last executing test programs: 5.798285086s ago: executing program 0 (id=7522): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000500)="d8000000200081044e81f782db44b90402000000e8fe55a1180015000600142603600e1209000b000000043542c92f50c85a929e01a80016000a00114006000000036010fab94dcf5c0468c1d67f6f94007134cf6ee0808856e408e8d8cbf7a7ff4841ef62b49816277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b10d614f00004d9db22fe7c9f8775730d16a4683f1aea4edbb57a5025ccca9e00360db70100000040fad95667e006d8df969b3ef35ce3bb9ad809d561cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d", 0xd8}], 0x1}, 0x60004040) 3.953035882s ago: executing program 0 (id=7526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12500, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000ff0800ab150d61d33001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc601000050000", 0x19}], 0x1}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe802000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) 3.733397428s ago: executing program 0 (id=7531): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x21, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x821}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0x28, &(0x7f00000006c0)=""/40, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xa, 0x1501, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 2.080195759s ago: executing program 3 (id=7547): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004"], 0x50) r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004"], 0x50) (async) socket$kcm(0x2, 0x5, 0x84) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) close(r2) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000007800911fdabcf8b3077fa54a07"], 0xfe33) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffe}, 0x10}, 0x94) (async) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r4, 0x8) (async) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000340)="d1", 0xfffd}], 0x1}, 0xc54) (async) 2.078502609s ago: executing program 2 (id=7548): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x10100, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x108b84, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x8010743f, &(0x7f0000000180)) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x4000002009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x23, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82d", 0x0, 0x28e, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc8, 0x0, 0x0, 0x0, 0x0, 0x2, 0x14420, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0x1104, 0x0, 0xfffffffd, 0x3, 0x1000, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000005c0)=""/227, 0xe3}], 0x1}, 0x40000001) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="37f2b77b52e68583a04e4adfa08994a681f7cb1a911f956538dcb050db31117a9865a9eae4e7cab1c9541567cabc611bea82988862e3ce63accda490a81102bdcbeba649ac40b775e7b232754835fde32d", 0x51}, {&(0x7f0000000280)="618b51769fbeb6816d8e661ac503a5e4edf4de99c04789581db768ff562558db82d46f5f252939253e08c1dc0ddc3293138e4254821cebe2ac776dbeec1f304360bc44d47bfdfee1b5a63bd2cbe506a2f439377fbba8d4715a97e87481e6c02d62331246cb58c3c2c490c7811d14721ff76d720787c94b28d22c44af454faf589fdc62574172705a0de81fda00dc5595dd9a304a50ed9d407aece1bae95a7d07e757b4b6ed7560d9809f43ae14d667fd31ad737ab18b5f65989bbedfc3312e7db064f304d58cebdbf85053cdfc9f54d60e72f209254e0d2ec94da0e1f353ab15139b752686c406faa08827b4f1d7672d4e94eb42", 0xf4}], 0x2, &(0x7f00000006c0)="b19e8943cd0d2ab01658ad228c5d3372fb687c8869e93901bcb6b07b8cd5fdfce36617ba337eac22c59d741fef69865c4c1bdde9256a88fb7b1015b117e225b7a661abd0f12a445220956ee3effb042fdf5bdf976510ea7c317dfab1d54f0d8b044f0e85ed198188740e1287604c2955876b26920b640317769353f98f3f467c8c64565cc6cc9115f95779c0d464cd4882764f7c326d1bf6e69a2fb541c0f448d5ce7b91bc16b8a9ca5534b3390f7a209cb80bbe1305e6c238f66497538a5872fec3fab9b8b00348cb96162ac30a4768ad33c4fdfe7908402ca7ca84a072b832", 0xe0, 0x40}, 0x4008002) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 2.076444569s ago: executing program 1 (id=7549): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3f, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2501, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x828, 0x0, 0x0, 0x0, 0x10000, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000840)="1c0000001a0081044e81f782db4cb9040a1d08007b490d4f1e81f8d8", 0x1c}], 0x1}, 0x0) r5 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r5, 0x84, 0x72, 0x0, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0x3) r6 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r7) r8 = socket$kcm(0x2, 0x200000000000001, 0x106) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x0, 0x8, 0x6, 0x811, r3, 0xa9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x2}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r7, r9}, 0xc) ioctl$SIOCSIFHWADDR(r8, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r11, 0x18000000000002a0, 0x1c, 0x0, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.075273029s ago: executing program 3 (id=7550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12500, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000ff0800ab150d61d33001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc601000050000", 0x19}], 0x1}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe802000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) 1.709748348s ago: executing program 1 (id=7551): r0 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffff0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x800, 0x0, 0x80000000}, {0x1000000a, 0x4}], 0x10, 0x40004}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0x5, 0x47a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="1401000000b10f4cbe00000001000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x4803e}, 0x8000) close(0x3) r4 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) close(0x3) socket$kcm(0xa, 0x5, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x11}, 0x6, 0x10000}, 0x80, 0x0}, 0xd0a0) setsockopt$sock_attach_bpf(r4, 0x84, 0x64, &(0x7f0000000000)=r7, 0x1c) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r8, 0x1c) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019000800004460bc06000000a701251e6182949a3651fbffffffd4d4938037e7c7a0a03400ac09c51c268811000096859fc57a00000000000000002571cd53b9851b30", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x8000) recvmsg$kcm(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000940)=""/4139, 0x102b}, {&(0x7f00000029c0)=""/4118, 0x1016}, {&(0x7f00000002c0)=""/219, 0xdb}, {&(0x7f0000000500)=""/194, 0xc2}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f0000000240)=""/106, 0x6a}], 0x6}, 0x20) recvmsg$kcm(r9, &(0x7f0000000900)={0x0, 0xffc3, 0x0}, 0x80) 1.6521236s ago: executing program 3 (id=7552): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) r2 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18060000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000c80)=ANY=[@ANYBLOB="1806480000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000d0ab44050fb703000000000000850000000c000000b701000000000000bfed4701a0ae56b7659de49500000000000000ae11fe7a6c"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x5, 0x16, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x800, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x200}, 0x5114, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0xc26, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) (async) r5 = perf_event_open(&(0x7f0000000380)={0x5, 0x16, 0x0, 0x3, 0x0, 0xfc, 0x0, 0x800, 0x504, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, @perf_config_ext={0x2, 0x200}, 0x5114, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0xc26, 0x3}, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f00000001c0)='cpu&-0\t\t\t') r6 = syz_clone(0x204000, &(0x7f0000000700)="2f40e815af2b1c25747270be24a51196a17b5112fa0f82cc13a55d17e34b0f80c41da223229476db19e97aebc88169582ac66bf0ba281dec145f9d5827fbe2c89dc4afa6c85e40068cc24e036fe698d8e9aaf47a749a472fb47d0ec296a67ecbfa56840a9a99de25fcf63626f819f56fb69ab4483c45e6a14e9970691f133e3dc97184594aa900a720185d8ad53a1ca6677c5f62de2c636e187df3ef08835c1599d2aa04fb8f1486b8d400da9f2a05cc2f86ff7ec24fe140582486002b7934fa167498a4fe7388ac30eed13a6f7a56c9ceff712c342dc9566e76ddb94b1cd03f3f9234d63a7b1bbf15", 0xe9, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)="4b182efd335fd3dca54a590dbe782da5faa6665810cc79c5cc7be5e1a74f7539d813c17b30d319cdc478da62128b94f7b905c4fda2b1d3b7aae52d9a1dec525e7e2a2a5c3d563d8d6986240ae959539a2fc2") gettid() (async) r7 = gettid() r8 = syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, @perf_bp={0x0, 0x8}, 0x6afb, 0x4, 0x6, 0x0, 0x2, 0xfffff271, 0x9, 0x0, 0x0, 0x0, 0x1e}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @rights={{0x10}}, @cred={{0x1c}}], 0xc8}, 0x10140) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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", @ANYRESDEC=r10, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r11}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r12}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() (async) r13 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000200)="34a5e2093459bcd706716f02d280859d9caf98c6229d79b787b6fa3e6e718d049b3431adc8b3fb7cff343eb6389df9b84bfdf9c35c50e0fae1936b0e58c79ff47e12911708b81bcd08c74e5485b1c5adc4c6eaaf602b319c2987ab05965eba1e272b28b5e021f42f81b58f8d9550d8d2", 0x70}, {&(0x7f0000000280)="d27e5394168c48ef9f381d4497", 0xd}, {&(0x7f0000000340)="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", 0xfa}, {&(0x7f0000000440)="60473b0c026e06d201390b524b4cbdc9b289eb22823870", 0x17}, {&(0x7f00000004c0)="fb0374d1d917b602f876c4eb50194675764c420096170e9acd6a0c6d00ce3d8b59543085d93df5e8e949f24163f7e497995dfd55983fe2dbe5bcd0d0ec526787849a23211266ca56bc1975b5cc660014d2", 0x51}], 0x5, &(0x7f0000000b00)=ANY=[@ANYBLOB="34000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c000000000001000100000002000000", @ANYRES32=r6, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r8, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=0xee00, @ANYRES32=0xee01, @ANYBLOB='\x00\x00\x00\x00'], 0x130, 0x24000080}, 0x8080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0x1, 0x58, &(0x7f0000000100)}, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'pimreg0\x00', @random}) (async) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'pimreg0\x00', @random}) socket$kcm(0x2, 0x7, 0x0) socket$kcm(0x10, 0x3, 0x10) (async) r14 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x2) (async) sendmsg$kcm(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f94aa3c92b", 0x14}], 0x1}, 0x2) r15 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x6, 0xed, 0x6, 0xb6, 0x0, 0x23df4108, 0x40004, 0x5, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7f, 0x1, @perf_config_ext={0x8, 0x3af}, 0x11c00, 0x40, 0x0, 0x4, 0xcb, 0xf6, 0xd, 0x0, 0x5}, 0x0, 0x8, 0xffffffffffffffff, 0xb) ioctl$PERF_EVENT_IOC_DISABLE(r15, 0x2401, 0xfffffffffffffffa) sendmsg$kcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000a00)="d80000001000810468f70082db44b904021d080b01000000e8fe55737000150006001420000000120800040043000000a80016000a00014006000200036010fab94dcf3d0461c1d67f6f94000527073f9bf2e296aa34cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac4178985650a013b7a74ddeefa3127dccdf62d16277ce06bbaff0f0000cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14", 0xd9}], 0x1}, 0x0) 1.452621374s ago: executing program 1 (id=7553): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x650b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0xe, 0x100000001}, 0x1044, 0x3a, 0x43a1bd76, 0x7, 0x81, 0x60000, 0x6, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x7}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x1002, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="8dffffff0600"}) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={0x0}, 0x102341, 0x0, 0x3f, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x89f3, &(0x7f0000000080)) setsockopt$sock_attach_bpf(r1, 0x84, 0x6e, &(0x7f0000000000)=r4, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r6) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) r8 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r8, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) sendmsg(r8, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002bc0)=[{&(0x7f00000001c0)="a2466fbf0269913f187847445225adda49dd40a5fe6c92a11dd0d436a2118419dc0118df1045a308befcba5af84eb2f649e92955464d524ea90f2c5fa4831af7e53bc9216f6e58ff5b3a6a4e0d200d69a94958bf3b611f8e191082f21fc987ca21fdf5978587cc4c10cb89a52b256f15", 0x70}, {0x0}, {0x0}, {0x0}], 0x4}, 0x40000) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) recvmsg$kcm(r8, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x100b6) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r11, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) 1.039344994s ago: executing program 2 (id=7554): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) socket$kcm(0x2b, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7030000000000008500000087000000b7000000000000008500000008"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b06d25a806c8c6f94f90324fc600e0005000a000200053582c137153e3708000180040010000400", 0x33fe0}], 0x1}, 0x0) (async) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async, rerun: 32) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1ee, 0x6}, 0x0, 0x40000000000000, 0x0, 0x0, 0x0, 0xe, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) (async, rerun: 32) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000004000000040000001200000000000000667835ae589165d1837051f8436f1336c92f9ddbd4935b35d0dece665171d7ded19ddeace51d2bcc8385ea0500000000000000a7790a80b9ddf327172891f1437d718045be1760f3cd838a86b7e082fd983637", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50) (async, rerun: 32) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x69, 0x10, 0x22}}, &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000000000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 892.797348ms ago: executing program 2 (id=7555): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f0009000800000000000000200006400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a6683f5aeb4edbb57a5025ccca9e00360db398262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3c93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x4040050) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r1) sendmsg$kcm(r1, 0x0, 0x886f5cad098fbc1) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b32, &(0x7f0000000000)={'pim6reg\x00', @broadcast}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000002000000000000007a028000000000009500000000", @ANYRES64=r0], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000080)=""/11, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) 736.744382ms ago: executing program 2 (id=7556): r0 = gettid() perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, r0, 0x2, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001b80)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x4}, 0x50) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x7f}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000000c0)=r2, 0x4) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f00000001c0)={0x2, 0x4e25, @multicast1=0xe000004f}, 0x10, &(0x7f0000000040)=[{&(0x7f00000017c0)="8100108cdb5c324a61d879c750cfae230631823241b82a15643746dd2683c940c3985bfa1e54be80", 0x28}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0xb, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0xfb, 0x0, 0x2, [0x1, 0xca, 0x5, 0x5, 0x3]}, @ssrr={0x89, 0x0, 0x65, [@loopback, @local, @remote, @local]}, @timestamp={0x44, 0x0, 0xaf, 0x0, 0x8, [0x1, 0xe6, 0x7]}, @lsrr={0x83, 0x0, 0x91, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @loopback, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}]}}}], 0x38}, 0xc0c4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) 590.571335ms ago: executing program 0 (id=7557): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) r0 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fb, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x1, 0x2020007, 0xec49, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0xfff, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, r0, 0xa) socket$kcm(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x20, 0x0, 0x0, &(0x7f0000000740)='GPL\x00', 0x2, 0xee, &(0x7f0000000900)=""/238, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000f00)=[{0x1, 0x1, 0xd, 0x3}, {0x2, 0x4, 0x2, 0xb}, {0x8000002, 0x1, 0x3, 0xa}], 0x10, 0xfffffffc}, 0x94) (async) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180000000000000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) (rerun: 64) recvmsg(r2, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}, 0x0) (async) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f086dd65e0ffff00122f00", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) close(r5) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x36) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000002a80)=""/4096, 0xfdef}], 0x1}, 0x10021) 553.701837ms ago: executing program 3 (id=7558): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f6, &(0x7f0000000080)) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0xf, 0x0, 0x0, 0x0, 0x0, 0x402, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x1}, 0x0, 0x1, 0x0, 0x5, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 436.60613ms ago: executing program 2 (id=7559): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c240000000000"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b11d25a806f8c6394f9ff2400053582c137153e370248018000f01700d1bd", 0x25}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0xb, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, 0x0, 0x0) r6 = socket$kcm(0x10, 0x7, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x209, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x50) perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x235fd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x8}, 0x20085, 0x4, 0x0, 0xf, 0x4000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x890c, &(0x7f0000000000)) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000600)="39000000140081ae10003c000500018311001f9f660fcf066a05acb612f691f3bd3508abca1be6eeb89c44ebb3730800000000000000e92155", 0x39}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="1c0000001e0081054e81f782db020000071d080006007c09e8fe08a1", 0x1c}], 0x1}, 0x804) socket$kcm(0x10, 0x2, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) socket$kcm(0x10, 0x2, 0x0) 433.73888ms ago: executing program 1 (id=7560): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x12500, 0x0) ioctl$TUNGETVNETBE(r0, 0x800454df, &(0x7f0000000040)=0x1) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x1, 0x4, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000ff0800ab150d61d33001000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0xd6, 0x0, 0x2, 0x640a9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x4, 0x49, 0x6, 0x2, 0x0, 0xffffdfff, 0x0, 