last executing test programs: 6.894379109s ago: executing program 4 (id=3464): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 6.829688813s ago: executing program 3 (id=3465): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, &(0x7f0000000500)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048811) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 5.527479347s ago: executing program 0 (id=3468): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46a, 0x1, @perf_config_ext={0x6, 0x7fff}, 0x81, 0x3, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c3143, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) socket$kcm(0x23, 0x5, 0x0) socket$kcm(0x29, 0x5, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb010018000000000000004000000040000000020019f9ccd97829570000000000000100000d"], 0x0, 0x5a, 0x0, 0x1}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) close(r0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 5.520900927s ago: executing program 2 (id=3481): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000802000001"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x5, 0x0, 0x0, 0x0, 0x5, 0x62020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x3, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xff, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb0}, 0x2002) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 5.514243858s ago: executing program 3 (id=3483): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 4.988579404s ago: executing program 0 (id=3471): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) 4.988192524s ago: executing program 2 (id=3473): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 4.777889694s ago: executing program 4 (id=3474): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x6, 0xd, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x301002, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f00000002c0)=[{0x30, 0x1, 0x28, 0xffffbfff}, {0x6, 0x1, 0x0, 0x80007}]}) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 4.765511535s ago: executing program 3 (id=3488): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 4.616245352s ago: executing program 1 (id=3476): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r3}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x31) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040842) 2.472537038s ago: executing program 0 (id=3477): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, 0x0, @perf_config_ext={0xf6}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.net/syz1\x00', 0x200002, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8915, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./cgroup/file0\x00', 0xd0939199c36b4d2b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_tracing={0x1a, 0x5, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10f475, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f00000003c0)=@caif, 0x80, 0x0}, 0x0) 2.415780951s ago: executing program 2 (id=3479): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf250c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0x2006f8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5}) ioctl$TUNGETVNETLE(r4, 0x8955, &(0x7f0000000040)) 2.414354291s ago: executing program 1 (id=3492): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) 2.400052482s ago: executing program 4 (id=3480): r0 = socket$kcm(0x15, 0x5, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) write$cgroup_devices(r1, 0x0, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff}, 0x104007, 0xac5d, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x6b, 0x71, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1c, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20040018}, 0x0) sendmsg$inet(r3, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0xff0f}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/195, 0xc3}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x41}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0x38}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) close(r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r4, 0x11}, 0xa) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@ifindex, r4, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, 0x0, 0x0) 2.133601215s ago: executing program 1 (id=3482): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa21, 0x0, 0x498a, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000ea6fffff000000000700000062080000000000001800000000000000000000000000000095000000000000009500000000000000882d499508cc3949c007085b03cd82d93c4bb9ea76f8a3cfcdc155299baf9fad2cdf99953e5d64d422929ebc56eef6d18533aa3f7bd50be29444a1f41e9ab42ed0d202683d1092e17542798735cf96838f9f0fb8c88a2bf249f33eefe34f4cbe38724b3f0f623841818be8f89f762f5f9030f689967983562327da60b41bd62ae05a9a3ac4b7a152ef2267c1e2010000010000000000f9ed75774914adf9be4412d2e38766b5e38a39b3dbb4517c4d18b88384ce9b34d9583e948dd46ce6fd95d4c4c5120853f5fed6c145df5d46285816f36a9be0d141261dbdf0c025536dce29311db03d827d63e0f5c6458ac6b96d26b78693b7d21cafad8c95ab38f95fcbff0a9698232f12d494ccd230f06e226fd105279a3d62d0fa1ef42a4bf51e9593e815a0ef00d7edaa8a2a7f764f951aa412ef6eb6181aae33b8dc0970dae1927d941b"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d4", 0x1a}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000050000000800000003000013040000000f00000000000000010000800700000001000000050000000200000010010000050000000000000003000084010000000800000001000000060000000c00000001000000000000000e00000003000000010000000300000000000011030000000100000001000000110200000005000000070000000000001101000000070000000f0000000000001201000000"], 0x0, 0xb9, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000d8ece2e5b0bb524b60fca5ed0818d409ec0c3e17a28676488c3622c63fd5d4cdecce0ec6d180d5d1f4b0fb09ab3e1c920c26dac49ebc01d36a2cd1723cca826c5c5786547ff757ff3fdfb67b6fed66d82434620eba07353aaeadc8439112f2b6227b7631ec74ae77ae3ce7c18900c7aaa0e87f60176204fd8b3563a23041806a2ed531e31d407fc0", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="01000000000000000200"/27], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc378554, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.131344535s ago: executing program 3 (id=3495): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) socket$kcm(0x2, 0x200000000000001, 0x106) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2000000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, 0x0, 0x0) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0x101d0) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0x101d0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, 0x0, 0x0) syz_clone(0x630c0700, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x12cd) 1.353586604s ago: executing program 2 (id=3484): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000080"], 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x4e}, 0x28) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) socketpair(0x29, 0x80000, 0xffffffff, &(0x7f0000000500)) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f0000000680), &(0x7f0000000700)=r2}, 0x20) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20048811) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x13}, 0x2}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) close(r4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.352282473s ago: executing program 0 (id=3497): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$kcm(0x10, 0x2, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x16, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001418030000120800040043000000a8001600a400014020000500036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/..\x00\x82q\xee !\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) sendmsg$kcm(r2, 0x0, 0x0) perf_event_open(&(0x7f0000000280)={0x2, 0x80, 0x3, 0x6, 0x10, 0x4, 0x0, 0x40, 0x20020, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x4, @perf_bp={&(0x7f0000000240), 0x2}, 0x4, 0xfffffffffffffff7, 0x0, 0x9, 0x400, 0x6, 0x3, 0x0, 0x5, 0x0, 0xf}, 0x0, 0x5, 0xffffffffffffffff, 0x9) socketpair$nbd(0x1, 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x39c}, 0x0) r4 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r4, 0x2405, r1) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000500)={0xffffffffffffffff, 0x101, 0x8}, 0xc) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 1.076057297s ago: executing program 1 (id=3485): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10004, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) socket$kcm(0x21, 0x2, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) socket$kcm(0xa, 0x2, 0x0) socket$kcm(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x81000600, 0x12, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee6888808", 0x0, 0xadf0, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.01005029s ago: executing program 2 (id=3486): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x5}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x0, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x14}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x2c, 0x3, 0x0) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000680)={r1, &(0x7f0000000500)="3bec0529c6ea85d0d1a7fd730261ea67d8d44720e8d35caa69680e3adaff80ecf17ed2b89958cc60037abb945078ea3df0d990b200741e66b2712d5fe0f767233d2f259cceebc08e19edb6f48ee96221aa091579791068fecf6a74fef49727cdee8362489a8159e20680d3fec9d8048cd4b79ca9cba5047afd21726f0186eb6a0137a238a7b014ed6bc9abc07f57e320b345924a7a0d7d76e62aa1e5e5ecf1a68c47b6aab3bd26c1be79159b2b9154eec5239dbffc55a055f7649bd4e878c084568979", &(0x7f0000000600)=""/72}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x4) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002420702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="934300"], 0xfe33) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40841, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) close(r2) openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x22a00, 0x0) 947.064343ms ago: executing program 0 (id=3487): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x58c8, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000500)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2}, 0x94) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r3}, 0x18) 935.583204ms ago: executing program 3 (id=3489): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000001dc0)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @empty}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000000300)=""/127, 0x7f}, {0x0}, {&(0x7f0000001c80)=""/74, 0x4a}], 0x3, &(0x7f0000001d40)=""/99, 0x63}, 0x60) write$cgroup_type(r1, &(0x7f0000000280), 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000200), 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8001, 0x3}, 0x0, 0x0, 0xfffffffc, 0x0, 0xb6eb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r5, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) 923.208645ms ago: executing program 4 (id=3490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x18, 0x7, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0xd2cf, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x18, 0x2, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000007c0)="1400000016000b63d25a73b02886188a33f7cbb4", 0x14}], 0x1}, 0x4044) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x80047437, 0x0) socket$kcm(0x2b, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x8903, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000002c0)=@o_path={0x0, r1, 0x4000, r0}, 0x18) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r0, &(0x7f00000023c0)=ANY=[], 0x66) socketpair(0x1, 0x1, 0x0, &(0x7f00000003c0)) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x80, 0x6, 0x7, 0x6, 0x88, 0x0, 0x5, 0x80000, 0x9, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x7fffffff, 0x4, @perf_config_ext={0x1, 0x8}, 0x104942, 0x14f2a0b1, 0x9, 0x33789c1777e2d315, 0x5, 0xf, 0x5, 0x0, 0x1, 0x0, 0x4}, r5, 0x10, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000200)={0x0, 0x80, 0x81, 0x8, 0x1, 0x46, 0x0, 0x19786347, 0x1804, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x7f, 0x4, @perf_bp={&(0x7f00000001c0), 0x1}, 0xa008, 0xf, 0xc37, 0x4, 0x9, 0xb6, 0xfffa, 0x0, 0x400, 0x0, 0x4}, 0x0, 0x10, 0xffffffffffffffff, 0xa) 407.44876ms ago: executing program 1 (id=3491): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10}, 0x0, 0xca, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xfffffffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000800000008"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xf}, 0x105d30, 0x0, 0x0, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x400000, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x830, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x40000062) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1509, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, @perf_bp={0x0}, 0x0, 0x4, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r5], 0x12) 380.248292ms ago: executing program 0 (id=3493): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000300)=r7) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 313.863035ms ago: executing program 4 (id=3494): r0 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffffffff, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}, 0x0, 0x100000000, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r1, &(0x7f0000000240)='devices.deny\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x2, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x2, 0x0, @multicast2}, 0xf, &(0x7f0000000400)=[{&(0x7f0000000340)='+', 0x1}], 0x1}, 0x900000000000000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000280)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)={r3}) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x31) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="7f0000006a007ffa9e", 0x9}, {&(0x7f00000001c0)="64cabf2dfb58fc021d6b689866f05d4800050088a8ffff0200258f2e4409b8f9e6aaeb88beab23fc2c6726e89b13e2f6e8bc95ee52dcd7298d390938510293bca0b646a3ce904f6e6b788b3204c233e60ddc36024aa400712cfff68aac572a830923ed3c3fac90beecd4521a447ffe975606ab42a207", 0x76}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040842) 13.23155ms ago: executing program 4 (id=3496): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000404000000002e"], 0x0, 0x37}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x13, 0x4, 0xa, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000098"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xc084) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf, 0xfe, 0x0, 0x2, 0x0, 0x0, 0x28002, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0xffff, 0x0, 0x10000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000"], 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x4a, 0x0, 0x1, 0x800, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'veth0_vlan\x00', @random='\x00\x00\x00\x00\x00 '}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000a80)='syz0\x00', 0x200002, 0x0) openat$cgroup_type(r3, 0x0, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, &(0x7f0000000000)) 10.93691ms ago: executing program 3 (id=3498): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x4, 0xf250c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x131}, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000003d25a80", 0x14}], 0x1}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000100)=0x2006f8) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000000)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, 0x0) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8916, &(0x7f0000000040)={'ip6_vti0\x00', @random="02000400"}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r4) socket$kcm(0x2, 0x200000000000006, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, &(0x7f0000000000)={0x5, 0x80, 0x10, 0xfd, 0x0, 0x0, 0x0, 0x1, 0x90, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0xaa32, 0x0, 0xfffffffd, 0x0, 0x5}) ioctl$TUNGETVNETLE(r4, 0x8955, &(0x7f0000000040)) 545.78µs ago: executing program 1 (id=3499): r0 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000000)=0x2) r3 = socket$kcm(0x15, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x84) recvmsg$kcm(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x160) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r4 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r4, &(0x7f00000000c0)={0x0, 0xaa, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x2800) 0s ago: executing program 2 (id=3500): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa21, 0x0, 0x498a, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x22004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x1f00) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x13, 0xa, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d4", 0x1a}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000840)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000009c0000009c000000050000000800000003000013040000000f00000000000000010000800700000001000000050000000200000010010000050000000000000003000084010000000800000001000000060000000c00000001000000000000000e00000003000000010000000300000000000011030000000100000001000000110200000005000000070000000000001101000000070000000f0000000000001201000000"], 0x0, 0xb9, 0x0, 0x1, 0x4}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000700000000000000d8ece2e5b0bb524b60fca5ed0818d409ec0c3e17a28676488c3622c63fd5d4cdecce0ec6d180d5d1f4b0fb09ab3e1c920c26dac49ebc01d36a2cd1723cca826c5c5786547ff757ff3fdfb67b6fed66d82434620eba07353aaeadc8439112f2b6227b7631ec74ae77ae3ce7c18900c7aaa0e87f60176204fd8b3563a23041806a2ed531e31d407fc0", @ANYRES32=0x1, @ANYRES32=0x0, @ANYBLOB="01000000000000000200"/27], 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) recvmsg$unix(r2, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xc378554, '\x00', 