last executing test programs: 18m51.420010007s ago: executing program 3 (id=7886): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000100000085000000a000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 18m51.285298051s ago: executing program 3 (id=7887): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x1b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x6002, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e00806200000000002000aac141417e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 18m51.020779979s ago: executing program 3 (id=7888): perf_event_open(0x0, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x0, 0x0, 0x2, 0x2}, @array={0x0, 0x0, 0x0, 0xa, 0x3, {0x0, 0x2000000}}]}}, 0x0, 0x3e, 0x0, 0x1}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000029"], 0x66) 18m49.769861899s ago: executing program 3 (id=7891): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 18m49.544682226s ago: executing program 3 (id=7893): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x22, 0x2, 0x21) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x80044944, 0x0) 18m48.929203776s ago: executing program 3 (id=7908): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 18m33.74339885s ago: executing program 32 (id=7908): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 6.279302559s ago: executing program 1 (id=13642): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 4.991684401s ago: executing program 1 (id=13659): socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x960002b6964388c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0xfffffffffffffffd}, 0x80, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x9, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{}], "a5c18c"}, @struct={0xa, 0x0, 0x0, 0x4, 0x1, 0x10001}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0x5f, 0x18]}}, &(0x7f0000000c40)=""/4096, 0x49, 0x1000, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 4.99093697s ago: executing program 2 (id=13650): r0 = socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000380), 0x4) r4 = getpid() r5 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x0, 0x0, 0x81, 0x0, 0x9, 0xa2516, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0xfffffffffffffff0, 0x77d}, 0x2, 0x4, 0x20}, r5, 0x1, r2, 0x8) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/user\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.305820072s ago: executing program 1 (id=13653): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1e, 0x10506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x1000000000000801, 0x1}, 0x7402, 0x0, 0x0, 0x9, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x55}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)='/proc/net/\xa9\'F\xcf\x82q\xee'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x27, 0x0, 0xc) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, 0x0, 0x0) sendmsg$kcm(r1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xe, &(0x7f0000000000), 0x4) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x30}, 0x18) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.305615092s ago: executing program 2 (id=13654): recvmsg$kcm(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000940)}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/155, 0x9b}, {&(0x7f0000002040)=""/28, 0x1c}, {&(0x7f0000002080)=""/127, 0x7f}, {&(0x7f0000002100)=""/151, 0x97}, {&(0x7f00000021c0)=""/51, 0x33}, {0x0}, {&(0x7f0000002280)=""/39, 0x27}, {&(0x7f00000022c0)=""/126, 0x7e}], 0xa, &(0x7f00000036c0)=""/4096, 0x1000}, 0x40000000) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) write$cgroup_subtree(r1, 0x0, 0xfdef) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b400000000000001691000000000000095000000000000000000000000000000b9bdfa5eeba0834e931b37e8b1ffe52a343365"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="0000000000000000000000de66a8830000002000", @ANYRES32=r0, @ANYBLOB="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", @ANYBLOB="000000008000"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair(0x3, 0x1, 0x4000000, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 4.05757316s ago: executing program 2 (id=13668): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x0, 0x84) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x8902, &(0x7f00000005c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r2, 0x4) r3 = socket$kcm(0x15, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x114, 0x1d, 0x0, 0xfea5) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) 3.972848763s ago: executing program 5 (id=13658): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffdfffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 3.144527299s ago: executing program 2 (id=13660): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 3.144215019s ago: executing program 5 (id=13661): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r1, 0x0) 3.143985289s ago: executing program 4 (id=13662): socket$kcm(0x10, 0x3, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300), 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, 0x0, 0x2600c055) r2 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@id={0x1e, 0x3, 0x3, {0x4e22}}, 0x80, &(0x7f00000001c0)}, 0x0) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r3}, 0x8) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, &(0x7f0000000080)) 3.142098999s ago: executing program 0 (id=13663): socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x960002b6964388c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0xfffffffffffffffd}, 0x80, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x9, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{}], "a5c18c"}, @struct={0xa, 0x0, 0x0, 0x4, 0x1, 0x10001}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0x5f, 0x18]}}, &(0x7f0000000c40)=""/4096, 0x49, 0x1000, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 2.873654968s ago: executing program 4 (id=13664): r0 = socket$kcm(0xa, 0x2, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x2, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x21, &(0x7f0000000380), 0x4) r4 = getpid() r5 = gettid() perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x9, 0x0, 0x0, 0x81, 0x0, 0x9, 0xa2516, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_config_ext={0xfffffffffffffff0, 0x77d}, 0x2, 0x4, 0x20}, r5, 0x1, r2, 0x8) syz_open_procfs$namespace(r4, &(0x7f0000000040)='ns/user\x00') r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r6, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.648333916s ago: executing program 0 (id=13665): socket$kcm(0x2b, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000018c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x4ecb14dfdbcba6a8, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x1001, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x110051, 0x7, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x1a2c25c7, 0x0, 0x0, 0x41000}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 2.648112045s ago: executing program 5 (id=13666): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'netdevsim0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r4 = syz_clone(0x24050000, &(0x7f0000000380)="92c5eddcfb6665bd6ccad93905456dd3832c8621062ea7d377cd07e4bd254a76ebe45e3f2bd071a6b717b625e378ad7e429241acb14f6d2543c25bfad788947a4b80d0821c107e0d4149b6cd39c7bc1475aff9d546d48755479b76e20d5648a940fc98ca4999c0e0181205d6d9aeae83b8905465247c80b3198e4367ec92637199d42c99995823f2984f3bdec6a5f4eb8459", 0x92, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000580)) perf_event_open(0x0, r4, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.588759917s ago: executing program 4 (id=13667): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) r3 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x32, &(0x7f0000000000)=[{&(0x7f0000000040)='r', 0x200420}], 0x1}, 0x40000) sendmsg$kcm(r3, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x22048005) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r6, &(0x7f0000000280), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5}, 0x94) 2.351009025s ago: executing program 0 (id=13669): recvmsg$kcm(0xffffffffffffffff, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000940)}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/155, 0x9b}, {&(0x7f0000002040)=""/28, 0x1c}, {&(0x7f0000002080)=""/127, 0x7f}, {&(0x7f0000002100)=""/151, 0x97}, {&(0x7f00000021c0)=""/51, 0x33}, {0x0}, {&(0x7f0000002280)=""/39, 0x27}, {&(0x7f00000022c0)=""/126, 0x7e}], 0xa, &(0x7f00000036c0)=""/4096, 0x1000}, 0x40000000) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x2c}, 0x28) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x0, @local}, 0x80, 0x0, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="c805"], 0x5c8}, 0xf7e5) write$cgroup_subtree(r1, 0x0, 0xfdef) socket$kcm(0x2b, 0x1, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="b400000000000001691000000000000095000000000000000000000000000000b9bdfa5eeba0834e931b37e8b1ffe52a343365"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB, @ANYRES8=r0, @ANYBLOB="0000000000000000000000de66a8830000002000", @ANYRES32=r0, @ANYBLOB="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", @ANYBLOB="000000008000"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) socketpair(0x3, 0x1, 0x4000000, &(0x7f0000000180)) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002200356bd25a806f8c6394f91124fc60040011000a7403004800000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 2.342973975s ago: executing program 5 (id=13670): socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) 2.305120936s ago: executing program 2 (id=13671): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7, 0x2}, 0x10c002, 0xac5d, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x22250, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xc89ee2ccd10f8b7b, 0x7, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x80000000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x17}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xc8, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) write$cgroup_subtree(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2211052f00fe800000fe800000875a65059ff57b00000000000000000000000000ac1414aa000088a8"], 0xcfa4) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000900)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0xc, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x71, 0x1, 0x1, 0x88}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r5, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="f4000900062b8825fe80000000000000dc8f850f23846632189c54ebcc00007a000000ad6e911b51", 0x28}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r6}, 0x38) 2.167511311s ago: executing program 0 (id=13672): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd5a, 0x0, 0x8, 0x47, 0x0}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x2}) 1.579650239s ago: executing program 4 (id=13673): perf_event_open(&(0x7f0000000380)={0x7, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80114, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, @perf_config_ext={0xffffffffffdfffff, 0x5d}, 0x2, 0xca, 0x0, 0x0, 0x3, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x6c6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x5, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x10}}], 0xa8}, 0x0) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r5, &(0x7f00000002c0)=ANY=[@ANYRES8=r1, @ANYRES8=r6], 0x12) 1.225020491s ago: executing program 1 (id=13674): ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000140)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffe00000000000}}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e00000004000000"], 0x50) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000100)={0x0, 0x0}) close(r4) perf_event_open(&(0x7f0000000180)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c03, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x200}, 0x0, 0xd, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x1, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(r5, 0x10f, 0x87, &(0x7f0000000180), 0x127) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r6) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(r3) 1.093246305s ago: executing program 0 (id=13675): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xc2ba}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, 0x0, 0x4000) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000001a00)=ANY=[], 0xfe33) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, 0x50) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x922000000001, 0x106) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) 1.052621546s ago: executing program 5 (id=13676): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x55097aa4, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002d000b13d25a806f8c6394f9031a04000a740100053582c137153e3702df0c6400f01700d1bd00000000", 0x33fe0}], 0x1}, 0x0) 1.020720897s ago: executing program 4 (id=13686): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffff7fffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000)=r3, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f95524fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000c00)="d800000018009903e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901223fc6ab007f6f94007100a007a290457f0189b316277ce06bf75c10dde13fb206b33b174e54980ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1000000730d7a5025ccca262f3d40fad956d2b6d5a3a6692ac217e11382e767e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6cc452a92307f00000e970300000000", 0xd8}], 0x1}, 0x20048812) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r7, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd5a, 0x0, 0x8, 0x47, 0x0}}, 0x10) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'veth0_to_hsr\x00', 0x2}) 1.020233437s ago: executing program 1 (id=13677): perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbd0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x1, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x29, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x4}, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000200)="2000000020008107090f9becdb4cb96b0200000000fbff010000000000000000", 0x20}], 0x1, 0x0, 0x0, 0x81000000}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000002c0)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x1, 0x7fffffff, 0x7, 0x4, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0xfe0, 0xffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x85c, 0x0, @perf_config_ext={0x101}, 0x120ca, 0xeb, 0x0, 0x5, 0x59f4}, 0xffffffffffffffff, 0x0, r1, 0x0) 973.598429ms ago: executing program 2 (id=13678): socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x960002b6964388c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000, 0xfffffffffffffffd}, 0x80, 0x0, 0x0, 0x0, 0xf60, 0x0, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x27, 0x27, 0x9, [@datasec={0x4, 0x1, 0x0, 0xf, 0x3, [{}], "a5c18c"}, @struct={0xa, 0x0, 0x0, 0x4, 0x1, 0x10001}]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x2e, 0x5f, 0x18]}}, &(0x7f0000000c40)=""/4096, 0x49, 0x1000, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, @perf_bp={0x0}, 0x0, 0xc8}, 0x0, 0x6, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) 418.322286ms ago: executing program 5 (id=13679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) r1 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d2f, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0xa15}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES64=r1, @ANYBLOB], 0x50) ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socket$kcm(0x23, 0x2, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, r2, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x2, 0x0) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, 0x0, 0x20000811) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.empty_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x23, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000008"}) 325.572079ms ago: executing program 4 (id=13680): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x1, 0x106) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) 234.033642ms ago: executing program 0 (id=13681): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000080)={'netdevsim0\x00', @multicast}) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x23}, 0x94) r4 = syz_clone(0x24050000, &(0x7f0000000380)="92c5eddcfb6665bd6ccad93905456dd3832c8621062ea7d377cd07e4bd254a76ebe45e3f2bd071a6b717b625e378ad7e429241acb14f6d2543c25bfad788947a4b80d0821c107e0d4149b6cd39c7bc1475aff9d546d48755479b76e20d5648a940fc98ca4999c0e0181205d6d9aeae83b8905465247c80b3198e4367ec92637199d42c99995823f2984f3bdec6a5f4eb8459", 0x92, &(0x7f0000000180), &(0x7f0000000300), &(0x7f0000000580)) perf_event_open(0x0, r4, 0x2, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe92f5f45114c79f7}, 0x1003b9, 0x7, 0x2000, 0xa, 0x1, 0x0, 0x9}, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = socket$kcm(0x18, 0x7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) sendmsg$unix(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000009c0)="ec", 0x1}], 0x1, &(0x7f0000000780)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18}, 0x0) recvmsg$unix(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, &(0x7f0000002680)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x8, &(0x7f0000000180)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}, {}, {0x7, 0x0, 0xb, 0x9}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 1 (id=13682): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000b00)=ANY=[@ANYRES64, @ANYRES32, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), &(0x7f0000000380)='%+9llu \x00'}, 0x20) socket$kcm(0xa, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1000, 0x1000}, 0x10c002, 0xac5d, 0x0, 0x0, 0x9, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) getpid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000001a00)=ANY=[@ANYBLOB="13100000520091ef"], 0xfe33) recvmsg$kcm(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001a40)=""/4095, 0xfff}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x50be}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="5400020029000b05d25a806f8c6394f90424fc602f0011002f2f2f00053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x5000000}, 0x0) kernel console output (not intermixed with test programs): d event 0x14 length: 15 > 6 [ 1798.480504][T31034] netlink: 14 bytes leftover after parsing attributes in process `syz.0.11024'. [ 1798.543252][T31034] openvswitch: netlink: Flow key attr not present in new flow. [ 1798.671172][T31038] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11027'. [ 1801.541913][T31038] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1801.657007][T31038] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1801.685324][T31038] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1801.699137][T31038] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1801.727342][T31038] bond0 (unregistering): Released all slaves [ 1801.772028][T31040] IPv6: Can't replace route, no match found [ 1801.779980][T29607] Bluetooth: hci2: Unknown advertising packet type: 0x70 [ 1801.780016][T29607] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1804.922640][T31063] device syzkaller0 entered promiscuous mode [ 1811.537218][T29607] Bluetooth: hci3: Unknown advertising packet type: 0x70 [ 1811.537258][T29607] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1813.064106][T31090] IPv6: Can't replace route, no match found [ 1813.070153][T31096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11049'. [ 1813.187258][T31096] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1813.214264][T31096] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1813.267828][T31096] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 1813.295731][T31096] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1813.323733][T31096] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1813.368794][T31096] bond0 (unregistering): Released all slaves [ 1816.547115][T29607] Bluetooth: hci2: Dropping invalid advertising data [ 1816.554622][T29607] Bluetooth: hci2: unknown advertising packet type: 0xdc [ 1816.554648][T29607] Bluetooth: hci2: Malformed LE Event: 0x02 [ 1816.710605][T31134] IPv6: Can't replace route, no match found [ 1816.910129][T31137] device syzkaller0 entered promiscuous mode [ 1817.687530][T29607] Bluetooth: hci2: unexpected event 0x1c length: 15 > 5 [ 1817.879651][T31166] netlink: 'syz.2.11078': attribute type 2 has an invalid length. [ 1823.193943][T31190] device syzkaller0 entered promiscuous mode [ 1825.781829][T31238] netlink: 'syz.5.11102': attribute type 2 has an invalid length. [ 1826.211078][T31255] device syzkaller0 entered promiscuous mode [ 1829.886647][T31315] delete_channel: no stack [ 1830.093546][T31323] device syzkaller0 entered promiscuous mode [ 1831.266020][T31352] delete_channel: no stack [ 1833.534957][T31388] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1833.566690][T31388] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1833.594915][T31388] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1833.669228][T29607] Bluetooth: hci5: unexpected event 0x05 length: 15 > 4 [ 1833.927125][T31405] delete_channel: no stack [ 1834.477747][T31430] device syzkaller0 entered promiscuous mode [ 1836.696953][T31438] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1836.706641][T31438] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1836.716492][T31438] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1836.924041][T31460] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.11183'. [ 1837.126301][T29607] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 1839.537582][T29607] Bluetooth: hci2: unexpected event 0x05 length: 15 > 4 [ 1839.746614][T31506] netlink: 'syz.0.11199': attribute type 2 has an invalid length. [ 1840.697585][T29607] Bluetooth: hci3: unexpected event 0x05 length: 15 > 4 [ 1840.790619][T31537] netlink: 'syz.1.11226': attribute type 2 has an invalid length. [ 1841.339474][T31561] netlink: 'syz.2.11222': attribute type 13 has an invalid length. [ 1841.357369][T31561] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11222'. [ 1841.384662][T31561] syz_tun: refused to change device tx_queue_len [ 1841.393632][T31561] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1841.432968][T31563] netlink: 'syz.5.11225': attribute type 2 has an invalid length. [ 1841.446779][T31564] netlink: 'syz.2.11222': attribute type 10 has an invalid length. [ 1842.133561][T31572] netlink: 'syz.5.11239': attribute type 2 has an invalid length. [ 1842.210401][T29607] Bluetooth: hci0: unexpected event 0x07 length: 15 < 255 [ 1842.901096][T29607] Bluetooth: hci0: unexpected subevent 0x0e length: 150 > 15 [ 1843.108162][T31606] device sit0 left promiscuous mode [ 1843.442027][T31610] device sit0 entered promiscuous mode [ 1843.663916][T29607] Bluetooth: hci4: unexpected event 0x05 length: 15 > 4 [ 1849.197411][T31660] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11255'. [ 1850.104404][T31670] netlink: 'syz.2.11266': attribute type 2 has an invalid length. [ 1851.018746][T31689] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.11272'. [ 1853.085295][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.091615][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.140532][T31689] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1856.151996][T31689] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1856.155921][T31703] netlink: 'syz.1.11280': attribute type 2 has an invalid length. [ 1856.162205][T31689] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1856.280447][T31709] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1856.418584][T31717] netlink: 'syz.0.11283': attribute type 13 has an invalid length. [ 1856.427176][T31717] netlink: 152 bytes leftover after parsing attributes in process `syz.0.11283'. [ 1856.479147][T31717] syz_tun: refused to change device tx_queue_len [ 1856.498646][T31717] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1856.530957][T31721] netlink: 'syz.0.11283': attribute type 10 has an invalid length. [ 1856.892035][T31729] netlink: 'syz.4.11290': attribute type 21 has an invalid length. [ 1856.921950][T31729] netlink: 'syz.4.11290': attribute type 11 has an invalid length. [ 1857.199119][T31742] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.11295'. [ 1857.521186][T31755] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1858.844767][T14883] wlan1: Trigger new scan to find an IBSS to join [ 1859.898008][T31762] netlink: 'syz.4.11302': attribute type 13 has an invalid length. [ 1859.906073][T31762] netlink: 152 bytes leftover after parsing attributes in process `syz.4.11302'. [ 1859.917558][T31762] syz_tun: refused to change device tx_queue_len [ 1859.943227][T31762] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1859.978380][T31763] netlink: 'syz.4.11302': attribute type 10 has an invalid length. [ 1860.757246][T31796] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.11310'. [ 1861.067288][T31807] netlink: 'syz.5.11316': attribute type 13 has an invalid length. [ 1861.090675][T31807] netlink: 152 bytes leftover after parsing attributes in process `syz.5.11316'. [ 1861.132596][T31807] syz_tun: refused to change device tx_queue_len [ 1861.154300][T31807] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1863.804187][ T9] wlan1: Trigger new scan to find an IBSS to join [ 1864.183365][T31809] netlink: 'syz.5.11316': attribute type 10 has an invalid length. [ 1864.201118][T31809] team0: Port device netdevsim0 added [ 1864.800024][ T75] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1866.550484][T31839] nr0: port 1(hsr0) entered blocking state [ 1866.562878][T31839] nr0: port 1(hsr0) entered disabled state [ 1866.570784][T31839] device hsr0 entered promiscuous mode [ 1866.661090][T29607] Bluetooth: hci0: unexpected event 0x48 length: 15 > 3 [ 1866.661124][T29607] Bluetooth: hci0: wrong event for mode 0 [ 1867.238876][T31851] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.11329'. [ 1867.258837][T29607] Bluetooth: hci3: unexpected event 0x48 length: 15 > 3 [ 1867.258866][T29607] Bluetooth: hci3: wrong event for mode 0 [ 1870.588705][T31878] netlink: 'syz.4.11352': attribute type 10 has an invalid length. [ 1870.668202][T31885] netlink: 'syz.1.11334': attribute type 13 has an invalid length. [ 1870.714693][T31885] netlink: 152 bytes leftover after parsing attributes in process `syz.1.11334'. [ 1870.761500][T31885] syz_tun: refused to change device tx_queue_len [ 1870.805803][T31885] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1870.865122][T31886] netlink: 'syz.1.11334': attribute type 10 has an invalid length. [ 1871.584054][T31910] device sit0 left promiscuous mode [ 1871.657930][T31911] device sit0 entered promiscuous mode [ 1872.037723][T29607] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 1872.503376][T31942] netlink: 'syz.5.11365': attribute type 10 has an invalid length. [ 1872.535404][T31942] device veth1_macvtap left promiscuous mode [ 1872.852232][T31952] device sit0 entered promiscuous mode [ 1873.499489][T29607] Bluetooth: hci5: unknown advertising packet type: 0x63 [ 1873.715917][T31971] device pim6reg1 entered promiscuous mode [ 1873.871355][T31976] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1874.136605][T31982] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11386'. [ 1874.245531][T31990] netlink: 'syz.4.11377': attribute type 21 has an invalid length. [ 1874.254591][T31990] netlink: 'syz.4.11377': attribute type 1 has an invalid length. [ 1874.349426][T31994] device sit0 left promiscuous mode [ 1874.576447][T32000] device sit0 left promiscuous mode [ 1874.816524][T32003] device sit0 entered promiscuous mode [ 1874.846984][T32002] netlink: 'syz.4.11381': attribute type 2 has an invalid length. [ 1874.859438][T32002] netlink: 'syz.4.11381': attribute type 3 has an invalid length. [ 1874.867508][T32002] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11381'. [ 1875.442244][T29607] Bluetooth: hci3: unknown advertising packet type: 0x63 [ 1875.545409][T32028] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1875.832833][T32038] netlink: 'syz.2.11395': attribute type 2 has an invalid length. [ 1875.843068][T32038] netlink: 'syz.2.11395': attribute type 8 has an invalid length. [ 1875.853884][T32038] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11395'. [ 1876.157034][T32052] netlink: 'syz.5.11409': attribute type 2 has an invalid length. [ 1876.166313][T32052] netlink: 'syz.5.11409': attribute type 8 has an invalid length. [ 1876.174876][T32052] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11409'. [ 1876.191195][T32048] netlink: 'syz.2.11398': attribute type 10 has an invalid length. [ 1876.331189][T32057] device pim6reg1 entered promiscuous mode [ 1876.391253][T32058] netlink: 212168 bytes leftover after parsing attributes in process `syz.5.11401'. [ 1876.723674][T32071] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1876.916789][T32079] device sit0 left promiscuous mode [ 1877.052876][T32086] netlink: 'syz.2.11415': attribute type 10 has an invalid length. [ 1877.075076][T32085] netlink: 'syz.0.11414': attribute type 10 has an invalid length. [ 1877.334980][T32093] netlink: 212168 bytes leftover after parsing attributes in process `syz.0.11418'. [ 1877.820297][T32113] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1877.846066][T32111] netlink: 'syz.1.11434': attribute type 2 has an invalid length. [ 1877.854569][T32111] netlink: 'syz.1.11434': attribute type 3 has an invalid length. [ 1877.862894][T32111] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11434'. [ 1878.107937][T32122] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1878.310873][T32130] syzkaller0: tun_chr_ioctl cmd 1074812118 [ 1878.479537][T32140] device sit0 left promiscuous mode [ 1878.653963][T29607] Bluetooth: hci5: unexpected subevent 0x0c length: 150 > 5 [ 1878.691256][T32137] device sit0 entered promiscuous mode [ 1879.639970][T32150] netlink: 'syz.2.11442': attribute type 2 has an invalid length. [ 1879.733427][T32150] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11442'. [ 1879.817490][T32173] device sit0 left promiscuous mode [ 1880.067852][T32166] device sit0 entered promiscuous mode [ 1881.701905][T32251] device syzkaller0 entered promiscuous mode [ 1884.028403][T32291] device pim6reg1 entered promiscuous mode [ 1884.286620][T29607] Bluetooth: hci0: unexpected subevent 0x0c length: 150 > 5 [ 1884.552522][T32302] validate_nla: 1 callbacks suppressed [ 1884.552542][T32302] netlink: 'syz.5.11470': attribute type 2 has an invalid length. [ 1884.569760][T32302] netlink: 'syz.5.11470': attribute type 3 has an invalid length. [ 1884.578877][T32302] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11470'. [ 1884.880493][T32317] netlink: 'syz.2.11477': attribute type 13 has an invalid length. [ 1884.897330][T32317] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11477'. [ 1884.917652][T32317] syz_tun: refused to change device tx_queue_len [ 1884.925231][T32317] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1884.962376][T32317] netlink: 'syz.2.11477': attribute type 10 has an invalid length. [ 1885.602456][T29607] Bluetooth: hci3: unexpected subevent 0x0c length: 150 > 5 [ 1886.013097][T32350] netlink: 'syz.0.11487': attribute type 2 has an invalid length. [ 1886.044420][T32350] netlink: 'syz.0.11487': attribute type 3 has an invalid length. [ 1886.059329][T32350] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11487'. [ 1886.071270][T29607] Bluetooth: hci5: unexpected event 0x04 length: 151 > 10 [ 1886.345429][T32362] device pim6reg1 entered promiscuous mode [ 1886.606209][T32372] netlink: 'syz.5.11501': attribute type 29 has an invalid length. [ 1887.445526][T32380] device syzkaller0 entered promiscuous mode [ 1888.133285][T15161] Bluetooth: hci5: command 0x0409 tx timeout [ 1890.396996][T15161] Bluetooth: hci2: unexpected event 0x04 length: 151 > 10 [ 1890.560425][T32438] netlink: 'syz.2.11510': attribute type 2 has an invalid length. [ 1890.632182][T32438] netlink: 'syz.2.11510': attribute type 3 has an invalid length. [ 1890.699470][T32453] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1890.707095][T32438] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11510'. [ 1891.026107][T32465] netlink: 'syz.0.11529': attribute type 2 has an invalid length. [ 1891.064423][T32465] netlink: 'syz.0.11529': attribute type 8 has an invalid length. [ 1891.093522][T32465] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11529'. [ 1892.037590][T32481] device dummy0 entered promiscuous mode [ 1892.443397][T29607] Bluetooth: hci2: command 0x0409 tx timeout [ 1892.486163][T29607] Bluetooth: hci4: unexpected event 0x04 length: 151 > 10 [ 1892.768729][T32497] device syzkaller0 entered promiscuous mode [ 1893.358029][T32518] netlink: 'syz.0.11547': attribute type 2 has an invalid