last executing test programs: 6.262262622s ago: executing program 4 (id=4291): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8178e, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7}, 0xb0, 0x8, 0x2, 0x1, 0xa0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 5.489008569s ago: executing program 4 (id=4298): syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x0) recvmsg$kcm(r2, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x40010000) socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b06, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003507d25a806f8c6394f90524fc600d001141090005000400000037153e370248038011000000d1bd", 0x33fe0}], 0x1}, 0x0) recvmsg$kcm(r0, 0x0, 0x2042) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x61]}}, 0x0, 0x33}, 0x28) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @multicast1}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@noop, @noop, @generic={0x82, 0xf, "3a047e2aae56e4b9eab8f1483f"}]}}}], 0x48}, 0x0) 5.404054471s ago: executing program 0 (id=4299): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 5.403262971s ago: executing program 2 (id=4300): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={0x0, 0x40, 0x0}, 0x40012020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r3], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0000000000000000000000fa88a8", 0x36}], 0x1}, 0x4000080) 5.373808772s ago: executing program 3 (id=4302): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x18000000, @mcast2, 0x6, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="a3", 0x1}], 0x2}, 0x8880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000040000007b00b7490000100000000000", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000900), 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) 5.259819794s ago: executing program 0 (id=4303): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"], 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 5.203782065s ago: executing program 3 (id=4304): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d082000000000000000070a000a", 0x1f}], 0x1}, 0x14) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 4.975785321s ago: executing program 4 (id=4306): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x18000000, @mcast2, 0x6, 0x1}, 0x80, 0x0}, 0x8880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000040000007b00b7490000100000000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/25], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000900), 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) 4.969186301s ago: executing program 0 (id=4307): r0 = socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) getpid() r3 = getpid() r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe1, 0xb, 0x6, 0x78, 0x0, 0x0, 0xe8088, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x40000000000009, 0x7}, 0xa880, 0x9, 0x3, 0x2, 0x5a6a, 0x127, 0x801, 0x0, 0x0, 0x0, 0x3}, r5, 0x1, r4, 0x0) r6 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36de77c620243ba2511d202b3f99343bf64090b774593588f35312b114d2e9134d9491", 0x32, 0x0, &(0x7f00000007c0), &(0x7f0000000800)="c64a872dd706c0090ce36fa79aa8c3728714772f7ab5b6a3bfd0a315c9650a9fabb65be4cfc36b30e06c73694d1cab5ca138865a49973ad4cfbbe994d1d10a271ae892173fa232b1043fa87749862a38ba661180d01e11edb8bbd9011abf4a7c8f6346f9170499004ed81c43300a72972206064002ec3799035e73ab908a02cfab18b594c18565b138cf550722a0db358dae8248dede3aa0545372f3f5557165b7123be7ffd2b9f7e75fc9937f2111b621f0209f282189d5caea90b75b9b64d7d68dd781f0670d47c312e154f6158d4e983262fc0417185e0cf11189175c8293ca") r7 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="c04a07fc8b805e531e1da65d63b864955d1356754edd0b9647ef82f4e9af3cab6695316b12e72f42983d5e5f45871183da6876cc552a98607f8a2fe895d6f1d58f4391a347d3578de573eec68488e8c98af20ad2a50fbcdfdc773f91f572e8d469") sendmsg$unix(r1, &(0x7f0000000c80)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="f8286c37b7f15d84344bb94967f1f64712b54a20105e04b5fbbfe81dedd6cdb8a5", 0x21}, {&(0x7f0000000340)="438fd74f926a04c574611c5d3fff65ef1fbcdee1eabee685a3aa3b73c662e2de9b91bfe5751d36b2de1b133e6e41f516363db7699daf15e1d3f7b14adce1d9721d746ccdabe8edaadcef547735f99d54b90ad1ef1b46fb940efb750819cdee32cd302342b9db47184ad74d90c9054f933836e7f6f54cb93ec0b72c5ae9402f0aa07e35a005a191009c885adece276a6ef1c4952fadb943156a348f17dfdd72a5498d877b2cd97562ab309fba64a70ff2ed22e005b4ae31932381d671c3331ace452e39fcc4fdfba34fc1", 0xca}, {&(0x7f0000000440)="b8d7b79ff3d9156f602f764eaade3c142a6d6bef0415fc7951bc37c517fc06356a30cbc7671f512037627fb0798692f4b729eacd02ec4614e39fe4213ad996354bb9b6e271c539101960146692554c2c1a1a532463966e53f79b947bff48cdfa0cbebc4ea7b3c65a77ad1af73add6fd5ffcca1afe43680ffdac32a601b1b3cf2ebf0062aba8f4c62aa04ca5ca56b9da79254bbc6e508efcb6a9d41f64abe144e953ceea41f216ec3b27169947cbc1ca2a2db6a", 0xb3}, {&(0x7f0000000500)="113a11f5949a17b491122ec76a345556bd8c", 0x12}, {&(0x7f0000000540)="554e60df5418a2a40f09d02fabc292ea1e911268424071d96622bc47210d9dddfaa0acbb3d5a47a07c5c0e3ca45a382296709d13b6192d5a7d5cf831023d96feaac82ea28f57eaa247b61baf595ea363ee4a7700749dc8214e7a218f5acbd7ba856e3474db53c82e8c5ba81cb03e84513c5e35864c54370a2bb1996b5ae9f43a01b575cb8eb210ded2060f157fe1637f84068ca1441e4202236b521d5a93dd2d8666", 0xa2}, {&(0x7f0000000640)="782b7903ab9d0c817478a4c6f2aeb2ef41ec32bd85763073d77f6305978bf9655085a7ba2b5e97b812a8b93bb5c150f2c98b4b629172eba1e5dea02301a679ae40263c81e8151f1a0e5932ce6f5e9e391d054538c590801decc235aafb1cb8f1b0f909d8ea12ed7132d693b232a700", 0x6f}], 0x6, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}], 0xb0, 0x20048040}, 0x40) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa4, 0x0, 0xa, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100058, 0x0, 0x8, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) 4.623011648s ago: executing program 1 (id=4308): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)="2703020059fe", 0x6}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="6a38f0ff10"], 0x0, 0x42, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000c9"], 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa067707"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000008}, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) 3.380649865s ago: executing program 1 (id=4309): r0 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x9, 0xf8e}, 0x4481, 0x0, 0x0, 0x0, 0x2, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x4}, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33) sendmsg$inet(r1, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000001040)="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", 0x42b}, {&(0x7f0000000740)="0d113311d7af2c7d0a6b8bcc9ab77974b333be01b290ffa314fa9cb227694f5b326544c9c1d4563f937db955e0373639d6292234c292c5615d82c851b91585b7ad8748faf0d8e5d65994adbb137c7851edbb4a3485ffd64e1caf3117861898d4ba6e04c15a94496cc8c23793136c93ba88db52f098b37fcf3f6c16df2f500f5b2005def16d46d96544649249c26098820ed60c94032f6fc134664ae10a613d15d140a948b4b45471dea34c0f527fca192dfa77f262ec22b914476238014687f231fe251b57f7689e4850e2c1eaf49ad1773a1f971ba9d8a900e5e2121370ebf1a0c8af1eca3921046277767b7740008731fdcffcddbc2cb867ea2959a735c164e4c650454d43dd6034dd22e31d94df846ab6d1b1e7c2463e349ffda978a5e783bdda9e6fafb2ca73fb02ccc54ab9309988741fdfbef9000b605a2d3890468834f7d7f705f8da1905283343b78f30bc48c2c3c351e955823ca8e6e82f695252f0aecc64025cf1e26d4be77f4b4f96d9b45226436aa43cc78afe578fe8c44047eb9f66bfbc3f3daeaadda3c088299586d35c7a868a8122428161cff48106cd5529695a27ba78f1d124cab474705be18a40ad26131f48d25f1e1c7a19e23433ff6d6284cf70278d53d12b41a171ec23143601a31732cf143f386a4fdc49bd8f1c10af3a4a3f2d8afdd131cdee0e6aebfdc1fef1831abaa01741cf774eeed7a043d6368c2fd43371633089fa9fa50c7e41185d32cdbc49c0bec369fdd7ab788bbe8cc87676f8597dc626556bbaef0bcd5e1a43bcc4e2c59f310e1c2bf2fea0f360b33408fb2e1a1024e3d88dff19496f384b0b4ea97c0281904010a7eb34a3d6bec959f6d59a0016d28da834b382e6e2c606236dcd17925b95f667e899a6b59ef20c1a96f0053ffb7c5a07b8ac6f20fa791d15c19b814f049e0b2da6f5799daf4d345aa475766367f99c160e8a08fd7f1e42e5b38eacba4f40eed3fccbfb89f4b644afb1e76eb4913e27e1540e2d4ec8ed8748b4756824a65c933d4120d1c2fc7f343ce0958478a97aa352fc2ddaf917fb2ae7bcce4d6f9d4b32387baff970a701ce01a73937cf0f12f6e41b86a06ea1b971d1ad7f92c0562a7778ec6c060000717217834e25b4b25f06134bbfc29f125c36c7e80e92a13127c70b37da8f1be6a3948593a6693fa07a91b00405d8ea47c88ccd02e7a64e0bd31d115c93f7c0dfe1c51d338b08c9825a29802ba8bc5c4655072da6dd2c27ce6684e1c2dd7dc95dcf90f934ade45fe5377a813975aefe4006ddb535f03db5a82f71f50cc7935c6809c73e705e84a959f70ff71df55ecce6a4a182fe3ef45a506fcd0f49b6eb9e9cbc8cd553481b9162a9086bf31c8cab7b1c3c7f703cd26d96b48dee0771b4a6d2513a37fec94a6649cfdbafc26b17a7bb2adb72477d34a74e4165850f76473f41c116e7adec0bdafae8aff515c781092e2d2f70fefebbd36d0e1cf5a01ea61f142756b8195e1fc400ca73162eb51d3a14a1c8ea2be43d3bbc230c7011273c1c9f035895fa45e8ba5eb8bef0660e952f3327720bd3817d098277b01ee0d8394a4d7752866da8f3258f243150df19ddb87ea24bc2f5de0394870e23a0f723013a226caa72e896e9f986e9aa40a6a4a21cfb6c", 0x48f}], 0x2, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x14}, @local}}}], 0x20}, 0x4080) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, @perf_bp={0x0, 0x2}, 0x91275e56eb2e88e4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4861, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r2, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9fbf38f848430000005e140602000000000e002800100000000280000012", 0x2d}], 0x1}, 0x0) 3.380348145s ago: executing program 4 (id=4310): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e000000100081", 0x7}], 0x1}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x101}, 0x104046}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24864, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000000c0), 0xe}, 0x10c202, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x10000}, 0x28) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8], 0xfe33) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0}, 0x40010042) socket$kcm(0x10, 0x3, 0x10) syz_clone(0x2a801400, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e"], 0xfe33) 3.137141181s ago: executing program 3 (id=4311): r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20004, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20002}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x6, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000002c0)=r2, 0x4) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8178e, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0x7, 0x7}, 0xb0, 0x8, 0x2, 0x1, 0xa0, 0x1f, 0x8, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x0, 0x5}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="0100000005000000fd09000084"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000e40), 0x800, r3}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r3}, 0x38) 3.053617623s ago: executing program 1 (id=4312): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000009000000000000000000000000000000000400000000006780e7456187d608c4a664157beafec540260d88f2f495983f689bb8b934e2ae9ede585d25ef9c1f899dfa648af5111a24c1c9382cc82167f40315f0934244985770eeab588449ed6377ea53944bc3117ff681c1469edc5c5f35dff94afc27e19659df80ce5e449e68a98b72f652a05a0b6f8625b08ad163b06d1faf"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) close(r2) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x0, 0x4, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) 2.945139485s ago: executing program 2 (id=4313): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 2.912251936s ago: executing program 0 (id=4314): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000072"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$kcm(0x23, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)) close(r0) r2 = socket$kcm(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x7, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x1, 0x84) sendmsg$kcm(r2, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$kcm(r2, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000340)=""/182, 0xb6}], 0x1}, 0x10000) 2.443361266s ago: executing program 1 (id=4315): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xffffffffffffffff, 0x2}, 0x10c040, 0x7, 0x0, 0x5, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000003c0)={&(0x7f0000000780)=@l2tp6={0xa, 0x0, 0x18000000, @mcast2, 0x6, 0x1}, 0x80, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)="a3", 0x1}], 0x2}, 0x8880) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x3, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10010000040000007b00b7490000100000000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000900), 0x9) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010) 2.439271057s ago: executing program 2 (id=4316): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"], 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) 2.428784257s ago: executing program 3 (id=4317): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"], 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 2.25013123s ago: executing program 3 (id=4318): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116200000000008510000002000000850000000500000095000000000000009504a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r2, 0x29, 0x37, &(0x7f0000000100)=r3, 0x120) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB], 0x0, 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x4, '\x00', 0x0, @xdp}, 0x94) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0xd6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e6026, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_bp={0x0, 0xa}, 0x1002, 0x1100, 0x0, 0x3, 0x7, 0x400000}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.24980973s ago: executing program 4 (id=4319): bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$kcm(0x10, 0x2, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000500)=r0, 0x4) sendmsg$inet(r1, 0x0, 0x200440e4) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x8, 0x0, 0x4200003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0xc}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r4, @ANYRESHEX=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) socket$kcm(0x10, 0x2, 0x0) close(0x3) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x891c, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) 2.182047662s ago: executing program 1 (id=4320): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xbe}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x50}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x41) syz_clone(0x2800, &(0x7f0000000380)="6f52be73b22faf1fe95f0c72286fade9283a92e478aaa53f02bfb3bdafda86f0a9ce688d3f729b6cb5f2ff2272a0d1c44e66e278d710de7373d1499d06dd195ffe6fa26bc6d06f6f8d6ff18ba969b1e5c167cd266dbccf4c178105eb249b49e1a5727ddad0766d80d9ebf58028892c5656e9ca94b154ff1d08e950b52a5032cfde1ec184e85c0ad04ae11401429ca28ddec7793c0a136348fe1f207271f01b73f8e7d8", 0xa3, 0x0, &(0x7f0000000840), &(0x7f0000000940)="19cbfdadb2f1504b037dd97423d8fb26f36d53ed4dd078e4031081734b3cc39b29e2487d9afcb8cd579dd707a8e9e4cf9c9026de5189326efbfa2b38d8b191fc5932794125dfd9014373a652ee1c4b50d52b8b9a328e035e14d86049c077677127081d0ed366920823b8fe9902eaa5f67e6e233e9a4328699788bcab5f646715c173c6056a1e36dfde8a89f800ee647b1f90c94b610af7") recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=""/70, 0x46}, {&(0x7f0000000440)=""/203, 0xcb}, {&(0x7f0000003a40)=""/4103, 0x1007}, {&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000ac0)=""/145, 0x91}, {&(0x7f0000000000)=""/81, 0x51}, {&(0x7f0000000600)=""/198, 0xca}, {&(0x7f0000002080)=""/207, 0xcf}, {&(0x7f0000000540)=""/92, 0xa3}], 0x9}, 0x40000020) r3 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x50) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1}, 0x20000050) 2.181565172s ago: executing program 0 (id=4321): socket$kcm(0x10, 0x2, 0x4) r0 = bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_bp={0x0, 0x8}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000340)={0x3, 0x80, 0x1, 0x4, 0x6, 0x3, 0x0, 0x8000000000000001, 0x30059, 0x4, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcd87fe65, 0x1, @perf_bp={&(0x7f0000000080), 0x4}, 0x2000, 0xf0a5, 0x2, 0x7, 0x2, 0x9, 0xf, 0x0, 0x13, 0x0, 0x9}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d08000606", 0x16}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.682671193s ago: executing program 4 (id=4322): socket$kcm(0xa, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x189703, 0x0) ioctl$TUNSETIFF(r0, 0x5452, &(0x7f0000000180)={'syzkaller0\x00'}) close(r0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r1, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r2 = getpid() r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="1f000000190081054e81f782db4cb904021d082000000000000000070a000a", 0x1f}], 0x1}, 0x14) perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x2, 0x3cd, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, r2, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) syz_clone(0x41064400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.673055743s ago: executing program 2 (id=4332): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000040000000000000000000000850000002c000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000540000007300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa98}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x9, 0x8}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x33c5c7fe60a346e6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@fallback, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0], 0x2, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socket$kcm(0xa, 0x5, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c102, 0xac5d, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$cgroup_freezer_state(r0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891c, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) 1.071342187s ago: executing program 2 (id=4323): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x11c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x805, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1a, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x12}, 0x104101, 0x4, 0x0, 0x5, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000001c40)=ANY=[@ANYBLOB], 0x0, 0x2a}, 0x28) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000001000)=ANY=[@ANYBLOB="1000000004000000040000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000100"], 0x48) socket$kcm(0x10, 0x3, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c"], 0x0, 0xfffffffffffffe3d}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89a2, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a2, &(0x7f0000000080)) 91.465489ms ago: executing program 0 (id=4324): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x20}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90524fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r2, &(0x7f0000001500)={0x0, 0x40, 0x0}, 0x40012020) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYRES8=r3], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x3, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r4, &(0x7f00000003c0)={&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="b7", 0x1}], 0x1}, 0x40080c0) r5 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0x300, 0x37}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)="0000000000000000000000fa88a8", 0x36}], 0x1}, 0x4000080) 90.920278ms ago: executing program 1 (id=4325): r0 = socket$kcm(0x23, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x8000000000000000}, 0x8210, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$kcm(0x2, 0x1, 0x84) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xfffffffffdfffffd, r1, 0x1a) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x248, @mcast1, 0x4}, 0x80, &(0x7f0000000000)=[{&(0x7f00000003c0)="ce26", 0x2}], 0x1, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x238}, 0x4812) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r2, 0x0, 0xffc9, 0x0, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="23c65d54f4c5b2babf5c69a185dbff810f38fd90ca899adb0f5f20000000000000005ccad8c230f11b3f1d4db7d6d15136901ae9b5630dde5ae4617eab63a73595bac8332292e02cbc98162455420f9435aa727b090260f7c68e06e1e54e2bcfe9e4210d9ba263e2000000f8a49f102874d2fe80fec28e0b84552470f43e45c508dae05d842d28101ce992cfb22754e81de7e2ba70efceb435946b644796b2ed7d909371b5094bfbce2c8861f0597561c7440814ee2ce467eb3193558b1c454e6c4ada2d4c4c0671485a7c6b5c13a498e261835b6f1ecd6f513d85eac1c619f77ea9c8b1c4f73a37c398569e780bb5b5d0856030e64da2575e2b5e072c4061c1631d5ee88067f249a3ec00343ff37914226422d33a143ec733c66ba2619c4fea5ee9ff07374ea98620e5cca892997b11bdd7c7e0ea553e207c38df29a5ae58d0ef611a1460bc5b03a63a728eff9b1ce98885a6497033d54486cc939bb92c5d292a37fe9ac2f5e7d3913612ca91dcf2d137f90aab571907673a4399680acec5cc8b5b87ecc14223c95a65c95dda1f227a9db02cca68a4a157c9da8e5dacdab0cd9d3df0f055b8a2c99f1eced693fa46525e21f651fee85f47c6f3fd6acb1e51e5542c1212508a72c7e79a7cb8eeae7aca7bba4b4d9d74c2b7c5cb111f0d716d57ae21b8abda1658abfd250e9be722c37e886d5fb073c39f", 0x2, 0x0, 0x7ffc}, 0x21) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3e}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f086dd6000000e00ff8700630677", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) write$cgroup_pressure(r0, 0x0, 0xeaff) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x10014, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x2, 0x2d15}, 0x0, 0x8000000, 0x0, 0x0, 0x3, 0x3, 0x1}, 0x0, 0x1000, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33) 90.563829ms ago: executing program 3 (id=4326): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000034000000040000000200000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={&(0x7f0000000040)="b64b6779e728a585fc6d831c9c111ee3bf867c7fa20663508d961b5b0bc1d4eded804b84c8ee0b5e7b55af44aa8bf4a16c4d4aaf896a13f650a3b4f737945a9a179a6ceb93adadb8dd841258d0f04b02868cd415ab9bc48b055a8b3f92b143cb16138c216513a045af2101e7e3c507bedee404330f1171812cdaeed17a0e89dd4863a4e6808ca6b7046c38f33b9a0417e1c8fae7a9e1b4c8161b02", 0x0, 0x0, 0x0}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000310081044e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0xfffffe8b}], 0x1}, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00004a00530c8e5eb88edc5a9c"], 0xfe33) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='6@\x00\x00I'], 0xfe33) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880), 0x4) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) 0s ago: executing program 2 (id=4327): r0 = socket$kcm(0xa, 0x6, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) getpid() r3 = getpid() r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r5, 0xffffffffffffffff, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0xe1, 0xb, 0x6, 0x78, 0x0, 0x0, 0xe8088, 0xa, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xffff, 0x0, @perf_config_ext={0x40000000000009, 0x7}, 0xa880, 0x9, 0x3, 0x2, 0x5a6a, 0x127, 0x801, 0x0, 0x0, 0x0, 0x3}, r5, 0x1, r4, 0x0) r6 = syz_clone(0x6480, &(0x7f0000000740)="5904516a1f03982ed19dacc92d845c36de77c620243ba2511d202b3f99343bf64090b774593588f35312b114d2e9134d9491", 0x32, 0x0, &(0x7f00000007c0), &(0x7f0000000800)="c64a872dd706c0090ce36fa79aa8c3728714772f7ab5b6a3bfd0a315c9650a9fabb65be4cfc36b30e06c73694d1cab5ca138865a49973ad4cfbbe994d1d10a271ae892173fa232b1043fa87749862a38ba661180d01e11edb8bbd9011abf4a7c8f6346f9170499004ed81c43300a72972206064002ec3799035e73ab908a02cfab18b594c18565b138cf550722a0db358dae8248dede3aa0545372f3f5557165b7123be7ffd2b9f7e75fc9937f2111b621f0209f282189d5caea90b75b9b64d7d68dd781f0670d47c312e154f6158d4e983262fc0417185e0cf11189175c8293ca") r7 = syz_clone(0x0, 0x0, 0x0, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)="c04a07fc8b805e531e1da65d63b864955d1356754edd0b9647ef82f4e9af3cab6695316b12e72f42983d5e5f45871183da6876cc552a98607f8a2fe895d6f1d58f4391a347d3578de573eec68488e8c98af20ad2a50fbcdfdc773f91f572e8d469") sendmsg$unix(r1, &(0x7f0000000c80)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000200)="f8286c37b7f15d84344bb94967f1f64712b54a20105e04b5fbbfe81dedd6cdb8a5", 0x21}, {&(0x7f0000000340)="438fd74f926a04c574611c5d3fff65ef1fbcdee1eabee685a3aa3b73c662e2de9b91bfe5751d36b2de1b133e6e41f516363db7699daf15e1d3f7b14adce1d9721d746ccdabe8edaadcef547735f99d54b90ad1ef1b46fb940efb750819cdee32cd302342b9db47184ad74d90c9054f933836e7f6f54cb93ec0b72c5ae9402f0aa07e35a005a191009c885adece276a6ef1c4952fadb943156a348f17dfdd72a5498d877b2cd97562ab309fba64a70ff2ed22e005b4ae31932381d671c3331ace452e39fcc4fdfba34fc1", 0xca}, {&(0x7f0000000440)="b8d7b79ff3d9156f602f764eaade3c142a6d6bef0415fc7951bc37c517fc06356a30cbc7671f512037627fb0798692f4b729eacd02ec4614e39fe4213ad996354bb9b6e271c539101960146692554c2c1a1a532463966e53f79b947bff48cdfa0cbebc4ea7b3c65a77ad1af73add6fd5ffcca1afe43680ffdac32a601b1b3cf2ebf0062aba8f4c62aa04ca5ca56b9da79254bbc6e508efcb6a9d41f64abe144e953ceea41f216ec3b27169947cbc1ca2a2db6a", 0xb3}, {&(0x7f0000000500)="113a11f5949a17b491122ec76a345556bd8c", 0x12}, {&(0x7f0000000540)="554e60df5418a2a40f09d02fabc292ea1e911268424071d96622bc47210d9dddfaa0acbb3d5a47a07c5c0e3ca45a382296709d13b6192d5a7d5cf831023d96feaac82ea28f57eaa247b61baf595ea363ee4a7700749dc8214e7a218f5acbd7ba856e3474db53c82e8c5ba81cb03e84513c5e35864c54370a2bb1996b5ae9f43a01b575cb8eb210ded2060f157fe1637f84068ca1441e4202236b521d5a93dd2d8666", 0xa2}, {&(0x7f0000000640)="782b7903ab9d0c817478a4c6f2aeb2ef41ec32bd85763073d77f6305978bf9655085a7ba2b5e97b812a8b93bb5c150f2c98b4b629172eba1e5dea02301a679ae40263c81e8151f1a0e5932ce6f5e9e391d054538c590801decc235aafb1cb8f1b0f909d8ea12ed7132d693b232a700", 0x6f}], 0x6, &(0x7f0000000b80)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, 0xee00, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, 0xee00, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee00, 0xee00}}}], 0xb0, 0x20048040}, 0x40) close(r0) socket$kcm(0x2, 0x2, 0x73) setsockopt$sock_attach_bpf(r0, 0x0, 0x4, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xa4, 0x0, 0xa, 0x0, 0x0, 0xfffffffeffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100058, 0x0, 0x8, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x2, 0x4e22, @dev}, 0x10, 0x0}, 0x4000090) kernel console output (not intermixed with test programs): T5466] ¥: port 1(syz_tun) entered disabled state [ 162.281416][ T5466] device syz_tun entered promiscuous mode [ 162.317205][ T5480] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 162.374030][ T5480] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.369'. [ 162.440600][ T5479] netlink: 'syz.3.368': attribute type 39 has an invalid length. [ 162.472214][ T5479] device veth0_macvtap left promiscuous mode [ 163.753130][ T5498] netlink: 'syz.0.377': attribute type 2 has an invalid length. [ 163.798283][ T5497] netlink: 4 bytes leftover after parsing attributes in process `syz.2.375'. [ 164.144056][ T5502] device syzkaller0 entered promiscuous mode [ 164.164857][ T5502] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 164.308706][ T5509] tap0: tun_chr_ioctl cmd 1074025675 [ 164.314453][ T5509] tap0: persist enabled [ 165.044946][ T5517] netlink: 'syz.2.384': attribute type 39 has an invalid length. [ 165.106809][ T5517] device veth0_macvtap left promiscuous mode [ 166.073924][ T5528] netlink: 'syz.0.385': attribute type 4 has an invalid length. [ 166.197242][ T5528] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.385'. [ 167.710698][ T5550] netlink: 'syz.0.404': attribute type 4 has an invalid length. [ 167.833345][ T5550] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.404'. [ 167.956162][ T5553] netlink: 'syz.4.396': attribute type 39 has an invalid length. [ 168.273156][ T5558] tap0: tun_chr_ioctl cmd 1074025675 [ 168.318184][ T5558] tap0: persist enabled [ 170.677235][ T5585] netlink: 132 bytes leftover after parsing attributes in process `syz.4.409'. [ 170.747205][ T5591] netlink: 4 bytes leftover after parsing attributes in process `syz.0.411'. [ 170.796740][ T5589] netlink: 'syz.1.410': attribute type 39 has an invalid length. [ 171.210565][ T5596] netlink: 'syz.3.412': attribute type 4 has an invalid length. [ 171.224294][ T5596] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.412'. [ 172.584341][ T5606] netlink: 'syz.4.426': attribute type 39 has an invalid length. [ 172.594697][ T5611] tap1: tun_chr_ioctl cmd 1074025675 [ 172.613922][ T5611] tap1: persist enabled [ 173.476059][ T5628] tap1: tun_chr_ioctl cmd 1074025675 [ 173.498908][ T5628] tap1: persist enabled [ 174.354085][ T5637] netlink: 128 bytes leftover after parsing attributes in process `syz.0.436'. [ 174.378964][ T5637] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 174.475154][ T5637] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.531999][ T5639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.425'. [ 174.597935][ T5647] netlink: 'syz.2.427': attribute type 4 has an invalid length. [ 174.620856][ T5647] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.427'. [ 176.827482][ T5678] netlink: 'syz.4.438': attribute type 21 has an invalid length. [ 176.837242][ T5678] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.504120][ T4277] Bluetooth: hci3: unexpected event 0x14 length: 15 > 6 [ 182.012876][ T5760] netlink: 128 bytes leftover after parsing attributes in process `syz.4.474'. [ 182.052090][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 182.165689][ T5760] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 183.140196][ T5780] tap2: tun_chr_ioctl cmd 1074025675 [ 183.151377][ T5780] tap2: persist enabled [ 183.170336][ T5782] device sit0 entered promiscuous mode [ 183.279079][ T5779] netlink: 175 bytes leftover after parsing attributes in process `syz.3.466'. [ 183.558097][ T5788] netlink: 'syz.3.470': attribute type 3 has an invalid length. [ 183.580201][ T5788] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.470'. [ 184.156571][ T5800] netlink: 60 bytes leftover after parsing attributes in process `syz.2.473'. [ 186.366399][ T5811] device syzkaller0 entered promiscuous mode [ 186.374191][ T5807] tap3: tun_chr_ioctl cmd 1074025675 [ 186.383171][ T5807] tap3: persist enabled [ 186.426158][ T5820] netlink: 'syz.3.481': attribute type 4 has an invalid length. [ 186.528046][ T5814] netlink: 128 bytes leftover after parsing attributes in process `syz.2.478'. [ 186.530731][ T5820] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.481'. [ 186.557896][ T5814] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 186.635559][ T5814] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.215133][ T5830] tap1: tun_chr_ioctl cmd 1074025675 [ 189.222322][ T5830] tap1: persist enabled [ 189.532233][ T5846] netlink: 'syz.2.488': attribute type 3 has an invalid length. [ 189.648992][ T5846] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.488'. [ 189.718230][ T5845] netlink: 'syz.0.498': attribute type 4 has an invalid length. [ 189.744699][ T5845] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.498'. [ 193.151404][ T5870] netlink: 4 bytes leftover after parsing attributes in process `syz.1.493'. [ 193.735728][ T5897] netlink: 'syz.4.505': attribute type 3 has an invalid length. [ 193.746926][ T5897] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.505'. [ 193.890326][ T5894] team0: Port device team_slave_0 removed [ 194.155586][ T5904] netlink: 'syz.3.507': attribute type 2 has an invalid length. [ 194.169079][ T5900] device sit0 entered promiscuous mode [ 194.323056][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.329532][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.512307][ T5957] netlink: 'syz.3.522': attribute type 6 has an invalid length. [ 198.570268][ T5953] team0: Port device team_slave_0 removed [ 198.782054][ T5968] netlink: 'syz.4.527': attribute type 2 has an invalid length. [ 199.405950][ T5985] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.533'. [ 199.418193][ T5985] netlink: zone id is out of range [ 199.432328][ T5985] netlink: zone id is out of range [ 200.170144][ T6003] netlink: 'syz.2.537': attribute type 6 has an invalid length. [ 201.139144][ T6008] team0: Port device team_slave_0 removed [ 201.518472][ T4274] Bluetooth: hci4: command 0x0406 tx timeout [ 201.518499][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 201.524532][ T4274] Bluetooth: hci3: command 0x0406 tx timeout [ 201.524566][ T4274] Bluetooth: hci0: command 0x0406 tx timeout [ 201.530614][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 204.377662][ T6067] netlink: 'syz.1.561': attribute type 2 has an invalid length. [ 205.213160][ T6059] team0: Port device team_slave_0 removed [ 205.243552][ T6065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 208.374369][ T6120] netlink: 'syz.2.572': attribute type 2 has an invalid length. [ 208.747034][ T4277] Bluetooth: hci2: unknown advertising packet type: 0x63 [ 208.916462][ T6130] netlink: 'syz.0.581': attribute type 3 has an invalid length. [ 208.989695][ T6130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.581'. [ 210.092410][ T6144] netlink: 'syz.2.596': attribute type 2 has an invalid length. [ 210.707636][ T6162] netlink: 44 bytes leftover after parsing attributes in process `syz.1.591'. [ 211.455352][ T4277] Bluetooth: hci1: unknown advertising packet type: 0x63 [ 211.932105][ T6180] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.598'. [ 212.032193][ T6180] netlink: zone id is out of range [ 212.059394][ T6180] netlink: zone id is out of range [ 212.320337][ T4321] syzkaller0: tun_net_xmit 76 [ 212.325434][ T4321] syzkaller0: tun_net_xmit 48 [ 212.348681][ T127] syzkaller0: tun_net_xmit 76 [ 212.485935][ T6187] syzkaller0: delete flow: hash 2492472318 index 1 [ 214.238173][ T6193] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.614'. [ 214.273194][ T6193] netlink: zone id is out of range [ 214.301489][ T6193] netlink: zone id is out of range [ 214.986903][ T6210] delete_channel: no stack [ 216.389013][ T4321] syzkaller0: tun_net_xmit 76 [ 216.395014][ T4321] syzkaller0: tun_net_xmit 48 [ 216.410460][ T6248] netlink: 'syz.0.624': attribute type 2 has an invalid length. [ 216.425782][ T6235] syzkaller0: delete flow: hash 2492472318 index 1 [ 219.574685][ T6286] netlink: 6 bytes leftover after parsing attributes in process `syz.2.634'. [ 219.615264][ T6278] delete_channel: no stack [ 219.641024][ T6286] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 219.701133][ T6286] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 220.327273][ T6291] delete_channel: no stack [ 221.500547][ T6309] netlink: 'syz.4.644': attribute type 3 has an invalid length. [ 221.554234][ T6309] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.644'. [ 222.651086][ T6331] delete_channel: no stack [ 225.253952][ T6381] delete_channel: no stack [ 225.517768][ T6387] device syzkaller0 entered promiscuous mode [ 232.129826][ T6424] delete_channel: no stack [ 232.970756][ T6439] delete_channel: no stack [ 240.062192][ T6553] netlink: 'syz.3.726': attribute type 153 has an invalid length. [ 240.092402][ T6553] netlink: 69544 bytes leftover after parsing attributes in process `syz.3.726'. [ 240.163962][ T6554] delete_channel: no stack [ 240.815750][ T6564] device syzkaller0 entered promiscuous mode [ 241.006118][ T6568] netlink: 44 bytes leftover after parsing attributes in process `syz.3.734'. [ 244.379675][ T6604] delete_channel: no stack [ 244.481475][ T6609] netlink: 'syz.1.745': attribute type 153 has an invalid length. [ 244.510246][ T6609] netlink: 69544 bytes leftover after parsing attributes in process `syz.1.745'. [ 244.616885][ T6611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 244.625091][ T6611] IPv6: NLM_F_CREATE should be set when creating new route [ 244.633583][ T6611] IPv6: NLM_F_CREATE should be set when creating new route [ 244.641933][ T6611] IPv6: NLM_F_CREATE should be set when creating new route [ 245.000050][ T6624] netlink: 14975 bytes leftover after parsing attributes in process `syz.1.758'. [ 245.068803][ T6619] netlink: 44 bytes leftover after parsing attributes in process `syz.2.750'. [ 245.236700][ T6624] device macsec0 entered promiscuous mode [ 245.938007][ T6642] device syzkaller0 entered promiscuous mode [ 245.966250][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 246.233656][ T6646] netlink: 'syz.4.759': attribute type 153 has an invalid length. [ 246.257331][ T6646] netlink: 69544 bytes leftover after parsing attributes in process `syz.4.759'. [ 246.481390][ T6651] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 246.489383][ T6651] IPv6: NLM_F_CREATE should be set when creating new route [ 246.498394][ T6651] IPv6: NLM_F_CREATE should be set when creating new route [ 246.506630][ T6651] IPv6: NLM_F_CREATE should be set when creating new route [ 247.617784][ T6676] netlink: 'syz.4.769': attribute type 10 has an invalid length. [ 248.712559][ T6692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.720408][ T6692] IPv6: NLM_F_CREATE should be set when creating new route [ 248.728853][ T6692] IPv6: NLM_F_CREATE should be set when creating new route [ 248.736798][ T6692] IPv6: NLM_F_CREATE should be set when creating new route [ 250.220802][ T6726] netlink: 'syz.2.787': attribute type 10 has an invalid length. [ 255.836767][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.843491][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.818676][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.822'. [ 269.001549][ T7001] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.852'. [ 