0x2009}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, r1, 0x1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c06", 0x27}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x4, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90324fc601000050000", 0x19}], 0x1}, 0x40040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000018000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32, @ANYBLOB="7f000001ac141400000000011c0e0000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e041654f06bd7f000000000000000000000000000000282ffe0000000009350cfa3ab109ab4a7d95938c5334a0dd177f1a7389ee570d95e543a27546d3770740f354df6dd6b1bfe4104d2262f33f596d606ccce75a3c3d5f9ad94a7316b0c6ad14f1398a6b39b07121f636da418b34d48677cf8d2d99ee8ac50142bcdcc73dd73cc6ec46896ffb35ac82ac7a9309ea07396d2814dc630ad1a9913934849be25f7b81b59aaa9fa2e9d6ecafcfa1de81b2d3581ab1138537f98d2240b6c2bf40569da4e2bb77532ab9220347d78319617d17e14f7331486e86b2145980b95c88ae11b1c6b6ea6c2b2311d6ce6315cc451dd50ac746acd59d075b41f9a747894956b10453ccf6527d8f579256e9849bbaf6c7c84362209d3d2320101d57"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000002c0)=r5, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x11, &(0x7f0000000300)=[{&(0x7f00000006c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe802000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x80002, 0xffffffffffffffff, 0xa) 423.09575ms ago: executing program 3 (id=7561): r0 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="39000000140081ae00002c000500015601618575e285af0180007a1b31d569d9ae527048ffffffffffffffff56fabcb3b2aa9be3da9212d744", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x40800) recvmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x40000002) r2 = syz_clone(0x100000, 0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), &(0x7f0000000440)="194f4119820944736ba3ab953e92a9376937708e0a43b3c376b753fa87d541b1") write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB="7685606e303233374b05183e00b7065b58eec87ab1a1c42fe76e5a13e856027ec4c7e4e6e0ba6a2b667b0dbc86163cc0c3d6f820dfed8063ac48ac286d358597d98dc74452d64acc93b31402c4f4ea"], 0x8) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0, 0x39c}, 0x40000) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x5452, &(0x7f0000000000)) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x8a, 0x5, 0x0, 0x13, 0x0, 0x10000000000, 0x8880, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, @perf_bp={0x0, 0x6}, 0x4, 0x3, 0x0, 0x6, 0x7, 0xffff, 0x0, 0x0, 0x3}, 0x0, 0xd, 0xffffffffffffffff, 0x18) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x9, r4, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0xd, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000, 0x3}, 0x560, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, r2, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x7, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x4}, 0x0, 0x5, 0xffffffff, 0x0, 0x0, 0x3fd}, 0xffffffffffffffff, 0x11, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r7) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0x4b, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) 281.525503ms ago: executing program 1 (id=7562): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xfffffffffffffffb, 0x3fff8000}, 0xb182, 0x8c, 0x9, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000080)='io.pressure\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000008c0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000)='.'}, 0x30) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f0000000100), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7902009875f37538e486dd6317ce62667f2c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500004089"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000}, 0x48) 188.691536ms ago: executing program 0 (id=7563): socket$kcm(0xf, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x66}, 0x94) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x78}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x1, 0x1c, 0xad, 0x4, 0x0, 0x1, 0x30100, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x1ff, 0x5}, 0x21bec3b8a2815749, 0x7, 0x81, 0x0, 0x539, 0x3, 0x8001, 0x0, 0x100, 0x0, 0x9}, 0x0, 0x2, 0xffffffffffffffff, 0xb) syz_clone(0x52000000, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x240040c0}, 0x4000000) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000200)={&(0x7f0000000040)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80, 0x0}, 0x40000) 172.311146ms ago: executing program 2 (id=7564): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094014000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000f01eb791433a5ee4ce1b14d6d930dfe1d9683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909fdffcace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93456a92954b43370e9703920706f9a941c6fd6d7ac2946af9fc2eb5", 0xd8}], 0x1, 0x0, 0x0, 0x1000000}, 0x44) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x0, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x40, 0x10000, 0x9e4, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={r0}) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xd3c0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000000c0)=r3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x4f, &(0x7f0000000100)="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", 0x0, 0x8024, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040)}, 0x2a) socket$kcm(0x29, 0x5, 0x0) 125.635627ms ago: executing program 1 (id=7565): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x20, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_config_ext={0x1000000000000001, 0xfffffffd}, 0x7402, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x21, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x821}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000680)='GPL\x00', 0x9, 0x28, &(0x7f00000006c0)=""/40, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000800)={0x1, 0xa, 0x1501, 0x6}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000840)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000880)=[{0x4, 0x5, 0x4, 0x1}, {0x5, 0x4, 0x5, 0x2}], 0x10, 0x6}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000980)=r1, 0x4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904, 0x0, 0x0, 0x0, 0x1, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x5411, &(0x7f0000000140)='lo:\x96o8\x14d\xa1\xba\xda\xd1\xa0J\x12t\x02\x006\xe3\xd7\\b\x8b\x1f\xa1Y\xad4\x90\x9d`\xd2\x98\x00\x00\x00 \'Y\x17]\x15c\xcaR\xdd\x98OC\x89\xff\xe6\x84\xe2\x05\x80w\xd2|D\x8dK\x14Bx\xcbuH\xc2\xeec\xbf<>Y\x1a\xfc\x1f9OB\x81\x01\xb7l\xed}\xe5\x186\xc5q@n\xb4\xb6s\xb0\x00\x00\x00\x00\x02\b\x00\x00\xda\xef\xecE\xec\xd5I\xb2\x9b\xfe\x8d\x90?\x00\xe9\xe4~g:\xc1\xb2ak\x96\xbb\xa7\xe2\xc0\xdc\xf9Q\b\xeb\x01\x00\x00\x00\xd3\r7\x8e\xabd\x0ftp\x82\xae\xd2\x15\x8e+c\xf6\xbf\xe14>\xa6-\xa5c\xde\xd7\xab\xea\x1f\xd5s2\x9cVF\xd5\x18\xfe\x0f\x8f \x01\x00\x00\xb1\x88\xebW_\xa5\xe1\xf6\x8aj\xca\xf8m\xab\xe8\x99\xeb\xe1\xde\x8at\x1c\x80\xfc\xb0\x95\xa2\xa7\xd7,Y]E8\x83X\xf5F\xdc\x88-\xf5\xb0\xb5^\xdb\x1a\xb6\xaa\x14\xe2\rh^J-\xd1\xfc\xfa 6(%\x1c\xb5\xbf\xb6\x90\xb4\xc2\x7f]/\xb3\xe7\xc9\'\x94\xcfIo\xdf\x04\x95\xb5\x06\x84\x1fH>\xda\xc5\x04 \x94\x88\xeb\'\xd4;6\x7f\xd9\x99-\x1b|G\x8d\xd4\xb9%\xaaQ\xa0K\x10\x1f\x9c,\x113\x7f\x03\x93\xe1\xcc\xe7f\r\xf3\xff0\f\x82%_\x92\x8b\xc4\xb9\xd9\xe7\xf2\xe4\xc1i\x03\x9d\xdd\x1bj\xdf\xacg\xe3\xa0S\xd3\x8a\xe1n\x97\xea\xf5\xa0\'\v\xe9\xa0\xf1 f\xaan\xcf\xb5i\xb6d\xbc\x92\v\xd58\x16\b\xb3_:\xa4!\ny\xc4&\nWMM\xa8\xc4\v\x9f\x01o\xf4\xab&\xb6\x17\x02!\xed\xff\xee$\xc89\x8cB0\xd1\xa8\xd4\xe6K0\xe1\xa3TS\x18\xe6x\x1f%P\x9fU)\x83E\n\x90M\r.\x85gn_\xb2\xe9\x8a\x1c\xe3\x93\xd8\xbc\xb6N\xc3\xe1\xafh\xa0iF\xdcq\xf9\x17\xd9i\x844E\x1a\x13\x9a\xe6\xd3\xab:PM\xfbe\xfe9\xd9\x04.\x9aL\x03b\xf7\x10N\xd1\x93\rU\x7fy\x18tE\xf1*\x9a0Z\x9f\xdc{\x13\xf6\xb7\xf7\xe6=\x9cD\x108\x8eS\xa0\xd0\xa7\tn\xd9\xae\xc0\x18~x[\x85Y\xb2\x82w\x150\x97\xba\xe6\xca\xb1\xa3\x02\x14^\xbdZ\xae\xf5/\xcf\xb8\xea8Uw\x92`\"2\x81j\xbb\x87+\x89\xc50xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x81, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f3, &(0x7f0000000080)) 670.77µs ago: executing program 3 (id=7566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x5, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="180800000000000000000000000000001800"/29], &(0x7f0000000440)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x10001, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0xb9, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x1}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$sock(r1, &(0x7f0000001500)={0x0, 0x0, 0x0}, 0x1) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000040400000200000000000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) recvmsg(r2, &(0x7f0000003c40)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8906, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f0, &(0x7f0000000080)) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x7400}, 0x4040081) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xfffff038}, {0x6, 0x4, 0x5, 0x4}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x30, 0x7f, 0x86, 0xfffff00c}]}) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) 0s ago: executing program 0 (id=7567): perf_event_open(&(0x7f0000000480)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x5000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffff8, 0x3}, 0x0, 0x0, 0x2, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000022aea061f99cbbbd02181100000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000017000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000200)={'wlan0\x00', @random="00000000cb00"}) (async) perf_event_open(&(0x7f0000000500)={0x2, 0x3b, 0x28, 0x1, 0x0, 0x0, 0x0, 0x400, 0x94001, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0xffffffffffffffff}, 0x8400, 0x5, 0x5, 0xaaf04684de878bda, 0x9, 0x6, 0xfffe, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={0xffffffffffffffff}) (async) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251ef60a84c9f4d4930f0000004509c5bb0000000000001da2b2ae3ae74cc4e8c3c811", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x48040) (async) recvmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001340)=""/4044, 0xfcc}, {&(0x7f0000000140)=""/88, 0x58}, {&(0x7f0000000dc0)=""/160, 0xa0}, {&(0x7f0000000580)=""/53, 0x35}, {&(0x7f00000001c0)=""/125, 0x7d}], 0x5}, 0x22) recvmsg$kcm(r5, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd99}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000003c0)={r4, r2}) (async) r6 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r6, 0x0, 0x4, 0x0, 0x8400) r7 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x4612, 0xffffffffffffffff}, 0x114105, 0x6, 0x9, 0x1, 0x0, 0x40000, 0x1}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0x28, 0x1, 0x92, 0x0, 0x0, 0x9, 0x900, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x8000000000005, 0x43a1bd76, 0x7, 0x9, 0x4, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xd, r7, 0x0) (async) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x0, 0x0, 0xffffffffffffffff, 0xb) bpf$PROG_LOAD(0x85, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async) r8 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r8, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) r9 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) close(r9) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) kernel console output (not intermixed with test programs): 7][T27516] netlink: 'syz.3.5807': attribute type 3 has an invalid length. [ 1117.028442][T27516] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.5807'. [ 1117.028586][T27517] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1117.085532][T27515] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5806'. [ 1117.511516][T27525] netlink: 'syz.0.5815': attribute type 12 has an invalid length. [ 1117.529290][T27525] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1117.753934][T27530] netlink: 'syz.0.5815': attribute type 9 has an invalid length. [ 1117.882731][T27530] netlink: 'syz.0.5815': attribute type 23 has an invalid length. [ 1117.987135][T27530] netlink: 156008 bytes leftover after parsing attributes in process `syz.0.5815'. [ 1118.618852][T27539] netlink: 'syz.1.5813': attribute type 9 has an invalid length. [ 1118.652969][T27539] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5813'. [ 1118.731052][T27541] netlink: 'syz.1.5813': attribute type 9 has an invalid length. [ 1119.021058][T27554] netlink: 'syz.2.5816': attribute type 10 has an invalid length. [ 1119.102847][T27557] netlink: 'syz.3.5819': attribute type 10 has an invalid length. [ 1119.135873][T27558] netlink: 'syz.1.5820': attribute type 3 has an invalid length. [ 1119.302022][T27569] netlink: 'syz.3.5823': attribute type 7 has an invalid length. [ 1119.418659][T27571] netlink: 'syz.0.5824': attribute type 29 has an invalid length. [ 1121.237318][T27579] __nla_validate_parse: 5 callbacks suppressed [ 1121.237340][T27579] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5826'. [ 1121.270121][T27579] hsr_slave_0: left promiscuous mode [ 1121.312585][T27579] hsr_slave_1: left promiscuous mode [ 1121.329813][T27579] bridge0: port 2(hsr0) entered disabled state [ 1121.442152][T27579] hsr0 (unregistering): left allmulticast mode [ 1121.448457][T27579] bridge0: port 2(hsr0) entered disabled state [ 1121.518860][T27590] netlink: 17267 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1121.590348][T27590] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.5831'. [ 1121.651180][T27588] syzkaller0: entered promiscuous mode [ 1121.660622][T27588] syzkaller0: entered allmulticast mode [ 1122.006517][T27605] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1122.028548][T27606] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5836'. [ 1124.116558][T27642] validate_nla: 3 callbacks suppressed [ 1124.116575][T27642] netlink: 'syz.2.5844': attribute type 21 has an invalid length. [ 1124.156626][T27642] netlink: 100 bytes leftover after parsing attributes in process `syz.2.5844'. [ 1125.168019][T27675] syzkaller0: entered promiscuous mode [ 1125.177648][T27675] syzkaller0: entered allmulticast mode [ 1125.205788][T27681] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5852'. [ 1125.216551][T27681] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1127.502063][T27704] netlink: 64859 bytes leftover after parsing attributes in process `syz.0.5859'. [ 1129.508151][T27752] sctp: [Deprecated]: syz.2.5868 (pid 27752) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1129.508151][T27752] Use struct sctp_sack_info instead [ 1130.126813][T27766] netlink: 'syz.2.5875': attribute type 1 has an invalid length. [ 1130.170731][T27766] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1130.236545][T27766] netlink: 206296 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1130.267902][T27766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5875'. [ 1130.614447][T27780] netlink: 'syz.1.5879': attribute type 9 has an invalid length. [ 1130.625191][T27780] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5879'. [ 1130.953409][T27787] netlink: 'syz.0.5881': attribute type 29 has an invalid length. [ 1132.031749][T27787] netlink: 'syz.0.5881': attribute type 29 has an invalid length. [ 1132.412094][T27813] sctp: [Deprecated]: syz.0.5885 (pid 27813) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1132.412094][T27813] Use struct sctp_sack_info instead [ 1132.429799][T27814] netlink: 'syz.1.5886': attribute type 1 has an invalid length. [ 1132.454138][T27814] netlink: 154788 bytes leftover after parsing attributes in process `syz.1.5886'. [ 1132.465917][T27813] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5885'. [ 1132.907404][T27829] netlink: 13951 bytes leftover after parsing attributes in process `syz.3.5889'. [ 1134.431335][T27873] netlink: 'syz.3.5901': attribute type 21 has an invalid length. [ 1134.497112][T27877] netlink: 'syz.1.5902': attribute type 39 has an invalid length. [ 1136.811930][T27943] netlink: 'syz.1.5922': attribute type 9 has an invalid length. [ 1136.820441][T27943] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.5922'. [ 1137.228511][T27949] netlink: 'syz.0.5923': attribute type 6 has an invalid length. [ 1137.278663][T27949] netlink: 168 bytes leftover after parsing attributes in process `syz.0.5923'. [ 1140.089903][T27963] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.5929'. [ 1140.110792][T27963] openvswitch: netlink: Duplicate key (type 0). [ 1140.699367][T27976] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5933'. [ 1141.308337][T27999] netlink: 'syz.3.5941': attribute type 6 has an invalid length. [ 1141.316555][T27999] netlink: 164 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1141.410044][T28001] netlink: 105120 bytes leftover after parsing attributes in process `syz.3.5941'. [ 1141.442963][T28001] netlink: 'syz.3.5941': attribute type 2 has an invalid length. [ 1142.123819][T28015] syzkaller0: entered promiscuous mode [ 1142.129584][T28015] syzkaller0: entered allmulticast mode [ 1144.053446][T28028] IPv6: NLM_F_CREATE should be specified when creating new route [ 1144.064763][T28028] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5950'. [ 1144.289920][T28044] netlink: 'syz.1.5954': attribute type 1 has an invalid length. [ 1144.304936][T28044] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.5954'. [ 1149.706185][T28075] netlink: 13183 bytes leftover after parsing attributes in process `syz.1.5962'. [ 1149.832950][T28078] netlink: 'syz.0.5964': attribute type 9 has an invalid length. [ 1149.851231][T28078] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.5964'. [ 1151.171696][T28113] netlink: 192436 bytes leftover after parsing attributes in process `syz.3.5973'. [ 1151.203658][T28113] openvswitch: netlink: IP tunnel attribute has 20476 unknown bytes. [ 1151.385709][T28123] netlink: 'syz.1.5977': attribute type 17 has an invalid length. [ 1151.402884][T28123] netlink: 'syz.1.5977': attribute type 16 has an invalid length. [ 1151.425090][T28123] netlink: 152 bytes leftover after parsing attributes in process `syz.1.5977'. [ 1151.995355][T28138] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5982'. [ 1152.377987][T28159] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.5988'. [ 1152.398833][T28160] netlink: 'syz.1.5989': attribute type 9 has an invalid length. [ 1152.424073][T28160] netlink: 154020 bytes leftover after parsing attributes in process `syz.1.5989'. [ 1153.085659][T28177] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1153.570414][T28191] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1153.604515][T28191] netlink: 'syz.1.5998': attribute type 28 has an invalid length. [ 1153.621990][T28191] netlink: 'syz.1.5998': attribute type 29 has an invalid length. [ 1153.630168][T28191] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5998'. [ 1154.631746][T28227] sock: sock_set_timeout: `syz.0.6009' (pid 28227) tries to set negative timeout [ 1155.030376][T28237] netlink: 'syz.1.6011': attribute