length. [ 1893.376990][T32518] netlink: 'syz.0.11547': attribute type 3 has an invalid length. [ 1893.396347][T32518] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11547'. [ 1894.382303][T32521] netlink: 'syz.5.11540': attribute type 29 has an invalid length. [ 1894.529812][T15161] Bluetooth: hci4: command 0x0409 tx timeout [ 1894.896011][T32232] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1895.588751][T32515] netlink: 'syz.1.11535': attribute type 2 has an invalid length. [ 1895.608868][T32515] netlink: 'syz.1.11535': attribute type 8 has an invalid length. [ 1895.636794][T32515] netlink: 132 bytes leftover after parsing attributes in process `syz.1.11535'. [ 1895.672562][T32521] netlink: 'syz.5.11540': attribute type 29 has an invalid length. [ 1897.108939][T32560] device pim6reg1 entered promiscuous mode [ 1897.171336][T32562] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1897.312396][T32565] netlink: 'syz.4.11557': attribute type 29 has an invalid length. [ 1897.386152][T32568] device syzkaller0 entered promiscuous mode [ 1897.425801][T32565] netlink: 'syz.4.11557': attribute type 29 has an invalid length. [ 1897.512941][T32569] device syzkaller0 entered promiscuous mode [ 1897.520333][T32572] netlink: 'syz.4.11557': attribute type 29 has an invalid length. [ 1899.521926][T32578] netlink: 'syz.4.11557': attribute type 29 has an invalid length. [ 1899.920944][T32598] netlink: 'syz.5.11567': attribute type 2 has an invalid length. [ 1899.929477][T32598] netlink: 'syz.5.11567': attribute type 3 has an invalid length. [ 1899.941415][T32598] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11567'. [ 1902.519229][T32627] device pim6reg1 entered promiscuous mode [ 1902.710223][T32634] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1903.261538][T32647] device syzkaller0 entered promiscuous mode [ 1903.356044][T32651] netlink: 'syz.1.11579': attribute type 29 has an invalid length. [ 1904.851698][T32232] wlan1: Trigger new scan to find an IBSS to join [ 1905.445417][T32651] netlink: 'syz.1.11579': attribute type 29 has an invalid length. [ 1906.485572][T32702] netlink: 'syz.0.11596': attribute type 29 has an invalid length. [ 1906.532406][T32704] device syzkaller0 entered promiscuous mode [ 1906.542063][T32702] netlink: 'syz.0.11596': attribute type 29 has an invalid length. [ 1906.557898][T32709] netlink: 'syz.0.11596': attribute type 29 has an invalid length. [ 1906.595582][T32708] device syzkaller0 entered promiscuous mode [ 1906.611868][T32702] netlink: 'syz.0.11596': attribute type 29 has an invalid length. [ 1907.803995][T32236] wlan1: Trigger new scan to find an IBSS to join [ 1910.845889][T32232] wlan1: Trigger new scan to find an IBSS to join [ 1911.689486][T32764] bridge0: port 4(team0) entered blocking state [ 1911.703065][T32764] bridge0: port 4(team0) entered disabled state [ 1911.746183][T32238] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1911.768991][T32764] device team0 entered promiscuous mode [ 1911.785548][T32764] device team_slave_0 entered promiscuous mode [ 1911.801722][T32764] device team_slave_1 entered promiscuous mode [ 1911.817472][T32764] device netdevsim0 entered promiscuous mode [ 1911.968687][ T304] netlink: 'syz.2.11614': attribute type 29 has an invalid length. [ 1912.000093][ T304] netlink: 'syz.2.11614': attribute type 29 has an invalid length. [ 1912.027811][ T309] netlink: 'syz.2.11614': attribute type 29 has an invalid length. [ 1912.047337][ T308] netlink: 144 bytes leftover after parsing attributes in process `syz.5.11616'. [ 1912.080526][ T304] netlink: 'syz.2.11614': attribute type 29 has an invalid length. [ 1912.292010][ T317] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1912.466005][ T323] device pim6reg1 entered promiscuous mode [ 1912.736114][T29607] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1913.140590][ T345] netlink: 'syz.2.11635': attribute type 29 has an invalid length. [ 1913.155076][ T345] netlink: 'syz.2.11635': attribute type 29 has an invalid length. [ 1913.177775][ T348] netlink: 'syz.2.11635': attribute type 29 has an invalid length. [ 1913.221845][ T345] netlink: 'syz.2.11635': attribute type 29 has an invalid length. [ 1913.304189][ T352] netlink: 144 bytes leftover after parsing attributes in process `syz.0.11637'. [ 1913.400608][ T358] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1914.525634][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1914.532020][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1914.574874][ T392] netlink: 'syz.4.11651': attribute type 29 has an invalid length. [ 1914.584959][ T392] netlink: 'syz.4.11651': attribute type 29 has an invalid length. [ 1914.617042][ T394] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11652'. [ 1914.724439][ T396] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 1915.441297][ T409] device pim6reg1 entered promiscuous mode [ 1916.204175][ T439] netlink: 144 bytes leftover after parsing attributes in process `syz.1.11667'. [ 1917.568579][ T468] validate_nla: 6 callbacks suppressed [ 1917.568598][ T468] netlink: 'syz.4.11681': attribute type 10 has an invalid length. [ 1917.855443][ T473] device syzkaller0 entered promiscuous mode [ 1919.026095][ T497] netlink: 'syz.1.11686': attribute type 3 has an invalid length. [ 1919.035682][ T497] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.11686'. [ 1920.160905][ T480] netlink: 'syz.0.11695': attribute type 15 has an invalid length. [ 1920.169657][ T480] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.11695'. [ 1920.180529][ T481] netlink: 144 bytes leftover after parsing attributes in process `syz.4.11684'. [ 1920.435771][ T504] device syzkaller0 entered promiscuous mode [ 1920.463819][ T501] device pim6reg1 entered promiscuous mode [ 1922.933669][ T525] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1922.947251][ T525] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1922.957736][ T525] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1923.558631][ T555] device syzkaller0 entered promiscuous mode [ 1923.669559][T29607] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1923.976227][ T567] delete_channel: no stack [ 1925.962439][ T573] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11719'. [ 1926.240954][ T590] device syzkaller0 entered promiscuous mode [ 1927.532021][T29607] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1927.755297][T29607] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1927.973987][T29607] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1930.569099][ T641] device virt_wifi0 entered promiscuous mode [ 1930.602613][ T648] netlink: 'syz.0.11750': attribute type 29 has an invalid length. [ 1930.814106][ T648] netlink: 'syz.0.11750': attribute type 29 has an invalid length. [ 1930.835976][ T650] netlink: 'syz.0.11750': attribute type 29 has an invalid length. [ 1930.888110][ T652] netlink: 'syz.0.11750': attribute type 29 has an invalid length. [ 1933.518993][ T672] netlink: 52 bytes leftover after parsing attributes in process `syz.1.11759'. [ 1933.883982][T29607] Bluetooth: hci4: adv larger than maximum supported [ 1933.884016][T29607] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1933.917526][ T692] netlink: 'syz.5.11766': attribute type 29 has an invalid length. [ 1933.945053][ T689] device syzkaller0 entered promiscuous mode [ 1933.954649][ T692] netlink: 'syz.5.11766': attribute type 29 has an invalid length. [ 1933.966720][ T698] netlink: 'syz.5.11766': attribute type 29 has an invalid length. [ 1933.998211][ T692] netlink: 'syz.5.11766': attribute type 29 has an invalid length. [ 1936.807432][ T731] netlink: 'syz.1.11784': attribute type 29 has an invalid length. [ 1936.841972][ T731] netlink: 'syz.1.11784': attribute type 29 has an invalid length. [ 1936.869373][ T738] netlink: 'syz.1.11784': attribute type 29 has an invalid length. [ 1936.918029][ T731] netlink: 'syz.1.11784': attribute type 29 has an invalid length. [ 1937.159118][ T752] netlink: 'syz.0.11793': attribute type 3 has an invalid length. [ 1937.203290][ T752] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11793'. [ 1940.137927][ T780] netlink: 'syz.2.11804': attribute type 29 has an invalid length. [ 1940.177630][ T780] netlink: 'syz.2.11804': attribute type 29 has an invalid length. [ 1940.247301][ T783] netlink: 'syz.2.11804': attribute type 29 has an invalid length. [ 1940.304000][ T780] netlink: 'syz.2.11804': attribute type 29 has an invalid length. [ 1941.449032][ T807] netlink: 'syz.4.11816': attribute type 3 has an invalid length. [ 1941.491939][ T807] netlink: 132 bytes leftover after parsing attributes in process `syz.4.11816'. [ 1941.792351][T32232] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1942.019583][ T818] netlink: 'syz.4.11823': attribute type 29 has an invalid length. [ 1942.070505][ T818] netlink: 'syz.4.11823': attribute type 29 has an invalid length. [ 1942.090555][ T824] netlink: 'syz.4.11823': attribute type 29 has an invalid length. [ 1942.120056][ T818] netlink: 'syz.4.11823': attribute type 29 has an invalid length. [ 1942.841967][ T851] netlink: 'syz.5.11834': attribute type 3 has an invalid length. [ 1942.875624][ T851] netlink: 132 bytes leftover after parsing attributes in process `syz.5.11834'. [ 1944.118038][ T867] netlink: 'syz.2.11840': attribute type 29 has an invalid length. [ 1944.288273][ T867] netlink: 'syz.2.11840': attribute type 29 has an invalid length. [ 1944.850228][T29607] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1946.348950][ T874] netlink: 'syz.2.11840': attribute type 29 has an invalid length. [ 1946.564682][ T908] netlink: 'syz.0.11860': attribute type 29 has an invalid length. [ 1946.587693][ T908] netlink: 'syz.0.11860': attribute type 29 has an invalid length. [ 1946.691219][ T917] device syzkaller0 entered promiscuous mode [ 1952.502843][ T997] device virt_wifi0 entered promiscuous mode [ 1952.590124][ T1001] validate_nla: 6 callbacks suppressed [ 1952.590172][ T1001] netlink: 'syz.0.11882': attribute type 3 has an invalid length. [ 1952.612661][ T1001] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.11882'. [ 1953.303852][ T1028] device syzkaller0 entered promiscuous mode [ 1954.253031][T29607] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1955.503322][T29607] Bluetooth: hci4: Malformed LE Event: 0x0d [ 1958.526508][ T1102] netlink: 'syz.2.11927': attribute type 3 has an invalid length. [ 1958.553279][ T1102] netlink: 152 bytes leftover after parsing attributes in process `syz.2.11927'. [ 1962.894505][ T1189] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.11952'. [ 1964.224218][ T1203] device syzkaller0 entered promiscuous mode [ 1966.217775][ T1214] device syzkaller0 entered promiscuous mode [ 1966.353553][ T1222] device syzkaller0 entered promiscuous mode [ 1968.829296][ T1246] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.11970'. [ 1969.020943][ T1258] device syzkaller0 entered promiscuous mode [ 1969.822995][ T1280] device syzkaller0 entered promiscuous mode [ 1972.042303][ T1316] wlan1: mtu greater than device maximum [ 1973.638858][T32236] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1976.012443][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.018891][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 1976.263971][ T1358] device syzkaller0 entered promiscuous mode [ 1977.864843][ T1382] netlink: 9275 bytes leftover after parsing attributes in process `syz.0.12023'. [ 1977.889156][ T1384] netlink: 'syz.4.12025': attribute type 10 has an invalid length. [ 1977.956817][ T1390] netlink: 'syz.5.12024': attribute type 3 has an invalid length. [ 1978.003659][ T1390] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.12024'. [ 1978.198212][ T1396] device syzkaller0 entered promiscuous mode [ 1980.376590][ T1435] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12045'. [ 1981.637774][ T1461] netlink: 'syz.4.12052': attribute type 3 has an invalid length. [ 1981.650257][ T1461] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.12052'. [ 1982.780754][ T1504] netlink: 'syz.2.12071': attribute type 3 has an invalid length. [ 1982.815524][ T1504] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.12071'. [ 1988.087389][ T1562] netlink: 'syz.1.12092': attribute type 3 has an invalid length. [ 1988.100094][ T1562] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.12092'. [ 1989.524768][T29607] Bluetooth: hci2: unexpected event 0x3b length: 15 > 10 [ 1993.971683][ T1637] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1994.023590][ T1637] bridge0: port 5(veth0_to_bridge) entered disabled state [ 1994.043534][ T1637] device veth0_to_bridge entered promiscuous mode [ 1994.050179][ T1637] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1994.067893][ T1637] bridge0: port 5(veth0_to_bridge) entered blocking state [ 1994.075179][ T1637] bridge0: port 5(veth0_to_bridge) entered forwarding state [ 1994.560896][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.571051][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.581926][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.591992][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.602925][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.612986][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.623871][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.633920][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.644850][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.654886][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1994.818509][ T1659] netlink: 'syz.0.12128': attribute type 25 has an invalid length. [ 1994.835091][ T1659] netlink: 'syz.0.12128': attribute type 29 has an invalid length. [ 1995.552659][ T1668] netlink: 'syz.2.12131': attribute type 10 has an invalid length. [ 1999.270555][ T1706] device bond_slave_1 entered promiscuous mode [ 1999.288010][T32224] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 1999.564089][ C1] net_ratelimit: 4184 callbacks suppressed [ 1999.564108][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.580023][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.591099][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.601156][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.612174][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.622224][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.655324][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.665481][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.676706][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 1999.686840][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2001.456149][ T1752] device bond_slave_1 entered promiscuous mode [ 2001.491044][T32232] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2002.718036][ T1776] IPv6: Can't replace route, no match found [ 2003.414913][ T1784] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.12174'. [ 2003.500736][ T1784] device wg2 entered promiscuous mode [ 2003.788477][ T1802] device bond_slave_1 entered promiscuous mode [ 2003.809881][T32236] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2004.001571][ T1808] netlink: 'syz.4.12179': attribute type 1 has an invalid length. [ 2004.073298][ T1808] netlink: 'syz.4.12179': attribute type 4 has an invalid length. [ 2004.081315][ T1808] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.12179'. [ 2004.583837][ C1] net_ratelimit: 4066 callbacks suppressed [ 2004.583856][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.599837][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.610866][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.620947][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.631927][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.642035][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.653009][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.663105][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.674183][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2004.684276][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2005.028038][T32245] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2005.731035][ T1834] netlink: 'syz.2.12187': attribute type 25 has an invalid length. [ 2005.786211][ T1834] netlink: 'syz.2.12187': attribute type 29 has an invalid length. [ 2006.714984][ T1853] device bond_slave_1 entered promiscuous mode [ 2006.727065][T32232] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2006.768986][ T1855] netlink: 'syz.5.12205': attribute