269.129230][ T7004] netlink: 'syz.0.852': attribute type 25 has an invalid length. [ 269.187514][ T7004] netlink: 'syz.0.852': attribute type 6 has an invalid length. [ 270.899617][ T7050] device syzkaller0 entered promiscuous mode [ 281.528918][ T7176] device syzkaller0 entered promiscuous mode [ 284.086186][ T7202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.094399][ T7202] IPv6: NLM_F_CREATE should be set when creating new route [ 284.103220][ T7202] IPv6: NLM_F_CREATE should be set when creating new route [ 284.111813][ T7202] IPv6: NLM_F_CREATE should be set when creating new route [ 284.901798][ T4277] Bluetooth: hci3: unexpected subevent 0x0e length: 150 > 15 [ 285.488442][ T4277] Bluetooth: hci1: Unknown advertising packet type: 0x3030 [ 285.488487][ T4277] Bluetooth: hci1: Malformed LE Event: 0x0d [ 287.064733][ T7227] device syzkaller0 entered promiscuous mode [ 289.705768][ T7239] netlink: 14 bytes leftover after parsing attributes in process `syz.3.903'. [ 289.747914][ T7239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.770785][ T7239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.813952][ T7239] bond0 (unregistering): Released all slaves [ 289.860726][ T7253] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 290.356765][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.407991][ T7275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.419404][ T4277] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 293.124766][ T7275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.148625][ T7275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.683339][ T7297] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 293.706291][ T4277] Bluetooth: hci3: unexpected event 0x04 length: 151 > 10 [ 293.737237][ T7297] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.756888][ T7297] bond0: (slave team0): Enslaving as an active interface with an up link [ 293.766996][ T7301] netlink: 'syz.0.918': attribute type 10 has an invalid length. [ 293.775321][ T7301] netlink: 40 bytes leftover after parsing attributes in process `syz.0.918'. [ 293.804450][ T7301] device team0 entered promiscuous mode [ 293.828361][ T7301] device team_slave_1 entered promiscuous mode [ 293.892923][ T7301] bond0: (slave team0): Releasing backup interface [ 293.925919][ T7301] bridge0: port 3(team0) entered blocking state [ 293.935668][ T7301] bridge0: port 3(team0) entered disabled state [ 294.065643][ T7308] device syzkaller0 entered promiscuous mode [ 295.758400][ T4274] Bluetooth: hci3: command 0x0409 tx timeout [ 298.592179][ T4277] Bluetooth: hci0: unexpected event 0x04 length: 151 > 10 [ 300.638486][ T4274] Bluetooth: hci0: command 0x0409 tx timeout [ 302.091028][ T4277] Bluetooth: hci4: unexpected subevent 0x0e length: 150 > 15 [ 303.081777][ T7393] device syzkaller0 entered promiscuous mode [ 303.958275][ T7406] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.969'. [ 303.970778][ T7406] netlink: zone id is out of range [ 303.993486][ T7406] netlink: zone id is out of range [ 304.052125][ T7406] netlink: zone id is out of range [ 304.064297][ T7406] netlink: zone id is out of range [ 304.090333][ T7406] netlink: zone id is out of range [ 304.111109][ T7406] netlink: zone id is out of range [ 304.121022][ T7406] netlink: zone id is out of range [ 304.143074][ T4277] Bluetooth: hci3: unexpected event 0x08 length: 15 > 4 [ 304.144239][ T7406] netlink: zone id is out of range [ 304.170532][ T7406] netlink: zone id is out of range [ 304.182805][ T7406] netlink: zone id is out of range [ 306.200274][ T7427] netlink: 'syz.4.964': attribute type 25 has an invalid length. [ 306.208205][ T7427] netlink: 'syz.4.964': attribute type 9 has an invalid length. [ 306.218011][ T7427] netlink: 40 bytes leftover after parsing attributes in process `syz.4.964'. [ 307.789787][ T4277] Bluetooth: hci4: unexpected event 0x08 length: 15 > 4 [ 308.816769][ T7484] device syzkaller0 entered promiscuous mode [ 312.029653][ T7497] netlink: 'syz.3.985': attribute type 29 has an invalid length. [ 315.534760][ T7497] netlink: 'syz.3.985': attribute type 29 has an invalid length. [ 315.550121][ T7523] IPv6: …: Disabled Multicast RS [ 316.746184][ T7546] netlink: 'syz.4.1010': attribute type 29 has an invalid length. [ 316.990068][ T7555] delete_channel: no stack [ 317.022656][ T7546] netlink: 'syz.4.1010': attribute type 29 has an invalid length. [ 317.106855][ T7551] netlink: 'syz.4.1010': attribute type 29 has an invalid length. [ 317.243944][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250396][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.411465][ T7562] IPv6: …: Disabled Multicast RS [ 317.798747][ T7563] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1023'. [ 317.888808][ T7563] net_ratelimit: 3 callbacks suppressed [ 317.888827][ T7563] netlink: zone id is out of range [ 317.982909][ T7563] netlink: zone id is out of range [ 318.009480][ T7563] netlink: zone id is out of range [ 318.016992][ T7563] netlink: zone id is out of range [ 318.026079][ T7563] netlink: zone id is out of range [ 318.108744][ T7563] netlink: zone id is out of range [ 318.115739][ T7563] netlink: zone id is out of range [ 318.149721][ T7563] netlink: zone id is out of range [ 318.223829][ T7563] netlink: zone id is out of range [ 318.288426][ T7563] netlink: zone id is out of range [ 320.633353][ T7597] IPv6: …: Disabled Multicast RS [ 320.939659][ T7603] device syzkaller0 entered promiscuous mode [ 320.984807][ T7605] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1027'. [ 321.347890][ T7610] netlink: 'syz.0.1026': attribute type 25 has an invalid length. [ 321.382975][ T7610] netlink: 'syz.0.1026': attribute type 9 has an invalid length. [ 321.426185][ T7610] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1026'. [ 327.197243][ T7653] IPv6: …: Disabled Multicast RS [ 327.299264][ T7654] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1052'. [ 327.332760][ T7650] device syzkaller0 entered promiscuous mode [ 327.663660][ T7654] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 328.465557][ T7672] netlink: 'syz.3.1045': attribute type 41 has an invalid length. [ 330.214495][ T7672] netlink: 'syz.3.1045': attribute type 41 has an invalid length. [ 330.507817][ T7679] device syzkaller0 entered promiscuous mode [ 334.851802][ T7717] netlink: 'syz.1.1061': attribute type 41 has an invalid length. [ 334.873069][ T7717] netlink: 'syz.1.1061': attribute type 41 has an invalid length. [ 334.965300][ T7718] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1060'. [ 335.232613][ T7718] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 336.789773][ T7748] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1082'. [ 337.066818][ T7762] netlink: 'syz.2.1075': attribute type 41 has an invalid length. [ 337.086094][ T7762] netlink: 'syz.2.1075': attribute type 41 has an invalid length. [ 338.213539][ T7778] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1081'. [ 338.317017][ T7776] netlink: 'syz.1.1080': attribute type 21 has an invalid length. [ 338.500484][ T7778] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 341.587576][ T4277] Bluetooth: hci2: unexpected event 0x1d length: 15 > 5 [ 341.876050][ T7817] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1093'. [ 342.162493][ T7820] netlink: 'syz.4.1094': attribute type 41 has an invalid length. [ 342.172001][ T7820] netlink: 'syz.4.1094': attribute type 41 has an invalid length. [ 342.654849][ T7837] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1098'. [ 345.965430][ T7837] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 347.102354][ T7877] netlink: 'syz.0.1110': attribute type 41 has an invalid length. [ 347.193206][ T7877] netlink: 'syz.0.1110': attribute type 41 has an invalid length. [ 347.612386][ T7883] netlink: 'syz.0.1112': attribute type 21 has an invalid length. [ 348.077275][ T7898] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1118'. [ 348.186031][ T7898] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 348.202780][ T7898] CPU: 1 PID: 7898 Comm: syz.3.1118 Not tainted syzkaller #0 [ 348.210218][ T7898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 348.220304][ T7898] Call Trace: [ 348.223610][ T7898] [ 348.226565][ T7898] dump_stack_lvl+0x188/0x24e [ 348.231287][ T7898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.237570][ T7898] ? show_regs_print_info+0x12/0x12 [ 348.242892][ T7898] ? load_image+0x410/0x410 [ 348.247447][ T7898] sysfs_warn_dup+0x8a/0xa0 [ 348.251988][ T7898] sysfs_do_create_link_sd+0xc0/0x110 [ 348.257486][ T7898] device_add+0x83b/0x1050 [ 348.261949][ T7898] wiphy_register+0x1d8b/0x2aa0 [ 348.266957][ T7898] ? cfg80211_event_work+0x40/0x40 [ 348.272114][ T7898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.278326][ T7898] ieee80211_register_hw+0x2d48/0x39f0 [ 348.284097][ T7898] ? ieee80211_register_hw+0xf61/0x39f0 [ 348.289677][ T7898] ? ieee80211_register_hw+0xf61/0x39f0 [ 348.295354][ T7898] ? ieee80211_tasklet_handler+0x20/0x20 [ 348.301030][ T7898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.307243][ T7898] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 348.313016][ T7898] ? memcpy+0x3c/0x60 [ 348.317039][ T7898] hwsim_new_radio_nl+0xab7/0xc90 [ 348.322117][ T7898] genl_family_rcv_msg_doit+0x22f/0x350 [ 348.327702][ T7898] ? end_current_label_crit_section+0x170/0x170 [ 348.334073][ T7898] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 348.340017][ T7898] ? bpf_lsm_capable+0x5/0x10 [ 348.344729][ T7898] ? security_capable+0x85/0xb0 [ 348.349650][ T7898] genl_rcv_msg+0x601/0x790 [ 348.354222][ T7898] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 348.360509][ T7898] ? genl_bind+0x360/0x360 [ 348.364990][ T7898] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 348.371418][ T7898] ? lock_acquire+0x225/0x4a0 [ 348.376168][ T7898] netlink_rcv_skb+0x1ef/0x440 [ 348.380979][ T7898] ? genl_bind+0x360/0x360 [ 348.385437][ T7898] ? netlink_ack+0x1160/0x1160 [ 348.390251][ T7898] ? down_read+0x1a8/0x2d0 [ 348.394704][ T7898] genl_rcv+0x24/0x40 [ 348.398729][ T7898] netlink_unicast+0x7ad/0x920 [ 348.403550][ T7898] netlink_sendmsg+0x8ad/0xbd0 [ 348.408364][ T7898] ? netlink_getsockopt+0x550/0x550 [ 348.413603][ T7898] ? apparmor_socket_sendmsg+0x8a/0x330 [ 348.419188][ T7898] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 348.424591][ T7898] ? security_socket_sendmsg+0x7c/0xa0 [ 348.430081][ T7898] ? netlink_getsockopt+0x550/0x550 [ 348.435320][ T7898] ____sys_sendmsg+0x5ed/0x9a0 [ 348.440130][ T7898] ? __sys_sendmsg_sock+0x30/0x30 [ 348.445187][ T7898] ? __import_iovec+0x306/0x510 [ 348.450094][ T7898] ? import_iovec+0x6f/0xa0 [ 348.454640][ T7898] ___sys_sendmsg+0x2a2/0x360 [ 348.459361][ T7898] ? __sys_sendmsg+0x2a0/0x2a0 [ 348.464220][ T7898] __se_sys_sendmsg+0x1c3/0x2b0 [ 348.469111][ T7898] ? __x64_sys_sendmsg+0x80/0x80 [ 348.474107][ T7898] ? syscall_enter_from_user_mode+0x2a/0x80 [ 348.480055][ T7898] do_syscall_64+0x4c/0xa0 [ 348.484526][ T7898] ? clear_bhb_loop+0x60/0xb0 [ 348.489249][ T7898] ? clear_bhb_loop+0x60/0xb0 [ 348.493970][ T7898] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 348.499920][ T7898] RIP: 0033:0x7ffb6e99de99 [ 348.504390][ T7898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.524216][ T7898] RSP: 002b:00007ffb6f79a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.532696][ T7898] RAX: ffffffffffffffda RBX: 00007ffb6ec25fa0 RCX: 00007ffb6e99de99 [ 348.540719][ T7898] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 348.548724][ T7898] RBP: 00007ffb6ea33eaf R08: 0000000000000000 R09: 0000000000000000 [ 348.556729][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.564730][ T7898] R13: 00007ffb6ec26038 R14: 00007ffb6ec25fa0 R15: 00007ffc15606098 [ 348.572748][ T7898] [ 350.157860][ T7921] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1136'. [ 350.270343][ T7921] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 350.288473][ T7921] CPU: 1 PID: 7921 Comm: syz.1.1136 Not tainted syzkaller #0 [ 350.295918][ T7921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 350.306008][ T7921] Call Trace: [ 350.309319][ T7921] [ 350.312275][ T7921] dump_stack_lvl+0x188/0x24e [ 350.317004][ T7921] ? show_regs_print_info+0x12/0x12 [ 350.322247][ T7921] ? load_image+0x410/0x410 [ 350.326800][ T7921] sysfs_warn_dup+0x8a/0xa0 [ 350.331345][ T7921] sysfs_do_create_link_sd+0xc0/0x110 [ 350.336772][ T7921] device_add+0x83b/0x1050 [ 350.341249][ T7921] wiphy_register+0x1d8b/0x2aa0 [ 350.346179][ T7921] ? cfg80211_event_work+0x40/0x40 [ 350.351337][ T7921] ? minstrel_ht_alloc+0x894/0xa20 [ 350.356675][ T7921] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 350.362875][ T7921] ieee80211_register_hw+0x2d48/0x39f0 [ 350.368381][ T7921] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.374587][ T7921] ? ieee80211_register_hw+0xf61/0x39f0 [ 350.380171][ T7921] ? ieee80211_register_hw+0xf61/0x39f0 [ 350.386042][ T7921] ? ieee80211_tasklet_handler+0x20/0x20 [ 350.391737][ T7921] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 350.397767][ T7921] ? __debug_object_init+0xed/0x440 [ 350.403116][ T7921] ? memset+0x1e/0x40 [ 350.407131][ T7921] ? __hrtimer_init+0x189/0x270 [ 350.412039][ T7921] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 350.417842][ T7921] hwsim_new_radio_nl+0xab7/0xc90 [ 350.422933][ T7921] genl_family_rcv_msg_doit+0x22f/0x350 [ 350.428530][ T7921] ? end_current_label_crit_section+0x170/0x170 [ 350.434864][ T7921] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.441099][ T7921] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 350.447072][ T7921] ? bpf_lsm_capable+0x5/0x10 [ 350.451794][ T7921] ? security_capable+0x85/0xb0 [ 350.456702][ T7921] genl_rcv_msg+0x601/0x790 [ 350.461437][ T7921] ? genl_bind+0x360/0x360 [ 350.465997][ T7921] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 350.472565][ T7921] ? lock_chain_count+0x20/0x20 [ 350.477527][ T7921] netlink_rcv_skb+0x1ef/0x440 [ 350.482362][ T7921] ? genl_bind+0x360/0x360 [ 350.486850][ T7921] ? netlink_ack+0x1160/0x1160 [ 350.491678][ T7921] ? down_read+0x1a8/0x2d0 [ 350.496153][ T7921] genl_rcv+0x24/0x40 [ 350.500174][ T7921] netlink_unicast+0x7ad/0x920 [ 350.504993][ T7921] netlink_sendmsg+0x8ad/0xbd0 [ 350.509802][ T7921] ? lockdep_hardirqs_on+0x94/0x140 [ 350.515040][ T7921] ? netlink_getsockopt+0x550/0x550 [ 350.520421][ T7921] ? netlink_getsockopt+0x550/0x550 [ 350.525661][ T7921] ____sys_sendmsg+0x5ed/0x9a0 [ 350.530465][ T7921] ? iovec_from_user+0x29d/0x360 [ 350.535452][ T7921] ? __sys_sendmsg_sock+0x30/0x30 [ 350.540520][ T7921] ? __import_iovec+0x306/0x510 [ 350.545422][ T7921] ? import_iovec+0x6f/0xa0 [ 350.549971][ T7921] ___sys_sendmsg+0x2a2/0x360 [ 350.554693][ T7921] ? __sys_sendmsg+0x2a0/0x2a0 [ 350.559495][ T7921] ? perf_trace_preemptirq_template+0xa8/0x320 [ 350.565694][ T7921] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 350.571727][ T7921] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 350.577919][ T7921] ? lockdep_hardirqs_on+0x94/0x140 [ 350.583427][ T7921] ? __se_sys_sendmsg+0xee/0x2b0 [ 350.588416][ T7921] ? kasan_check_range+0x7d/0x290 [ 350.593501][ T7921] __se_sys_sendmsg+0x1c3/0x2b0 [ 350.598395][ T7921] ? __x64_sys_sendmsg+0x80/0x80 [ 350.603393][ T7921] ? lockdep_hardirqs_on+0x94/0x140 [ 350.608625][ T7921] do_syscall_64+0x4c/0xa0 [ 350.613075][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 350.617789][ T7921] ? clear_bhb_loop+0x60/0xb0 [ 350.622514][ T7921] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 350.628451][ T7921] RIP: 0033:0x7fc83159de99 [ 350.632914][ T7921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.652558][ T7921] RSP: 002b:00007fc8323f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 350.661011][ T7921] RAX: ffffffffffffffda RBX: 00007fc831826090 RCX: 00007fc83159de99 [ 350.669014][ T7921] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 350.677134][ T7921] RBP: 00007fc831633eaf R08: 0000000000000000 R09: 0000000000000000 [ 350.685131][ T7921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 350.693130][ T7921] R13: 00007fc831826128 R14: 00007fc831826090 R15: 00007ffe298f0c98 [ 350.701166][ T7921] [ 351.081565][ T7927] netlink: 'syz.2.1125': attribute type 41 has an invalid length. [ 351.100738][ T7927] netlink: 'syz.2.1125': attribute type 41 has an invalid length. [ 351.337552][ T4277] Bluetooth: hci3: unexpected event 0x1d length: 15 > 5 [ 351.345674][ T7937] netlink: 'syz.4.1129': attribute type 21 has an invalid length. [ 351.377623][ T7936] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1140'. [ 351.463386][ T7936] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 351.486662][ T7936] CPU: 1 PID: 7936 Comm: syz.1.1140 Not tainted syzkaller #0 [ 351.494126][ T7936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 351.504224][ T7936] Call Trace: [ 351.507538][ T7936] [ 351.510499][ T7936] dump_stack_lvl+0x188/0x24e [ 351.515315][ T7936] ? show_regs_print_info+0x12/0x12 [ 351.520565][ T7936] ? load_image+0x410/0x410 [ 351.525131][ T7936] sysfs_warn_dup+0x8a/0xa0 [ 351.529679][ T7936] sysfs_do_create_link_sd+0xc0/0x110 [ 351.535094][ T7936] device_add+0x83b/0x1050 [ 351.539561][ T7936] wiphy_register+0x1d8b/0x2aa0 [ 351.544483][ T7936] ? lock_chain_count+0x20/0x20 [ 351.549406][ T7936] ? cfg80211_event_work+0x40/0x40 [ 351.554588][ T7936] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 351.560714][ T7936] ieee80211_register_hw+0x2d48/0x39f0 [ 351.566227][ T7936] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 351.572454][ T7936] ? ieee80211_register_hw+0xf61/0x39f0 [ 351.578065][ T7936] ? ieee80211_register_hw+0xf61/0x39f0 [ 351.583696][ T7936] ? ieee80211_tasklet_handler+0x20/0x20 [ 351.589351][ T7936] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 351.595266][ T7936] ? __debug_object_init+0xed/0x440 [ 351.600513][ T7936] ? memset+0x1e/0x40 [ 351.604513][ T7936] ? __hrtimer_init+0x189/0x270 [ 351.609386][ T7936] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 351.615129][ T7936] ? memcpy+0x3c/0x60 [ 351.619124][ T7936] hwsim_new_radio_nl+0xab7/0xc90 [ 351.624201][ T7936] genl_family_rcv_msg_doit+0x22f/0x350 [ 351.629766][ T7936] ? end_current_label_crit_section+0x170/0x170 [ 351.636025][ T7936] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 351.641943][ T7936] ? bpf_lsm_capable+0x5/0x10 [ 351.646632][ T7936] ? security_capable+0x85/0xb0 [ 351.651512][ T7936] genl_rcv_msg+0x601/0x790 [ 351.656031][ T7936] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 351.662206][ T7936] ? genl_bind+0x360/0x360 [ 351.666639][ T7936] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 351.672991][ T7936] ? lock_acquire+0x225/0x4a0 [ 351.677690][ T7936] netlink_rcv_skb+0x1ef/0x440 [ 