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x5}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): 96.889193][ T7224] netlink: 'syz.2.901': attribute type 7 has an invalid length. [ 296.952623][ T7224] netlink: 'syz.2.901': attribute type 7 has an invalid length. [ 297.034738][ T7224] netlink: 198580 bytes leftover after parsing attributes in process `syz.2.901'. [ 298.841204][ T7252] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.851757][ T7252] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.299044][ T7256] device bridge_slave_1 left promiscuous mode [ 299.317965][ T7256] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.733635][ T7256] device bridge_slave_0 left promiscuous mode [ 299.780335][ T7256] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.951497][ T7268] device syzkaller0 entered promiscuous mode [ 300.473261][ T7277] netlink: 'syz.1.916': attribute type 7 has an invalid length. [ 300.532300][ T7277] netlink: 'syz.1.916': attribute type 7 has an invalid length. [ 300.583820][ T7277] netlink: 198580 bytes leftover after parsing attributes in process `syz.1.916'. [ 300.716369][ T7284] device syzkaller0 entered promiscuous mode [ 300.801154][ T7288] bond0: (slave team0): Error: Slave device does not support XDP [ 302.769347][ T7294] netlink: 'syz.1.921': attribute type 9 has an invalid length. [ 302.777283][ T7294] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.921'. [ 303.222227][ T7314] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.233087][ T7314] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.524656][ T7315] device bridge_slave_1 left promiscuous mode [ 303.535113][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.588794][ T7315] device bridge_slave_0 left promiscuous mode [ 303.607837][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.686744][ T7323] netlink: 'syz.2.930': attribute type 10 has an invalid length. [ 303.700425][ T7323] device syz_tun entered promiscuous mode [ 303.724201][ T7323] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 303.960542][ T7327] delete_channel: no stack [ 303.965101][ T7327] delete_channel: no stack [ 304.408498][ T7339] netlink: 'syz.2.935': attribute type 10 has an invalid length. [ 304.655589][ T7342] netlink: 'syz.0.933': attribute type 7 has an invalid length. [ 304.670105][ T7342] netlink: 'syz.0.933': attribute type 7 has an invalid length. [ 304.724517][ T7342] netlink: 198580 bytes leftover after parsing attributes in process `syz.0.933'. [ 305.025871][ T7339] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 305.923247][ T7363] bond0: (slave wlan1): Error: Slave device does not support XDP [ 306.230803][ T7369] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 306.560349][ T7373] delete_channel: no stack [ 306.578345][ T7373] delete_channel: no stack [ 306.825670][ T7377] netlink: 'syz.4.947': attribute type 10 has an invalid length. [ 306.849601][ T7377] device syz_tun entered promiscuous mode [ 307.036355][ T7377] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 307.061268][ T7385] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.068974][ T7385] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.137091][ T7379] device bridge_slave_1 left promiscuous mode [ 307.187898][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.232295][ T7379] device bridge_slave_0 left promiscuous mode [ 307.324086][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.467739][ T7407] netlink: 'syz.4.954': attribute type 10 has an invalid length. [ 308.639861][ T7407] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 308.651075][ T7408] bond0: (slave team0): Error: Slave device does not support XDP [ 309.545150][ T7422] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 310.005186][ T7436] delete_channel: no stack [ 310.086532][ T7436] delete_channel: no stack [ 310.093719][ T7435] netlink: 188 bytes leftover after parsing attributes in process `syz.1.963'. [ 310.171036][ T7435] netlink: 105 bytes leftover after parsing attributes in process `syz.1.963'. [ 310.227065][ T7435] netlink: 105 bytes leftover after parsing attributes in process `syz.1.963'. [ 310.628520][ T7443] netlink: 'syz.3.969': attribute type 3 has an invalid length. [ 310.649652][ T7443] netlink: 42732 bytes leftover after parsing attributes in process `syz.3.969'. [ 310.694029][ T7452] netlink: 'syz.0.971': attribute type 10 has an invalid length. [ 310.958858][ T7452] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.998800][ T7455] bond0: (slave team0): Error: Slave device does not support XDP [ 311.484937][ T7466] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 312.290697][ T7481] netlink: 188 bytes leftover after parsing attributes in process `syz.0.981'. [ 312.316109][ T7481] netlink: 105 bytes leftover after parsing attributes in process `syz.0.981'. [ 312.347293][ T7481] netlink: 105 bytes leftover after parsing attributes in process `syz.0.981'. [ 312.934451][ T7492] device syzkaller0 entered promiscuous mode [ 313.019502][ T7497] netlink: 'syz.3.988': attribute type 10 has an invalid length. [ 313.727942][ T7497] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 313.842097][ T7511] netlink: 'syz.0.990': attribute type 4 has an invalid length. [ 313.854761][ T7511] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.990'. [ 313.867619][ T7487] netlink: 'syz.2.984': attribute type 3 has an invalid length. [ 313.883727][ T7487] netlink: 42775 bytes leftover after parsing attributes in process `syz.2.984'. [ 315.500207][ T7512] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 315.509574][ T7512] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 315.519277][ T7512] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 315.845861][ T7516] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.289170][ T7529] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 316.355292][ T7533] netlink: 188 bytes leftover after parsing attributes in process `syz.4.996'. [ 316.396263][ T7533] netlink: 105 bytes leftover after parsing attributes in process `syz.4.996'. [ 316.418515][ T7533] netlink: 105 bytes leftover after parsing attributes in process `syz.4.996'. [ 317.143806][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.150292][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.609112][ T7550] bond0: (slave wlan1): Error: Slave device does not support XDP [ 318.651221][ T7565] bond0: (slave team0): Error: Slave device does not support XDP [ 319.204736][ T7572] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 320.483537][ T7585] netlink: 'syz.4.1017': attribute type 3 has an invalid length. [ 320.529313][ T7585] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.1017'. [ 320.584286][ T7592] netlink: 'syz.3.1019': attribute type 1 has an invalid length. [ 321.277767][ T7605] bond0: (slave team0): Error: Slave device does not support XDP [ 321.953182][ T7616] bond0: (slave team0): Error: Slave device does not support XDP [ 322.269714][ T7622] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 322.612575][ T7633] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1032'. [ 322.628947][ T7633] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1032'. [ 322.656858][ T7633] netlink: 105 bytes leftover after parsing attributes in process `syz.0.1032'. [ 322.913672][ T7639] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 324.204663][ T7661] bond0: (slave team0): Error: Slave device does not support XDP [ 324.934269][ T7678] netlink: 'syz.1.1052': attribute type 4 has an invalid length. [ 324.963799][ T7678] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1052'. [ 325.607573][ T7682] bond0: (slave team0): Error: Slave device does not support XDP [ 328.046860][ T7720] bond0: (slave team0): Error: Slave device does not support XDP [ 328.563893][ T7732] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 328.710860][ T7740] netlink: 'syz.4.1076': attribute type 1 has an invalid length. [ 328.789161][ T7731] netlink: 'syz.1.1072': attribute type 3 has an invalid length. [ 328.828263][ T7731] netlink: 42732 bytes leftover after parsing attributes in process `syz.1.1072'. [ 332.397577][ T7776] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 332.458260][ T7778] bond0: (slave team0): Error: Slave device does not support XDP [ 333.020061][ T7789] netdevsim netdevsim1: Direct firmware load for failed with error -2 [ 333.028484][ T7789] netdevsim netdevsim1: Falling back to sysfs fallback for: [ 335.811619][ T7829] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 335.889210][ T7832] bond0: (slave team0): Error: Slave device does not support XDP [ 337.247503][ T7862] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1116'. [ 338.403524][ T7884] bond0: (slave team0): Error: Slave device does not support XDP [ 338.677383][ T7891] netlink: 'syz.1.1124': attribute type 4 has an invalid length. [ 338.733147][ T7891] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1124'. [ 338.961454][ T7898] netlink: 'syz.3.1126': attribute type 3 has an invalid length. [ 338.969260][ T7898] netlink: 'syz.3.1126': attribute type 1 has an invalid length. [ 339.009896][ T7898] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1126'. [ 341.752424][ T7933] bond0: (slave team0): Error: Slave device does not support XDP [ 342.062203][ T7943] netlink: 'syz.3.1141': attribute type 4 has an invalid length. [ 342.134199][ T7943] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1141'. [ 342.379126][ T7946] bond0: (slave team0): Error: Slave device does not support XDP [ 343.746243][ T7982] netlink: 'syz.1.1155': attribute type 4 has an invalid length. [ 343.776161][ T7982] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1155'. [ 344.205203][ T7991] bond0: (slave team0): Error: Slave device does not support XDP [ 348.609350][ T8077] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1184'. [ 348.708592][ T8077] bridge_slave_1: default FDB implementation only supports local addresses [ 350.702683][ T8118] netlink: 'syz.2.1205': attribute type 4 has an invalid length. [ 350.849561][ T8118] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1205'. [ 352.850048][ T8151] netdevsim netdevsim2: Direct firmware load for failed with error -2 [ 352.896963][ T8151] netdevsim netdevsim2: Falling back to sysfs fallback for: [ 353.037297][ T8157] netlink: 1047 bytes leftover after parsing attributes in process `syz.0.1211'. [ 353.049370][ T8157] bridge_slave_1: default FDB implementation only supports local addresses [ 353.349039][ T8161] netlink: 'syz.4.1212': attribute type 4 has an invalid length. [ 353.405861][ T8161] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1212'. [ 353.870437][ T8166] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1214'. [ 354.297385][ T8178] netlink: 'syz.0.1218': attribute type 10 has an invalid length. [ 354.422732][ T8178] device veth0_vlan left promiscuous mode [ 354.432328][ T8178] device veth0_vlan entered promiscuous mode [ 354.479689][ T8178] team0: Device veth0_vlan failed to register rx_handler [ 355.461453][ T8199] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1225'. [ 355.512612][ T8203] netlink: 'syz.0.1227': attribute type 4 has an invalid length. [ 355.582316][ T8203] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1227'. [ 356.466842][ T8219] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 357.232064][ T8229] netlink: 'syz.4.1237': attribute type 10 has an invalid length. [ 357.418222][ T8229] bond0: (slave team0): Releasing backup interface [ 357.473696][ T8229] team0 (unregistering): Port device C removed [ 357.492719][ T8229] team0 (unregistering): Port device team_slave_1 removed [ 357.503329][ T8229] team0 (unregistering): Port device geneve1 removed [ 357.921025][ T8248] netlink: 'syz.4.1243': attribute type 4 has an invalid length. [ 357.943667][ T8248] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1243'. [ 358.023734][ T8252] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1244'. [ 358.035237][ T8252] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 358.212731][ T8252] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 358.233753][ T8253] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1244'. [ 359.824628][ T8274] netlink: 'syz.3.1253': attribute type 10 has an invalid length. [ 359.870476][ T8274] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1253'. [ 359.883581][ T8274] device dummy0 entered promiscuous mode [ 359.936164][ T8274] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 360.450419][ T8295] netlink: 'syz.3.1257': attribute type 4 has an invalid length. [ 360.466539][ T8295] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1257'. [ 360.553880][ T8293] netlink: 'syz.0.1254': attribute type 3 has an invalid length. [ 360.573712][ T8293] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.1254'. [ 360.915531][ T8303] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1260'. [ 360.934298][ T8303] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 360.956940][ T8307] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.1260'. [ 360.983347][ T8311] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 361.874069][ T8329] netlink: 'syz.4.1268': attribute type 10 has an invalid length. [ 361.893514][ T8329] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1268'. [ 361.904128][ T8329] device dummy0 entered promiscuous mode [ 361.946288][ T8329] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 362.014994][ T8333] netlink: 'syz.3.1271': attribute type 10 has an invalid length. [ 362.678626][ T8348] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1275'. [ 362.710508][ T8348] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 362.923838][ T8348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.977818][ T8338] netlink: 'syz.3.1273': attribute type 3 has an invalid length. [ 362.996376][ T8338] netlink: 42732 bytes leftover after parsing attributes in process `syz.3.1273'. [ 363.030070][ T8352] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1275'. [ 363.049402][ T8356] netlink: 'syz.2.1280': attribute type 10 has an invalid length. [ 363.429980][ T8356] team0 (unregistering): Port device C removed [ 363.550279][ T8356] team0 (unregistering): Port device team_slave_1 removed [ 363.622901][ T8356] team0 (unregistering): Port device geneve1 removed [ 363.780284][ T8363] netlink: 'syz.3.1283': attribute type 4 has an invalid length. [ 363.788637][ T8363] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1283'. [ 363.879580][ T8365] netlink: 'syz.0.1292': attribute type 3 has an invalid length. [ 363.900046][ T8365] netlink: 42732 bytes leftover after parsing attributes in process `syz.0.1292'. [ 364.099402][ T8372] netlink: 'syz.2.1285': attribute type 10 has an invalid length. [ 364.236180][ T8374] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.1286'. [ 364.300743][ T8374] bridge_slave_1: default FDB implementation only supports local addresses [ 364.667537][ T8392] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1293'. [ 364.677464][ T8392] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 364.818942][ T8392] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1293'. [ 365.181689][ T8401] netlink: 'syz.1.1297': attribute type 10 has an invalid length. [ 366.283759][ T8401] bond0: (slave team0): Releasing backup interface [ 366.344251][ T8401] team0 (unregistering): Port device team_slave_0 removed [ 366.425842][ T8401] team0 (unregistering): Port device team_slave_1 removed [ 366.488655][ T8401] team0 (unregistering): Port device geneve1 removed [ 366.521031][ T8413] netlink: 'syz.4.1300': attribute type 3 has an invalid length. [ 366.530073][ T8413] netlink: 42732 bytes leftover after parsing attributes in process `syz.4.1300'. [ 366.546253][ T8422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 366.578561][ T8421] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 366.896907][ T8435] netlink: 'syz.1.1304': attribute type 4 has an invalid length. [ 366.954711][ T8435] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1304'. [ 367.416863][ T8443] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1308'. [ 367.446290][ T8443] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 367.733625][ T8443] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 367.754723][ T8451] bridge_slave_1: default FDB implementation only supports local addresses [ 368.030062][ T8460] netlink: 'syz.1.1312': attribute type 10 has an invalid length. [ 368.038555][ T8460] __nla_validate_parse: 2 callbacks suppressed [ 368.038665][ T8460] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1312'. [ 368.056326][ T8460] device dummy0 entered promiscuous mode [ 368.086731][ T8460] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 368.820246][ T8464] netlink: 'syz.2.1315': attribute type 3 has an invalid length. [ 368.860009][ T8464] netlink: 42732 bytes leftover after parsing attributes in process `syz.2.1315'. [ 368.931501][ T8471] netlink: 763 bytes leftover after parsing attributes in process `syz.3.1318'. [ 369.914022][ T8488] netlink: 'syz.0.1324': attribute type 4 has an invalid length. [ 369.938640][ T8488] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1324'. [ 370.973854][ T8504] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1337'. [ 370.986709][ T8503] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1328'. [ 371.007506][ T8504] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 371.099608][ T8504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.296982][ T8510] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1337'. [ 371.316250][ T8512] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.1327'. [ 371.332016][ T8512] bridge_slave_1: default FDB implementation only supports local addresses [ 371.774047][ T8519] netlink: 'syz.0.1329': attribute type 10 has an invalid length. [ 371.796958][ T8519] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1329'. [ 371.826807][ T8519] device dummy0 entered promiscuous mode [ 371.909311][ T8519] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 372.387368][ T8531] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1340'. [ 372.427014][ T8529] netlink: 'syz.1.1334': attribute type 10 has an invalid length. [ 372.757542][ T8538] netlink: 'syz.4.1341': attribute type 10 has an invalid length. [ 373.222339][ T8553] netlink: 'syz.3.1344': attribute type 10 has an invalid length. [ 373.369100][ T8553] bond0: (slave team0): Releasing backup interface [ 373.489563][ T8553] team0 (unregistering): Port device C removed [ 373.565573][ T8553] team0 (unregistering): Port device team_slave_1 removed [ 373.575526][ T8553] team0 (unregistering): Port device geneve1 removed [ 374.055646][ T8568] netlink: 'syz.2.1350': attribute type 10 has an invalid length. [ 374.074363][ T8568] __nla_validate_parse: 1 callbacks suppressed [ 374.074382][ T8568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1350'. [ 374.303105][ T8568] device dummy0 entered promiscuous mode [ 374.328643][ T8568] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 374.601773][ T8571] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1351'. [ 375.277005][ T8582] netlink: 'syz.1.1366': attribute type 4 has an invalid length. [ 375.350573][ T8582] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1366'. [ 375.643818][ T8584] netlink: 'syz.4.1355': attribute type 10 has an invalid length. [ 375.682083][ T8586] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1369'. [ 376.358044][ T8596] netlink: 'syz.1.1359': attribute type 4 has an invalid length. [ 376.378952][ T8596] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1359'. [ 377.226911][ T8607] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1367'. [ 377.258728][ T8607] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 377.328291][ T8608] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.1367'. [ 377.988255][ T8629] netlink: 'syz.1.1373': attribute type 29 has an invalid length. [ 378.048131][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.058331][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.096609][ T8623] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.114690][ T8623] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.268749][ T8632] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1375'. [ 378.268974][ T8629] netlink: 'syz.1.1373': attribute type 29 has an invalid length. [ 378.598294][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.604728][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.619113][ T8640] netlink: 'syz.4.1377': attribute type 10 has an invalid length. [ 379.067003][ T8646] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1378'. [ 379.184992][ T8647] netlink: 'syz.0.1389': attribute type 4 has an invalid length. [ 379.264106][ T8647] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1389'. [ 379.398629][ T8651] netlink: 'syz.1.1381': attribute type 10 has an invalid length. [ 379.458289][ T8651] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1381'. [ 379.533225][ T8651] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 380.256973][ T8664] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.1388'. [ 380.779321][ T8676] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.1393'. [ 381.264783][ T8691] netlink: 'syz.0.1404': attribute type 2 has an invalid length. [ 381.390886][ T8686] netlink: 'syz.2.1394': attribute type 4 has an invalid length. [ 381.427162][ T8691] netlink: 119 bytes leftover after parsing attributes in process `syz.0.1404'. [ 381.432687][ T8686] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1394'. [ 381.442256][ T8690] netlink: 'syz.1.1396': attribute type 4 has an invalid length. [ 381.631089][ T8690] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1396'. [ 382.038102][ T8697] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.1398'. [ 382.268013][ T8704] netlink: 'syz.0.1400': attribute type 10 has an invalid length. [ 382.276921][ T8704] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1400'. [ 382.288491][ T8704] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 382.558704][ T8706] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1403'. [ 382.560966][ T8710] netlink: 'syz.1.1401': attribute type 10 has an invalid length. [ 383.551407][ T8729] netlink: 'syz.4.1410': attribute type 4 has an invalid length. [ 383.621758][ T8735] netlink: 'syz.2.1411': attribute type 4 has an invalid length. [ 384.093029][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.149861][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.458698][ T8742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.479908][ T8742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 384.498622][ T8742] batman_adv: batadv0: Removing interface: virt_wifi0 [ 385.046993][ T8758] netlink: 'syz.0.1419': attribute type 10 has an invalid length. [ 385.082552][ T8758] device veth0_vlan left promiscuous mode [ 385.105024][ T8758] device veth0_vlan entered promiscuous mode [ 385.195908][ T8758] team0: Device veth0_vlan failed to register rx_handler [ 385.693251][ T8771] netlink: 'syz.3.1427': attribute type 4 has an invalid length. [ 385.719361][ T8771] __nla_validate_parse: 4 callbacks suppressed [ 385.719379][ T8771] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1427'. [ 385.777434][ T8770] netlink: 'syz.4.1428': attribute type 4 has an invalid length. [ 385.801989][ T8770] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1428'. [ 385.905902][ T8777] netlink: 'syz.0.1429': attribute type 4 has an invalid length. [ 385.955846][ T8777] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1429'. [ 386.646125][ T8792] netlink: 'syz.1.1445': attribute type 4 has an invalid length. [ 386.706673][ T8792] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1445'. [ 386.929734][ T8794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.941115][ T8794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.985963][ T8794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.039543][ T8794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.047873][ T8794] batman_adv: batadv0: Removing interface: virt_wifi0 [ 387.482970][ T8803] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.1438'. [ 387.752893][ T8809] netlink: 'syz.1.1441': attribute type 4 has an invalid length. [ 387.777039][ T8809] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1441'. [ 387.826364][ T8810] device syzkaller0 entered promiscuous mode [ 387.837426][ T8812] netlink: 'syz.4.1443': attribute type 4 has an invalid length. [ 387.849425][ T8812] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1443'. [ 388.422122][ T8832] netlink: 68520 bytes leftover after parsing attributes in process `syz.3.1448'. [ 388.431785][ T4287] Bluetooth: hci1: unexpected subevent 0x0e length: 150 > 15 [ 390.336791][ T8832] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 390.347655][ T8832] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 390.360611][ T8832] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 390.635859][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.656486][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.770640][ T8845] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.820828][ T8845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.850419][ T8845] batman_adv: batadv0: Removing interface: virt_wifi0 [ 390.972404][ T8847] delete_channel: no stack [ 390.977132][ T8847] delete_channel: no stack [ 391.188439][ T8853] netlink: 'syz.1.1455': attribute type 4 has an invalid length. [ 391.194964][ T8855] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 391.222920][ T8853] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1455'. [ 391.235438][ T8855] dvmrp1: ignored: set checksum disabled [ 391.292240][ T8857] netlink: 'syz.0.1457': attribute type 4 has an invalid length. [ 391.302190][ T8857] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1457'. [ 391.626979][ T8864] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.1459'. [ 392.018334][ T8871] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.1464'. [ 392.076682][ T8872] device syzkaller0 entered promiscuous mode [ 392.858869][ T8891] netlink: 'syz.2.1471': attribute type 4 has an invalid length. [ 392.867368][ T8891] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1471'. [ 394.330560][ T8890] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 394.340328][ T8890] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 394.382335][ T8890] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 394.534547][ T8894] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 394.543944][ T8894] dvmrp1: ignored: set checksum disabled [ 394.684925][ T8904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.689280][ T8901] netlink: 'syz.4.1473': attribute type 4 has an invalid length. [ 394.701977][ T8901] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1473'. [ 394.742266][ T8904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.767464][ T8904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 394.825155][ T8896] delete_channel: no stack [ 394.868573][ T8904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 394.895293][ T8904] batman_adv: batadv0: Removing interface: virt_wifi0 [ 395.506314][ T8918] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.1480'. [ 395.898901][ T8925] netlink: 'syz.4.1484': attribute type 10 has an invalid length. [ 395.923631][ T8925] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1484'. [ 395.969263][ T8925] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 396.153915][ T8931] netlink: 'syz.3.1486': attribute type 4 has an invalid length. [ 396.173834][ T8931] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1486'. [ 396.402119][ T8935] netlink: 'syz.4.1487': attribute type 29 has an invalid length. [ 396.473504][ T8933] netlink: 'syz.1.1497': attribute type 7 has an invalid length. [ 396.507980][ T8939] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 396.518251][ T8933] netlink: 191184 bytes leftover after parsing attributes in process `syz.1.1497'. [ 396.529592][ T8939] dvmrp1: ignored: set checksum disabled [ 396.573806][ T8935] netlink: 'syz.4.1487': attribute type 29 has an invalid length. [ 397.100990][ T8953] netlink: 'syz.2.1490': attribute type 4 has an invalid length. [ 397.117420][ T8954] netlink: 'syz.0.1503': attribute type 4 has an invalid length. [ 397.141198][ T8953] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1490'. [ 397.207348][ T8954] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1503'. [ 397.377001][ T8957] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.1494'. [ 397.419382][ T8957] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 397.665723][ T8962] netlink: 68520 bytes leftover after parsing attributes in process `syz.0.1496'. [ 397.676054][ T8949] delete_channel: no stack [ 397.835507][ T8966] netlink: 'syz.3.1498': attribute type 10 has an invalid length. [ 397.874172][ T8966] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1498'. [ 397.896145][ T8966] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 398.339426][ T8978] netlink: 'syz.0.1505': attribute type 4 has an invalid length. [ 398.348379][ T8978] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1505'. [ 398.386042][ T8976] netlink: 'syz.3.1504': attribute type 7 has an invalid length. [ 398.395123][ T8972] netlink: 'syz.4.1502': attribute type 2 has an invalid length. [ 398.410548][ T8972] netlink: 119 bytes leftover after parsing attributes in process `syz.4.1502'. [ 398.412182][ T8976] netlink: 191184 bytes leftover after parsing attributes in process `syz.3.1504'. [ 398.662688][ T8986] netlink: 'syz.2.1507': attribute type 29 has an invalid length. [ 398.674438][ T8985] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1508'. [ 399.686056][ T9002] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 399.815868][ T9004] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 400.066882][ T9013] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 400.667689][ T9028] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 401.350616][ T9045] delete_channel: no stack [ 401.356176][ T9045] delete_channel: no stack [ 401.525267][ T9052] validate_nla: 15 callbacks suppressed [ 401.525346][ T9052] netlink: 'syz.0.1532': attribute type 1 has an invalid length. [ 401.540457][ T9052] __nla_validate_parse: 11 callbacks suppressed [ 401.540486][ T9052] netlink: 112865 bytes leftover after parsing attributes in process `syz.0.1532'. [ 401.752964][ T9055] netlink: 'syz.3.1537': attribute type 4 has an invalid length. [ 401.782121][ T9055] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1537'. [ 401.995950][ T9062] netlink: 68520 bytes leftover after parsing attributes in process `syz.1.1539'. [ 402.378864][ T9073] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 402.383031][ T9075] netlink: 'syz.0.1542': attribute type 29 has an invalid length. [ 402.415934][ T9073] dvmrp1: ignored: set checksum disabled [ 402.507054][ T9075] netlink: 'syz.0.1542': attribute type 29 has an invalid length. [ 402.584129][ T9077] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 402.594335][ T9077] netlink: 'syz.1.1544': attribute type 1 has an invalid length. [ 402.605003][ T9077] netlink: 116376 bytes leftover after parsing attributes in process `syz.1.1544'. [ 402.711878][ T9081] netlink: 'syz.3.1545': attribute type 4 has an invalid length. [ 402.736454][ T9081] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1545'. [ 403.924454][ T9107] delete_channel: no stack [ 403.935475][ T9107] delete_channel: no stack [ 404.308302][ T9120] netlink: 'syz.2.1561': attribute type 29 has an invalid length. [ 404.348365][ T9120] netlink: 'syz.2.1561': attribute type 29 has an invalid length. [ 404.399007][ T9122] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 404.428457][ T9122] dvmrp1: ignored: set checksum disabled [ 404.774187][ T9125] netlink: 'syz.3.1564': attribute type 4 has an invalid length. [ 404.820324][ T9125] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1564'. [ 405.986672][ T9147] delete_channel: no stack [ 405.991595][ T9147] delete_channel: no stack [ 406.181621][ T9152] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 406.285537][ T9152] dvmrp1: ignored: set checksum disabled [ 406.570471][ T9161] validate_nla: 2 callbacks suppressed [ 406.570511][ T9161] netlink: 'syz.0.1581': attribute type 4 has an invalid length. [ 406.673593][ T9161] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1581'. [ 407.195746][ T9179] netlink: 68520 bytes leftover after parsing attributes in process `syz.2.1584'. [ 407.376229][ T9172] netlink: 'syz.4.1586': attribute type 1 has an invalid length. [ 407.421717][ T9172] netlink: 112865 bytes leftover after parsing attributes in process `syz.4.1586'. [ 408.228442][ T9197] netlink: 'syz.4.1594': attribute type 29 has an invalid length. [ 408.348471][ T9197] netlink: 'syz.4.1594': attribute type 29 has an invalid length. [ 408.386694][ T9202] netlink: 'syz.3.1593': attribute type 4 has an invalid length. [ 408.410305][ T9202] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1593'. [ 408.699225][ T9206] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 408.739589][ T9206] dvmrp1: ignored: set checksum disabled [ 408.741620][ T9210] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 408.850609][ T9210] netlink: 'syz.4.1607': attribute type 29 has an invalid length. [ 409.091876][ T9216] netlink: 'syz.0.1609': attribute type 4 has an invalid length. [ 409.160815][ T9216] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1609'. [ 409.288363][ T9225] netlink: 'syz.1.1599': attribute type 29 has an invalid length. [ 409.633012][ T9225] netlink: 'syz.1.1599': attribute type 29 has an invalid length. [ 409.753708][ T9229] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.1602'. [ 410.175831][ T9240] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.1619'. [ 410.370283][ T9245] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1606'. [ 410.665968][ T9250] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 410.690559][ T9250] dvmrp1: ignored: set checksum disabled [ 411.690694][ T9272] validate_nla: 3 callbacks suppressed [ 411.690734][ T9272] netlink: 'syz.0.1618': attribute type 4 has an invalid length. [ 411.872682][ T9272] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1618'. [ 412.075106][ T9277] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.1621'. [ 412.420887][ T9289] netlink: 'syz.4.1624': attribute type 29 has an invalid length. [ 412.426362][ T9286] netlink: 'syz.4.1624': attribute type 1 has an invalid length. [ 412.430131][ T9289] netlink: 'syz.4.1624': attribute type 29 has an invalid length. [ 412.447851][ T9286] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.1624'. [ 412.452577][ T4757] tipc: Subscription rejected, illegal request [ 412.827829][ T9294] netlink: 'syz.2.1628': attribute type 19 has an invalid length. [ 412.838782][ T9294] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.1628'. [ 412.888326][ T9297] device syzkaller0 entered promiscuous mode [ 413.202431][ T9301] netlink: 'syz.2.1630': attribute type 1 has an invalid length. [ 413.234428][ T9301] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.1630'. [ 416.045340][ T9322] netlink: 'syz.3.1636': attribute type 6 has an invalid length. [ 416.979019][ T9343] netlink: 'syz.4.1644': attribute type 19 has an invalid length. [ 417.012302][ T9343] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.1644'. [ 417.259460][ T11] tipc: Subscription rejected, illegal request [ 417.565262][ T9358] netlink: 'syz.2.1650': attribute type 4 has an invalid length. [ 417.635241][ T9358] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1650'. [ 418.536658][ T9374] netlink: 'syz.2.1655': attribute type 1 has an invalid length. [ 418.547714][ T9374] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.1655'. [ 418.578245][ T9374] netlink: 'syz.2.1655': attribute type 29 has an invalid length. [ 418.597655][ T9374] netlink: 'syz.2.1655': attribute type 29 has an invalid length. [ 418.837608][ T9381] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 419.039791][ T9381] dvmrp1: ignored: set checksum disabled [ 419.693354][ T9397] netlink: 'syz.2.1662': attribute type 10 has an invalid length. [ 420.176176][ T5478] tipc: Subscription rejected, illegal request [ 420.295943][ T9406] netlink: 'syz.1.1666': attribute type 4 has an invalid length. [ 420.339955][ T9406] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1666'. [ 420.469819][ T9395] delete_channel: no stack [ 421.103825][ T9419] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 421.121283][ T9419] dvmrp1: ignored: set checksum disabled [ 421.164884][ T9421] device syzkaller0 entered promiscuous mode [ 421.307701][ T9429] netlink: 'syz.0.1673': attribute type 29 has an invalid length. [ 421.335339][ T9424] netlink: 'syz.0.1673': attribute type 1 has an invalid length. [ 421.348560][ T9424] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.1673'. [ 421.375546][ T9429] netlink: 'syz.0.1673': attribute type 29 has an invalid length. [ 424.621946][ T4287] Bluetooth: hci3: unexpected event 0x10 length: 151 > 1 [ 424.623135][ T4277] Bluetooth: hci3: hardware error 0x6f [ 424.837253][ T9463] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 424.843781][ T9463] dvmrp1: ignored: set checksum disabled [ 425.037332][ T9450] delete_channel: no stack [ 425.109729][ T5476] tipc: Subscription rejected, illegal request [ 425.644568][ T9486] device syzkaller0 entered promiscuous mode [ 425.772381][ T9493] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 425.813195][ T9493] dvmrp1: ignored: set checksum disabled [ 426.187837][ T9499] netlink: 'syz.2.1705': attribute type 4 has an invalid length. [ 426.320995][ T9499] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1705'. [ 426.653036][ T4277] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 427.953639][ T9508] netlink: 'syz.0.1706': attribute type 19 has an invalid length. [ 427.979958][ T9508] netlink: 14552 bytes leftover after parsing attributes in process `syz.0.1706'. [ 428.930253][ T9511] delete_channel: no stack [ 429.078573][ T9522] netlink: 'syz.4.1711': attribute type 10 has an invalid length. [ 429.083812][ T5478] tipc: Subscription rejected, illegal request [ 429.688634][ T9534] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 429.786529][ T9534] dvmrp1: ignored: set checksum disabled [ 429.963837][ T9544] netlink: 'syz.0.1720': attribute type 4 has an invalid length. [ 429.978483][ T9544] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1720'. [ 430.839369][ T4277] Bluetooth: hci1: unexpected event 0x10 length: 151 > 1 [ 430.840613][ T4287] Bluetooth: hci1: hardware error 0x6f [ 431.080427][ T9555] dvmrp1: tun_chr_ioctl cmd 1074025672 [ 431.089209][ T5480] tipc: Subscription rejected, illegal request [ 431.110111][ T9555] dvmrp1: ignored: set checksum disabled [ 431.429007][ T4326] tipc: Subscription rejected, illegal request [ 432.155511][ T9581] netlink: 'syz.1.1735': attribute type 10 has an invalid length. [ 432.344562][ T9586] netlink: 'syz.0.1737': attribute type 4 has an invalid length. [ 432.390916][ T9586] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1737'. [ 432.895278][ T4287] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 433.020783][ T4287] Bluetooth: hci0: unexpected event 0x10 length: 151 > 1 [ 433.021983][ T4277] Bluetooth: hci0: hardware error 0x6f [ 433.375667][ T9593] netlink: 'syz.2.1750': attribute type 4 has an invalid length. [ 433.420504][ T9593] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1750'. [ 433.673838][ T4326] tipc: Subscription rejected, illegal request [ 433.865803][ T9603] netlink: 'syz.1.1754': attribute type 4 has an invalid length. [ 433.933108][ T9603] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1754'. [ 434.073402][ T5476] tipc: Subscription rejected, illegal request [ 434.239443][ T9611] netlink: 'syz.3.1746': attribute type 19 has an invalid length. [ 434.260640][ T9611] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.1746'. [ 435.129753][ T4277] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 435.191228][ T9639] netlink: 'syz.0.1755': attribute type 10 has an invalid length. [ 436.182775][ T9639] team0: Device gre0 is of different type [ 436.625280][ T9664] netlink: 'syz.0.1776': attribute type 4 has an invalid length. [ 436.730633][ T9664] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1776'. [ 436.797459][ T9663] netlink: 'syz.1.1764': attribute type 19 has an invalid length. [ 436.807645][ T9663] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.1764'. [ 439.081836][ T9703] netlink: 'syz.3.1782': attribute type 4 has an invalid length. [ 439.141815][ T9703] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1782'. [ 440.337152][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.343685][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.743316][ T9722] netlink: 'syz.2.1787': attribute type 19 has an invalid length. [ 440.747004][ T5462] tipc: Subscription rejected, illegal request [ 440.779080][ T9722] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.1787'. [ 441.020602][ T9737] netlink: 'syz.3.1794': attribute type 3 has an invalid length. [ 441.028413][ T9737] netlink: 'syz.3.1794': attribute type 1 has an invalid length. [ 441.118231][ T9737] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.1794'. [ 441.330023][ T5462] tipc: Subscription rejected, illegal request [ 442.345696][ T9762] netlink: 'syz.4.1803': attribute type 4 has an invalid length. [ 442.505695][ T9762] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1803'. [ 443.322773][ T9781] netlink: 'syz.3.1810': attribute type 19 has an invalid length. [ 443.369891][ T9781] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.1810'. [ 443.627862][ T11] tipc: Subscription rejected, illegal request [ 444.785112][ T9808] netlink: 'syz.3.1822': attribute type 4 has an invalid length. [ 444.846099][ T9808] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1822'. [ 445.025628][ T9813] netlink: 'syz.2.1823': attribute type 4 has an invalid length. [ 445.111994][ T9813] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1823'. [ 446.455680][ T9844] mac80211_hwsim hwsim5 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 446.506042][ T9846] netlink: 'syz.4.1836': attribute type 4 has an invalid length. [ 446.523453][ T9846] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1836'. [ 448.890457][ T5478] wlan1: Trigger new scan to find an IBSS to join [ 448.957394][ T9887] netlink: 'syz.3.1852': attribute type 4 has an invalid length. [ 449.076742][ T9887] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1852'. [ 450.132313][ T9907] netlink: 'syz.1.1871': attribute type 4 has an invalid length. [ 450.140745][ T9907] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1871'. [ 452.868209][ T9959] netlink: 'syz.1.1878': attribute type 4 has an invalid length. [ 452.890982][ T5462] wlan1: Trigger new scan to find an IBSS to join [ 452.908830][ T9959] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1878'. [ 453.439350][ T9967] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 454.811076][ T5462] wlan1: Creating new IBSS network, BSSID 66:4d:c8:ea:5c:00 [ 455.755354][T10001] netlink: 'syz.1.1896': attribute type 4 has an invalid length. [ 455.805664][T10001] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1896'. [ 455.849898][ T4326] wlan1: Trigger new scan to find an IBSS to join [ 456.048963][T10007] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 456.163909][T10008] netlink: 'syz.3.1908': attribute type 4 has an invalid length. [ 456.199100][T10008] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1908'. [ 458.416280][T10040] netlink: 'syz.4.1909': attribute type 2 has an invalid length. [ 458.445400][T10040] netlink: 'syz.4.1909': attribute type 8 has an invalid length. [ 458.500875][T10040] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1909'. [ 458.577559][T10041] netlink: 'syz.4.1909': attribute type 2 has an invalid length. [ 458.649705][T10041] netlink: 'syz.4.1909': attribute type 8 has an invalid length. [ 458.657614][T10041] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1909'. [ 458.698602][T10043] device veth1_macvtap left promiscuous mode [ 458.889829][ T5476] wlan1: Trigger new scan to find an IBSS to join [ 459.115720][T10053] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 459.137118][T10057] netlink: 'syz.0.1914': attribute type 4 has an invalid length. [ 459.227939][T10057] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1914'. [ 459.743702][T10063] netlink: 'syz.4.1915': attribute type 4 has an invalid length. [ 459.800140][T10063] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1915'. [ 459.851436][ T5476] wlan1: Trigger new scan to find an IBSS to join [ 460.121573][T10069] netlink: 'syz.0.1929': attribute type 4 has an invalid length. [ 460.154858][T10069] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1929'. [ 461.861644][ T4757] wlan1: Creating new IBSS network, BSSID f2:e3:7b:99:fa:e4 [ 462.650603][T10111] netlink: 'syz.0.1934': attribute type 4 has an invalid length. [ 462.789984][T10111] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1934'. [ 462.811268][ T5480] wlan1: Trigger new scan to find an IBSS to join [ 464.906537][ T5476] wlan1: Creating new IBSS network, BSSID d6:63:6c:7f:00:2f [ 466.510993][T10153] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 466.795910][T10160] netlink: 'syz.0.1949': attribute type 4 has an invalid length. [ 466.869995][T10160] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1949'. [ 468.733739][T10190] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 468.770153][T10190] netlink: 'syz.1.1971': attribute type 8 has an invalid length. [ 468.839530][T10190] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'. [ 468.936926][T10200] netlink: 'syz.1.1971': attribute type 2 has an invalid length. [ 468.961411][T10200] netlink: 'syz.1.1971': attribute type 8 has an invalid length. [ 468.998183][T10200] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1971'. [ 469.044132][T10199] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 469.593945][T10208] netlink: 'syz.1.1966': attribute type 4 has an invalid length. [ 469.663632][T10208] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1966'. [ 470.827701][T10221] netlink: 'syz.0.1980': attribute type 4 has an invalid length. [ 470.893461][T10221] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1980'. [ 471.297447][T10224] delete_channel: no stack [ 471.986995][T10243] netlink: 'syz.2.1978': attribute type 2 has an invalid length. [ 472.022839][T10243] netlink: 'syz.2.1978': attribute type 8 has an invalid length. [ 472.066758][T10243] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1978'. [ 472.186338][T10248] netlink: 'syz.2.1978': attribute type 2 has an invalid length. [ 472.221040][T10248] netlink: 'syz.2.1978': attribute type 8 has an invalid length. [ 472.277899][T10248] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1978'. [ 472.944238][T10267] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1986'. [ 473.881434][T10284] validate_nla: 1 callbacks suppressed [ 473.881454][T10284] netlink: 'syz.4.1995': attribute type 4 has an invalid length. [ 473.981764][T10284] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1995'. [ 474.591897][T10300] netlink: 'syz.0.1997': attribute type 2 has an invalid length. [ 474.637953][T10300] netlink: 'syz.0.1997': attribute type 8 has an invalid length. [ 474.670982][T10300] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1997'. [ 474.770150][T10298] netlink: 'syz.0.1997': attribute type 2 has an invalid length. [ 474.846090][T10298] netlink: 'syz.0.1997': attribute type 8 has an invalid length. [ 474.859943][T10298] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1997'. [ 474.886187][T10305] netlink: 'syz.3.2001': attribute type 10 has an invalid length. [ 474.904905][T10305] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2001'. [ 475.631630][T10313] netlink: 'syz.3.2004': attribute type 4 has an invalid length. [ 475.671436][T10313] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2004'. [ 476.114889][T10322] netlink: 'syz.4.2007': attribute type 4 has an invalid length. [ 476.154247][T10322] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2007'. [ 476.567493][T10330] device syzkaller0 entered promiscuous mode [ 477.940543][T10358] netlink: 'syz.3.2018': attribute type 4 has an invalid length. [ 477.958201][T10358] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2018'. [ 480.104751][T10357] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 480.140546][T10357] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 480.152737][T10357] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 480.313954][T10364] netlink: 'syz.2.2021': attribute type 4 has an invalid length. [ 480.375727][T10364] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2021'. [ 480.497404][T10359] delete_channel: no stack [ 482.707865][T10393] netlink: 'syz.2.2032': attribute type 4 has an invalid length. [ 482.752801][T10393] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2032'. [ 482.888942][T10394] device syzkaller0 entered promiscuous mode [ 482.904974][T10395] : port 1(veth0_to_team) entered blocking state [ 482.912175][T10395] : port 1(veth0_to_team) entered disabled state [ 482.921463][T10395] device veth0_to_team entered promiscuous mode [ 483.220016][T10403] netlink: 'syz.2.2034': attribute type 4 has an invalid length. [ 483.228871][T10403] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2034'. [ 486.635781][T10432] netlink: 'syz.3.2045': attribute type 4 has an invalid length. [ 486.664294][T10432] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2045'. [ 486.944933][T10440] netlink: 'syz.4.2047': attribute type 4 has an invalid length. [ 486.957711][T10440] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2047'. [ 488.060931][T10450] delete_channel: no stack [ 488.406114][T10466] netlink: 'syz.2.2055': attribute type 10 has an invalid length. [ 488.416129][T10466] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2055'. [ 488.480722][T10454] device syzkaller0 entered promiscuous mode [ 491.014113][T10483] netlink: 'syz.2.2061': attribute type 4 has an invalid length. [ 491.060414][T10483] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2061'. [ 491.108798][T10489] netlink: 'syz.1.2062': attribute type 4 has an invalid length. [ 491.124039][T10489] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2062'. [ 491.548273][T10504] netlink: 'syz.2.2079': attribute type 4 has an invalid length. [ 491.612053][T10504] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2079'. [ 492.048299][T10512] delete_channel: no stack [ 493.346977][T10539] netlink: 'syz.3.2080': attribute type 4 has an invalid length. [ 493.362483][T10539] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2080'. [ 493.381382][T10528] device syzkaller0 entered promiscuous mode [ 493.489953][T10545] netlink: 'syz.0.2082': attribute type 4 has an invalid length. [ 493.509806][T10545] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2082'. [ 493.766876][T10552] netlink: 'syz.2.2094': attribute type 4 has an invalid length. [ 493.778682][T10552] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2094'. [ 496.579900][T10567] delete_channel: no stack [ 496.823700][T10585] netlink: 'syz.2.2096': attribute type 4 has an invalid length. [ 496.849948][T10585] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2096'. [ 497.176959][T10594] : port 1(veth0_to_team) entered blocking state [ 497.207012][T10594] : port 1(veth0_to_team) entered disabled state [ 497.232357][T10594] device veth0_to_team entered promiscuous mode [ 497.430872][T10596] device syzkaller0 entered promiscuous mode [ 499.920362][T10623] netlink: 'syz.1.2109': attribute type 4 has an invalid length. [ 499.928333][T10623] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2109'. [ 500.144274][T10629] netlink: 'syz.3.2114': attribute type 4 has an invalid length. [ 500.160124][T10629] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2114'. [ 500.480530][T10638] : port 1(veth0_to_team) entered blocking state [ 500.487451][T10638] : port 1(veth0_to_team) entered disabled state [ 500.528853][T10638] device veth0_to_team entered promiscuous mode [ 500.604127][T10649] netlink: 'syz.1.2121': attribute type 10 has an invalid length. [ 500.614113][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2121'. [ 500.879158][T10656] device syzkaller0 entered promiscuous mode [ 501.299095][T10667] netlink: 'syz.4.2128': attribute type 4 has an invalid length. [ 501.317571][T10667] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2128'. [ 501.485118][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.491619][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.153133][T10694] device syzkaller0 entered promiscuous mode [ 504.285712][T10702] netlink: 'syz.0.2137': attribute type 10 has an invalid length. [ 504.295926][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2137'. [ 504.309573][T10702] device ipvlan1 entered promiscuous mode [ 504.323645][T10702] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 504.344959][T10705] netlink: 'syz.1.2139': attribute type 10 has an invalid length. [ 504.363278][T10701] : port 1(veth0_to_team) entered blocking state [ 504.372463][T10701] : port 1(veth0_to_team) entered disabled state [ 504.391148][T10701] device veth0_to_team entered promiscuous mode [ 504.396053][T10707] netlink: 'syz.4.2140': attribute type 4 has an invalid length. [ 504.420602][T10707] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2140'. [ 