type 25 has an invalid length. [ 2006.789612][ T1855] netlink: 'syz.5.12205': attribute type 29 has an invalid length. [ 2008.149209][ T1885] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2009.069005][ T1903] device bond_slave_1 entered promiscuous mode [ 2009.125037][T32245] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready [ 2009.215283][ T1908] netlink: 'syz.1.12213': attribute type 25 has an invalid length. [ 2009.225888][ T1908] netlink: 'syz.1.12213': attribute type 29 has an invalid length. [ 2009.594023][ C0] net_ratelimit: 4430 callbacks suppressed [ 2009.594042][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.598823][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.600175][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.609869][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.634006][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.639929][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.648876][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.658556][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.670254][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.678838][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2009.770712][ T1920] IPv6: Can't replace route, no match found [ 2009.986876][ T1923] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.12220'. [ 2010.093780][ T1923] device wg2 entered promiscuous mode [ 2010.311527][ T1929] netlink: 'syz.0.12224': attribute type 1 has an invalid length. [ 2010.333318][ T1929] netlink: 'syz.0.12224': attribute type 4 has an invalid length. [ 2010.376590][ T1929] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.12224'. [ 2010.807044][ T1939] netlink: 'syz.0.12229': attribute type 10 has an invalid length. [ 2013.243571][ T1953] netlink: 'syz.4.12233': attribute type 25 has an invalid length. [ 2013.251752][ T1953] netlink: 'syz.4.12233': attribute type 29 has an invalid length. [ 2013.548668][ T1962] IPv6: Can't replace route, no match found [ 2014.366117][ T1967] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.12238'. [ 2014.543279][ T1967] device wg2 entered promiscuous mode [ 2014.603500][ C0] net_ratelimit: 4860 callbacks suppressed [ 2014.603519][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.619511][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.620213][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.631279][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.639222][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.648934][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.659502][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.672448][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.678172][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2014.687956][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2016.265326][ T2001] netlink: 'syz.5.12247': attribute type 25 has an invalid length. [ 2016.319887][ T2001] netlink: 'syz.5.12247': attribute type 29 has an invalid length. [ 2018.447074][ T2018] IPv6: Can't replace route, no match found [ 2018.565585][ T2025] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.12254'. [ 2018.801696][ T2025] device wg2 entered promiscuous mode [ 2019.048935][ T2035] netlink: 'syz.4.12271': attribute type 10 has an invalid length. [ 2019.621294][ C1] net_ratelimit: 3167 callbacks suppressed [ 2019.621315][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.626048][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.627917][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.637235][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.646888][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.659041][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.666831][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.676093][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.686880][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2019.697959][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2020.252691][ T2061] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2021.670114][ T2078] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12281'. [ 2023.938314][ T2090] IPv6: Can't replace route, no match found [ 2024.013236][T32245] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2024.036753][T32245] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2024.280072][ T2097] netlink: 'syz.5.12274': attribute type 10 has an invalid length. [ 2024.359542][ T2097] device vxcan1 entered promiscuous mode [ 2024.413827][ T2097] team0: Device vxcan1 is of different type [ 2024.623290][ C1] net_ratelimit: 2711 callbacks suppressed [ 2024.623326][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.623526][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.633760][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.639178][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.650083][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.684506][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.704050][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.719744][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.726265][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2024.731163][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2026.938781][ T2131] device syzkaller0 entered promiscuous mode [ 2026.946942][ T2133] IPv6: Can't replace route, no match found [ 2027.284123][ T2144] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12291'. [ 2029.633285][ C1] net_ratelimit: 4549 callbacks suppressed [ 2029.633303][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.635868][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.640488][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.649172][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.659646][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.688396][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.699153][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.710488][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.721272][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2029.731378][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.643546][ C1] net_ratelimit: 9449 callbacks suppressed [ 2034.643564][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.643819][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.649700][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.659441][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.669883][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.679490][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.689612][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.698485][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.708936][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2034.738067][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2037.280536][ T2167] netlink: 'syz.1.12296': attribute type 10 has an invalid length. [ 2037.431899][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.438307][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2037.579257][ T2187] IPv6: Can't replace route, no match found [ 2038.064023][ T2201] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12306'. [ 2039.161791][ T2214] netlink: 'syz.2.12312': attribute type 10 has an invalid length. [ 2039.209574][ T2214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.653502][ C0] net_ratelimit: 6667 callbacks suppressed [ 2039.653519][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.653931][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.679846][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.682770][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.690034][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.700704][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.709937][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.719160][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.741025][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2039.751111][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2041.104829][ T2264] netlink: 'syz.4.12331': attribute type 29 has an invalid length. [ 2041.143411][ T2264] netlink: 'syz.4.12331': attribute type 29 has an invalid length. [ 2041.273706][ T2265] netlink: 'syz.4.12331': attribute type 29 has an invalid length. [ 2041.652511][ T2278] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12336'. [ 2044.664143][ C1] net_ratelimit: 6915 callbacks suppressed [ 2044.664159][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.664869][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.670835][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.680084][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.689729][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.700207][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.709900][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.719350][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.730409][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.740267][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2044.825445][ T2290] netlink: 'syz.1.12340': attribute type 10 has an invalid length. [ 2044.845448][ T2290] bridge0: port 2(bridge_slave_1) entered disabled state [ 2044.853460][ T2290] bridge0: port 1(bridge_slave_0) entered disabled state [ 2045.238265][ T2304] netlink: 'syz.1.12346': attribute type 29 has an invalid length. [ 2045.261971][ T2304] netlink: 'syz.1.12346': attribute type 29 has an invalid length. [ 2045.399975][ T2304] netlink: 'syz.1.12346': attribute type 29 has an invalid length. [ 2045.780943][ T2319] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12351'. [ 2046.744924][ T2351] netlink: 'syz.0.12364': attribute type 29 has an invalid length. [ 2046.893406][ T2351] netlink: 'syz.0.12364': attribute type 29 has an invalid length. [ 2046.976862][ T2352] netlink: 'syz.0.12364': attribute type 29 has an invalid length. [ 2048.555638][ T2400] netlink: 'syz.5.12383': attribute type 29 has an invalid length. [ 2048.611386][ T2400] netlink: 'syz.5.12383': attribute type 29 has an invalid length. [ 2048.684119][ T2405] netlink: 'syz.5.12383': attribute type 29 has an invalid length. [ 2049.677640][ C1] net_ratelimit: 5123 callbacks suppressed [ 2049.677658][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.678483][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.684154][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.693496][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.703181][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.713453][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.722955][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.732751][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.742857][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2049.751771][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2050.839990][ T2469] netlink: 'syz.2.12400': attribute type 29 has an invalid length. [ 2050.901136][ T2469] netlink: 'syz.2.12400': attribute type 29 has an invalid length. [ 2050.958829][ T2479] netlink: 'syz.2.12400': attribute type 29 has an invalid length. [ 2051.391640][ T2492] netlink: 'syz.2.12407': attribute type 2 has an invalid length. [ 2051.448044][ T2497] netlink: 14 bytes leftover after parsing attributes in process `syz.2.12407'. [ 2051.696539][ T2496] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12408'. [ 2051.712619][ T2496] device caif0 entered promiscuous mode [ 2052.858820][ T2530] netlink: 'syz.0.12422': attribute type 29 has an invalid length. [ 2052.996474][ T2530] netlink: 'syz.0.12422': attribute type 29 has an invalid length. [ 2053.050430][ T2533] netlink: 'syz.0.12422': attribute type 29 has an invalid length. [ 2054.683255][ C1] net_ratelimit: 6239 callbacks suppressed [ 2054.683274][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.683539][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.689751][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.700127][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.728528][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.741061][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.748169][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.751068][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.761252][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.770972][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2054.830955][ T2543] netlink: 'syz.0.12427': attribute type 2 has an invalid length. [ 2054.862441][ T2548] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12427'. [ 2055.910648][ T2594] netlink: 'syz.5.12438': attribute type 29 has an invalid length. [ 2055.982181][ T2594] netlink: 'syz.5.12438': attribute type 29 has an invalid length. [ 2056.225095][ T2594] netlink: 'syz.5.12438': attribute type 29 has an invalid length. [ 2056.619368][ T2610] netlink: 'syz.4.12444': attribute type 2 has an invalid length. [ 2056.671884][ T2615] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12444'. [ 2058.073497][ T2645] netlink: 'syz.1.12451': attribute type 29 has an invalid length. [ 2058.187809][ T2645] netlink: 'syz.1.12451': attribute type 29 has an invalid length. [ 2058.204808][ T2646] netlink: 'syz.1.12451': attribute type 29 has an invalid length. [ 2059.325794][ T2674] netlink: 'syz.5.12459': attribute type 2 has an invalid length. [ 2059.357461][ T2675] netlink: 14 bytes leftover after parsing attributes in process `syz.5.12459'. [ 2059.693770][ C1] net_ratelimit: 4828 callbacks suppressed [ 2059.693786][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.710046][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.710157][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.720043][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.730271][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.739877][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.749213][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.759942][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.769176][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2059.778996][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2060.282535][ T2703] netlink: 'syz.4.12466': attribute type 29 has an invalid length. [ 2060.472504][ T2703] netlink: 'syz.4.12466': attribute type 29 has an invalid length. [ 2064.703751][ C1] net_ratelimit: 6072 callbacks suppressed [ 2064.703774][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.709367][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.712317][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.720329][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.729608][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.739395][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.749677][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.759389][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.769725][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2064.781108][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2066.806564][ T2761] validate_nla: 1 callbacks suppressed [ 2066.806597][ T2761] netlink: 'syz.5.12481': attribute type 29 has an invalid length. [ 2066.902815][ T2766] netlink: 'syz.1.12480': attribute type 2 has an invalid length. [ 2066.922655][ T2761] netlink: 'syz.5.12481': attribute type 29 has an invalid length. [ 2066.949666][ T2766] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12480'. [ 2067.717153][ T2768] netlink: 'syz.5.12481': attribute type 29 has an invalid length. [ 2069.714184][ C0] net_ratelimit: 6479 callbacks suppressed [ 2069.714203][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.723637][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.730468][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.740077][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.749435][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.760022][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.772766][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.779060][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.790451][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2069.798887][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2072.913675][ T2843] netlink: 'syz.2.12501': attribute type 29 has an invalid length. [ 2073.733832][ T2843] netlink: 'syz.2.12501': attribute type 29 has an invalid length. [ 2074.725376][ C1] net_ratelimit: 6936 callbacks suppressed [ 