00000000", @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000007e7463f0b792e73a7511047bc16b7476864c2c26d8a47b501d467fcffe9238ad6ad41720819745aae53c0aafad9bea57f6fa1ced243b70529afe44eb0e1c563a3a951c9964e09fd8d5dd064175a9c2f7121ab94e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 5.924220424s ago: executing program 0 (id=3717): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) 4.803133766s ago: executing program 3 (id=3724): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) syz_clone(0x4144400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.657291693s ago: executing program 5 (id=3726): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x7a59c, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x1, @perf_config_ext={0x0, 0x11}, 0x2, 0x4, 0x3, 0x1, 0x81, 0x5, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 4.541849479s ago: executing program 5 (id=3727): perf_event_open(&(0x7f0000000040)={0x2, 0xfffffffffffffd5e, 0x8b, 0x41, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x10a043, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x68, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x1, @perf_bp={0x0, 0xa}, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x488c1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x120, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1d, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r3) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) r6 = openat$cgroup_ro(r4, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r6) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) close(r6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="130000001000000008000000fffbffff00000000", @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000007e7463f0b792e73a7511047bc16b7476864c2c26d8a47b501d467fcffe9238ad6ad41720819745aae53c0aafad9bea57f6fa1ced243b70529afe44eb0e1c563a3a951c9964e09fd8d5dd064175a9c2f7121ab94e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_netprio_ifpriomap(r7, &(0x7f0000000040), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r8, &(0x7f0000000200)=ANY=[@ANYBLOB='gretap0 8'], 0xa) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) 4.28607649s ago: executing program 3 (id=3728): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x14, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="191dfcf27db06945e88ef752ad57a5dfc1490f7b56d47870423ac9d1cf9ac846132af5d50c35e8eacc0fd576c07c9f5c4ca5275a1273108e3414f7be7e8299b1ff895621c8aa608556383fdcf65a863266cdf0298c37816c6c1dad8011c8413c57aad513012ddc498f9aff684b4d6912cc3d223bcd68a58f5ebc327a6b2ab2c25711645ac1d7f2511995ae109f823196dd2aa3bc71df165640b4157d61a200f49e117d81825577b4e142032ebc984fdccfeed80548e0c0099beb53763d092646f503b30d618f1fb2b6bbf7eca645e41376c2bf9e24a5cc6171e0b2f28ede20a6e962ae49767da6086b", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="05000000000000000000000000000000410ca9ff3d8121890000eb", @ANYBLOB="04000000010000"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x3, 0x0, 0xe, 0x34002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x7}, 0x0, 0x180000000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.454692466s ago: executing program 3 (id=3730): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB="0d00ff0000000000830000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000080)) 2.400442668s ago: executing program 0 (id=3731): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000040085000000000000008500ce3bb34bbb0000230000006e00388100000000095947e1db3e994d3600000000000000115014a181fbb39a0ca310f7b93b56ab3cd9a41d9ee46e5a137df64d73315fbf18d7bfbfed85884c253686619b15962fea4df7e3f17cde1ce4f66b057668575b19aa21711747ec2f037969971bc775080e1f4a671604bd3e2b147e9dba898f9b599513cb97a4"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x18000000000002a0, 0x41, 0x0, &(0x7f0000000500)="b90a00000044268cb89e14f086ddedcfb7beec3ad56d65e26a696578ec93ae803b9545e1a3a8d76d", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0xff, 0x0, 0x0, 0x0, 0x5c31, 0x50, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xf, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000300000001000000", @ANYBLOB="0000000000000007400000000701000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0xc) r5 = socket$kcm(0x10, 0x2, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$kcm(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b904021d080207000000040000a118000200e000000700000e1208000f0100810401a80016ea1f000840032e5f54c92011148ed08734843c8802033d0803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 2.344944481s ago: executing program 4 (id=3732): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) 2.213982177s ago: executing program 3 (id=3734): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r3) 2.116502732s ago: executing program 4 (id=3735): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000008240001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1000000000000009}, 0x400, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.910715382s ago: executing program 1 (id=3737): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0x75}, 0x38) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bridge0\x00', 0x100}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000000c0)={0x3, 0x80, 0x8, 0x5, 0xd, 0x5, 0x0, 0x7fffffff, 0x7a59c, 0xb, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdbffbfff, 0x1, @perf_config_ext={0x0, 0x11}, 0x2, 0x4, 0x3, 0x1, 0x81, 0x5, 0xd, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x8000000a, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, 0x0) 1.877683543s ago: executing program 4 (id=3738): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 1.860816373s ago: executing program 3 (id=3739): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[], 0xb) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3}, &(0x7f00000001c0), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x11, 0x4, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 1.794407747s ago: executing program 1 (id=3740): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x14, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="191dfcf27db06945e88ef752ad57a5dfc1490f7b56d47870423ac9d1cf9ac846132af5d50c35e8eacc0fd576c07c9f5c4ca5275a1273108e3414f7be7e8299b1ff895621c8aa608556383fdcf65a863266cdf0298c37816c6c1dad8011c8413c57aad513012ddc498f9aff684b4d6912cc3d223bcd68a58f5ebc327a6b2ab2c25711645ac1d7f2511995ae109f823196dd2aa3bc71df165640b4157d61a200f49e117d81825577b4e142032ebc984fdccfeed80548e0c0099beb53763d092646f503b30d618f1fb2b6bbf7eca645e41376c2bf9e24a5cc6171e0b2f28ede20a6e962ae49767da6086b", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="05000000000000000000000000000000410ca9ff3d8121890000eb", @ANYBLOB="04000000010000"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x3, 0x0, 0xe, 0x34002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x7}, 0x0, 0x180000000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 1.596946856s ago: executing program 3 (id=3741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r5) write$cgroup_devices(r4, &(0x7f0000000280)=ANY=[@ANYRESDEC], 0xffdd) 1.317147599s ago: executing program 1 (id=3742): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) 1.281555331s ago: executing program 0 (id=3743): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000180)=r4) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000"], 0xffdd) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000800)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 956.503926ms ago: executing program 5 (id=3744): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x80}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000001f000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000010010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 775.333184ms ago: executing program 4 (id=3745): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x23, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f0000000200)=@caif, 0x80, 0x0}, 0x88010) 670.648759ms ago: executing program 1 (id=3746): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socket$kcm(0x10, 0x2, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000400000008000000"], 0x50) socket$kcm(0x2, 0x3, 0x106) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x120a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2b8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x11, 0x3, 0x0) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x2000000000000}, 0x200, 0x0, 0x400, 0x0, 0x0, 0x20000, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x161) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1=0xe00001f4}, 0x10, 0x0}, 0x0) 562.715044ms ago: executing program 5 (id=3747): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_subtree(r2, 0x0, 0x5) write$cgroup_subtree(r2, 0x0, 0x5) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], &(0x7f0000000340)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xffff0000, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) 499.639157ms ago: executing program 4 (id=3748): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000380)}, 0x20) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000008240001018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x8b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x100000000}, 0x9, 0x0, 0x0, 0x6, 0x0, 0xfffffff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x1000000000000009}, 0x400, 0x0, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f00000006c0)) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x1, 0x1, &(0x7f0000000040)={0x0, 0x0}) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, @perf_bp={0x0, 0x4}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x2f00, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 380.823422ms ago: executing program 1 (id=3749): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r1, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) close(r3) 331.902465ms ago: executing program 5 (id=3750): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000011540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_sock_addr=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 109.864575ms ago: executing program 4 (id=3751): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000040000000181100", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180), 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f00000002c0)=ANY=[], 0xb) socket$kcm(0xa, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100808, 0x0, 0x8000, 0x0, 0x0, 0x3, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000000)={{r3}, &(0x7f00000001c0), &(0x7f0000000740)='%ps \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000300000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={&(0x7f00000001c0), 0x5}, 0x0, 0x11, 0x4, 0x5, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0x4, 0xffffffffffffffff, 0xa) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8914, &(0x7f0000000080)) 109.301725ms ago: executing program 5 (id=3752): bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1}, 0x94) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x9}, 0x202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x81, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0}, 0x8000, 0x5, 0x43a1bd76, 0x6, 0x9, 0x6, 0x4002, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0xffffffffffffff79, 0x0}, 0x24000001) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x14, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYBLOB="191dfcf27db06945e88ef752ad57a5dfc1490f7b56d47870423ac9d1cf9ac846132af5d50c35e8eacc0fd576c07c9f5c4ca5275a1273108e3414f7be7e8299b1ff895621c8aa608556383fdcf65a863266cdf0298c37816c6c1dad8011c8413c57aad513012ddc498f9aff684b4d6912cc3d223bcd68a58f5ebc327a6b2ab2c25711645ac1d7f2511995ae109f823196dd2aa3bc71df165640b4157d61a200f49e117d81825577b4e142032ebc984fdccfeed80548e0c0099beb53763d092646f503b30d618f1fb2b6bbf7eca645e41376c2bf9e24a5cc6171e0b2f28ede20a6e962ae49767da6086b", @ANYRESHEX=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYBLOB="0400000001000000"], 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) perf_event_open(&(0x7f00000001c0)={0x3, 0x80, 0x63, 0x0, 0x0, 0x3, 0x0, 0xe, 0x34002, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x4, 0x7}, 0x0, 0x180000000000, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 1 (id=3753): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): T8607] device wlan1 left promiscuous mode [ 338.075332][ T8614] : port 1(dummy0) entered blocking state [ 338.115024][ T8614] : port 1(dummy0) entered disabled state [ 338.122145][ T8614] device dummy0 entered promiscuous mode [ 338.150114][ T8614] : port 1(dummy0) entered blocking state [ 338.156191][ T8614] : port 1(dummy0) entered forwarding state [ 338.312854][ T8621] netlink: 'syz.0.1449': attribute type 10 has an invalid length. [ 338.337542][ T8621] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1449'. [ 338.501696][ T8629] netlink: 'syz.4.1450': attribute type 10 has an invalid length. [ 339.485876][ T8656] device syzkaller0 entered promiscuous mode [ 339.530237][ T8658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1460'. [ 339.702487][ T8658] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1460'. [ 341.657595][ T8659] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1460'. [ 341.676094][ T8685] netlink: 'syz.1.1469': attribute type 10 has an invalid length. [ 341.697829][ T8667] : port 1(dummy0) entered blocking state [ 341.703835][ T8667] : port 1(dummy0) entered disabled state [ 341.724296][ T8667] device dummy0 entered promiscuous mode [ 341.735746][ T8667] : port 1(dummy0) entered blocking state [ 341.741659][ T8667] : port 1(dummy0) entered forwarding state [ 342.543082][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1481'. [ 342.570696][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1481'. [ 342.582549][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1481'. [ 342.622356][ T8717] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1481'. [ 342.812026][ T8725] device syzkaller0 entered promiscuous mode [ 343.073344][ T8727] netlink: 'syz.3.1485': attribute type 10 has an invalid length. [ 344.915699][ T8765] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1499'. [ 345.781520][ T8765] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1499'. [ 346.474533][ T8786] netlink: 'syz.4.1504': attribute type 10 has an invalid length. [ 346.914324][ T8803] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1514'. [ 347.030704][ T8803] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1514'. [ 347.092835][ T8808] device syzkaller0 entered promiscuous mode [ 347.115979][ T8809] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1514'. [ 347.156841][ T8803] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1514'. [ 348.042600][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1528'. [ 349.673728][ T8839] netlink: 'syz.0.1525': attribute type 10 has an invalid length. [ 349.684131][ T8841] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1528'. [ 350.437975][ T8888] device syzkaller0 entered promiscuous mode [ 350.486156][ T8882] netlink: 'syz.1.1543': attribute type 10 has an invalid length. [ 351.060769][ T8891] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1546'. [ 353.103419][ T8891] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1546'. [ 353.945563][ T8966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1576'. [ 353.963139][ T8966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1576'. [ 354.018212][ T8969] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1576'. [ 354.110706][ T8968] device syzkaller0 entered promiscuous mode [ 354.130335][ T8966] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1576'. [ 354.280664][ T8977] netlink: 'syz.0.1578': attribute type 10 has an invalid