type 17 has an invalid length. [ 1155.055996][T28237] netlink: 'syz.1.6011': attribute type 16 has an invalid length. [ 1155.080610][T28237] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6011'. [ 1155.470117][T28254] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6017'. [ 1155.504400][T28254] hsr_slave_0: left promiscuous mode [ 1155.512707][T28254] hsr_slave_1: left promiscuous mode [ 1155.627447][T28259] netlink: 'syz.1.6017': attribute type 21 has an invalid length. [ 1155.635577][T28258] netlink: 'syz.1.6017': attribute type 21 has an invalid length. [ 1155.648326][T28260] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6018'. [ 1155.659416][T28260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1155.995079][T28275] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6021'. [ 1156.388794][T28289] mac80211_hwsim hwsim72 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1156.741710][T28281] syzkaller0: entered promiscuous mode [ 1156.747248][T28281] syzkaller0: entered allmulticast mode [ 1157.980802][T28311] netlink: 3076 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1157.989985][T28311] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6029'. [ 1159.172119][T21658] wlan1: Trigger new scan to find an IBSS to join [ 1160.204552][T28337] netlink: 164 bytes leftover after parsing attributes in process `syz.0.6036'. [ 1160.519387][T28352] netlink: 'syz.1.6039': attribute type 21 has an invalid length. [ 1160.670436][T28361] netlink: 'syz.2.6042': attribute type 21 has an invalid length. [ 1160.679312][T28361] IPv6: NLM_F_CREATE should be specified when creating new route [ 1160.689979][T28361] IPv6: Can't replace route, no match found [ 1161.134355][T28380] netlink: 'syz.0.6048': attribute type 29 has an invalid length. [ 1161.145068][T28380] netlink: 'syz.0.6048': attribute type 29 has an invalid length. [ 1161.161132][T28380] netlink: 'syz.0.6048': attribute type 29 has an invalid length. [ 1161.171398][T28380] netlink: 'syz.0.6048': attribute type 29 has an invalid length. [ 1161.181989][T28380] netlink: 'syz.0.6048': attribute type 29 has an invalid length. [ 1161.327655][T28382] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6049'. [ 1161.735667][T28392] netlink: 'syz.1.6053': attribute type 2 has an invalid length. [ 1162.142381][T21633] wlan1: Trigger new scan to find an IBSS to join [ 1162.227386][T28390] netlink: 9442 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1162.248714][T28390] netlink: 'syz.2.6052': attribute type 21 has an invalid length. [ 1162.257334][T28390] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6052'. [ 1162.347806][T28402] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6057'. [ 1162.484711][T28408] netlink: 'syz.0.6060': attribute type 39 has an invalid length. [ 1162.613350][T28408] delete_channel: no stack [ 1162.729931][T28423] netlink: 144308 bytes leftover after parsing attributes in process `syz.0.6063'. [ 1163.003397][T28439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1163.013213][T28439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1163.022973][T28439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1163.057162][T28439] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6070'. [ 1163.132819][T28445] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1163.140226][T28445] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1163.168446][T28445] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1168.424760][T28535] validate_nla: 74 callbacks suppressed [ 1168.424774][T28535] netlink: 'syz.0.6096': attribute type 21 has an invalid length. [ 1168.438995][T28535] __nla_validate_parse: 31 callbacks suppressed [ 1168.439009][T28535] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6096'. [ 1168.671658][T28541] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1168.694553][T28541] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.6098'. [ 1169.460701][T28567] netlink: 'syz.1.6105': attribute type 2 has an invalid length. [ 1169.473600][T28567] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6105'. [ 1169.958547][T28585] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6110'. [ 1170.338296][T28597] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.6114'. [ 1170.398504][T28599] netlink: 'syz.1.6115': attribute type 21 has an invalid length. [ 1170.406827][T28599] netlink: 'syz.1.6115': attribute type 1 has an invalid length. [ 1170.866511][T28616] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1170.880407][T28616] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1170.903938][T28616] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1170.916932][T28616] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1170.935882][T28616] netlink: 'syz.0.6121': attribute type 29 has an invalid length. [ 1171.069929][T28625] netlink: 188 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1171.117179][T28622] netlink: 'syz.2.6123': attribute type 33 has an invalid length. [ 1171.125372][T28622] netlink: 152 bytes leftover after parsing attributes in process `syz.2.6123'. [ 1171.759844][T28651] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6131'. [ 1171.876856][T28655] netlink: set zone limit has 8 unknown bytes [ 1173.482054][T28659] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6133'. [ 1173.515088][T28659] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1173.604666][T28665] mac80211_hwsim hwsim63 .3ãc¤±: renamed from wlan1 (while UP) [ 1173.745861][T28669] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1173.782286][T28670] netlink: 10 bytes leftover after parsing attributes in process `syz.3.6135'. [ 1173.824926][T28671] validate_nla: 2 callbacks suppressed [ 1173.824956][T28671] netlink: 'syz.1.6136': attribute type 2 has an invalid length. [ 1173.872618][T28674] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6138'. [ 1174.480180][T28688] netlink: 'syz.1.6140': attribute type 21 has an invalid length. [ 1174.490735][T28688] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6140'. [ 1174.505562][T28688] netlink: 'syz.1.6140': attribute type 4 has an invalid length. [ 1175.141617][T28710] can: request_module (can-proto-3) failed. [ 1175.472582][T28723] veth0: entered promiscuous mode [ 1175.477696][T28723] veth0: entered allmulticast mode [ 1175.823733][T28727] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.6152'. [ 1176.632422][T28738] netlink: 64535 bytes leftover after parsing attributes in process `syz.3.6155'. [ 1177.370689][T28758] syz.0.6161: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 1177.407947][T28758] CPU: 0 PID: 28758 Comm: syz.0.6161 Not tainted syzkaller #0 [ 1177.415480][T28758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1177.425563][T28758] Call Trace: [ 1177.428873][T28758] [ 1177.431828][T28758] dump_stack_lvl+0x18c/0x250 [ 1177.436547][T28758] ? show_regs_print_info+0x20/0x20 [ 1177.441776][T28758] ? load_image+0x420/0x420 [ 1177.446320][T28758] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1177.452774][T28758] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 1177.459579][T28758] warn_alloc+0x246/0x340 [ 1177.463944][T28758] ? stack_trace_save+0xaa/0x100 [ 1177.468922][T28758] ? zone_watermark_ok_safe+0x230/0x230 [ 1177.474518][T28758] ? kasan_set_track+0x5f/0x70 [ 1177.479313][T28758] ? kasan_set_track+0x4e/0x70 [ 1177.484108][T28758] ? __kasan_kmalloc+0x8f/0xa0 [ 1177.488906][T28758] ? xsk_init_queue+0xad/0x100 [ 1177.493713][T28758] ? xsk_setsockopt+0x4c9/0x750 [ 1177.498595][T28758] ? do_sock_setsockopt+0x175/0x1a0 [ 1177.503825][T28758] ? __x64_sys_setsockopt+0x182/0x200 [ 1177.509236][T28758] __vmalloc_node_range+0x129/0x1320 [ 1177.514590][T28758] ? free_vm_area+0x50/0x50 [ 1177.519142][T28758] vmalloc_user+0x74/0x80 [ 1177.523511][T28758] ? xskq_create+0xbf/0x170 [ 1177.528035][T28758] xskq_create+0xbf/0x170 [ 1177.532398][T28758] xsk_init_queue+0xad/0x100 [ 1177.537025][T28758] xsk_setsockopt+0x4c9/0x750 [ 1177.541743][T28758] ? xsk_poll+0x670/0x670 [ 1177.546199][T28758] ? __fget_files+0x28/0x460 [ 1177.550829][T28758] ? aa_sock_opt_perm+0x74/0x100 [ 1177.555796][T28758] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1177.561373][T28758] ? security_socket_setsockopt+0x7e/0xa0 [ 1177.567116][T28758] ? xsk_poll+0x670/0x670 [ 1177.571484][T28758] do_sock_setsockopt+0x175/0x1a0 [ 1177.576548][T28758] ? __fdget+0x180/0x210 [ 1177.580830][T28758] __x64_sys_setsockopt+0x182/0x200 [ 1177.586061][T28758] do_syscall_64+0x55/0xb0 [ 1177.590516][T28758] ? clear_bhb_loop+0x40/0x90 [ 1177.595221][T28758] ? clear_bhb_loop+0x40/0x90 [ 1177.599927][T28758] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1177.605848][T28758] RIP: 0033:0x7fef2bf9e0d9 [ 1177.610287][T28758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1177.629927][T28758] RSP: 002b:00007fef2ce28028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1177.638393][T28758] RAX: ffffffffffffffda RBX: 00007fef2c225fa0 RCX: 00007fef2bf9e0d9 [ 1177.646392][T28758] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1177.654388][T28758] RBP: 00007fef2c035024 R08: 0000000000000004 R09: 0000000000000000 [ 1177.662382][T28758] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1177.670376][T28758] R13: 00007fef2c226038 R14: 00007fef2c225fa0 R15: 00007ffcdfecaf68 [ 1177.678391][T28758] [ 1177.700637][T28758] Mem-Info: [ 1177.707876][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.711132][T28758] active_anon:17101 inactive_anon:0 isolated_anon:0 [ 1177.711132][T28758] active_file:18593 inactive_file:40389 isolated_file:0 [ 1177.711132][T28758] unevictable:768 dirty:115 writeback:0 [ 1177.711132][T28758] slab_reclaimable:11150 slab_unreclaimable:92831 [ 1177.711132][T28758] mapped:25168 shmem:2661 pagetables:560 [ 1177.711132][T28758] sec_pagetables:0 bounce:0 [ 1177.711132][T28758] kernel_misc_reclaimable:0 [ 1177.711132][T28758] free:1330560 free_pcp:9117 free_cma:0 [ 1177.714225][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.781007][T28773] Â: renamed from ip6gretap0 (while UP) [ 1177.808330][T28758] Node 0 active_anon:70304kB inactive_anon:0kB active_file:74372kB inactive_file:161352kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:102472kB dirty:460kB writeback:0kB shmem:11008kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11084kB pagetables:2240kB sec_pagetables:0kB all_unreclaimable? no [ 1177.841970][T28758] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1177.887217][T28758] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1177.944906][T28758] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 1177.966941][T28758] Node 0 DMA32 free:1403260kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:72264kB inactive_anon:0kB active_file:74372kB inactive_file:160528kB unevictable:1536kB writepending:460kB present:3129332kB managed:2586828kB mlocked:0kB bounce:0kB free_pcp:21116kB local_pcp:15536kB free_cma:0kB [ 1178.089241][T28758] lowmem_reserve[]: 0 0 0 0 0 [ 1178.101041][T28758] Node 0 Normal free:4kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1178.141168][T28758] lowmem_reserve[]: 0 0 0 0 0 [ 1178.167932][T28758] Node 1 Normal free:3900148kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:14688kB local_pcp:7360kB free_cma:0kB [ 1178.284359][T28758] lowmem_reserve[]: 0 0 0 0 0 [ 1178.299883][T28758] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1178.340576][T28758] Node 0 DMA32: 276*4kB (UE) 441*8kB (U) 551*16kB (UM) 1035*32kB (UM) 1964*64kB (UME) 685*128kB (UM) 268*256kB (UM) 84*512kB (UME) 59*1024kB (UME) 21*2048kB (UME) 226*4096kB (UM) = 1400680kB [ 1178.416259][T28758] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1178.465622][T28758] Node 1 Normal: 215*4kB (UME) 61*8kB (UME) 41*16kB (UME) 195*32kB (UME) 69*64kB (UME) 15*128kB (UME) 2*256kB (UM) 0*512kB 2*1024kB (UE) 2*2048kB (UE) 947*4096kB (M) = 3900148kB [ 1178.535389][T28758] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1178.583844][T28758] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1178.624034][T28758] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1178.660978][T28758] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1178.700993][T28758] 64427 total pagecache pages [ 1178.710708][T28758] 0 pages in swap cache [ 1178.716609][T28758] Free swap = 124996kB [ 1178.730737][T28758] Total swap = 124996kB [ 1178.734940][T28758] 2097051 pages RAM [ 1178.750217][T28758] 0 pages HighMem/MovableOnly [ 1178.760342][T28758] 416958 pages reserved [ 1178.780761][T28758] 0 pages cma reserved [ 1179.317595][T28816] netlink: 'syz.1.6179': attribute type 21 has an invalid length. [ 1179.336458][T28816] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6179'. [ 1179.509982][T28826] netlink: 212912 bytes leftover after parsing attributes in process `syz.2.6182'. [ 1179.530692][T28826] openvswitch: netlink: IP tunnel dst address not specified [ 1179.564201][T28829] netlink: 'syz.1.6183': attribute type 41 has an invalid length. [ 1179.625383][T28829] netlink: 'syz.1.6183': attribute type 41 has an invalid length. [ 1179.650708][T17867] Bluetooth: hci0: command 0x0406 tx timeout [ 1180.090618][T28846] netlink: 'syz.1.6188': attribute type 39 has an invalid length. [ 1180.248743][T28849] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 1180.334356][T28848] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6188'. [ 1180.370835][T28849] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 1180.391236][T28852] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 1180.422022][T28854] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 1180.441170][T28849] netlink: 'syz.0.6189': attribute type 29 has an invalid length. [ 1180.982272][T28870] delete_channel: no stack [ 1180.999219][T28870] delete_channel: no stack [ 1181.034420][T28870] netlink: 'syz.1.6193': attribute type 17 has an invalid length. [ 1181.052548][T28870] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6193'. [ 1181.088046][T28870] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1182.396331][T28901] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6202'. [ 1182.436712][T28892] netlink: 121460 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1182.471770][T28892] netlink: 22856 bytes leftover after parsing attributes in process `syz.1.6200'. [ 1182.783343][T28909] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.6206'. [ 1182.803544][T28909] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1184.637969][T28969] validate_nla: 3 callbacks suppressed [ 1184.638002][T28969] netlink: 'syz.2.6223': attribute type 3 has an invalid length. [ 1184.697631][T28969] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6223'. [ 1185.164665][T28993] netlink: 196 bytes leftover after parsing attributes in process `syz.3.6230'. [ 1185.598422][T29023] netlink: 'syz.3.6238': attribute type 21 has an invalid length. [ 1185.609718][T29023] netlink: 'syz.3.6238': attribute type 20 has an invalid length. [ 1186.080710][T29040] netlink: 'syz.2.6243': attribute type 21 has an invalid length. [ 1186.098939][T29040] netlink: 'syz.2.6243': attribute type 1 has an invalid length. [ 1186.116989][T29040] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6243'. [ 1186.531420][T29046] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6246'. [ 1188.252193][T29104] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6260'. [ 1189.123306][T29112] netlink: 'syz.0.6261': attribute type 21 has an invalid length. [ 1189.142452][T29112] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6261'. [ 1189.487491][T29137] netlink: 'syz.2.6269': attribute type 21 has an invalid length. [ 1189.496394][T29137] netlink: 168 bytes leftover after parsing attributes in process `syz.2.6269'. [ 1190.824088][T29175] syzkaller0: entered promiscuous mode [ 1190.830080][T29175] syzkaller0: entered allmulticast mode [ 1190.853092][T29176] netlink: 'syz.1.6281': attribute type 4 has an invalid length. [ 1190.871399][T29176] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6281'. [ 1191.537350][T29190] mac80211_hwsim hwsim67 wlan0: left promiscuous mode [ 1191.554398][T29190] mac80211_hwsim hwsim67 wlan0: left allmulticast mode [ 1191.716956][T29193] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6287'. [ 1191.830034][T29196] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.6288'. [ 1191.855978][T29196] netlink: zone id is out of range [ 1191.883243][T29196] netlink: zone id is out of range [ 1191.887713][T29198] netlink: 'syz.1.6288': attribute type 10 has an invalid length. [ 1191.888487][T29196] netlink: zone id is out of range [ 1191.949338][T29196] netlink: zone id is out of range [ 1191.958565][T29196] netlink: zone id is out of range [ 1191.971177][T29196] netlink: zone id is out of range [ 1191.982420][T29196] netlink: zone id is out of range [ 1191.993800][T29196] netlink: zone id is out of range [ 1192.003985][T29196] netlink: zone id is out of range [ 1192.009330][T29196] netlink: zone id is out of range [ 1192.013130][T29201] netlink: 'syz.2.6289': attribute type 1 has an invalid length. [ 1192.040379][T29201] netlink: 101600 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1192.071564][T29201] netlink: 108 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1192.095054][T29201] netlink: 'syz.2.6289': attribute type 10 has an invalid length. [ 1192.109231][T29201] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6289'. [ 1192.118998][T29201] dummy0: entered promiscuous mode [ 1192.129325][T29201] dummy0: entered allmulticast mode [ 1192.137531][T29201] bridge0: port 2(dummy0) entered blocking state [ 1192.148523][T29201] bridge0: port 2(dummy0) entered disabled state [ 1192.388188][T29203] syzkaller0: entered promiscuous mode [ 1192.394115][T29203] syzkaller0: entered allmulticast mode [ 1192.813990][T29215] netlink: 'syz.1.6293': attribute type 3 has an invalid length. [ 1192.824981][T29215] netlink: 132 bytes leftover after parsing attributes in process `syz.1.6293'. [ 1193.903613][T29223] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6295'. [ 1194.918507][T29229] netlink: 668 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1194.932140][T29229] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6296'. [ 1195.089912][T29235] netlink: 'syz.2.6300': attribute type 29 has an invalid length. [ 1195.115708][T29235] netlink: 'syz.2.6300': attribute type 29 has an invalid length. [ 1195.128712][T29238] netlink: 'syz.2.6300': attribute type 29 has an invalid length. [ 1195.144431][T29235] netlink: 'syz.2.6300': attribute type 29 has an invalid length. [ 1195.222570][T29235] netlink: 'syz.2.6300': attribute type 29 has an invalid length. [ 1196.203770][T29256] __nla_validate_parse: 1 callbacks suppressed [ 1196.203787][T29256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1196.223978][T29256] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6306'. [ 1196.253823][T29259] ip6gretap0: left allmulticast mode [ 1196.259179][T29259] ip6gretap0: left promiscuous mode [ 1196.265402][T29259] bridge0: port 4(ip6gretap0) entered disabled state [ 1196.267115][T29261] netlink: 