506.932739][T10714] netlink: 'syz.3.2144': attribute type 21 has an invalid length. [ 506.941818][T10718] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2145'. [ 508.171730][T10749] netlink: 'syz.1.2156': attribute type 4 has an invalid length. [ 508.240421][T10749] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2156'. [ 508.692155][T10759] netlink: 'syz.3.2160': attribute type 10 has an invalid length. [ 510.208468][T10773] netlink: 'syz.0.2165': attribute type 21 has an invalid length. [ 511.099717][T10777] delete_channel: no stack [ 511.363311][T10782] netlink: 'syz.4.2171': attribute type 4 has an invalid length. [ 511.385090][T10782] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2171'. [ 511.590123][T10792] netlink: 'syz.2.2174': attribute type 29 has an invalid length. [ 511.660017][T10792] netlink: 'syz.2.2174': attribute type 29 has an invalid length. [ 511.856563][T10796] netlink: 'syz.4.2175': attribute type 10 has an invalid length. [ 512.851231][T10813] netlink: 'syz.2.2181': attribute type 21 has an invalid length. [ 513.152382][T10829] netlink: 'syz.4.2185': attribute type 4 has an invalid length. [ 513.182125][T10829] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2185'. [ 514.094227][T10849] netlink: 'syz.0.2192': attribute type 10 has an invalid length. [ 514.316127][T10853] netlink: 164 bytes leftover after parsing attributes in process `syz.3.2193'. [ 514.378968][T10856] netlink: 'syz.0.2195': attribute type 39 has an invalid length. [ 514.888749][T10862] netlink: 'syz.3.2199': attribute type 4 has an invalid length. [ 514.902383][T10862] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2199'. [ 515.964224][T10891] netlink: 'syz.4.2211': attribute type 4 has an invalid length. [ 515.973194][T10891] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2211'. [ 516.059524][T10893] netlink: 164 bytes leftover after parsing attributes in process `syz.0.2209'. [ 516.697889][T10903] netlink: 'syz.3.2214': attribute type 10 has an invalid length. [ 517.337472][T10906] netlink: 'syz.1.2216': attribute type 13 has an invalid length. [ 517.360085][T10906] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2216'. [ 517.411615][T10906] syz_tun: refused to change device tx_queue_len [ 517.439097][T10906] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 518.123569][T10929] netlink: 'syz.0.2222': attribute type 4 has an invalid length. [ 518.145842][T10929] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2222'. [ 518.248448][T10934] netlink: 'syz.2.2223': attribute type 4 has an invalid length. [ 518.267741][T10934] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2223'. [ 518.391010][T10936] netlink: 164 bytes leftover after parsing attributes in process `syz.1.2224'. [ 519.945105][T10950] device syzkaller0 entered promiscuous mode [ 522.462927][T10966] netlink: 'syz.4.2235': attribute type 29 has an invalid length. [ 522.490487][T10962] device syzkaller0 entered promiscuous mode [ 522.504538][T10966] netlink: 'syz.4.2235': attribute type 29 has an invalid length. [ 522.555006][T10969] netlink: 'syz.4.2235': attribute type 29 has an invalid length. [ 522.776610][T10969] netlink: 'syz.4.2235': attribute type 29 has an invalid length. [ 523.390309][T10981] netlink: 'syz.3.2238': attribute type 4 has an invalid length. [ 523.411162][T10981] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2238'. [ 523.839235][T10989] netlink: 'syz.0.2241': attribute type 4 has an invalid length. [ 523.858560][T10989] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2241'. [ 525.326297][T10971] netlink: 'syz.4.2235': attribute type 29 has an invalid length. [ 525.564357][T10992] netlink: 'syz.4.2242': attribute type 10 has an invalid length. [ 525.586245][T10992] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2242'. [ 525.601127][T10992] device ipvlan1 entered promiscuous mode [ 525.663154][T10992] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 525.792692][T11000] netlink: 'syz.2.2247': attribute type 13 has an invalid length. [ 525.829911][T11000] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2247'. [ 525.896912][T11000] syz_tun: refused to change device tx_queue_len [ 525.950367][T11000] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 526.082931][T11004] netlink: 'syz.3.2250': attribute type 10 has an invalid length. [ 526.383201][T11009] netlink: 'syz.0.2252': attribute type 3 has an invalid length. [ 526.457411][T11010] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x35 [ 526.514000][T11009] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.2252'. [ 526.664989][T11014] netlink: 'syz.1.2254': attribute type 4 has an invalid length. [ 526.730102][T11014] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2254'. [ 526.813342][T11021] device syzkaller0 entered promiscuous mode [ 526.979783][T11027] netlink: 'syz.0.2256': attribute type 29 has an invalid length. [ 527.042829][T11027] netlink: 'syz.0.2256': attribute type 29 has an invalid length. [ 530.134701][T11045] netlink: 'syz.3.2263': attribute type 21 has an invalid length. [ 530.151202][T11045] netlink: 'syz.3.2263': attribute type 12 has an invalid length. [ 530.169878][T11045] netlink: 'syz.3.2263': attribute type 13 has an invalid length. [ 530.207636][T11045] netlink: 'syz.3.2263': attribute type 14 has an invalid length. [ 530.216200][T11045] netlink: 'syz.3.2263': attribute type 15 has an invalid length. [ 530.249675][T11045] netlink: 'syz.3.2263': attribute type 16 has an invalid length. [ 530.271555][T11045] netlink: 'syz.3.2263': attribute type 19 has an invalid length. [ 530.299764][T11045] netlink: 'syz.3.2263': attribute type 6 has an invalid length. [ 530.320952][T11045] netlink: 9618 bytes leftover after parsing attributes in process `syz.3.2263'. [ 530.605288][T11052] netlink: 'syz.4.2264': attribute type 13 has an invalid length. [ 530.650098][T11052] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2264'. [ 530.715644][T11052] syz_tun: refused to change device tx_queue_len [ 530.733148][T11052] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 532.112741][T11078] netlink: 'syz.2.2273': attribute type 4 has an invalid length. [ 532.268585][T11078] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2273'. [ 532.397206][T11081] device syzkaller0 entered promiscuous mode [ 535.925501][T11083] netlink: 'syz.1.2276': attribute type 10 has an invalid length. [ 536.284623][T11093] netlink: 'syz.1.2281': attribute type 10 has an invalid length. [ 537.241529][T11105] netlink: 'syz.0.2282': attribute type 13 has an invalid length. [ 537.269303][T11105] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2282'. [ 537.336616][T11105] syz_tun: refused to change device tx_queue_len [ 537.365738][T11105] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 537.971102][T11117] delete_channel: no stack [ 538.898182][T11133] netlink: 'syz.2.2293': attribute type 21 has an invalid length. [ 538.929315][T11133] netlink: 'syz.2.2293': attribute type 12 has an invalid length. [ 538.948045][T11133] netlink: 'syz.2.2293': attribute type 13 has an invalid length. [ 538.961353][T11133] netlink: 'syz.2.2293': attribute type 14 has an invalid length. [ 538.998913][T11133] netlink: 'syz.2.2293': attribute type 15 has an invalid length. [ 539.031476][T11133] netlink: 'syz.2.2293': attribute type 16 has an invalid length. [ 539.050164][T11133] netlink: 'syz.2.2293': attribute type 19 has an invalid length. [ 539.096498][T11133] netlink: 9618 bytes leftover after parsing attributes in process `syz.2.2293'. [ 540.039301][T11150] delete_channel: no stack [ 540.402450][T11163] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2303'. [ 543.286745][T11213] validate_nla: 2 callbacks suppressed [ 543.286785][T11213] netlink: 'syz.3.2322': attribute type 13 has an invalid length. [ 543.304045][T11213] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2322'. [ 543.354105][T11213] syz_tun: refused to change device tx_queue_len [ 543.375342][T11213] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 543.425301][T11224] netlink: 'syz.0.2334': attribute type 4 has an invalid length. [ 543.475990][T11224] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2334'. [ 544.258359][T11240] netlink: 'syz.0.2343': attribute type 4 has an invalid length. [ 544.354872][T11240] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2343'. [ 545.117914][T11249] netlink: 'syz.0.2337': attribute type 10 has an invalid length. [ 545.293167][T11249] team0: Device wg1 is of different type [ 545.375901][T11258] netlink: 'syz.3.2340': attribute type 13 has an invalid length. [ 545.398545][T11258] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2340'. [ 545.478420][T11258] syz_tun: refused to change device tx_queue_len [ 545.511176][T11258] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 546.189925][T11270] netlink: 'syz.2.2355': attribute type 13 has an invalid length. [ 546.219854][T11270] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2355'. [ 546.252496][T11270] syz_tun: refused to change device tx_queue_len [ 546.279851][T11270] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 546.631834][T11286] device syzkaller0 entered promiscuous mode [ 549.489911][T11308] netlink: 'syz.4.2356': attribute type 10 has an invalid length. [ 549.692933][T11327] netlink: 'syz.3.2362': attribute type 4 has an invalid length. [ 549.843232][T11328] netlink: 'syz.4.2363': attribute type 13 has an invalid length. [ 549.879922][T11328] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2363'. [ 549.956613][T11328] syz_tun: refused to change device tx_queue_len [ 549.980698][T11328] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 550.188224][T11335] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2365'. [ 550.758540][T11351] device syzkaller0 entered promiscuous mode [ 550.798687][T11360] netlink: 'syz.2.2375': attribute type 4 has an invalid length. [ 553.377455][T11374] netlink: 'syz.2.2379': attribute type 13 has an invalid length. [ 553.385606][T11374] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2379'. [ 553.396402][T11374] syz_tun: refused to change device tx_queue_len [ 553.415193][T11374] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 554.512456][T11397] netlink: 'syz.0.2387': attribute type 4 has an invalid length. [ 555.491128][T11412] device syzkaller0 entered promiscuous mode [ 558.342169][T11442] netlink: 'syz.0.2400': attribute type 4 has an invalid length. [ 558.388161][T11442] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2400'. [ 560.681299][T11479] netlink: 'syz.2.2414': attribute type 10 has an invalid length. [ 561.197797][T11494] netlink: 'syz.3.2418': attribute type 4 has an invalid length. [ 561.232910][T11494] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2418'. [ 562.916600][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.923111][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.262135][T11538] netlink: 'syz.0.2432': attribute type 4 has an invalid length. [ 563.317838][T11538] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2432'. [ 564.405958][T11559] netlink: 'syz.2.2437': attribute type 4 has an invalid length. [ 564.492672][T11559] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2437'. [ 567.063406][T11573] netlink: 5427 bytes leftover after parsing attributes in process `syz.4.2443'. [ 567.145133][T11573] netlink: 52477 bytes leftover after parsing attributes in process `syz.4.2443'. [ 567.174259][T11573] netlink: 71676 bytes leftover after parsing attributes in process `syz.4.2443'. [ 567.728496][T11581] netlink: 'syz.0.2444': attribute type 4 has an invalid length. [ 567.760003][T11581] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2444'. [ 568.237547][T11594] netlink: 'syz.3.2449': attribute type 9 has an invalid length. [ 568.284468][T11594] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2449'. [ 568.440090][T11595] netlink: 'syz.2.2450': attribute type 10 has an invalid length. [ 569.271030][T11606] device syzkaller0 entered promiscuous mode [ 572.179877][T11631] netlink: 'syz.0.2460': attribute type 10 has an invalid length. [ 572.209135][T11631] team0: Device gre0 is of different type [ 572.351368][T11643] netlink: 'syz.4.2463': attribute type 9 has an invalid length. [ 572.360950][T11643] netlink: 61951 bytes leftover after parsing attributes in process `syz.4.2463'. [ 572.384587][T11646] netlink: 'syz.3.2464': attribute type 4 has an invalid length. [ 572.423317][T11646] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2464'. [ 572.954329][T11652] netlink: 'syz.4.2467': attribute type 2 has an invalid length. [ 572.970144][T11652] netlink: 'syz.4.2467': attribute type 3 has an invalid length. [ 572.978299][T11652] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2467'. [ 573.081276][T11663] netlink: 5427 bytes leftover after parsing attributes in process `syz.3.2470'. [ 573.112061][T11663] netlink: 52477 bytes leftover after parsing attributes in process `syz.3.2470'. [ 573.134753][T11663] netlink: 71676 bytes leftover after parsing attributes in process `syz.3.2470'. [ 573.693481][T11676] device syzkaller0 entered promiscuous mode [ 577.565441][T11689] netlink: 'syz.1.2479': attribute type 9 has an invalid length. [ 577.575728][T11689] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.2479'. [ 577.830898][T11697] netlink: 'syz.0.2483': attribute type 4 has an invalid length. [ 577.846820][T11697] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2483'. [ 577.862000][T11699] netlink: 5427 bytes leftover after parsing attributes in process `syz.1.2484'. [ 577.900305][T11699] netlink: 52477 bytes leftover after parsing attributes in process `syz.1.2484'. [ 577.990999][T11699] netlink: 71676 bytes leftover after parsing attributes in process `syz.1.2484'. [ 578.795291][T11713] netlink: 'syz.0.2488': attribute type 3 has an invalid length. [ 578.848142][T11713] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2488'. [ 579.132466][T11731] device syzkaller0 entered promiscuous mode [ 579.166909][T11736] netlink: 'syz.0.2498': attribute type 2 has an invalid length. [ 579.191436][T11736] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2498'. [ 579.479301][T11742] netlink: 'syz.3.2499': attribute type 4 has an invalid length. [ 579.540127][T11742] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2499'. [ 579.824961][T11748] netlink: 'syz.4.2500': attribute type 4 has an invalid length. [ 579.869888][T11748] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2500'. [ 582.266051][T11746] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 582.269701][T11751] netlink: 5427 bytes leftover after parsing attributes in process `syz.0.2502'. [ 582.275760][T11746] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 582.295956][T11746] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 582.947401][T11763] device syzkaller0 entered promiscuous mode [ 584.033968][T11784] netlink: 'syz.0.2513': attribute type 16 has an invalid length. [ 584.043129][T11784] __nla_validate_parse: 2 callbacks suppressed [ 584.043165][T11784] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2513'. [ 584.457571][T11790] netlink: 'syz.2.2515': attribute type 4 has an invalid length. [ 584.466228][T11790] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2515'. [ 585.929491][T11786] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2514'. [ 585.940114][T11789] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 585.949779][T11789] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 585.959366][T11789] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 586.229648][T11795] netlink: 'syz.0.2529': attribute type 12 has an invalid length. [ 586.241615][T11795] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2529'. [ 587.561068][T11824] netlink: 'syz.2.2530': attribute type 4 has an invalid length. [ 587.645657][T11824] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2530'. [ 588.041868][T11830] device syzkaller0 entered promiscuous mode [ 588.052548][T11831] : port 1(bond0) entered blocking state [ 588.060490][T11831] : port 1(bond0) entered disabled state [ 588.109083][T11831] device bond0 entered promiscuous mode [ 588.150641][T11831] device bond_slave_1 entered promiscuous mode [ 588.179309][T11831] device team0 entered promiscuous mode [ 588.195071][T11831] device team_slave_0 entered promiscuous mode [ 588.220616][T11831] device team_slave_1 entered promiscuous mode [ 588.236040][T11831] device geneve1 entered promiscuous mode [ 588.261610][T11831] device wlan1 entered promiscuous mode [ 588.286689][T11839] netlink: 'syz.4.2532': attribute type 3 has an invalid length. [ 588.313232][T11839] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2532'. [ 590.530486][T11846] netlink: 'syz.1.2534': attribute type 12 has an invalid length. [ 590.538621][T11846] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2534'. [ 590.884893][T11854] device syzkaller0 entered promiscuous mode [ 593.463937][T11869] netlink: 'syz.2.2544': attribute type 4 has an invalid length. [ 593.526418][T11869] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2544'. [ 595.112906][T11896] : port 1(bond0) entered blocking state [ 595.120189][T11896] : port 1(bond0) entered disabled state [ 595.129318][T11896] device bond0 entered promiscuous mode [ 595.136185][T11896] device bond_slave_0 entered promiscuous mode [ 595.144727][T11896] device bond_slave_1 entered promiscuous mode [ 595.152433][T11896] device wlan1 entered promiscuous mode [ 595.190007][T11892] device syzkaller0 entered promiscuous mode [ 595.213172][T11890] netdevsim netdevsim0: Direct firmware load for .net/syz1 failed with error -2 [ 595.251964][T11890] netdevsim netdevsim0: Falling back to sysfs fallback for: .net/syz1 [ 597.519525][T11908] netlink: 'syz.3.2562': attribute type 16 has an invalid length. [ 