length. [ 355.020863][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1589'. [ 356.531309][ T8999] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1589'. [ 356.913534][ T9039] netlink: 'syz.3.1601': attribute type 10 has an invalid length. [ 357.171783][ T9051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1608'. [ 357.220215][ T9051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1608'. [ 357.265183][ T9053] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1608'. [ 357.925593][ T9071] device syzkaller0 entered promiscuous mode [ 358.406124][ T9087] __nla_validate_parse: 1 callbacks suppressed [ 358.406142][ T9087] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1620'. [ 359.987965][ T9087] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1620'. [ 359.997562][ T9090] netlink: 'syz.0.1621': attribute type 10 has an invalid length. [ 364.202400][ T9185] netlink: 'syz.3.1654': attribute type 10 has an invalid length. [ 365.420105][ T9208] netlink: 'syz.4.1664': attribute type 2 has an invalid length. [ 365.462407][ T9208] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1664'. [ 365.600348][ T9212] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1666'. [ 366.082375][ T9230] netlink: 'syz.0.1672': attribute type 10 has an invalid length. [ 366.366276][ T9238] : port 1(dummy0) entered blocking state [ 366.392333][ T9238] : port 1(dummy0) entered disabled state [ 366.436001][ T9238] device dummy0 entered promiscuous mode [ 366.476393][ T9245] netlink: 'syz.1.1679': attribute type 2 has an invalid length. [ 366.484621][ T9245] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1679'. [ 367.084943][ T9261] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1683'. [ 367.716648][ T9284] netlink: 'syz.4.1691': attribute type 10 has an invalid length. [ 367.738873][ T9289] netlink: 'syz.3.1692': attribute type 2 has an invalid length. [ 367.747284][ T9289] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1692'. [ 368.222917][ T9293] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1697'. [ 369.122473][ T9321] netlink: 'syz.5.1708': attribute type 2 has an invalid length. [ 369.148843][ T9321] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1708'. [ 369.675573][ T9333] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 369.979592][ T9334] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1713'. [ 371.149528][ T9354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1720'. [ 371.231993][ T9354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1720'. [ 371.332796][ T9359] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1720'. [ 371.368946][ T9354] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1720'. [ 372.021024][ T9373] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1727'. [ 372.072396][ T9376] netlink: 'syz.4.1728': attribute type 1 has an invalid length. [ 372.126442][ T9376] netlink: 134744 bytes leftover after parsing attributes in process `syz.4.1728'. [ 372.469798][ T9381] netlink: 'syz.0.1729': attribute type 10 has an invalid length. [ 373.169863][ T9397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1736'. [ 373.195629][ T9397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1736'. [ 373.237301][ T9399] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1736'. [ 373.291231][ T9397] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1736'. [ 375.394119][ T9431] netlink: 'syz.5.1749': attribute type 10 has an invalid length. [ 375.598274][ T9444] netlink: 'syz.0.1753': attribute type 1 has an invalid length. [ 376.705663][ T9483] netlink: 'syz.1.1767': attribute type 2 has an invalid length. [ 376.724988][ T9483] __nla_validate_parse: 7 callbacks suppressed [ 376.725006][ T9483] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1767'. [ 376.731113][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 376.871283][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 376.900270][ T9484] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 377.035372][ T9479] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1765'. [ 377.088072][ T9489] netlink: 'syz.3.1769': attribute type 10 has an invalid length. [ 378.073425][ T9510] netlink: 'syz.0.1778': attribute type 2 has an invalid length. [ 378.082814][ T9510] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1778'. [ 378.298368][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1782'. [ 378.336819][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1782'. [ 378.371400][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1782'. [ 378.431232][ T9519] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1782'. [ 378.628763][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.635184][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.638597][ T9532] netlink: 'syz.0.1785': attribute type 10 has an invalid length. [ 380.002653][ T9553] netlink: 'syz.0.1795': attribute type 2 has an invalid length. [ 380.897212][ T9587] netlink: 'syz.3.1806': attribute type 10 has an invalid length. [ 381.574829][ T9602] netlink: 'syz.0.1812': attribute type 2 has an invalid length. [ 381.796618][ T9608] __nla_validate_parse: 6 callbacks suppressed [ 381.796644][ T9608] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1813'. [ 381.858367][ T9608] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1813'. [ 381.907223][ T9611] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1813'. [ 381.977965][ T9608] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1813'. [ 382.652710][ T9642] netlink: 'syz.1.1826': attribute type 2 has an invalid length. [ 382.660789][ T9642] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1826'. [ 382.724118][ T9644] netlink: 'syz.3.1827': attribute type 10 has an invalid length. [ 383.259782][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1831'. [ 383.280265][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1831'. [ 383.350176][ T9655] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1831'. [ 383.710972][ T9660] device syzkaller0 entered promiscuous mode [ 383.760657][ T9661] netlink: 188 bytes leftover after parsing attributes in process `syz.5.1833'. [ 383.934206][ T9676] netlink: 'syz.0.1838': attribute type 2 has an invalid length. [ 383.952226][ T9676] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1838'. [ 385.775611][ T9698] netlink: 'syz.3.1847': attribute type 10 has an invalid length. [ 386.435645][ T9731] netlink: 'syz.5.1860': attribute type 2 has an invalid length. [ 386.492883][ T9729] netlink: 'syz.4.1861': attribute type 10 has an invalid length. [ 386.691813][ T9737] device syzkaller0 entered promiscuous mode [ 390.510369][ T9777] netlink: 'syz.3.1877': attribute type 10 has an invalid length. [ 390.526275][ T9813] netlink: 'syz.0.1891': attribute type 21 has an invalid length. [ 391.295117][ T9844] netlink: 'syz.0.1904': attribute type 29 has an invalid length. [ 391.363240][ T9842] device syzkaller0 entered promiscuous mode [ 391.377407][ T9844] netlink: 'syz.0.1904': attribute type 29 has an invalid length. [ 391.395343][ T9848] __nla_validate_parse: 6 callbacks suppressed [ 391.395459][ T9848] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1905'. [ 391.420307][ T9847] netlink: 'syz.5.1906': attribute type 10 has an invalid length. [ 392.727513][ T9872] netlink: 'syz.3.1914': attribute type 3 has an invalid length. [ 392.740474][ T9872] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1914'. [ 394.008275][ T9878] device wlan1 left promiscuous mode [ 394.031873][ T9879] device wlan1 entered promiscuous mode [ 394.493050][ T9903] netlink: 'syz.1.1922': attribute type 10 has an invalid length. [ 394.732458][ T9909] device syzkaller0 entered promiscuous mode [ 395.443859][ T9918] netlink: 'syz.0.1931': attribute type 3 has an invalid length. [ 395.453155][ T9918] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1931'. [ 396.963300][ T9920] netlink: 'syz.4.1929': attribute type 21 has an invalid length. [ 397.013254][ T9925] device wlan1 entered promiscuous mode [ 397.403139][ T9954] netlink: 'syz.1.1944': attribute type 2 has an invalid length. [ 397.411205][ T9954] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1944'. [ 397.653861][ T9952] netlink: 'syz.4.1943': attribute type 10 has an invalid length. [ 398.358468][ T9964] device syzkaller0 entered promiscuous mode [ 398.567478][ T9970] netlink: 'syz.5.1950': attribute type 3 has an invalid length. [ 398.606169][ T9970] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1950'. [ 398.830928][ T9983] device wlan1 entered promiscuous mode [ 398.849260][ T9985] netlink: 'syz.1.1955': attribute type 2 has an invalid length. [ 398.859244][ T9985] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1955'. [ 401.267284][T10003] netlink: 'syz.5.1962': attribute type 10 has an invalid length. [ 401.605935][T10023] netlink: 'syz.5.1969': attribute type 2 has an invalid length. [ 401.624797][T10023] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1969'. [ 401.805657][T10033] device wlan1 left promiscuous mode [ 401.924359][T10030] netlink: 'syz.0.1970': attribute type 3 has an invalid length. [ 401.943621][T10035] device wlan1 entered promiscuous mode [ 401.989249][T10030] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1970'. [ 402.183513][T10044] device syzkaller0 entered promiscuous mode [ 402.374367][T10050] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.1980'. [ 402.391730][T10047] netlink: 'syz.5.1979': attribute type 10 has an invalid length. [ 403.724746][T10078] netlink: 'syz.5.1991': attribute type 3 has an invalid length. [ 403.733706][T10078] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.1991'. [ 404.768247][T10080] device wlan1 left promiscuous mode [ 404.779395][T10081] device wlan1 entered promiscuous mode [ 404.989137][T10089] netlink: 'syz.4.1993': attribute type 2 has an invalid length. [ 405.017246][T10089] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1993'. [ 405.064530][T10091] netlink: 'syz.5.1995': attribute type 1 has an invalid length. [ 405.106158][T10091] netlink: 134744 bytes leftover after parsing attributes in process `syz.5.1995'. [ 406.111260][T10115] device syzkaller0 entered promiscuous mode [ 406.245187][T10125] device wlan1 entered promiscuous mode [ 406.310751][T10117] netlink: 'syz.4.2005': attribute type 3 has an invalid length. [ 406.325266][T10117] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2005'. [ 408.653485][T10133] netlink: 'syz.3.2010': attribute type 2 has an invalid length. [ 408.671709][T10133] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2010'. [ 408.897435][T10153] netlink: 'syz.1.2017': attribute type 10 has an invalid length. [ 409.224570][T10162] device wlan1 left promiscuous mode [ 409.348251][T10159] netlink: 'syz.3.2021': attribute type 3 has an invalid length. [ 409.368372][T10165] device wlan1 entered promiscuous mode [ 409.372048][T10159] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2021'. [ 409.677556][T10178] netlink: 'syz.3.2028': attribute type 1 has an invalid length. [ 409.696839][T10178] netlink: 134744 bytes leftover after parsing attributes in process `syz.3.2028'. [ 409.920883][T10180] device syzkaller0 entered promiscuous mode [ 410.531558][T10204] netlink: 'syz.5.2038': attribute type 3 has an invalid length. [ 410.543036][T10204] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2038'. [ 412.746822][T10212] device wlan1 left promiscuous mode [ 412.763536][T10204] device wlan1 entered promiscuous mode [ 412.770391][T10218] netlink: 'syz.4.2041': attribute type 10 has an invalid length. [ 413.219981][T10240] sctp: [Deprecated]: syz.3.2051 (pid 10240) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.219981][T10240] Use struct sctp_sack_info instead [ 413.344353][T10243] netlink: 'syz.1.2050': attribute type 1 has an invalid length. [ 413.375154][T10248] netlink: 'syz.4.2054': attribute type 2 has an invalid length. [ 413.382744][T10243] netlink: 134744 bytes leftover after parsing attributes in process `syz.1.2050'. [ 413.382897][T10248] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2054'. [ 413.450908][T10250] netlink: 'syz.5.2055': attribute type 10 has an invalid length. [ 413.914815][T10258] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2057'. [ 414.008727][T10263] device wlan1 left promiscuous mode [ 414.040493][T10260] netlink: 'syz.4.2058': attribute type 3 has an invalid length. [ 414.076037][T10260] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2058'. [ 414.122317][T10263] device wlan1 entered promiscuous mode [ 414.567522][T10282] netlink: 'syz.3.2068': attribute type 2 has an invalid length. [ 414.584856][T10282] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2068'. [ 414.769145][T10289] sctp: [Deprecated]: syz.5.2070 (pid 10289) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.769145][T10289] Use struct sctp_sack_info instead [ 414.814659][T10290] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2072'. [ 415.033468][T10291] netlink: 'syz.1.2069': attribute type 10 has an invalid length. [ 415.072667][T10297] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2073'. [ 415.108655][T10297] netlink: 'syz.3.2073': attribute type 1 has an invalid length. [ 415.128512][T10297] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2073'. [ 415.348761][T10306] device wlan1 left promiscuous mode [ 415.385502][T10303] netlink: 'syz.0.2076': attribute type 3 has an invalid length. [ 415.404089][T10303] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2076'. [ 415.439880][T10309] device wlan1 entered promiscuous mode [ 415.838677][T10322] netlink: 'syz.0.2083': attribute type 2 has an invalid length. [ 415.849357][T10322] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2083'. [ 416.346570][T10329] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2085'. [ 416.799061][T10348] netlink: 'syz.4.2093': attribute type 3 has an invalid length. [ 416.805958][T10350] netlink: 'syz.1.2094': attribute type 10 has an invalid length. [ 416.856131][T10348] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2093'. [ 417.012754][T10355] device wlan1 left promiscuous mode [ 417.184267][T10348] device wlan1 entered promiscuous mode [ 417.280741][T10363] netlink: 'syz.5.2098': attribute type 2 has an invalid length. [ 417.321430][T10363] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2098'. [ 418.009203][T10380] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2104'. [ 418.377695][T10393] netlink: 'syz.0.2112': attribute type 2 has an invalid length. [ 418.442911][T10395] device wlan1 left promiscuous mode [ 418.528830][T10398] device wlan1 entered promiscuous mode [ 419.931695][T10432] __nla_validate_parse: 3 callbacks suppressed [ 419.931734][T10432] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2126'. [ 419.952416][T10432] validate_nla: 3 callbacks suppressed [ 419.952451][T10432] netlink: 'syz.0.2126': attribute type 1 has an invalid length. [ 419.995367][T10432] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2126'. [ 420.129984][T10436] netlink: 'syz.3.2128': attribute type 10 has an invalid length. [ 420.222643][T10441] device wlan1 left promiscuous mode [ 420.288511][T10441] device wlan1 entered promiscuous mode [ 420.358363][T10437] netlink: 'syz.4.2127': attribute type 3 has an invalid length. [ 420.436335][T10437] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2127'. [ 420.999136][T10456] netlink: 'syz.3.2136': attribute type 10 has an invalid length. [ 421.324362][T10472] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2141'. [ 421.355452][T10472] netlink: 'syz.5.2141': attribute type 1 has an invalid length. [ 421.363251][T10472] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2141'. [ 422.079950][T10489] device wlan1 left promiscuous mode [ 422.155719][T10490] device wlan1 entered promiscuous mode [ 