'syz.2.6308': attribute type 9 has an invalid length. [ 1196.281400][T29261] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6308'. [ 1196.292950][T29259] bond0: left allmulticast mode [ 1196.297866][T29259] bond_slave_0: left allmulticast mode [ 1196.307062][T29259] bond_slave_1: left allmulticast mode [ 1196.313757][T29259] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1196.321868][T29259] bridge0: port 3(bond0) entered disabled state [ 1196.330180][T29259] bridge_slave_1: left allmulticast mode [ 1196.337123][T29259] bridge_slave_1: left promiscuous mode [ 1196.345550][T29259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.356554][T29259] bridge_slave_0: left allmulticast mode [ 1196.363379][T29259] bridge_slave_0: left promiscuous mode [ 1196.369058][T29259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.655323][T29275] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6311'. [ 1196.855320][T29281] -1: renamed from syzkaller0 [ 1196.999640][T29293] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1197.008893][T29293] netlink: 6 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1197.167932][T29297] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6316'. [ 1197.182224][T29297] net_ratelimit: 334 callbacks suppressed [ 1197.182480][T29297] openvswitch: netlink: Tunnel attr 0 has unexpected len 60 expected 8 [ 1197.275143][T29297] netlink: 'syz.0.6316': attribute type 3 has an invalid length. [ 1197.291155][T29297] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.6316'. [ 1197.397937][T29305] netlink: 'syz.2.6319': attribute type 10 has an invalid length. [ 1197.498376][T29311] netlink: 203516 bytes leftover after parsing attributes in process `syz.0.6320'. [ 1197.514603][T29311] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.6320'. [ 1197.997050][T29317] netlink: 'syz.1.6321': attribute type 21 has an invalid length. [ 1198.026351][T29320] netlink: 'syz.1.6321': attribute type 21 has an invalid length. [ 1198.060933][T29321] netlink: 'syz.0.6322': attribute type 21 has an invalid length. [ 1198.087379][T29321] netlink: 'syz.0.6322': attribute type 1 has an invalid length. [ 1198.753456][T29351] netlink: 'syz.3.6331': attribute type 2 has an invalid length. [ 1198.957792][T29354] dvmrp1: tun_chr_ioctl cmd 2148553947 [ 1199.348561][T29363] netlink: 'syz.1.6335': attribute type 39 has an invalid length. [ 1199.790900][T29377] netlink: 'syz.1.6341': attribute type 29 has an invalid length. [ 1199.906496][T29377] syzkaller0: entered promiscuous mode [ 1199.917957][T29377] syzkaller0: entered allmulticast mode [ 1199.992163][T29377] veth0_vlan: entered allmulticast mode [ 1201.392066][T29424] __nla_validate_parse: 11 callbacks suppressed [ 1201.392083][T29424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6356'. [ 1201.428912][T29424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6356'. [ 1201.440751][T29424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6356'. [ 1201.747235][T29442] validate_nla: 8 callbacks suppressed [ 1201.747250][T29442] netlink: 'syz.3.6363': attribute type 29 has an invalid length. [ 1201.760850][T29442] netlink: 'syz.3.6363': attribute type 3 has an invalid length. [ 1201.768586][T29442] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1201.807284][T29443] tap0: tun_chr_ioctl cmd 1074025681 [ 1202.100746][T29451] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6367'. [ 1202.157359][T29451] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 1202.415882][T29461] ip6gre0: mtu less than device minimum [ 1203.260349][T29491] netlink: 'syz.1.6378': attribute type 21 has an invalid length. [ 1203.295448][T29491] IPv6: NLM_F_CREATE should be specified when creating new route [ 1203.312927][T29491] IPv6: Can't replace route, no match found [ 1203.638508][T29509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1203.691885][T29509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1203.709754][T29506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1203.732798][T29506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6382'. [ 1204.223163][T29519] netlink: 'syz.1.6386': attribute type 10 has an invalid length. [ 1204.264444][T29523] bridge0: port 2(dummy0) entered disabled state [ 1204.300995][T29523] bridge_slave_0: left allmulticast mode [ 1204.306963][T29523] bridge_slave_0: left promiscuous mode [ 1204.314805][T29523] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.734412][T29546] netlink: 'syz.1.6394': attribute type 10 has an invalid length. [ 1206.646370][T29588] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1206.670527][T29588] netlink: 6320 bytes leftover after parsing attributes in process `syz.2.6408'. [ 1206.688390][T29588] tc_dump_action: action bad kind [ 1206.727406][T29591] netlink: 'syz.2.6408': attribute type 21 has an invalid length. [ 1206.838376][T29595] netlink: 'syz.0.6412': attribute type 29 has an invalid length. [ 1206.859368][T29595] netlink: 'syz.0.6412': attribute type 29 has an invalid length. [ 1206.876231][T29597] netlink: 'syz.0.6412': attribute type 29 has an invalid length. [ 1206.889697][T29595] netlink: 'syz.0.6412': attribute type 29 has an invalid length. [ 1207.057857][T29606] netlink: 'syz.3.6413': attribute type 9 has an invalid length. [ 1207.120692][T29606] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6413'. [ 1207.220215][T29612] netlink: 'syz.2.6416': attribute type 29 has an invalid length. [ 1207.236402][T29612] netlink: 'syz.2.6416': attribute type 29 has an invalid length. [ 1207.265996][T29606] netlink: 'syz.3.6413': attribute type 29 has an invalid length. [ 1207.362428][T29606] netlink: 'syz.3.6413': attribute type 29 has an invalid length. [ 1207.388601][T29622] netlink: 'syz.2.6416': attribute type 39 has an invalid length. [ 1208.129731][T29640] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6422'. [ 1208.242967][T29640] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1208.264656][T29640] bond_slave_0: left promiscuous mode [ 1208.314438][T29640] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1208.326122][T29640] bond_slave_1: left promiscuous mode [ 1208.354029][T29640] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 1208.364580][T29640] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1208.383090][T29640] bond0 (unregistering): Released all slaves [ 1208.557886][T29661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1208.597435][T29661] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6427'. [ 1208.831940][T29676] netlink: 188 bytes leftover after parsing attributes in process `syz.0.6433'. [ 1208.935465][T29683] netlink: 13435 bytes leftover after parsing attributes in process `syz.2.6436'. [ 1212.277769][T29717] validate_nla: 4 callbacks suppressed [ 1212.277787][T29717] netlink: 'syz.2.6444': attribute type 2 has an invalid length. [ 1212.298015][T29717] netlink: 'syz.2.6444': attribute type 1 has an invalid length. [ 1212.308092][T29717] netlink: 9 bytes leftover after parsing attributes in process `syz.2.6444'. [ 1213.734054][T29754] sctp: [Deprecated]: syz.3.6454 (pid 29754) Use of int in max_burst socket option deprecated. [ 1213.734054][T29754] Use struct sctp_assoc_value instead [ 1213.859973][T29760] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1213.891255][T29760] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1213.921983][T29760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6457'. [ 1215.236911][T29778] sit0: entered allmulticast mode [ 1215.474467][T29792] netlink: 'syz.3.6466': attribute type 20 has an invalid length. [ 1215.487506][T29792] netlink: 'syz.3.6466': attribute type 21 has an invalid length. [ 1215.496888][T29792] netlink: 'syz.3.6466': attribute type 23 has an invalid length. [ 1215.508160][T29792] netlink: 'syz.3.6466': attribute type 25 has an invalid length. [ 1215.520530][T29792] netlink: 'syz.3.6466': attribute type 27 has an invalid length. [ 1215.529304][T29792] netlink: 'syz.3.6466': attribute type 28 has an invalid length. [ 1215.544904][T29792] netlink: 'syz.3.6466': attribute type 29 has an invalid length. [ 1215.553586][T29792] netlink: 'syz.3.6466': attribute type 30 has an invalid length. [ 1215.830663][T29796] netlink: 279 bytes leftover after parsing attributes in process `syz.0.6467'. [ 1216.105061][T29800] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1216.476338][T29810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.571658][T29810] bridge_slave_1: left allmulticast mode [ 1216.598257][T29810] bridge_slave_1: left promiscuous mode [ 1216.654775][T29810] bridge0: port 2(bridge_slave_1) entered disabled state [ 1216.715167][T29810] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1217.307070][T29849] validate_nla: 1 callbacks suppressed [ 1217.307087][T29849] netlink: 'syz.3.6486': attribute type 3 has an invalid length. [ 1217.326900][T29849] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6486'. [ 1217.993744][T29862] syzkaller0: entered promiscuous mode [ 1218.002915][T29862] syzkaller0: entered allmulticast mode [ 1218.166298][T29862] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.6489'. [ 1218.216416][T29862] netlink: zone id is out of range [ 1218.251464][T29862] netlink: zone id is out of range [ 1218.269702][T29862] netlink: zone id is out of range [ 1218.299710][T29862] netlink: zone id is out of range [ 1218.328803][T29862] netlink: zone id is out of range [ 1218.348685][T29862] netlink: zone id is out of range [ 1218.371449][T29862] netlink: zone id is out of range [ 1218.380091][T29862] netlink: zone id is out of range [ 1218.410235][T29862] netlink: zone id is out of range [ 1218.429422][T29862] netlink: zone id is out of range [ 1218.851590][T29879] netlink: 539 bytes leftover after parsing attributes in process `syz.2.6494'. [ 1218.904437][T29881] netlink: 'syz.1.6495': attribute type 3 has an invalid length. [ 1218.912511][T29881] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.6495'. [ 1220.674866][T29898] netlink: 'syz.1.6499': attribute type 2 has an invalid length. [ 1220.682780][T29898] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6499'. [ 1221.119613][T29925] netlink: 'syz.3.6507': attribute type 27 has an invalid length. [ 1221.135512][T29925] netlink: 2418 bytes leftover after parsing attributes in process `syz.3.6507'. [ 1221.490231][T29942] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.6511'. [ 1221.565371][T29940] syzkaller0: entered promiscuous mode [ 1221.571472][T29940] syzkaller0: entered allmulticast mode [ 1221.655552][T29942] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6511'. [ 1221.883957][T29951] netlink: 'syz.1.6513': attribute type 2 has an invalid length. [ 1221.896470][T29951] netlink: 1045 bytes leftover after parsing attributes in process `syz.1.6513'. [ 1223.630011][T29953] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.6514'. [ 1223.639489][T29956] netlink: 'syz.1.6515': attribute type 10 has an invalid length. [ 1223.666224][T29957] netlink: 'syz.1.6515': attribute type 10 has an invalid length. [ 1224.678442][T29963] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6517'. [ 1224.808817][T29989] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6522'. [ 1224.818323][T29989] net_ratelimit: 152 callbacks suppressed [ 1224.818508][T29989] netlink: get zone limit has 4 unknown bytes [ 1226.374893][T30033] bond0: entered promiscuous mode [ 1226.389432][T30033] bond_slave_0: entered promiscuous mode [ 1226.405162][T30033] bond_slave_1: entered promiscuous mode [ 1226.411236][T30033] mac80211_hwsim hwsim68 wlan1: entered promiscuous mode [ 1226.418461][T30033] veth1_to_bridge: entered promiscuous mode [ 1226.425522][T30033] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1226.433206][T30033] bond0: entered allmulticast mode [ 1226.438404][T30033] bond_slave_0: entered allmulticast mode [ 1226.444220][T30033] bond_slave_1: entered allmulticast mode [ 1226.449987][T30033] mac80211_hwsim hwsim68 wlan1: entered allmulticast mode [ 1226.461995][T30033] veth1_to_bridge: entered allmulticast mode [ 1226.468029][T30033] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1226.508174][T30031] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.6533'. [ 1226.525416][T30034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6533'. [ 1226.769243][T30036] netlink: 196628 bytes leftover after parsing attributes in process `syz.1.6534'. [ 1226.920778][T30039] netlink: 'syz.0.6535': attribute type 2 has an invalid length. [ 1226.937591][T30039] netlink: 'syz.0.6535': attribute type 8 has an invalid length. [ 1226.963979][T30039] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1227.389252][T30045] netlink: 180 bytes leftover after parsing attributes in process `syz.0.6537'. [ 1227.687482][T30050] sctp: [Deprecated]: syz.1.6539 (pid 30050) Use of int in maxseg socket option. [ 1227.687482][T30050] Use struct sctp_assoc_value instead [ 1228.034316][T30065] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1228.137989][T30067] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6542'. [ 1228.376630][T30073] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1228.384102][T30073] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.391711][T30073] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.399155][T30073] IPv6: NLM_F_CREATE should be set when creating new route [ 1228.645771][T30080] __nla_validate_parse: 1 callbacks suppressed [ 1228.645787][T30080] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.6547'. [ 1229.033735][T30095] netlink: 212808 bytes leftover after parsing attributes in process `syz.2.6550'. [ 1230.222064][T30122] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6559'. [ 1230.311052][T30124] netlink: 'syz.2.6560': attribute type 3 has an invalid length. [ 1230.318957][T30124] netlink: 'syz.2.6560': attribute type 1 has an invalid length. [ 1230.328500][T30124] netlink: 'syz.2.6560': attribute type 1 has an invalid length. [ 1230.336659][T30124] netlink: 'syz.2.6560': attribute type 2 has an invalid length. [ 1230.346950][T30124] netlink: 198100 bytes leftover after parsing attributes in process `syz.2.6560'. [ 1230.495899][T30131] netlink: 'syz.2.6562': attribute type 29 has an invalid length. [ 1230.504326][T30131] netlink: 'syz.2.6562': attribute type 29 has an invalid length. [ 1230.593894][T30135] netlink: 128 bytes leftover after parsing attributes in process `syz.1.6563'. [ 1230.606038][T30135] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1230.734420][T30143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1230.743701][T30143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1230.761441][T30143] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6566'. [ 1231.576332][T30176] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.6576'. [ 1231.635991][T30179] netlink: 'syz.1.6576': attribute type 29 has an invalid length. [ 1231.661613][T30179] netlink: 'syz.1.6576': attribute type 29 has an invalid length. [ 1231.683583][T30181] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6577'. [ 1231.746291][T30181] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1231.754097][T30181] IPv6: NLM_F_CREATE should be set when creating new route [ 1232.542037][T30191] netlink: 'syz.2.6580': attribute type 10 has an invalid length. [ 1232.692743][T30195] : renamed from bond_slave_0 [ 1233.323903][T30213] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1233.331392][T30213] IPv6: NLM_F_CREATE should be set when creating new route [ 1233.338914][T30213] IPv6: NLM_F_CREATE should be set when creating new route [ 1233.346443][T30213] IPv6: NLM_F_CREATE should be set when creating new route [ 1233.721114][T30225] netlink: 'syz.1.6588': attribute type 10 has an invalid length. [ 1233.728991][T30225] __nla_validate_parse: 6 callbacks suppressed [ 1233.729005][T30225] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6588'. [ 1233.840195][T30225] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1234.259646][T30246] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.6599'. [ 1234.819416][T30267] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6603'. [ 1234.828602][T30266] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.6603'. [ 1235.588023][ T51] Bluetooth: hci4: unexpected subevent 0x01 length: 150 > 18 [ 1235.934244][T30283] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.6607'. [ 1236.267435][T30289] syzkaller0: entered promiscuous mode [ 1236.315875][T30289] syzkaller0: entered allmulticast mode [ 1236.341689][T30285] validate_nla: 2 callbacks suppressed [ 1236.341726][T30285] netlink: 'syz.1.6608': attribute type 10 has an invalid length. [ 1236.459111][T30285] bridge_slave_1: entered promiscuous mode [ 1236.468947][T30285] bridge_slave_1: entered allmulticast mode [ 1236.506769][T30285] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 1236.736151][T30299] netlink: 'syz.2.6612': attribute type 4 has an invalid length. [ 1236.744484][T30299] netlink: 128124 bytes leftover after parsing attributes in process `syz.2.6612'. [ 1238.961315][T30309] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6613'. [ 1239.018960][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.034182][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.175931][T30334] netlink: 'syz.0.6620': attribute type 16 has an invalid length. [ 1239.192363][T30334] netlink: 'syz.0.6620': attribute type 3 has an invalid length. [ 1239.200136][T30334] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6620'. [ 1239.810883][T30364] netlink: 'syz.3.6628': attribute type 25 has an invalid length. [ 1239.819155][T30364] netlink: 'syz.3.6628': attribute type 10 has an invalid length. [ 1239.917233][T30364] netlink: 'syz.3.6628': attribute type 9 has an invalid length. [ 1239.926679][T30364] netlink: 154020 bytes leftover after parsing attributes in process `syz.3.6628'. [ 1240.325935][T30372] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.6630'. [ 1240.431887][T30377] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1240.873146][T30377] netlink: 22856 bytes leftover after parsing attributes in process `syz.3.6632'. [ 1243.102296][T30386] netlink: 'syz.2.6635': attribute type 10 has an invalid length. [ 1243.110185][T30386] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1243.122892][T30386] batman_adv: batadv0: Adding interface: veth0_vlan [ 1243.129516][T30386] batman_adv: batadv0: Interface activated: veth0_vlan [ 1243.156344][T30391] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6635'. [ 1243.178681][T30391] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1243.203457][T30412] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6642'. [ 1243.236163][T30408] netlink: 'syz.1.6641': attribute type 10 has an invalid length. [ 1243.267450][T30408] bond0: (slave netdevsim0): Releasing backup interface [ 1243.283430][T30408] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 1243.299085][T30408] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 1243.435092][T30419] netlink: 'syz.2.6643': attribute type 19 has an invalid length. [ 1243.793867][T30427] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.6647'. [ 1243.824391][T30427] debugfs: Directory '!!