last executing test programs: 4.517003235s ago: executing program 3 (id=43007): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x10, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0xd4000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x406, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000340)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 4.069760311s ago: executing program 3 (id=43017): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005000000", @ANYRES32, @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) r4 = socket$kcm(0xa, 0x2, 0x73) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000080)={0x5, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}) sendmsg$kcm(r4, &(0x7f0000001140)={&(0x7f0000001300)=@in6={0xa, 0x4e22, 0x2, @mcast2={0xff, 0x5}, 0xd}, 0x80, 0x0}, 0x24048844) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="63202a3a2a207700253951179bd27cb77a420c58481d89252cb56431cac8ff2d989b476355da067e7315f6016c6ed2318af79bc3d06ddb092d0db94cde9f8324754196cf591002aee6b6bf04c8b997298277445215c2e26993017498b2f5d83d2ec3cbff29cc47902898849ec99a7ede1f26"], 0x8) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 3.981275987s ago: executing program 3 (id=43020): socket$kcm(0xa, 0x2, 0x88) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa8600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x8200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x0, 0x31, 0x0, 0x84) socket$kcm(0x11, 0x2, 0x0) socket$kcm(0x11, 0xa, 0x300) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x891a, &(0x7f0000000000)={'wg1\x00', @random="0200e97fffff"}) r2 = socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x7fffffff, 0x20000}, 0x4001, 0x0, 0x0, 0x6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="b7020000f53f6314bfa300000000000024020000fffeff7f7a0300fef0ffffff79a4f0ff00000000b7060000ffffffff2e64050000000000750afaff07cd02020404000000247d60b7030000030a00006a0a00fe0000000c850000005a000000b70000000000002995000000000000001da5ad3548ebb63d18c5071c7e821c9b767ac8308fbcd5c5e4a5ad1065b572c2c9ff215ac60c2ceaea4c0ec908abb6e7325ec1956bd8660bf3664148a2c96752fe2bb328dff1a15750ab9a780001000000000000d4bf20c2bd152d814f01f2cd519e078d4ffab418e4682b2aec5e4a35629e8ef040c50287c37a7f4182f32333b08c6e497687e10a4daea5cac0ceafdbb126eb02a1f5104d16ddb64963d84d91814cd5817e0b8f6f5e6ee7a39e180b5a18ed786b782ab1321ea5e82ae5ba2c42a5e23ea6253d5df768d0cb9f35e4f41a6211e52bb3598e9b5d4f22d8c19f958e8b34de35949a7a48ce18799ee53da177a81ea65e652c1d71b7ee86a75b0100000042127a8f84538a9a311c757f7169f006f3f5c95177fbd0b14b36259e2905ef911785c88a16aae46084d676d8ef8aa6ecc2d32e3f4ee367c5a769c0a606636c9f4a4413c098f4fcc96623b7c373b0ef04d55b846b094bf97e2ef5987b6e09a6a7cab79bffda141f65e7d9ebe3be70c436432b70a80cce69df30d3d67d84ccf3f9db9b690111de2ddc4b153c989ef100bbf76063d3f6ffffb73d70e9c3d7b90aecf48e7565efff2dbbb512218c98442406333c890923a797e00b75481739952fe87fde27ce81893f54ec0ea8e792414f639bc9ce1fea3f6ac0d7025759d4b45576c205c70631e8ad585951950e521f4e210b6494e3c52d927195737945cc03d5668483151710de246420a1b6c55b73876a6ed7fd0d9338923789a1edcd8043fe83919088383268324a25df14010c8ed6b8d43400eaa00ff9bc46e1cfecbdc0e451ac53b409d04544d3a7edd4d447d2fb431e226ae182b8dcc86fe09b404e0b7c723d3b19c3dc382fa91fb0fb8f9f3f13296bb1758b24aad0922091d49e2bc408a5a37deee7a60b903d2d9fe9d451cafcc8dc389671c2d08b6e264150a6b9445b00cee4585af04fa69e0380be0d66649dcf3bf8a906b029faca75ce34c41aec7aa86e596119109ea8b3f7c65c902499227c087301643baab1c95bb22cedd913b22dcaa197ccc34586dc50bd9f4628e3e77a0de32e356521df06f995cb57f97052fc4158250ccecfb67ea8faf509593fadc7eafb613327b052397af1ede94d87590ce90a0a7579766f0e5eb09d38ac46e99e7ec4fcd3cb0b1a8c531724d5ef6b334803cedaa9cedf16dc3af6e0b67f62a83a256474c97c925d9d447175b535c87dbdeb0dcca5303eed6689ea91e1665c691df736368dde47e6672e93a314c5f60e7b68c2242bd0f0d8c66449d8687dcf2d0f76668b2b9bf8b32b99b7daf34b2d825d192ade90a1162acfe9749d516d014cef5f99126324ea02baea5808c430985749901b09e4902a6f5addc0103756b894418e4591c624a9b206abbfb888d413d923b0d7c9d997d6d8e64787c4d397f57a15b6e0b4212b6cb55b9c207bbe08f483b1bea05f41b9a1d3af087047c568ae6ebfc0bb5ec10b6290dc757a4903a88fb2c035b2349b6d2f0c051b8b7718384eebd5fc19928cea713ff09e179c308fbe9bd64374d96ef2447a2a4af5ca0c39e7ca2e801e57560a55e9cfa095cf3f74398219ad1030a79517a88de7596429a20793e12616aa32b3e720c6521fbe93963e9536d16f3db211fca7dd99c0a0125ff8ef534b93dcb34e1da2c008a9f2a29e30823bf0ec3639cadaf9be9608358e1e5ab17eea477b1754f78f45468c9568471667f82f5e250b979b9f2bd0d1b6bc03d11811ac6eec9a3ecd9e3c3299ee5eb3c6cac8fbd06514b7ee743ece79c04566d02a08fd5fcabbab3d129c0cced3ce11dafa380700000000000000c114d0b423e64c6157fac5e4e2168f33541daeff9983d0e488a78bef538f870b84798272b2101e0abf1cd64500b79e01e11d727389653bd80a39d5bbe2e23d2f5ff10047423429981bd9b4ce680e174c266391e3e7689452654e5cd5ada6e025327a1942b5a068f15fa58eaa267d4e0881783dddbdd777f8be0824ffdf6d06c621880dbbe9534f15e8c2e364d3ec67deb6ab9f2a0f03212972dbd38500000008173553a67be48633103809eee0be51d67d7ce230b389607b4c3b18da1c48f3180f2e0d79e54565fdd9a099b5b5ba2761905b88b7cbfc39c35dd153609da3da263438f12769602c2195245ff83e249119d4f6cabfbdef84ada19ef4a67ed66d7043036515d0be5a231f99e71aba5d5ae04676eff3e85f0844c41bbcfde7a931d1ec55c01f703bfd1b97756bfe55a91f6b379f34a018906339771157c66dbd7471d1beec7f029ef552cf5e92a1a0db21b59355763967ce26a577bc514b6d22a09c385c5ba6caf524e1688fc0f29f8bb35ae7bc8eb5ba51aebdf7d972c3267cedbe77ed70d9c539bc455a6f88b39196c8a224b0acf4d796fea59a07baa34cc270fb096ef330fbebdf872d7d0bc4f9a963355c554abc5cdb91464faabcd09cd9a53f5d1b2ea7e96f428f7cd6735c19c61dc9942d30bf29ef85ed01c2fcd6060aa40eeff971477b4fde48507b7bad95a496540adff7e4a72fd1f94d7c703ab1525c946c54e0da3d7ebfcc8cea2e84c3b310aaea5a1627df898c00a9aaf2d88a36afa4c5b1816384310600001c33125ad7f7970beeb256aec06e39fc6c66544e1d1dc5fea4b68a82e3568ca30aea9a1d097f06f11dc362f4bae5ef57c67686a15855cd351bf26f40fb1348cfce79897682228e6d9643530c81bab27bf7b1c4a76a5be180bb830cf06827c3f38a9c9c580c732c30aaceda78b0297de35a922b1375b129655beb31899e26052cc216f832fdb0a0015f93c9cff77f59cda1ec5f3e358848756cebb074266a47e39ae26e80e8c65aaf73c24925458520a9ca98760d1005c9f81846459ae6d5baa4f02807939ddc29c3520f7c58ed9bc5a569c7a1bc33cf4f330a18276ffb4550b9166c3939e8041094bec034aa0ec6638b74fe34f0f1ec6903a1135808d5d8d26c9203c3f87e66c407b7c5c0888d4558dd657cc0213efad68e76fdd7b23e68064fd4b271ed79c50abacdd2871b0c1f8c971df59a5a1901ddf804bed43e391f882d2a45c51cdbba86b2a1b7c0c4923642a731ea4dcbad2b6ebbebe787a8e28e781d75beee924b3b1e390750f316648133922c021f98fd2d5d71a7a3679397ef6cf432837b7e264831ec01c4c3146ba0caac3b13d55945ec00e978a1c1712cd51187936200606c9cd6877b2f72125295c54721f8e15df2ae282a8becb99a726fd92acc92141e1f574b4b0b3c992a61af3372d0d9217776b1a42cd2cee816a70bf1ddd69b590d53e28ba356e74b38e23e50d898e95cdc7cc809e462c884b53f672aab1411ecfd4c91e7a9782fc6763f0efd4bcbaf1fc3a00000000000000000000000000000000500000000000000000000000048e510340087caf22439d5304bd704a6a78a512269a9b1cbd13bea78c807bbc73853ae187cbb768673e9d1bf74a3b0a6c234accd8506adf314f4c5e08174540b69d3c0da660052b43b86baf49e7ac64d9c21598b1e01dc1e1b5a53626b090496dbf7af441e397016c3c094d5c91ffe0a7ceacfd225ed9a6c905f79ad7052747dd6cceef4c310e0e935311118bc6bf0e5ca6c7cca7d5c03be570308da8a40578b4db14961fbccf6e2f2d56e9509c434126515b56d032e20c12e830d1bc64826fc9b318da5911e466878dbb81edeff69363fb75af5cd80536f14d2eaa7764db23acdbd394bbbbccfd8b129258bb0a93cee1d44f8665172c06933d20f184b78b435462c52a85149451ffd564c56a7cbf11a1127c77242915e43b2bc"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x80044942, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff00) 3.427150259s ago: executing program 3 (id=43025): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x4, 0x3, 0x7f, 0x0, 0x3, 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0x4}, 0x20060, 0xe, 0x0, 0x8, 0x1000, 0x5, 0x9, 0x0, 0x9419, 0x0, 0x7fffffff}, 0x0, 0x5, r0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 3.174837214s ago: executing program 3 (id=43032): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000001040)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000140)="97", 0xffe0}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x7b, &(0x7f0000000000)=r3, 0x8) close(r0) 2.974392836s ago: executing program 0 (id=43033): socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffe, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000000040)=r0, 0x4) socketpair(0x1d, 0x2, 0x2, &(0x7f0000000380)) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x10) socketpair(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_bp={&(0x7f0000000080), 0xc513712de0aa1929}}, 0x0, 0x0, 0xffffffffffffffff, 0x8) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_int(r1, &(0x7f00000000c0)='io.max\x00', 0x2, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="130000005200130001e96543f9ee605e1c"], 0xfe33) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 2.974149246s ago: executing program 1 (id=43034): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe7d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0xf, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000a40), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, &(0x7f0000000ac0), 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000200, 0x0, @perf_config_ext={0x0, 0x3}, 0x800, 0x8000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 2.973876196s ago: executing program 3 (id=43035): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$cgroup(0xffffffffffffffff, &(0x7f00000000c0)='syz1\x00', 0x200002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000070000000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000300), 0x0}, 0x20) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000440)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000010) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_clone(0x61000600, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x4, 0x98, &(0x7f00000000c0)=""/152}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{}, 0x0, 0x0}, 0x20) 2.926496128s ago: executing program 1 (id=43037): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x24, 0x80}, 0xac84, 0x86d, 0x1, 0x4, 0x5, 0x0, 0x6, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xfffffffffffffc64, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 2.596627118s ago: executing program 0 (id=43039): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r0) 2.500617914s ago: executing program 4 (id=43040): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 2.239026959s ago: executing program 1 (id=43041): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x1, '\x00', r2, r1, 0x5, 0x4, 0x3}, 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.71059592s ago: executing program 4 (id=43045): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xfffd, 0x4e22, 0x4, @dev}}, 0x80, 0x0}, 0x2004fc10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000320081024e81f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a80016000400014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb79164", 0x75}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x422}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000040)="b90103606989068c3c270040f0832f9e0ff008001fffffe1ffff86dd632f080686dd00017f020001be", 0x0, 0x104, 0x1000000, 0x104, 0x0, &(0x7f0000000400)="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"}, 0x50) r2 = socket$kcm(0xa, 0x922000000003, 0x11) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB], 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f6, &(0x7f0000000900)={'tunl0\x00', @random="0000230c1100"}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x8}, 0x101000, 0x7, 0x8, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a7401", 0x17}], 0x1}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="93430000520033d487277b9b100b4ab50a", @ANYRES32, @ANYRES8=r4], 0xfe33) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600), 0x4) sendmsg$kcm(r2, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1={0xff, 0x2}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000000), 0x4c00}], 0x1}, 0x0) 1.600832736s ago: executing program 1 (id=43046): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000540)=ANY=[@ANYBLOB='+cpu'], 0x5) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x200, 0x80220, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x411, 0x1, 0xb, 0x0, 0x81}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='cpu.weight\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 1.512179491s ago: executing program 4 (id=43047): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x80) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0xa100, 0x7, 0x8, 0x0, 0x2b66, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001000)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x25}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_virt_wifi\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x7, 0x0, 0x0, 0xff, 0xc0004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x80}, 0x4182, 0x2000000000000001, 0xfffffffd, 0xb, 0xfffffffffff7bbfe, 0x40000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x4000000}, 0x0, 0xfffffffffffffff9, 0xffffffffffffffff, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1.418552577s ago: executing program 0 (id=43050): sendmsg$inet(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$kcm(0xa, 0x2, 0x3a) ioctl$TUNSETLINK(r0, 0x400454cd, 0x307) r1 = socket$kcm(0xa, 0x2, 0x73) recvmsg$kcm(r1, 0x0, 0x2063) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x8004, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x8917, 0x0) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz0\x00', 0x200002, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open$cgroup(0x0, r2, 0x2, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x7) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000001440)={r1}) recvmsg$kcm(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10102) 1.417769197s ago: executing program 1 (id=43051): bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x80000005}, {0x2}]}, 0x94) sendmsg$inet(r0, &(0x7f00000029c0)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010101}, 0x10, &(0x7f0000002780)=[{&(0x7f00000006c0)='{', 0x1}], 0x1}, 0x4000040) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) 1.391408018s ago: executing program 4 (id=43052): r0 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_subtree(r0, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000280), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x801c581f, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d5", 0x55}], 0x1, 0x0, 0x0, 0x6}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="120000000600000004000000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r5}, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f00000001c0)="29dd4c808f84a1688ccf6f00f805", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x2, 0xfffffffd, 0x1, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x6, 0x5, 0x10000002, &(0x7f0000000140)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080)=0x1000000, &(0x7f0000000180)}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) 1.306523593s ago: executing program 2 (id=43053): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) write$cgroup_int(r5, &(0x7f00000000c0), 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, &(0x7f0000000180)=r6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.160955422s ago: executing program 2 (id=43054): perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, &(0x7f0000000000)=[{&(0x7f00000000c0)="80", 0x1}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="20000000000000008400000008000000941f6721e757691d0200000000000000180000000000000084"], 0x38}, 0x41) r3 = perf_event_open(&(0x7f0000000000)={0x0, 0xfffffffffffffd46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x402000a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x0, 0xfe}, 0x0, 0x0, r3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11}) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}, 0x4000040) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000110000000000090000000000002d1f0000"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000800)={r5, &(0x7f0000000780)}, 0x20) 1.160574962s ago: executing program 4 (id=43055): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xf1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x208, 0x10, 0x0, 0x9, 0x0, 0x7, 0x0, 0x0, 0xd4000000, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x4}, 0xc00, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x406, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'sit0\x00', @local}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x420, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'sit0\x00', @random="4f33e363a4b1"}) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000340)='\x02\x00\x00\x00\xbc$j\xfef;q1\xff\xd3r\xa3\xc81U\x8ez.F\xce\xfb\x9c\x19\xf3v\x88\x91\xbct\xb0\x1bLq\x15\x00\xad\t\x13\xf5U\x02\xc9d6q\xc3\xa5\xcd\x01t\r=\xad-\x13\xb0 U\xaaC\xc388\x13\xc6H\x0f \x03\x9e\xa98\xa1\xc3\xe9\x06C\xd4\xb5\x18}4\xa9yA8\x1fQ\xdfN\x8e\xd7m\xee\xb8N\x98\xef\xff\xddR\xec~c\xcb\x93\x84\x7f\\x6\xedZ\x82\xa0\x1by\x17\x1a\xc8\x98\x99\x0f') 1.128889414s ago: executing program 0 (id=43056): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0xa0}}, {}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {0x7, 0x0, 0x3, 0x0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}, {0x16}}], {{0x6, 0x1, 0xb, 0x0}, {0x5}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_clone(0xa49a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x4000000}, r5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = gettid() bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009a0000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0x87, &(0x7f0000000480)=""/135}, 0x21) r7 = getpid() sendmsg$unix(r4, &(0x7f00000002c0)={&(0x7f00000001c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000640)="a626d433226b528e9178aa2736db43da55980e980e965036c26214c36ff9ed65e6e5a3b72fb115dab339fab30bd6f4d319aaf8530c42098e3a85f275fa2e40e519b3dac7792a1de7bc70161a7a64165e3c1edb85d114efc2ac3b0f08cea6e6ba4394a1f8661bb58413cce1402bdbb286fca30b956184274f0ae1d58e57c8938a1f23c659b30afad8e4d720c3a94ef0b139d898bf0eda94bf80de46aef32b4632300dc5ce3892835f89827ab420728b6ea800d84da847c9503fe39968a03d0cbaeb7156d1498058895cc391610c4207", 0xcf}, {&(0x7f0000000740)="311cf3893122300354e1c1011c38023e18594e46119614ec171acb04669577ebc5676eb2552d8b23f8d699f82a7d6f4c61ed76142a72ec88822d252ab6a28a15ec5028728fe521b0984e7dee6094c8076ed666c60c5928030a02f2a2471912a2a3a6681ed1239a37b8593051a276f36ef05728259dc0e69f3185209b26c28ff975cbf2a57ea78f05bddaecf4b6d00da48c7d31b32eaaa497a9895f641c654ba2d08c28218b3d66d2a9da7ef403b9e44e6a115a6182d3790d22ec53ec8ba7c11260749fe19b1fe775517a362873a1851b47383555c1e1367d7f4d47fc7223fb1ea1e3166635f89e", 0xe7}], 0x2, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r5, 0x0, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {r6, 0xffffffffffffffff}}}, @rights={{0x1c, 0x1, 0x1, [r3, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, 0xee01, 0xee00}}}], 0x80, 0x20068800}, 0x20000091) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000120081044e81f782db44b9040a11080211000000040000a118000200e000000000000e1208000f0100810401a80016ea1f000940032e5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 916.026066ms ago: executing program 4 (id=43057): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e06800000011000000000000002900000032000000fc000000000000001400000000000000000000000200000004000000000000001c"], 0x68}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000000c0)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="0500"/11, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) close(0xffffffffffffffff) socket$kcm(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 914.496266ms ago: executing program 2 (id=43067): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x2, 0x0, 0x7, 0xff, 0x0, 0x1000, 0x20848, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext={0x24, 0x80}, 0xac84, 0x86d, 0x1, 0x4, 0x5, 0x0, 0x6, 0x0, 0xffffbffe, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xfffffffffffffc64, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3e, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000080)) 391.762477ms ago: executing program 1 (id=43058): socket$kcm(0x10, 0x3, 0x0) socketpair(0x1e, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x2, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x80) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'virt_wifi0\x00'}) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x97a4c4e, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x9c6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x4523, 0x0, 0x8001, 0x0, 0x0, 0x6, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000d00)={0x2, 0x80, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d0", 0x1}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) socket$kcm(0xf, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) 391.303437ms ago: executing program 2 (id=43059): bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000440)=""/183}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4, &(0x7f0000000040), 0x4) perf_event_open(0x0, 0x0, 0xaffffff7ffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xfffffffffffffe7d) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x7, 0x5, 0x0, 0xf, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x0, &(0x7f0000000a40), &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r0, 0x29, 0x5, 0x0, 0x0) r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x85, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000200, 0x0, @perf_config_ext={0x0, 0x3}, 0x800, 0x8000, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2ff, 0x0, 0x8}, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) 390.305827ms ago: executing program 0 (id=43069): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe1b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r1 = socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000003a00)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x9}}, 0x10, &(0x7f0000000b40)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000001a00), 0x101d0}], 0x4}, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r3 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f00000008c0), 0x43) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x4, 0x3, 0x7f, 0x0, 0x3, 0x40, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, @perf_bp={0x0, 0x4}, 0x20060, 0xe, 0x0, 0x8, 0x1000, 0x5, 0x9, 0x0, 0x9419, 0x0, 0x7fffffff}, 0x0, 0x5, r0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[], 0xfdef) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000001500)=""/4098, 0x1002}, {&(0x7f0000000680)=""/240}], 0x221}, 0x1c1) 358.897279ms ago: executing program 2 (id=43060): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x0, 0x7, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuacct.usage_all\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x1, '\x00', r2, r1, 0x5, 0x4, 0x3}, 0xfffffffffffffe13) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61129f00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0xffcf}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wlan0\x00', @multicast}) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b06d25a806c8c6f94f90424fc600400037a0a000900050282c137153e370e0c1180fc0b10000300", 0x33fe0}], 0x1}, 0x0) 82.036765ms ago: executing program 0 (id=43061): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x8, 0x4, 0x4, 0xa}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000780)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x90}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4008744b, &(0x7f0000000180)) 0s ago: executing program 2 (id=43062): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x80102, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x3, 0x4, 0x3fe, 0x7ffffffc, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$kcm(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x4e21, @local}, 0x91, 0x0, 0x11}, 0x8850) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2}, {0x10000002, 0x0, 0xb, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2001}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1) close(r0) kernel console output (not intermixed with test programs): ailed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1989.608681][T24227] netlink: 'syz.0.39366': attribute type 1 has an invalid length. [ 1989.672527][T24227] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.39366'. [ 1989.807298][T24227] netlink: 9 bytes leftover after parsing attributes in process `syz.0.39366'. [ 1992.217383][T24257] netlink: 36 bytes leftover after parsing attributes in process `syz.0.39376'. [ 1992.244874][T24257] netlink: 'syz.0.39376': attribute type 1 has an invalid length. [ 1992.256983][T24257] netlink: 6 bytes leftover after parsing attributes in process `syz.0.39376'. [ 1992.355180][T24265] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 1992.407782][T24265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1993.673147][T24283] device syzkaller0 entered promiscuous mode [ 1994.209689][T24302] netlink: 36 bytes leftover after parsing attributes in process `syz.3.39394'. [ 1994.254856][T24302] netlink: 'syz.3.39394': attribute type 1 has an invalid length. [ 1994.263589][T24302] netlink: 6 bytes leftover after parsing attributes in process `syz.3.39394'. [ 1994.394823][T24316] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.39400'. [ 1997.350212][T24334] device syzkaller0 entered promiscuous mode [ 1997.403219][T24336] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.39411'. [ 1997.520310][T24340] device syzkaller0 entered promiscuous mode [ 1997.570815][T24344] netlink: 379 bytes leftover after parsing attributes in process `syz.1.39415'. [ 1997.614552][T24346] device syzkaller0 entered promiscuous mode [ 1997.752574][T24352] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.39417'. [ 1998.118014][T24373] netlink: 'syz.2.39426': attribute type 29 has an invalid length. [ 1998.737041][T24373] netlink: 'syz.2.39426': attribute type 29 has an invalid length. [ 1999.137077][T24395] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.39436'. [ 1999.668905][T24418] device syzkaller0 entered promiscuous mode [ 1999.983073][T24443] netlink: 'syz.2.39455': attribute type 21 has an invalid length. [ 2000.229888][T24451] netlink: 'syz.0.39458': attribute type 41 has an invalid length. [ 2000.274115][T24451] netlink: 'syz.0.39458': attribute type 4 has an invalid length. [ 2000.304898][T24451] netlink: 152 bytes leftover after parsing attributes in process `syz.0.39458'. [ 2000.407084][T24451] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 2000.723300][T24471] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.39466'. [ 2000.734791][T24471] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2000.940219][T24478] delete_channel: no stack [ 2000.987502][T24481] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2001.051863][T24481] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2001.270988][T24498] netlink: 'syz.1.39475': attribute type 39 has an invalid length. [ 2001.555915][T24504] netlink: 'syz.3.39489': attribute type 39 has an invalid length. [ 2005.036310][T24539] device syzkaller0 entered promiscuous mode [ 2005.081708][T24548] netlink: 'syz.0.39495': attribute type 4 has an invalid length. [ 2005.094843][T24551] netlink: 'syz.4.39494': attribute type 21 has an invalid length. [ 2005.114778][T24548] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.39495'. [ 2005.323549][T24559] netlink: 'syz.0.39499': attribute type 39 has an invalid length. [ 2005.908239][T24590] netlink: 'syz.2.39512': attribute type 4 has an invalid length. [ 2005.919872][T24590] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.39512'. [ 2005.954778][T24581] device syzkaller0 entered promiscuous mode [ 2006.033853][T24595] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.39514'. [ 2006.044949][T24595] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2006.280288][T24606] netlink: 'syz.4.39518': attribute type 39 has an invalid length. [ 2006.475551][T24610] netlink: 'syz.1.39520': attribute type 3 has an invalid length. [ 2006.483634][T24610] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39520'. [ 2006.720896][T24621] netlink: 'syz.4.39526': attribute type 4 has an invalid length. [ 2006.729286][T24621] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.39526'. [ 2006.773793][T24626] netlink: 'syz.2.39538': attribute type 39 has an invalid length. [ 2006.988719][T24629] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.39527'. [ 2007.066232][T24629] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2007.750382][T24652] netlink: 'syz.2.39541': attribute type 39 has an invalid length. [ 2008.088334][T24669] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.39545'. [ 2008.124623][T24669] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2008.134991][T24672] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39547'. [ 2008.187942][T24676] netlink: 'syz.1.39547': attribute type 39 has an invalid length. [ 2008.260892][T24680] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39552'. [ 2008.469177][T24687] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.39554'. [ 2010.311849][T24765] delete_channel: no stack [ 2010.836161][T24786] validate_nla: 9 callbacks suppressed [ 2010.836271][T24786] netlink: 'syz.3.39596': attribute type 29 has an invalid length. [ 2010.872475][T24786] netlink: 'syz.3.39596': attribute type 29 has an invalid length. [ 2010.890482][T24788] netlink: 'syz.3.39596': attribute type 29 has an invalid length. [ 2011.236553][T24796] device wlan0 entered promiscuous mode [ 2011.346770][T24798] __nla_validate_parse: 4 callbacks suppressed [ 2011.346789][T24798] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39600'. [ 2011.367741][T24798] netlink: 'syz.2.39600': attribute type 39 has an invalid length. [ 2012.093498][T24829] device wlan0 entered promiscuous mode [ 2012.194163][T24834] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 2012.255583][T24834] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2012.283413][T24837] netlink: 830 bytes leftover after parsing attributes in process `syz.3.39616'. [ 2012.526090][T24848] netlink: 'syz.3.39622': attribute type 3 has an invalid length. [ 2012.534271][T24848] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.39622'. [ 2012.682400][T24857] netlink: 'syz.2.39626': attribute type 29 has an invalid length. [ 2012.756438][T24857] netlink: 'syz.2.39626': attribute type 29 has an invalid length. [ 2012.770423][T24863] netlink: 'syz.2.39626': attribute type 29 has an invalid length. [ 2012.824225][T24853] device syzkaller0 entered promiscuous mode [ 2012.980569][T24869] device wlan0 entered promiscuous mode [ 2013.015458][T24872] netlink: 'syz.3.39630': attribute type 1 has an invalid length. [ 2013.023413][T24872] netlink: 11834 bytes leftover after parsing attributes in process `syz.3.39630'. [ 2013.080210][T24878] netlink: 'syz.0.39632': attribute type 3 has an invalid length. [ 2013.114532][T24878] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39632'. [ 2013.246930][T24881] netlink: 830 bytes leftover after parsing attributes in process `syz.1.39633'. [ 2013.261300][T24887] team0: Device hsr_slave_0 failed to register rx_handler [ 2014.181764][T24898] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.39640'. [ 2014.423228][T24911] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.39658'. [ 2014.479287][T24914] device wlan0 left promiscuous mode [ 2014.516284][T24918] device wlan0 entered promiscuous mode [ 2014.712077][T24923] netlink: 830 bytes leftover after parsing attributes in process `syz.4.39651'. [ 2014.894663][T24935] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.39659'. [ 2016.066112][T24962] device wlan0 entered promiscuous mode [ 2020.342738][T24985] validate_nla: 8 callbacks suppressed [ 2020.342766][T24985] netlink: 'syz.4.39673': attribute type 29 has an invalid length. [ 2020.405144][T24985] netlink: 'syz.4.39673': attribute type 29 has an invalid length. [ 2020.431207][T24987] netlink: 'syz.4.39673': attribute type 29 has an invalid length. [ 2024.381803][T25016] netlink: 'syz.1.39686': attribute type 10 has an invalid length. [ 2024.401797][T25016] netlink: 40 bytes leftover after parsing attributes in process `syz.1.39686'. [ 2024.422178][T25018] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.39688'. [ 2024.707693][T25032] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.39694'. [ 2024.819670][T25034] netlink: 'syz.0.39692': attribute type 29 has an invalid length. [ 2024.903949][T25034] netlink: 'syz.0.39692': attribute type 29 has an invalid length. [ 2024.930066][T25041] netlink: 'syz.0.39692': attribute type 29 has an invalid length. [ 2025.113090][T25050] netlink: 'syz.0.39698': attribute type 21 has an invalid length. [ 2025.138331][T25050] netlink: 156 bytes leftover after parsing attributes in process `syz.0.39698'. [ 2027.559837][T25065] netlink: 144 bytes leftover after parsing attributes in process `syz.2.39705'. [ 2027.603072][T25066] netlink: 'syz.1.39706': attribute type 3 has an invalid length. [ 2027.634814][T25066] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.39706'. [ 2027.674898][T25065] team0: Port device team_slave_0 removed [ 2027.711327][T25065] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2027.927243][T25077] netlink: 207496 bytes leftover after parsing attributes in process `syz.3.39710'. [ 2028.054705][T25091] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 2031.927392][T25125] netlink: 'syz.4.39726': attribute type 3 has an invalid length. [ 2031.962986][T25125] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.39726'. [ 2031.987692][T25127] netlink: 'syz.1.39724': attribute type 10 has an invalid length. [ 2032.349923][T25131] netlink: 144 bytes leftover after parsing attributes in process `syz.3.39729'. [ 2034.873042][T25131] team0: Port device team_slave_0 removed [ 2034.922554][T25131] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2035.485610][T25156] netlink: 'syz.2.39738': attribute type 3 has an invalid length. [ 2035.493839][T25156] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.39738'. [ 2037.517067][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.523671][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.229423][T25171] netlink: 'syz.2.39743': attribute type 10 has an invalid length. [ 2039.237901][T25171] team0: Device hsr_slave_0 failed to register rx_handler [ 2039.264886][T25173] netlink: 144 bytes leftover after parsing attributes in process `syz.1.39744'. [ 2039.290426][T25173] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 2039.492744][T25187] netlink: 'syz.0.39748': attribute type 10 has an invalid length. [ 2039.502169][T25187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.39748'. [ 2039.517212][T25187] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 2039.524587][T25187] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 2039.566233][T19021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2039.990821][T25208] -: renamed from syzkaller0 [ 2040.353871][T25214] device syzkaller0 entered promiscuous mode [ 2040.694025][T25232] netlink: 'syz.2.39766': attribute type 21 has an invalid length. [ 2040.702551][T25232] netlink: 128 bytes leftover after parsing attributes in process `syz.2.39766'. [ 2040.713038][T25232] netlink: 'syz.2.39766': attribute type 4 has an invalid length. [ 2040.721711][T25232] netlink: 'syz.2.39766': attribute type 5 has an invalid length. [ 2040.735255][T25232] netlink: 3 bytes leftover after parsing attributes in process `syz.2.39766'. [ 2040.874218][T25240] netlink: 'syz.3.39772': attribute type 10 has an invalid length. [ 2040.894602][T25240] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39772'. [ 2041.286469][T25254] -: renamed from syzkaller0 [ 2041.547556][T25256] device syzkaller0 entered promiscuous mode [ 2041.935684][T25274] netlink: 'syz.3.39784': attribute type 21 has an invalid length. [ 2041.958073][T25274] netlink: 128 bytes leftover after parsing attributes in process `syz.3.39784'. [ 2041.996519][T25274] netlink: 'syz.3.39784': attribute type 4 has an invalid length. [ 2042.036651][T25274] netlink: 'syz.3.39784': attribute type 5 has an invalid length. [ 2042.065394][T25274] netlink: 3 bytes leftover after parsing attributes in process `syz.3.39784'. [ 2042.244847][T25283] -: renamed from syzkaller0 [ 2045.836196][T25310] device syzkaller0 entered promiscuous mode [ 2045.843426][T25313] netlink: 'syz.2.39802': attribute type 21 has an invalid length. [ 2045.857056][T25313] netlink: 156 bytes leftover after parsing attributes in process `syz.2.39802'. [ 2045.871048][T25316] netlink: 'syz.4.39803': attribute type 21 has an invalid length. [ 2045.884552][T25316] netlink: 128 bytes leftover after parsing attributes in process `syz.4.39803'. [ 2045.893737][T25316] netlink: 'syz.4.39803': attribute type 4 has an invalid length. [ 2045.942431][T25316] netlink: 'syz.4.39803': attribute type 5 has an invalid length. [ 2045.967581][T25316] netlink: 3 bytes leftover after parsing attributes in process `syz.4.39803'. [ 2046.153551][T25328] netlink: 'syz.4.39817': attribute