422.168045][T10485] netlink: 'syz.3.2148': attribute type 3 has an invalid length. [ 422.179414][T10485] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2148'. [ 422.650632][T10507] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2156'. [ 422.704818][T10507] netlink: 'syz.3.2156': attribute type 1 has an invalid length. [ 422.732581][T10507] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2156'. [ 423.029219][T10512] netlink: 'syz.4.2158': attribute type 10 has an invalid length. [ 424.813009][T10537] device wlan1 left promiscuous mode [ 424.866898][T10541] device wlan1 entered promiscuous mode [ 425.322684][T10552] netlink: 'syz.0.2174': attribute type 10 has an invalid length. [ 426.569530][T10588] device wlan1 left promiscuous mode [ 426.610234][T10585] netlink: 'syz.0.2184': attribute type 3 has an invalid length. [ 426.630935][T10585] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2184'. [ 426.681670][T10591] device wlan1 entered promiscuous mode [ 428.045874][ T4292] Bluetooth: hci5: unexpected event 0x1c length: 15 > 5 [ 428.070119][T10625] device syzkaller0 entered promiscuous mode [ 431.301512][T10649] netlink: 'syz.5.2209': attribute type 2 has an invalid length. [ 431.309413][T10649] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2209'. [ 431.914396][T10684] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.2218'. [ 432.023708][T10686] netlink: 'syz.4.2219': attribute type 3 has an invalid length. [ 432.036663][T10686] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2219'. [ 432.274165][T10686] device wlan1 left promiscuous mode [ 432.355248][T10686] device wlan1 entered promiscuous mode [ 432.939611][T10705] device syzkaller0 entered promiscuous mode [ 432.959003][T10711] netlink: 180 bytes leftover after parsing attributes in process `syz.1.2228'. [ 434.959052][T10732] netlink: 'syz.3.2234': attribute type 10 has an invalid length. [ 435.256208][T10743] netlink: 'syz.1.2236': attribute type 3 has an invalid length. [ 435.270544][T10743] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2236'. [ 435.450586][T10743] device wlan1 left promiscuous mode [ 435.473502][T10743] device wlan1 entered promiscuous mode [ 436.221251][T10772] netlink: 'syz.1.2245': attribute type 10 has an invalid length. [ 436.425337][T10774] device syzkaller0 entered promiscuous mode [ 436.494053][T10777] netlink: 'syz.4.2250': attribute type 2 has an invalid length. [ 436.502306][T10777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2250'. [ 437.407658][T10798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2256'. [ 438.901763][T10786] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2253'. [ 438.912020][T10798] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2256'. [ 439.224253][T10816] netlink: 'syz.0.2264': attribute type 10 has an invalid length. [ 439.531522][T10822] netlink: 'syz.5.2265': attribute type 3 has an invalid length. [ 439.635714][T10822] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2265'. [ 439.753263][T10826] device wlan1 left promiscuous mode [ 440.025135][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.031509][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.122350][T10818] device wlan1 entered promiscuous mode [ 440.629565][T10840] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2271'. [ 441.460549][T10851] device syzkaller0 entered promiscuous mode [ 445.132051][T10881] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2285'. [ 445.324965][T10892] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2292'. [ 447.642038][T10917] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2300'. [ 447.721697][T10921] netlink: 'syz.1.2301': attribute type 10 has an invalid length. [ 447.863865][T10926] device syzkaller0 entered promiscuous mode [ 447.869038][T10925] netlink: 'syz.4.2302': attribute type 28 has an invalid length. [ 447.886640][T10925] netlink: 'syz.4.2302': attribute type 29 has an invalid length. [ 447.925868][T10925] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2302'. [ 450.037080][T10943] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'. [ 450.048428][T10964] netlink: 'syz.0.2313': attribute type 21 has an invalid length. [ 450.075060][T10964] IPv6: NLM_F_CREATE should be specified when creating new route [ 450.083437][T10964] IPv6: Can't replace route, no match found [ 450.223239][T10967] netlink: 'syz.3.2314': attribute type 6 has an invalid length. [ 450.397436][T10973] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2315'. [ 451.021137][T10996] device syzkaller0 entered promiscuous mode [ 454.399525][T11007] netlink: 'syz.1.2326': attribute type 28 has an invalid length. [ 454.465562][T11007] netlink: 'syz.1.2326': attribute type 29 has an invalid length. [ 454.483003][T11007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2326'. [ 456.538556][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2328'. [ 456.865990][T11028] syz.3.2332 uses obsolete (PF_INET,SOCK_PACKET) [ 457.021820][T11031] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2335'. [ 457.458580][T11038] device syzkaller0 entered promiscuous mode [ 457.488624][T11043] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2338'. [ 457.507185][T11043] netlink: 'syz.5.2338': attribute type 1 has an invalid length. [ 457.551954][T11043] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2338'. [ 457.934118][T11050] netlink: 'syz.5.2341': attribute type 28 has an invalid length. [ 457.948158][T11050] netlink: 'syz.5.2341': attribute type 29 has an invalid length. [ 457.959831][T11050] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2341'. [ 459.863389][T11058] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 459.875162][T11069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2347'. [ 459.885060][T11076] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2348'. [ 460.250098][T11086] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2351'. [ 460.419681][T11086] netlink: 'syz.4.2351': attribute type 1 has an invalid length. [ 460.506788][T11086] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2351'. [ 462.094109][T11110] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2362'. [ 462.643026][T11110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 462.805570][T11110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 462.865172][T11110] bond0 (unregistering): Released all slaves [ 462.972656][T11119] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2364'. [ 463.032515][T11126] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 463.324086][T11129] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2367'. [ 463.375211][T11129] netlink: 'syz.5.2367': attribute type 1 has an invalid length. [ 463.394858][T11129] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2367'. [ 464.273069][T11144] device wlan1 left promiscuous mode [ 465.696261][T11159] netlink: 'syz.0.2379': attribute type 10 has an invalid length. [ 465.971291][T11165] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2381'. [ 466.245479][T11169] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2382'. [ 466.405385][T11169] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 466.477093][T11169] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2382'. [ 467.466856][T11184] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 467.847369][T11196] netlink: 'syz.4.2392': attribute type 3 has an invalid length. [ 467.932124][T11196] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2392'. [ 468.089709][T11200] device wlan1 left promiscuous mode [ 468.370255][T11204] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2394'. [ 468.431962][T11208] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2397'. [ 468.589909][T11208] netlink: 'syz.1.2397': attribute type 1 has an invalid length. [ 468.699804][T11208] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2397'. [ 468.732199][T11210] netlink: 'syz.3.2396': attribute type 10 has an invalid length. [ 468.949641][T11215] device syzkaller0 entered promiscuous mode [ 471.955365][T11241] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2406'. [ 472.076681][T11241] team0: Port device bond0 removed [ 472.095233][T11241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 472.124136][T11241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 472.148096][T11241] bond0 (unregistering): Released all slaves [ 472.170617][T11247] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2409'. [ 472.182570][T11249] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2411'. [ 472.194447][T11249] netlink: 'syz.5.2411': attribute type 1 has an invalid length. [ 472.222695][T11249] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2411'. [ 472.598773][T11259] netlink: 'syz.5.2414': attribute type 10 has an invalid length. [ 474.482529][T11281] netlink: 'syz.5.2430': attribute type 10 has an invalid length. [ 475.221266][T11282] device syzkaller0 entered promiscuous mode [ 481.019711][T11293] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2424'. [ 481.029098][T11293] netlink: 'syz.5.2424': attribute type 1 has an invalid length. [ 481.037307][T11293] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2424'. [ 481.047030][T11294] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2423'. [ 481.065030][T11315] netlink: 'syz.4.2433': attribute type 10 has an invalid length. [ 481.176257][T11315] team0: Device vxcan1 is of different type [ 481.640450][T11325] netlink: 'syz.3.2435': attribute type 10 has an invalid length. [ 486.552004][T11342] device syzkaller0 entered promiscuous mode [ 487.137296][T11347] device wlan1 entered promiscuous mode [ 487.444346][T11346] netlink: 'syz.4.2442': attribute type 3 has an invalid length. [ 487.479976][T11346] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2442'. [ 489.221344][T11359] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2446'. [ 489.231900][T11361] netlink: 'syz.4.2447': attribute type 10 has an invalid length. [ 489.244918][T11361] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.252282][T11361] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.291493][T11361] bridge0: port 2(bridge_slave_1) entered blocking state [ 489.299064][T11361] bridge0: port 2(bridge_slave_1) entered listening state [ 489.307313][T11361] bridge0: port 1(bridge_slave_0) entered blocking state [ 489.314522][T11361] bridge0: port 1(bridge_slave_0) entered listening state [ 489.355466][T11361] team0: Port device bridge0 added [ 490.077821][T11386] netlink: 'syz.1.2457': attribute type 3 has an invalid length. [ 490.079029][T11394] device wlan1 left promiscuous mode [ 490.402234][T11386] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2457'. [ 490.556644][T11386] device wlan1 entered promiscuous mode [ 491.411410][T11404] device syzkaller0 entered promiscuous mode [ 491.435091][T11413] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2463'. [ 491.635560][T11419] netlink: 'syz.0.2466': attribute type 10 has an invalid length. [ 492.214168][T11435] netlink: 'syz.0.2472': attribute type 3 has an invalid length. [ 492.242710][T11435] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2472'. [ 494.039382][T11427] netlink: 'syz.3.2468': attribute type 10 has an invalid length. [ 494.052679][T11427] team0: Device vxcan1 is of different type [ 494.066731][T11438] device wlan1 left promiscuous mode [ 494.081583][T11441] device wlan1 entered promiscuous mode [ 494.091319][T11453] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2477'. [ 494.614056][T11475] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 494.863966][T11485] netlink: 'syz.1.2489': attribute type 21 has an invalid length. [ 494.902449][T11485] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2489'. [ 494.917621][T11485] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2489'. [ 494.990267][T11489] device syzkaller0 entered promiscuous mode [ 495.186208][T11500] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2492'. [ 497.344724][T11523] netlink: 'syz.3.2501': attribute type 10 has an invalid length. [ 497.611793][T11543] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2507'. [ 497.641080][T11543] netlink: 'syz.5.2507': attribute type 1 has an invalid length. [ 497.684092][T11543] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2507'. [ 498.319823][T11566] device syzkaller0 entered promiscuous mode [ 501.459612][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.466868][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.191834][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2522'. [ 502.200997][T11578] netlink: 'syz.0.2522': attribute type 1 has an invalid length. [ 502.208940][T11578] netlink: 6 bytes leftover after parsing attributes in process `syz.0.2522'. [ 502.328905][T11605] device syzkaller0 entered promiscuous mode [ 504.656421][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 504.664552][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 505.321311][T11634] netlink: 'syz.1.2542': attribute type 10 has an invalid length. [ 505.350085][T11634] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 508.239885][T11637] netlink: 'syz.0.2543': attribute type 2 has an invalid length. [ 508.248634][T11639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2544'. [ 508.258105][T11639] netlink: 'syz.5.2544': attribute type 1 has an invalid length. [ 508.266231][T11639] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2544'. [ 508.545394][T11647] device syzkaller0 entered promiscuous mode [ 510.546533][T11673] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2558'. [ 510.555820][T11673] netlink: 'syz.1.2558': attribute type 1 has an invalid length. [ 510.563562][T11673] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2558'. [ 511.281335][T11703] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2570'. [ 511.339924][T11703] netlink: 'syz.1.2570': attribute type 1 has an invalid length. [ 511.351035][T11703] netlink: 6 bytes leftover after parsing attributes in process `syz.1.2570'. [ 511.507990][T11709] device syzkaller0 entered promiscuous mode [ 514.570306][T11726] device syzkaller0 entered promiscuous mode [ 514.584806][T11747] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2583'. [ 514.594737][T11747] netlink: 'syz.4.2583': attribute type 1 has an invalid length. [ 514.602507][T11747] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2583'. [ 516.408924][T11749] netlink: 'syz.5.2584': attribute type 10 has an invalid length. [ 516.429450][T11749] team0: Port device geneve1 added [ 516.440198][T11763] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2589'. [ 516.763915][T11778] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2597'. [ 516.823609][T11778] netlink: 'syz.3.2597': attribute type 1 has an invalid length. [ 516.895468][T11778] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2597'. [ 517.203619][T11780] device syzkaller0 entered promiscuous mode [ 519.139461][T11809] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2606'. [ 519.525369][T11826] device wlan1 entered promiscuous mode [ 519.594643][T11821] netlink: 'syz.3.2610': attribute type 3 has an invalid length. [ 519.672492][T11821] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2610'. [ 520.024666][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.031996][ C1] bridge0: topology change detected, propagating [ 520.039691][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 520.046960][ C1] bridge0: topology change detected, propagating [ 520.065133][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.300543][ T4292] Bluetooth: hci0: unexpected event 0x1d length: 15 > 5 [ 521.180671][T11854] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2623'. [ 521.501023][T11859] device syzkaller0 entered promiscuous mode [ 521.983763][T11868] device wlan1 left promiscuous mode [ 