2074.725395][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.742031][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.742071][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.753351][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.761865][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.772171][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.781909][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.792158][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.802056][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2074.810514][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2078.941998][T29607] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 2078.950685][T29607] Bluetooth: hci5: Injecting HCI hardware error event [ 2078.959286][T29607] Bluetooth: hci5: hardware error 0x00 [ 2079.733486][ C1] net_ratelimit: 6443 callbacks suppressed [ 2079.733507][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.750009][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.760075][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.771232][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.781261][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.792525][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.803028][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.806428][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.813968][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2079.823845][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2082.030109][ T2900] device syzkaller0 entered promiscuous mode [ 2082.048324][ T2904] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12527'. [ 2082.767702][ T2891] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 2083.501848][T29607] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 2084.743317][ C0] net_ratelimit: 6447 callbacks suppressed [ 2084.743335][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.749740][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.759892][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.768935][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.778753][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.789540][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.798531][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.808282][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.818524][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2084.828117][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2086.849762][T29607] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 2086.858510][T29607] Bluetooth: hci0: Injecting HCI hardware error event [ 2086.882536][T29607] Bluetooth: hci0: hardware error 0x00 [ 2089.104393][T29607] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 2089.759862][ C1] net_ratelimit: 9812 callbacks suppressed [ 2089.759881][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.760075][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.766295][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.776133][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.786221][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.795175][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.805315][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.815153][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.825090][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2089.836305][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2090.855820][ T2937] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12537'. [ 2090.982814][ T2937] device caif0 entered promiscuous mode [ 2092.184782][ T2966] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.12545'. [ 2094.773559][ C1] net_ratelimit: 6002 callbacks suppressed [ 2094.773579][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.791111][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.792012][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.801096][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.811449][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.821229][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.830396][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.840631][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.850291][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2094.860494][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2095.779959][ T2990] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12553'. [ 2095.848559][ T2990] device caif0 entered promiscuous mode [ 2096.224012][ T2992] device syzkaller0 entered promiscuous mode [ 2098.850354][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.856777][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.783238][ C0] net_ratelimit: 4895 callbacks suppressed [ 2099.783258][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.793682][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.799123][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.809411][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.819089][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.829385][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.839211][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.848268][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.858041][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2099.868062][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.793566][ C1] net_ratelimit: 9368 callbacks suppressed [ 2104.793585][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.794169][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.799993][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.809884][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.819774][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.828988][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.838663][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.848869][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.871053][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2104.887583][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2107.771696][ T3039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12570'. [ 2107.919701][ T3039] device caif0 entered promiscuous mode [ 2108.222582][ T3051] netlink: 'syz.1.12575': attribute type 29 has an invalid length. [ 2108.822826][ T3051] netlink: 'syz.1.12575': attribute type 29 has an invalid length. [ 2108.852846][ T3055] netlink: 'syz.1.12575': attribute type 29 has an invalid length. [ 2108.957528][ T3059] netlink: 'syz.4.12579': attribute type 28 has an invalid length. [ 2109.803249][ C0] net_ratelimit: 8143 callbacks suppressed [ 2109.803268][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.810334][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.819432][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.828784][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.849856][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.859987][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.870889][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.881353][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.891939][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2109.901981][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2111.942534][ T3097] netlink: 'syz.1.12594': attribute type 10 has an invalid length. [ 2112.072681][ T3097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.12594'. [ 2112.158298][ T3097] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2112.206751][ T3097] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2112.381711][ T3097] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2114.813324][ C1] net_ratelimit: 5498 callbacks suppressed [ 2114.813342][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.813990][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.820762][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.829529][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.838912][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.848607][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.859220][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2114.888284][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2115.012396][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2115.022537][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2115.487413][T29607] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 2115.559002][ T3167] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12617'. [ 2115.664197][ T3170] netlink: 'syz.2.12618': attribute type 28 has an invalid length. [ 2116.044421][ T3184] netlink: 40 bytes leftover after parsing attributes in process `syz.5.12621'. [ 2116.596700][ T3184] device caif0 entered promiscuous mode [ 2116.635333][ T3186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2117.462892][ T3206] netlink: 'syz.1.12631': attribute type 28 has an invalid length. [ 2117.731199][ T3210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12634'. [ 2117.997762][ T3217] netlink: 'syz.0.12646': attribute type 28 has an invalid length. [ 2118.310068][ T3219] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12638'. [ 2119.828144][ C1] net_ratelimit: 4660 callbacks suppressed [ 2119.828167][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.844170][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.844910][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.854419][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.865139][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.874719][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.883785][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.895179][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.904888][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.913847][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2119.945282][T29607] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 2120.157980][ T3252] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12651'. [ 2120.206687][ T3251] netlink: 'syz.5.12650': attribute type 28 has an invalid length. [ 2120.700995][ T3261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12665'. [ 2121.743984][ T3285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2121.975432][ T3291] netlink: 'syz.0.12664': attribute type 28 has an invalid length. [ 2122.412104][ T3300] netlink: 'syz.0.12682': attribute type 28 has an invalid length. [ 2122.766888][ T3311] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12674'. [ 2123.197083][ T3322] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12692'. [ 2123.628969][ T3314] device syzkaller0 entered promiscuous mode [ 2123.723518][ T3332] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12696'. [ 2124.833174][ C0] net_ratelimit: 5677 callbacks suppressed [ 2124.833192][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.851684][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.859425][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.862548][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.871772][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.889773][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.891480][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.900705][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.910575][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2124.920742][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.843340][ C1] net_ratelimit: 8737 callbacks suppressed [ 2129.843368][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.843718][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.849352][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.860214][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.870393][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.879226][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.889500][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.898376][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.907999][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2129.918307][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2133.005441][ T3365] netlink: 'syz.1.12687': attribute type 28 has an invalid length. [ 2133.862509][ T3399] bridge0: port 1(bridge_slave_0) entered disabled state [ 2134.853447][ C0] net_ratelimit: 7863 callbacks suppressed [ 2134.853467][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.866590][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.870114][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.879086][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.888768][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.899882][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.908644][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.918634][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.927903][ C0] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2134.937672][ C1] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:3f to non-existent VLAN 815 [ 2135.038566][ T3414] bridge0: port 1(bridge_slave_0) entered disabled state [ 2135.437642][T29607] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 2135.573793][ T3432] netlink: 'syz.2.12715': attribute type 10 has an invalid length. [ 2135.675632][ T3432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12715'. [ 2135.730334][ T3432] device virt_wifi0 left promiscuous mode [ 2135.785786][ T3432] batman_adv: batadv0: Adding interface: virt_wifi0 [ 2135.832742][ T3432] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2136.033058][ T3432] batman_adv: batadv0: Interface activated: virt_wifi0 [ 2138.047990][ T3471] bridge0: port 1(bridge_slave_0) entered disabled state [ 2138.082940][T32230] bridge0: port 5(veth0_to_bridge) entered disabled state [ 2138.389557][ T3499] netlink: 'syz.4.12735': attribute type 10 has an invalid length. [ 2138.397855][ T3499] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12735'. [ 2138.407677][ T3499] device virt_wifi0 left promiscuous mode [ 2138.632875][ T3504] netlink: 'syz.2.12742': attribute type 28 has an invalid length. [ 2138.971250][ T3514] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2138.995838][ T3514] device syzkaller0 entered promiscuous mode [ 2139.722449][ T3530] netlink: 'syz.1.12751': attribute type 2 has an invalid length. [ 2141.512314][ T3530] device 2 entered promiscuous mode [ 2142.149366][ T3559] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 2143.349443][ T3574] device syzkaller0 entered promiscuous mode [ 2143.568484][ T3589] device syzkaller0 entered promiscuous mode [ 2143.600932][ T3593] ÿ: renamed from bond_slave_0 [ 2146.142186][ T3598] netlink: 'syz.4.12784': attribute type 2 has an invalid length. [ 2146.151117][ T3598] netlink: 'syz.4.12784': attribute type 11 has an invalid length. [ 2146.161262][ T3598] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12784'. [ 2148.567520][T29607] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 2149.761497][ T3640] netlink: 'syz.5.12788': attribute type 9 has an invalid length. [ 2149.781969][ T3640] netlink: 61951 bytes leftover after parsing attributes in process `syz.5.12788'. [ 2151.504489][ T3690] ÿ: renamed from bond_slave_0 [ 2152.569478][ T3694] netlink: 'syz.1.12802': attribute type 2 has an invalid length. [ 2152.581736][ T3694] netlink: 'syz.1.12802': attribute type 11 has an invalid length. [ 2152.600333][ T3694] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12802'. [ 2156.850203][ T3755] ÿ: renamed from bond_slave_0 [ 2156.860245][ T3755] netlink: 'syz.0.12822': attribute type 2 has an invalid length. [ 2156.883406][ T3755] netlink: 'syz.0.12822': attribute type 11 has an invalid length. [ 2156.891358][ T3755] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12822'. [ 2156.935391][ T3755] device pim6reg1 left promiscuous mode [ 2157.017757][ T3762] netlink: 'syz.4.12824': attribute type 9 has an invalid length. [ 2157.075914][ T3762] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.12824'. [ 2158.544435][ T3780] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2158.562035][ T3780] device syzkaller0 entered promiscuous mode [ 2160.295153][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.301504][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.084267][ T3799] device syzkaller0 entered promiscuous mode [ 2161.197289][ T3805] netlink: 'syz.1.12840': attribute type 9 has an invalid length. [ 2161.227591][ T3805] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.12840'. [ 2163.347298][ T3815] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.12853'. [ 2164.688372][ T3831] netlink: 'syz.5.12847': attribute type 10 has an invalid length. [ 2164.771692][ T3831] bridge0: port 4(team0) entered disabled state [ 2164.851177][ T3831] device team0 left promiscuous mode [ 2164.870097][ T3831] device team_slave_0 left promiscuous mode [ 2164.889684][ T3831] device team_slave_1 left promiscuous mode [ 2164.904228][ T3831] device netdevsim0 left promiscuous mode [ 2164.931179][ T3831] bridge0: port 4(team0) entered disabled state [ 2165.006012][ T3831] team0 (unregistering): Port device team_slave_0 removed [ 2165.088357][ T3831] team0 (unregistering): Port device team_slave_1 removed [ 2165.143585][ T3831] team0 (unregistering): Port device netdevsim0 removed [ 2167.687123][ T3873] device syzkaller0 entered promiscuous mode [ 2169.901722][ T3880] netlink: 'syz.4.12869': attribute type 10 has an invalid length. [ 2173.168205][ T3930] netlink: 'syz.2.12885': attribute type 10 has an invalid length. [ 2174.960210][ T3974] device syzkaller0 entered promiscuous mode [ 2174.976963][ T3971] netlink: 'syz.1.12900': attribute type 10 has an invalid length. [ 2177.389459][ T3989] netlink: 'syz.4.12913': attribute type 2 has an invalid length. [ 2177.958881][ T4006] netlink: 132 bytes leftover after parsing attributes in process `syz.5.12919'. [ 2178.013006][ T4007] netlink: 'syz.2.12918': attribute type 13 has an invalid length. [ 2178.043973][ T4007] netlink: 152 bytes leftover after parsing attributes in process `syz.2.12918'. [ 2178.100273][ T4007] erspan0: refused to change device tx_queue_len [ 2178.114131][ T4007] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2178.132281][ T4007] net_ratelimit: 2901 callbacks suppressed [ 2178.132317][ T4007] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2184.025139][ T4061] device syzkaller0 entered promiscuous mode [ 2187.885108][ T4096] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12946'. [ 2187.895349][ T4096] openvswitch: netlink: Message has 6 unknown bytes. [ 2189.631728][ T4095] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2189.641557][ T4095] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2189.654627][ T4095] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2189.923534][ T4101] device syzkaller0 entered promiscuous mode [ 2190.110033][ T4115] netlink: 'syz.1.12954': attribute type 21 has an invalid length. [ 2190.119284][ T4115] netlink: 'syz.1.12954': attribute type 1 has an invalid length. [ 2190.129434][ T4115] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.12954'. [ 2192.544803][ T4134] netlink: 'syz.4.12962': attribute type 10 has an invalid length. [ 2192.565602][ T4134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12962'. [ 2192.589127][ T4134] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2192.610751][ T4134] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 2195.598786][ T4146] device syzkaller0 entered promiscuous mode [ 2200.765679][ T4179] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12982'. [ 2200.831397][ T4189] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12984'. [ 2200.831777][ T4179] openvswitch: netlink: Message has 6 unknown bytes. [ 2203.849666][T29607] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4 [ 2203.991124][T29607] Bluetooth: hci3: Malformed LE Event: 0x0d [ 2204.116032][ T4205] netlink: 'syz.4.12993': attribute type 13 has an invalid length. [ 2204.142981][ T4205] netlink: 152 bytes leftover after parsing attributes in process `syz.4.12993'. [ 2204.188723][ T4205] erspan0: refused to change device tx_queue_len [ 2204.199826][ T4205] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2204.220024][ T4205] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2204.487963][ T4214] device syzkaller0 entered promiscuous mode [ 2207.623527][ T4229] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13001'. [ 2207.632832][ T4229] openvswitch: netlink: Message has 6 unknown bytes. [ 2210.061889][T29607] Bluetooth: hci4: Malformed LE Event: 0x0d [ 2210.090848][ T4244] netlink: 'syz.5.13008': attribute type 13 has an invalid length. [ 2210.100163][ T4244] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13008'. [ 2212.876816][ T4244] erspan0: refused to change device tx_queue_len [ 2212.887965][ T4244] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2213.125098][ T4255] netlink: 'syz.1.13012': attribute type 2 has an invalid length. [ 2213.134256][ T4247] device syzkaller0 entered promiscuous mode [ 2216.664526][ T4283] netlink: 14 bytes leftover after parsing attributes in process `syz.5.13019'. [ 2216.686117][ T4283] openvswitch: netlink: Message has 6 unknown bytes. [ 2218.432403][ T4280] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2218.441986][ T4280] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2218.463347][ T4280] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2218.723087][ T4292] netlink: 'syz.1.13022': attribute type 13 has an invalid length. [ 2218.733339][ T4292] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13022'. [ 2218.921038][ T4292] erspan0: refused to change device tx_queue_len [ 2218.949430][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2218.967328][ T4292] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2219.413806][ T4319] netlink: 'syz.0.13041': attribute type 13 has an invalid length. [ 2219.421888][ T4319] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13041'. [ 2219.484201][ T4319] erspan0: refused to change device tx_queue_len [ 2219.505831][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2219.526217][ T4319] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2220.028595][ T4335] netlink: 'syz.0.13035': attribute type 2 has an invalid length. [ 2221.152928][ T4360] netlink: 'syz.0.13045': attribute type 13 has an invalid length. [ 2221.182489][ T4360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13045'. [ 2221.207250][ T4360] erspan0: refused to change device tx_queue_len [ 2221.236949][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2221.248188][ T4360] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2221.309642][ T4367] netlink: 'syz.4.13048': attribute type 10 has an invalid length. [ 2221.318484][ T4367] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13048'. [ 2221.429065][ T4369] netlink: 'syz.2.13052': attribute type 2 has an invalid length. [ 2221.638485][ T4373] device syzkaller0 entered promiscuous mode [ 2221.672657][ T4378] netlink: 'syz.1.13064': attribute type 13 has an invalid length. [ 2221.695624][ T4378] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13064'. [ 2221.725994][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.732402][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2221.739393][ T4378] erspan0: refused to change device tx_queue_len [ 2221.753363][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2221.772594][ T4378] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2225.693575][ T4385] netlink: 'syz.1.13066': attribute type 13 has an invalid length. [ 2225.701685][ T4385] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13066'. [ 2225.711208][ T4385] erspan0: refused to change device tx_queue_len [ 2225.717856][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2225.725623][ T4385] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2225.748449][ T4398] netlink: 14548 bytes leftover after parsing attributes in process `syz.5.13059'. [ 2225.844094][ T4403] device syzkaller0 entered promiscuous mode [ 2227.849899][ T4416] netlink: 'syz.5.13065': attribute type 9 has an invalid length. [ 2232.241947][ T4452] netlink: 'syz.2.13076': attribute type 13 has an invalid length. [ 2232.282851][ T4452] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13076'. [ 2232.353371][ T4452] erspan0: refused to change device tx_queue_len [ 2232.374743][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2232.405409][ T4452] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2233.124456][ T4462] device syzkaller0 entered promiscuous mode [ 2233.827328][ T4477] netlink: 'syz.5.13084': attribute type 2 has an invalid length. [ 2236.520170][ T4481] netlink: 'syz.1.13088': attribute type 2 has an invalid length. [ 2236.529359][ T4481] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13088'. [ 2236.715146][ T4490] netlink: 'syz.5.13100': attribute type 2 has an invalid length. [ 2240.693585][ T4509] device syzkaller0 entered promiscuous mode [ 2246.257626][ T4533] netlink: 'syz.5.13102': attribute type 2 has an invalid length. [ 2246.272951][ T4533] netlink: 17 bytes leftover after parsing attributes in process `syz.5.13102'. [ 2246.440529][ T4542] netlink: 'syz.0.13105': attribute type 13 has an invalid length. [ 2246.453275][ T4542] netlink: 152 bytes leftover after parsing attributes in process `syz.0.13105'. [ 2249.157692][ T4542] erspan0: refused to change device tx_queue_len [ 2249.173461][ T4542] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2249.189252][ T4542] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2250.255479][ T4571] device syzkaller0 entered promiscuous mode [ 2254.350560][ T4581] netlink: 144 bytes leftover after parsing attributes in process `syz.4.13120'. [ 2254.758719][ T4599] netlink: 'syz.1.13129': attribute type 21 has an invalid length. [ 2256.189390][ T4636] netlink: 'syz.4.13146': attribute type 13 has an invalid length. [ 2256.197781][ T4636] netlink: 172 bytes leftover after parsing attributes in process `syz.4.13146'. [ 2256.209582][ T4636] erspan0: refused to change device tx_queue_len [ 2259.278570][ T4647] device veth1_to_hsr left promiscuous mode [ 2259.292692][ T4647] bridge0: port 3(veth1_to_hsr) entered disabled state [ 2259.338731][ T4647] device bridge_slave_1 left promiscuous mode [ 2259.362972][ T4647] bridge0: port 2(bridge_slave_1) entered disabled state [ 2259.393012][ T4647] bridge0: port 1(bridge_slave_0) entered disabled state [ 2259.667733][ T4662] netlink: 'syz.0.13152': attribute type 2 has an invalid length. [ 2259.695263][ T4662] netlink: 17 bytes leftover after parsing attributes in process `syz.0.13152'. [ 2260.048978][ T4668] device bridge_slave_1 left promiscuous mode [ 2260.056076][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state [ 2260.258107][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state [ 2260.416200][ T4681] netlink: 'syz.0.13163': attribute type 21 has an invalid length. [ 2260.967003][ T4700] netlink: 'syz.5.13172': attribute type 3 has an invalid length. [ 2260.975286][ T4700] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13172'. [ 2261.650117][ T4720] netlink: 'syz.4.13180': attribute type 13 has an invalid length. [ 2261.658750][ T4720] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13180'. [ 2261.668989][ T4720] erspan0: refused to change device tx_queue_len [ 2261.676516][ T4720] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2263.433526][ T4756] netlink: 'syz.2.13195': attribute type 13 has an invalid length. [ 2263.442190][ T4756] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13195'. [ 2263.811007][ T4756] erspan0: refused to change device tx_queue_len [ 2263.817991][ T4756] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2263.829631][ T4756] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2263.970228][ T4771] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13203'. [ 2264.003855][ T4776] netlink: 'syz.4.13199': attribute type 10 has an invalid length. [ 2264.024358][ T4776] netlink: 40 bytes leftover after parsing attributes in process `syz.4.13199'. [ 2264.034146][ T4776] device ipvlan1 entered promiscuous mode [ 2264.050499][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2264.063716][ T4776] bridge0: port 3(ipvlan1) entered blocking state [ 2264.097693][ T4776] bridge0: port 3(ipvlan1) entered disabled state [ 2264.115559][ T4776] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2264.126383][ T4776] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2264.173674][ T4782] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13199'. [ 2265.942379][ T4802] netlink: 'syz.0.13212': attribute type 3 has an invalid length. [ 2265.977795][ T4802] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13212'. [ 2266.458056][ T4820] netlink: 'syz.2.13232': attribute type 3 has an invalid length. [ 2266.474826][ T4820] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13232'. [ 2266.500264][ T4823] netlink: 'syz.5.13217': attribute type 13 has an invalid length. [ 2266.543659][ T4823] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13217'. [ 2266.570054][ T4823] erspan0: refused to change device tx_queue_len [ 2266.583557][ T4823] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2268.127028][ T4858] netlink: 'syz.4.13235': attribute type 3 has an invalid length. [ 2268.140534][ T4858] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13235'. [ 2268.508145][ T4872] netlink: 'syz.1.13237': attribute type 13 has an invalid length. [ 2268.522460][ T4872] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13237'. [ 2268.539552][ T4872] erspan0: refused to change device tx_queue_len [ 2268.548027][ T4872] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2268.562396][ T4872] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2268.995491][T29607] Bluetooth: hci4: unexpected event 0x33 length: 15 > 10 [ 2269.208261][ T4896] netlink: 'syz.1.13251': attribute type 3 has an invalid length. [ 2269.280728][ T4896] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13251'. [ 2270.162196][ T4916] netlink: 'syz.1.13260': attribute type 13 has an invalid length. [ 2270.175435][ T4916] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13260'. [ 2270.198679][ T4916] erspan0: refused to change device tx_queue_len [ 2270.209289][ T4916] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2270.221376][ T4916] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2270.932449][ T4923] netlink: 188 bytes leftover after parsing attributes in process `syz.1.13265'. [ 2271.468639][ T4948] netlink: 'syz.1.13272': attribute type 10 has an invalid length. [ 2271.481095][ T4948] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13272'. [ 2271.491915][ T4948] device ipvlan1 entered promiscuous mode [ 2271.521133][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2271.540645][ T4948] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2271.548841][ T4948] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2271.621695][ T4948] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.13272'. [ 2271.638264][ T4948] bridge_slave_1: default FDB implementation only supports local addresses [ 2272.040198][ T4959] netlink: 'syz.2.13281': attribute type 3 has an invalid length. [ 2272.064107][ T4959] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13281'. [ 2272.067102][ T4961] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13280'. [ 2272.317258][ T4970] netlink: 'syz.2.13296': attribute type 3 has an invalid length. [ 2272.334175][ T4970] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13296'. [ 2272.708848][ T4986] netlink: 'syz.0.13292': attribute type 10 has an invalid length. [ 2272.724938][ T4986] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13292'. [ 2272.738209][ T4986] device ipvlan1 entered promiscuous mode [ 2272.772862][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2272.788786][ T4986] bridge0: port 3(ipvlan1) entered blocking state [ 2272.797701][ T4986] bridge0: port 3(ipvlan1) entered disabled state [ 2272.810972][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2272.822485][ T4986] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2272.907897][ T4986] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.13292'. [ 2272.922619][ T4986] bridge_slave_1: default FDB implementation only supports local addresses [ 2273.670335][ T5006] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13299'. [ 2274.127848][ T5017] netlink: 'syz.5.13305': attribute type 10 has an invalid length. [ 2274.145423][ T5017] netlink: 40 bytes leftover after parsing attributes in process `syz.5.13305'. [ 2274.155725][ T5017] device ipvlan1 entered promiscuous mode [ 2274.177168][ T5017] bridge0: port 4(ipvlan1) entered blocking state [ 2274.187026][ T5017] bridge0: port 4(ipvlan1) entered disabled state [ 2274.195774][ T5017] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2274.320064][ T5025] netlink: 1047 bytes leftover after parsing attributes in process `syz.5.13305'. [ 2274.344496][ T5025] bridge_slave_1: default FDB