type 2 has an invalid length. [ 2046.163595][T25328] netlink: 'syz.4.39817': attribute type 8 has an invalid length. [ 2046.171910][T25328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39817'. [ 2046.221521][T25328] netlink: 163744 bytes leftover after parsing attributes in process `syz.4.39817'. [ 2046.237961][T25328] openvswitch: netlink: IP tunnel dst address not specified [ 2047.109030][T25359] Ÿë: port 1(ip6gretap0) entered blocking state [ 2047.134852][T25359] Ÿë: port 1(ip6gretap0) entered disabled state [ 2047.161780][T25359] device ip6gretap0 entered promiscuous mode [ 2047.589178][T25379] netlink: 152 bytes leftover after parsing attributes in process `syz.2.39827'. [ 2047.660324][T25384] netlink: 'syz.3.39829': attribute type 2 has an invalid length. [ 2047.684658][T25384] netlink: 'syz.3.39829': attribute type 8 has an invalid length. [ 2047.700889][T25384] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39829'. [ 2047.978530][T25394] netlink: 'syz.2.39836': attribute type 39 has an invalid length. [ 2047.987379][T25394] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2048.137185][T25394] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2048.184797][T25394] device hsr_slave_1 left promiscuous mode [ 2048.951366][T25401] device syzkaller0 entered promiscuous mode [ 2049.614961][T25424] Ÿë: port 1(ip6gretap0) entered blocking state [ 2049.664573][T25424] Ÿë: port 1(ip6gretap0) entered disabled state [ 2049.733743][T25424] device ip6gretap0 entered promiscuous mode [ 2049.797306][T25434] netlink: 152 bytes leftover after parsing attributes in process `syz.3.39846'. [ 2050.758904][T25460] netlink: 'syz.0.39858': attribute type 39 has an invalid length. [ 2050.810174][T25460] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2053.602737][T25460] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2053.837314][T25478] netlink: 152 bytes leftover after parsing attributes in process `syz.1.39863'. [ 2053.973977][T25486] netlink: 'syz.4.39870': attribute type 2 has an invalid length. [ 2053.991896][T25486] netlink: 'syz.4.39870': attribute type 8 has an invalid length. [ 2054.004699][T25486] netlink: 132 bytes leftover after parsing attributes in process `syz.4.39870'. [ 2054.599809][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.610959][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.627326][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.641809][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.656852][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.671861][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.685533][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.700512][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.717908][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2054.733212][T25502] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2055.029554][T25507] netlink: 'syz.4.39878': attribute type 39 has an invalid length. [ 2057.682096][T25507] device hsr_slave_1 left promiscuous mode [ 2057.832508][T25517] netlink: 'syz.2.39883': attribute type 2 has an invalid length. [ 2057.841024][T25517] netlink: 'syz.2.39883': attribute type 8 has an invalid length. [ 2057.851184][T25517] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39883'. [ 2058.000738][T25523] netlink: 152 bytes leftover after parsing attributes in process `syz.4.39882'. [ 2058.440890][T25555] netlink: 'syz.2.39896': attribute type 39 has an invalid length. [ 2058.976696][T25567] netlink: 152 bytes leftover after parsing attributes in process `syz.0.39902'. [ 2059.031061][T25574] netlink: 'syz.1.39904': attribute type 2 has an invalid length. [ 2059.071685][T25575] netlink: 163744 bytes leftover after parsing attributes in process `syz.1.39904'. [ 2059.081676][T25574] netlink: 'syz.1.39904': attribute type 8 has an invalid length. [ 2059.096223][T25574] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39904'. [ 2059.359941][T25585] netlink: 'syz.3.39908': attribute type 39 has an invalid length. [ 2059.615153][T25591] netlink: 'syz.0.39921': attribute type 2 has an invalid length. [ 2059.623294][T25591] netlink: 'syz.0.39921': attribute type 8 has an invalid length. [ 2059.634716][T25591] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39921'. [ 2059.704160][T25591] netlink: 163744 bytes leftover after parsing attributes in process `syz.0.39921'. [ 2059.715523][T25591] net_ratelimit: 18441 callbacks suppressed [ 2059.715559][T25591] openvswitch: netlink: IP tunnel dst address not specified [ 2059.807334][T25598] Ÿë: port 1(ip6gretap0) entered blocking state [ 2059.814421][T25598] Ÿë: port 1(ip6gretap0) entered disabled state [ 2059.822133][T25598] device ip6gretap0 entered promiscuous mode [ 2060.665235][T25627] netlink: 'syz.0.39925': attribute type 39 has an invalid length. [ 2060.912486][T25634] Ÿë: port 1(ip6gretap0) entered blocking state [ 2060.977165][T25634] Ÿë: port 1(ip6gretap0) entered disabled state [ 2061.003139][T25634] device ip6gretap0 entered promiscuous mode [ 2061.172654][T25645] netlink: 'syz.1.39931': attribute type 2 has an invalid length. [ 2061.204507][T25645] netlink: 'syz.1.39931': attribute type 8 has an invalid length. [ 2061.236249][T25645] netlink: 132 bytes leftover after parsing attributes in process `syz.1.39931'. [ 2061.334956][T25653] netlink: 'syz.3.39938': attribute type 21 has an invalid length. [ 2061.343490][T25653] IPv6: NLM_F_CREATE should be specified when creating new route [ 2061.526240][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.554656][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.574595][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.594710][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.614748][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.644689][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.656537][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.679517][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.697558][T25667] netlink: 'syz.3.39944': attribute type 1 has an invalid length. [ 2061.714996][T25661] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2061.734392][T25667] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.39944'. [ 2064.304147][T25676] netlink: 'syz.2.39947': attribute type 2 has an invalid length. [ 2064.313078][T25676] netlink: 'syz.2.39947': attribute type 8 has an invalid length. [ 2064.322211][T25676] netlink: 132 bytes leftover after parsing attributes in process `syz.2.39947'. [ 2064.362692][T25676] netlink: 163744 bytes leftover after parsing attributes in process `syz.2.39947'. [ 2064.460251][T25681] netlink: 'syz.0.39958': attribute type 1 has an invalid length. [ 2064.513149][T25681] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.39958'. [ 2064.523366][T25686] Ÿë: port 1(ip6gretap0) entered blocking state [ 2064.534793][T25686] Ÿë: port 1(ip6gretap0) entered disabled state [ 2064.542351][T25686] device ip6gretap0 entered promiscuous mode [ 2064.575272][T25688] netlink: 'syz.1.39949': attribute type 39 has an invalid length. [ 2064.715915][T25696] netlink: 'syz.0.39951': attribute type 2 has an invalid length. [ 2064.724000][T25696] netlink: 'syz.0.39951': attribute type 8 has an invalid length. [ 2064.774534][T25696] netlink: 132 bytes leftover after parsing attributes in process `syz.0.39951'. [ 2064.848779][T25705] net_ratelimit: 33020 callbacks suppressed [ 2064.848815][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.872379][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.883736][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.894432][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.907816][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.919402][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.930325][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.948055][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.962567][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2064.994345][T25705] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2065.686692][T25717] netlink: 'syz.3.39962': attribute type 2 has an invalid length. [ 2065.725467][T25717] netlink: 'syz.3.39962': attribute type 8 has an invalid length. [ 2065.733730][T25717] netlink: 132 bytes leftover after parsing attributes in process `syz.3.39962'. [ 2067.609752][T25735] netlink: 'syz.2.39966': attribute type 1 has an invalid length. [ 2067.618086][T25735] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.39966'. [ 2072.185254][T25880] netlink: 'syz.2.40025': attribute type 1 has an invalid length. [ 2072.210778][T25880] device syzkaller0 entered promiscuous mode [ 2072.482170][T25891] device syzkaller0 entered promiscuous mode [ 2074.117868][T25933] netlink: 703 bytes leftover after parsing attributes in process `syz.3.40045'. [ 2074.658801][T25950] netlink: 'syz.3.40053': attribute type 1 has an invalid length. [ 2075.055959][T25955] device syzkaller0 entered promiscuous mode [ 2075.533169][T25977] netlink: 'syz.0.40059': attribute type 21 has an invalid length. [ 2076.140989][T25993] netlink: 'syz.0.40064': attribute type 21 has an invalid length. [ 2076.233168][T25993] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2076.240599][T25993] IPv6: NLM_F_CREATE should be set when creating new route [ 2076.248061][T25993] IPv6: NLM_F_CREATE should be set when creating new route [ 2076.255371][T25993] IPv6: NLM_F_CREATE should be set when creating new route [ 2076.501116][T26004] netlink: 'syz.0.40069': attribute type 1 has an invalid length. [ 2076.527762][T26004] device syzkaller0 entered promiscuous mode [ 2076.843001][T26016] netlink: 'syz.4.40073': attribute type 21 has an invalid length. [ 2078.760558][T26041] netlink: 'syz.4.40084': attribute type 1 has an invalid length. [ 2078.881238][T26044] net_ratelimit: 33018 callbacks suppressed [ 2078.881276][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2078.892967][T26041] device syzkaller0 entered promiscuous mode [ 2078.917102][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2078.941653][T26047] device syzkaller0 entered promiscuous mode [ 2078.960094][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2078.991389][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2079.024041][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2079.039977][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2079.058614][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2079.072763][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2079.087606][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2079.099337][T26044] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 2081.389249][T26051] netlink: 'syz.2.40088': attribute type 21 has an invalid length. [ 2081.397953][T26051] IPv6: NLM_F_CREATE should be specified when creating new route [ 2081.631137][T10795] syzkaller0: tun_net_xmit 76 [ 2081.641087][T10795] syzkaller0: tun_net_xmit 48 [ 2081.670796][ T7225] syzkaller0: tun_net_xmit 76 [ 2081.723242][T26059] syzkaller0: create flow: hash 239709480 index 1 [ 2081.771313][T26058] syzkaller0: delete flow: hash 239709480 index 1 [ 2081.974203][T26082] netlink: 'syz.3.40096': attribute type 21 has an invalid length. [ 2081.982664][T26082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2081.989960][T26082] IPv6: NLM_F_CREATE should be set when creating new route [ 2081.997317][T26082] IPv6: NLM_F_CREATE should be set when creating new route [ 2082.004599][T26082] IPv6: NLM_F_CREATE should be set when creating new route [ 2082.894814][T26114] device syzkaller0 entered promiscuous mode [ 2082.972743][T26112] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40115'. [ 2083.001253][T26117] netlink: 'syz.1.40105': attribute type 1 has an invalid length. [ 2083.110548][T26125] netlink: 'syz.2.40110': attribute type 12 has an invalid length. [ 2083.123203][T26125] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40110'. [ 2083.162803][T26117] device syzkaller0 entered promiscuous mode [ 2083.279395][T26131] syzkaller0: create flow: hash 239709480 index 1 [ 2083.427408][T32358] syzkaller0: tun_net_xmit 76 [ 2083.438316][T32358] syzkaller0: tun_net_xmit 48 [ 2083.451261][T26135] netlink: 'syz.2.40114': attribute type 21 has an invalid length. [ 2083.455072][T29310] syzkaller0: tun_net_xmit 76 [ 2083.470206][T26135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2083.477533][T26135] IPv6: NLM_F_CREATE should be set when creating new