524.450458][T11870] device wlan1 entered promiscuous mode [ 524.524081][T11876] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2629'. [ 524.547557][T11876] bridge_slave_1: default FDB implementation only supports local addresses [ 524.893585][T11880] netlink: 'syz.0.2630': attribute type 10 has an invalid length. [ 524.947116][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2630'. [ 524.998741][T11880] device team0 entered promiscuous mode [ 525.046987][T11880] device team_slave_0 entered promiscuous mode [ 525.066566][T11880] device team_slave_1 entered promiscuous mode [ 525.125485][T11880] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 525.468164][ T4292] Bluetooth: hci5: unexpected event 0x1d length: 15 > 5 [ 525.949230][T11902] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2638'. [ 526.517783][T11909] device syzkaller0 entered promiscuous mode [ 528.989396][T11942] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2653'. [ 529.518881][T11959] netlink: 'syz.1.2660': attribute type 10 has an invalid length. [ 529.556517][T11956] netlink: 'syz.5.2659': attribute type 3 has an invalid length. [ 529.570292][T11959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2660'. [ 529.571569][T11956] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2659'. [ 529.597568][T11959] device team0 entered promiscuous mode [ 529.633651][T11959] device team_slave_0 entered promiscuous mode [ 529.649568][T11959] device team_slave_1 entered promiscuous mode [ 529.702571][T11959] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 529.731542][T11964] device wlan1 left promiscuous mode [ 529.772325][T11956] device wlan1 entered promiscuous mode [ 530.259750][T11977] device syzkaller0 entered promiscuous mode [ 530.314274][T11974] netlink: 188 bytes leftover after parsing attributes in process `syz.0.2666'. [ 534.048415][T11998] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.2674'. [ 534.057671][T11998] bridge_slave_1: default FDB implementation only supports local addresses [ 534.066633][T12002] netlink: 'syz.4.2675': attribute type 10 has an invalid length. [ 534.085100][T12002] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2675'. [ 534.094505][T12002] device team0 entered promiscuous mode [ 534.111716][T12002] device team_slave_0 entered promiscuous mode [ 534.136168][T12002] device team_slave_1 entered promiscuous mode [ 534.142567][T12002] device bridge0 entered promiscuous mode [ 534.176109][T12002] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 534.558821][T12016] device wlan1 left promiscuous mode [ 534.584056][T12011] netlink: 'syz.5.2679': attribute type 3 has an invalid length. [ 534.596055][T12011] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2679'. [ 534.644349][T12017] device wlan1 entered promiscuous mode [ 534.651341][T12018] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2680'. [ 535.085728][T12031] device syzkaller0 entered promiscuous mode [ 537.207749][T12046] netlink: 'syz.3.2690': attribute type 10 has an invalid length. [ 537.220322][T12046] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2690'. [ 537.229410][T12046] device team0 entered promiscuous mode [ 537.235100][T12046] device team_slave_0 entered promiscuous mode [ 537.241339][T12046] device team_slave_1 entered promiscuous mode [ 537.248299][T12046] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 537.267443][T12055] device wlan1 left promiscuous mode [ 537.303358][T12059] device wlan1 entered promiscuous mode [ 537.533520][T12068] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2697'. [ 538.187047][T12089] device syzkaller0 entered promiscuous mode [ 538.600916][T12099] netlink: 'syz.3.2712': attribute type 3 has an invalid length. [ 538.614772][T12099] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2712'. [ 540.571054][T12103] device wlan1 left promiscuous mode [ 540.581158][T12108] device wlan1 entered promiscuous mode [ 540.588076][T12118] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2716'. [ 541.500704][T12160] device syzkaller0 entered promiscuous mode [ 541.537534][T12162] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2736'. [ 541.759742][T12169] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2738'. [ 543.377451][ T4292] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 543.386455][ T4292] Bluetooth: hci4: Injecting HCI hardware error event [ 543.402405][ T4292] Bluetooth: hci4: hardware error 0x00 [ 543.770161][T12194] delete_channel: no stack [ 544.086077][T12203] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2752'. [ 544.641675][T12224] device syzkaller0 entered promiscuous mode [ 545.455167][ T4292] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 547.680232][T12233] netlink: 'syz.4.2762': attribute type 10 has an invalid length. [ 547.716194][T12233] nr0: port 1(hsr0) entered disabled state [ 547.735994][T12233] nr0: port 1(hsr0) entered disabled state [ 547.755428][T12233] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 547.769712][T12233] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 547.780361][T12233] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 547.793372][T12233] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 550.001453][T12249] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2767'. [ 550.856257][T12282] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2783'. [ 551.163365][T12280] syz.0.2781 (12280) used obsolete PPPIOCDETACH ioctl [ 552.123284][T12323] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2798'. [ 552.235613][T12331] netlink: 'syz.1.2799': attribute type 21 has an invalid length. [ 552.317924][T12331] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2799'. [ 552.378626][T12331] netlink: 'syz.1.2799': attribute type 10 has an invalid length. [ 552.415904][T12331] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2799'. [ 553.363750][T12361] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2813'. [ 554.419443][T12392] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2828'. [ 554.442598][T12385] netlink: 'syz.5.2823': attribute type 21 has an invalid length. [ 554.460492][T12385] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2823'. [ 554.514739][T12389] netlink: 'syz.5.2823': attribute type 10 has an invalid length. [ 554.534702][T12389] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2823'. [ 555.208751][T12419] netlink: 188 bytes leftover after parsing attributes in process `syz.5.2841'. [ 556.008851][T12456] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2858'. [ 556.544102][T12478] delete_channel: no stack [ 556.780482][T12494] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2875'. [ 557.592253][T12527] netlink: 188 bytes leftover after parsing attributes in process `syz.1.2890'. [ 558.719931][T12565] device syzkaller0 entered promiscuous mode [ 559.830304][T12191] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 559.859975][T12191] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 559.875009][T12191] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 559.884071][T12191] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 559.891920][T12191] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 559.900040][T12191] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 560.940140][T12573] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 561.115526][ T2909] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.237465][ T2909] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.272886][T12600] netlink: 22 bytes leftover after parsing attributes in process `syz.0.2918'. [ 561.340376][ T2909] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.431636][ T2909] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.844028][T12590] chnl_net:caif_netlink_parms(): no params data found [ 561.925231][T12625] device syzkaller0 entered promiscuous mode [ 562.014988][ T4292] Bluetooth: hci1: command 0x0409 tx timeout [ 562.902221][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.908643][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.097038][ T4292] Bluetooth: hci1: command 0x041b tx timeout [ 564.201235][T12642] netlink: 'syz.3.2933': attribute type 10 has an invalid length. [ 564.214137][T12642] device geneve1 entered promiscuous mode [ 564.230695][T12642] team0: Port device geneve1 added [ 564.255071][T12652] netlink: 'syz.3.2933': attribute type 27 has an invalid length. [ 564.263048][T12652] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2933'. [ 564.315724][T12652] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 564.641716][T12590] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.652780][T12590] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.663033][T12590] device bridge_slave_0 entered promiscuous mode [ 564.731831][T12590] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.745769][T12590] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.775919][T12590] device bridge_slave_1 entered promiscuous mode [ 564.888261][T12682] netlink: 'syz.1.2943': attribute type 2 has an invalid length. [ 564.911445][T12682] netlink: 'syz.1.2943': attribute type 8 has an invalid length. [ 564.934684][T12682] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2943'. [ 564.987873][T12590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 566.174789][ T4292] Bluetooth: hci1: command 0x040f tx timeout [ 567.927450][T12590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 568.017703][T12697] device syzkaller0 entered promiscuous mode [ 568.257835][ T4292] Bluetooth: hci1: command 0x0419 tx timeout [ 569.831675][T12590] team0: Port device team_slave_0 added [ 569.915999][T12590] team0: Port device team_slave_1 added [ 570.027812][T12590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 570.054918][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.194622][T12590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 570.411894][T12590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 570.419344][T12590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 570.528699][T12738] netlink: 'syz.1.2957': attribute type 3 has an invalid length. [ 570.541154][T12738] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2957'. [ 570.543764][T12590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 570.585667][T12740] netlink: 'syz.3.2956': attribute type 2 has an invalid length. [ 570.593472][T12740] netlink: 'syz.3.2956': attribute type 8 has an invalid length. [ 570.630158][T12740] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2956'. [ 570.660653][T12743] netlink: 'syz.3.2956': attribute type 2 has an invalid length. [ 570.724315][T12743] netlink: 'syz.3.2956': attribute type 8 has an invalid length. [ 570.765277][T12743] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2956'. [ 570.792967][T12746] device wlan1 left promiscuous mode [ 570.827705][T12748] device wlan1 entered promiscuous mode [ 570.862111][ T2909] device dummy0 left promiscuous mode [ 570.879573][ T2909] : port 1(dummy0) entered disabled state [ 570.950329][ T2909] device hsr_slave_0 left promiscuous mode [ 571.019113][ T2909] device hsr_slave_1 left promiscuous mode [ 571.060655][ T2909] device bridge_slave_1 left promiscuous mode [ 571.068208][ T2909] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.216385][ T2909] device bridge_slave_0 left promiscuous mode [ 571.222849][ T2909] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.039824][ T2909] device veth1_macvtap left promiscuous mode [ 574.046234][ T2909] device veth0_macvtap left promiscuous mode [ 574.555079][ T2909] device team_slave_1 left promiscuous mode [ 574.563091][ T2909] team0 (unregistering): Port device team_slave_1 removed [ 574.601239][ T2909] device team_slave_0 left promiscuous mode [ 574.609228][ T2909] team0 (unregistering): Port device team_slave_0 removed [ 574.645358][ T2909] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.684466][ T2909] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.902347][ T2909] device bridge0 left promiscuous mode [ 574.908665][ T2909] team0 (unregistering): Port device bridge0 removed [ 574.937413][ T2909] bond0 (unregistering): Released all slaves [ 575.027016][T12590] device hsr_slave_0 entered promiscuous mode [ 575.034188][T12590] device hsr_slave_1 entered promiscuous mode [ 575.041537][T12590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.049469][T12590] Cannot create hsr debugfs directory [ 575.105028][T12769] device syzkaller0 entered promiscuous mode [ 575.850240][T12807] netlink: 'syz.1.2972': attribute type 3 has an invalid length. [ 575.861807][T12807] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2972'. [ 577.369799][T12811] device wlan1 left promiscuous mode [ 577.402630][T12812] device wlan1 entered promiscuous mode [ 577.420691][T12818] device sit0 entered promiscuous mode [ 578.781193][T12848] netlink: 'syz.3.2985': attribute type 10 has an invalid length. [ 579.099947][T12859] device wlan1 left promiscuous mode [ 579.138292][T12857] netlink: 'syz.5.2987': attribute type 3 has an invalid length. [ 579.149365][T12857] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2987'. [ 579.260041][T12860] device sit0 entered promiscuous mode [ 579.302966][T12867] device wlan1 entered promiscuous mode [ 579.376889][T12855] device syzkaller0 entered promiscuous mode [ 581.589323][T12903] netlink: 'syz.3.2998': attribute type 10 has an invalid length. [ 581.620826][T12590] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 581.643523][T12590] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 581.679381][T12590] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 581.721723][T12590] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 581.968144][T12912] device wlan1 left promiscuous mode [ 582.024906][T12907] netlink: 'syz.5.2999': attribute type 3 has an invalid length. [ 582.033758][T12907] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2999'. [ 582.101808][T12911] device wlan1 entered promiscuous mode [ 582.180639][T12590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.223290][T12590] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.253448][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 582.276346][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 582.308323][T12919] netlink: 'syz.3.3003': attribute type 2 has an invalid length. [ 582.327309][T12919] netlink: 'syz.3.3003': attribute type 8 has an invalid length. [ 582.354650][T12919] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3003'. [ 582.401876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 582.411326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 582.528933][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.536190][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.566884][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 582.588143][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 582.601281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.608493][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.715175][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 582.765054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 582.793419][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 582.818905][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 582.848315][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 582.930752][T12933] device syzkaller0 entered promiscuous mode [ 583.024898][T12590] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 583.040243][T12951] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.3012'. [ 583.055204][T12590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 583.079641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 583.091402][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 583.118156][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 