351.682480][ T7936] ? genl_bind+0x360/0x360 [ 351.686914][ T7936] ? netlink_ack+0x1160/0x1160 [ 351.691700][ T7936] ? down_read+0x1a8/0x2d0 [ 351.696137][ T7936] genl_rcv+0x24/0x40 [ 351.700135][ T7936] netlink_unicast+0x7ad/0x920 [ 351.704947][ T7936] netlink_sendmsg+0x8ad/0xbd0 [ 351.709820][ T7936] ? netlink_getsockopt+0x550/0x550 [ 351.715038][ T7936] ? apparmor_socket_sendmsg+0x8a/0x330 [ 351.720598][ T7936] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 351.725897][ T7936] ? security_socket_sendmsg+0x7c/0xa0 [ 351.731367][ T7936] ? netlink_getsockopt+0x550/0x550 [ 351.736584][ T7936] ____sys_sendmsg+0x5ed/0x9a0 [ 351.741373][ T7936] ? __sys_sendmsg_sock+0x30/0x30 [ 351.746409][ T7936] ? __import_iovec+0x306/0x510 [ 351.751367][ T7936] ? import_iovec+0x6f/0xa0 [ 351.755974][ T7936] ___sys_sendmsg+0x2a2/0x360 [ 351.760671][ T7936] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 351.766413][ T7936] ? __sys_sendmsg+0x2a0/0x2a0 [ 351.771210][ T7936] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 351.777399][ T7936] __se_sys_sendmsg+0x1c3/0x2b0 [ 351.782270][ T7936] ? __x64_sys_sendmsg+0x80/0x80 [ 351.787235][ T7936] ? syscall_enter_from_user_mode+0x2a/0x80 [ 351.793161][ T7936] do_syscall_64+0x4c/0xa0 [ 351.797619][ T7936] ? clear_bhb_loop+0x60/0xb0 [ 351.802326][ T7936] ? clear_bhb_loop+0x60/0xb0 [ 351.807025][ T7936] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 351.812934][ T7936] RIP: 0033:0x7fc83159de99 [ 351.817390][ T7936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.837065][ T7936] RSP: 002b:00007fc832416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.845500][ T7936] RAX: ffffffffffffffda RBX: 00007fc831825fa0 RCX: 00007fc83159de99 [ 351.853511][ T7936] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 351.861496][ T7936] RBP: 00007fc831633eaf R08: 0000000000000000 R09: 0000000000000000 [ 351.869484][ T7936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 351.877470][ T7936] R13: 00007fc831826038 R14: 00007fc831825fa0 R15: 00007ffe298f0c98 [ 351.885469][ T7936] [ 352.548364][ T7961] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1134'. [ 355.096266][ T8000] netlink: 'syz.3.1150': attribute type 10 has an invalid length. [ 355.121527][ T8000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1150'. [ 355.142598][ T8000] net_ratelimit: 3 callbacks suppressed [ 355.142618][ T8000] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 355.408481][ T8005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1153'. [ 355.520578][ T8009] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1152'. [ 355.778154][ T4402] tipc: Subscription rejected, illegal request [ 356.057785][ T8016] netlink: 'syz.3.1155': attribute type 2 has an invalid length. [ 356.108716][ T8016] netlink: 'syz.3.1155': attribute type 8 has an invalid length. [ 356.139786][ T8016] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1155'. [ 358.983710][ T8044] netlink: 'syz.1.1164': attribute type 21 has an invalid length. [ 360.445041][ T8065] netlink: 'syz.2.1178': attribute type 21 has an invalid length. [ 360.592021][ T8071] device syzkaller0 entered promiscuous mode [ 365.304698][ T4277] Bluetooth: hci4: adv larger than maximum supported [ 365.304736][ T4277] Bluetooth: hci4: Malformed LE Event: 0x0d [ 369.321569][ T8172] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1204'. [ 369.341766][ T4402] tipc: Subscription rejected, illegal request [ 369.416359][ T8177] netlink: 'syz.1.1205': attribute type 2 has an invalid length. [ 369.455294][ T8177] netlink: 'syz.1.1205': attribute type 8 has an invalid length. [ 369.485888][ T8177] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1205'. [ 370.577414][ T8190] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1212'. [ 371.799316][ T4430] tipc: Subscription rejected, illegal request [ 371.893907][ T8208] netlink: 'syz.2.1221': attribute type 2 has an invalid length. [ 371.913558][ T8208] netlink: 'syz.2.1221': attribute type 8 has an invalid length. [ 371.929285][ T8208] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1221'. [ 372.633785][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1223'. [ 373.133365][ T8225] device syzkaller0 entered promiscuous mode [ 373.246217][ T4277] Bluetooth: hci2: adv larger than maximum supported [ 373.246252][ T4277] Bluetooth: hci2: Malformed LE Event: 0x0d [ 375.314244][ T4402] tipc: Subscription rejected, illegal request [ 377.284583][ T8242] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 377.291990][ T8242] IPv6: NLM_F_CREATE should be set when creating new route [ 377.308576][ T8254] netlink: 'syz.4.1237': attribute type 2 has an invalid length. [ 377.333757][ T8254] netlink: 'syz.4.1237': attribute type 8 has an invalid length. [ 377.351956][ T8254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1237'. [ 377.567222][ T8258] netlink: 'syz.2.1238': attribute type 7 has an invalid length. [ 377.731669][ T8264] device syzkaller0 entered promiscuous mode [ 378.644373][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.652856][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.072550][ T8274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1243'. [ 380.228026][ T8285] netlink: 'syz.2.1249': attribute type 29 has an invalid length. [ 380.294981][ T8285] netlink: 'syz.2.1249': attribute type 29 has an invalid length. [ 380.510787][ T8285] netlink: 'syz.2.1249': attribute type 29 has an invalid length. [ 382.157582][ T8316] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1261'. [ 382.506083][ T8325] device syzkaller0 entered promiscuous mode [ 382.536615][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 382.636634][ T8330] netlink: 'syz.4.1265': attribute type 29 has an invalid length. [ 382.761364][ T8330] netlink: 'syz.4.1265': attribute type 29 has an invalid length. [ 382.883506][ T8330] netlink: 'syz.4.1265': attribute type 29 has an invalid length. [ 385.494942][ T8370] netlink: 'syz.1.1280': attribute type 20 has an invalid length. [ 385.946294][ T8380] netlink: 'syz.3.1282': attribute type 29 has an invalid length. [ 385.991158][ T8380] netlink: 'syz.3.1282': attribute type 29 has an invalid length. [ 386.200375][ T8384] tun0: tun_chr_ioctl cmd 1074025675 [ 386.205830][ T8384] tun0: persist enabled [ 386.253477][ T8380] netlink: 'syz.3.1282': attribute type 29 has an invalid length. [ 386.278609][ T8383] tun0: tun_chr_ioctl cmd 1074025675 [ 386.318574][ T8383] tun0: persist enabled [ 386.867185][ T8396] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1288'. [ 386.955814][ T8394] netlink: 'syz.1.1288': attribute type 10 has an invalid length. [ 386.980115][ T8394] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 391.153684][ T8434] netlink: 'syz.0.1299': attribute type 29 has an invalid length. [ 391.199968][ T8434] netlink: 'syz.0.1299': attribute type 29 has an invalid length. [ 391.251552][ T8434] netlink: 'syz.0.1299': attribute type 29 has an invalid length. [ 393.915545][ T8472] device sit0 entered promiscuous mode [ 393.980399][ T8477] netlink: 'syz.1.1317': attribute type 29 has an invalid length. [ 394.582434][ T8477] netlink: 'syz.1.1317': attribute type 29 has an invalid length. [ 394.679837][ T8483] netlink: 'syz.1.1317': attribute type 29 has an invalid length. [ 395.998563][ T8508] netlink: 'syz.2.1329': attribute type 20 has an invalid length. [ 396.392959][ T8516] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1332'. [ 396.543519][ T8521] netlink: 'syz.3.1332': attribute type 10 has an invalid length. [ 396.672880][ T8521] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 397.772428][ T8533] device syzkaller0 entered promiscuous mode [ 400.646818][ T8552] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1354'. [ 400.868407][ T8561] netlink: 'syz.4.1345': attribute type 20 has an invalid length. [ 401.052133][ T8564] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1358'. [ 401.495934][ T8575] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1348'. [ 401.616825][ T8575] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 401.717297][ T8575] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 403.225623][ T8606] device syzkaller0 entered promiscuous mode [ 403.256269][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 406.584823][ T8638] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1374'. [ 406.672107][ T8640] netlink: 'syz.2.1374': attribute type 10 has an invalid length. [ 406.809216][ T8640] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 408.401117][ T8669] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1383'. [ 411.375995][ T8683] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1389'. [ 411.490823][ T8682] netlink: 'syz.2.1390': attribute type 29 has an invalid length. [ 411.495883][ T8683] netlink: 'syz.4.1389': attribute type 10 has an invalid length. [ 411.555261][ T8683] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 411.672839][ T8682] netlink: 'syz.2.1390': attribute type 29 has an invalid length. [ 411.796462][ T8689] netlink: 'syz.2.1390': attribute type 29 has an invalid length. [ 413.282558][ T8710] device syzkaller0 entered promiscuous mode [ 414.329680][ T8735] netlink: 'syz.3.1405': attribute type 29 has an invalid length. [ 414.369091][ T8735] netlink: 'syz.3.1405': attribute type 29 has an invalid length. [ 414.460542][ T8737] device sit0 entered promiscuous mode [ 415.043061][ T8735] netlink: 'syz.3.1405': attribute type 29 has an invalid length. [ 418.003773][ T8784] netlink: 'syz.2.1426': attribute type 2 has an invalid length. [ 418.025388][ T8785] netlink: 'syz.4.1425': attribute type 29 has an invalid length. [ 418.036509][ T8784] netlink: 'syz.2.1426': attribute type 8 has an invalid length. [ 418.093493][ T8784] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1426'. [ 418.224407][ T8785] netlink: 'syz.4.1425': attribute type 29 has an invalid length. [ 418.298443][ T8794] netlink: 'syz.4.1425': attribute type 29 has an invalid length. [ 418.375982][ T8797] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1430'. [ 418.505820][ T8797] netlink: 'syz.0.1430': attribute type 10 has an invalid length. [ 418.542463][ T8797] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 419.623053][ T8824] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1442'. [ 419.767517][ T8824] device caif0 entered promiscuous mode [ 419.789062][ T8824] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 419.873291][ T8833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1444'. [ 420.137002][ T8841] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1448'. [ 420.235261][ T8840] netlink: 'syz.4.1448': attribute type 10 has an invalid length. [ 420.300365][ T8840] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 420.738237][ T8851] tun0: tun_chr_ioctl cmd 1074025675 [ 420.765282][ T8851] tun0: persist enabled [ 420.813721][ T8857] tun0: tun_chr_ioctl cmd 1074025675 [ 420.839744][ T8857] tun0: persist enabled [ 421.273173][ T8866] device syzkaller0 entered promiscuous mode [ 422.027648][ T8885] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1464'. [ 422.143602][ T8882] netlink: 'syz.1.1464': attribute type 10 has an invalid length. [ 422.202250][ T8882] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 423.075176][ T8907] netlink: 'syz.2.1471': attribute type 21 has an invalid length. [ 423.097979][ T8907] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1471'. [ 423.556885][ T8918] netlink: 'syz.4.1474': attribute type 2 has an invalid length. [ 423.573968][ T8918] netlink: 'syz.4.1474': attribute type 8 has an invalid length. [ 423.586910][ T8918] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1474'. [ 423.609244][ T8923] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1475'. [ 423.927696][ T8932] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1478'. [ 424.042775][ T8930] netlink: 'syz.3.1478': attribute type 10 has an invalid length. [ 424.061632][ T8930] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 425.236724][ T8955] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1489'. [ 425.756261][ T8959] netlink: 'syz.3.1491': attribute type 2 has an invalid length. [ 425.782322][ T8959] netlink: 'syz.3.1491': attribute type 8 has an invalid length. [ 425.805498][ T8959] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1491'. [ 426.230973][ T8973] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1495'. [ 426.301544][ T8972] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1494'. [ 426.405606][ T8972] netlink: 'syz.3.1494': attribute type 10 has an invalid length. [ 426.437181][ T8972] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 427.403861][ T8993] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1501'. [ 427.426697][ T8993] device caif0 entered promiscuous mode [ 427.442427][ T8993] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.535941][ T8996] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1502'. [ 430.605454][ T9005] netlink: 'syz.1.1506': attribute type 2 has an invalid length. [ 430.623418][ T9005] netlink: 'syz.1.1506': attribute type 8 has an invalid length. [ 430.634171][ T9005] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1506'. [ 430.843247][ T9013] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1510'. [ 430.877312][ T9017] netlink: 'syz.3.1521': attribute type 10 has an invalid length. [ 430.938536][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.952891][ T9017] device bridge_slave_1 left promiscuous mode [ 430.960581][ T9017] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.993853][ T9013] netlink: 'syz.2.1510': attribute type 10 has an invalid length. [ 431.018090][ T9013] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 431.933431][ T9036] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.1516'. [ 435.495866][ T9064] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1524'. [ 435.597776][ T9064] netlink: 'syz.1.1524': attribute type 10 has an invalid length. [ 435.636950][ T9064] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 435.665943][ T9067] netlink: 'syz.0.1522': attribute type 2 has an invalid length. [ 435.709801][ T9067] netlink: 'syz.0.1522': attribute type 8 has an invalid length. [ 435.739004][ T9067] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1522'. [ 436.992647][ T9098] tipc: Started in network mode [ 436.997595][ T9098] tipc: Node identity 9215a268, cluster identity 4711 [ 437.107662][ T9098] tipc: Node number set to 2450891368 [ 437.397637][ T9104] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1541'. [ 437.586055][ T9108] device syzkaller0 entered promiscuous mode [ 437.626698][ T9103] netlink: 'syz.3.1541': attribute type 10 has an invalid length. [ 437.693967][ T9103] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 437.749861][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1546'. [ 439.628323][ T9145] netlink: 'syz.4.1566': attribute type 21 has an invalid length. [ 439.647557][ T9145] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1566'. [ 440.082397][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089198][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.106472][ T9154] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1558'. [ 440.436168][ T9152] netlink: 'syz.2.1558': attribute type 10 has an invalid length. [ 440.509559][ T9152] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 440.939866][ T9157] netlink: 'syz.0.1561': attribute type 3 has an invalid length. [ 441.014391][ T9157] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1561'. [ 447.897198][ T9198] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1585'. [ 447.933930][ T9203] netlink: 11562 bytes leftover after parsing attributes in process `syz.4.1575'. [ 447.955482][ T9199] netlink: 'syz.3.1574': attribute type 21 has an invalid length. [ 447.968474][ T9199] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1574'. [ 450.816989][ T9224] delete_channel: no stack [ 454.676558][ T9256] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1590'. [ 454.834339][ T9259] netlink: 'syz.1.1591': attribute type 21 has an invalid length. [ 454.879797][ T9259] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1591'. [ 455.343166][ T9267] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1595'. [ 455.368345][ T9268] netlink: 11562 bytes leftover after parsing attributes in process `syz.2.1606'. [ 457.805845][ T9284] netlink: 'syz.2.1603': attribute type 3 has an invalid length. [ 457.858181][ T9284] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1603'. [ 460.895515][ T9297] delete_channel: no stack [ 461.117541][ T9302] netlink: 'syz.4.1608': attribute type 3 has an invalid length. [ 461.338629][ T9302] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1608'. [ 461.478917][ T9313] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 461.549351][ T9313] netlink: 'syz.0.1610': attribute type 1 has an invalid length. [ 461.557748][ T9313] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1610'. [ 462.096017][ T9324] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1614'. [ 462.218045][ T9326] netlink: 'syz.0.1612': attribute type 21 has an invalid length. [ 462.263884][ T9326] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1612'. [ 465.516170][ T9345] netlink: 'syz.3.1621': attribute type 9 has an invalid length. [ 465.537716][ T9345] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.1621'. [ 465.674429][ T9346] delete_channel: no stack [ 465.966257][ T9356] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 465.982569][ T9355] netlink: 'syz.3.1624': attribute type 3 has an invalid length. [ 466.008885][ T9355] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.1624'. [ 466.050541][ T9356] netlink: 'syz.4.1625': attribute type 1 has an invalid length. [ 466.075271][ T9362] netlink: 13951 bytes leftover after parsing attributes in process `syz.0.1627'. [ 466.168690][ T9356] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.1625'. [ 467.366775][ T9384] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 467.441829][ T9384] netlink: 'syz.3.1644': attribute type 1 has an invalid length. [ 467.568914][ T9384] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.1644'. [ 467.694101][ T9392] netlink: 54183 bytes leftover after parsing attributes in process `syz.1.1646'. [ 470.964529][ T9411] netlink: 'syz.1.1654': attribute type 3 has an invalid length. [ 471.055750][ T9411] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1654'. [ 471.713352][ T9408] team0: Port device team_slave_0 removed [ 471.751325][ T9409] netlink: 'syz.0.1652': attribute type 9 has an invalid length. [ 471.763661][ T9409] netlink: 61951 bytes leftover after parsing attributes in process `syz.0.1652'. [ 471.792269][ T9407] delete_channel: no stack [ 472.065350][ T9425] netlink: 'syz.1.1659': attribute type 9 has an invalid length. [ 472.102930][ T9427] netlink: 'syz.0.1658': attribute type 3 has an invalid length. [ 472.116673][ T9425] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.1659'. [ 472.146738][ T9427] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1658'. [ 473.886813][ T9439] netlink: 54183 bytes leftover after parsing attributes in process `syz.2.1665'. [ 474.402508][ T9445] device syzkaller0 entered promiscuous mode [ 481.705748][ T9527] netlink: 'syz.0.1682': attribute type 1 has an invalid length. [ 481.734561][ T9527] netlink: 16090 bytes leftover after parsing attributes in process `syz.0.1682'. [ 484.844371][ T9562] delete_channel: no stack [ 487.343307][ T9609] delete_channel: no stack [ 487.758479][ T9617] delete_channel: no stack [ 487.827330][ T9612] netlink: 'syz.2.1716': attribute type 9 has an invalid length. [ 487.977402][ T9612] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.1716'. [ 490.567564][ T9654] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 490.591557][ T9654] netlink: 16090 bytes leftover after parsing attributes in process `syz.4.1733'. [ 496.597470][ T9721] device syzkaller0 entered promiscuous mode [ 497.056359][ T9715] netlink: 'syz.2.1757': attribute type 1 has an invalid length. [ 497.076576][ T9715] netlink: 16090 bytes leftover after parsing attributes in process `syz.2.1757'. [ 499.423367][ T9737] netlink: 'syz.1.1774': attribute type 1 has an invalid length. [ 499.433481][ T9737] netlink: 16090 bytes leftover after parsing attributes in process `syz.1.1774'. [ 501.520879][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.527572][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 512.872747][ T9859] netlink: 'syz.2.1805': attribute type 10 has an invalid length. [ 512.888342][ T9859] netlink: 55 bytes leftover after parsing attributes in process `syz.2.1805'. [ 514.559137][ T9902] netlink: 'syz.3.1825': attribute type 4 has an invalid length. [ 514.568006][ T9902] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1825'. [ 515.481965][ T9914] netlink: 'syz.4.1828': attribute type 9 has an invalid length. [ 515.517448][ T9914] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.1828'. [ 519.975819][ T9965] netlink: 'syz.0.1849': attribute type 9 has an invalid length. [ 519.994713][ T9965] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.1849'. [ 520.395744][ T9978] netlink: 'syz.1.1864': attribute type 9 has an invalid length. [ 520.527848][ T9978] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.1864'. [ 522.635786][T10009] IPv6: Can't replace route, no match found [ 524.873697][T10057] netlink: 'syz.4.1889': attribute type 2 has an invalid length. [ 525.280253][T10065] netlink: 'syz.3.1891': attribute type 10 has an invalid length. [ 525.298375][T10065] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1891'. [ 525.985527][T10080] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.1897'. [ 526.144235][T10083] netlink: 'syz.1.1899': attribute type 4 has an invalid length. [ 526.163079][T10083] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1899'. [ 529.616132][ T4277] Bluetooth: hci4: Malformed Event: 0x2f [ 531.941094][T10116] netlink: 'syz.0.1914': attribute type 4 has an invalid length. [ 531.960016][T10116] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1914'. [ 532.241460][T10128] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1918'. [ 536.164190][T10158] netlink: 'syz.4.1928': attribute type 4 has an invalid length. [ 536.172493][T10158] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1928'. [ 536.681103][T10161] netlink: 130960 bytes leftover after parsing attributes in process `syz.2.1930'. [ 545.172304][T10229] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1957'. [ 548.495633][T10293] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1982'. [ 550.377658][T10334] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.1998'. [ 555.597227][T10372] netlink: 'syz.0.2021': attribute type 10 has an invalid length. [ 555.742422][T10372] device veth0_vlan left promiscuous mode [ 555.819064][T10372] device veth0_vlan entered promiscuous mode [ 555.889673][T10372] team0: Device veth0_vlan failed to register rx_handler [ 556.115889][T10377] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2011'. [ 561.235416][T10418] netlink: 'syz.4.2027': attribute type 10 has an invalid length. [ 561.425038][T10418] device veth0_vlan left promiscuous mode [ 561.501808][T10418] device veth0_vlan entered promiscuous mode [ 561.552516][T10418] team0: Device veth0_vlan failed to register rx_handler [ 562.421295][T10439] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.2029'. [ 562.963560][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.978589][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.097894][T10447] netlink: 'syz.3.2035': attribute type 10 has an invalid length. [ 563.142256][T10447] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2035'. [ 563.191527][T10447] device dummy0 entered promiscuous mode [ 563.229761][T10447] bridge0: port 2(dummy0) entered blocking state [ 563.264520][T10447] bridge0: port 2(dummy0) entered disabled state [ 563.326090][T10452] netlink: 'syz.1.2037': attribute type 4 has an invalid length. [ 563.347711][T10452] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2037'. [ 563.351548][T10447] bridge0: port 2(dummy0) entered blocking state [ 563.365223][T10447] bridge0: port 2(dummy0) entered forwarding state [ 564.258889][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2044'. [ 564.446747][T10472] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2045'. [ 564.990847][T10482] netlink: 'syz.2.2050': attribute type 10 has an invalid length. [ 567.953941][T10482] device veth0_vlan left promiscuous mode [ 567.969564][T10482] device veth0_vlan entered promiscuous mode [ 568.013115][T10482] team0: Device veth0_vlan failed to register rx_handler [ 568.267833][T10501] netlink: 'syz.4.2054': attribute type 10 has an invalid length. [ 568.293020][T10501] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2054'. [ 568.307802][T10501] device dummy0 entered promiscuous mode [ 568.326367][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 568.344172][T10501] bridge0: port 3(dummy0) entered blocking state [ 568.354820][T10501] bridge0: port 3(dummy0) entered disabled state [ 568.405128][T10501] bridge0: port 3(dummy0) entered blocking state [ 568.412373][T10501] bridge0: port 3(dummy0) entered forwarding state [ 568.423879][T10501] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 568.628645][T10506] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2058'. [ 569.073009][T10522] netlink: 'syz.4.2061': attribute type 4 has an invalid length. [ 569.088100][T10522] netlink: 'syz.4.2061': attribute type 8 has an invalid length. [ 569.096785][T10522] netlink: 109560 bytes leftover after parsing attributes in process `syz.4.2061'. [ 569.099876][T10525] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2062'. [ 569.397064][T10531] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2074'. [ 569.466358][T10532] netlink: 'syz.4.2063': attribute type 4 has an invalid length. [ 569.476640][T10532] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2063'. [ 570.435433][T10536] netlink: 'syz.0.2077': attribute type 3 has an invalid length. [ 570.464049][T10536] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.2077'. [ 570.554139][T10542] netlink: 'syz.2.2067': attribute type 10 has an invalid length. [ 570.572535][T10542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2067'. [ 570.601353][T10542] device dummy0 entered promiscuous mode [ 570.630101][T10542] bridge0: port 3(dummy0) entered blocking state [ 570.673413][T10542] bridge0: port 3(dummy0) entered disabled state [ 570.744217][T10542] bridge0: port 3(dummy0) entered blocking state [ 570.752046][T10542] bridge0: port 3(dummy0) entered forwarding state [ 570.827571][T10546] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2070'. [ 573.042951][T10561] netlink: 'syz.3.2076': attribute type 4 has an invalid length. [ 573.055670][T10561] netlink: 'syz.3.2076': attribute type 8 has an invalid length. [ 573.064748][T10561] netlink: 109560 bytes leftover after parsing attributes in process `syz.3.2076'. [ 573.485498][T10565] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2079'. [ 574.032580][T10577] netlink: 'syz.0.2084': attribute type 10 has an invalid length. [ 574.042697][T10577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2084'. [ 574.059471][T10577] device dummy0 entered promiscuous mode [ 574.071573][T10577] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 574.085603][T10577] bridge0: port 4(dummy0) entered blocking state [ 574.101593][T10577] bridge0: port 4(dummy0) entered disabled state [ 574.146808][T10577] bridge0: port 4(dummy0) entered blocking state [ 574.154609][T10577] bridge0: port 4(dummy0) entered forwarding state [ 574.175027][T10577] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 574.613041][T10581] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2086'. [ 575.650432][T10598] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2093'. [ 575.785178][T10602] netlink: 'syz.1.2094': attribute type 4 has an invalid length. [ 575.799024][T10602] netlink: 'syz.1.2094': attribute type 8 has an invalid length. [ 575.807161][T10602] netlink: 109560 bytes leftover after parsing attributes in process `syz.1.2094'. [ 575.942850][T10606] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2105'. [ 576.432628][T10617] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.2099'. [ 576.523914][T10621] netlink: 'syz.1.2101': attribute type 10 has an invalid length. [ 576.540754][T10621] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2101'. [ 576.556323][T10621] device dummy0 entered promiscuous mode [ 576.577512][T10621] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 576.595981][T10621] bridge0: port 3(dummy0) entered blocking state [ 576.606123][T10621] bridge0: port 3(dummy0) entered disabled state [ 576.653868][T10621] bridge0: port 3(dummy0) entered blocking state [ 576.661741][T10621] bridge0: port 3(dummy0) entered forwarding state [ 576.675659][T10621] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 577.701792][T10626] netlink: 'syz.0.2114': attribute type 10 has an invalid length. [ 577.726938][T10626] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2114'. [ 577.784113][T10626] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 577.865512][T10632] netlink: 'syz.2.2103': attribute type 4 has an invalid length. [ 577.920438][T10632] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2103'. [ 578.292972][T10645] netlink: 'syz.2.2110': attribute type 4 has an invalid length. [ 578.401007][T10645] netlink: 'syz.2.2110': attribute type 8 has an invalid length. [ 578.537307][T10648] netlink: 'syz.3.2112': attribute type 13 has an invalid length. [ 578.561799][T10648] __nla_validate_parse: 2 callbacks suppressed [ 578.561838][T10648] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2112'. [ 578.620853][T10648] erspan0: refused to change device tx_queue_len [ 578.671217][T10648] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 579.690563][T10670] netlink: 'syz.4.2120': attribute type 10 has an invalid length. [ 579.722823][T10670] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2120'. [ 579.751812][T10670] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 579.762390][T10672] netlink: 'syz.0.2122': attribute type 4 has an invalid length. [ 579.795455][T10672] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2122'. [ 579.831182][T10676] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2124'. [ 580.661029][T10688] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2137'. [ 580.686173][T10686] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2128'. [ 581.009766][T10698] netlink: 'syz.0.2129': attribute type 4 has an invalid length. [ 581.034150][T10698] netlink: 'syz.0.2129': attribute type 8 has an invalid length. [ 581.123838][T10698] netlink: 109560 bytes leftover after parsing attributes in process `syz.0.2129'. [ 581.467829][T10702] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2144'. [ 582.907352][T10718] netlink: 'syz.2.2140': attribute type 10 has an invalid length. [ 582.978669][T10718] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2140'. [ 582.988892][T10720] netlink: 'syz.1.2141': attribute type 4 has an invalid length. [ 583.003962][T10720] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2141'. [ 583.405114][T10734] netlink: 'syz.3.2147': attribute type 4 has an invalid length. [ 583.444231][T10734] netlink: 'syz.3.2147': attribute type 8 has an invalid length. [ 584.013838][T10737] __nla_validate_parse: 2 callbacks suppressed [ 584.013880][T10737] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2148'. [ 587.875796][T10767] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2157'. [ 588.691924][T10777] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.2162'. [ 588.714468][T10781] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.2164'. [ 588.812343][T10781] delete_channel: no stack [ 589.021872][T10791] netlink: 'syz.0.2166': attribute type 13 has an invalid length. [ 589.042730][T10791] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2166'. [ 589.063820][T10791] erspan0: refused to change device tx_queue_len [ 589.113013][T10791] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 589.212044][T10798] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.2171'. [ 589.543803][T10806] netlink: 'syz.1.2172': attribute type 4 has an invalid length. [ 589.583042][T10804] netlink: 'syz.0.2173': attribute type 4 has an invalid length. [ 589.598871][T10806] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2172'. [ 589.633286][T10804] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2173'. [ 589.970666][T10819] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.2178'. [ 590.077330][T10820] netlink: 'syz.1.2189': attribute type 4 has an invalid length. [ 590.093428][T10820] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2189'. [ 592.729648][T10854] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.2191'. [ 593.042420][T10860] netlink: 'syz.1.2195': attribute type 4 has an invalid length. [ 593.058351][T10860] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2195'. [ 593.411755][T10871] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.2199'. [ 593.497967][T10878] delete_channel: no stack [ 594.713133][T10901] netlink: 'syz.0.2211': attribute type 4 has an invalid length. [ 594.748723][T10901] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2211'. [ 595.393129][T10918] netlink: 'syz.4.2217': attribute type 13 has an invalid length. [ 595.417020][T10918] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2217'. [ 595.478721][T10921] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.2218'. [ 595.535644][T10926] delete_channel: no stack [ 597.015448][T10918] erspan0: refused to change device tx_queue_len [ 597.021995][T10918] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 597.036707][T10918] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 597.423824][T10937] netlink: 'syz.0.2221': attribute type 29 has an invalid length. [ 597.530968][T10937] netlink: 'syz.0.2221': attribute type 29 has an invalid length. [ 597.744720][T10937] netlink: 'syz.0.2221': attribute type 29 has an invalid length. [ 598.714647][T10954] netlink: 'syz.1.2231': attribute type 13 has an invalid length. [ 598.733580][T10954] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2231'. [ 598.777371][T10954] erspan0: refused to change device tx_queue_len [ 598.797337][T10954] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 598.835831][T10959] netlink: 'syz.0.2233': attribute type 2 has an invalid length. [ 599.058048][T10959] device 0 entered promiscuous mode [ 599.116131][T10962] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.2234'. [ 599.197528][T10962] delete_channel: no stack [ 600.744679][T10996] netlink: 'syz.2.2245': attribute type 13 has an invalid length. [ 600.776467][T10996] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2245'. [ 600.812509][T10996] erspan0: refused to change device tx_queue_len [ 600.834333][T10996] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 602.745161][T11036] netlink: 'syz.0.2262': attribute type 10 has an invalid length. [ 602.914701][T11036] device vxcan1 entered promiscuous mode [ 602.950280][T11036] team0: Device vxcan1 is of different type [ 603.121525][T11046] netlink: 'syz.1.2267': attribute type 29 has an invalid length. [ 603.676703][T11046] netlink: 'syz.1.2267': attribute type 29 has an invalid length. [ 603.721578][T11047] netlink: 'syz.1.2267': attribute type 29 has an invalid length. [ 604.514008][T11074] netlink: 'syz.3.2277': attribute type 4 has an invalid length. [ 604.543759][T11074] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2277'. [ 605.457898][T11091] netlink: 'syz.2.2283': attribute type 29 has an invalid length. [ 605.501576][T11091] netlink: 'syz.2.2283': attribute type 29 has an invalid length. [ 605.639345][T11091] netlink: 'syz.2.2283': attribute type 29 has an invalid length. [ 606.676519][T11115] netlink: 'syz.4.2293': attribute type 4 has an invalid length. [ 606.753533][T11115] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2293'. [ 607.117986][T11131] netlink: 'syz.3.2298': attribute type 29 has an invalid length. [ 607.187386][T11131] netlink: 'syz.3.2298': attribute type 29 has an invalid length. [ 607.257792][T11131] netlink: 'syz.3.2298': attribute type 29 has an invalid length. [ 608.152020][T11153] netlink: 'syz.2.2307': attribute type 4 has an invalid length. [ 608.293376][T11153] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2307'. [ 608.687881][T11170] netlink: 'syz.4.2313': attribute type 29 has an invalid length. [ 608.716825][T11161] netlink: 'syz.1.2314': attribute type 10 has an invalid length. [ 608.981397][T11161] team0: Device vxcan1 is of different type [ 609.291321][T11170] netlink: 'syz.4.2313': attribute type 29 has an invalid length. [ 609.332207][T11177] netlink: 'syz.3.2318': attribute type 2 has an invalid length. [ 609.340930][T11172] netlink: 'syz.4.2313': attribute type 29 has an invalid length. [ 609.768851][T11177] device 0 entered promiscuous mode [ 611.664773][T11220] netlink: 16410 bytes leftover after parsing attributes in process `syz.3.2336'. [ 613.127317][T11248] validate_nla: 3 callbacks suppressed [ 613.127361][T11248] netlink: 'syz.4.2347': attribute type 10 has an invalid length. [ 613.292308][T11248] team0: Device vxcan1 is of different type [ 614.117041][T11268] netlink: 'syz.4.2359': attribute type 2 has an invalid length. [ 614.213857][T11275] netlink: 'syz.0.2354': attribute type 4 has an invalid length. [ 614.256236][T11275] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2354'. [ 614.404660][T11268] device 0 entered promiscuous mode [ 615.364644][T11297] netlink: 'syz.2.2369': attribute type 10 has an invalid length. [ 616.312555][T11297] team0: Device vxcan1 is of different type [ 617.698901][T11356] netlink: 'syz.3.2388': attribute type 10 has an invalid length. [ 617.826050][T11356] team0: Device vxcan1 is of different type [ 618.991007][ T4277] Bluetooth: hci2: unexpected subevent 0x0e length: 150 > 15 [ 619.687634][T11398] netlink: 'syz.1.2403': attribute type 10 has an invalid length. [ 619.831277][T11398] team0: Port device macvlan0 added [ 620.613289][T11418] netlink: 'syz.2.2411': attribute type 2 has an invalid length. [ 620.787773][T11418] device 0 entered promiscuous mode [ 620.797252][T11416] netlink: 'syz.4.2414': attribute type 13 has an invalid length. [ 620.818067][T11416] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2414'. [ 620.866167][T11416] syz_tun: refused to change device tx_queue_len [ 620.874228][T11416] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 622.311327][T11468] netlink: 'syz.2.2431': attribute type 4 has an invalid length. [ 622.326653][T11466] netlink: 'syz.1.2430': attribute type 2 has an invalid length. [ 622.385999][T11468] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2431'. [ 622.754754][T11466] device 0 entered promiscuous mode [ 623.316981][T11476] delete_channel: no stack [ 623.975488][T11504] netlink: 'syz.0.2449': attribute type 2 has an invalid length. [ 624.063284][T11508] netlink: 'syz.2.2448': attribute type 4 has an invalid length. [ 624.150479][T11508] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2448'. [ 624.505655][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.512602][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.614087][T11504] device 1 entered promiscuous mode [ 625.210842][T11524] delete_channel: no stack [ 626.093902][T11560] netlink: 'syz.3.2468': attribute type 4 has an invalid length. [ 626.143647][T11560] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2468'. [ 626.255499][T11563] netlink: 'syz.2.2470': attribute type 2 has an invalid length. [ 626.504415][T11563] device 1 entered promiscuous mode [ 626.693760][T11572] delete_channel: no stack [ 627.161213][T11591] netlink: 'syz.2.2482': attribute type 2 has an invalid length. [ 627.217661][T11591] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2482'. [ 627.880522][T11607] netlink: 'syz.3.2489': attribute type 2 has an invalid length. [ 628.031981][T11607] device 1 entered promiscuous mode [ 628.821753][T11628] netlink: 'syz.3.2497': attribute type 10 has an invalid length. [ 628.981067][T11628] team0: Port device macvlan0 added [ 629.205027][T11634] delete_channel: no stack [ 629.567383][T11643] netlink: 'syz.3.2503': attribute type 2 has an invalid length. [ 629.826398][T11643] device 2 entered promiscuous mode [ 630.762702][T11674] netlink: 'syz.0.2514': attribute type 10 has an invalid length. [ 630.789684][T11671] netlink: 'syz.3.2515': attribute type 4 has an invalid length. [ 630.900603][T11671] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2515'. [ 631.064965][T11674] device macvlan0 entered promiscuous mode [ 631.086777][T11674] team0: Port device macvlan0 added [ 631.794486][T11686] netlink: 'syz.0.2521': attribute type 2 has an invalid length. [ 632.042280][T11686] device 2 entered promiscuous mode [ 633.772585][T11728] delete_channel: no stack [ 633.926555][T11733] netlink: 'syz.3.2540': attribute type 2 has an invalid length. [ 634.267831][T11733] device 3 entered promiscuous mode [ 634.613777][T11751] netlink: 'syz.0.2547': attribute type 29 has an invalid length. [ 634.743224][T11751] netlink: 'syz.0.2547': attribute type 29 has an invalid length. [ 634.835549][T11752] netlink: 'syz.0.2547': attribute type 29 has an invalid length. [ 634.973501][T11763] netlink: 'syz.4.2551': attribute type 4 has an invalid length. [ 635.044026][T11763] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2551'. [ 636.465102][T11787] netlink: 'syz.1.2562': attribute type 2 has an invalid length. [ 636.844998][T11797] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 636.873410][T11787] device 1 entered promiscuous mode [ 637.205219][T11797] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 637.316387][T11805] netlink: 'syz.4.2567': attribute type 4 has an invalid length. [ 637.356328][T11805] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2567'. [ 637.373810][T11801] netlink: 'syz.3.2565': attribute type 29 has an invalid length. [ 638.606069][T11821] netlink: 'syz.3.2575': attribute type 13 has an invalid length. [ 638.628468][T11821] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2575'. [ 638.675641][T11821] syz_tun: refused to change device tx_queue_len [ 638.713126][T11821] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 639.635631][T11842] netlink: 'syz.4.2582': attribute type 2 has an invalid length. [ 639.730352][T11835] netlink: 'syz.3.2581': attribute type 29 has an invalid length. [ 640.000490][T11842] device 1 entered promiscuous mode [ 640.058078][T11835] netlink: 'syz.3.2581': attribute type 29 has an invalid length. [ 642.132419][T11889] tipc: Started in network mode [ 642.137380][T11889] tipc: Node identity 9215a268, cluster identity 4711 [ 642.200183][T11889] tipc: Node number set to 2450891368 [ 643.878684][T11911] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2608'. [ 643.968870][T11911] device hsr_slave_0 left promiscuous mode [ 644.109463][T11911] device hsr_slave_1 left promiscuous mode [ 646.682227][T11945] delete_channel: no stack [ 647.213261][T11966] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 647.239289][T11966] netlink: 55 bytes leftover after parsing attributes in process `syz.1.2631'. [ 655.535254][T12030] delete_channel: no stack [ 656.311702][T12036] netlink: 'syz.3.2656': attribute type 10 has an invalid length. [ 656.385556][T12036] netlink: 55 bytes leftover after parsing attributes in process `syz.3.2656'. [ 657.163270][T12052] netlink: 14 bytes leftover after parsing attributes in process `syz.4.2660'. [ 657.229373][T12052] device hsr_slave_0 left promiscuous mode [ 657.239592][T12052] device hsr_slave_1 left promiscuous mode [ 660.865214][T12072] delete_channel: no stack [ 661.024761][T12080] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2679'. [ 661.113281][T12080] device hsr_slave_0 left promiscuous mode [ 661.149793][T12080] device hsr_slave_1 left promiscuous mode [ 661.836479][T12093] netlink: 'syz.0.2687': attribute type 4 has an invalid length. [ 661.884025][T12093] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2687'. [ 662.661758][T12107] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.2680'. [ 663.105503][T12119] delete_channel: no stack [ 666.044524][T12129] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2688'. [ 666.152143][T12129] device hsr_slave_0 left promiscuous mode [ 666.179436][T12129] device hsr_slave_1 left promiscuous mode [ 666.578825][T12134] netlink: 'syz.2.2691': attribute type 10 has an invalid length. [ 666.632177][T12134] bridge0: port 3(dummy0) entered disabled state [ 666.639192][T12134] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.646697][T12134] bridge0: port 1(bridge_slave_0) entered disabled state [ 666.901811][T12134] bridge0: port 3(dummy0) entered blocking state [ 666.908675][T12134] bridge0: port 3(dummy0) entered forwarding state [ 666.917002][T12134] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.924291][T12134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.931829][T12134] bridge0: port 1(bridge_slave_0) entered blocking state [ 666.939103][T12134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.243683][T12134] team0: Port device bridge0 added [ 671.427584][T12176] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2706'. [ 671.482972][T12176] device hsr_slave_0 left promiscuous mode [ 673.488470][T12176] device hsr_slave_1 left promiscuous mode [ 673.804988][ T4277] Bluetooth: hci3: Malformed Event: 0x13 [ 677.559565][ T4277] Bluetooth: hci1: Malformed Event: 0x13 [ 680.496690][T12271] netlink: 'syz.3.2741': attribute type 10 has an invalid length. [ 680.557273][T12271] bridge0: port 2(dummy0) entered disabled state [ 680.566485][T12271] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.718841][T12271] bridge0: port 2(dummy0) entered blocking state [ 680.726670][T12271] bridge0: port 2(dummy0) entered forwarding state [ 680.737813][T12271] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.746383][T12271] bridge0: port 1(bridge_slave_0) entered forwarding state [ 680.856825][T12271] team0: Port device bridge0 added [ 681.159611][T12287] netlink: 'syz.2.2745': attribute type 21 has an invalid length. [ 681.188773][T12287] netlink: 'syz.2.2745': attribute type 6 has an invalid length. [ 681.247026][T12287] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2745'. [ 681.417334][ T4277] Bluetooth: hci4: Malformed Event: 0x13 [ 685.547769][T12338] netlink: 'syz.3.2765': attribute type 21 has an invalid length. [ 685.584561][T12338] netlink: 'syz.3.2765': attribute type 6 has an invalid length. [ 685.626503][T12338] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2765'. [ 685.840627][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.847392][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.298916][T12384] netlink: 'syz.0.2783': attribute type 21 has an invalid length. [ 687.321031][T12384] netlink: 'syz.0.2783': attribute type 6 has an invalid length. [ 687.341133][T12384] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2783'. [ 689.240409][T12426] netlink: 'syz.4.2797': attribute type 21 has an invalid length. [ 689.275830][T12426] netlink: 'syz.4.2797': attribute type 6 has an invalid length. [ 689.307771][T12426] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2797'. [ 695.220466][T12498] netlink: 'syz.3.2829': attribute type 13 has an invalid length. [ 695.261237][T12498] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2829'. [ 695.426012][T12498] erspan0: refused to change device tx_queue_len [ 696.495306][T12530] device syzkaller0 entered promiscuous mode [ 699.075858][T12558] netlink: 'syz.1.2854': attribute type 5 has an invalid length. [ 703.904455][ T4277] Bluetooth: hci4: unexpected cc 0x1004 length: 12 > 11 [ 707.126477][ T4277] Bluetooth: hci2: unexpected cc 0x1004 length: 12 > 11 [ 707.768809][T12643] netlink: 'syz.4.2888': attribute type 13 has an invalid length. [ 707.834388][T12643] netlink: 172 bytes leftover after parsing attributes in process `syz.4.2888'. [ 707.922778][ T4277] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 707.931103][T12643] erspan0: refused to change device tx_queue_len [ 707.931508][ T4277] Bluetooth: hci4: Injecting HCI hardware error event [ 707.948164][ T4277] Bluetooth: hci4: hardware error 0x00 [ 709.999628][ T4277] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 710.469888][T12682] netlink: 'syz.0.2902': attribute type 13 has an invalid length. [ 710.509998][T12682] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2902'. [ 710.695324][T12682] erspan0: refused to change device tx_queue_len [ 711.203440][ T4277] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 711.212238][ T4277] Bluetooth: hci2: Injecting HCI hardware error event [ 711.221289][T12647] Bluetooth: hci2: hardware error 0x00 [ 713.003613][T12732] netlink: 'syz.0.2924': attribute type 10 has an invalid length. [ 713.077210][T12732] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2924'. [ 713.185552][T12732] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 713.278742][T12647] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 713.411474][T12739] netlink: 'syz.2.2922': attribute type 13 has an invalid length. [ 713.494546][T12739] netlink: 172 bytes leftover after parsing attributes in process `syz.2.2922'. [ 713.660035][T12739] erspan0: refused to change device tx_queue_len [ 718.748630][T12787] netlink: 'syz.1.2942': attribute type 13 has an invalid length. [ 718.777967][T12787] netlink: 172 bytes leftover after parsing attributes in process `syz.1.2942'. [ 718.868604][T12787] erspan0: refused to change device tx_queue_len [ 722.156053][T12810] netlink: 'syz.3.2959': attribute type 13 has an invalid length. [ 722.216163][T12810] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2959'. [ 722.266368][T12810] erspan0: refused to change device tx_queue_len [ 722.388528][T12819] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.2953'. [ 727.385510][T12857] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 727.592227][T12859] netlink: 'syz.3.2969': attribute type 13 has an invalid length. [ 727.612525][T12859] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2969'. [ 727.651035][T12859] erspan0: refused to change device tx_queue_len [ 727.753436][T12868] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.2973'. [ 727.931350][T12647] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6 [ 728.157634][T12880] netlink: 'syz.3.2986': attribute type 13 has an invalid length. [ 728.219304][T12880] netlink: 172 bytes leftover after parsing attributes in process `syz.3.2986'. [ 728.232146][T12880] erspan0: refused to change device tx_queue_len [ 729.712108][T12895] device syzkaller0 entered promiscuous mode [ 730.175361][T12903] netlink: 'syz.4.2996': attribute type 10 has an invalid length. [ 730.195207][T12903] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2996'. [ 730.224231][T12903] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 733.095673][T12911] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.2988'. [ 734.953198][T12967] netlink: 'syz.0.3011': attribute type 4 has an invalid length. [ 735.010078][T12967] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.3011'. [ 735.232108][T12976] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.3012'. [ 738.733676][T13016] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.3026'. [ 738.804148][T13018] netlink: 'syz.3.3029': attribute type 3 has an invalid length. [ 738.848873][T13018] netlink: 42732 bytes leftover after parsing attributes in process `syz.3.3029'. [ 739.340487][T13025] device veth0_vlan left promiscuous mode [ 744.018944][T13062] netlink: 'syz.0.3042': attribute type 10 has an invalid length. [ 744.043267][T13062] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3042'. [ 744.095873][T13062] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 744.461164][T13076] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.3047'. [ 747.282180][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.288786][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.209026][T13203] netlink: 'syz.3.3098': attribute type 10 has an invalid length. [ 763.283606][T13203] team0 (unregistering): Port device team_slave_1 removed [ 763.324163][T13203] team0 (unregistering): Port device macvlan0 removed [ 763.414249][T13203] bridge0: port 2(dummy0) entered disabled state [ 763.421058][T13203] bridge0: port 1(bridge_slave_0) entered disabled state [ 763.477948][T13203] team0 (unregistering): Port device bridge0 removed [ 768.806896][T13274] device veth0_vlan left promiscuous mode [ 772.126945][T13294] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3131'. [ 776.450710][T13336] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3148'. [ 778.154738][T12647] Bluetooth: hci0: unexpected subevent 0x12 length: 150 > 5 [ 778.386818][T13384] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3166'. [ 781.115707][T13397] Ÿë: port 1(veth0_to_team) entered blocking state [ 781.126758][T13397] Ÿë: port 1(veth0_to_team) entered disabled state [ 781.135358][T13397] device veth0_to_team entered promiscuous mode [ 783.511372][T13437] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.3185'. [ 788.595774][T13482] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3200'. [ 791.938535][T13513] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3214'. [ 791.985946][T13513] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3214'. [ 794.882997][T13513] bond0: (slave bond_slave_0): Releasing backup interface [ 794.919293][T13513] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 795.187092][T13526] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3216'. [ 796.617386][T13555] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3222'. [ 799.015462][T13558] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3224'. [ 803.251067][T13603] netlink: 140 bytes leftover after parsing attributes in process `syz.2.3233'. [ 808.689603][T13622] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3246'. [ 808.723604][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.730586][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 811.073014][T13665] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3260'. [ 811.259264][T13665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 811.352915][T13665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 811.443108][T13665] bond0 (unregistering): Released all slaves [ 811.736104][T13672] device syzkaller0 left promiscuous mode [ 812.616987][T13689] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3267'. [ 815.782114][T13707] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3275'. [ 815.985225][T13707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 816.932881][T13707] bond0 (unregistering): Released all slaves [ 817.094225][T13720] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 817.144822][T13720] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 820.346672][T13744] netlink: 140 bytes leftover after parsing attributes in process `syz.1.3285'. [ 820.357780][T13744] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3285'. [ 820.648871][T13744] bond0: (slave bond_slave_0): Releasing backup interface [ 820.724250][T13744] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 821.410653][T13755] device syzkaller0 entered promiscuous mode [ 827.784878][T13815] device syzkaller0 entered promiscuous mode [ 827.935763][T13823] netlink: 'syz.2.3310': attribute type 2 has an invalid length. [ 827.994780][T13818] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3306'. [ 828.231756][T13823] device 2 entered promiscuous mode [ 830.862122][T13840] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 830.921439][T13840] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 831.473607][T13859] netlink: 'syz.1.3326': attribute type 2 has an invalid length. [ 831.635112][T13859] device 2 entered promiscuous mode [ 