ô!' with parent 'ieee80211' already present! [ 1243.853677][T30435] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1243.881589][T30432] netlink: 'syz.0.6648': attribute type 9 has an invalid length. [ 1243.897152][T30431] netlink: 'syz.0.6648': attribute type 9 has an invalid length. [ 1244.387701][T30451] netlink: 'syz.2.6655': attribute type 4 has an invalid length. [ 1244.395793][T30451] __nla_validate_parse: 2 callbacks suppressed [ 1244.395806][T30451] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.6655'. [ 1244.655078][T30464] delete_channel: no stack [ 1244.839157][T30474] netlink: 'syz.0.6662': attribute type 1 has an invalid length. [ 1244.850560][T30474] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6662'. [ 1244.868685][T30475] netlink: 'syz.0.6662': attribute type 1 has an invalid length. [ 1244.877111][T30475] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.6662'. [ 1246.698817][T30477] netlink: 21 bytes leftover after parsing attributes in process `syz.3.6663'. [ 1246.712390][T30477] ksmbd: Unknown IPC event: 0, ignore. [ 1248.130608][T30494] netlink: 'syz.0.6669': attribute type 21 has an invalid length. [ 1248.142245][T30494] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6669'. [ 1248.220168][T30500] netlink: 'syz.2.6671': attribute type 46 has an invalid length. [ 1248.228731][T30500] netlink: 55 bytes leftover after parsing attributes in process `syz.2.6671'. [ 1248.501474][T30512] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6675'. [ 1249.340242][T30526] netlink: 'syz.0.6679': attribute type 9 has an invalid length. [ 1249.357340][T30526] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6679'. [ 1249.672159][T30539] netlink: 763 bytes leftover after parsing attributes in process `syz.2.6684'. [ 1250.084994][T30558] syzkaller0: entered promiscuous mode [ 1250.090786][T30558] syzkaller0: entered allmulticast mode [ 1250.108109][T30560] netlink: 'syz.2.6690': attribute type 27 has an invalid length. [ 1250.121971][T30560] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1250.200306][T30560] IPv6: NLM_F_CREATE should be specified when creating new route [ 1250.209637][T30560] netlink: 1 bytes leftover after parsing attributes in process `syz.2.6690'. [ 1252.164818][T30574] netlink: 188 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1252.199918][T30574] netlink: 'syz.1.6694': attribute type 33 has an invalid length. [ 1252.208925][T30574] netlink: 152 bytes leftover after parsing attributes in process `syz.1.6694'. [ 1252.284120][T30584] netlink: 'syz.3.6698': attribute type 9 has an invalid length. [ 1252.300513][T30582] netlink: 'syz.2.6697': attribute type 2 has an invalid length. [ 1252.329587][T30584] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6698'. [ 1252.425645][ T51] Bluetooth: hci0: ISO packet for unknown connection handle 5 [ 1252.552716][T30589] netlink: 'syz.1.6699': attribute type 13 has an invalid length. [ 1252.578648][T30589] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.6699'. [ 1252.620020][T30588] netlink: 'syz.1.6699': attribute type 13 has an invalid length. [ 1252.655910][T30588] netlink: 24643 bytes leftover after parsing attributes in process `syz.1.6699'. [ 1252.754573][T30596] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6702'. [ 1252.785881][T30596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1252.916834][T30605] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6705'. [ 1253.138807][T30610] netlink: 'syz.1.6706': attribute type 21 has an invalid length. [ 1253.189885][T30613] delete_channel: no stack [ 1253.438256][T30626] netlink: 'syz.1.6712': attribute type 29 has an invalid length. [ 1253.438316][T30625] netlink: 'syz.1.6712': attribute type 29 has an invalid length. [ 1253.446954][T30626] netlink: 'syz.1.6712': attribute type 29 has an invalid length. [ 1253.591037][T30632] netlink: 'syz.1.6714': attribute type 1 has an invalid length. [ 1253.616434][T30630] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1253.623898][T30630] IPv6: NLM_F_CREATE should be set when creating new route [ 1254.525898][T30649] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1254.539308][T30649] CPU: 0 PID: 30649 Comm: syz.1.6720 Not tainted syzkaller #0 [ 1254.546838][T30649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1254.556893][T30649] Call Trace: [ 1254.560167][T30649] [ 1254.563094][T30649] dump_stack_lvl+0x18c/0x250 [ 1254.567777][T30649] ? show_regs_print_info+0x20/0x20 [ 1254.572972][T30649] ? load_image+0x420/0x420 [ 1254.577483][T30649] sysfs_warn_dup+0x8e/0xa0 [ 1254.581986][T30649] sysfs_do_create_link_sd+0xc0/0x110 [ 1254.587359][T30649] device_add_class_symlinks+0x1cf/0x240 [ 1254.592998][T30649] device_add+0x4f9/0xc40 [ 1254.597340][T30649] wiphy_register+0x1d99/0x2ac0 [ 1254.602207][T30649] ? cfg80211_event_work+0x40/0x40 [ 1254.607401][T30649] ? minstrel_ht_alloc+0x88a/0x990 [ 1254.612531][T30649] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1254.618607][T30649] ieee80211_register_hw+0x2dd8/0x3b30 [ 1254.624075][T30649] ? ieee80211_register_hw+0xfb1/0x3b30 [ 1254.629620][T30649] ? ieee80211_tasklet_handler+0x20/0x20 [ 1254.635250][T30649] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1254.641156][T30649] ? __debug_object_init+0xec/0x450 [ 1254.646356][T30649] ? __asan_memset+0x22/0x40 [ 1254.650947][T30649] ? __hrtimer_init+0x189/0x270 [ 1254.655798][T30649] mac80211_hwsim_new_radio+0x2a75/0x4d70 [ 1254.661534][T30649] ? mac80211_hwsim_free+0x220/0x220 [ 1254.666810][T30649] ? rcu_is_watching+0x15/0xb0 [ 1254.671572][T30649] ? kstrndup+0xbd/0x140 [ 1254.675819][T30649] hwsim_new_radio_nl+0xdad/0x1a70 [ 1254.680931][T30649] ? __nla_validate+0x50/0x50 [ 1254.685618][T30649] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1254.692123][T30649] ? __nla_parse+0x40/0x50 [ 1254.696542][T30649] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1254.702872][T30649] genl_family_rcv_msg_doit+0x21a/0x310 [ 1254.708418][T30649] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1254.714313][T30649] ? bpf_lsm_capable+0x9/0x10 [ 1254.718991][T30649] ? security_capable+0x89/0xb0 [ 1254.723851][T30649] genl_rcv_msg+0x611/0x7a0 [ 1254.728356][T30649] ? genl_bind+0x360/0x360 [ 1254.732763][T30649] ? hwsim_tx_info_frame_received_nl+0xce0/0xce0 [ 1254.739096][T30649] netlink_rcv_skb+0x235/0x4c0 [ 1254.743857][T30649] ? genl_bind+0x360/0x360 [ 1254.748274][T30649] ? netlink_ack+0x1160/0x1160 [ 1254.753045][T30649] ? __lock_acquire+0x7d80/0x7d80 [ 1254.758067][T30649] ? net_generic+0x1e/0x240 [ 1254.762573][T30649] ? down_read+0x1ac/0x2e0 [ 1254.766990][T30649] genl_rcv+0x28/0x40 [ 1254.770976][T30649] netlink_unicast+0x7b1/0x930 [ 1254.775753][T30649] netlink_sendmsg+0x8d0/0xbf0 [ 1254.780518][T30649] ? netlink_getsockopt+0x590/0x590 [ 1254.785715][T30649] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1254.791258][T30649] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1254.796539][T30649] ? security_socket_sendmsg+0x80/0xa0 [ 1254.802023][T30649] ? netlink_getsockopt+0x590/0x590 [ 1254.807215][T30649] ____sys_sendmsg+0x61b/0x980 [ 1254.811984][T30649] ? __asan_memset+0x22/0x40 [ 1254.816581][T30649] ? __sys_sendmsg_sock+0x30/0x30 [ 1254.821597][T30649] ? __import_iovec+0x5f2/0x850 [ 1254.826461][T30649] ? import_iovec+0x73/0xa0 [ 1254.830965][T30649] ___sys_sendmsg+0x2a6/0x360 [ 1254.835670][T30649] ? __sys_sendmsg+0x2b0/0x2b0 [ 1254.840501][T30649] __se_sys_sendmsg+0x1d0/0x2c0 [ 1254.845407][T30649] ? __x64_sys_sendmsg+0x80/0x80 [ 1254.850359][T30649] ? lockdep_hardirqs_on+0x98/0x150 [ 1254.855566][T30649] do_syscall_64+0x55/0xb0 [ 1254.859983][T30649] ? clear_bhb_loop+0x40/0x90 [ 1254.864656][T30649] ? clear_bhb_loop+0x40/0x90 [ 1254.869331][T30649] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1254.875218][T30649] RIP: 0033:0x7fab8919e0d9 [ 1254.879635][T30649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.899261][T30649] RSP: 002b:00007fab8a0a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1254.907675][T30649] RAX: ffffffffffffffda RBX: 00007fab89425fa0 RCX: 00007fab8919e0d9 [ 1254.915644][T30649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1254.923629][T30649] RBP: 00007fab89235024 R08: 0000000000000000 R09: 0000000000000000 [ 1254.931593][T30649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1254.939563][T30649] R13: 00007fab89426038 R14: 00007fab89425fa0 R15: 00007ffc59b6a4e8 [ 1254.947547][T30649] [ 1255.177416][T30656] __nla_validate_parse: 8 callbacks suppressed [ 1255.177452][T30656] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6724'. [ 1255.212595][T30656] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1255.364490][T30666] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.6727'. [ 1255.382836][T30666] netlink: 'syz.2.6727': attribute type 10 has an invalid length. [ 1255.397078][T30666] veth1_macvtap: left promiscuous mode [ 1255.458346][T30667] delete_channel: no stack [ 1255.714629][T30686] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 1255.724377][T30686] netlink: 'syz.2.6734': attribute type 4 has an invalid length. [ 1255.744178][T30686] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1255.803693][T30690] netlink: 'syz.2.6734': attribute type 1 has an invalid length. [ 1255.805072][T30691] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6735'. [ 1255.845367][T30691] netlink: get zone limit has 4 unknown bytes [ 1255.854370][T30690] netlink: 'syz.2.6734': attribute type 4 has an invalid length. [ 1255.877657][T30690] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.6734'. [ 1255.920047][T30693] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6736'. [ 1255.952553][T30693] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1256.444937][T30703] netlink: 'syz.0.6740': attribute type 9 has an invalid length. [ 1256.462008][T30703] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6740'. [ 1257.174169][T30719] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6746'. [ 1257.199139][T30719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1257.230733][T30721] netlink: 63579 bytes leftover after parsing attributes in process `syz.0.6747'. [ 1257.309643][T30723] netlink: 826 bytes leftover after parsing attributes in process `syz.0.6748'. [ 1258.513339][T30749] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1260.100073][T30763] validate_nla: 1 callbacks suppressed [ 1260.100092][T30763] netlink: 'syz.1.6761': attribute type 29 has an invalid length. [ 1260.118942][T30763] netlink: 'syz.1.6761': attribute type 29 has an invalid length. [ 1260.128053][T30762] netlink: 'syz.1.6761': attribute type 29 has an invalid length. [ 1260.384952][T30773] netlink: 'syz.1.6763': attribute type 9 has an invalid length. [ 1260.398807][T30773] netlink: 'syz.1.6763': attribute type 23 has an invalid length. [ 1260.406766][T30773] __nla_validate_parse: 2 callbacks suppressed [ 1260.406779][T30773] netlink: 156008 bytes leftover after parsing attributes in process `syz.1.6763'. [ 1261.600308][T30778] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1261.607879][T30778] IPv6: NLM_F_CREATE should be set when creating new route [ 1261.663261][T30778] netlink: 'syz.3.6764': attribute type 9 has an invalid length. [ 1261.688727][T30778] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1261.738728][T30782] netlink: 'syz.2.6765': attribute type 2 has an invalid length. [ 1261.753293][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1261.784623][T30782] netlink: 'syz.2.6765': attribute type 2 has an invalid length. [ 1261.796740][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1261.829318][T30782] netlink: 'syz.2.6765': attribute type 2 has an invalid length. [ 1261.837706][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1261.852559][T30782] netlink: 'syz.2.6765': attribute type 2 has an invalid length. [ 1261.860859][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1261.872096][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1261.883320][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1262.035060][T30782] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6765'. [ 1262.049771][T30781] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.6764'. [ 1264.774129][T30883] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1266.106612][T30909] __nla_validate_parse: 41 callbacks suppressed [ 1266.106629][T30909] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6806'. [ 1266.261351][T30922] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6808'. [ 1266.279392][T30926] validate_nla: 40 callbacks suppressed [ 1266.279406][T30926] netlink: 'syz.0.6811': attribute type 21 has an invalid length. [ 1266.300833][T30926] netlink: 128 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1266.312631][T30924] netlink: 'syz.3.6809': attribute type 3 has an invalid length. [ 1266.318166][T30926] netlink: 'syz.0.6811': attribute type 5 has an invalid length. [ 1266.320914][T30924] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.6809'. [ 1266.329246][T30926] netlink: 3 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1266.354761][T30922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1266.391654][T30928] netlink: 'syz.2.6810': attribute type 21 has an invalid length. [ 1266.403355][T30928] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6810'. [ 1266.621763][T30944] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.6815'. [ 1266.873334][T30951] netlink: 105120 bytes leftover after parsing attributes in process `syz.0.6817'. [ 1266.883623][T30953] netlink: 'syz.3.6818': attribute type 153 has an invalid length. [ 1266.890615][T30951] netlink: 'syz.0.6817': attribute type 2 has an invalid length. [ 1266.892015][T30953] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.6818'. [ 1267.296135][T30965] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6821'. [ 1267.311894][T30965] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1267.409256][T30967] syzkaller0: entered promiscuous mode [ 1267.415134][T30967] syzkaller0: entered allmulticast mode [ 1270.260247][T30999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1270.786656][T31021] netlink: 'syz.2.6839': attribute type 21 has an invalid length. [ 1270.795065][T31021] netlink: 'syz.2.6839': attribute type 1 has an invalid length. [ 1270.803519][T31021] netlink: 'syz.2.6839': attribute type 2 has an invalid length. [ 1270.942291][T31025] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1271.012613][T31030] netlink: 'syz.2.6843': attribute type 6 has an invalid length. [ 1271.070382][T31032] `: renamed from ip6tnl0 (while UP) [ 1271.126678][T31032] A link change request failed with some changes committed already. Interface ` may have been left with an inconsistent configuration, please check. [ 1274.130118][T31053] __nla_validate_parse: 8 callbacks suppressed [ 1274.130135][T31053] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6849'. [ 1274.146271][T31052] netlink: 144 bytes leftover after parsing attributes in process `syz.0.6849'. [ 1274.156180][T31058] validate_nla: 1 callbacks suppressed [ 1274.156196][T31058] netlink: 'syz.2.6850': attribute type 21 has an invalid length. [ 1274.176342][T31068] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.6852'. [ 1274.208378][T31069] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1274.506393][T21633] tipc: Subscription rejected, illegal request [ 1275.954734][T31123] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6866'. [ 1275.970106][T31123] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1276.104375][T31134] netlink: 'syz.0.6870': attribute type 153 has an invalid length. [ 1276.127835][T31134] netlink: 128124 bytes leftover after parsing attributes in process `syz.0.6870'. [ 1276.283455][T31132] IPv6: Can't replace route, no match found [ 1276.372421][T31144] netlink: 'syz.0.6873': attribute type 7 has an invalid length. [ 1276.405835][T31144] netlink: 'syz.0.6873': attribute type 1 has an invalid length. [ 1276.420684][T31144] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.6873'. [ 1276.453891][T31148] netlink: 'syz.3.6874': attribute type 1 has an invalid length. [ 1276.648200][T31157] bridge_slave_0: left allmulticast mode [ 1276.659083][T31157] bridge_slave_0: left promiscuous mode [ 1276.666361][T31157] bridge0: port 1(bridge_slave_0) entered disabled state [ 1276.873447][T31161] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.6878'. [ 1276.897984][T31161] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1277.118525][T31176] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6883'. [ 1277.146282][T31176] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 1277.197348][T31179] netlink: 'syz.3.6884': attribute type 30 has an invalid length. [ 1277.283517][T31182] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1277.374113][T31185] netlink: 'syz.0.6885': attribute type 33 has an invalid length. [ 1277.396661][T31185] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6885'. [ 1277.878308][T31196] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1278.277062][T31218] netlink: 'syz.1.6897': attribute type 3 has an invalid length. [ 1278.288662][T31215] netlink: 'syz.0.6896': attribute type 1 has an invalid length. [ 1278.297140][T31218] netlink: 'syz.1.6897': attribute type 4 has an invalid length. [ 1280.575244][T31271] __nla_validate_parse: 6 callbacks suppressed [ 1280.575263][T31271] netlink: 192436 bytes leftover after parsing attributes in process `syz.1.6913'. [ 1280.607807][T31271] openvswitch: netlink: Message has 20476 unknown bytes. [ 1280.689683][T31273] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1280.702672][T31275] delete_channel: no stack [ 1280.707233][T31275] delete_channel: no stack [ 1281.397090][T31307] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.6925'. [ 1281.455860][T31309] validate_nla: 4 callbacks suppressed [ 1281.455878][T31309] netlink: 'syz.0.6926': attribute type 29 has an invalid length. [ 1281.480987][T31309] netlink: 'syz.0.6926': attribute type 29 has an invalid length. [ 1281.978778][T31336] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.6934'. [ 1282.000338][T31336] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 1282.028211][T31338] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1282.056098][T31336] netlink: 'syz.0.6934': attribute type 10 has an invalid length. [ 1282.067399][T31336] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6934'. [ 1282.101116][T31336] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1282.376280][T31350] netlink: 60 bytes leftover after parsing attributes in process `syz.0.6940'. [ 1283.135517][T31375] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1284.394183][T31390] delete_channel: no stack [ 1285.022484][T31414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1285.195719][T31421] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6961'. [ 