583.137931][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 583.157938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 583.180886][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 583.201019][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 583.302897][T12941] netlink: 'syz.5.3011': attribute type 10 has an invalid length. [ 583.357631][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 584.242586][T12972] netlink: 'syz.5.3016': attribute type 3 has an invalid length. [ 584.253812][T12972] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.3016'. [ 585.221435][T12973] device wlan1 left promiscuous mode [ 585.235179][T12974] device wlan1 entered promiscuous mode [ 586.214288][T13003] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3023'. [ 587.318622][T13003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 587.399169][T13003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.447276][T13003] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 587.476437][T13003] bond0 (unregistering): Released all slaves [ 587.531128][T13006] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3023'. [ 587.748040][T13006] device team_slave_0 left promiscuous mode [ 587.760260][T13006] team0: Port device team_slave_0 removed [ 587.889525][T13009] netlink: 'syz.3.3024': attribute type 10 has an invalid length. [ 588.006074][T12590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.034257][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 588.053777][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 588.678456][T13035] netlink: 'syz.3.3028': attribute type 3 has an invalid length. [ 588.692181][T13035] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.3028'. [ 588.708361][T13023] device syzkaller0 entered promiscuous mode [ 588.868511][T13039] device wlan1 left promiscuous mode [ 588.886622][T13035] device wlan1 entered promiscuous mode [ 590.974988][T13061] netlink: 'syz.3.3032': attribute type 2 has an invalid length. [ 590.982801][T13061] netlink: 'syz.3.3032': attribute type 8 has an invalid length. [ 591.014679][T13061] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3032'. [ 591.224168][T13085] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3033'. [ 591.719035][T13102] netlink: 'syz.3.3037': attribute type 10 has an invalid length. [ 591.721765][T13109] netlink: 16399 bytes leftover after parsing attributes in process `syz.5.3039'. [ 591.773635][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 591.795418][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 591.921537][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 591.933544][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 591.975906][T12590] device veth0_vlan entered promiscuous mode [ 591.988242][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 592.035509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 592.050447][T12590] device veth1_vlan entered promiscuous mode [ 592.186163][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 592.217099][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 592.248748][T12590] device veth0_macvtap entered promiscuous mode [ 592.302160][T12590] device veth1_macvtap entered promiscuous mode [ 592.466722][T12590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 592.474200][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 592.508671][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 592.545052][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 592.573940][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 592.601564][T13131] netlink: 'syz.5.3044': attribute type 2 has an invalid length. [ 592.610167][T13131] netlink: 'syz.5.3044': attribute type 8 has an invalid length. [ 592.619566][T13131] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3044'. [ 592.681196][T13132] device syzkaller0 entered promiscuous mode [ 592.702926][T12590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 592.757359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 592.779100][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 592.815511][T12590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.824265][T12590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.879922][T12590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 592.898893][T12590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.474317][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.518294][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.528628][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 595.561777][T13177] netlink: 'syz.5.3055': attribute type 10 has an invalid length. [ 595.746661][T11446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.796975][T11446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.853861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 597.669897][ T9] tipc: Subscription rejected, illegal request [ 597.776718][T12191] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 597.788350][T12191] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 597.797469][T12191] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 597.806801][T12191] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 597.815016][T12191] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 597.822733][T12191] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 597.875153][T13216] netlink: 'syz.0.3067': attribute type 2 has an invalid length. [ 597.886753][T13216] netlink: 'syz.0.3067': attribute type 8 has an invalid length. [ 597.954599][T13216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3067'. [ 598.107717][T11446] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.221299][T13221] netlink: 'syz.1.3069': attribute type 10 has an invalid length. [ 598.341599][T11446] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.622213][T11446] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.709019][T11446] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.779486][T13255] netlink: 'syz.1.3080': attribute type 2 has an invalid length. [ 599.810474][T13255] netlink: 'syz.1.3080': attribute type 8 has an invalid length. [ 599.854847][ T4292] Bluetooth: hci2: command 0x0409 tx timeout [ 599.866590][T13255] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3080'. [ 599.928488][T13213] chnl_net:caif_netlink_parms(): no params data found [ 600.938707][T13213] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.998671][T13213] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.035605][T13213] device bridge_slave_0 entered promiscuous mode [ 601.160212][T13213] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.196334][T13213] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.236690][T13213] device bridge_slave_1 entered promiscuous mode [ 601.339856][ T2909] tipc: Subscription rejected, illegal request [ 601.694332][T13213] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 601.934999][ T4292] Bluetooth: hci2: command 0x041b tx timeout [ 602.082271][T13213] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 602.169816][T11446] device dummy0 left promiscuous mode [ 602.227089][T11446] : port 1(dummy0) entered disabled state [ 602.239864][T11446] device hsr0 left promiscuous mode [ 602.292891][T11446] nr0: port 1(hsr0) entered disabled state [ 602.458914][T11446] device hsr_slave_0 left promiscuous mode [ 602.496149][T11446] device hsr_slave_1 left promiscuous mode [ 602.693053][T11446] device veth1_macvtap left promiscuous mode [ 602.771912][T11446] device veth0_macvtap left promiscuous mode [ 604.019745][ T4292] Bluetooth: hci2: command 0x040f tx timeout [ 604.027100][T11446] device geneve1 left promiscuous mode [ 604.036569][T11446] team0 (unregistering): Port device geneve1 removed [ 604.298591][T11446] device team_slave_1 left promiscuous mode [ 604.305481][T11446] team0 (unregistering): Port device team_slave_1 removed [ 604.343183][T11446] device team_slave_0 left promiscuous mode [ 604.349932][T11446] team0 (unregistering): Port device team_slave_0 removed [ 604.683617][T13297] netlink: 'syz.5.3088': attribute type 10 has an invalid length. [ 604.691831][T13300] netlink: 'syz.1.3089': attribute type 46 has an invalid length. [ 604.705920][T13302] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3089'. [ 604.772513][T13213] team0: Port device team_slave_0 added [ 604.945075][T13213] team0: Port device team_slave_1 added [ 605.095524][T13315] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3094'. [ 605.144633][T13315] bridge_slave_1: default FDB implementation only supports local addresses [ 605.154120][T13213] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 605.163442][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.259093][T13213] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 605.297928][T13213] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 605.305270][T13213] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 605.342604][T13213] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 605.509463][ T4330] tipc: Subscription rejected, illegal request [ 605.544642][T13213] device hsr_slave_0 entered promiscuous mode [ 605.570992][T13213] device hsr_slave_1 entered promiscuous mode [ 605.587434][T13213] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 605.595918][T13213] Cannot create hsr debugfs directory [ 606.094607][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 606.264278][T13340] netlink: 'syz.5.3101': attribute type 10 has an invalid length. [ 607.049406][T13353] netlink: 'syz.5.3101': attribute type 27 has an invalid length. [ 607.097039][T13353] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3101'. [ 607.125120][T13353] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 607.817343][ T4391] tipc: Subscription rejected, illegal request [ 607.986981][T13384] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3115'. [ 608.087896][T13213] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 608.180939][T13213] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 608.222472][T13213] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 608.243329][T13213] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 608.876331][T13407] netlink: 65047 bytes leftover after parsing attributes in process `syz.5.3122'. [ 611.499325][T13213] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.507387][T13397] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3120'. [ 611.555558][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 611.568959][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 611.591571][T13213] 8021q: adding VLAN 0 to HW filter on device team0 [ 611.627414][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 611.638254][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 611.648779][ T4330] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.655968][ T4330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 611.736376][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 611.769229][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 611.808400][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 611.825484][ T4330] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.833431][ T4330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 611.869449][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 611.896167][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 611.936641][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 611.965956][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 611.983698][T13430] netlink: 'syz.0.3125': attribute type 46 has an invalid length. [ 612.044744][T13438] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3125'. [ 612.727612][T13438] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.774769][T13438] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.800306][T13438] bond0 (unregistering): Released all slaves [ 612.842037][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 612.855557][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 612.919106][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 612.963835][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 612.993016][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 613.039534][T13213] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 613.079784][T13213] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 613.111187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 613.134150][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 613.239187][T13465] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3140'. [ 613.397935][T13477] netlink: 'syz.4.3133': attribute type 10 has an invalid length. [ 613.747971][T13477] team0: Port device geneve1 added [ 613.800959][T13491] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.3135'. [ 614.281556][T13477] netlink: 'syz.4.3133': attribute type 27 has an invalid length. [ 614.302873][T13477] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3133'. [ 614.325157][T13477] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 616.611294][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 616.622624][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.661228][T13213] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 616.739954][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 616.762295][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 616.831630][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 616.874300][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 616.891626][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 616.911581][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 616.957053][T13213] device veth0_vlan entered promiscuous mode [ 617.015147][T13213] device veth1_vlan entered promiscuous mode [ 617.071397][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 617.090039][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 617.099911][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 617.111328][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 617.123897][T13213] device veth0_macvtap entered promiscuous mode [ 617.161947][T13213] device veth1_macvtap entered promiscuous mode [ 617.210624][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.265191][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.301137][T13213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.326415][T13520] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3146'. [ 617.414486][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 617.443452][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 617.473545][T13525] netlink: 'syz.5.3148': attribute type 29 has an invalid length. [ 617.492733][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 617.555105][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 617.608347][T13213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.632102][T13213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.674292][T13213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.690253][T13213] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.699300][T13213] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.708226][T13213] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.717860][T13213] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.748970][T13525] netlink: 'syz.5.3148': attribute type 29 has an invalid length. [ 617.764714][T13527] netlink: 'syz.5.3148': attribute type 29 has an invalid length. [ 617.778994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 617.792208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 618.366356][T13542] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.3153'. [ 620.846011][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 620.854075][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.892735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 620.972641][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 