831.786268][T13864] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3325'. [ 832.544159][T13873] device syzkaller0 entered promiscuous mode [ 835.114759][T13878] netlink: 129384 bytes leftover after parsing attributes in process `syz.4.3343'. [ 837.415649][T13884] netlink: 'syz.0.3342': attribute type 19 has an invalid length. [ 837.423612][T13884] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.3342'. [ 837.579822][T13887] device syzkaller0 entered promiscuous mode [ 837.675931][T13891] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 837.736974][T13891] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 838.193336][T13908] netlink: 'syz.3.3341': attribute type 2 has an invalid length. [ 838.414201][T13908] device 4 entered promiscuous mode [ 838.987177][T13915] netlink: 'syz.4.3346': attribute type 1 has an invalid length. [ 839.304797][T13929] netlink: 'syz.3.3350': attribute type 19 has an invalid length. [ 839.365350][T13929] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.3350'. [ 840.916878][T13945] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 841.122956][T13945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 842.214745][T13975] netlink: 12030 bytes leftover after parsing attributes in process `syz.1.3364'. [ 842.335697][T13983] bridge0: port 3(dummy0) entered disabled state [ 842.342568][T13983] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.350170][T13983] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.499233][T13985] bridge0: port 3(dummy0) entered disabled state [ 842.532274][T13985] bridge0: port 2(bridge_slave_1) entered disabled state [ 842.554891][T13985] device bridge_slave_0 left promiscuous mode [ 842.561723][T13985] bridge0: port 1(bridge_slave_0) entered disabled state [ 842.612910][T13985] team0: Port device bridge0 removed [ 844.044801][T14009] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 844.162501][T14009] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.554519][T14021] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.3381'. [ 845.462851][T14049] netlink: 'syz.0.3393': attribute type 2 has an invalid length. [ 845.725792][T14049] device 3 entered promiscuous mode [ 846.567840][T14068] netlink: 'syz.4.3397': attribute type 19 has an invalid length. [ 846.576245][T14068] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.3397'. [ 850.162455][T14118] bridge0: port 4(dummy0) entered disabled state [ 850.169473][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.178050][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.367102][T14118] bridge0: port 4(dummy0) entered disabled state [ 850.373139][T14124] netlink: 129384 bytes leftover after parsing attributes in process `syz.3.3420'. [ 850.404141][T14118] bridge0: port 3(team0) entered disabled state [ 850.446614][T14118] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.476074][T14118] device bridge_slave_0 left promiscuous mode [ 850.506786][T14118] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.622380][T14132] netlink: 'syz.4.3424': attribute type 2 has an invalid length. [ 850.859346][T14132] device 2 entered promiscuous mode [ 851.559169][T14150] device syzkaller0 entered promiscuous mode [ 851.710116][T14159] netlink: 'syz.1.3432': attribute type 46 has an invalid length. [ 851.764021][T14159] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3432'. [ 854.395127][T14169] bridge0: port 3(dummy0) entered disabled state [ 854.401991][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.409580][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.597523][T14169] bridge0: port 3(dummy0) entered disabled state [ 854.625366][T14169] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.662629][T14169] device bridge_slave_0 left promiscuous mode [ 854.687783][T14169] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.830524][T14182] netlink: 'syz.2.3440': attribute type 2 has an invalid length. [ 854.885556][T14182] device 3 entered promiscuous mode [ 856.027443][T14214] device macsec0 entered promiscuous mode [ 857.010747][T14223] device syzkaller0 entered promiscuous mode [ 858.958861][T14230] netlink: 'syz.3.3457': attribute type 2 has an invalid length. [ 860.972179][T14230] device 5 entered promiscuous mode [ 863.533637][T14286] device syzkaller0 entered promiscuous mode [ 866.068418][T14308] bridge0: port 2(dummy0) entered disabled state [ 866.076733][T14308] device bridge_slave_0 left promiscuous mode [ 866.093777][T14308] bridge0: port 1(bridge_slave_0) entered disabled state [ 867.661385][ T4432] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 868.319075][T14364] netlink: 'syz.4.3507': attribute type 29 has an invalid length. [ 868.460749][T14363] netlink: 'syz.4.3507': attribute type 1 has an invalid length. [ 868.498400][T14363] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.3507'. [ 868.703939][T14364] netlink: 'syz.4.3507': attribute type 29 has an invalid length. [ 870.189774][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.196236][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.195160][T14407] device macsec0 entered promiscuous mode [ 882.014660][T14574] netlink: 'syz.1.3576': attribute type 2 has an invalid length. [ 882.043321][T14574] netlink: 'syz.1.3576': attribute type 8 has an invalid length. [ 882.094265][T14574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3576'. [ 882.382122][T14571] netlink: 'syz.1.3576': attribute type 2 has an invalid length. [ 882.404640][T14571] netlink: 'syz.1.3576': attribute type 8 has an invalid length. [ 882.414837][T14571] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3576'. [ 885.190769][T14625] netlink: 'syz.3.3598': attribute type 2 has an invalid length. [ 885.241125][T14625] netlink: 'syz.3.3598': attribute type 8 has an invalid length. [ 885.307597][T14625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3598'. [ 885.526588][T14628] netlink: 'syz.3.3598': attribute type 2 has an invalid length. [ 885.565141][T14628] netlink: 'syz.3.3598': attribute type 8 has an invalid length. [ 885.627483][T14628] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3598'. [ 886.402692][T14642] device syzkaller0 left promiscuous mode [ 889.861160][T14698] netlink: 'syz.2.3619': attribute type 29 has an invalid length. [ 889.879519][T14697] netlink: 'syz.2.3619': attribute type 1 has an invalid length. [ 889.946464][T14697] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.3619'. [ 890.074049][T14698] netlink: 'syz.2.3619': attribute type 29 has an invalid length. [ 890.935270][T14714] netlink: 'syz.1.3626': attribute type 25 has an invalid length. [ 890.978624][T14714] netlink: 'syz.1.3626': attribute type 29 has an invalid length. [ 891.013624][T14717] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3626'. [ 892.731133][T14749] netlink: 'syz.0.3637': attribute type 1 has an invalid length. [ 892.750807][T14749] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.3637'. [ 892.771890][T14753] netlink: 'syz.0.3637': attribute type 29 has an invalid length. [ 892.807465][T14753] netlink: 'syz.0.3637': attribute type 29 has an invalid length. [ 894.914927][T14783] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3647'. [ 894.932188][T14783] netlink: 105 bytes leftover after parsing attributes in process `syz.2.3647'. [ 895.216376][T14783] netlink: 105 bytes leftover after parsing attributes in process `syz.2.3647'. [ 895.649922][T14799] netlink: 'syz.1.3655': attribute type 1 has an invalid length. [ 895.721607][T14806] netlink: 'syz.1.3655': attribute type 29 has an invalid length. [ 895.748592][T14799] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.3655'. [ 895.775943][T14805] netlink: 'syz.4.3658': attribute type 2 has an invalid length. [ 895.803207][T14805] netlink: 'syz.4.3658': attribute type 8 has an invalid length. [ 895.817493][T14805] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3658'. [ 895.860459][T14806] netlink: 'syz.1.3655': attribute type 29 has an invalid length. [ 896.193941][T14813] netlink: 'syz.1.3662': attribute type 2 has an invalid length. [ 896.376167][T14813] device 3 entered promiscuous mode [ 896.613717][T14825] netlink: 'syz.4.3676': attribute type 2 has an invalid length. [ 896.868238][T14825] device 3 entered promiscuous mode [ 897.196155][T14838] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3669'. [ 897.217841][T14838] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3669'. [ 897.229899][T14838] netlink: 105 bytes leftover after parsing attributes in process `syz.1.3669'. [ 897.473087][T14850] netlink: 'syz.3.3673': attribute type 29 has an invalid length. [ 897.475735][T14843] netlink: 'syz.3.3673': attribute type 1 has an invalid length. [ 897.543786][T14847] netlink: 'syz.0.3674': attribute type 2 has an invalid length. [ 897.553276][T14847] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3674'. [ 897.555625][T14843] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3673'. [ 897.606399][T14854] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3674'. [ 899.356154][T14892] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.3690'. [ 901.684834][T14942] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 901.711960][T14942] dvmrp1: ignored: set checksum disabled [ 901.771700][T14941] validate_nla: 11 callbacks suppressed [ 901.771745][T14941] netlink: 'syz.0.3707': attribute type 2 has an invalid length. [ 901.790175][T14941] netlink: 'syz.0.3707': attribute type 8 has an invalid length. [ 901.813012][T14941] __nla_validate_parse: 2 callbacks suppressed [ 901.813058][T14941] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3707'. [ 901.841408][T14947] netlink: 'syz.0.3707': attribute type 2 has an invalid length. [ 901.852731][T14947] netlink: 'syz.0.3707': attribute type 8 has an invalid length. [ 901.891477][T14947] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3707'. [ 903.626344][T14989] netlink: 'syz.0.3725': attribute type 2 has an invalid length. [ 903.648185][T14989] netlink: 'syz.0.3725': attribute type 8 has an invalid length. [ 903.671531][T14989] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3725'. [ 903.714386][T14992] netlink: 'syz.0.3725': attribute type 2 has an invalid length. [ 903.770432][T14992] netlink: 'syz.0.3725': attribute type 8 has an invalid length. [ 903.827708][T14992] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3725'. [ 903.958249][T14998] netlink: 'syz.2.3728': attribute type 2 has an invalid length. [ 904.106904][T14998] device 4 entered promiscuous mode [ 905.299354][T15030] netlink: 'syz.2.3741': attribute type 10 has an invalid length. [ 905.373436][T15030] team0: Device vxcan1 is of different type [ 905.455642][T15035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3742'. [ 905.477534][T15035] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3742'. [ 905.892791][T15045] device 5 entered promiscuous mode [ 905.905194][T15047] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3744'. [ 906.616973][T15072] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 906.635935][T15072] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 907.026038][T15077] validate_nla: 7 callbacks suppressed [ 907.026083][T15077] netlink: 'syz.0.3756': attribute type 2 has an invalid length. [ 907.082090][T15077] netlink: 'syz.0.3756': attribute type 8 has an invalid length. [ 907.091655][T15077] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3756'. [ 907.107265][T15078] netlink: 'syz.0.3756': attribute type 2 has an invalid length. [ 907.116307][T15078] netlink: 'syz.0.3756': attribute type 8 has an invalid length. [ 907.135209][T15078] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3756'. [ 908.001252][T15090] netlink: 'syz.1.3760': attribute type 25 has an invalid length. [ 908.013456][T15090] netlink: 'syz.1.3760': attribute type 29 has an invalid length. [ 908.033758][T15091] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3760'. [ 909.027828][T15098] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 909.060536][T15098] dvmrp1: ignored: set checksum disabled [ 909.952933][T15114] netlink: 'syz.4.3771': attribute type 2 has an invalid length. [ 909.991970][T15114] netlink: 'syz.4.3771': attribute type 8 has an invalid length. [ 910.020399][T15114] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3771'. [ 910.314254][T15120] netlink: 'syz.4.3771': attribute type 2 has an invalid length. [ 910.332055][T15120] netlink: 'syz.4.3771': attribute type 8 has an invalid length. [ 910.344093][T15120] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3771'. [ 911.015478][T15142] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.3780'. [ 911.462804][T15152] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 911.481205][T15152] dvmrp1: ignored: set checksum disabled [ 912.292174][T15168] netlink: 'syz.0.3787': attribute type 10 has an invalid length. [ 912.401033][T15168] team0: Device vxcan1 is of different type [ 912.628634][T15174] netlink: 'syz.1.3790': attribute type 2 has an invalid length. [ 912.650865][T15174] netlink: 'syz.1.3790': attribute type 8 has an invalid length. [ 912.668680][T15174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3790'. [ 912.723203][T15174] netlink: 'syz.1.3790': attribute type 2 has an invalid length. [ 912.778819][T15174] netlink: 'syz.1.3790': attribute type 8 has an invalid length. [ 912.808364][T15174] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3790'. [ 913.182484][T15191] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 913.242094][T15191] dvmrp1: ignored: set checksum disabled [ 914.374806][T15214] netlink: 'syz.4.3805': attribute type 10 has an invalid length. [ 914.494885][T15214] team0: Device vxcan1 is of different type [ 914.893637][T15221] netlink: 'syz.4.3808': attribute type 2 has an invalid length. [ 914.960303][T15221] netlink: 'syz.4.3808': attribute type 8 has an invalid length. [ 915.012987][T15221] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3808'. [ 915.628296][T15230] netlink: 'syz.4.3808': attribute type 2 has an invalid length. [ 915.649067][T15230] netlink: 'syz.4.3808': attribute type 8 has an invalid length. [ 915.704218][T15230] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3808'. [ 916.143482][T15242] : port 1(syz_tun) entered blocking state [ 916.160344][T15242] : port 1(syz_tun) entered disabled state [ 916.203158][T15242] device syz_tun entered promiscuous mode [ 916.227297][T15245] device syz_tun left promiscuous mode [ 916.258926][T15245] : port 1(syz_tun) entered disabled state [ 917.343731][T15255] netlink: 'syz.2.3819': attribute type 2 has an invalid length. [ 917.381452][T15255] netlink: 'syz.2.3819': attribute type 8 has an invalid length. [ 917.408874][T15255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3819'. [ 919.413843][T15294] device syzkaller0 entered promiscuous mode [ 922.054710][T15319] netlink: 'syz.3.3838': attribute type 10 has an invalid length. [ 922.343941][T15329] netdevsim netdevsim3: Direct firmware load for Ö failed with error -2 [ 922.440501][T15329] netdevsim netdevsim3: Falling back to sysfs fallback for: Ö [ 922.510452][T15332] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 922.544664][T15332] dvmrp1: ignored: set checksum disabled [ 926.626527][T15369] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.3859'. [ 926.943393][T15373] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 926.952006][T15373] dvmrp1: ignored: set checksum disabled [ 927.052068][T15376] netdevsim netdevsim0: Direct firmware load for Ö failed with error -2 [ 927.124310][T15376] netdevsim netdevsim0: Falling back to sysfs fallback for: Ö [ 927.831381][T15403] device syzkaller0 entered promiscuous mode [ 930.682589][T15437] netdevsim netdevsim2: Direct firmware load for Ö failed with error -2 [ 930.691849][T15437] netdevsim netdevsim2: Falling back to sysfs fallback for: Ö [ 930.950705][T15445] : port 1(syz_tun) entered blocking state [ 930.956953][T15445] : port 1(syz_tun) entered disabled state [ 930.973398][T15445] device syz_tun entered promiscuous mode [ 930.993729][T15445] device syz_tun left promiscuous mode [ 931.001831][T15445] : port 1(syz_tun) entered disabled state [ 931.600330][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.606909][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.129958][T15479] netlink: 'syz.2.3898': attribute type 2 has an invalid length. [ 932.326981][T15479] device 6 entered promiscuous mode [ 932.443729][T15486] netlink: 'syz.1.3900': attribute type 2 has an invalid length. [ 932.459972][T15486] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3900'. [ 932.471746][T15486] bridge0: port 3(dummy0) entered disabled state [ 932.530301][T15486] bridge0: port 3(dummy0) entered disabled state [ 932.547521][T15490] netlink: 'syz.1.3900': attribute type 10 has an invalid length. [ 932.565701][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.573472][T15490] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.585522][T15490] team0: Port device bridge_slave_1 added [ 932.747691][T15494] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 932.770753][T15494] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 933.712637][T15525] netlink: 'syz.4.3913': attribute type 2 has an invalid length. [ 933.919301][T15525] device 4 entered promiscuous mode [ 934.062498][T15533] netlink: 'syz.3.3915': attribute type 2 has an invalid length. [ 934.133214][T15533] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3915'. [ 934.768169][T15551] raw_sendmsg: syz.2.3919 forgot to set AF_INET. Fix it! [ 934.799860][T15541] netlink: 'syz.3.3915': attribute type 10 has an invalid length. [ 937.104100][T15587] netlink: 'syz.3.3931': attribute type 13 has an invalid length. [ 937.127287][T15587] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3931'. [ 937.156616][T15587] erspan0: refused to change device tx_queue_len [ 937.191611][T15587] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 937.666288][T15599] netlink: 'syz.4.3936': attribute type 2 has an invalid length. [ 937.699780][T15599] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3936'. [ 937.934914][T15611] netlink: 'syz.3.3941': attribute type 2 has an invalid length. [ 937.989965][T15603] netlink: 'syz.4.3936': attribute type 10 has an invalid length. [ 938.023254][T15603] team0: Port device bridge_slave_1 added [ 938.094465][T15611] device 6 entered promiscuous mode [ 938.347476][T15627] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 938.354042][T15627] dvmrp1: ignored: set checksum disabled [ 938.387589][T15626] netlink: 'syz.3.3945': attribute type 2 has an invalid length. [ 938.432053][T15626] netlink: 'syz.3.3945': attribute type 8 has an invalid length. [ 938.468091][T15626] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3945'. [ 