1285.481690][T31437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1285.509621][T31437] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1285.550789][T31440] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6966'. [ 1285.681417][T31444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1285.747509][T31447] netlink: 'syz.2.6971': attribute type 21 has an invalid length. [ 1285.761434][T31447] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6971'. [ 1285.794478][T31447] netlink: 'syz.2.6971': attribute type 4 has an invalid length. [ 1285.820534][T31447] netlink: 'syz.2.6971': attribute type 5 has an invalid length. [ 1285.850547][T31447] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6971'. [ 1286.433678][T31477] syzkaller0: entered promiscuous mode [ 1286.439243][T31477] syzkaller0: entered allmulticast mode [ 1286.522318][T31479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1286.777719][T31485] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1287.075018][T31494] can: request_module (can-proto-4) failed. [ 1287.364588][T31506] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6989'. [ 1287.922149][T31527] netlink: 'syz.3.6995': attribute type 2 has an invalid length. [ 1287.980810][T31525] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1288.835150][T31557] netlink: 'syz.0.7003': attribute type 21 has an invalid length. [ 1288.848143][T31557] netlink: 'syz.0.7003': attribute type 20 has an invalid length. [ 1289.129259][T31563] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7005'. [ 1289.149493][T31563] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1289.691117][T31591] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.7012'. [ 1290.061886][T31602] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7016'. [ 1290.134876][T31602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1290.243022][T31604] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1290.572562][T31618] netlink: 'syz.2.7019': attribute type 10 has an invalid length. [ 1290.596915][T31614] netlink: 'syz.2.7019': attribute type 10 has an invalid length. [ 1291.788363][T31638] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7026'. [ 1291.833895][T31637] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1293.466961][T31655] netlink: 'syz.3.7032': attribute type 2 has an invalid length. [ 1293.507510][T31655] netlink: 17267 bytes leftover after parsing attributes in process `syz.3.7032'. [ 1296.346754][T31667] netlink: 61967 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1296.363286][T31668] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1296.481929][T31676] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.7038'. [ 1297.563235][T31720] netlink: 'syz.1.7048': attribute type 10 has an invalid length. [ 1297.644679][T31723] netlink: 61967 bytes leftover after parsing attributes in process `syz.3.7049'. [ 1297.663149][T31723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1298.522235][T31742] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7052'. [ 1298.845221][T31763] syzkaller0: entered promiscuous mode [ 1298.859344][T31763] syzkaller0: entered allmulticast mode [ 1300.006929][T31780] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1300.031773][T31780] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1300.048640][T31780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1300.080338][T31780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1300.088186][T31780] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1300.098889][T31780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1300.463380][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.469728][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.694537][T31774] netlink: 'syz.3.7057': attribute type 21 has an invalid length. [ 1301.702699][T31774] netlink: 'syz.3.7057': attribute type 1 has an invalid length. [ 1301.710518][T31774] netlink: 16090 bytes leftover after parsing attributes in process `syz.3.7057'. [ 1301.726630][T31785] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7060'. [ 1301.940853][ T51] Bluetooth: hci1: ISO packet for unknown connection handle 2622 [ 1301.956238][T31795] netlink: 'syz.0.7063': attribute type 33 has an invalid length. [ 1302.092453][T31798] netlink: 'syz.3.7061': attribute type 10 has an invalid length. [ 1302.108597][T31802] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7065'. [ 1302.121107][T31802] openvswitch: netlink: Tunnel attr 0 has unexpected len 5 expected 8 [ 1302.131038][ T51] Bluetooth: hci3: command tx timeout [ 1302.178356][T31778] chnl_net:caif_netlink_parms(): no params data found [ 1302.543700][T31778] bridge0: port 1(bridge_slave_0) entered blocking state [ 1302.555292][T31778] bridge0: port 1(bridge_slave_0) entered disabled state [ 1302.580938][T31778] bridge_slave_0: entered allmulticast mode [ 1302.588229][T31778] bridge_slave_0: entered promiscuous mode [ 1302.619431][T31778] bridge0: port 2(bridge_slave_1) entered blocking state [ 1302.626999][T31778] bridge0: port 2(bridge_slave_1) entered disabled state [ 1302.638072][T31778] bridge_slave_1: entered allmulticast mode [ 1302.649046][T31778] bridge_slave_1: entered promiscuous mode [ 1302.696281][T31778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.764581][T31778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.837689][T31778] team0: Port device team_slave_0 added [ 1302.847512][T31778] team0: Port device team_slave_1 added [ 1302.919283][T31778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.934914][T31778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.961170][T31778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1303.001468][T21637] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.022781][T31778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.030896][T31778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.057645][T31778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.138752][T21637] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.215711][T31778] hsr_slave_0: entered promiscuous mode [ 1303.243690][T31778] hsr_slave_1: entered promiscuous mode [ 1303.260327][T31778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1303.282429][T31778] Cannot create hsr debugfs directory [ 1303.315373][T21637] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.398119][T21637] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.637433][T21637] tipc: Left network mode [ 1304.073106][T21637]  (unregistering): left allmulticast mode [ 1304.089844][T21637]  (unregistering): left promiscuous mode [ 1304.109942][T21637] Ÿë: port 1(5Â) entered disabled state [ 1304.212559][T31848] netlink: 'syz.2.7075': attribute type 10 has an invalid length. [ 1304.221083][ T51] Bluetooth: hci3: command tx timeout [ 1304.234556][T31848] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7075'. [ 1304.247104][T31859] netlink: 'syz.3.7076': attribute type 1 has an invalid length. [ 1304.261128][T31859] netlink: 'syz.3.7076': attribute type 3 has an invalid length. [ 1304.269692][T31859] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7076'. [ 1304.571441][T31859] netlink: 'syz.3.7076': attribute type 10 has an invalid length. [ 1304.582244][T31859] netlink: 168 bytes leftover after parsing attributes in process `syz.3.7076'. [ 1305.024528][T31778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1305.041353][T31778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1305.063683][T31778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1305.164750][T31778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1305.179320][T31874] netlink: 'syz.3.7079': attribute type 21 has an invalid length. [ 1305.210822][T31874] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7079'. [ 1305.371567][T31889] netlink: 'syz.3.7079': attribute type 10 has an invalid length. [ 1306.026855][T31778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.147700][T31778] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.191219][T17125] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.198435][T17125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.216027][T21642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.223242][T21642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.291645][ T51] Bluetooth: hci3: command tx timeout [ 1306.466465][T31904] delete_channel: no stack [ 1306.781430][T21637] bond0: (slave wlan1): Releasing backup interface [ 1306.802340][T21637] mac80211_hwsim hwsim68 wlan1 (unregistering): left promiscuous mode [ 1306.834131][T21637] mac80211_hwsim hwsim68 wlan1 (unregistering): left allmulticast mode [ 1307.110041][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.125267][T21637] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.145323][T21637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.180079][T21637] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.838290][T21637] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1307.850553][T21637] bond_slave_1 (unregistering): left promiscuous mode [ 1307.857351][T21637] bond_slave_1 (unregistering): left allmulticast mode [ 1307.905191][T21637] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1307.914400][T21637] bond_slave_0 (unregistering): left promiscuous mode [ 1307.927685][T21637] bond_slave_0 (unregistering): left allmulticast mode [ 1307.984018][T21637] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 1307.996757][T21637] bridge_slave_1 (unregistering): left promiscuous mode [ 1308.003797][T21637] bridge_slave_1 (unregistering): left allmulticast mode [ 1308.036614][T21637] bond0 (unregistering): (slave veth1_to_bridge): Releasing backup interface [ 1308.046183][T21637] veth1_to_bridge (unregistering): left promiscuous mode [ 1308.063274][T21637] veth1_to_bridge (unregistering): left allmulticast mode [ 1308.236609][T21637] bond0 (unregistering): Released all slaves [ 1308.286659][T31922] netlink: 'syz.0.7090': attribute type 10 has an invalid length. [ 1308.299123][T31922] mac80211_hwsim hwsim72 wlan1: left promiscuous mode [ 1308.307947][T31922] mac80211_hwsim hwsim72 wlan1: left allmulticast mode [ 1308.370497][ T51] Bluetooth: hci3: command tx timeout [ 1308.608147][T31778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1308.709857][T31778] veth0_vlan: entered promiscuous mode [ 1308.768801][T31778] veth1_vlan: entered promiscuous mode [ 1308.848189][T31778] veth0_macvtap: entered promiscuous mode [ 1308.875034][T31778] veth1_macvtap: entered promiscuous mode [ 1308.909883][T31778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.921001][T31778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.931160][T31778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.941726][T31778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.956932][T31778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1308.967622][T31778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1308.984180][T31778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.021858][T31778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.082466][T31778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.104555][T31778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.136043][T31778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.167901][T31778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1309.199054][T31778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1309.203566][T31954] netlink: 'syz.3.7097': attribute type 153 has an invalid length. [ 1309.223188][T31778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.254318][T31778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.285082][T31778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.299179][T31954] netlink: 128124 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1309.307431][T31778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.334630][T31778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.547499][T21642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.572229][T21642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.635962][T21649] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.647487][T21649] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.864602][T31960] netlink: 61967 bytes leftover after parsing attributes in process `syz.1.7058'. [ 1310.334570][T31960] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1310.343588][T31960] IPv6: NLM_F_CREATE should be set when creating new route [ 1310.354181][T31960] IPv6: NLM_F_CREATE should be set when creating new route [ 1310.362715][T31960] IPv6: NLM_F_CREATE should be set when creating new route [ 1310.401088][T31970] netlink: 'syz.3.7099': attribute type 6 has an invalid length. [ 1310.410159][T31970] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7099'. [ 1310.714172][T31985] netlink: 'syz.2.7103': attribute type 21 has an invalid length. [ 1310.737422][T31985] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7103'. [ 1310.762152][ T51] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10 [ 1310.766760][T31986] netlink: 'syz.2.7103': attribute type 21 has an invalid length. [ 1310.811812][T31986] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7103'. [ 1312.047093][T32008] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7110'. [ 1312.771355][ T51] Bluetooth: hci3: command tx timeout [ 1312.850683][T32008] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1313.009313][T32018] netlink: 'syz.2.7114': attribute type 27 has an invalid length. [ 1313.061681][T32018] netlink: 'syz.2.7114': attribute type 28 has an invalid length. [ 1313.101323][T32018] netlink: 'syz.2.7114': attribute type 29 has an invalid length. [ 1313.120806][T32018] netlink: 'syz.2.7114': attribute type 30 has an invalid length. [ 1313.147490][T32018] netlink: 'syz.2.7114': attribute type 31 has an invalid length. [ 1313.858864][T32035] validate_nla: 15 callbacks suppressed [ 1313.858885][T32035] netlink: 'syz.2.7115': attribute type 9 has an invalid length. [ 1313.873510][T32035] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.7115'. [ 1314.635322][T32058] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7122'. [ 1314.682655][T32058] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1315.082764][T32070] netlink: 188 bytes leftover after parsing attributes in process `syz.3.7128'. [ 1315.127663][T32070] macsec0: entered allmulticast mode [ 1315.133406][ T51] Bluetooth: hci3: ISO packet for unknown connection handle 2878 [ 1315.200305][T32070] veth1_macvtap: entered allmulticast mode [ 1315.616756][T32075] veth1_macvtap: left allmulticast mode [ 1315.630644][T32075] veth1_macvtap: left promiscuous mode [ 1315.636147][T32075] macsec0: left allmulticast mode [ 1315.725986][T32074] netlink: 'syz.0.7129': attribute type 10 has an invalid length. [ 1316.146256][T32108] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7136'. [ 1316.175436][T32108] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1316.560241][T32133] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7144'. [ 1316.580332][T32133] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1316.875062][T32145] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1316.901898][T32145] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1317.064367][T32150] IPv6: NLM_F_CREATE should be specified when creating new route [ 1317.171051][T32150] netlink: 1 bytes leftover after parsing attributes in process `syz.1.7146'. [ 1317.756971][T32167] netlink: 'syz.0.7153': attribute type 21 has an invalid length. [ 1317.807687][T32167] IPv6: NLM_F_CREATE should be specified when creating new route [ 1317.905570][T32176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1317.915463][T32176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1317.931390][T32176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1317.941401][T32176] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7155'. [ 1318.054721][T32186] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1318.119505][T32190] netlink: 'syz.1.7160': attribute type 41 has an invalid length. [ 1318.716309][T32218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1319.102256][T32233] can: request_module (can-proto-0) failed. [ 1319.242428][T32240] netlink: 'syz.3.7174': attribute type 23 has an invalid length. [ 1319.429487][T32246] netlink: 'syz.0.7177': attribute type 10 has an invalid length. [ 1319.443463][T32248] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1320.356794][T32286] __nla_validate_parse: 6 callbacks suppressed [ 1320.356837][T32286] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7189'. [ 1320.399902][T32286] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1320.488155][T32288] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7190'. [ 1320.506745][T32288] netlink: 'syz.0.7190': attribute type 29 has an invalid length. [ 1320.515298][T32288] netlink: 'syz.0.7190': attribute type 29 has an invalid length. [ 1321.168844][T32297] netlink: 'syz.1.7194': attribute type 10 has an invalid length. [ 1321.181701][T32297] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7194'. [ 1321.500135][T32307] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7198'. [ 1321.564389][T32307] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1321.759745][T32314] netlink: 668 bytes leftover after parsing attributes in process `syz.0.7200'. [ 1321.774758][T32314] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1321.790923][T32314] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1322.359790][T32330] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1322.369875][T32330] openvswitch: netlink: Key 32 has unexpected len 3064 expected 2 [ 1322.677169][T32340] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7207'. [ 1322.692286][T32340] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1323.921343][T32363] netlink: 144 bytes leftover after parsing attributes in process `syz.3.7215'. [ 1323.959392][T32363] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 1324.148906][T32373] netlink: 'syz.1.7218': attribute type 3 has an invalid length. [ 1324.171788][T32373] netlink: 'syz.1.7218': attribute type 1 has an invalid length. [ 1324.191786][T32373] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.7218'. [ 1324.294771][T32382] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1324.319725][T32382] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1324.472600][T32388] netlink: 'syz.3.7221': attribute type 2 has an invalid length. [ 1325.549162][T32411] __nla_validate_parse: 1 callbacks suppressed [ 1325.549197][T32411] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7228'. [ 1325.843355][T32410] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7228'. [ 1325.954947][T32424] netlink: 'syz.3.7231': attribute type 21 has an invalid length. [ 1325.974312][T32424] netlink: 'syz.3.7231': attribute type 19 has an invalid length. [ 1325.991051][T32424] netlink: 14536 bytes leftover after parsing attributes in process `syz.3.7231'. [ 1326.071476][T32431] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7232'. [ 1326.106805][T32431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1326.253047][T32439] netlink: 