621.000513][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 621.043140][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 621.056551][T13550] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.3158'. [ 621.673223][T13561] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3161'. [ 624.581508][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.588013][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.483545][T12191] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 625.496009][T12191] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 625.504266][T12191] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 625.512927][T12191] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 625.520835][T12191] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 625.530610][T12191] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 626.018936][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.040435][T13596] : port 1(dummy0) entered blocking state [ 626.049141][T13596] : port 1(dummy0) entered disabled state [ 626.059021][T13596] device dummy0 entered promiscuous mode [ 626.288819][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.398630][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.455781][T13613] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3174'. [ 626.539709][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.219212][T13588] chnl_net:caif_netlink_parms(): no params data found [ 627.614856][T12191] Bluetooth: hci3: command 0x0409 tx timeout [ 627.708464][T13649] netlink: 'syz.5.3184': attribute type 10 has an invalid length. [ 627.725010][T13649] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3184'. [ 627.738386][T13588] bridge0: port 1(bridge_slave_0) entered blocking state [ 627.753905][T13588] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.764366][T13588] device bridge_slave_0 entered promiscuous mode [ 627.824801][T13588] bridge0: port 2(bridge_slave_1) entered blocking state [ 627.860588][T13588] bridge0: port 2(bridge_slave_1) entered disabled state [ 627.887375][T13588] device bridge_slave_1 entered promiscuous mode [ 628.088419][T13588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.268060][T13588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.300347][T13671] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3190'. [ 628.548418][T13588] team0: Port device team_slave_0 added [ 628.564886][T13588] team0: Port device team_slave_1 added [ 628.698163][T13588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.727798][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.812503][T13588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.983086][T13588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.997447][T13588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.027837][T13588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.066162][T13695] : port 1(dummy0) entered blocking state [ 629.072097][T13695] : port 1(dummy0) entered disabled state [ 629.093192][T13695] device dummy0 entered promiscuous mode [ 629.116850][T13693] netlink: 'syz.4.3199': attribute type 10 has an invalid length. [ 629.127168][T13693] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3199'. [ 629.363159][T13588] device hsr_slave_0 entered promiscuous mode [ 629.399070][T13588] device hsr_slave_1 entered promiscuous mode [ 629.434327][T13588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.475077][T13588] Cannot create hsr debugfs directory [ 629.480804][ T9] device dummy0 left promiscuous mode [ 629.486750][ T9] : port 1(dummy0) entered disabled state [ 629.496654][ T9] device hsr0 left promiscuous mode [ 629.517059][ T9] nr0: port 1(hsr0) entered disabled state [ 629.537471][ T9] device hsr_slave_0 left promiscuous mode [ 629.694702][T12191] Bluetooth: hci3: command 0x041b tx timeout [ 629.726883][ T9] device hsr_slave_1 left promiscuous mode [ 629.757147][ T9] device veth1_macvtap left promiscuous mode [ 629.772210][ T9] device veth0_macvtap left promiscuous mode [ 630.597124][ T9] device team_slave_1 left promiscuous mode [ 630.609904][ T9] team0 (unregistering): Port device team_slave_1 removed [ 630.951863][T13714] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3204'. [ 630.962101][T13722] netlink: 'syz.3.3207': attribute type 2 has an invalid length. [ 630.970409][T13722] netlink: 'syz.3.3207': attribute type 8 has an invalid length. [ 630.979782][T13722] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3207'. [ 631.009053][T13725] netlink: 'syz.3.3207': attribute type 2 has an invalid length. [ 631.031862][T13725] netlink: 'syz.3.3207': attribute type 8 has an invalid length. [ 631.051513][T13725] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3207'. [ 631.774755][T12191] Bluetooth: hci3: command 0x040f tx timeout [ 632.061501][T13756] netlink: 'syz.0.3213': attribute type 10 has an invalid length. [ 632.083709][T13756] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3213'. [ 632.268303][T13767] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3218'. [ 632.416912][T13772] netlink: 'syz.3.3219': attribute type 2 has an invalid length. [ 632.438500][T13772] netlink: 'syz.3.3219': attribute type 8 has an invalid length. [ 632.460251][T13772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3219'. [ 632.552469][T13775] netlink: 'syz.3.3219': attribute type 2 has an invalid length. [ 632.581800][T13775] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3219'. [ 632.812934][T13588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 632.885078][T13588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 632.910246][T13588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 632.938267][T13787] validate_nla: 1 callbacks suppressed [ 632.938282][T13787] netlink: 'syz.4.3224': attribute type 29 has an invalid length. [ 632.971309][T13787] netlink: 'syz.4.3224': attribute type 29 has an invalid length. [ 633.000288][T13588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 633.025231][T13791] netlink: 'syz.4.3224': attribute type 29 has an invalid length. [ 633.065019][T13787] netlink: 'syz.4.3224': attribute type 29 has an invalid length. [ 633.112383][T13791] netlink: 'syz.4.3224': attribute type 29 has an invalid length. [ 633.368342][T13588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.435325][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.443319][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.477099][T13588] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.495614][T13803] netlink: 'syz.5.3229': attribute type 10 has an invalid length. [ 633.524212][T13803] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3229'. [ 633.546420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.556525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.574256][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.581508][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.590337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 633.599663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 633.609894][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.617097][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 633.702326][T13807] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3231'. [ 633.736362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 633.754489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 633.781219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 633.796984][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 633.823425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 633.834307][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 633.854747][T12191] Bluetooth: hci3: command 0x0419 tx timeout [ 633.862534][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 633.919946][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 633.950781][T13814] netlink: 'syz.4.3232': attribute type 2 has an invalid length. [ 633.965204][T13814] netlink: 'syz.4.3232': attribute type 8 has an invalid length. [ 633.981677][T13814] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3232'. [ 634.094225][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.121009][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.154683][T13815] netlink: 'syz.4.3232': attribute type 2 has an invalid length. [ 634.205751][T13815] netlink: 'syz.4.3232': attribute type 8 has an invalid length. [ 634.213700][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3232'. [ 634.238512][T13588] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.256023][T13588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.268674][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.308415][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 635.814812][T13844] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3242'. [ 636.194729][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 636.263359][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 636.306533][T13588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.448046][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 636.489954][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 636.589552][T13850] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3244'. [ 636.658835][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 636.690814][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 636.725615][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 636.761034][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 636.786580][T13588] device veth0_vlan entered promiscuous mode [ 636.863922][T13588] device veth1_vlan entered promiscuous mode [ 636.995775][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.019372][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.055765][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.120190][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.176458][T13588] device veth0_macvtap entered promiscuous mode [ 637.241002][T13588] device veth1_macvtap entered promiscuous mode [ 637.357783][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.464687][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.553702][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 637.636331][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 637.741245][T13588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.824817][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 637.834180][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 637.905307][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 637.986566][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.112696][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.154682][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.184268][T13588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.244777][T13588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.291972][T13588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.320149][T13880] validate_nla: 5 callbacks suppressed [ 638.320166][T13880] netlink: 'syz.5.3253': attribute type 10 has an invalid length. [ 638.364119][T13880] __nla_validate_parse: 2 callbacks suppressed [ 638.364139][T13880] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3253'. [ 638.423383][T13883] netlink: 'syz.0.3254': attribute type 10 has an invalid length. [ 638.436333][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.454170][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.507138][T13588] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.537017][T13588] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.578108][T13588] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.608956][T13588] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 640.021546][T13901] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3257'. [ 640.058330][T13913] netlink: 'syz.0.3259': attribute type 2 has an invalid length. [ 640.078457][T13913] netlink: 'syz.0.3259': attribute type 8 has an invalid length. [ 640.106649][T13913] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3259'. [ 640.126560][T13915] netlink: 'syz.0.3259': attribute type 2 has an invalid length. [ 640.152509][T13915] netlink: 'syz.0.3259': attribute type 8 has an invalid length. [ 640.182893][T13915] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3259'. [ 640.370066][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.418828][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.450906][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 640.515447][ T4391] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 640.523388][ T4391] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 640.581113][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 640.764789][T13942] netlink: 'syz.4.3265': attribute type 10 has an invalid length. [ 640.804679][T13942] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3265'. [ 640.931506][T13947] netlink: 'syz.1.3165': attribute type 29 has an invalid length. [ 640.985141][T13947] netlink: 'syz.1.3165': attribute type 29 has an invalid length. [ 641.072214][T13946] netlink: 'syz.1.3165': attribute type 29 has an invalid length. [ 641.976951][T13966] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3270'. [ 642.485457][ T4292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 642.497772][ T4292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 642.511180][ T4292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 642.522279][ T4292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 642.540254][ T4292] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 642.548031][ T4292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 642.597676][ T39] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.829851][ T39] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.919464][T13993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3279'. [ 642.950243][T13993] : port 1(dummy0) entered disabled state [ 642.980486][T13993] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 643.060640][ T39] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.298544][ T39] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.502347][T14009] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3285'. [ 643.855856][T14022] validate_nla: 2 callbacks suppressed [ 643.855873][T14022] netlink: 'syz.3.3287': attribute type 29 has an invalid length. [ 643.982063][T13979] chnl_net:caif_netlink_parms(): no params data found [ 644.067998][T14022] netlink: 'syz.3.3287': attribute type 29 has an invalid length. [ 644.333207][T14020] netlink: 'syz.3.3287': attribute type 29 has an invalid length. [ 644.574724][ T4292] Bluetooth: hci0: command 0x0409 tx timeout [ 644.858396][T13979] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.877768][T13979] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.887397][T13979] device bridge_slave_0 entered promiscuous mode [ 644.944286][T13979] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.954060][T13979] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.999818][T13979] device bridge_slave_1 entered promiscuous mode [ 645.257187][T13979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.399891][T13979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.523940][T14063] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3299'. [ 645.555356][T14065] device sit0 entered promiscuous mode [ 645.601591][T14067] netlink: 'syz.0.3300': attribute type 10 has an invalid length. [ 645.727702][T13979] team0: Port device team_slave_0 added [ 645.829807][T14077] netlink: 'syz.4.3302': attribute type 29 has an invalid length. [ 645.887518][T13979] team0: Port device team_slave_1 added [ 645.893619][T14077] netlink: 'syz.4.3302': attribute type 29 has an invalid length. [ 645.957514][T14081] delete_channel: no stack [ 646.125284][T14079] netlink: 'syz.4.3302': attribute type 29 has an invalid