route [ 2083.484933][T26135] IPv6: NLM_F_CREATE should be set when creating new route [ 2083.492200][T26135] IPv6: NLM_F_CREATE should be set when creating new route [ 2083.504900][T29310] syzkaller0: tun_net_xmit 76 [ 2083.524800][T26126] syzkaller0: delete flow: hash 239709480 index 1 [ 2083.668610][T26146] netlink: 703 bytes leftover after parsing attributes in process `syz.2.40121'. [ 2083.820783][T26151] netlink: 132 bytes leftover after parsing attributes in process `syz.2.40125'. [ 2083.920614][T26155] device syzkaller0 entered promiscuous mode [ 2084.172824][T26171] netlink: 'syz.4.40130': attribute type 12 has an invalid length. [ 2084.211960][T26171] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40130'. [ 2084.333148][T26179] syzkaller0: create flow: hash 239709480 index 1 [ 2084.364813][T10795] syzkaller0: tun_net_xmit 76 [ 2084.369747][T10795] syzkaller0: tun_net_xmit 48 [ 2084.394959][T25744] syzkaller0: tun_net_xmit 76 [ 2084.449518][T26183] netlink: 'syz.4.40135': attribute type 1 has an invalid length. [ 2084.509649][T26174] syzkaller0: delete flow: hash 239709480 index 1 [ 2084.789875][T26191] device syzkaller0 entered promiscuous mode [ 2084.894988][T26198] syzkaller0: create flow: hash 239709480 index 1 [ 2084.943925][T26196] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40138'. [ 2084.971660][T29310] syzkaller0: tun_net_xmit 76 [ 2084.981706][T29310] syzkaller0: tun_net_xmit 48 [ 2084.996967][T29309] syzkaller0: tun_net_xmit 76 [ 2085.026226][T26197] syzkaller0: delete flow: hash 239709480 index 1 [ 2085.216305][T26213] netlink: 164 bytes leftover after parsing attributes in process `syz.2.40145'. [ 2085.321979][T26216] device syzkaller0 entered promiscuous mode [ 2085.609257][T26228] netlink: 'syz.1.40146': attribute type 12 has an invalid length. [ 2085.625693][T26228] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40146'. [ 2086.381655][T26246] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40154'. [ 2086.577109][T26255] netlink: 'syz.3.40155': attribute type 1 has an invalid length. [ 2086.662836][T26255] device syzkaller0 entered promiscuous mode [ 2087.079188][T26283] netlink: 'syz.3.40163': attribute type 12 has an invalid length. [ 2087.130596][T26283] netlink: 132 bytes leftover after parsing attributes in process `syz.3.40163'. [ 2090.574127][T26323] netlink: 'syz.2.40183': attribute type 10 has an invalid length. [ 2090.641418][T26328] netlink: 'syz.0.40184': attribute type 12 has an invalid length. [ 2090.682709][T26328] __nla_validate_parse: 1 callbacks suppressed [ 2090.683564][T26328] netlink: 132 bytes leftover after parsing attributes in process `syz.0.40184'. [ 2093.656204][T26343] netlink: 132 bytes leftover after parsing attributes in process `syz.4.40189'. [ 2093.876055][T26362] device syzkaller0 entered promiscuous mode [ 2093.902904][T26365] netlink: 'syz.1.40199': attribute type 12 has an invalid length. [ 2093.973651][T26365] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40199'. [ 2097.430447][T26400] device wlan0 left promiscuous mode [ 2098.444810][T26447] delete_channel: no stack [ 2098.501391][T26452] mac80211_hwsim hwsim108 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2098.701286][T26457] delete_channel: no stack [ 2098.956477][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2098.963025][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2099.712494][T26492] mac80211_hwsim hwsim96 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2099.842031][T26502] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40258'. [ 2099.966354][T26502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2100.029636][T26502] bond0 (unregistering): (slave team0): Releasing backup interface [ 2100.072708][T26502] bond0 (unregistering): Released all slaves [ 2101.649799][T26548] mac80211_hwsim hwsim91 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2101.902230][T26550] mac80211_hwsim hwsim110 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 2102.381676][T26572] netlink: 'syz.4.40281': attribute type 10 has an invalid length. [ 2102.502908][T26572] netlink: 'syz.4.40281': attribute type 21 has an invalid length. [ 2102.539855][T26582] netlink: 'syz.0.40285': attribute type 10 has an invalid length. [ 2102.570032][T26582] bridge0: port 4(team0) entered disabled state [ 2102.582215][T26582] device team0 left promiscuous mode [ 2102.639941][T26582] device team_slave_0 left promiscuous mode [ 2102.670223][T26582] device team_slave_1 left promiscuous mode [ 2102.709791][T26582] device geneve1 left promiscuous mode [ 2102.756225][T26582] device hsr_slave_0 left promiscuous mode [ 2102.790031][T26582] bridge0: port 4(team0) entered disabled state [ 2102.830313][T26582] team0: Cannot enslave team device to itself [ 2103.675497][T26617] delete_channel: no stack [ 2103.925398][ T4272] wlan1: Trigger new scan to find an IBSS to join [ 2103.932038][ T154] wlan1: Trigger new scan to find an IBSS to join [ 2105.096009][T26665] delete_channel: no stack [ 2105.240977][T26672] device syzkaller0 entered promiscuous mode [ 2105.472406][T26676] netlink: 'syz.1.40323': attribute type 3 has an invalid length. [ 2105.553553][T26677] netlink: 'syz.1.40323': attribute type 10 has an invalid length. [ 2106.205943][T26685] netlink: 'syz.0.40326': attribute type 10 has an invalid length. [ 2106.295640][T26685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2106.954747][ T154] wlan1: Trigger new scan to find an IBSS to join [ 2106.955319][ T4272] wlan1: Trigger new scan to find an IBSS to join [ 2108.999689][ T154] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2109.011077][T26685] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2109.034746][T19021] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2109.109519][T26685] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 2109.183097][T26700] netlink: 152 bytes leftover after parsing attributes in process `syz.2.40330'. [ 2109.235096][T26696] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 2109.245378][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2109.287545][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 2109.304494][T26696] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 2109.337716][T26696] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2109.761904][T26714] netlink: 'syz.3.40335': attribute type 10 has an invalid length. [ 2109.864943][T26714] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.884498][T26714] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.898519][T26714] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.921551][T26714] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.027296][T26714] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.051747][T26714] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.064838][T26715] delete_channel: no stack [ 2110.083432][T26714] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.113140][T26714] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2110.230765][T26714] team0: Port device geneve1 added [ 2110.414560][T26721] device wlan0 left promiscuous mode [ 2110.438874][T26723] netlink: 'syz.0.40348': attribute type 3 has an invalid length. [ 2110.497121][T26725] netlink: 'syz.0.40348': attribute type 10 has an invalid length. [ 2110.754631][T26732] netlink: 14 bytes leftover after parsing attributes in process `syz.3.40338'. [ 2110.835627][T26732] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2110.876984][T26732] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2110.922394][T26732] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2110.969189][T26732] bond0 (unregistering): Released all slaves [ 2111.107953][T26742] netlink: 'syz.2.40343': attribute type 1 has an invalid length. [ 2111.124616][T26742] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.40343'. [ 2111.250329][T26747] sock: sock_timestamping_bind_phc: sock not bind to device [ 2111.404745][T26751] delete_channel: no stack [ 2111.490620][T26757] netlink: 'syz.2.40361': attribute type 10 has an invalid length. [ 2111.499137][T26757] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2111.527831][T26757] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2111.636607][T26761] netlink: 'syz.4.40352': attribute type 10 has an invalid length. [ 2111.783065][T26761] device geneve1 entered promiscuous mode [ 2111.813170][T26761] team0: Port device geneve1 added [ 2111.813347][T26770] netlink: 'syz.0.40356': attribute type 3 has an invalid length. [ 2111.828048][T26770] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.40356'. [ 2111.870994][T26763] device wlan0 left promiscuous mode [ 2111.997846][T26771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2112.042977][T26771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2112.079166][T26771] batman_adv: batadv0: Interface deactivated: vlan1 [ 2112.094813][T26771] batman_adv: batadv0: Removing interface: vlan1 [ 2112.274940][T26773] netlink: 'syz.2.40358': attribute type 3 has an invalid length. [ 2112.282848][T26778] netlink: 'syz.2.40358': attribute type 10 has an invalid length. [ 2112.583078][T26788] netlink: 14 bytes leftover after parsing attributes in process `syz.4.40360'. [ 2112.683635][T26788] device bond0 left promiscuous mode [ 2112.694468][T26788] device bond_slave_0 left promiscuous mode [ 2112.703277][T26788] device bond_slave_1 left promiscuous mode [ 2112.729591][T26788] team0: Port device bond0 removed [ 2112.741596][T26788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2112.768106][T26788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2112.807470][T26788] bond0 (unregistering): Released all slaves [ 2112.823015][T26790] netlink: 152 bytes leftover after parsing attributes in process `syz.0.40362'. [ 2113.055998][T26803] netlink: 'syz.3.40366': attribute type 10 has an invalid length. [ 2113.065771][T26803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2113.138113][T26803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2113.281832][T26809] sock: sock_timestamping_bind_phc: sock not bind to device [ 2113.424811][T26814] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.444645][T26814] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.464000][T26814] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2113.485204][T26814] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2114.019081][T26829] syzkaller0: create flow: hash 239709480 index 1 [ 2114.066679][ T7225] syzkaller0: tun_net_xmit 76 [ 2114.072335][ T7225] syzkaller0: tun_net_xmit 48 [ 2114.104616][ T7658] syzkaller0: tun_net_xmit 76 [ 2114.124753][ T7658] syzkaller0: tun_net_xmit 76 [ 2114.147561][T26821] syzkaller0: delete flow: hash 239709480 index 1 [ 2114.510795][T26838] netlink: 152 bytes leftover after parsing attributes in process `syz.4.40377'. [ 2114.703181][T26845] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2114.776467][T26845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2114.836215][T26850] sock: sock_timestamping_bind_phc: sock not bind to device [ 2115.376090][T26869] netlink: 1 bytes leftover after parsing attributes in process `syz.0.40390'. [ 2115.611895][T29310] syzkaller0: tun_net_xmit 76 [ 2115.614795][T26877] syzkaller0: create flow: hash 239709480 index 1 [ 2115.623082][T29310] syzkaller0: tun_net_xmit 48 [ 2115.645026][T29309] syzkaller0: tun_net_xmit 76 [ 2115.681504][T26873] syzkaller0: delete flow: hash 239709480 index 1 [ 2115.772114][T26879] netlink: 14 bytes leftover after parsing attributes in process `syz.0.40391'. [ 2115.888884][T26879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2115.951150][T26879] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 2116.011754][T26879] bridge0: port 5(veth0_to_bridge) entered disabled state [ 2116.020873][T26879] bridge0: port 3(netdevsim0) entered disabled state [ 2116.028078][T26879] bridge0: port 2(bridge_slave_1) entered disabled state [ 2116.035996][T26879] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.155819][T26879] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 2116.199954][T26879] bond0 (unregistering): Released all slaves [ 2116.552541][T26895] sock: sock_timestamping_bind_phc: sock not bind to device [ 2116.619811][T26898] device wlan0 left promiscuous mode [ 2116.771085][T26907] validate_nla: 2 callbacks suppressed [ 2116.771103][T26907] netlink: 'syz.2.40408': attribute type 3 has an invalid length. [ 2116.814400][T26907] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.40408'. [ 