'syz.1.7235': attribute type 3 has an invalid length. [ 1326.268021][T32439] netlink: 151324 bytes leftover after parsing attributes in process `syz.1.7235'. [ 1326.551136][T32458] netlink: 'syz.3.7241': attribute type 10 has an invalid length. [ 1326.570968][T32458] netlink: 'syz.3.7241': attribute type 4 has an invalid length. [ 1326.578754][T32458] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7241'. [ 1326.656854][T32456] netlink: 'syz.2.7239': attribute type 10 has an invalid length. [ 1326.771105][T32454] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1326.803503][T32465] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7243'. [ 1326.842976][T32465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1326.883913][T32467] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7244'. [ 1326.903849][T32467] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1327.366619][T32477] mac80211_hwsim hwsim77 .3ãc¤±: renamed from wlan1 [ 1327.709057][T32479] veth1_to_bond: entered allmulticast mode [ 1328.044118][T32495] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7254'. [ 1328.078137][T32495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1328.846985][T32519] netlink: 'syz.1.7255': attribute type 3 has an invalid length. [ 1328.869144][T32519] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.7255'. [ 1329.078313][T32528] netlink: 'syz.0.7262': attribute type 39 has an invalid length. [ 1329.287384][T32538] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1329.557793][T32552] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1329.710060][T32560] netlink: get zone limit has 4 unknown bytes [ 1330.207763][T32574] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1330.392146][T32582] netlink: 'syz.2.7277': attribute type 39 has an invalid length. [ 1332.220825][T32606] netlink: 'syz.1.7282': attribute type 21 has an invalid length. [ 1332.228727][T32606] __nla_validate_parse: 5 callbacks suppressed [ 1332.228743][T32606] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7282'. [ 1332.902848][T32608] macsec0: entered promiscuous mode [ 1332.919882][T32608] macsec0: entered allmulticast mode [ 1332.975806][T32612] veth1_macvtap: entered allmulticast mode [ 1333.003365][T32612] veth1_macvtap: entered promiscuous mode [ 1333.068394][T32613] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7285'. [ 1333.110671][T32615] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1333.215075][T32619] sit0: entered allmulticast mode [ 1333.424253][T32620] sit0: entered promiscuous mode [ 1333.697300][T32624] netlink: 'syz.3.7287': attribute type 3 has an invalid length. [ 1333.770985][T32624] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7287'. [ 1335.218347][T21642] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.424196][T31780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1335.438612][T31780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1335.449925][T31780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1335.476687][T31780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1335.486083][T31780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1335.495708][T31780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1335.513728][T21642] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.746392][T21642] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1335.863488][T21642] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1336.085273][T32647] netlink: 'syz.0.7293': attribute type 10 has an invalid length. [ 1336.113510][T32647] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7293'. [ 1336.132705][T32647] team0: entered promiscuous mode [ 1336.138863][T32647] žÿ: entered promiscuous mode [ 1336.157688][T32647] geneve1: entered promiscuous mode [ 1336.171376][T32647] team0: entered allmulticast mode [ 1336.190713][T32647] žÿ: entered allmulticast mode [ 1336.195991][T32647] geneve1: entered allmulticast mode [ 1336.213798][T32647] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1336.333052][T32659] mac80211_hwsim hwsim76 wlan0: left promiscuous mode [ 1336.339968][T32659] mac80211_hwsim hwsim76 wlan0: left allmulticast mode [ 1336.383693][T32656] netlink: 'syz.1.7298': attribute type 10 has an invalid length. [ 1336.558188][T32662] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7300'. [ 1336.585837][T32662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1336.698110][T32668] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7301'. [ 1336.719308][T32637] chnl_net:caif_netlink_parms(): no params data found [ 1337.018472][T32689] IPv6: pim6reg1: Disabled Multicast RS [ 1337.361511][T32637] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.378981][T32637] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.410676][T32637] bridge_slave_0: entered allmulticast mode [ 1337.418023][T32637] bridge_slave_0: entered promiscuous mode [ 1337.521097][T32637] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.550574][T32637] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.563533][T32637] bridge_slave_1: entered allmulticast mode [ 1337.581335][T31780] Bluetooth: hci2: command tx timeout [ 1337.590228][T32637] bridge_slave_1: entered promiscuous mode [ 1337.760586][T32724] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7310'. [ 1337.815034][T32719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1337.845510][T32637] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1337.873754][T32637] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1338.126803][T32637] team0: Port device team_slave_0 added [ 1338.136112][T32637] team0: Port device team_slave_1 added [ 1338.259951][T32637] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1338.286265][T32637] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.298174][T32749] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7317'. [ 1338.328018][T32749] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 1338.339262][T32747] netlink: 'syz.0.7318': attribute type 3 has an invalid length. [ 1338.364820][T32747] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.7318'. [ 1338.382948][T32637] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1338.434738][T32637] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1338.476122][T32637] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1338.528628][T32637] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1338.683128][T32637] hsr_slave_0: entered promiscuous mode [ 1338.703649][T32637] hsr_slave_1: entered promiscuous mode [ 1338.710110][T32637] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1338.728017][T32637] Cannot create hsr debugfs directory [ 1338.778350][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1338.789529][T32763] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1338.801124][T32763] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1338.815702][T32763] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1338.840078][ T304] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7323'. [ 1338.941734][ T306] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.7321'. [ 1338.952423][ T309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1339.533448][T21642] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1339.556182][T21642] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1339.587669][T21642] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1339.605211][T21642] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1339.658396][T31780] Bluetooth: hci2: command tx timeout [ 1339.677460][T21642] batman_adv: batadv0: Interface deactivated: veth0_vlan [ 1339.708793][T21642] batman_adv: batadv0: Removing interface: veth0_vlan [ 1339.762934][T21642] veth0_macvtap: left promiscuous mode [ 1339.769183][T21642] veth1_vlan: left promiscuous mode [ 1339.777805][T21642] veth0_vlan: left promiscuous mode [ 1341.180201][ T329] netlink: 'syz.1.7329': attribute type 10 has an invalid length. [ 1341.193224][ T329] syz_tun: entered promiscuous mode [ 1341.229450][ T329] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1341.245482][ T331] sit0: entered allmulticast mode [ 1341.267424][ T335] sit0: entered promiscuous mode [ 1341.615042][ T348] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7332'. [ 1341.660311][ T346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1341.731765][T31780] Bluetooth: hci2: command tx timeout [ 1341.995362][T32637] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1342.036209][T32637] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1342.071020][T32637] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1342.114981][T32637] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1342.288954][ T368] netlink: 'syz.1.7336': attribute type 1 has an invalid length. [ 1342.320256][ T368] netlink: 101600 bytes leftover after parsing attributes in process `syz.1.7336'. [ 1342.363781][T32637] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1342.409362][T32637] 8021q: adding VLAN 0 to HW filter on device team0 [ 1342.452143][T21649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1342.459328][T21649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1342.524596][T21642] bridge0: port 2(bridge_slave_1) entered blocking state [ 1342.531811][T21642] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1343.194384][T32637] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1343.239745][ T398] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7342'. [ 1343.280863][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.290288][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.299589][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.308875][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.318170][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.322280][ T396] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7341'. [ 1343.327465][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.345797][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.355103][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.364363][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.373653][ T394] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 1343.399118][ T396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1343.810847][T31780] Bluetooth: hci2: command tx timeout [ 1344.166314][T32637] veth0_vlan: entered promiscuous mode [ 1344.251966][T32637] veth1_vlan: entered promiscuous mode [ 1344.317962][ T412] netlink: 'syz.3.7343': attribute type 21 has an invalid length. [ 1344.328464][ T412] netlink: 164 bytes leftover after parsing attributes in process `syz.3.7343'. [ 1344.396827][ T426] netlink: 'syz.0.7346': attribute type 1 has an invalid length. [ 1344.430817][ T426] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.7346'. [ 1344.460013][T32637] veth0_macvtap: entered promiscuous mode [ 1344.717711][T32637] veth1_macvtap: entered promiscuous mode [ 1344.786585][T32637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.799726][T32637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.813109][T32637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.824916][T32637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.855333][T32637] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.884606][T32637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.925783][T32637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.966326][T32637] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1345.007721][T32637] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1345.045378][T32637] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1345.109494][ T456] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7350'. [ 1345.145266][T32637] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.162451][ T465] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.7351'. [ 1345.165420][T32637] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.208345][T32637] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.228420][T32637] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1345.257028][ T456] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1345.471837][T31780] Bluetooth: hci3: unknown advertising packet type: 0x61 [ 1345.507156][T21658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.570420][T21658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.655819][T21635] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1345.683666][T21635] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1345.726328][ T487] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7356'. [ 1346.576240][ T514] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7360'. [ 1346.604412][ T514] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1346.611885][ T514] IPv6: NLM_F_CREATE should be set when creating new route [ 1346.619374][ T514] IPv6: NLM_F_CREATE should be set when creating new route [ 1346.626866][ T514] IPv6: NLM_F_CREATE should be set when creating new route [ 1346.773878][ T524] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7363'. [ 1346.859641][ T532] netlink: 'syz.3.7364': attribute type 1 has an invalid length. [ 1346.894926][ T532] netlink: 'syz.3.7364': attribute type 3 has an invalid length. [ 1346.929870][ T532] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7364'. [ 1348.033688][ T573] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1348.049459][ T577] netlink: 'syz.3.7372': attribute type 29 has an invalid length. [ 1348.069321][ T577] netlink: 'syz.3.7372': attribute type 29 has an invalid length. [ 1348.290294][ T575] netlink: 'syz.0.7374': attribute type 10 has an invalid length. [ 1348.368282][ T590] netlink: 'syz.1.7377': attribute type 3 has an invalid length. [ 1348.432532][ T590] __nla_validate_parse: 2 callbacks suppressed [ 1348.432550][ T590] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.7377'. [ 1348.436203][ T575] dummy0: entered promiscuous mode [ 1348.490995][ T575] dummy0: entered allmulticast mode [ 1348.518229][ T575] team0: Port device dummy0 added [ 1349.364540][ T611] netlink: 'syz.0.7383': attribute type 2 has an invalid length. [ 1349.388167][ T611] netlink: 'syz.0.7383': attribute type 8 has an invalid length. [ 1349.397959][ T611] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7383'. [ 1349.435628][ T616] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7385'. [ 1349.455228][ T616] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1349.481395][ T620] netlink: 'syz.2.7386': attribute type 21 has an invalid length. [ 1349.489426][ T620] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1350.566926][ T648] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7396'. [ 1350.587268][ T648] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1351.068475][ T674] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7405'. [ 1351.083900][ T674] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1351.606124][ T685] netlink: 'syz.3.7408': attribute type 2 has an invalid length. [ 1352.566323][ T709] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7414'. [ 1352.602269][ T709] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1352.754434][ T718] netlink: 'syz.3.7418': attribute type 1 has an invalid length. [ 1352.776607][ T718] netlink: 101600 bytes leftover after parsing attributes in process `syz.3.7418'. [ 1354.627556][ T752] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7426'. [ 1354.685480][ T752] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1354.975345][ T767] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7431'. [ 1355.022135][ T767] net_ratelimit: 3319 callbacks suppressed [ 1355.022151][ T767] A link change request failed with some changes committed already. Interface 26±ÿÿÿÿa–ïD may have been left with an inconsistent configuration, please check. [ 1355.126698][ T770] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.7432'. [ 1355.286557][ T761] delete_channel: no stack [ 1355.684375][ T787] netlink: 'syz.1.7436': attribute type 9 has an invalid length. [ 1356.060239][ T797] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7440'. [ 1356.115768][ T797] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1356.694058][ T803] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.7442'. [ 1356.714617][ T803] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7442'. [ 1356.858188][ T813] netlink: 703 bytes leftover after parsing attributes in process `syz.2.7444'. [ 1357.394656][ T828] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7449'. [ 1357.466631][ T828] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1357.796418][ T830] netlink: 207508 bytes leftover after parsing attributes in process `syz.1.7450'. [ 1358.063425][ T840] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7452'. [ 1358.141274][ T844] sit0: entered promiscuous mode [ 1358.337320][ T848] netlink: zone id is out of range [ 1358.355439][ T848] netlink: zone id is out of range [ 1358.371989][ T848] netlink: zone id is out of range [ 1358.377153][ T848] netlink: zone id is out of range [ 1358.420519][ T848] netlink: zone id is out of range [ 1358.425691][ T848] netlink: zone id is out of range [ 1358.458979][ T848] netlink: zone id is out of range [ 1358.487185][ T848] netlink: zone id is out of range [ 1358.509409][ T848] netlink: zone id is out of range [ 1358.573260][ T859] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1359.015364][ T866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1359.249714][ T881] netlink: 'syz.1.7463': attribute type 29 has an invalid length. [ 1359.285026][ T881] netlink: 'syz.1.7463': attribute type 3 has an invalid length. [ 1359.296324][ T882] netlink: 'syz.3.7462': attribute type 20 has an invalid length. [ 1359.305690][ T882] netlink: 'syz.3.7462': attribute type 21 has an invalid length. [ 1359.319128][ T882] netlink: 'syz.3.7462': attribute type 23 has an invalid length. [ 1359.327209][ T882] netlink: 'syz.3.7462': attribute type 25 has an invalid length. [ 1359.434695][ T882] netlink: 'syz.3.7462': attribute type 27 has an invalid length. [ 1359.560739][ T882] netlink: 'syz.3.7462': attribute type 28 has an invalid length. [ 1359.580521][ T882] netlink: 'syz.3.7462': attribute type 29 has an invalid length. [ 1359.588412][ T882] netlink: 'syz.3.7462': attribute type 30 has an invalid length. [ 1359.735386][ T890] __nla_validate_parse: 6 callbacks suppressed [ 1359.735404][ T890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7465'. [ 1359.768109][ T890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7465'. [ 1359.793202][ T890] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7465'. [ 1361.188104][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1361.197510][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1361.207010][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1361.217387][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1361.226221][ T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1361.234212][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1361.896891][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.910448][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.252009][T31780] Bluetooth: hci4: command tx timeout [ 1363.831536][ T920] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7471'. [ 1363.861488][ T922] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1364.114740][ T965] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.290639][ T983] netlink: 'syz.2.7474': attribute type 2 has an invalid length. [ 1364.303734][ T983] netlink: 'syz.2.7474': attribute type 8 has an invalid length. [ 1364.312195][ T983] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7474'. [ 1364.375400][ T965] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.481824][ T965] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.519997][ T904] chnl_net:caif_netlink_parms(): no params data found [ 1364.647531][ T965] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1364.741523][ T904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1364.752104][ T904] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.770728][ T904] bridge_slave_0: entered allmulticast mode [ 1364.778180][ T904] bridge_slave_0: entered promiscuous mode [ 1364.787346][ T904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1364.798944][ T904] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.806748][ T904] bridge_slave_1: entered allmulticast mode [ 1364.814130][ T904] bridge_slave_1: entered promiscuous mode [ 1364.895309][ T904] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1364.948350][ T904] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1365.036016][ T904] team0: Port device team_slave_0 added [ 1365.072101][ T904] team0: Port device team_slave_1 added [ 1365.287030][ T904] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1365.307601][ T904] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.350610][T31780] Bluetooth: hci4: command tx timeout [ 1365.378377][ T904] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1365.422401][ T904] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1365.429379][ T904] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1365.459513][ T904] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1365.602100][ T1015] sctp: [Deprecated]: syz.3.7482 (pid 1015) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1365.602100][ T1015] Use struct sctp_sack_info instead [ 1365.667905][ T1016] sctp: [Deprecated]: syz.3.7482 (pid 1016) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1365.667905][ T1016] Use struct sctp_sack_info instead [ 1365.752711][ T904] hsr_slave_0: entered promiscuous mode [ 1365.760764][ T904] hsr_slave_1: entered promiscuous mode [ 1365.768638][ T904] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1365.788840][ T904] Cannot create hsr debugfs directory [ 1365.799555][ T1017] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7481'. [ 1365.900583][ T1029] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1366.059530][ T1030] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7483'. [ 1366.122070][ T1030] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 1366.945308][ T1065] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1366.994964][ T1065] netlink: 'syz.3.7488': attribute type 28 has an invalid length. [ 1367.022231][ T1065] netlink: 'syz.3.7488': attribute type 29 has an invalid length. [ 1367.035919][ T1065] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7488'. [ 1367.230795][ T904] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1367.256994][ T904] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1367.286325][ T904] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1367.343383][ T904] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1367.410532][T31780] Bluetooth: hci4: command tx timeout [ 1367.669118][ T904] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1367.899080][ T904] 8021q: adding VLAN 0 to HW filter on device team0 [ 1368.068059][ T1108] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7495'. [ 1368.081567][ T1110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1368.105938][ T968] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.113165][ T968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1368.283294][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.290533][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1369.368424][ T965] hsr_slave_0: left promiscuous mode [ 1369.421317][ T965] hsr_slave_1: left promiscuous mode [ 1369.471001][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1369.478573][ T965] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1369.490551][T31780] Bluetooth: hci4: command tx timeout [ 1369.511491][ T965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1369.528673][ T965] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1369.537149][ T965] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 1369.550474][ T965] batman_adv: batadv0: Removing interface: virt_wifi0 [ 1369.588458][ T965] veth1_vlan: left promiscuous mode [ 1369.598115][ T965] veth0_vlan: left promiscuous mode [ 1369.987734][ T965] geneve1 (unregistering): left promiscuous mode [ 1369.998641][ T965] geneve1 (unregistering): left allmulticast mode [ 1370.018082][ T965] team0 (unregistering): Port device geneve1 removed [ 1370.642072][ T965] žÿ (unregistering): left promiscuous mode [ 1370.648168][ T965] žÿ (unregistering): left allmulticast mode [ 1370.657900][ T965] team0 (unregistering): Port device 72žÿ removed [ 1371.168753][ T965] dummy0 (unregistering): left promiscuous mode [ 1371.179234][ T965] dummy0 (unregistering): left allmulticast mode [ 1371.188256][ T965] team0 (unregistering): Port device dummy0 removed [ 1371.266895][ T1150] netlink: 'syz.3.7500': attribute type 23 has an invalid length. [ 1371.383525][ T904] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1371.804331][ T1174] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7505'. [ 1371.868157][ T1174] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1371.895214][ T904] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1371.983071][ T904] veth0_vlan: entered promiscuous mode [ 1372.019323][ T904] veth1_vlan: entered promiscuous mode [ 1372.092935][ T904] veth0_macvtap: entered promiscuous mode [ 1372.114413][ T904] veth1_macvtap: entered promiscuous mode [ 1372.121801][ T1193] delete_channel: no stack [ 1372.159659][ T904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.199067][ T904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.223961][ T904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1372.248937][ T904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.274610][ T1197] netlink: 'syz.2.7509': attribute type 9 has an invalid length. [ 1372.292350][ T904] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1372.312442][ T1197] netlink: 'syz.2.7509': attribute type 23 has an invalid length. [ 1372.337605][ T1197] netlink: 156008 bytes leftover after parsing attributes in process `syz.2.7509'. [ 1372.367877][ T904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1372.398125][ T904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.419426][ T904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1372.455935][ T904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1372.505234][ T904] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1372.533382][ T1195] netlink: 'syz.2.7509': attribute type 10 has an invalid length. [ 1372.571734][ T1195] hsr0: entered promiscuous mode [ 1372.601289][ T1195] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1372.641364][ T1195] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1372.690031][ T1195] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1372.755797][ T1195] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1372.897024][ T904] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.960574][ T904] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1372.969356][ T904] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.051076][ T904] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.274691][ T966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.308777][ T966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.332909][ T966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1373.346040][ T966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1373.735376][ T1216] netlink: 'syz.0.7467': attribute type 10 has an invalid length. [ 1373.875010][ T1216] team0: Port device geneve1 added [ 1374.516744][ T1231] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.7515'. [ 1374.578871][ T1231] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1374.779870][ T1238] syzkaller0: entered promiscuous mode [ 1374.811757][ T1238] syzkaller0: entered allmulticast mode [ 1374.898220][ T1247] netlink: 10 bytes leftover after parsing attributes in process `syz.2.7520'. [ 1374.982828][ T1244] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7519'. [ 1374.996098][ T1244] net_ratelimit: 397 callbacks suppressed [ 1374.996159][ T1244] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1377.165634][ T1255] netlink: 'syz.0.7522': attribute type 11 has an invalid length. [ 1377.175872][ T1255] netlink: 168 bytes leftover after parsing attributes in process `syz.0.7522'. [ 1377.288236][ T1273] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.7526'. [ 1377.323836][ T1273] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1377.331331][ T1273] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.338845][ T1273] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.346313][ T1273] IPv6: NLM_F_CREATE should be set when creating new route [ 1377.418681][ T1278] vcan0: entered allmulticast mode [ 1377.440729][ T1278] netlink: 'syz.3.7527': attribute type 10 has an invalid length. [ 1377.464630][ T1278] veth0_macvtap: left promiscuous mode [ 1377.676759][ T1292] netlink: 'syz.1.7530': attribute type 153 has an invalid length. [ 1377.695164][ T1292] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.7530'. [ 1377.750018][ T1295] netlink: 'syz.2.7532': attribute type 29 has an invalid length. [ 1377.761032][ T1295] netlink: 'syz.2.7532': attribute type 29 has an invalid length. [ 1377.783115][ T1295] netlink: 'syz.2.7532': attribute type 29 has an invalid length. [ 1377.794341][ T1295] netlink: 'syz.2.7532': attribute type 29 has an invalid length. [ 1377.825986][ T1295] netlink: 'syz.2.7532': attribute type 29 has an invalid length. [ 1377.930601][ T1301] netlink: 'syz.3.7534': attribute type 10 has an invalid length. [ 1377.965968][ T1302] netlink: 'syz.1.7533': attribute type 29 has an invalid length. [ 1378.129463][ T1315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1378.145268][ T1315] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7537'. [ 1378.277708][ T1323] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.7539'. [ 1378.300203][ T1323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1378.501883][ T1333] netlink: 63751 bytes leftover after parsing attributes in process `syz.1.7542'. [ 1378.721683][ T1343] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7546'. [ 1378.745391][ T1343] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 1379.350828][ T1353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1379.401979][ T1359] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.7550'. [ 1379.424742][ T1359] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1379.626503][ T1363] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1380.838071][ T1400] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1380.839652][ T1397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1384.177510][ T1413] ------------[ cut here ]------------ [ 1384.183293][ T1413] WARNING: CPU: 0 PID: 1413 at kernel/events/core.c:6800 perf_pending_task+0x357/0x480 [ 1384.193063][ T1413] Modules linked in: [ 1384.196987][ T1413] CPU: 0 PID: 1413 Comm: syz.1.7565 Not tainted syzkaller #0 [ 1384.204445][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.214567][ T1413] RIP: 0010:perf_pending_task+0x357/0x480 [ 1384.220317][ T1413] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1384.240057][ T1413] RSP: 0018:ffffc900036a79c8 EFLAGS: 00010293 [ 1384.246330][ T1413] RAX: ffffffff81b1ac27 RBX: ffff8880467a7e48 RCX: ffff88805cf91e00 [ 1384.254408][ T1413] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1384.262490][ T1413] RBP: ffff8880467a7c08 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 1384.270646][ T1413] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88805cf91e00 [ 1384.279261][ T1413] R13: ffff88802f0a7d30 R14: 0000000000000000 R15: 1ffff11008cf4f81 [ 1384.287450][ T1413] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1384.298568][ T1413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1384.305987][ T1413] CR2: 00007fc225deb7c0 CR3: 000000007da6d000 CR4: 00000000003506f0 [ 1384.314277][ T1413] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1384.322348][ T1413] DR3: 0000200000000300 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1384.330331][ T1413] Call Trace: [ 1384.333701][ T1413] [ 1384.336660][ T1413] task_work_run+0x1d4/0x260 [ 1384.341315][ T1413] ? task_work_cancel+0x220/0x220 [ 1384.346373][ T1413] do_exit+0x986/0x2530 [ 1384.350644][ T1413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1384.356644][ T1413] ? put_task_struct+0xc0/0xc0 [ 1384.361465][ T1413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1384.367634][ T1413] ? lockdep_hardirqs_on+0x98/0x150 [ 1384.373266][ T1413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1384.379791][ T1413] do_group_exit+0x22d/0x2f0 [ 1384.384609][ T1413] ? _raw_spin_unlock_irq+0x29/0x50 [ 1384.389832][ T1413] get_signal+0x12a6/0x1390 [ 1384.394439][ T1413] arch_do_signal_or_restart+0xc2/0x7b0 [ 1384.400061][ T1413] ? get_sigframe_size+0x20/0x20 [ 1384.405073][ T1413] ? perf_trace_preemptirq_template+0xac/0x330 [ 1384.411334][ T1413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1384.417506][ T1413] ? exit_to_user_mode_loop+0x3b/0x110 [ 1384.423056][ T1413] exit_to_user_mode_loop+0x70/0x110 [ 1384.428366][ T1413] exit_to_user_mode_prepare+0xee/0x180 [ 1384.434008][ T1413] syscall_exit_to_user_mode+0x1a/0x50 [ 1384.439506][ T1413] do_syscall_64+0x61/0xb0 [ 1384.444024][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1384.448717][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1384.453828][ T1413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.459736][ T1413] RIP: 0033:0x7fd0f059e0d9 [ 1384.464200][ T1413] Code: Unable to access opcode bytes at 0x7fd0f059e0af. [ 1384.471281][ T1413] RSP: 002b:00007fd0f14bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1384.480094][ T1413] RAX: fffffffffffffe00 RBX: 00007fd0f0825fa8 RCX: 00007fd0f059e0d9 [ 1384.488232][ T1413] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0f0825fa8 [ 1384.496257][ T1413] RBP: 00007fd0f0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.504297][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.512314][ T1413] R13: 00007fd0f0826038 R14: 00007ffea0ca2cf0 R15: 00007ffea0ca2dd8 [ 1384.520282][ T1413] [ 1384.523337][ T1413] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1384.530624][ T1413] CPU: 0 PID: 1413 Comm: syz.1.7565 Not tainted syzkaller #0 [ 1384.537994][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1384.548032][ T1413] Call Trace: [ 1384.551300][ T1413] [ 1384.554218][ T1413] dump_stack_lvl+0x18c/0x250 [ 1384.558886][ T1413] ? show_regs_print_info+0x20/0x20 [ 1384.564071][ T1413] ? load_image+0x420/0x420 [ 1384.568568][ T1413] panic+0x2ca/0x720 [ 1384.572450][ T1413] ? bpf_jit_dump+0xd0/0xd0 [ 1384.576949][ T1413] __warn+0x2e0/0x470 [ 1384.580923][ T1413] ? perf_pending_task+0x357/0x480 [ 1384.586046][ T1413] ? perf_pending_task+0x357/0x480 [ 1384.591153][ T1413] report_bug+0x2be/0x4f0 [ 1384.595473][ T1413] ? perf_pending_task+0x357/0x480 [ 1384.600577][ T1413] ? perf_pending_task+0x357/0x480 [ 1384.605682][ T1413] ? perf_pending_task+0x359/0x480 [ 1384.610786][ T1413] handle_bug+0xcf/0x120 [ 1384.615019][ T1413] exc_invalid_op+0x1a/0x50 [ 1384.619512][ T1413] asm_exc_invalid_op+0x1a/0x20 [ 1384.624358][ T1413] RIP: 0010:perf_pending_task+0x357/0x480 [ 1384.630071][ T1413] Code: e8 ae c8 d5 ff 84 db 75 10 e8 15 c6 d5 ff 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 05 c6 d5 ff e8 10 f1 4e ff eb e9 e8 f9 c5 d5 ff <0f> 0b 49 bd 00 00 00 00 00 fc ff df 43 80 3c 2f 00 0f 85 0a ff ff [ 1384.649669][ T1413] RSP: 0018:ffffc900036a79c8 EFLAGS: 00010293 [ 1384.655727][ T1413] RAX: ffffffff81b1ac27 RBX: ffff8880467a7e48 RCX: ffff88805cf91e00 [ 1384.663687][ T1413] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1384.671645][ T1413] RBP: ffff8880467a7c08 R08: ffffffff8e8c772f R09: 1ffffffff1d18ee5 [ 1384.679604][ T1413] R10: dffffc0000000000 R11: fffffbfff1d18ee6 R12: ffff88805cf91e00 [ 1384.687566][ T1413] R13: ffff88802f0a7d30 R14: 0000000000000000 R15: 1ffff11008cf4f81 [ 1384.695546][ T1413] ? perf_pending_task+0x357/0x480 [ 1384.700660][ T1413] ? perf_pending_task+0x357/0x480 [ 1384.705770][ T1413] task_work_run+0x1d4/0x260 [ 1384.710363][ T1413] ? task_work_cancel+0x220/0x220 [ 1384.715392][ T1413] do_exit+0x986/0x2530 [ 1384.719545][ T1413] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1384.725525][ T1413] ? put_task_struct+0xc0/0xc0 [ 1384.730283][ T1413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1384.736429][ T1413] ? lockdep_hardirqs_on+0x98/0x150 [ 1384.741624][ T1413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1384.747780][ T1413] do_group_exit+0x22d/0x2f0 [ 1384.752384][ T1413] ? _raw_spin_unlock_irq+0x29/0x50 [ 1384.757581][ T1413] get_signal+0x12a6/0x1390 [ 1384.762088][ T1413] arch_do_signal_or_restart+0xc2/0x7b0 [ 1384.767631][ T1413] ? get_sigframe_size+0x20/0x20 [ 1384.772562][ T1413] ? perf_trace_preemptirq_template+0xac/0x330 [ 1384.778726][ T1413] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1384.784880][ T1413] ? exit_to_user_mode_loop+0x3b/0x110 [ 1384.790336][ T1413] exit_to_user_mode_loop+0x70/0x110 [ 1384.795625][ T1413] exit_to_user_mode_prepare+0xee/0x180 [ 1384.801165][ T1413] syscall_exit_to_user_mode+0x1a/0x50 [ 1384.806620][ T1413] do_syscall_64+0x61/0xb0 [ 1384.811026][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1384.815694][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1384.820363][ T1413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1384.826252][ T1413] RIP: 0033:0x7fd0f059e0d9 [ 1384.830655][ T1413] Code: Unable to access opcode bytes at 0x7fd0f059e0af. [ 1384.837658][ T1413] RSP: 002b:00007fd0f14bb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1384.846061][ T1413] RAX: fffffffffffffe00 RBX: 00007fd0f0825fa8 RCX: 00007fd0f059e0d9 [ 1384.854023][ T1413] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd0f0825fa8 [ 1384.861982][ T1413] RBP: 00007fd0f0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1384.869963][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.877941][ T1413] R13: 00007fd0f0826038 R14: 00007ffea0ca2cf0 R15: 00007ffea0ca2dd8 [ 1384.885915][ T1413] [ 1384.889169][ T1413] Kernel Offset: disabled [ 1384.893484][ T1413] Rebooting in 86400 seconds..