length. [ 646.249952][T13979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 646.273245][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.379493][T13979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 646.463814][T13979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.480980][T13979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 646.591872][T13979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 646.654627][ T4292] Bluetooth: hci0: command 0x041b tx timeout [ 646.875697][T14115] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 646.908002][T14111] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3311'. [ 647.078543][T14115] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 647.104799][T14116] netlink: 'syz.1.3312': attribute type 29 has an invalid length. [ 647.128350][T13979] device hsr_slave_0 entered promiscuous mode [ 647.149825][T13979] device hsr_slave_1 entered promiscuous mode [ 647.735531][T14134] device veth0_vlan left promiscuous mode [ 647.778761][T14134] device veth0_vlan entered promiscuous mode [ 647.796354][T14134] team0: Device veth0_vlan failed to register rx_handler [ 647.912396][ T39] device dummy0 left promiscuous mode [ 647.919536][ T39] : port 1(dummy0) entered disabled state [ 647.929783][ T39] device hsr0 left promiscuous mode [ 647.938707][ T39] nr0: port 1(hsr0) entered disabled state [ 647.949308][ T39] device hsr_slave_0 left promiscuous mode [ 647.956534][ T39] device hsr_slave_1 left promiscuous mode [ 647.963560][ T39] device bridge_slave_1 left promiscuous mode [ 647.970564][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 647.981041][ T39] device bridge_slave_0 left promiscuous mode [ 647.987789][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.029818][ T39] device veth1_macvtap left promiscuous mode [ 648.036053][ T39] device veth0_macvtap left promiscuous mode [ 648.393603][ T39] team0 (unregistering): Port device geneve1 removed [ 648.734667][ T4292] Bluetooth: hci0: command 0x040f tx timeout [ 648.779695][ T39] team0 (unregistering): Port device team_slave_1 removed [ 648.822067][ T39] team0 (unregistering): Port device team_slave_0 removed [ 649.236581][T14137] : port 1(dummy0) entered blocking state [ 649.242671][T14137] : port 1(dummy0) entered disabled state [ 650.102590][T14180] validate_nla: 3 callbacks suppressed [ 650.102608][T14180] netlink: 'syz.1.3336': attribute type 10 has an invalid length. [ 650.125833][T14180] device veth0_vlan left promiscuous mode [ 650.133366][T14180] device veth0_vlan entered promiscuous mode [ 650.164029][T14180] team0: Device veth0_vlan failed to register rx_handler [ 650.805074][T13979] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 650.814796][ T4292] Bluetooth: hci0: command 0x0419 tx timeout [ 650.868378][T13979] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 650.956162][T13979] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 650.986358][T13979] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 651.071543][T14213] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3346'. [ 651.245348][T13979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 651.293629][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 651.330675][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 651.398683][T13979] 8021q: adding VLAN 0 to HW filter on device team0 [ 651.449946][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 651.506531][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 651.528133][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.535388][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 651.552896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 651.583676][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 651.613309][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 651.685143][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.692390][T11446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 651.792891][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 651.856307][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 651.981493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 652.001181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 652.075816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 652.085437][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 652.136491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 652.195751][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 652.260680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 652.301869][T13979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 652.348995][T13979] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 652.398024][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 652.410340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 652.603487][T14250] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3359'. [ 652.821087][T14256] device syzkaller0 entered promiscuous mode [ 655.596074][T14296] netlink: 'syz.0.3369': attribute type 10 has an invalid length. [ 655.635973][T13979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 655.667608][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 655.678214][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 656.042987][T14309] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3373'. [ 656.800473][T14344] netlink: 'syz.1.3382': attribute type 10 has an invalid length. [ 656.863657][T14344] device veth0_vlan left promiscuous mode [ 656.891888][T14344] device veth0_vlan entered promiscuous mode [ 656.917202][T14344] team0: Device veth0_vlan failed to register rx_handler [ 657.256803][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 657.326233][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 657.466828][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 657.525921][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 657.603361][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 657.616006][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 657.636772][T13979] device veth0_vlan entered promiscuous mode [ 657.729197][T13979] device veth1_vlan entered promiscuous mode [ 657.756900][T14358] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3386'. [ 657.846963][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 657.860322][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 657.870583][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 657.895886][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 657.949972][T13979] device veth0_macvtap entered promiscuous mode [ 658.012753][T13979] device veth1_macvtap entered promiscuous mode [ 658.091215][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.134839][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.182414][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.223552][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.270275][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 658.281951][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.296474][T13979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 658.307030][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 658.338529][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 658.373087][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 658.403844][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 658.456701][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.474418][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.494887][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.512287][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.522616][T13979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 658.541870][T13979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 658.554232][T13979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 658.569025][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 658.581872][T11446] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 658.604868][T13979] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.637959][T13979] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.661505][T13979] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.687927][T13979] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 658.817147][T14384] netlink: 'syz.0.3398': attribute type 10 has an invalid length. [ 659.101579][T14389] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3400'. [ 659.293984][T14395] device syzkaller0 entered promiscuous mode [ 659.363368][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.382776][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.476996][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 661.441045][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 661.478874][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 661.506849][ T2909] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 661.828513][T14426] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3413'. [ 662.438821][T14437] netlink: 'syz.3.3415': attribute type 10 has an invalid length. [ 662.732489][T14437] device veth0_vlan left promiscuous mode [ 662.931023][T14437] device veth0_vlan entered promiscuous mode [ 662.953511][T14437] team0: Device veth0_vlan failed to register rx_handler [ 663.103184][T14439] netlink: 'syz.1.3417': attribute type 2 has an invalid length. [ 663.124700][T14439] netlink: 'syz.1.3417': attribute type 8 has an invalid length. [ 663.136571][T14439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3417'. [ 663.203552][T14441] netlink: 'syz.1.3417': attribute type 2 has an invalid length. [ 663.240650][T14441] netlink: 'syz.1.3417': attribute type 8 has an invalid length. [ 663.250427][T14441] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3417'. [ 663.640230][T14453] device syzkaller0 entered promiscuous mode [ 663.987054][T14467] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3427'. [ 664.050183][ T4292] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 664.061807][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 664.075433][ T4292] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 664.084488][ T4292] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 664.092683][ T4292] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 664.107458][ T4292] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 666.178348][ T4292] Bluetooth: hci4: command 0x0409 tx timeout [ 666.643579][T11446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.787486][T11446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.907645][T11446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.051026][T11446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.251894][T14510] : port 1(dummy0) entered blocking state [ 667.258158][T14510] : port 1(dummy0) entered disabled state [ 667.266022][T14510] device dummy0 entered promiscuous mode [ 667.276473][T14501] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3439'. [ 667.507179][T14513] netlink: 'syz.4.3443': attribute type 10 has an invalid length. [ 667.922919][T14513] device veth0_vlan left promiscuous mode [ 668.050248][T14513] device veth0_vlan entered promiscuous mode [ 668.059497][T14513] team0: Device veth0_vlan failed to register rx_handler [ 668.170756][T14513] syz.4.3443 (14513) used greatest stack depth: 19712 bytes left [ 668.254927][ T4292] Bluetooth: hci4: command 0x041b tx timeout [ 668.269279][T14472] chnl_net:caif_netlink_parms(): no params data found [ 668.413223][T14528] device syzkaller0 entered promiscuous mode [ 670.340039][ T4292] Bluetooth: hci4: command 0x040f tx timeout [ 671.265258][T14558] : port 1(dummy0) entered blocking state [ 671.271238][T14558] : port 1(dummy0) entered disabled state [ 671.279923][T14558] device dummy0 entered promiscuous mode [ 671.293340][T14560] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3456'. [ 671.313924][T14572] netlink: 'syz.4.3458': attribute type 10 has an invalid length. [ 671.326707][T14572] device veth0_vlan left promiscuous mode [ 671.333082][T14572] device veth0_vlan entered promiscuous mode [ 671.342846][T14572] team0: Device veth0_vlan failed to register rx_handler [ 671.391496][T14472] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.399098][T14472] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.408267][T14472] device bridge_slave_0 entered promiscuous mode [ 671.560518][T14472] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.596701][T14472] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.626606][T14472] device bridge_slave_1 entered promiscuous mode [ 671.866263][T14587] device syzkaller0 entered promiscuous mode [ 671.936692][T14472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 672.414816][ T4292] Bluetooth: hci4: command 0x0419 tx timeout [ 674.399446][T14472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.467912][T14620] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3470'. [ 674.582706][T14611] device syzkaller0 entered promiscuous mode [ 676.594702][T14632] netlink: 'syz.4.3471': attribute type 10 has an invalid length. [ 676.602854][T14632] device veth0_vlan left promiscuous mode [ 676.610522][T14632] device veth0_vlan entered promiscuous mode [ 676.619066][T14632] team0: Device veth0_vlan failed to register rx_handler [ 676.671500][T14472] team0: Port device team_slave_0 added [ 676.706968][T14472] team0: Port device team_slave_1 added [ 676.977200][T14472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 676.984204][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.061257][T14472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 677.084077][T14472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 677.120642][T14472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 677.160155][T14472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 677.338630][T14655] device syzkaller0 entered promiscuous mode [ 677.380120][T14661] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3482'. [ 677.617796][T14472] device hsr_slave_0 entered promiscuous mode [ 677.636408][T14472] device hsr_slave_1 entered promiscuous mode [ 677.651940][T14472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 677.659914][T14472] Cannot create hsr debugfs directory [ 680.359025][T14677] netlink: 'syz.1.3488': attribute type 10 has an invalid length. [ 680.368111][T14677] device veth0_vlan left promiscuous mode [ 680.374407][T14677] device veth0_vlan entered promiscuous mode [ 680.382181][T14677] team0: Device veth0_vlan failed to register rx_handler [ 680.417840][T14713] netlink: 188 bytes leftover after parsing attributes in process `syz.5.3495'. [ 680.440603][T11446] : port 1(dummy0) entered disabled state [ 680.471069][T11446] device hsr0 left promiscuous mode [ 680.509450][T11446] nr0: port 1(hsr0) entered disabled state [ 680.561856][T11446] device hsr_slave_0 left promiscuous mode [ 680.576234][T11446] device hsr_slave_1 left promiscuous mode [ 680.687056][T11446] device veth1_macvtap left promiscuous mode [ 680.693171][T11446] device veth0_macvtap left promiscuous mode [ 681.942255][T11446] device team_slave_1 left promiscuous mode [ 681.957242][T11446] team0 (unregistering): Port device team_slave_1 removed [ 682.003616][T11446] device team_slave_0 left promiscuous mode [ 682.012087][T11446] team0 (unregistering): Port device team_slave_0 removed [ 682.571261][T14741] netlink: 'syz.4.3507': attribute type 10 has an invalid length. [ 682.581304][T14741] device veth0_vlan left promiscuous mode [ 682.606812][T14741] device veth0_vlan entered promiscuous mode [ 682.614488][T14741] team0: Device veth0_vlan failed to register rx_handler [ 682.734911][T12191] Bluetooth: hci1: command 0x0406 tx timeout [ 683.537424][T14800] netlink: 'syz.3.3529': attribute type 10 has an invalid length. [ 683.603618][T14800] device veth0_vlan left promiscuous mode [ 683.631585][T14800] device veth0_vlan entered