938.710222][T15633] netlink: 'syz.2.3949': attribute type 1 has an invalid length. [ 939.344590][T15654] netlink: 'syz.0.3956': attribute type 2 has an invalid length. [ 939.360064][T15654] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3956'. [ 939.555006][T15660] netlink: 'syz.0.3956': attribute type 10 has an invalid length. [ 939.598983][T15660] team0: Port device bridge_slave_1 added [ 939.639182][T15664] netlink: 212168 bytes leftover after parsing attributes in process `syz.1.3960'. [ 939.823365][T15662] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 939.879061][T15662] dvmrp1: ignored: set checksum disabled [ 940.472539][T15678] netlink: 'syz.0.3962': attribute type 2 has an invalid length. [ 940.528301][T15678] netlink: 'syz.0.3962': attribute type 8 has an invalid length. [ 940.536125][T15678] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3962'. [ 945.320027][T15728] netlink: 'syz.1.3978': attribute type 13 has an invalid length. [ 945.336417][T15728] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3978'. [ 945.364347][T15728] erspan0: refused to change device tx_queue_len [ 945.379410][T15728] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 945.410887][T15722] netlink: 'syz.2.3974': attribute type 2 has an invalid length. [ 945.428954][T15724] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3974'. [ 945.518661][T15722] netlink: 'syz.2.3974': attribute type 10 has an invalid length. [ 945.683561][T15722] team0: Port device bridge_slave_1 added [ 946.133393][T15750] netlink: 'syz.0.3986': attribute type 1 has an invalid length. [ 946.533643][T15760] netlink: 'syz.2.3991': attribute type 29 has an invalid length. [ 946.587950][T15760] netlink: 'syz.2.3991': attribute type 29 has an invalid length. [ 946.603069][T15769] netlink: 'syz.2.3991': attribute type 29 has an invalid length. [ 946.615257][T15770] netlink: 'syz.2.3991': attribute type 29 has an invalid length. [ 946.657033][T15760] netlink: 'syz.2.3991': attribute type 29 has an invalid length. [ 946.734377][T15772] netlink: 'syz.0.3994': attribute type 13 has an invalid length. [ 946.752611][T15772] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3994'. [ 946.789348][T15772] erspan0: refused to change device tx_queue_len [ 946.804248][T15772] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 946.882848][T15776] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 946.905911][T15776] dvmrp1: ignored: set checksum disabled [ 949.344797][T15821] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 949.378305][T15821] dvmrp1: ignored: set checksum disabled [ 949.405500][T15823] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4011'. [ 949.436568][T15823] erspan0: refused to change device tx_queue_len [ 949.504768][T15823] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 950.847207][T15851] validate_nla: 6 callbacks suppressed [ 950.847247][T15851] netlink: 'syz.1.4025': attribute type 29 has an invalid length. [ 950.901792][T15851] netlink: 'syz.1.4025': attribute type 29 has an invalid length. [ 950.944941][T15855] netlink: 'syz.1.4025': attribute type 29 has an invalid length. [ 951.004350][T15851] netlink: 'syz.1.4025': attribute type 29 has an invalid length. [ 951.046565][T15851] netlink: 'syz.1.4025': attribute type 29 has an invalid length. [ 951.944812][T15867] netlink: 'syz.2.4028': attribute type 13 has an invalid length. [ 951.961917][T15867] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4028'. [ 951.987865][T15867] erspan0: refused to change device tx_queue_len [ 951.997767][T15867] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 952.954671][T15891] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.4040'. [ 952.976113][T15893] netlink: 'syz.3.4040': attribute type 10 has an invalid length. [ 953.953507][T15903] netlink: 'syz.0.4044': attribute type 13 has an invalid length. [ 953.994153][T15903] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4044'. [ 954.072536][T15903] erspan0: refused to change device tx_queue_len [ 954.149143][T15903] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 954.779472][T15914] Ÿë: port 1(gretap0) entered blocking state [ 954.789044][T15914] Ÿë: port 1(gretap0) entered disabled state [ 954.823932][T15914] device gretap0 entered promiscuous mode [ 955.036285][T15916] Ÿë: port 2(veth0_to_team) entered blocking state [ 955.138301][T15916] Ÿë: port 2(veth0_to_team) entered disabled state [ 955.155918][T15916] device veth0_to_team entered promiscuous mode [ 955.156772][T15923] netlink: 212168 bytes leftover after parsing attributes in process `syz.3.4050'. [ 955.267272][T15927] netlink: 'syz.3.4050': attribute type 10 has an invalid length. [ 956.609579][T15949] netlink: 'syz.1.4059': attribute type 13 has an invalid length. [ 956.633593][T15949] netlink: 152 bytes leftover after parsing attributes in process `syz.1.4059'. [ 956.651810][T15949] erspan0: refused to change device tx_queue_len [ 956.660799][T15949] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 956.819067][T15957] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4062'. [ 957.313843][T15965] Ÿë: port 1(gretap0) entered blocking state [ 957.347815][T15965] Ÿë: port 1(gretap0) entered disabled state [ 957.452329][T15965] device gretap0 entered promiscuous mode [ 957.570813][T15970] Ÿë: port 2(veth0_to_team) entered blocking state [ 957.584304][T15970] Ÿë: port 2(veth0_to_team) entered disabled state [ 957.611578][T15970] device veth0_to_team entered promiscuous mode [ 957.648971][T15979] netlink: 'syz.4.4071': attribute type 21 has an invalid length. [ 957.667604][T15979] netlink: 'syz.4.4071': attribute type 12 has an invalid length. [ 957.717512][T15979] netlink: 'syz.4.4071': attribute type 13 has an invalid length. [ 957.744460][T15979] netlink: 'syz.4.4071': attribute type 14 has an invalid length. [ 957.781822][T15979] netlink: 'syz.4.4071': attribute type 15 has an invalid length. [ 957.815862][T15979] netlink: 'syz.4.4071': attribute type 16 has an invalid length. [ 957.839883][T15979] netlink: 'syz.4.4071': attribute type 19 has an invalid length. [ 957.858319][T15979] netlink: 'syz.4.4071': attribute type 6 has an invalid length. [ 957.875676][T15979] netlink: 9618 bytes leftover after parsing attributes in process `syz.4.4071'. [ 958.451641][T15995] netlink: 'syz.4.4076': attribute type 1 has an invalid length. [ 959.349547][T16021] Ÿë: port 1(gretap0) entered blocking state [ 959.356043][T16021] Ÿë: port 1(gretap0) entered disabled state [ 959.370546][T16021] device gretap0 entered promiscuous mode [ 959.422367][T16021] Ÿë: port 2(veth0_to_team) entered blocking state [ 959.435562][T16021] Ÿë: port 2(veth0_to_team) entered disabled state [ 959.447398][T16021] device veth0_to_team entered promiscuous mode [ 960.174047][T16042] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4091'. [ 960.900113][T16052] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4105'. [ 961.305688][T16065] netlink: 212168 bytes leftover after parsing attributes in process `syz.2.4099'. [ 963.356678][T16094] validate_nla: 6 callbacks suppressed [ 963.356722][T16094] netlink: 'syz.2.4110': attribute type 2 has an invalid length. [ 963.489138][T16096] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4110'. [ 963.548192][T16102] netlink: 'syz.2.4110': attribute type 10 has an invalid length. [ 964.194609][T16110] netlink: 'syz.2.4114': attribute type 2 has an invalid length. [ 964.834302][T16110] device 7 entered promiscuous mode [ 965.473849][T16126] netlink: 212168 bytes leftover after parsing attributes in process `syz.4.4118'. [ 966.160674][T16136] netlink: 'syz.3.4120': attribute type 7 has an invalid length. [ 966.576177][T16147] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 967.123660][T16157] netlink: 'syz.4.4129': attribute type 2 has an invalid length. [ 967.259442][T16157] device 5 entered promiscuous mode [ 967.962116][T16176] netlink: 'syz.4.4135': attribute type 7 has an invalid length. [ 968.339534][T16183] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4137'. [ 969.495624][T16193] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 969.826388][T16202] netlink: 'syz.2.4143': attribute type 2 has an invalid length. [ 969.874916][T16202] device 8 entered promiscuous mode [ 970.769644][T16225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4152'. [ 971.414665][T16232] netlink: 'syz.3.4154': attribute type 22 has an invalid length. [ 971.434782][T16232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4154'. [ 971.531691][T16235] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 974.384375][T16252] netlink: 'syz.1.4161': attribute type 2 has an invalid length. [ 974.593913][T16252] device 4 entered promiscuous mode [ 974.789135][T16258] netlink: 'syz.2.4163': attribute type 1 has an invalid length. [ 975.141213][T16271] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4165'. [ 975.356212][T16277] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 978.754011][T16305] netlink: 'syz.1.4178': attribute type 2 has an invalid length. [ 978.907818][T16305] device 5 entered promiscuous mode [ 979.076113][T16310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4181'. [ 979.124619][T16314] netlink: 'syz.3.4179': attribute type 1 has an invalid length. [ 979.650303][T16332] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 980.249405][T16350] netlink: 'syz.1.4195': attribute type 2 has an invalid length. [ 980.285143][T16350] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4195'. [ 983.177262][T16364] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4198'. [ 983.560895][T16374] netlink: 'syz.2.4200': attribute type 2 has an invalid length. [ 983.695281][T16374] device 9 entered promiscuous mode [ 983.895438][T16379] netlink: 'syz.1.4199': attribute type 1 has an invalid length. [ 984.398360][T16398] netlink: 'syz.2.4211': attribute type 2 has an invalid length. [ 984.406181][T16398] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4211'. [ 984.769426][T16404] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4213'. [ 984.800915][T16403] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.4214'. [ 986.082465][T16430] netlink: 'syz.0.4220': attribute type 1 has an invalid length. [ 986.824793][T16450] netlink: 'syz.0.4225': attribute type 2 has an invalid length. [ 986.990309][T16450] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4225'. [ 987.560320][T16468] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4233'. [ 987.842782][T16471] netlink: 'syz.3.4235': attribute type 2 has an invalid length. [ 988.387534][T16471] device 7 entered promiscuous mode [ 988.569127][T16476] netlink: 'syz.1.4236': attribute type 1 has an invalid length. [ 989.527002][T16499] netlink: 'syz.4.4242': attribute type 2 has an invalid length. [ 989.537179][T16499] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4242'. [ 990.337058][T16521] netlink: 'syz.2.4252': attribute type 2 has an invalid length. [ 990.544048][T16521] device 10 entered promiscuous mode [ 990.733962][T16525] netlink: 'syz.3.4253': attribute type 1 has an invalid length. [ 991.000734][T16530] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.4254'. [ 992.155312][T16549] Ÿë: port 1(gretap0) entered blocking state [ 992.185910][T16549] Ÿë: port 1(gretap0) entered disabled state [ 992.244420][T16549] device gretap0 entered promiscuous mode [ 992.809210][T16555] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 992.985729][T16561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.026742][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.052851][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.060003][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.077412][T16568] netlink: 'syz.2.4267': attribute type 2 has an invalid length. [ 993.086776][T16561] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.169048][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.283328][T16561] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.340286][T16561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.354836][T16561] netlink: 33 bytes leftover after parsing attributes in process `syz.4.4263'. [ 993.417222][T16568] device 11 entered promiscuous mode [ 994.865224][T16603] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 994.881000][ T4432] wlan1: Trigger new scan to find an IBSS to join [ 995.156641][T16613] netlink: 'syz.0.4282': attribute type 2 has an invalid length. [ 995.265465][T16613] device 4 entered promiscuous mode [ 996.485712][T16639] Ÿë: port 2(gretap0) entered blocking state [ 996.511438][T16639] Ÿë: port 2(gretap0) entered disabled state [ 996.531903][T16639] device gretap0 entered promiscuous mode [ 996.965250][ T4432] wlan1: Trigger new scan to find an IBSS to join [ 997.190821][T16653] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 997.921431][ T4413] wlan1: Trigger new scan to find an IBSS to join [ 997.936914][T16676] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4304'. [ 999.918432][ T4413] wlan1: Trigger new scan to find an IBSS to join [ 1001.928412][T12020] wlan1: Trigger new scan to find an IBSS to join [ 1001.937490][ T4402] wlan1: Trigger new scan to find an IBSS to join [ 1002.873674][T12020] wlan1: Creating new IBSS network, BSSID 56:b0:b8:f7:25:78 [ 1002.915944][ T4430] wlan1: Creating new IBSS network, BSSID 22:af:e4:d1:b8:ab [ 1002.936166][ T4432] ------------[ cut here ]------------ [ 1002.942034][ T4432] WARNING: CPU: 0 PID: 4432 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1002.952201][ T4432] Modules linked in: [ 1002.956136][ T4432] CPU: 0 PID: 4432 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 1002.963868][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1002.974100][ T4432] Workqueue: cfg80211 cfg80211_event_work [ 1002.980023][ T4432] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1002.986239][ T4432] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f [ 1003.005943][ T4432] RSP: 0018:ffffc90004b1fac0 EFLAGS: 00010293 [ 1003.012121][ T4432] RAX: ffffffff89979bd9 RBX: 1ffff92000963f5c RCX: ffff88802e153c00 [ 1003.020192][ T4432] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1003.028258][ T4432] RBP: ffffc90004b1fb70 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 1003.036279][ T4432] R10: dffffc0000000000 R11: fffffbfff2162056 R12: ffff888054b735b8 [ 1003.044345][ T4432] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88802cd28c90 [ 1003.052432][ T4432] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1003.061456][ T4432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1003.068129][ T4432] CR2: 00007fe615d556b8 CR3: 000000005c733000 CR4: 00000000003506f0 [ 1003.076145][ T4432] DR0: 0000200000000300 DR1: 0000000000000b6e DR2: 0000000000000000 [ 1003.084206][ T4432] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1003.092279][ T4432] Call Trace: [ 1003.095597][ T4432] [ 1003.098599][ T4432] ? trace_rdev_return_void+0x240/0x240 [ 1003.104232][ T4432] cfg80211_process_wdev_events+0x359/0x4d0 [ 1003.110213][ T4432] ? process_one_work+0x7b4/0x1160 [ 1003.115370][ T4432] cfg80211_process_rdev_events+0x9d/0x110 [ 1003.121269][ T4432] cfg80211_event_work+0x2b/0x40 [ 1003.126266][ T4432] process_one_work+0x8ab/0x1160 [ 1003.131322][ T4432] ? worker_detach_from_pool+0x240/0x240 [ 1003.137014][ T4432] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1003.142138][ T4432] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1003.147731][ T4432] ? wq_worker_running+0x97/0x190 [ 1003.152862][ T4432] worker_thread+0xaf5/0x12a0 [ 1003.157615][ T4432] kthread+0x29d/0x330 [ 1003.161774][ T4432] ? worker_clr_flags+0x1a0/0x1a0 [ 1003.166843][ T4432] ? kthread_blkcg+0xd0/0xd0 [ 1003.171546][ T4432] ret_from_fork+0x1f/0x30 [ 1003.176035][ T4432] [ 1003.179138][ T4432] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1003.186448][ T4432] CPU: 0 PID: 4432 Comm: kworker/u4:26 Not tainted syzkaller #0 [ 1003.194117][ T4432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1003.204202][ T4432] Workqueue: cfg80211 cfg80211_event_work [ 1003.210062][ T4432] Call Trace: [ 1003.213368][ T4432] [ 1003.216325][ T4432] dump_stack_lvl+0x188/0x24e [ 1003.221044][ T4432] ? memcpy+0x3c/0x60 [ 1003.225063][ T4432] ? show_regs_print_info+0x12/0x12 [ 1003.230298][ T4432] ? load_image+0x410/0x410 [ 1003.234849][ T4432] panic+0x2d3/0x710 [ 1003.238790][ T4432] ? bpf_jit_dump+0xd0/0xd0 [ 1003.243333][ T4432] ? ret_from_fork+0x1f/0x30 [ 1003.247961][ T4432] __warn+0x2f8/0x4f0 [ 1003.251967][ T4432] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1003.257561][ T4432] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1003.263138][ T4432] report_bug+0x2ba/0x4f0 [ 1003.267499][ T4432] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1003.273087][ T4432] handle_bug+0x3a/0x70 [ 1003.277274][ T4432] exc_invalid_op+0x16/0x40 [ 1003.281824][ T4432] asm_exc_invalid_op+0x16/0x20 [ 1003.286712][ T4432] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1003.292917][ T4432] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d0 85 ea f7 0f 0b eb bf e8 c7 85 ea f7 <0f> 0b eb b6 e8 be 85 ea f7 0f 0b e9 82 fd ff ff e8 b2 85 ea f7 0f [ 1003.312574][ T4432] RSP: 0018:ffffc90004b1fac0 EFLAGS: 00010293 [ 1003.318689][ T4432] RAX: ffffffff89979bd9 RBX: 1ffff92000963f5c RCX: ffff88802e153c00 [ 1003.326704][ T4432] RDX: 0000000000000000 RSI: ffffffff8a8c17a0 RDI: ffffffff8adf42e0 [ 1003.334727][ T4432] RBP: ffffc90004b1fb70 R08: ffffffff90b102af R09: 1ffffffff2162055 [ 1003.342748][ T4432] R10: dffffc0000000000 R11: fffffbfff2162056 R12: ffff888054b735b8 [ 1003.350781][ T4432] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88802cd28c90 [ 1003.358884][ T4432] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1003.364492][ T4432] ? trace_rdev_return_void+0x240/0x240 [ 1003.370105][ T4432] cfg80211_process_wdev_events+0x359/0x4d0 [ 1003.376067][ T4432] ? process_one_work+0x7b4/0x1160 [ 1003.381223][ T4432] cfg80211_process_rdev_events+0x9d/0x110 [ 1003.387077][ T4432] cfg80211_event_work+0x2b/0x40 [ 1003.392054][ T4432] process_one_work+0x8ab/0x1160 [ 1003.397132][ T4432] ? worker_detach_from_pool+0x240/0x240 [ 1003.402805][ T4432] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1003.407860][ T4432] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1003.413435][ T4432] ? wq_worker_running+0x97/0x190 [ 1003.418494][ T4432] worker_thread+0xaf5/0x12a0 [ 1003.423224][ T4432] kthread+0x29d/0x330 [ 1003.427321][ T4432] ? worker_clr_flags+0x1a0/0x1a0 [ 1003.432372][ T4432] ? kthread_blkcg+0xd0/0xd0 [ 1003.436984][ T4432] ret_from_fork+0x1f/0x30 [ 1003.441442][ T4432] [ 1003.444623][ T4432] Kernel Offset: disabled [ 1003.449054][ T4432] Rebooting in 86400 seconds..