2116.835172][T26910] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2116.843910][T26910] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2116.882223][T26910] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2116.894029][T26910] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2116.932877][T26910] batman_adv: batadv0: Interface deactivated: vlan1 [ 2116.943739][T26910] batman_adv: batadv0: Removing interface: vlan1 [ 2117.643115][T26933] netlink: 14 bytes leftover after parsing attributes in process `syz.1.40415'. [ 2117.669896][T26933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2117.692606][T26933] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2117.718340][T26933] bond0 (unregistering): Released all slaves [ 2117.731244][T26931] netlink: 152 bytes leftover after parsing attributes in process `syz.3.40425'. [ 2117.832224][T26935] device wlan0 left promiscuous mode [ 2117.907015][T26945] sock: sock_timestamping_bind_phc: sock not bind to device [ 2117.953847][T26943] netlink: 'syz.0.40430': attribute type 39 has an invalid length. [ 2117.990899][T26950] netlink: 'syz.1.40422': attribute type 3 has an invalid length. [ 2118.026602][T26950] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.40422'. [ 2118.080400][T26950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2118.111016][T26950] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2118.153555][T26950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2118.164863][T26950] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2118.192194][T26950] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2118.200987][T26950] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2118.225787][T26950] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 2118.241729][T26950] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2118.310119][T26950] batman_adv: batadv0: Interface deactivated: vlan1 [ 2118.376926][T26950] batman_adv: batadv0: Removing interface: vlan1 [ 2118.835875][T26964] netlink: 14 bytes leftover after parsing attributes in process `syz.2.40431'. [ 2118.859419][T26970] device wlan1 entered promiscuous mode [ 2118.879977][T26970] mac80211_hwsim hwsim130 wlan1: refused to change device tx_queue_len [ 2118.918885][T26972] netlink: 152 bytes leftover after parsing attributes in process `syz.1.40429'. [ 2118.996530][T26983] netlink: 'syz.2.40440': attribute type 39 has an invalid length. [ 2119.138522][T26991] netlink: 'syz.4.40452': attribute type 39 has an invalid length. [ 2119.159651][T26993] netlink: 1 bytes leftover after parsing attributes in process `syz.1.40441'. [ 2119.342528][T26996] netlink: 'syz.3.40443': attribute type 3 has an invalid length. [ 2119.640304][T27004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2119.657445][T27004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2119.706773][T27004] batman_adv: batadv0: Interface deactivated: hsr_slave_1 [ 2119.715768][T27004] batman_adv: batadv0: Removing interface: hsr_slave_1 [ 2119.739372][T27004] batman_adv: batadv0: Interface deactivated: vlan1 [ 2119.748401][T27004] batman_adv: batadv0: Removing interface: vlan1 [ 2119.921911][T27012] netlink: 'syz.2.40446': attribute type 10 has an invalid length. [ 2120.127598][T27020] device syzkaller0 entered promiscuous mode [ 2120.611185][T27041] delete_channel: no stack [ 2120.641661][T27041] __nla_validate_parse: 1 callbacks suppressed [ 2120.641712][T27041] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.40463'. [ 2120.736487][T27041] net_ratelimit: 33018 callbacks suppressed [ 2120.736523][T27041] netlink: zone id is out of range [ 2120.778993][T27041] netlink: zone id is out of range [ 2120.796343][T27041] netlink: del zone limit has 8 unknown bytes [ 2120.848599][T27040] delete_channel: no stack [ 2120.922965][T27057] netlink: 'syz.3.40466': attribute type 10 has an invalid length. [ 2121.410006][T27091] netlink: 'syz.1.40481': attribute type 10 has an invalid length. [ 2121.532153][T27093] delete_channel: no stack [ 2121.574551][T27093] netlink: 201392 bytes leftover after parsing attributes in process `syz.0.40482'. [ 2121.592738][T27093] netlink: zone id is out of range [ 2121.598682][T27093] netlink: zone id is out of range [ 2121.610573][T27093] netlink: del zone limit has 8 unknown bytes [ 2121.617322][T27095] netlink: 'syz.1.40483': attribute type 10 has an invalid length. [ 2121.677096][T27092] delete_channel: no stack [ 2121.780352][T27101] netlink: 'syz.1.40487': attribute type 9 has an invalid length. [ 2121.793214][T27101] netlink: 126588 bytes leftover after parsing attributes in process `syz.1.40487'. [ 2122.443518][T27130] delete_channel: no stack [ 2122.507676][T27130] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.40498'. [ 2122.550833][T27130] netlink: zone id is out of range [ 2122.568451][T27132] netlink: 'syz.0.40497': attribute type 10 has an invalid length. [ 2122.569829][T27130] netlink: zone id is out of range [ 2122.588596][T27130] netlink: del zone limit has 8 unknown bytes [ 2122.636019][T27129] delete_channel: no stack [ 2122.681155][T27137] netlink: 'syz.0.40500': attribute type 9 has an invalid length. [ 2122.690260][T27137] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.40500'. [ 2122.727171][T27135] device syzkaller0 entered promiscuous mode [ 2122.810889][T27144] netlink: 'syz.2.40504': attribute type 3 has an invalid length. [ 2122.819155][T27144] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.40504'. [ 2123.165331][T27158] device syzkaller0 entered promiscuous mode [ 2123.182251][T27156] netlink: 'syz.4.40507': attribute type 3 has an invalid length. [ 2123.190427][T27156] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.40507'. [ 2123.292222][T27156] batman_adv: batadv0: Interface deactivated: vlan1 [ 2123.327317][T27156] batman_adv: batadv0: Removing interface: vlan1 [ 2123.810255][T27175] netlink: 'syz.2.40514': attribute type 9 has an invalid length. [ 2123.834556][T27175] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.40514'. [ 2124.445427][T27202] netlink: 'syz.4.40526': attribute type 10 has an invalid length. [ 2124.505241][T27202] netlink: 40 bytes leftover after parsing attributes in process `syz.4.40526'. [ 2124.515007][T27209] netlink: 'syz.2.40530': attribute type 3 has an invalid length. [ 2124.522858][T27209] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.40530'. [ 2124.561094][T27202] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2124.700410][T27212] device syzkaller0 entered promiscuous mode [ 2125.420204][T27249] netlink: 'syz.3.40543': attribute type 10 has an invalid length. [ 2125.964824][T27258] netlink: 'syz.2.40558': attribute type 10 has an invalid length. [ 2125.973216][T27258] __nla_validate_parse: 5 callbacks suppressed [ 2125.973252][T27258] netlink: 40 bytes leftover after parsing attributes in process `syz.2.40558'. [ 2126.021085][T27258] net_ratelimit: 1 callbacks suppressed [ 2126.021126][T27258] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2126.072152][T27266] netlink: 1 bytes leftover after parsing attributes in process `syz.0.40557'. [ 2126.124619][T27258] netlink: 10 bytes leftover after parsing attributes in process `syz.2.40558'. [ 2126.290666][T27278] sctp: [Deprecated]: syz.1.40551 (pid 27278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2126.290666][T27278] Use struct sctp_sack_info instead [ 2126.307856][T27272] device syzkaller0 entered promiscuous mode [ 2126.511295][T27290] netlink: 202920 bytes leftover after parsing attributes in process `syz.4.40560'. [ 2126.822742][T27299] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.40562'. [ 2127.374199][T27327] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.40574'. [ 2127.441054][T27333] delete_channel: no stack [ 2127.459820][T27333] netlink: 201392 bytes leftover after parsing attributes in process `syz.2.40576'. [ 2127.475919][T27333] netlink: zone id is out of range [ 2127.489914][T27333] netlink: zone id is out of range [ 2127.498270][T27333] netlink: del zone limit has 8 unknown bytes [ 2127.525978][T27332] delete_channel: no stack [ 2127.601826][T27344] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.40578'. [ 2127.638953][T27331] device syzkaller0 entered promiscuous mode [ 2127.669518][T27347] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.40580'. [ 2127.682200][T27338] validate_nla: 1 callbacks suppressed [ 2127.682234][T27338] netlink: 'syz.0.40579': attribute type 10 has an invalid length. [ 2127.696818][T27347] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 2127.711144][T27338] netlink: 40 bytes leftover after parsing attributes in process `syz.0.40579'. [ 2127.769415][T27338] bridge0: port 4(ipvlan1) entered blocking state [ 2127.790663][T27338] bridge0: port 4(ipvlan1) entered disabled state [ 2127.821033][T27338] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2127.985700][T27347] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2128.019850][T27347] CPU: 1 PID: 27347 Comm: syz.1.40580 Not tainted syzkaller #0 [ 2128.027455][T27347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2128.037538][T27347] Call Trace: [ 2128.040839][T27347] [ 2128.043787][T27347] dump_stack_lvl+0x188/0x250 [ 2128.048510][T27347] ? show_regs_print_info+0x20/0x20 [ 2128.053737][T27347] ? load_image+0x400/0x400 [ 2128.058289][T27347] sysfs_warn_dup+0x8a/0xa0 [ 2128.062825][T27347] sysfs_do_create_link_sd+0xc0/0x110 [ 2128.068226][T27347] device_add+0x7ed/0xfb0 [ 2128.072618][T27347] wiphy_register+0x1e81/0x2c30 [ 2128.077519][T27347] ? cfg80211_event_work+0x40/0x40 [ 2128.082649][T27347] ? minstrel_ht_alloc+0x808/0x980 [ 2128.087778][T27347] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2128.093864][T27347] ieee80211_register_hw+0x2aa1/0x3af0 [ 2128.099360][T27347] ? ieee80211_tasklet_handler+0x20/0x20 [ 2128.105014][T27347] ? rcu_is_watching+0x11/0xa0 [ 2128.109791][T27347] ? memset+0x1e/0x40 [ 2128.113780][T27347] ? hrtimer_init+0x10c/0x220 [ 2128.118596][T27347] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2128.124369][T27347] hwsim_new_radio_nl+0xa6f/0xc40 [ 2128.129421][T27347] genl_rcv_msg+0xcea/0xf90 [ 2128.133945][T27347] ? genl_bind+0x380/0x380 [ 2128.138378][T27347] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2128.144377][T27347] ? lock_chain_count+0x20/0x20 [ 2128.149243][T27347] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2128.155415][T27347] ? lockdep_hardirqs_on+0x94/0x140 [ 2128.160627][T27347] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 2128.166795][T27347] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2128.173316][T27347] ? lock_acquire+0x208/0x400 [ 2128.178034][T27347] netlink_rcv_skb+0x1f5/0x440 [ 2128.182811][T27347] ? genl_bind+0x380/0x380 [ 2128.187244][T27347] ? netlink_ack+0xb50/0xb50 [ 2128.191847][T27347] ? __lock_acquire+0x7d10/0x7d10 [ 2128.196922][T27347] ? down_read+0x1aa/0x2e0 [ 2128.201360][T27347] genl_rcv+0x24/0x40 [ 2128.205357][T27347] netlink_unicast+0x774/0x920 [ 2128.210196][T27347] netlink_sendmsg+0x8ba/0xbe0 [ 2128.214980][T27347] ? netlink_getsockopt+0x570/0x570 [ 2128.220187][T27347] ? aa_sock_msg_perm+0x94/0x150 [ 2128.225147][T27347] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2128.230440][T27347] ? security_socket_sendmsg+0x7c/0xa0 [ 2128.235917][T27347] ? netlink_getsockopt+0x570/0x570 [ 2128.241145][T27347] ____sys_sendmsg+0x5b7/0x8f0 [ 2128.245930][T27347] ? __sys_sendmsg_sock+0x30/0x30 [ 2128.250993][T27347] ? import_iovec+0x6f/0xa0 [ 2128.255521][T27347] ___sys_sendmsg+0x236/0x2e0 [ 2128.260244][T27347] ? __sys_sendmsg+0x2a0/0x2a0 [ 2128.265025][T27347] ? trace_event_raw_event_lock_acquire+0x2b0/0x2b0 [ 2128.271649][T27347] __se_sys_sendmsg+0x1af/0x290 [ 2128.276519][T27347] ? __x64_sys_sendmsg+0x80/0x80 [ 2128.281472][T27347] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2128.287483][T27347] ? lockdep_hardirqs_on+0x94/0x140 [ 2128.292697][T27347] do_syscall_64+0x4c/0xa0 [ 2128.297123][T27347] ? clear_bhb_loop+0x30/0x80 [ 2128.301807][T27347] ? clear_bhb_loop+0x30/0x80 [ 2128.306493][T27347] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2128.312417][T27347] RIP: 0033:0x7f9859ebaf79 [ 2128.316840][T27347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2128.336458][T27347] RSP: 002b:00007f98580f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2128.344880][T27347] RAX: ffffffffffffffda RBX: 00007f985a136090 RCX: 00007f9859ebaf79 [ 