597.529997][T11908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2562'. [ 597.605253][T11913] netlink: 'syz.4.2563': attribute type 12 has an invalid length. [ 597.618964][T11913] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2563'. [ 597.821821][T11915] netlink: 'syz.3.2566': attribute type 4 has an invalid length. [ 597.835197][T11919] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2565'. [ 597.850106][T11915] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2566'. [ 597.887959][T11923] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2567'. [ 597.927906][T11923] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2567'. [ 597.942978][T11923] A link change request failed with some changes committed already. Interface Q6`Ҙ may have been left with an inconsistent configuration, please check. [ 598.115733][T11931] netlink: 10 bytes leftover after parsing attributes in process `syz.3.2570'. [ 598.455868][T11943] netlink: 'syz.1.2576': attribute type 16 has an invalid length. [ 598.472682][T11943] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2576'. [ 598.594834][T11945] device syzkaller0 entered promiscuous mode [ 598.880443][T11949] netlink: 'syz.2.2579': attribute type 12 has an invalid length. [ 598.909381][T11949] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2579'. [ 598.933436][T11951] netdevsim netdevsim1: Direct firmware load for .net/syz1 failed with error -2 [ 598.963749][T11951] netdevsim netdevsim1: Falling back to sysfs fallback for: .net/syz1 [ 601.423134][T11972] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2586'. [ 601.486642][T11972] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 601.612523][T11972] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 601.716648][T11972] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 602.326530][T11993] : port 1(bond0) entered blocking state [ 602.462250][T11993] : port 1(bond0) entered disabled state [ 602.781508][T11993] device bond0 entered promiscuous mode [ 602.800380][T11993] device bond_slave_1 entered promiscuous mode [ 602.822494][T11993] device wlan1 entered promiscuous mode [ 602.858584][T11999] netlink: 'syz.2.2597': attribute type 4 has an invalid length. [ 602.900206][T11999] __nla_validate_parse: 3 callbacks suppressed [ 602.900276][T11999] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2597'. [ 603.012897][T12001] netlink: 'syz.0.2596': attribute type 2 has an invalid length. [ 603.079951][T12001] netlink: 'syz.0.2596': attribute type 8 has an invalid length. [ 603.087828][T12001] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2596'. [ 604.486768][T12042] : port 1(bond0) entered blocking state [ 604.504628][T12042] : port 1(bond0) entered disabled state [ 604.607585][T12042] device bond0 entered promiscuous mode [ 604.636277][T12042] device bond_slave_1 entered promiscuous mode [ 604.666570][T12042] device wlan1 entered promiscuous mode [ 605.931667][T12065] netlink: 'syz.4.2620': attribute type 4 has an invalid length. [ 605.986943][T12065] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2620'. [ 606.304244][T12077] netdevsim netdevsim4: Direct firmware load for .net/syz1 failed with error -2 [ 606.314268][T12077] netdevsim netdevsim4: Falling back to sysfs fallback for: .net/syz1 [ 606.471025][T12085] : port 1(bond0) entered blocking state [ 606.481383][T12085] : port 1(bond0) entered disabled state [ 606.526206][T12085] device bond0 entered promiscuous mode [ 606.538486][T12085] device bond_slave_0 entered promiscuous mode [ 606.545411][T12085] device bond_slave_1 entered promiscuous mode [ 608.050984][T12099] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 608.384956][T12119] netlink: 'syz.2.2638': attribute type 4 has an invalid length. [ 608.426119][T12119] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2638'. [ 610.304879][T12169] netlink: 'syz.2.2660': attribute type 2 has an invalid length. [ 610.338853][T12169] netlink: 'syz.2.2660': attribute type 8 has an invalid length. [ 610.369979][T12169] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2660'. [ 610.616266][T12175] netlink: 'syz.3.2661': attribute type 4 has an invalid length. [ 610.656546][T12175] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2661'. [ 611.053331][T12182] netlink: 'syz.0.2662': attribute type 4 has an invalid length. [ 611.074766][T12182] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2662'. [ 611.479146][T12192] netlink: 'syz.3.2668': attribute type 12 has an invalid length. [ 611.508874][T12192] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2668'. [ 611.849869][ T4757] wlan1: Trigger new scan to find an IBSS to join [ 612.454894][T12219] netlink: 'syz.2.2679': attribute type 10 has an invalid length. [ 612.901819][T12224] netlink: 'syz.2.2682': attribute type 4 has an invalid length. [ 612.930596][T12224] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2682'. [ 613.062229][T12227] netlink: 'syz.1.2685': attribute type 12 has an invalid length. [ 613.103809][T12227] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2685'. [ 613.601251][T12244] netlink: 'syz.3.2700': attribute type 12 has an invalid length. [ 613.660123][T12244] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2700'. [ 613.911183][T12251] netlink: 'syz.3.2693': attribute type 10 has an invalid length. [ 614.180610][T12259] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2696'. [ 614.254183][T12259] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2696'. [ 614.299999][T12259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 614.533766][T12262] netlink: 'syz.2.2697': attribute type 4 has an invalid length. [ 614.589427][T12262] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2697'. [ 614.871700][T12274] netlink: 'syz.2.2705': attribute type 5 has an invalid length. [ 615.153404][T12280] netlink: 'syz.1.2707': attribute type 12 has an invalid length. [ 615.171068][T12280] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2707'. [ 615.859760][ T5478] wlan1: Trigger new scan to find an IBSS to join [ 617.159167][ T5478] wlan1: Creating new IBSS network, BSSID 52:89:86:40:ea:33 [ 617.191806][T12291] netlink: 'syz.0.2709': attribute type 10 has an invalid length. [ 617.222377][T12297] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2712'. [ 617.273438][T12300] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2712'. [ 617.319729][T12300] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 617.353351][T12300] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 617.453163][T12306] netlink: 'syz.3.2713': attribute type 4 has an invalid length. [ 617.491113][T12306] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2713'. [ 617.815044][T12314] netlink: 'syz.2.2716': attribute type 4 has an invalid length. [ 617.923035][T12314] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.2716'. [ 618.672650][T12325] netlink: 'syz.1.2723': attribute type 12 has an invalid length. [ 618.726292][T12325] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2723'. [ 622.453376][T12360] netlink: 'syz.0.2733': attribute type 4 has an invalid length. [ 622.477726][T12359] netlink: 'syz.3.2734': attribute type 4 has an invalid length. [ 622.503061][T12359] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2734'. [ 622.514278][T12360] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2733'. [ 624.460137][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.466504][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.457270][T12410] netlink: 'syz.3.2749': attribute type 5 has an invalid length. [ 625.482558][T12415] netlink: 'syz.4.2750': attribute type 4 has an invalid length. [ 625.535387][T12415] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2750'. [ 625.987032][T12426] netlink: 'syz.0.2753': attribute type 13 has an invalid length. [ 626.040439][T12426] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2753'. [ 626.237961][T12426] syz_tun: refused to change device tx_queue_len [ 626.295906][T12426] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 628.637996][T12463] delete_channel: no stack [ 629.268001][T12471] netlink: 'syz.4.2765': attribute type 4 has an invalid length. [ 629.506136][T12471] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2765'. [ 630.666055][T12483] netlink: 'syz.0.2781': attribute type 4 has an invalid length. [ 630.696374][T12483] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2781'. [ 632.056691][T12516] delete_channel: no stack [ 635.113004][T12575] netlink: 'syz.1.2809': attribute type 4 has an invalid length. [ 635.145620][T12575] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.2809'. [ 635.452075][T12587] netlink: 'syz.1.2812': attribute type 13 has an invalid length. [ 635.474625][T12587] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2812'. [ 635.515395][T12587] syz_tun: refused to change device tx_queue_len [ 635.530535][T12587] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 635.950257][T12592] netlink: 'syz.0.2823': attribute type 4 has an invalid length. [ 636.003658][T12592] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2823'. [ 638.597902][T12639] netlink: 'syz.4.2829': attribute type 13 has an invalid length. [ 638.610438][T12639] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2829'. [ 638.635238][T12646] netlink: 'syz.3.2830': attribute type 4 has an invalid length. [ 638.643138][T12645] delete_channel: no stack [ 638.668489][T12639] syz_tun: refused to change device tx_queue_len [ 638.669841][T12646] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2830'. [ 638.676192][T12639] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 639.938126][T12676] delete_channel: no stack [ 639.964893][T12681] netlink: 'syz.4.2844': attribute type 4 has an invalid length. [ 639.983431][T12681] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.2844'. [ 640.168829][T12685] netlink: 'syz.2.2845': attribute type 13 has an invalid length. [ 640.181253][T12685] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2845'. [ 640.240812][T12685] syz_tun: refused to change device tx_queue_len [ 640.248103][T12685] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 640.268400][T12687] netlink: 'syz.3.2847': attribute type 10 has an invalid length. [ 640.282970][T12687] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2847'. [ 641.883824][T12724] delete_channel: no stack [ 641.913478][T12727] netlink: 'syz.3.2860': attribute type 4 has an invalid length. [ 641.938705][T12727] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.2860'. [ 642.360507][T12736] netlink: 'syz.1.2864': attribute type 13 has an invalid length. [ 642.368998][T12736] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2864'. [ 642.516359][T12736] syz_tun: refused to change device tx_queue_len [ 642.523463][T12736] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 642.550530][T12740] netlink: 'syz.3.2862': attribute type 13 has an invalid length. [ 642.575369][T12740] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2862'. [ 642.854213][T12740] syz_tun: refused to change device tx_queue_len [ 642.875145][T12740] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 644.085106][T12770] delete_channel: no stack [ 645.184405][T12798] netlink: 'syz.0.2886': attribute type 13 has an invalid length. [ 645.199471][T12798] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2886'. [ 645.241221][T12798] syz_tun: refused to change device tx_queue_len [ 645.248605][T12798] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 645.568273][T12810] delete_channel: no stack [ 645.894631][T12817] netlink: 'syz.0.2894': attribute type 3 has an invalid length. [ 645.917205][T12817] netlink: 'syz.0.2894': attribute type 1 has an invalid length. [ 645.963471][T12817] netlink: 198452 bytes leftover after parsing attributes in process `syz.0.2894'. [ 647.379319][T12844] delete_channel: no stack [ 647.854478][T12854] netlink: 'syz.4.2908': attribute type 13 has an invalid length. [ 647.882984][T12854] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2908'. [ 648.047099][T12854] syz_tun: refused to change device tx_queue_len [ 648.089118][T12854] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 648.569039][T12868] netlink: 'syz.4.2913': attribute type 3 has an invalid length. [ 648.621964][T12868] netlink: 'syz.4.2913': attribute type 1 has an invalid length. [ 648.660072][T12868] netlink: 198452 bytes leftover after parsing attributes in process `syz.4.2913'. [ 648.810763][T12872] delete_channel: no stack [ 649.397198][T12895] netlink: 'syz.2.2924': attribute type 13 has an invalid length. [ 649.406023][T12895] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2924'. [ 649.418048][T12895] syz_tun: refused to change device tx_queue_len [ 649.445393][T12895] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 649.864377][T12908] netlink: 'syz.2.2928': attribute type 3 has an invalid length. [ 649.872593][T12908] netlink: 'syz.2.2928': attribute type 1 has an invalid length. [ 649.909879][T12908] netlink: 198452 bytes leftover after parsing attributes in process `syz.2.2928'. [ 652.660045][T12968] netlink: 'syz.4.2952': attribute type 10 has an invalid length. [ 652.669283][T12968] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2952'. [ 653.451127][T12999] netlink: 'syz.1.2961': attribute type 10 has an invalid length. [ 653.459034][T12999] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2961'. [ 654.577261][T13031] netlink: 'syz.2.2976': attribute type 10 has an invalid length. [ 654.589862][T13031] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2976'. [ 655.664887][T13042] device syzkaller0 entered promiscuous mode [ 657.717486][T13060] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 657.728243][T13060] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 657.769658][T13060] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 658.544865][T13083] netlink: 'syz.4.2991': attribute type 10 has an invalid length. [ 658.556254][T13083] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2991'. [ 658.581213][T13083] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 658.790317][T13089] netlink: 'syz.0.2995': attribute type 10 has an invalid length. [ 658.798355][T13089] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2995'. [ 658.808239][T13089] device hsr0 entered promiscuous mode [ 659.401116][T13100] device syzkaller0 entered promiscuous mode [ 661.442231][T13114] device syzkaller0 entered promiscuous mode [ 661.449491][T13116] netlink: 'syz.0.3006': attribute type 13 has an invalid length. [ 661.467674][T13116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3006'. [ 661.483553][T13116] syz_tun: refused to change device tx_queue_len [ 661.491710][T13116] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 663.566535][T13125] tipc: Started in network mode [ 663.571711][T13125] tipc: Node identity 9215a268, cluster identity 4711 [ 663.578506][T13125] tipc: Node number set to 2450891368 [ 663.584795][T13124] netlink: 'syz.0.3008': attribute type 10 has an invalid length. [ 663.592902][T13124] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3008'. [ 663.604084][T13124] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 663.815693][T13134] device syzkaller0 entered promiscuous mode [ 663.935893][T13145] netlink: 'syz.4.3012': attribute type 5 has an invalid length. [ 666.147786][T13154] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 666.167791][T13154] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 666.197499][T13154] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 666.354316][T13165] device syzkaller0 entered promiscuous mode [ 666.393489][T13167] netlink: 'syz.3.3022': attribute type 13 has an invalid length. [ 666.409127][T13167] netlink: 152 bytes leftover after parsing attributes in process `syz.3.3022'. [ 666.469088][T13167] syz_tun: refused to change device tx_queue_len [ 666.476730][T13167] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 669.038368][T13199] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.3033'. [ 675.122647][T13235] netlink: 'syz.3.3057': attribute type 3 has an invalid length. [ 675.151418][T13235] netlink: 'syz.3.3057': attribute type 1 has an invalid length. [ 675.190602][T13235] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.3057'. [ 676.892122][T13288] netlink: 'syz.2.3068': attribute type 10 has an invalid length. [ 676.939744][T13288] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3068'. [ 676.949388][T13288] device hsr0 entered promiscuous mode [ 679.547231][T13332] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3095'. [ 679.882233][T13344] netlink: 'syz.1.3086': attribute type 10 has an invalid length. [ 679.890870][T13344] netlink: 2 bytes leftover after parsing attributes in process `syz.1.3086'. [ 680.565459][T13369] netlink: 202920 bytes leftover after parsing attributes in process `syz.3.3099'. [ 680.932602][T13382] netlink: 'syz.2.3105': attribute type 3 has an invalid length. [ 680.979783][T13382] netlink: 'syz.2.3105': attribute type 1 has an invalid length. [ 680.992832][T13382] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.3105'. [ 681.592678][T13392] netlink: 'syz.0.3120': attribute type 3 has an invalid length. [ 681.603980][T13392] netlink: 'syz.0.3120': attribute type 1 has an invalid length. [ 681.632393][T13392] netlink: 60387 bytes leftover after parsing attributes in process `syz.0.3120'. [ 681.918931][T13402] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3113'. [ 682.043380][T13407] netlink: 'syz.2.3114': attribute type 10 has an invalid length. [ 682.079775][T13407] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3114'. [ 682.105898][T13407] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 682.202735][T13402] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 683.100282][T13431] netlink: 'syz.3.3119': attribute type 10 has an invalid length. [ 683.113066][T13431] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3119'. [ 