promiscuous mode [ 683.658498][T14800] team0: Device veth0_vlan failed to register rx_handler [ 684.247626][T14806] device syzkaller0 entered promiscuous mode [ 684.267113][ T7] syzkaller0: tun_net_xmit 48 [ 684.601420][T14826] device syzkaller0 entered promiscuous mode [ 685.777068][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.783404][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.167872][T14851] netlink: 'syz.3.3543': attribute type 10 has an invalid length. [ 689.177304][T14851] device veth0_vlan left promiscuous mode [ 689.184221][T14851] device veth0_vlan entered promiscuous mode [ 689.191526][T14851] team0: Device veth0_vlan failed to register rx_handler [ 689.383675][T14877] device syzkaller0 entered promiscuous mode [ 691.540838][T14472] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 691.600984][T14472] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 691.647373][T14472] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 691.692589][T14472] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 691.959084][T14923] device syzkaller0 entered promiscuous mode [ 691.982220][T14921] netlink: 'syz.1.3564': attribute type 10 has an invalid length. [ 692.043344][T14921] device veth0_vlan left promiscuous mode [ 692.557562][T14921] device veth0_vlan entered promiscuous mode [ 692.567126][T14921] team0: Device veth0_vlan failed to register rx_handler [ 692.698672][T14939] netlink: 'syz.5.3568': attribute type 2 has an invalid length. [ 692.714455][T14939] netlink: 'syz.5.3568': attribute type 8 has an invalid length. [ 692.723373][T14939] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3568'. [ 692.763314][T14940] netlink: 'syz.5.3568': attribute type 2 has an invalid length. [ 692.771464][T14940] netlink: 'syz.5.3568': attribute type 8 has an invalid length. [ 692.791522][T14940] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3568'. [ 694.875645][T14472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 694.907069][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 694.923116][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 694.997921][T14472] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.053787][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 695.080051][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 695.099096][ T4335] bridge0: port 1(bridge_slave_0) entered blocking state [ 695.106326][ T4335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 695.175576][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 695.202381][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 695.221719][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 695.241945][ T4335] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.249250][ T4335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 695.308968][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 695.363178][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 695.448011][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 695.495876][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 695.526993][T14981] device syzkaller0 entered promiscuous mode [ 695.543081][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 695.553144][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 695.566430][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 695.576024][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 695.585430][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 695.595769][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 695.620944][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 695.635646][T14472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 695.656510][T14983] netlink: 'syz.5.3582': attribute type 2 has an invalid length. [ 695.669489][T14983] netlink: 'syz.5.3582': attribute type 8 has an invalid length. [ 695.677757][T14983] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3582'. [ 695.757603][T14978] netlink: 'syz.4.3580': attribute type 10 has an invalid length. [ 695.781402][T14978] device veth0_vlan left promiscuous mode [ 696.189554][T14978] device veth0_vlan entered promiscuous mode [ 696.197302][T14978] team0: Device veth0_vlan failed to register rx_handler [ 696.377342][T14984] netlink: 'syz.5.3582': attribute type 2 has an invalid length. [ 696.394578][T14984] netlink: 'syz.5.3582': attribute type 8 has an invalid length. [ 696.433025][T14984] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3582'. [ 696.949812][T15009] device syzkaller0 entered promiscuous mode [ 699.326577][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.334137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.343415][T15042] netlink: 'syz.4.3596': attribute type 2 has an invalid length. [ 699.364096][T15042] netlink: 'syz.4.3596': attribute type 8 has an invalid length. [ 699.374975][T15042] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3596'. [ 699.399983][T15043] netlink: 'syz.1.3595': attribute type 10 has an invalid length. [ 699.415172][T15043] device veth0_vlan left promiscuous mode [ 699.424739][T15043] device veth0_vlan entered promiscuous mode [ 699.447389][T15043] team0: Device veth0_vlan failed to register rx_handler [ 699.489976][T15044] netlink: 'syz.4.3596': attribute type 2 has an invalid length. [ 699.502156][T15044] netlink: 'syz.4.3596': attribute type 8 has an invalid length. [ 699.533929][T15044] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3596'. [ 699.610853][T14472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.768351][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 699.803031][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 699.842856][T14472] device veth0_vlan entered promiscuous mode [ 699.867245][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 699.879484][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 699.906338][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 699.932072][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 699.961495][T14472] device veth1_vlan entered promiscuous mode [ 700.066628][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 700.088781][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 700.114934][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 700.135616][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 700.161997][T14472] device veth0_macvtap entered promiscuous mode [ 700.199833][T14472] device veth1_macvtap entered promiscuous mode [ 700.227847][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.244337][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.276427][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.298246][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.331764][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.343792][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.354895][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 700.366081][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.389201][T14472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 700.410907][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 700.424039][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 700.441839][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 700.491925][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 700.537943][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.568187][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.614430][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.648228][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.679896][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.704745][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.822533][T14472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 700.870917][T14472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 700.914341][T14472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 700.930673][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 700.954378][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 701.010624][T15082] netlink: 'syz.1.3607': attribute type 10 has an invalid length. [ 701.086291][T15082] device veth0_vlan left promiscuous mode [ 701.354985][T15082] device veth0_vlan entered promiscuous mode [ 701.535889][T15082] team0: Device veth0_vlan failed to register rx_handler [ 701.563025][T14472] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.594669][T14472] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.604165][T14472] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.624559][T14472] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.681386][T15082] syz.1.3607 (15082) used greatest stack depth: 19280 bytes left [ 701.714419][T15083] device syzkaller0 entered promiscuous mode [ 701.739544][T15096] netlink: 'syz.4.3608': attribute type 2 has an invalid length. [ 701.754716][T15096] netlink: 'syz.4.3608': attribute type 8 has an invalid length. [ 701.775608][T15096] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3608'. [ 701.793905][T15098] netlink: 'syz.4.3608': attribute type 2 has an invalid length. [ 701.802182][T15098] netlink: 'syz.4.3608': attribute type 8 has an invalid length. [ 701.812290][T15098] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3608'. [ 704.047269][ T4335] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.062057][ T4335] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.138320][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 704.155235][ T4335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 704.175155][ T4335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 704.279352][T15131] device syzkaller0 entered promiscuous mode [ 704.299134][ T4391] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 707.091182][T15164] netlink: 'syz.1.3618': attribute type 10 has an invalid length. [ 707.109897][T15164] device veth0_vlan left promiscuous mode [ 707.125984][T15164] device veth0_vlan entered promiscuous mode [ 707.158073][T15164] team0: Device veth0_vlan failed to register rx_handler [ 707.621806][T15189] netlink: 'syz.1.3634': attribute type 10 has an invalid length. [ 707.658972][T15189] device veth0_vlan left promiscuous mode [ 707.666177][T15189] device veth0_vlan entered promiscuous mode [ 707.674066][T15189] team0: Device veth0_vlan failed to register rx_handler [ 708.865020][T15213] device syzkaller0 entered promiscuous mode [ 708.955987][T15212] device syzkaller0 entered promiscuous mode [ 714.697771][T15240] netlink: 'syz.5.3643': attribute type 10 has an invalid length. [ 714.730104][T15240] device veth0_vlan left promiscuous mode [ 714.772716][T15240] device veth0_vlan entered promiscuous mode [ 714.804893][T15240] team0: Device veth0_vlan failed to register rx_handler [ 716.057238][T15296] device syzkaller0 entered promiscuous mode [ 718.382429][T15322] netlink: 'syz.1.3673': attribute type 10 has an invalid length. [ 718.391417][T15322] device veth0_vlan left promiscuous mode [ 718.425585][T15322] device veth0_vlan entered promiscuous mode [ 718.433250][T15322] team0: Device veth0_vlan failed to register rx_handler [ 719.613464][T15357] device syzkaller0 entered promiscuous mode [ 722.713356][T15367] device syzkaller0 entered promiscuous mode [ 722.724972][T15381] : port 1(dummy0) entered blocking state [ 722.730908][T15381] : port 1(dummy0) entered disabled state [ 722.738491][T15381] device dummy0 entered promiscuous mode [ 723.696239][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 725.963475][T15435] netlink: 'syz.4.3713': attribute type 2 has an invalid length. [ 725.993336][T15435] netlink: 'syz.4.3713': attribute type 8 has an invalid length. [ 726.048928][T15435] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3713'. [ 726.092258][T15438] netlink: 'syz.4.3713': attribute type 2 has an invalid length. [ 726.156392][T15438] netlink: 'syz.4.3713': attribute type 8 has an invalid length. [ 726.200385][T15438] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3713'. [ 726.513356][T15444] device syzkaller0 entered promiscuous mode [ 730.024725][T15488] netlink: 'syz.0.3731': attribute type 2 has an invalid length. [ 730.050141][T15488] netlink: 'syz.0.3731': attribute type 8 has an invalid length. [ 730.081720][T15488] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3731'. [ 730.120562][T15491] netlink: 'syz.0.3731': attribute type 2 has an invalid length. [ 730.147679][T15491] netlink: 'syz.0.3731': attribute type 8 has an invalid length. [ 730.161015][T15491] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3731'. [ 730.909841][T15509] device syzkaller0 entered promiscuous mode [ 732.298186][T15542] [ 732.300851][T15542] ============================= [ 732.306246][T15542] WARNING: suspicious RCU usage [ 732.311172][T15542] syzkaller #0 Not tainted [ 732.315673][T15542] ----------------------------- [ 732.321094][T15542] kernel/events/callchain.c:161 suspicious rcu_dereference_check() usage! [ 732.329808][T15542] [ 732.329808][T15542] other info that might help us debug this: [ 732.329808][T15542] [ 732.340440][T15542] [ 732.340440][T15542] rcu_scheduler_active = 2, debug_locks = 1 [ 732.348605][T15542] 1 lock held by syz.1.3753/15542: [ 732.353737][T15542] #0: ffffffff8cb2d960 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x37/0x70 [ 732.364098][T15542] [ 732.364098][T15542] stack backtrace: [ 732.370068][T15542] CPU: 1 PID: 15542 Comm: syz.1.3753 Not tainted syzkaller #0 [ 732.377554][T15542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 732.387658][T15542] Call Trace: [ 732.391087][T15542] [ 732.394100][T15542] dump_stack_lvl+0x188/0x24e [ 732.398992][T15542] ? show_regs_print_info+0x12/0x12 [ 732.404374][T15542] ? load_image+0x410/0x410 [ 732.408910][T15542] ? __lock_acquire+0x138a/0x7c40 [ 732.414004][T15542] lockdep_rcu_suspicious+0x1dd/0x300 [ 732.419417][T15542] get_callchain_entry+0x2a5/0x3b0 [ 732.424608][T15542] get_perf_callchain+0xc4/0x490 [ 732.429589][T15542] ? put_callchain_entry+0xb0/0xb0 [ 732.434727][T15542] ? preempt_schedule_common+0xa5/0xd0 [ 732.440278][T15542] ? verify_lock_unused+0x140/0x140 [ 732.445491][T15542] ? preempt_schedule+0xbc/0xd0 [ 732.450380][T15542] __bpf_get_stack+0x2de/0x520 [ 732.455207][T15542] ? stack_map_get_build_id_offset+0x9d0/0x9d0 [ 732.461385][T15542] ? __cant_sleep+0x220/0x220 [ 732.466109][T15542] ? bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 732.471772][T15542] bpf_get_stack_raw_tp+0x189/0x1c0 [ 732.477074][T15542] bpf_prog_14d9fb3786f83342+0x3d/0x41 [ 732.482551][T15542] bpf_prog_run_pin_on_cpu+0x64/0x150 [ 732.487965][T15542] bpf_prog_test_run_syscall+0x31c/0x4b0 [ 732.493644][T15542] ? sock_gen_cookie+0x60/0x60 [ 732.498440][T15542] ? sock_gen_cookie+0x60/0x60 [ 732.503220][T15542] bpf_prog_test_run+0x31c/0x390 [ 732.508330][T15542] __sys_bpf+0x62b/0x780 [ 732.512589][T15542] ? bpf_link_show_fdinfo+0x380/0x380 [ 732.517989][T15542] ? lock_chain_count+0x20/0x20 [ 732.522861][T15542] __x64_sys_bpf+0x78/0x90 [ 732.527293][T15542] do_syscall_64+0x4c/0xa0 [ 732.531803][T15542] ? clear_bhb_loop+0x60/0xb0 [ 732.536531][T15542] ? clear_bhb_loop+0x60/0xb0 [ 732.541474][T15542] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 732.547384][T15542] RIP: 0033:0x7f267659e159 [ 732.551848][T15542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.571490][T15542] RSP: 002b:00007f2677402028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 732.580090][T15542] RAX: ffffffffffffffda RBX: 00007f2676825fa0 RCX: 00007f267659e159 [ 732.588069][T15542] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 732.596047][T15542] RBP: 00007f267663506b R08: 0000000000000000 R09: 0000000000000000 [ 732.604024][T15542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.612109][T15542] R13: 00007f2676826038 R14: 00007f2676825fa0 R15: 00007ffee3e09b48 [ 732.620215][T15542] [ 734.143725][T15518] device syzkaller0 entered promiscuous mode