2128.352864][T27347] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2128.360841][T27347] RBP: 00007f9859f516e0 R08: 0000000000000000 R09: 0000000000000000 [ 2128.368818][T27347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2128.376799][T27347] R13: 00007f985a136128 R14: 00007f985a136090 R15: 00007ffdacb86c88 [ 2128.384792][T27347] [ 2128.616633][T27366] netlink: 'syz.1.40595': attribute type 10 has an invalid length. [ 2128.642087][T27366] bridge0: port 5(ipvlan1) entered blocking state [ 2128.664981][T27366] bridge0: port 5(ipvlan1) entered disabled state [ 2128.716922][T27366] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2129.025686][T27388] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 2129.179174][T27395] sctp: [Deprecated]: syz.0.40597 (pid 27395) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2129.179174][T27395] Use struct sctp_sack_info instead [ 2129.226402][T27388] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2129.235145][T27388] CPU: 0 PID: 27388 Comm: syz.2.40596 Not tainted syzkaller #0 [ 2129.242723][T27388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2129.252805][T27388] Call Trace: [ 2129.256110][T27388] [ 2129.259085][T27388] dump_stack_lvl+0x188/0x250 [ 2129.263821][T27388] ? show_regs_print_info+0x20/0x20 [ 2129.269061][T27388] ? load_image+0x400/0x400 [ 2129.273628][T27388] sysfs_warn_dup+0x8a/0xa0 [ 2129.278159][T27388] sysfs_do_create_link_sd+0xc0/0x110 [ 2129.283569][T27388] device_add+0x7ed/0xfb0 [ 2129.287938][T27388] wiphy_register+0x1e81/0x2c30 [ 2129.292865][T27388] ? cfg80211_event_work+0x40/0x40 [ 2129.298013][T27388] ? minstrel_ht_alloc+0x808/0x980 [ 2129.303298][T27388] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2129.309413][T27388] ieee80211_register_hw+0x2aa1/0x3af0 [ 2129.314933][T27388] ? ieee80211_tasklet_handler+0x20/0x20 [ 2129.320594][T27388] ? rcu_is_watching+0x11/0xa0 [ 2129.325382][T27388] ? memset+0x1e/0x40 [ 2129.329388][T27388] ? hrtimer_init+0x10c/0x220 [ 2129.334112][T27388] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2129.339879][T27388] hwsim_new_radio_nl+0xa6f/0xc40 [ 2129.344950][T27388] genl_rcv_msg+0xcea/0xf90 [ 2129.349511][T27388] ? genl_bind+0x380/0x380 [ 2129.353982][T27388] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2129.359742][T27388] ? verify_lock_unused+0x140/0x140 [ 2129.364973][T27388] ? verify_lock_unused+0x140/0x140 [ 2129.370202][T27388] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2129.375970][T27388] ? perf_trace_preemptirq_template+0x2aa/0x360 [ 2129.382255][T27388] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2129.388822][T27388] netlink_rcv_skb+0x1f5/0x440 [ 2129.393620][T27388] ? genl_bind+0x380/0x380 [ 2129.398075][T27388] ? netlink_ack+0xb50/0xb50 [ 2129.402701][T27388] ? __lock_acquire+0x7d10/0x7d10 [ 2129.407762][T27388] ? down_read+0x1aa/0x2e0 [ 2129.412410][T27388] genl_rcv+0x24/0x40 [ 2129.416430][T27388] netlink_unicast+0x774/0x920 [ 2129.421263][T27388] netlink_sendmsg+0x8ba/0xbe0 [ 2129.426070][T27388] ? netlink_getsockopt+0x570/0x570 [ 2129.431298][T27388] ? aa_sock_msg_perm+0x94/0x150 [ 2129.436275][T27388] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2129.441593][T27388] ? security_socket_sendmsg+0x7c/0xa0 [ 2129.447095][T27388] ? netlink_getsockopt+0x570/0x570 [ 2129.452319][T27388] ____sys_sendmsg+0x5b7/0x8f0 [ 2129.457137][T27388] ? __sys_sendmsg_sock+0x30/0x30 [ 2129.462200][T27388] ? import_iovec+0x6f/0xa0 [ 2129.466750][T27388] ___sys_sendmsg+0x236/0x2e0 [ 2129.471561][T27388] ? __sys_sendmsg+0x2a0/0x2a0 [ 2129.476368][T27388] ? perf_trace_run_bpf_submit+0xf3/0x1c0 [ 2129.482140][T27388] __se_sys_sendmsg+0x1af/0x290 [ 2129.487034][T27388] ? __x64_sys_sendmsg+0x80/0x80 [ 2129.492015][T27388] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2129.497969][T27388] do_syscall_64+0x4c/0xa0 [ 2129.502428][T27388] ? clear_bhb_loop+0x30/0x80 [ 2129.507140][T27388] ? clear_bhb_loop+0x30/0x80 [ 2129.511852][T27388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2129.517777][T27388] RIP: 0033:0x7f296673bf79 [ 2129.522229][T27388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2129.541862][T27388] RSP: 002b:00007f2964976028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2129.550428][T27388] RAX: ffffffffffffffda RBX: 00007f29669b7090 RCX: 00007f296673bf79 [ 2129.558429][T27388] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 2129.566432][T27388] RBP: 00007f29667d26e0 R08: 0000000000000000 R09: 0000000000000000 [ 2129.574450][T27388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2129.582455][T27388] R13: 00007f29669b7128 R14: 00007f29669b7090 R15: 00007ffcdfa461e8 [ 2129.590479][T27388] [ 2129.719264][T27399] device syzkaller0 entered promiscuous mode [ 2129.922118][T27410] netlink: 'syz.1.40603': attribute type 4 has an invalid length. [ 2130.063216][T27420] netlink: 'syz.0.40607': attribute type 10 has an invalid length. [ 2130.094750][T27420] bridge0: port 4(ipvlan1) entered blocking state [ 2130.105151][T27420] bridge0: port 4(ipvlan1) entered disabled state [ 2130.132801][T27420] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 2130.825394][T27425] netlink: 'syz.0.40618': attribute type 15 has an invalid length. [ 2131.092412][T27441] device syzkaller0 entered promiscuous mode [ 2131.570768][T27449] sctp: [Deprecated]: syz.4.40615 (pid 27449) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2131.570768][T27449] Use struct sctp_sack_info instead [ 2132.342064][T27464] netlink: 'syz.3.40624': attribute type 15 has an invalid length. [ 2132.517070][T27474] netlink: 'syz.1.40629': attribute type 29 has an invalid length. [ 2132.526824][T27474] netlink: 'syz.1.40629': attribute type 29 has an invalid length. [ 2132.573024][T27474] netlink: 'syz.1.40629': attribute type 29 has an invalid length. [ 2132.592717][T27474] netlink: 'syz.1.40629': attribute type 29 has an invalid length. [ 2132.810637][T27483] validate_nla: 2 callbacks suppressed [ 2132.810669][T27483] netlink: 'syz.1.40634': attribute type 1 has an invalid length. [ 2132.875469][T27483] __nla_validate_parse: 10 callbacks suppressed [ 2132.875504][T27483] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.40634'. [ 2133.104405][T27500] netlink: 'syz.4.40639': attribute type 15 has an invalid length. [ 2133.283494][T27510] netlink: 'syz.4.40642': attribute type 29 has an invalid length. [ 2133.292437][T27510] netlink: 'syz.4.40642': attribute type 29 has an invalid length. [ 2133.362173][T27510] netlink: 128 bytes leftover after parsing attributes in process `syz.4.40642'. [ 2133.375139][T27510] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2133.412157][T27515] netlink: 'syz.4.40642': attribute type 29 has an invalid length. [ 2133.455428][T27510] netlink: 'syz.4.40642': attribute type 29 has an invalid length. [ 2133.555187][T27515] netlink: 'syz.4.40642': attribute type 29 has an invalid length. [ 2134.841618][T27548] netlink: 'syz.0.40667': attribute type 1 has an invalid length. [ 2134.904681][T27548] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.40667'. [ 2135.307126][T27569] netlink: 'syz.1.40666': attribute type 39 has an invalid length. [ 2135.340354][T27571] netlink: 'syz.0.40665': attribute type 29 has an invalid length. [ 2135.384785][T27571] netlink: 128 bytes leftover after parsing attributes in process `syz.0.40665'. [ 2135.417680][T27571] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2135.662551][T27588] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.40674'. [ 2135.937861][T27606] netlink: 128 bytes leftover after parsing attributes in process `syz.3.40684'. [ 2135.963488][T27606] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2136.423580][T27621] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.40690'. [ 2136.966043][T27633] netlink: 60387 bytes leftover after parsing attributes in process `syz.2.40694'. [ 2137.076495][T27641] netlink: 128 bytes leftover after parsing attributes in process `syz.2.40699'. [ 2137.087440][T27641] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2137.184900][T27643] netlink: 209820 bytes leftover after parsing attributes in process `syz.0.40696'. [ 2138.310049][T27663] validate_nla: 19 callbacks suppressed [ 2138.310083][T27663] netlink: 'syz.2.40705': attribute type 1 has an invalid length. [ 2138.325374][T27663] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.40705'. [ 2138.703682][T27681] netlink: 'syz.0.40710': attribute type 39 has an invalid length. [ 2141.195495][T19021] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2141.205958][ T154] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 2142.063925][T27714] netlink: 'syz.2.40728': attribute type 10 has an invalid length. [ 2142.241076][T27725] netlink: 'syz.3.40730': attribute type 39 has an invalid length. [ 2142.534184][T27740] netlink: 209820 bytes leftover after parsing attributes in process `syz.3.40738'. [ 2145.846963][T27762] netlink: 'syz.1.40758': attribute type 29 has an invalid length. [ 2145.864936][T27762] netlink: 'syz.1.40758': attribute type 29 has an invalid length. [ 2145.885641][T27764] netlink: 'syz.2.40748': attribute type 39 has an invalid length. [ 2145.930875][T27762] netlink: 'syz.1.40758': attribute type 29 has an invalid length. [ 2145.973257][T27762] netlink: 'syz.1.40758': attribute type 29 has an invalid length. [ 2146.020426][T27762] netlink: 'syz.1.40758': attribute type 29 has an invalid length. [ 2146.275544][T27784] netlink: 209820 bytes leftover after parsing attributes in process `syz.1.40756'. [ 2147.066838][T27787] netlink: 'syz.3.40757': attribute type 3 has an invalid length. [ 2147.104593][T27787] netlink: 'syz.3.40757': attribute type 1 has an invalid length. [ 2147.154821][T27787] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.40757'. [ 2147.591005][T27795] netlink: 143108 bytes leftover after parsing attributes in process `syz.2.40762'. [ 2147.617739][T27795] netlink: 'syz.2.40762': attribute type 1 has an invalid length. [ 2148.318784][T27806] netlink: 'syz.4.40763': attribute type 39 has an invalid length. [ 2148.343366][T27808] device syzkaller0 entered promiscuous mode [ 2148.392167][T27808] device syzkaller0 left promiscuous mode [ 2148.949490][T27832] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.40772'. [ 2150.446618][T27865] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2150.504101][T27865] device syzkaller0 entered promiscuous mode [ 2151.087739][T27891] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.40796'. [ 2151.351917][T27889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40797'. [ 2152.336316][T27899] device syzkaller0 entered promiscuous mode [ 2152.372510][T27901] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2152.422920][T27901] device syzkaller0 entered promiscuous mode [ 2152.796083][T27925] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.40811'. [ 2152.826491][T27924] netlink: 143108 bytes leftover after parsing attributes in process `syz.1.40810'. [ 2152.926743][T27924] netlink: 'syz.1.40810': attribute type 1 has an invalid length. [ 2153.978365][T27939] netlink: 'syz.2.40817': attribute type 29 has an invalid length. [ 2153.987255][T27939] netlink: 'syz.2.40817': attribute type 29 has an invalid length. [ 2154.002525][T27939] netlink: 128 bytes leftover after parsing attributes in process `syz.2.40817'. [ 2154.024040][T27939] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2154.046818][T27939] netlink: 'syz.2.40817': attribute type 29 has an invalid length. [ 2154.067694][T27939] netlink: 'syz.2.40817': attribute type 29 has an invalid length. [ 2154.102615][T27939] netlink: 'syz.2.40817': attribute type 29 has an invalid length. [ 2154.223582][T27945] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2154.243418][T27945] device syzkaller0 entered promiscuous mode [ 2154.395252][ T4295] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 2154.403124][ T4295] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2154.682626][T27970] netlink: 209820 bytes leftover after parsing attributes in process `syz.4.40825'. [ 2154.707986][T27972] netlink: 'syz.1.40830': attribute type 29 has an invalid length. [ 2154.744088][T27972] netlink: 'syz.1.40830': attribute type 29 has an invalid length. [ 2154.871884][T27976] netlink: 'syz.1.40830': attribute type 29 has an invalid length. [ 2154.898025][T27976] netlink: 'syz.1.40830': attribute type 29 has an invalid length. [ 2155.981561][T27986] netlink: 