683.122626][T13434] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3121'. [ 683.595678][T13442] netlink: 'syz.1.3125': attribute type 3 has an invalid length. [ 683.661546][T13442] netlink: 'syz.1.3125': attribute type 1 has an invalid length. [ 683.736495][T13442] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.3125'. [ 683.785133][T13443] netlink: 'syz.0.3137': attribute type 10 has an invalid length. [ 683.839788][T13443] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3137'. [ 684.250746][T13463] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3132'. [ 684.379565][T13463] debugfs: Directory '.!' with parent 'ieee80211' already present! [ 685.468151][T13492] netlink: 'syz.4.3145': attribute type 21 has an invalid length. [ 685.587131][T13490] __nla_validate_parse: 2 callbacks suppressed [ 685.587162][T13490] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3144'. [ 685.772736][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.779146][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.921323][T13502] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.3150'. [ 686.006466][T13504] validate_nla: 1 callbacks suppressed [ 686.006504][T13504] netlink: 'syz.3.3160': attribute type 10 has an invalid length. [ 686.029772][T13504] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3160'. [ 689.176493][T13526] netlink: 152 bytes leftover after parsing attributes in process `syz.4.3155'. [ 689.468883][T13537] netlink: 'syz.1.3161': attribute type 10 has an invalid length. [ 689.549680][T13537] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3161'. [ 689.594064][T13536] netlink: 'syz.4.3162': attribute type 10 has an invalid length. [ 692.688390][T13551] netlink: 'syz.4.3167': attribute type 10 has an invalid length. [ 692.697382][T13551] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3167'. [ 692.918362][T13559] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3169'. [ 692.997698][T13559] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 693.007168][T13559] CPU: 0 PID: 13559 Comm: syz.4.3169 Not tainted syzkaller #0 [ 693.014684][T13559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 693.024778][T13559] Call Trace: [ 693.028088][T13559] [ 693.031046][T13559] dump_stack_lvl+0x188/0x24e [ 693.035804][T13559] ? show_regs_print_info+0x12/0x12 [ 693.041096][T13559] ? load_image+0x410/0x410 [ 693.045703][T13559] sysfs_warn_dup+0x8a/0xa0 [ 693.050293][T13559] sysfs_do_create_link_sd+0xc0/0x110 [ 693.055709][T13559] device_add+0x83b/0x1050 [ 693.060225][T13559] wiphy_register+0x1d8b/0x2aa0 [ 693.065179][T13559] ? cfg80211_event_work+0x40/0x40 [ 693.070327][T13559] ? minstrel_ht_alloc+0x894/0xa20 [ 693.075522][T13559] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 693.081686][T13559] ieee80211_register_hw+0x2d48/0x39f0 [ 693.087219][T13559] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 693.093455][T13559] ? ieee80211_register_hw+0xf41/0x39f0 [ 693.099032][T13559] ? ieee80211_register_hw+0xf41/0x39f0 [ 693.104616][T13559] ? ieee80211_tasklet_handler+0x20/0x20 [ 693.110282][T13559] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 693.116272][T13559] ? __debug_object_init+0xed/0x440 [ 693.121572][T13559] ? memset+0x1e/0x40 [ 693.125622][T13559] ? __hrtimer_init+0x189/0x270 [ 693.130572][T13559] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 693.136421][T13559] ? memcpy+0x3c/0x60 [ 693.140440][T13559] hwsim_new_radio_nl+0xab7/0xc90 [ 693.145524][T13559] genl_family_rcv_msg_doit+0x22f/0x350 [ 693.151155][T13559] ? end_current_label_crit_section+0x170/0x170 [ 693.157516][T13559] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 693.163444][T13559] ? lockdep_hardirqs_on+0x94/0x140 [ 693.168689][T13559] ? bpf_lsm_capable+0x5/0x10 [ 693.173454][T13559] ? security_capable+0x85/0xb0 [ 693.178344][T13559] genl_rcv_msg+0x601/0x790 [ 693.182896][T13559] ? genl_bind+0x360/0x360 [ 693.187346][T13559] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 693.193730][T13559] netlink_rcv_skb+0x1ef/0x440 [ 693.198525][T13559] ? genl_bind+0x360/0x360 [ 693.202976][T13559] ? netlink_ack+0x1160/0x1160 [ 693.207788][T13559] ? down_read+0x1a8/0x2d0 [ 693.212242][T13559] genl_rcv+0x24/0x40 [ 693.216253][T13559] netlink_unicast+0x7ad/0x920 [ 693.221065][T13559] netlink_sendmsg+0x8ad/0xbd0 [ 693.225887][T13559] ? netlink_getsockopt+0x550/0x550 [ 693.231120][T13559] ? apparmor_socket_sendmsg+0x8a/0x330 [ 693.236708][T13559] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 693.242087][T13559] ? security_socket_sendmsg+0x7c/0xa0 [ 693.247637][T13559] ? netlink_getsockopt+0x550/0x550 [ 693.252874][T13559] ____sys_sendmsg+0x5ed/0x9a0 [ 693.257735][T13559] ? __import_iovec+0x384/0x510 [ 693.262669][T13559] ? __sys_sendmsg_sock+0x30/0x30 [ 693.267739][T13559] ? import_iovec+0x6f/0xa0 [ 693.272284][T13559] ___sys_sendmsg+0x2a2/0x360 [ 693.277002][T13559] ? __sys_sendmsg+0x2a0/0x2a0 [ 693.281860][T13559] __se_sys_sendmsg+0x1c3/0x2b0 [ 693.286747][T13559] ? __x64_sys_sendmsg+0x80/0x80 [ 693.291740][T13559] do_syscall_64+0x4c/0xa0 [ 693.296199][T13559] ? clear_bhb_loop+0x60/0xb0 [ 693.300902][T13559] ? clear_bhb_loop+0x60/0xb0 [ 693.305609][T13559] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 693.311543][T13559] RIP: 0033:0x7f4f4fb9e159 [ 693.315990][T13559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 693.335640][T13559] RSP: 002b:00007f4f50a65028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 693.344103][T13559] RAX: ffffffffffffffda RBX: 00007f4f4fe25fa0 RCX: 00007f4f4fb9e159 [ 693.352106][T13559] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 693.360115][T13559] RBP: 00007f4f4fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 693.368127][T13559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.376134][T13559] R13: 00007f4f4fe26038 R14: 00007f4f4fe25fa0 R15: 00007ffe5e803938 [ 693.384159][T13559] [ 695.782214][T13567] : port 2(ip6gretap0) entered blocking state [ 695.797815][T13567] : port 2(ip6gretap0) entered disabled state [ 695.806396][T13567] device ip6gretap0 entered promiscuous mode [ 696.808491][T13593] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 696.834147][T13593] syzkaller1: linktype set to 825 [ 696.933130][T13596] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3181'. [ 697.052006][T13596] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 697.079856][T13596] CPU: 0 PID: 13596 Comm: syz.3.3181 Not tainted syzkaller #0 [ 697.087407][T13596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.097505][T13596] Call Trace: [ 697.100811][T13596] [ 697.103754][T13596] dump_stack_lvl+0x188/0x24e [ 697.108454][T13596] ? show_regs_print_info+0x12/0x12 [ 697.113665][T13596] ? load_image+0x410/0x410 [ 697.118195][T13596] sysfs_warn_dup+0x8a/0xa0 [ 697.122726][T13596] sysfs_do_create_link_sd+0xc0/0x110 [ 697.128117][T13596] device_add+0x83b/0x1050 [ 697.132557][T13596] wiphy_register+0x1d8b/0x2aa0 [ 697.137454][T13596] ? cfg80211_event_work+0x40/0x40 [ 697.142580][T13596] ? minstrel_ht_alloc+0x894/0xa20 [ 697.147715][T13596] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 697.153800][T13596] ieee80211_register_hw+0x2d48/0x39f0 [ 697.159270][T13596] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 697.165445][T13596] ? ieee80211_register_hw+0xf41/0x39f0 [ 697.171001][T13596] ? ieee80211_register_hw+0xf41/0x39f0 [ 697.176564][T13596] ? ieee80211_tasklet_handler+0x20/0x20 [ 697.182207][T13596] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 697.188119][T13596] ? __debug_object_init+0xed/0x440 [ 697.193358][T13596] ? memset+0x1e/0x40 [ 697.197367][T13596] ? __hrtimer_init+0x189/0x270 [ 697.202233][T13596] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 697.207977][T13596] ? memcpy+0x3c/0x60 [ 697.212085][T13596] hwsim_new_radio_nl+0xab7/0xc90 [ 697.217137][T13596] genl_family_rcv_msg_doit+0x22f/0x350 [ 697.222696][T13596] ? end_current_label_crit_section+0x170/0x170 [ 697.228964][T13596] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 697.234876][T13596] ? bpf_lsm_capable+0x5/0x10 [ 697.239564][T13596] ? security_capable+0x85/0xb0 [ 697.244429][T13596] genl_rcv_msg+0x601/0x790 [ 697.248949][T13596] ? genl_bind+0x360/0x360 [ 697.253373][T13596] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 697.259736][T13596] netlink_rcv_skb+0x1ef/0x440 [ 697.264517][T13596] ? genl_bind+0x360/0x360 [ 697.268952][T13596] ? netlink_ack+0x1160/0x1160 [ 697.273824][T13596] ? down_read+0x1a8/0x2d0 [ 697.278258][T13596] genl_rcv+0x24/0x40 [ 697.282251][T13596] netlink_unicast+0x7ad/0x920 [ 697.287038][T13596] netlink_sendmsg+0x8ad/0xbd0 [ 697.291822][T13596] ? netlink_getsockopt+0x550/0x550 [ 697.297032][T13596] ? apparmor_socket_sendmsg+0x8a/0x330 [ 697.302595][T13596] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 697.307901][T13596] ? security_socket_sendmsg+0x7c/0xa0 [ 697.313399][T13596] ? netlink_getsockopt+0x550/0x550 [ 697.318609][T13596] ____sys_sendmsg+0x5ed/0x9a0 [ 697.323389][T13596] ? lockdep_hardirqs_on+0x94/0x140 [ 697.328601][T13596] ? __sys_sendmsg_sock+0x30/0x30 [ 697.333641][T13596] ? ___sys_sendmsg+0x287/0x360 [ 697.338512][T13596] ___sys_sendmsg+0x2a2/0x360 [ 697.343207][T13596] ? __sys_sendmsg+0x2a0/0x2a0 [ 697.348002][T13596] ? ktime_get+0x7b/0x270 [ 697.352366][T13596] __se_sys_sendmsg+0x1c3/0x2b0 [ 697.357228][T13596] ? __x64_sys_sendmsg+0x80/0x80 [ 697.362189][T13596] ? syscall_enter_from_user_mode+0x2a/0x80 [ 697.368100][T13596] do_syscall_64+0x4c/0xa0 [ 697.372526][T13596] ? clear_bhb_loop+0x60/0xb0 [ 697.377211][T13596] ? clear_bhb_loop+0x60/0xb0 [ 697.381901][T13596] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 697.387807][T13596] RIP: 0033:0x7fb012b9e159 [ 697.392233][T13596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.411849][T13596] RSP: 002b:00007fb013b1d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 697.420278][T13596] RAX: ffffffffffffffda RBX: 00007fb012e25fa0 RCX: 00007fb012b9e159 [ 697.428260][T13596] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 697.436239][T13596] RBP: 00007fb012c3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.444223][T13596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.452204][T13596] R13: 00007fb012e26038 R14: 00007fb012e25fa0 R15: 00007ffe349336f8 [ 697.460207][T13596] [ 697.561112][T13604] netlink: 'syz.2.3183': attribute type 10 has an invalid length. [ 698.086575][T13617] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3187'. [ 698.117977][T13617] netlink: 164 bytes leftover after parsing attributes in process `syz.3.3187'. [ 698.151610][T13617] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 703.176242][T13648] netlink: 'syz.1.3198': attribute type 10 has an invalid length. [ 703.763668][T13662] device syzkaller0 entered promiscuous mode [ 704.668242][T13664] platform regulatory.0: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 704.695482][T13664] platform regulatory.0: Direct firmware load for regulatory.db.p7s failed with error -4 [ 704.739616][T13664] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db.p7s [ 706.500659][T13685] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 706.525477][T13685] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 706.535816][T13685] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 706.873772][T13700] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.167688][T13705] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3215'. [ 707.211684][T13711] netlink: 'syz.0.3214': attribute type 10 has an invalid length. [ 707.297689][T13705] sysfs: cannot create duplicate filename '/class/ieee80211/.!' [ 707.328177][T13705] CPU: 1 PID: 13705 Comm: syz.1.3215 Not tainted syzkaller #0 [ 707.335726][T13705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 707.345837][T13705] Call Trace: [ 707.349162][T13705] [ 707.352148][T13705] dump_stack_lvl+0x188/0x24e [ 707.356880][T13705] ? show_regs_print_info+0x12/0x12 [ 707.362113][T13705] ? load_image+0x410/0x410 [ 707.366655][T13705] sysfs_warn_dup+0x8a/0xa0 [ 707.371189][T13705] sysfs_do_create_link_sd+0xc0/0x110 [ 707.376589][T13705] device_add+0x83b/0x1050 [ 707.381045][T13705] wiphy_register+0x1d8b/0x2aa0 [ 707.385924][T13705] ? cfg80211_event_work+0x40/0x40 [ 707.391045][T13705] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.397307][T13705] ? ieee80211_register_hw+0x28d5/0x39f0 [ 707.402958][T13705] ieee80211_register_hw+0x2d48/0x39f0 [ 707.408432][T13705] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.414604][T13705] ? ieee80211_register_hw+0xf41/0x39f0 [ 707.420161][T13705] ? ieee80211_register_hw+0xf41/0x39f0 [ 707.425722][T13705] ? ieee80211_tasklet_handler+0x20/0x20 [ 707.431390][T13705] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 707.437301][T13705] ? __debug_object_init+0xed/0x440 [ 707.442515][T13705] ? memset+0x1e/0x40 [ 707.446506][T13705] ? __hrtimer_init+0x189/0x270 [ 707.451374][T13705] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 707.457124][T13705] ? memcpy+0x3c/0x60 [ 707.461124][T13705] hwsim_new_radio_nl+0xab7/0xc90 [ 707.466180][T13705] genl_family_rcv_msg_doit+0x22f/0x350 [ 707.471738][T13705] ? end_current_label_crit_section+0x170/0x170 [ 707.477998][T13705] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 707.483912][T13705] ? bpf_lsm_capable+0x5/0x10 [ 707.488601][T13705] ? security_capable+0x85/0xb0 [ 707.493468][T13705] genl_rcv_msg+0x601/0x790 [ 707.497987][T13705] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 707.504159][T13705] ? genl_bind+0x360/0x360 [ 707.508590][T13705] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 707.514943][T13705] ? lock_acquire+0x225/0x4a0 [ 707.519721][T13705] netlink_rcv_skb+0x1ef/0x440 [ 707.524504][T13705] ? genl_bind+0x360/0x360 [ 707.528933][T13705] ? netlink_ack+0x1160/0x1160 [ 707.533717][T13705] ? down_read+0x1a8/0x2d0 [ 707.538172][T13705] genl_rcv+0x24/0x40 [ 707.542196][T13705] netlink_unicast+0x7ad/0x920 [ 707.546995][T13705] netlink_sendmsg+0x8ad/0xbd0 [ 707.551781][T13705] ? netlink_getsockopt+0x550/0x550 [ 707.556992][T13705] ? audit_tree_destroy_watch+0x20/0x20 [ 707.562617][T13705] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 707.567910][T13705] ? security_socket_sendmsg+0x7c/0xa0 [ 707.573381][T13705] ? netlink_getsockopt+0x550/0x550 [ 707.578591][T13705] ____sys_sendmsg+0x5ed/0x9a0 [ 707.583380][T13705] ? lockdep_hardirqs_on+0x94/0x140 [ 707.588593][T13705] ? __sys_sendmsg_sock+0x30/0x30 [ 707.593631][T13705] ? ___sys_sendmsg+0x27d/0x360 [ 707.598499][T13705] ___sys_sendmsg+0x2a2/0x360 [ 707.603192][T13705] ? __sys_sendmsg+0x2a0/0x2a0 [ 707.608010][T13705] __se_sys_sendmsg+0x1c3/0x2b0 [ 707.612875][T13705] ? __x64_sys_sendmsg+0x80/0x80 [ 707.617842][T13705] ? syscall_enter_from_user_mode+0x2a/0x80 [ 707.623757][T13705] do_syscall_64+0x4c/0xa0 [ 707.628188][T13705] ? clear_bhb_loop+0x60/0xb0 [ 707.632876][T13705] ? clear_bhb_loop+0x60/0xb0 [ 707.637568][T13705] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 707.643476][T13705] RIP: 0033:0x7f4a0919e159 [ 707.647901][T13705] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.667524][T13705] RSP: 002b:00007f4a0a123028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.675955][T13705] RAX: ffffffffffffffda RBX: 00007f4a09425fa0 RCX: 00007f4a0919e159 [ 707.683944][T13705] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 707.691927][T13705] RBP: 00007f4a0923506b R08: 0000000000000000 R09: 0000000000000000 [ 707.699906][T13705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 707.707886][T13705] R13: 00007f4a09426038 R14: 00007f4a09425fa0 R15: 00007ffd4af71fe8 [ 707.715883][T13705] [ 708.466395][T13730] device syzkaller0 entered promiscuous mode [ 714.291934][T13748] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 714.319669][T13748] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 714.329352][T13748] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 714.631903][T13760] netlink: 'syz.3.3230': attribute type 10 has an invalid length. [ 714.657748][T13762] netlink: 'syz.0.3241': attribute type 10 has an invalid length. [ 714.938191][T13762] device netdevsim0 entered promiscuous mode [ 714.950315][T13762] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 715.057858][T13776] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 715.064566][T13776] syzkaller1: linktype set to 825 [ 715.253481][T13780] netlink: 'syz.2.3247': attribute type 10 has an invalid length. [ 715.583894][T13790] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 715.951826][T13796] device syzkaller0 entered promiscuous mode [ 715.968782][T13794] netlink: 'syz.1.3242': attribute type 10 has an invalid length. [ 715.996539][T13794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3242'. [ 716.804664][T13794] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 719.649653][T13831] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 719.659865][T13831] syzkaller1: linktype set to 825 [ 719.669436][T13836] netlink: 'syz.0.3252': attribute type 10 has an invalid length. [ 720.988171][T13857] device syzkaller0 entered promiscuous mode [ 721.516853][T13864] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3265'. [ 721.544826][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 721.587379][T13864] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3265'. [ 721.611829][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 721.640336][T13864] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3265'. [ 721.704721][T13864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3265'. [ 721.735820][T13864] netlink: 33 bytes leftover after parsing attributes in process `syz.0.3265'. [ 724.157318][T13885] netlink: 'syz.1.3273': attribute type 10 has an invalid length. [ 724.358017][T13885] device netdevsim0 entered promiscuous mode [ 724.442899][T13885] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 724.482967][T13886] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.506678][T13882] netlink: 