implementation only supports local addresses [ 2274.600446][T29607] Bluetooth: hci2: unexpected event 0x33 length: 15 > 10 [ 2275.407948][ T5053] netlink: 'syz.0.13319': attribute type 13 has an invalid length. [ 2275.457350][ T5053] erspan0: refused to change device tx_queue_len [ 2275.470045][ T5053] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2275.479556][ T5053] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2276.280593][ T5061] netlink: 'syz.0.13333': attribute type 13 has an invalid length. [ 2276.332620][ T5061] erspan0: refused to change device tx_queue_len [ 2276.340647][ T5061] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2276.354980][ T5061] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2276.387567][ T5067] netlink: 'syz.2.13322': attribute type 10 has an invalid length. [ 2276.407874][ T5067] device ipvlan1 entered promiscuous mode [ 2276.432127][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2276.457783][ T5067] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 2276.476802][ T5067] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2276.570168][ T5069] __nla_validate_parse: 4 callbacks suppressed [ 2276.570188][ T5069] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13322'. [ 2276.622342][ T5069] bridge_slave_1: default FDB implementation only supports local addresses [ 2277.638951][ T5099] netlink: 'syz.5.13340': attribute type 13 has an invalid length. [ 2277.661994][ T5099] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13340'. [ 2277.677993][ T5099] erspan0: refused to change device tx_queue_len [ 2277.687983][ T5099] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2277.726102][ T5098] IPv6: …: Disabled Multicast RS [ 2277.731772][ T5101] device pim6reg1 left promiscuous mode [ 2278.165476][ T5118] netlink: 'syz.2.13348': attribute type 4 has an invalid length. [ 2278.175195][ T5118] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13348'. [ 2281.001647][ T5139] device sit0 left promiscuous mode [ 2281.391095][ T5145] netlink: 'syz.2.13355': attribute type 13 has an invalid length. [ 2281.404166][ T5145] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13355'. [ 2281.548189][ T5145] erspan0: refused to change device tx_queue_len [ 2281.563776][ T5145] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 2281.582652][ T5145] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2281.602213][ T5146] device sit0 entered promiscuous mode [ 2282.331032][T29607] Bluetooth: hci4: unexpected subevent 0x12 length: 150 > 5 [ 2282.620197][ T5182] netlink: 'syz.5.13373': attribute type 13 has an invalid length. [ 2282.630094][ T5182] netlink: 152 bytes leftover after parsing attributes in process `syz.5.13373'. [ 2282.646682][ T5182] erspan0: refused to change device tx_queue_len [ 2282.675255][ T5182] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 2283.185935][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.192465][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.848664][ T5192] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.13377'. [ 2283.861210][ T5192] openvswitch: netlink: Flow actions attr not present in new flow. [ 2285.241666][ T5228] netlink: 'syz.0.13390': attribute type 4 has an invalid length. [ 2285.257186][ T5228] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13390'. [ 2286.175020][ T5249] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13400'. [ 2286.458842][ T5260] device sit0 left promiscuous mode [ 2286.678300][ T5263] device sit0 entered promiscuous mode [ 2287.150256][ T5279] netlink: 'syz.2.13413': attribute type 4 has an invalid length. [ 2287.197299][ T5279] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.13413'. [ 2287.522090][ T5288] device sit0 entered promiscuous mode [ 2288.695276][ T5300] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13421'. [ 2288.807958][T29607] Bluetooth: hci3: unexpected subevent 0x12 length: 150 > 5 [ 2288.901817][ T5312] netlink: 'syz.4.13428': attribute type 21 has an invalid length. [ 2288.910843][ T5312] netlink: 'syz.4.13428': attribute type 22 has an invalid length. [ 2288.919699][ T5312] netlink: 14380 bytes leftover after parsing attributes in process `syz.4.13428'. [ 2289.271588][ T5323] device wlan1 entered promiscuous mode [ 2289.905630][ T5343] netlink: 'syz.2.13436': attribute type 9 has an invalid length. [ 2289.928993][ T5343] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.13436'. [ 2290.636525][ T5356] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13440'. [ 2291.015356][ T5366] delete_channel: no stack [ 2291.355054][ T5372] netlink: 'syz.1.13449': attribute type 3 has an invalid length. [ 2291.428924][ T5372] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13449'. [ 2292.941939][ T5412] netlink: 'syz.5.13467': attribute type 4 has an invalid length. [ 2292.958332][ T5412] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13467'. [ 2293.905618][ T5438] device wlan1 entered promiscuous mode [ 2294.147525][ T5442] delete_channel: no stack [ 2294.249879][ T5445] netlink: 'syz.0.13474': attribute type 10 has an invalid length. [ 2294.272967][ T5445] device hsr0 left promiscuous mode [ 2294.751417][ T5463] netlink: 'syz.4.13481': attribute type 4 has an invalid length. [ 2294.773301][ T5463] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.13481'. [ 2295.462931][ T5481] netlink: 'syz.5.13489': attribute type 9 has an invalid length. [ 2295.482698][ T5481] netlink: 126588 bytes leftover after parsing attributes in process `syz.5.13489'. [ 2295.626951][ T5486] netlink: 188 bytes leftover after parsing attributes in process `syz.2.13491'. [ 2295.985692][ T5498] netlink: 'syz.0.13500': attribute type 4 has an invalid length. [ 2296.015992][ T5498] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.13500'. [ 2296.068774][ T5502] netlink: 188 bytes leftover after parsing attributes in process `syz.1.13509'. [ 2296.073941][ T5504] netlink: 'syz.5.13501': attribute type 10 has an invalid length. [ 2296.099120][ T5504] netlink: 2 bytes leftover after parsing attributes in process `syz.5.13501'. [ 2296.111605][ T5504] nr0: port 1(hsr0) entered disabled state [ 2296.172922][ T5504] bridge0: port 4(hsr0) entered blocking state [ 2296.193675][ T5504] bridge0: port 4(hsr0) entered disabled state [ 2296.226028][ T5504] bridge0: port 4(hsr0) entered blocking state [ 2296.233090][ T5504] bridge0: port 4(hsr0) entered forwarding state [ 2296.569627][ T5515] netlink: 'syz.1.13507': attribute type 9 has an invalid length. [ 2296.588789][ T5515] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.13507'. [ 2297.395057][ T5543] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13514'. [ 2297.549436][ T5543] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2297.602705][ T5548] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13517'. [ 2297.767584][ T5551] netlink: 'syz.1.13515': attribute type 4 has an invalid length. [ 2297.802022][ T5551] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.13515'. [ 2299.703084][ T5594] netlink: 'syz.5.13531': attribute type 4 has an invalid length. [ 2299.786215][ T5594] __nla_validate_parse: 1 callbacks suppressed [ 2299.786252][ T5594] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13531'. [ 2301.012694][ T5627] netlink: 'syz.0.13540': attribute type 10 has an invalid length. [ 2301.027328][ T5627] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13540'. [ 2301.037498][ T5627] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2301.050841][ T5627] device hsr0 entered promiscuous mode [ 2301.061385][ T5627] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2301.097919][ T5627] bridge0: port 3(hsr0) entered blocking state [ 2301.143934][ T5627] bridge0: port 3(hsr0) entered disabled state [ 2301.198478][ T5627] bridge0: port 3(hsr0) entered blocking state [ 2301.206221][ T5627] bridge0: port 3(hsr0) entered forwarding state [ 2301.532360][ T5642] netlink: 'syz.5.13547': attribute type 4 has an invalid length. [ 2301.543496][ T5642] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.13547'. [ 2301.793118][ T5651] netlink: 'syz.5.13553': attribute type 3 has an invalid length. [ 2301.833642][ T5651] netlink: 105116 bytes leftover after parsing attributes in process `syz.5.13553'. [ 2301.898178][ T5659] device wlan1 entered promiscuous mode [ 2302.323534][ T5673] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.13557'. [ 2302.507354][ T5673] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2302.530451][ T5673] CPU: 1 PID: 5673 Comm: syz.4.13557 Not tainted syzkaller #0 [ 2302.537975][ T5673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2302.548096][ T5673] Call Trace: [ 2302.551404][ T5673] [ 2302.554371][ T5673] dump_stack_lvl+0x188/0x24e [ 2302.559112][ T5673] ? show_regs_print_info+0x12/0x12 [ 2302.564355][ T5673] ? load_image+0x400/0x400 [ 2302.568904][ T5673] sysfs_warn_dup+0x8a/0xa0 [ 2302.573439][ T5673] sysfs_do_create_link_sd+0xc0/0x110 [ 2302.578848][ T5673] device_add+0x7ed/0xfb0 [ 2302.583210][ T5673] wiphy_register+0x1d9f/0x2ac0 [ 2302.588093][ T5673] ? cfg80211_event_work+0x40/0x40 [ 2302.593225][ T5673] ? ieee80211_init_rate_ctrl_alg+0x11d/0x5e0 [ 2302.599319][ T5673] ieee80211_register_hw+0x2d00/0x39f0 [ 2302.604828][ T5673] ? ieee80211_register_hw+0xf41/0x39f0 [ 2302.610420][ T5673] ? ieee80211_register_hw+0xe41/0x39f0 [ 2302.616013][ T5673] ? ieee80211_tasklet_handler+0x20/0x20 [ 2302.621696][ T5673] ? memset+0x1e/0x40 [ 2302.625710][ T5673] ? __hrtimer_init+0x186/0x270 [ 2302.630615][ T5673] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2302.636401][ T5673] hwsim_new_radio_nl+0xafa/0xce0 [ 2302.641483][ T5673] genl_family_rcv_msg_doit+0x22a/0x330 [ 2302.647061][ T5673] ? end_current_label_crit_section+0x170/0x170 [ 2302.653344][ T5673] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2302.659298][ T5673] ? bpf_lsm_capable+0x5/0x10 [ 2302.664021][ T5673] ? security_capable+0x85/0xb0 [ 2302.668914][ T5673] genl_rcv_msg+0x604/0x790 [ 2302.673464][ T5673] ? genl_bind+0x360/0x360 [ 2302.677915][ T5673] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2302.684299][ T5673] netlink_rcv_skb+0x1fb/0x450 [ 2302.689115][ T5673] ? genl_bind+0x360/0x360 [ 2302.693571][ T5673] ? netlink_ack+0x1170/0x1170 [ 2302.698382][ T5673] ? lockdep_hardirqs_on+0x94/0x140 [ 2302.703627][ T5673] ? down_read+0x1a8/0x2d0 [ 2302.708086][ T5673] genl_rcv+0x24/0x40 [ 2302.712106][ T5673] netlink_unicast+0x74d/0x8d0 [ 2302.716921][ T5673] netlink_sendmsg+0x8ad/0xbd0 [ 2302.721733][ T5673] ? netlink_getsockopt+0x550/0x550 [ 2302.726975][ T5673] ? aa_sock_msg_perm+0x94/0x150 [ 2302.731964][ T5673] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2302.737282][ T5673] ? security_socket_sendmsg+0x7c/0xa0 [ 2302.742798][ T5673] ? netlink_getsockopt+0x550/0x550 [ 2302.748041][ T5673] ____sys_sendmsg+0x5be/0x970 [ 2302.752844][ T5673] ? __sys_sendmsg_sock+0x30/0x30 [ 2302.757884][ T5673] ? __import_iovec+0x315/0x500 [ 2302.762775][ T5673] ? import_iovec+0x6f/0xa0 [ 2302.767301][ T5673] ___sys_sendmsg+0x2a2/0x360 [ 2302.771994][ T5673] ? __sys_sendmsg+0x290/0x290 [ 2302.776776][ T5673] ? ktime_get_real_ts64+0x440/0x440 [ 2302.782099][ T5673] __se_sys_sendmsg+0x1bb/0x2a0 [ 2302.786962][ T5673] ? ct_nmi_exit+0x145/0x1c0 [ 2302.791549][ T5673] ? __x64_sys_sendmsg+0x80/0x80 [ 2302.796522][ T5673] ? lockdep_hardirqs_on+0x94/0x140 [ 2302.801774][ T5673] do_syscall_64+0x4c/0xa0 [ 2302.806223][ T5673] ? clear_bhb_loop+0x60/0xb0 [ 2302.810932][ T5673] ? clear_bhb_loop+0x60/0xb0 [ 2302.815647][ T5673] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2302.821576][ T5673] RIP: 0033:0x7f6cb5b9ce59 [ 2302.826013][ T5673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2302.845646][ T5673] RSP: 002b:00007f6cb69c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2302.854088][ T5673] RAX: ffffffffffffffda RBX: 00007f6cb5e16090 RCX: 00007f6cb5b9ce59 [ 2302.862092][ T5673] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2302.870089][ T5673] RBP: 00007f6cb5c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2302.878088][ T5673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2302.886090][ T5673] R13: 00007f6cb5e16128 R14: 00007f6cb5e16090 R15: 00007ffc4f74a398 [ 2302.894110][ T5673] [ 2302.942854][ T5681] netlink: 'syz.2.13559': attribute type 10 has an invalid length. [ 2302.951150][ T5681] netlink: 2 bytes leftover after parsing attributes in process `syz.2.13559'. [ 2302.960925][ T5681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2302.971490][ T5681] device hsr0 entered promiscuous mode [ 2302.978631][ T5681] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 2303.207412][ T5692] device sit0 left promiscuous mode [ 2303.366796][ T5701] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13566'. [ 2303.449993][ T5696] device sit0 entered promiscuous mode [ 2303.526878][ T5701] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2303.538735][ T5701] CPU: 1 PID: 5701 Comm: syz.0.13566 Not tainted syzkaller #0 [ 2303.546245][ T5701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2303.556325][ T5701] Call Trace: [ 2303.559618][ T5701] [ 2303.562569][ T5701] dump_stack_lvl+0x188/0x24e [ 2303.567280][ T5701] ? show_regs_print_info+0x12/0x12 [ 2303.572500][ T5701] ? load_image+0x400/0x400 [ 2303.577040][ T5701] sysfs_warn_dup+0x8a/0xa0 [ 2303.581574][ T5701] sysfs_do_create_link_sd+0xc0/0x110 [ 2303.586985][ T5701] device_add+0x7ed/0xfb0 [ 2303.591351][ T5701] wiphy_register+0x1d9f/0x2ac0 [ 2303.596250][ T5701] ? cfg80211_event_work+0x40/0x40 [ 2303.601381][ T5701] ? minstrel_ht_alloc+0x894/0xa20 [ 2303.606525][ T5701] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2303.612622][ T5701] ieee80211_register_hw+0x2d00/0x39f0 [ 2303.618116][ T5701] ? ieee80211_register_hw+0xf41/0x39f0 [ 2303.623678][ T5701] ? ieee80211_register_hw+0xe41/0x39f0 [ 2303.629252][ T5701] ? ieee80211_tasklet_handler+0x20/0x20 [ 2303.634920][ T5701] ? memset+0x1e/0x40 [ 2303.638914][ T5701] ? __hrtimer_init+0x186/0x270 [ 2303.643784][ T5701] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2303.649558][ T5701] hwsim_new_radio_nl+0xafa/0xce0 [ 2303.654617][ T5701] genl_family_rcv_msg_doit+0x22a/0x330 [ 2303.660182][ T5701] ? end_current_label_crit_section+0x170/0x170 [ 2303.666449][ T5701] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2303.672375][ T5701] ? bpf_lsm_capable+0x5/0x10 [ 2303.677069][ T5701] ? security_capable+0x85/0xb0 [ 2303.681950][ T5701] genl_rcv_msg+0x604/0x790 [ 2303.686484][ T5701] ? genl_bind+0x360/0x360 [ 2303.690911][ T5701] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2303.697285][ T5701] netlink_rcv_skb+0x1fb/0x450 [ 2303.702082][ T5701] ? genl_bind+0x360/0x360 [ 2303.706532][ T5701] ? netlink_ack+0x1170/0x1170 [ 2303.711330][ T5701] ? down_read+0x1a8/0x2d0 [ 2303.715784][ T5701] genl_rcv+0x24/0x40 [ 2303.719778][ T5701] netlink_unicast+0x74d/0x8d0 [ 2303.724578][ T5701] netlink_sendmsg+0x8ad/0xbd0 [ 2303.729378][ T5701] ? netlink_getsockopt+0x550/0x550 [ 2303.734693][ T5701] ? aa_sock_msg_perm+0x94/0x150 [ 2303.739648][ T5701] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2303.744945][ T5701] ? security_socket_sendmsg+0x7c/0xa0 [ 2303.750434][ T5701] ? netlink_getsockopt+0x550/0x550 [ 2303.755653][ T5701] ____sys_sendmsg+0x5be/0x970 [ 2303.760445][ T5701] ? __sys_sendmsg_sock+0x30/0x30 [ 2303.765497][ T5701] ? __import_iovec+0x315/0x500 [ 2303.770371][ T5701] ? import_iovec+0x6f/0xa0 [ 2303.774892][ T5701] ___sys_sendmsg+0x2a2/0x360 [ 2303.779601][ T5701] ? try_to_wake_up+0x6ae/0x1080 [ 2303.784568][ T5701] ? __sys_sendmsg+0x290/0x290 [ 2303.789409][ T5701] __se_sys_sendmsg+0x1bb/0x2a0 [ 2303.794372][ T5701] ? __x64_sys_sendmsg+0x80/0x80 [ 2303.799351][ T5701] ? lockdep_hardirqs_on+0x94/0x140 [ 2303.804573][ T5701] do_syscall_64+0x4c/0xa0 [ 2303.809017][ T5701] ? clear_bhb_loop+0x60/0xb0 [ 2303.813711][ T5701] ? clear_bhb_loop+0x60/0xb0 [ 2303.818410][ T5701] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2303.824317][ T5701] RIP: 0033:0x7ff5dbf9ce59 [ 2303.828745][ T5701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2303.848374][ T5701] RSP: 002b:00007ff5dce24028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2303.856816][ T5701] RAX: ffffffffffffffda RBX: 00007ff5dc216090 RCX: 00007ff5dbf9ce59 [ 2303.864803][ T5701] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2303.872785][ T5701] RBP: 00007ff5dc032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2303.880857][ T5701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2303.888862][ T5701] R13: 00007ff5dc216128 R14: 00007ff5dc216090 R15: 00007ffc3ca603d8 [ 2303.896873][ T5701] [ 2304.300779][ T5716] device wlan1 entered promiscuous mode [ 2306.713875][ T5750] device sit0 entered promiscuous mode [ 2307.189565][ T5764] device wlan1 entered promiscuous mode [ 2307.827585][ T5784] netlink: 'syz.1.13593': attribute type 3 has an invalid length. [ 2307.872514][ T5784] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.13593'. [ 2308.001448][ T5793] netlink: 'syz.4.13596': attribute type 1 has an invalid length. [ 2308.043577][ T5793] netlink: 83992 bytes leftover after parsing attributes in process `syz.4.13596'. [ 2308.528668][ T5810] delete_channel: no stack [ 2309.369938][ T5839] netlink: 'syz.2.13615': attribute type 10 has an invalid length. [ 2309.662050][ T5847] device sit0 left promiscuous mode [ 2309.911506][ T5861] netlink: 'syz.2.13620': attribute type 3 has an invalid length. [ 2309.928742][ T5851] device sit0 entered promiscuous mode [ 2309.968957][ T5861] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.13620'. [ 2310.083417][ T5862] IPv6: Can't replace route, no match found [ 2310.277410][ T5869] netlink: 122896 bytes leftover after parsing attributes in process `syz.5.13621'. [ 2310.351748][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13623'. [ 2310.382862][ T5869] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2310.551592][T29607] Bluetooth: hci3: unexpected event 0x36 length: 15 > 7 [ 2311.617219][ T5903] delete_channel: no stack [ 2311.857089][ T5914] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.13640'. [ 2311.900185][ T5914] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2311.917215][ T5920] netlink: 'syz.2.13643': attribute type 2 has an invalid length. [ 2311.943235][ T5914] CPU: 1 PID: 5914 Comm: syz.4.13640 Not tainted syzkaller #0 [ 2311.950862][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2311.960954][ T5914] Call Trace: [ 2311.964320][ T5914] [ 2311.967287][ T5914] dump_stack_lvl+0x188/0x24e [ 2311.972025][ T5914] ? show_regs_print_info+0x12/0x12 [ 2311.977274][ T5914] ? load_image+0x400/0x400 [ 2311.981843][ T5914] sysfs_warn_dup+0x8a/0xa0 [ 2311.986389][ T5914] sysfs_do_create_link_sd+0xc0/0x110 [ 2311.991809][ T5914] device_add+0x7ed/0xfb0 [ 2311.996205][ T5914] wiphy_register+0x1d9f/0x2ac0 [ 2312.001141][ T5914] ? cfg80211_event_work+0x40/0x40 [ 2312.006303][ T5914] ? minstrel_ht_alloc+0x894/0xa20 [ 2312.011475][ T5914] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2312.017591][ T5914] ieee80211_register_hw+0x2d00/0x39f0 [ 2312.023101][ T5914] ? ieee80211_register_hw+0xf41/0x39f0 [ 2312.028749][ T5914] ? ieee80211_register_hw+0xe41/0x39f0 [ 2312.034319][ T5914] ? ieee80211_tasklet_handler+0x20/0x20 [ 2312.039978][ T5914] ? memset+0x1e/0x40 [ 2312.043966][ T5914] ? __hrtimer_init+0x186/0x270 [ 2312.048834][ T5914] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2312.054619][ T5914] hwsim_new_radio_nl+0xafa/0xce0 [ 2312.059671][ T5914] genl_family_rcv_msg_doit+0x22a/0x330 [ 2312.065226][ T5914] ? end_current_label_crit_section+0x170/0x170 [ 2312.071505][ T5914] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2312.077441][ T5914] ? bpf_lsm_capable+0x5/0x10 [ 2312.082133][ T5914] ? security_capable+0x85/0xb0 [ 2312.087007][ T5914] genl_rcv_msg+0x604/0x790 [ 2312.091540][ T5914] ? genl_bind+0x360/0x360 [ 2312.095957][ T5914] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2312.102316][ T5914] netlink_rcv_skb+0x1fb/0x450 [ 2312.107094][ T5914] ? genl_bind+0x360/0x360 [ 2312.111518][ T5914] ? netlink_ack+0x1170/0x1170 [ 2312.116306][ T5914] ? down_read+0x1a8/0x2d0 [ 2312.120826][ T5914] genl_rcv+0x24/0x40 [ 2312.124810][ T5914] netlink_unicast+0x74d/0x8d0 [ 2312.129593][ T5914] netlink_sendmsg+0x8ad/0xbd0 [ 2312.134400][ T5914] ? netlink_getsockopt+0x550/0x550 [ 2312.139616][ T5914] ? aa_sock_msg_perm+0x94/0x150 [ 2312.144560][ T5914] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2312.149856][ T5914] ? security_socket_sendmsg+0x7c/0xa0 [ 2312.155325][ T5914] ? netlink_getsockopt+0x550/0x550 [ 2312.160531][ T5914] ____sys_sendmsg+0x5be/0x970 [ 2312.165316][ T5914] ? __sys_sendmsg_sock+0x30/0x30 [ 2312.170346][ T5914] ? __import_iovec+0x315/0x500 [ 2312.175219][ T5914] ? import_iovec+0x6f/0xa0 [ 2312.179730][ T5914] ___sys_sendmsg+0x2a2/0x360 [ 2312.184437][ T5914] ? try_to_wake_up+0x6ae/0x1080 [ 2312.189386][ T5914] ? __sys_sendmsg+0x290/0x290 [ 2312.194257][ T5914] __se_sys_sendmsg+0x1bb/0x2a0 [ 2312.199128][ T5914] ? __x64_sys_sendmsg+0x80/0x80 [ 2312.204121][ T5914] ? lockdep_hardirqs_on+0x94/0x140 [ 2312.209342][ T5914] do_syscall_64+0x4c/0xa0 [ 2312.213769][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 2312.218457][ T5914] ? clear_bhb_loop+0x60/0xb0 [ 2312.223147][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2312.229060][ T5914] RIP: 0033:0x7f6cb5b9ce59 [ 2312.233483][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2312.253092][ T5914] RSP: 002b:00007f6cb69e4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2312.261517][ T5914] RAX: ffffffffffffffda RBX: 00007f6cb5e15fa0 RCX: 00007f6cb5b9ce59 [ 2312.269503][ T5914] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2312.277583][ T5914] RBP: 00007f6cb5c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 2312.285559][ T5914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2312.293531][ T5914] R13: 00007f6cb5e16038 R14: 00007f6cb5e15fa0 R15: 00007ffc4f74a398 [ 2312.301534][ T5914] [ 2312.389263][ T5920] device 2 entered promiscuous mode [ 2312.413057][ T5922] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.13642'. [ 2312.458026][ T5922] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2313.137998][ T5940] device sit0 left promiscuous mode [ 2313.543326][ T5947] device sit0 entered promiscuous mode [ 2314.972943][ T5975] device sit0 left promiscuous mode [ 2315.151353][ T5979] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13661'. [ 2315.203419][ T5983] device sit0 entered promiscuous mode [ 2315.274917][ T5991] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.13660'. [ 2315.357415][ T5991] debugfs: Directory '!!!' with parent 'ieee80211' already present! [ 2316.085194][ T6011] netlink: 'syz.0.13672': attribute type 3 has an invalid length. [ 2316.111674][ T6011] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.13672'. [ 2316.180471][ T6011] IPv6: Can't replace route, no match found [ 2316.615536][T29607] Bluetooth: hci4: unexpected event 0x36 length: 15 > 7 [ 2317.052994][ T6019] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13675'. [ 2317.100756][ T6019] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2317.119145][ T6019] CPU: 1 PID: 6019 Comm: syz.0.13675 Not tainted syzkaller #0 [ 2317.126678][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2317.136765][ T6019] Call Trace: [ 2317.140061][ T6019] [ 2317.143032][ T6019] dump_stack_lvl+0x188/0x24e [ 2317.147745][ T6019] ? show_regs_print_info+0x12/0x12 [ 2317.152964][ T6019] ? load_image+0x400/0x400 [ 2317.157498][ T6019] sysfs_warn_dup+0x8a/0xa0 [ 2317.162010][ T6019] sysfs_do_create_link_sd+0xc0/0x110 [ 2317.167402][ T6019] device_add+0x7ed/0xfb0 [ 2317.171757][ T6019] wiphy_register+0x1d9f/0x2ac0 [ 2317.176662][ T6019] ? cfg80211_event_work+0x40/0x40 [ 2317.181786][ T6019] ? minstrel_ht_alloc+0x894/0xa20 [ 2317.186927][ T6019] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2317.193010][ T6019] ieee80211_register_hw+0x2d00/0x39f0 [ 2317.198501][ T6019] ? ieee80211_register_hw+0xf41/0x39f0 [ 2317.204056][ T6019] ? ieee80211_register_hw+0xe41/0x39f0 [ 2317.209629][ T6019] ? ieee80211_tasklet_handler+0x20/0x20 [ 2317.215298][ T6019] ? memset+0x1e/0x40 [ 2317.219290][ T6019] ? __hrtimer_init+0x186/0x270 [ 2317.224155][ T6019] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 2317.229916][ T6019] hwsim_new_radio_nl+0xafa/0xce0 [ 2317.234975][ T6019] genl_family_rcv_msg_doit+0x22a/0x330 [ 2317.240596][ T6019] ? end_current_label_crit_section+0x170/0x170 [ 2317.246873][ T6019] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2317.252807][ T6019] ? bpf_lsm_capable+0x5/0x10 [ 2317.257498][ T6019] ? security_capable+0x85/0xb0 [ 2317.262379][ T6019] genl_rcv_msg+0x604/0x790 [ 2317.266915][ T6019] ? genl_bind+0x360/0x360 [ 2317.271334][ T6019] ? hwsim_tx_info_frame_received_nl+0xfc0/0xfc0 [ 2317.277746][ T6019] netlink_rcv_skb+0x1fb/0x450 [ 2317.282523][ T6019] ? genl_bind+0x360/0x360 [ 2317.286951][ T6019] ? netlink_ack+0x1170/0x1170 [ 2317.291748][ T6019] ? down_read+0x1a8/0x2d0 [ 2317.296182][ T6019] genl_rcv+0x24/0x40 [ 2317.300167][ T6019] netlink_unicast+0x74d/0x8d0 [ 2317.304965][ T6019] netlink_sendmsg+0x8ad/0xbd0 [ 2317.309752][ T6019] ? netlink_getsockopt+0x550/0x550 [ 2317.314971][ T6019] ? aa_sock_msg_perm+0x94/0x150 [ 2317.320353][ T6019] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2317.325646][ T6019] ? security_socket_sendmsg+0x7c/0xa0 [ 2317.331123][ T6019] ? netlink_getsockopt+0x550/0x550 [ 2317.336330][ T6019] ____sys_sendmsg+0x5be/0x970 [ 2317.341121][ T6019] ? __sys_sendmsg_sock+0x30/0x30 [ 2317.346149][ T6019] ? __import_iovec+0x315/0x500 [ 2317.351020][ T6019] ? import_iovec+0x6f/0xa0 [ 2317.355537][ T6019] ___sys_sendmsg+0x2a2/0x360 [ 2317.360226][ T6019] ? try_to_wake_up+0x67c/0x1080 [ 2317.365190][ T6019] ? __sys_sendmsg+0x290/0x290 [ 2317.370049][ T6019] __se_sys_sendmsg+0x1bb/0x2a0 [ 2317.374923][ T6019] ? __x64_sys_sendmsg+0x80/0x80 [ 2317.379895][ T6019] ? lockdep_hardirqs_on+0x94/0x140 [ 2317.385106][ T6019] do_syscall_64+0x4c/0xa0 [ 2317.389531][ T6019] ? clear_bhb_loop+0x60/0xb0 [ 2317.394312][ T6019] ? clear_bhb_loop+0x60/0xb0 [ 2317.399005][ T6019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2317.404908][ T6019] RIP: 0033:0x7ff5dbf9ce59 [ 2317.409329][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2317.428940][ T6019] RSP: 002b:00007ff5dce45028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2317.437367][ T6019] RAX: ffffffffffffffda RBX: 00007ff5dc215fa0 RCX: 00007ff5dbf9ce59 [ 2317.445344][ T6019] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2317.453315][ T6019] RBP: 00007ff5dc032d6f R08: 0000000000000000 R09: 0000000000000000 [ 2317.461287][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2317.469262][ T6019] R13: 00007ff5dc216038 R14: 00007ff5dc215fa0 R15: 00007ffc3ca603d8 [ 2317.477263][ T6019] [ 2317.487006][ T6027] netlink: 'syz.4.13686': attribute type 3 has an invalid length. [ 2317.495525][ T6027] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.13686'. [ 2317.587856][ T6030] IPv6: Can't replace route, no match found [ 2317.627136][ T6031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13677'. [ 2317.673616][ T6029] device sit0 left promiscuous mode [ 2317.976236][ T6034] mac80211_hwsim hwsim17 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2317.986027][T32230] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2318.027790][T32230] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2318.084134][T32232] ------------[ cut here ]------------ [ 2318.090040][T32232] WARNING: CPU: 0 PID: 32232 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x428/0x4b0 [ 2318.100155][T32232] Modules linked in: [ 2318.104130][T32232] CPU: 0 PID: 32232 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 2318.111882][T32232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2318.122071][T32232] Workqueue: cfg80211 cfg80211_event_work [ 2318.128653][T32232] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2318.134928][T32232] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f [ 2318.154595][T32232] RSP: 0018:ffffc9000deefaa0 EFLAGS: 00010293 [ 2318.160697][T32232] RAX: ffffffff89950158 RBX: dffffc0000000000 RCX: ffff888063123b80 [ 2318.168776][T32232] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 2318.176820][T32232] RBP: ffffc9000deefb70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 2318.184867][T32232] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff88807e60b5f8 [ 2318.192869][T32232] R13: 1ffff92001bddf5c R14: 000000000000001f R15: ffff888054da0c90 [ 2318.200910][T32232] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2318.209918][T32232] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2318.216725][T32232] CR2: 0000001b2fc20ff8 CR3: 0000000056d77000 CR4: 00000000003506f0 [ 2318.224758][T32232] DR0: 0000000000000000 DR1: 0000000000008d24 DR2: 0000000000008d24 [ 2318.232849][T32232] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2318.240902][T32232] Call Trace: [ 2318.244267][T32232] [ 2318.247220][T32232] ? mutex_lock_nested+0x10/0x10 [ 2318.252195][T32232] ? trace_rdev_return_void+0x240/0x240 [ 2318.257822][T32232] cfg80211_process_wdev_events+0x3ad/0x550 [ 2318.263796][T32232] cfg80211_process_rdev_events+0x9d/0x110 [ 2318.269637][T32232] ? process_one_work+0x7b0/0x1160 [ 2318.274821][T32232] cfg80211_event_work+0x2b/0x40 [ 2318.279790][T32232] process_one_work+0x8a2/0x1160 [ 2318.284814][T32232] ? worker_detach_from_pool+0x240/0x240 [ 2318.290473][T32232] ? _raw_spin_lock_irq+0x86/0xf0 [ 2318.295653][T32232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2318.300703][T32232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2318.306317][T32232] ? kthread_data+0x4b/0xc0 [ 2318.310860][T32232] worker_thread+0xaa2/0x1270 [ 2318.315634][T32232] kthread+0x29d/0x330 [ 2318.319728][T32232] ? worker_clr_flags+0x1a0/0x1a0 [ 2318.324826][T32232] ? kthread_blkcg+0xd0/0xd0 [ 2318.329455][T32232] ret_from_fork+0x1f/0x30 [ 2318.333957][T32232] [ 2318.337051][T32232] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2318.344342][T32232] CPU: 0 PID: 32232 Comm: kworker/u4:19 Not tainted syzkaller #0 [ 2318.352080][T32232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2318.362157][T32232] Workqueue: cfg80211 cfg80211_event_work [ 2318.367912][T32232] Call Trace: [ 2318.371199][T32232] [ 2318.374154][T32232] dump_stack_lvl+0x188/0x24e [ 2318.378860][T32232] ? memcpy+0x3c/0x60 [ 2318.382860][T32232] ? show_regs_print_info+0x12/0x12 [ 2318.388086][T32232] ? load_image+0x400/0x400 [ 2318.392624][T32232] panic+0x2e5/0x730 [ 2318.396628][T32232] ? bpf_jit_dump+0xd0/0xd0 [ 2318.401136][T32232] ? ret_from_fork+0x1f/0x30 [ 2318.405725][T32232] __warn+0x2f8/0x4f0 [ 2318.409704][T32232] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2318.415251][T32232] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2318.420785][T32232] report_bug+0x2ba/0x4f0 [ 2318.425108][T32232] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2318.430647][T32232] handle_bug+0x3a/0x70 [ 2318.434799][T32232] exc_invalid_op+0x16/0x40 [ 2318.439301][T32232] asm_exc_invalid_op+0x16/0x20 [ 2318.444149][T32232] RIP: 0010:__cfg80211_ibss_joined+0x428/0x4b0 [ 2318.450381][T32232] Code: 00 00 00 48 3b 84 24 80 00 00 00 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 61 85 ed f7 0f 0b eb bb e8 58 85 ed f7 <0f> 0b eb b2 e8 4f 85 ed f7 0f 0b e9 77 fd ff ff e8 43 85 ed f7 0f [ 2318.469988][T32232] RSP: 0018:ffffc9000deefaa0 EFLAGS: 00010293 [ 2318.476047][T32232] RAX: ffffffff89950158 RBX: dffffc0000000000 RCX: ffff888063123b80 [ 2318.484008][T32232] RDX: 0000000000000000 RSI: ffffffff8a8c19a0 RDI: ffffffff8adf1ba0 [ 2318.492062][T32232] RBP: ffffc9000deefb70 R08: ffffffff90afa2a7 R09: 1ffffffff215f454 [ 2318.500023][T32232] R10: dffffc0000000000 R11: fffffbfff215f455 R12: ffff88807e60b5f8 [ 2318.507990][T32232] R13: 1ffff92001bddf5c R14: 000000000000001f R15: ffff888054da0c90 [ 2318.515958][T32232] ? __cfg80211_ibss_joined+0x428/0x4b0 [ 2318.521512][T32232] ? mutex_lock_nested+0x10/0x10 [ 2318.526449][T32232] ? trace_rdev_return_void+0x240/0x240 [ 2318.531994][T32232] cfg80211_process_wdev_events+0x3ad/0x550 [ 2318.537883][T32232] cfg80211_process_rdev_events+0x9d/0x110 [ 2318.543685][T32232] ? process_one_work+0x7b0/0x1160 [ 2318.548791][T32232] cfg80211_event_work+0x2b/0x40 [ 2318.553725][T32232] process_one_work+0x8a2/0x1160 [ 2318.558664][T32232] ? worker_detach_from_pool+0x240/0x240 [ 2318.564284][T32232] ? _raw_spin_lock_irq+0x86/0xf0 [ 2318.569304][T32232] ? _raw_spin_lock_irq+0xb7/0xf0 [ 2318.574317][T32232] ? _raw_spin_lock_irqsave+0x100/0x100 [ 2318.579858][T32232] ? kthread_data+0x4b/0xc0 [ 2318.584364][T32232] worker_thread+0xaa2/0x1270 [ 2318.589070][T32232] kthread+0x29d/0x330 [ 2318.593151][T32232] ? worker_clr_flags+0x1a0/0x1a0 [ 2318.598183][T32232] ? kthread_blkcg+0xd0/0xd0 [ 2318.602772][T32232] ret_from_fork+0x1f/0x30 [ 2318.607194][T32232] [ 2318.610664][T32232] Kernel Offset: disabled [ 2318.615047][T32232] Rebooting in 86400 seconds..