'syz.4.3271': attribute type 10 has an invalid length. [ 725.665380][T13913] device syzkaller0 entered promiscuous mode [ 725.724092][T13916] netlink: 'syz.0.3279': attribute type 10 has an invalid length. [ 725.779558][T13916] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3279'. [ 725.791126][T13916] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 730.834743][T13922] netlink: 'syz.3.3284': attribute type 21 has an invalid length. [ 730.842892][T13922] netlink: 'syz.3.3284': attribute type 1 has an invalid length. [ 730.851949][T13922] netlink: 144 bytes leftover after parsing attributes in process `syz.3.3284'. [ 730.875675][T13937] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 730.881796][T13937] syzkaller1: linktype set to 825 [ 731.141921][T13951] netlink: 'syz.4.3288': attribute type 10 has an invalid length. [ 731.367850][T13959] netlink: 'syz.2.3293': attribute type 10 has an invalid length. [ 731.378330][T13959] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3293'. [ 731.389221][T13959] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 731.954296][T13971] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 731.966073][T13971] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 731.977255][T13971] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 732.115866][T13974] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.3299'. [ 734.014296][T14010] netlink: 'syz.3.3307': attribute type 10 has an invalid length. [ 734.099380][T14010] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3307'. [ 734.261815][T14010] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 735.289277][T14027] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3313'. [ 735.363295][T14028] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.3312'. [ 738.392048][T14071] netlink: 'syz.3.3326': attribute type 10 has an invalid length. [ 738.421281][T14071] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3326'. [ 738.773521][T14083] netlink: 'syz.4.3340': attribute type 2 has an invalid length. [ 738.809773][T14083] netlink: 199848 bytes leftover after parsing attributes in process `syz.4.3340'. [ 738.857370][T14083] tipc: Started in network mode [ 738.879605][T14083] tipc: Node identity 9215a268, cluster identity 4711 [ 738.886447][T14083] tipc: Node number set to 2450891368 [ 739.436199][T14089] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.3333'. [ 739.523369][T14093] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 739.569704][T14093] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 739.606961][T14093] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 740.400041][T14099] netlink: 'syz.4.3336': attribute type 21 has an invalid length. [ 740.428416][T14099] netlink: 'syz.4.3336': attribute type 1 has an invalid length. [ 740.446672][T14099] netlink: 144 bytes leftover after parsing attributes in process `syz.4.3336'. [ 740.508575][T14099] device ipvlan1 left promiscuous mode [ 741.998686][T14117] device syzkaller0 entered promiscuous mode [ 742.065374][T14125] netlink: 'syz.2.3345': attribute type 2 has an invalid length. [ 742.128578][T14125] netlink: 199848 bytes leftover after parsing attributes in process `syz.2.3345'. [ 742.331852][T14126] tipc: Started in network mode [ 742.339143][T14126] tipc: Node identity 9215a268, cluster identity 4711 [ 742.349664][T14126] tipc: Node number set to 2450891368 [ 743.451169][T14144] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.3348'. [ 746.236302][T14140] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 746.240461][T14144] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 746.246045][T14140] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 746.263109][T14140] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 746.293383][T14144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 746.313757][T14144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 746.497843][T14155] netlink: 'syz.1.3350': attribute type 21 has an invalid length. [ 746.518368][T14155] netlink: 'syz.1.3350': attribute type 1 has an invalid length. [ 746.546401][T14155] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3350'. [ 747.093683][T14173] netlink: 'syz.3.3359': attribute type 2 has an invalid length. [ 747.102025][T14173] netlink: 199848 bytes leftover after parsing attributes in process `syz.3.3359'. [ 747.132595][T14173] tipc: Started in network mode [ 747.137840][T14173] tipc: Node identity 9215a268, cluster identity 4711 [ 747.144768][T14173] tipc: Node number set to 2450891368 [ 747.220203][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.226618][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.571922][T14185] device syzkaller0 entered promiscuous mode [ 749.531653][T14193] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 749.541257][T14193] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 749.551800][T14193] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 749.572850][T14195] netlink: 'syz.2.3370': attribute type 10 has an invalid length. [ 749.581681][T14195] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3370'. [ 749.714909][T14202] netlink: 'syz.2.3371': attribute type 21 has an invalid length. [ 749.725254][T14202] netlink: 'syz.2.3371': attribute type 1 has an invalid length. [ 749.734449][T14202] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3371'. [ 751.017851][T14227] device syzkaller0 entered promiscuous mode [ 753.804749][T14239] netlink: 'syz.0.3383': attribute type 10 has an invalid length. [ 753.817381][T14239] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3383'. [ 754.116401][T14254] netlink: 'syz.0.3388': attribute type 21 has an invalid length. [ 754.138603][T14254] netlink: 'syz.0.3388': attribute type 1 has an invalid length. [ 754.180129][T14254] netlink: 144 bytes leftover after parsing attributes in process `syz.0.3388'. [ 754.209202][T14255] device ipvlan1 left promiscuous mode [ 754.644945][T14262] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 754.689083][T14262] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 754.739788][T14262] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 755.627073][T14290] device syzkaller0 entered promiscuous mode [ 762.527973][T14347] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 762.545511][T14349] netlink: 'syz.0.3417': attribute type 5 has an invalid length. [ 762.601227][T14347] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 762.689315][T14347] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 763.537062][T14366] device syzkaller0 entered promiscuous mode [ 767.933631][T14404] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3436'. [ 771.303015][T14446] device syzkaller0 entered promiscuous mode [ 774.305255][T14469] netlink: 'syz.3.3457': attribute type 5 has an invalid length. [ 774.531122][T14487] netlink: 'syz.2.3472': attribute type 5 has an invalid length. [ 776.872534][T14527] device syzkaller0 entered promiscuous mode [ 779.218066][T14541] netlink: 'syz.1.3476': attribute type 5 has an invalid length. [ 780.471604][T14565] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3497'. [ 780.510582][T14565] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 781.531957][T14584] device syzkaller0 entered promiscuous mode [ 781.607794][T14586] netlink: 'syz.4.3494': attribute type 5 has an invalid length. [ 808.689595][ T5299] rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 1-.... } 2680 jiffies s: 99313 root: 0x2/. [ 808.702114][ T5299] rcu: blocking rcu_node structures (internal RCU debug): [ 808.709272][ T5299] Sending NMI from CPU 0 to CPUs 1: [ 808.714558][ C1] NMI backtrace for cpu 1 [ 808.714569][ C1] CPU: 1 PID: 14595 Comm: syz.3.3498 Not tainted syzkaller #0 [ 808.714584][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 808.714592][ C1] RIP: 0010:arch_irq_work_raise+0x82/0xd0 [ 808.714677][ C1] Code: a5 00 48 8b 1d 4f 48 38 0b 48 83 c3 58 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 75 72 a5 00 bf f6 00 00 00 ff 13 <48> c7 c0 60 4d 66 8c 48 c1 e8 03 42 80 3c 30 00 74 0c 48 c7 c7 60 [ 808.714690][ C1] RSP: 0018:ffffc900001dfd10 EFLAGS: 00000046 [ 808.714704][ C1] RAX: 00000000000000f6 RBX: ffffffff8c664b88 RCX: 000000000000083f [ 808.714714][ C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f [ 808.714723][ C1] RBP: 0000000000000001 R08: ffffc900001dfc87 R09: 1ffff9200003bf90 [ 808.714733][ C1] R10: dffffc0000000000 R11: fffff5200003bf91 R12: 0000000000000000 [ 808.714750][ C1] R13: dffffc0000000001 R14: dffffc0000000000 R15: 0000000000000001 [ 808.714760][ C1] FS: 00007fb013b1d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 808.714773][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 808.714783][ C1] CR2: 00007f4a091eb840 CR3: 0000000028689000 CR4: 00000000003506e0 [ 808.714799][ C1] DR0: 0000200000000300 DR1: 0000000000000000 DR2: 0000000000000000 [ 808.714808][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 808.714817][ C1] Call Trace: [ 808.714822][ C1] [ 808.714828][ C1] irq_work_queue_on+0x13c/0x260 [ 808.714891][ C1] rcu_read_unlock_special+0x3c9/0x510 [ 808.714927][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 808.714943][ C1] ? __perf_cgroup_move+0x150/0x150 [ 808.714971][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 808.714992][ C1] __rcu_read_unlock+0x78/0xd0 [ 808.715006][ C1] perf_event_output_forward+0x271/0x2f0 [ 808.715026][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 808.715045][ C1] ? perf_get_page_size+0x430/0x430 [ 808.715065][ C1] ? perf_event_output_forward+0x282/0x2f0 [ 808.715084][ C1] ? perf_event_output_forward+0xbe/0x2f0 [ 808.715102][ C1] ? perf_get_page_size+0x430/0x430 [ 808.715121][ C1] ? __perf_event_account_interrupt+0x187/0x280 [ 808.715142][ C1] __perf_event_overflow+0x457/0x630 [ 808.715165][ C1] perf_swevent_event+0x315/0x570 [ 808.715186][ C1] ? perf_tp_event+0xc10/0xc10 [ 808.715205][ C1] ? perf_trace_buf_alloc+0x300/0x300 [ 808.715240][ C1] ? perf_swevent_event+0x4ba/0x570 [ 808.715262][ C1] perf_tp_event+0x36b/0xc10 [ 808.715281][ C1] ? perf_swevent_event+0x4ba/0x570 [ 808.715302][ C1] ? perf_trace_run_bpf_submit+0x1c0/0x1c0 [ 808.715322][ C1] ? perf_tp_event+0xa8e/0xc10 [ 808.715360][ C1] ? kvm_sched_clock_read+0x14/0x40 [ 808.715390][ C1] ? sched_clock_cpu+0x6e/0x260 [ 808.715409][ C1] perf_trace_run_bpf_submit+0xf3/0x1c0 [ 808.715431][ C1] perf_trace_preemptirq_template+0x268/0x320 [ 808.715468][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 808.715485][ C1] ? trace_event_raw_event_preemptirq_template+0x1f0/0x1f0 [ 808.715505][ C1] ? __irq_exit_rcu+0x147/0x230 [ 808.715525][ C1] ? irq_exit_rcu+0x20/0x20 [ 808.715540][ C1] ? asm_sysvec_irq_work+0x16/0x20 [ 808.715554][ C1] trace_irq_enable_rcuidle+0xd3/0x140 [ 808.715573][ C1] trace_hardirqs_on+0x24/0x40 [ 808.715590][ C1] asm_sysvec_irq_work+0x16/0x20 [ 808.715603][ C1] RIP: 0010:rcu_read_unlock_special+0x7f/0x510 [ 808.715618][ C1] Code: eb 03 48 b8 f1 f1 f1 f1 f8 f2 f2 f2 4a 89 04 2b 42 c7 44 2b 08 f8 f3 f3 f3 65 44 8b 35 32 7b 95 7e 41 f7 c6 00 00 f0 00 74 40 <48> c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 42 c7 44 2b 08 [ 808.715629][ C1] RSP: 0018:ffffc900001e05a0 EFLAGS: 00000206 [ 808.715641][ C1] RAX: f2e15792395fb400 RBX: 1ffff9200003c0bc RCX: f2e15792395fb400 [ 808.715651][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 808.715661][ C1] RBP: ffffc900001e0690 R08: ffff8880b8f357cb R09: 1ffff110171e6af9 [ 808.715671][ C1] R10: dffffc0000000000 R11: ffffed10171e6afa R12: 0000000000000246 [ 808.715681][ C1] R13: dffffc0000000000 R14: ffff8880b8f3bb00 R15: 0000000000000002 [ 808.715702][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 808.715717][ C1] ? __rcu_read_unlock+0xd0/0xd0 [ 808.715730][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 808.715756][ C1] __rcu_read_unlock+0x78/0xd0 [ 808.715770][ C1] is_bpf_text_address+0x27a/0x2a0 [ 808.715783][ C1] ? is_bpf_text_address+0x22/0x2a0 [ 808.715798][ C1] kernel_text_address+0x9c/0xd0 [ 808.715850][ C1] __kernel_text_address+0x9/0x30 [ 808.715866][ C1] unwind_get_return_address+0x49/0x80 [ 808.715889][ C1] ? stack_trace_save+0xf0/0xf0 [ 808.715906][ C1] arch_stack_walk+0xf2/0x140 [ 808.715933][ C1] stack_trace_save+0xa6/0xf0 [ 808.715950][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 808.715967][ C1] ? ct_nmi_exit+0x145/0x1c0 [ 808.715987][ C1] kasan_set_track+0x4b/0x70 [ 808.716006][ C1] ? kasan_set_track+0x4b/0x70 [ 808.716022][ C1] ? kasan_save_free_info+0x27/0x40 [ 808.716035][ C1] ? ____kasan_slab_free+0x126/0x1f0 [ 808.716052][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 808.716068][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 808.716082][ C1] ? rcu_core+0x9a3/0x1740 [ 808.716095][ C1] ? handle_softirqs+0x291/0x910 [ 808.716108][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 808.716119][ C1] ? irq_exit_rcu+0x5/0x20 [ 808.716131][ C1] ? sysvec_apic_timer_interrupt+0xa0/0xc0 [ 808.716147][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 808.716161][ C1] ? unwind_next_frame+0x3df/0x1fd0 [ 808.716175][ C1] ? arch_stack_walk+0x10c/0x140 [ 808.716189][ C1] ? stack_trace_save+0xa6/0xf0 [ 808.716204][ C1] ? kasan_set_track+0x4b/0x70 [ 808.716221][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 808.716238][ C1] ? __kmalloc+0xb3/0x240 [ 808.716291][ C1] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 808.716309][ C1] ? tomoyo_path_number_perm+0x22f/0x650 [ 808.716324][ C1] ? security_file_ioctl+0x6c/0xa0 [ 808.716339][ C1] ? __se_sys_ioctl+0x48/0x170 [ 808.716363][ C1] ? do_syscall_64+0x4c/0xa0 [ 808.716376][ C1] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.716413][ C1] ? kmem_cache_free+0xf7/0x2a0 [ 808.716427][ C1] kasan_save_free_info+0x27/0x40 [ 808.716440][ C1] ____kasan_slab_free+0x126/0x1f0 [ 808.716459][ C1] slab_free_freelist_hook+0x133/0x1b0 [ 808.716477][ C1] ? mas_adopt_children+0x4b0/0x4b0 [ 808.716498][ C1] ? rcu_core+0x9a3/0x1740 [ 808.716512][ C1] kmem_cache_free+0xf7/0x2a0 [ 808.716529][ C1] rcu_core+0x9a3/0x1740 [ 808.716544][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 808.716564][ C1] ? rcu_core+0x931/0x1740 [ 808.716581][ C1] ? rcu_cpu_kthread_park+0x90/0x90 [ 808.716595][ C1] ? __run_timers+0x77c/0x810 [ 808.716617][ C1] ? detach_timer+0x350/0x350 [ 808.716632][ C1] ? lock_chain_count+0x20/0x20 [ 808.716656][ C1] handle_softirqs+0x291/0x910 [ 808.716672][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 808.716687][ C1] ? do_softirq+0x210/0x210 [ 808.716699][ C1] ? hrtimer_interrupt+0x775/0x980 [ 808.716716][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 808.716731][ C1] __irq_exit_rcu+0x13b/0x230 [ 808.716752][ C1] ? irq_exit_rcu+0x20/0x20 [ 808.716770][ C1] irq_exit_rcu+0x5/0x20 [ 808.716782][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 808.716799][ C1] [ 808.716804][ C1] [ 808.716809][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 808.716823][ C1] RIP: 0010:unwind_next_frame+0x3df/0x1fd0 [ 808.716838][ C1] Code: ef 49 c1 ef 03 41 0f b6 04 2f 84 c0 0f 85 3f 15 00 00 4c 89 f0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 4c 15 00 00 41 0f b7 45 00 <41> 89 c6 41 83 e6 0f 66 41 83 fe 09 0f 87 bb 0c 00 00 42 ff 24 f5 [ 808.716850][ C1] RSP: 0018:ffffc900032e7700 EFLAGS: 00000246 [ 808.716861][ C1] RAX: 0000000000000015 RBX: ffffc900032e77a8 RCX: ffffffff8e4d5bcc [ 808.716871][ C1] RDX: ffffffff8ecbb8ca RSI: ffffffff8e4d5bc8 RDI: ffffffff8138fb37 [ 808.716881][ C1] RBP: dffffc0000000000 R08: 000000000000000f R09: 0000000000000005 [ 808.716890][ C1] R10: dffffc0000000000 R11: fffff5200065cf01 R12: ffffffff8ecbb8ca [ 808.716901][ C1] R13: ffffffff8ecbb8ce R14: ffffffff8ecbb8cf R15: 1ffffffff1d97719 [ 808.716916][ C1] ? unwind_next_frame+0x97/0x1fd0 [ 808.716936][ C1] ? security_file_ioctl+0x6c/0xa0 [ 808.716954][ C1] ? stack_trace_save+0xf0/0xf0 [ 808.716970][ C1] arch_stack_walk+0x10c/0x140 [ 808.716988][ C1] ? security_file_ioctl+0x6c/0xa0 [ 808.717005][ C1] stack_trace_save+0xa6/0xf0 [ 808.717022][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 808.717037][ C1] ? mark_lock+0x94/0x320 [ 808.717060][ C1] kasan_set_track+0x4b/0x70 [ 808.717076][ C1] ? kasan_set_track+0x4b/0x70 [ 808.717093][ C1] ? __kasan_kmalloc+0x8e/0xa0 [ 808.717110][ C1] ? __kmalloc+0xb3/0x240 [ 808.717128][ C1] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 808.717144][ C1] ? tomoyo_path_number_perm+0x22f/0x650 [ 808.717159][ C1] ? security_file_ioctl+0x6c/0xa0 [ 808.717194][ C1] ? __kmem_cache_alloc_node+0x19d/0x270 [ 808.717210][ C1] __kasan_kmalloc+0x8e/0xa0 [ 808.717228][ C1] ? tomoyo_realpath_from_path+0xe2/0x5c0 [ 808.717245][ C1] __kmalloc+0xb3/0x240 [ 808.717265][ C1] tomoyo_realpath_from_path+0xe2/0x5c0 [ 808.717284][ C1] ? tomoyo_domain+0xd2/0x120 [ 808.717303][ C1] ? tomoyo_path_number_perm+0x205/0x650 [ 808.717319][ C1] tomoyo_path_number_perm+0x22f/0x650 [ 808.717336][ C1] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 808.717370][ C1] ? __fget_files+0x28/0x460 [ 808.717402][ C1] security_file_ioctl+0x6c/0xa0 [ 808.717419][ C1] __se_sys_ioctl+0x48/0x170 [ 808.717438][ C1] do_syscall_64+0x4c/0xa0 [ 808.717451][ C1] ? clear_bhb_loop+0x60/0xb0 [ 808.717464][ C1] ? clear_bhb_loop+0x60/0xb0 [ 808.717478][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 808.717498][ C1] RIP: 0033:0x7fb012b9e159 [ 808.717511][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.717522][ C1] RSP: 002b:00007fb013b1d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 808.717536][ C1] RAX: ffffffffffffffda RBX: 00007fb012e25fa0 RCX: 00007fb012b9e159 [ 808.717546][ C1] RDX: 0000000000000001 RSI: 0000000040042409 RDI: 0000000000000004 [ 808.717555][ C1] RBP: 00007fb012c3506b R08: 0000000000000000 R09: 0000000000000000 [ 808.717563][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 808.717572][ C1] R13: 00007fb012e26038 R14: 00007fb012e25fa0 R15: 00007ffe349336f8 [ 808.717589][ C1]