143108 bytes leftover after parsing attributes in process `syz.3.40835'. [ 2156.750587][T28006] device syzkaller0 entered promiscuous mode [ 2157.299657][T28028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.40851'. [ 2157.839873][T28051] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2157.872508][T28051] device syzkaller0 entered promiscuous mode [ 2158.179740][T28060] device syzkaller0 entered promiscuous mode [ 2158.214468][T28063] syzkaller0: create flow: hash 239709480 index 3 [ 2158.225477][ T7658] syzkaller0: tun_net_xmit 48 [ 2158.256004][T28060] syzkaller0: delete flow: hash 239709480 index 3 [ 2158.352469][T28072] netlink: 209820 bytes leftover after parsing attributes in process `syz.2.40869'. [ 2160.398201][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2160.404718][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2161.497125][T28078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.40870'. [ 2161.759350][T28094] device syzkaller0 entered promiscuous mode [ 2162.539922][T28103] validate_nla: 7 callbacks suppressed [ 2162.539968][T28103] netlink: 'syz.1.40878': attribute type 19 has an invalid length. [ 2162.557489][T28103] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.40878'. [ 2162.596561][T28108] netlink: 180 bytes leftover after parsing attributes in process `syz.2.40879'. [ 2162.625657][T28106] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2162.679098][T28106] device syzkaller0 entered promiscuous mode [ 2163.020337][T28123] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.40889'. [ 2163.035913][T28123] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2163.073352][T28123] openvswitch: netlink: Message has 1 unknown bytes. [ 2163.212522][T28130] device syzkaller0 entered promiscuous mode [ 2163.762589][T28149] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2163.783055][T28149] device syzkaller0 entered promiscuous mode [ 2163.992277][T28156] netlink: 'syz.4.40902': attribute type 19 has an invalid length. [ 2164.016998][T28156] netlink: 14552 bytes leftover after parsing attributes in process `syz.4.40902'. [ 2164.133767][T28160] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2164.156614][T28160] device syzkaller0 entered promiscuous mode [ 2164.876451][T28198] netlink: 'syz.3.40921': attribute type 19 has an invalid length. [ 2164.890392][T28198] netlink: 14552 bytes leftover after parsing attributes in process `syz.3.40921'. [ 2165.050747][T28192] device syzkaller0 entered promiscuous mode [ 2165.062250][T28204] device syzkaller0 entered promiscuous mode [ 2165.832510][T28238] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.40933'. [ 2165.848387][T28238] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2165.867063][T28238] openvswitch: netlink: Message has 1 unknown bytes. [ 2166.076844][T28244] device veth0_to_bridge left promiscuous mode [ 2166.140148][T28244] bridge0: port 5(veth0_to_bridge) entered disabled state [ 2166.200258][T28244] device netdevsim0 left promiscuous mode [ 2166.206552][T28244] bridge0: port 3(netdevsim0) entered disabled state [ 2166.215134][T28244] device bridge_slave_1 left promiscuous mode [ 2166.221481][T28244] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.230957][T28244] device bridge_slave_0 left promiscuous mode [ 2166.238196][T28244] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.337733][T28251] netlink: 'syz.2.40937': attribute type 19 has an invalid length. [ 2166.347249][T28251] netlink: 14552 bytes leftover after parsing attributes in process `syz.2.40937'. [ 2166.616542][T28249] device syzkaller0 entered promiscuous mode [ 2166.648157][T28265] device syzkaller0 entered promiscuous mode [ 2166.853066][T28271] device syzkaller0 entered promiscuous mode [ 2166.864703][T25744] syzkaller0: tun_net_xmit 48 [ 2167.248555][T28289] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.40954'. [ 2167.336511][T28289] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2167.387088][T28289] openvswitch: netlink: Message has 1 unknown bytes. [ 2167.401425][T28295] device syzkaller0 entered promiscuous mode [ 2167.503978][T28290] device syzkaller0 entered promiscuous mode [ 2167.534412][T28295] syzkaller0: create flow: hash 239709480 index 3 [ 2167.696807][T28300] syzkaller0: delete flow: hash 239709480 index 3 [ 2167.707766][T28306] netlink: 'syz.1.40959': attribute type 29 has an invalid length. [ 2167.855826][T28306] netlink: 'syz.1.40959': attribute type 29 has an invalid length. [ 2168.112021][T28311] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2168.133677][T28311] device syzkaller0 entered promiscuous mode [ 2168.722276][T28334] device syzkaller0 entered promiscuous mode [ 2168.826017][T28334] syzkaller0: create flow: hash 1211438087 index 3 [ 2168.969375][T28348] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.40974'. [ 2169.020348][T28348] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2169.061444][T28348] openvswitch: netlink: Message has 1 unknown bytes. [ 2169.697904][T28339] syzkaller0: delete flow: hash 1211438087 index 3 [ 2170.017046][T28354] netlink: 132 bytes leftover after parsing attributes in process `syz.1.40980'. [ 2170.370495][T28381] netlink: 'syz.2.40992': attribute type 29 has an invalid length. [ 2170.413971][T28381] netlink: 'syz.2.40992': attribute type 29 has an invalid length. [ 2170.477280][T28383] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.40991'. [ 2170.488981][T28383] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2170.498481][T28383] openvswitch: netlink: Message has 1 unknown bytes. [ 2171.827032][T28422] netlink: 'syz.2.41002': attribute type 7 has an invalid length. [ 2171.840221][T28422] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.41002'. [ 2172.182686][T28431] netlink: 'syz.3.41008': attribute type 10 has an invalid length. [ 2172.636810][T28444] netlink: 'syz.3.41013': attribute type 29 has an invalid length. [ 2172.669413][T28444] netlink: 'syz.3.41013': attribute type 29 has an invalid length. [ 2172.715049][T28455] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.41017'. [ 2172.725164][T28455] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2172.733641][T28455] openvswitch: netlink: Message has 1 unknown bytes. [ 2173.940947][T28476] netlink: 'syz.4.41025': attribute type 10 has an invalid length. [ 2174.010380][T28479] netlink: 'syz.2.41039': attribute type 10 has an invalid length. [ 2174.071909][T28480] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.41038'. [ 2174.143658][T28480] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 2174.169320][T28490] netlink: 152 bytes leftover after parsing attributes in process `syz.2.41032'. [ 2174.216765][T28480] openvswitch: netlink: Message has 1 unknown bytes. [ 2174.482309][T28499] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2174.502017][T28499] device syzkaller0 entered promiscuous mode [ 2177.945256][T28514] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.41044'. [ 2178.807103][T28539] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.41054'. [ 2181.219885][T28543] device wg2 left promiscuous mode [ 2181.279737][T28545] device wg2 entered promiscuous mode [ 2182.003143][T28577] device syzkaller0 entered promiscuous mode [ 2182.011412][T28579] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.41067'. [ 2182.118849][T28581] device wg2 entered promiscuous mode [ 2182.326481][T28601] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.41078'. [ 2183.139628][T28612] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.41083'. [ 2185.647516][T28632] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.41090'. [ 2185.735575][T28634] device syzkaller0 entered promiscuous mode [ 2185.765239][T26698] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2185.929818][T28644] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.41095'. [ 2186.436519][T28655] netlink: 'syz.1.41108': attribute type 6 has an invalid length. [ 2187.696047][T28680] netlink: 'syz.3.41117': attribute type 6 has an invalid length. [ 2187.844430][T28686] netlink: 'syz.2.41120': attribute type 6 has an invalid length. [ 2187.880807][T28689] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.41107'. [ 2188.201963][T28697] netlink: 'syz.0.41124': attribute type 6 has an invalid length. [ 2189.627680][T28732] sctp: [Deprecated]: syz.2.41127 (pid 28732) Use of int in maxseg socket option. [ 2189.627680][T28732] Use struct sctp_assoc_value instead [ 2189.667401][T28732] netlink: 'syz.2.41127': attribute type 49 has an invalid length. [ 2189.963790][T28748] netlink: 'syz.4.41130': attribute type 6 has an invalid length. [ 2190.349156][T28763] device syzkaller0 entered promiscuous mode [ 2190.365746][T28765] netlink: 'syz.1.41137': attribute type 1 has an invalid length. [ 2190.739472][T28777] netlink: 'syz.4.41143': attribute type 7 has an invalid length. [ 2190.769466][T28777] netlink: 140 bytes leftover after parsing attributes in process `syz.4.41143'. [ 2193.747098][T28787] device wg2 entered promiscuous mode [ 2194.493239][T28811] netlink: 'syz.3.41155': attribute type 1 has an invalid length. [ 2194.828549][T28821] netlink: 'syz.0.41151': attribute type 6 has an invalid length. [ 2195.945287][T28832] netlink: 'syz.0.41174': attribute type 6 has an invalid length. [ 2199.127137][T28853] netlink: 'syz.2.41175': attribute type 1 has an invalid length. [ 2199.170208][T28854] Ÿë: port 2(veth0_to_bridge) entered blocking state [ 2199.239323][T28854] Ÿë: port 2(veth0_to_bridge) entered disabled state [ 2199.287732][T28854] device veth0_to_bridge entered promiscuous mode [ 2202.397230][T28862] Ÿë: port 3(veth0_to_team) entered blocking state [ 2202.403912][T28862] Ÿë: port 3(veth0_to_team) entered disabled state [ 2202.427941][T28862] device veth0_to_team entered promiscuous mode [ 2202.641296][T28878] netlink: 'syz.2.41181': attribute type 6 has an invalid length. [ 2203.030113][T28895] netlink: 'syz.4.41188': attribute type 1 has an invalid length. [ 2203.060001][T28896] netlink: 198364 bytes leftover after parsing attributes in process `syz.0.41190'. [ 2203.150676][T28903] device wg2 entered promiscuous mode [ 2203.500638][T28919] netlink: 'syz.0.41197': attribute type 6 has an invalid length. [ 2206.727877][T28964] netlink: 'syz.2.41215': attribute type 2 has an invalid length. [ 2206.739323][T28964] netlink: 14 bytes leftover after parsing attributes in process `syz.2.41215'. [ 2206.814008][T28962] device wg2 entered promiscuous mode [ 2206.961152][T28976] netlink: 'syz.3.41217': attribute type 6 has an invalid length. [ 2207.791036][T29007] netlink: 'syz.0.41235': attribute type 6 has an invalid length. [ 2207.999383][T29020] netlink: 'syz.2.41241': attribute type 20 has an invalid length. [ 2208.915569][T29060] device syzkaller0 entered promiscuous mode [ 2209.193537][T29075] netlink: 'syz.0.41262': attribute type 2 has an invalid length. [ 2209.238145][T29075] netlink: 14 bytes leftover after parsing attributes in process `syz.0.41262'. [ 2209.434163][T29077] device syzkaller0 entered promiscuous mode [ 2209.684157][T29095] netlink: 'syz.2.41274': attribute type 29 has an invalid length. [ 2209.720437][T29095] netlink: 'syz.2.41274': attribute type 29 has an invalid length. [ 2209.731126][T29095] netlink: 'syz.2.41274': attribute type 29 has an invalid length. [ 2209.741970][T29095] netlink: 'syz.2.41274': attribute type 4 has an invalid length. [ 2209.753656][T29100] netlink: 'syz.0.41273': attribute type 39 has an invalid length. [ 2209.755010][T29095] netlink: 206236 bytes leftover after parsing attributes in process `syz.2.41274'. [ 2210.068060][T29109] netlink: 'syz.0.41277': attribute type 1 has an invalid length. [ 2210.136539][T29109] netlink: 157116 bytes leftover after parsing attributes in process `syz.0.41277'. [ 2210.225982][T29114] netlink: 'syz.0.41277': attribute type 16 has an invalid length. [ 2210.256523][T29114] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41277'. [ 2210.306361][T29116] netlink: 14 bytes leftover after parsing attributes in process `syz.1.41279'. [ 2211.817839][T29163] sctp: [Deprecated]: syz.0.41299 (pid 29163) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2211.817839][T29163] Use struct sctp_sack_info instead [ 2212.171581][T29168] device syzkaller0 entered promiscuous mode [ 2212.380974][T29179] netlink: 14 bytes leftover after parsing attributes in process `syz.3.41303'. [ 2212.740473][T29188] device syzkaller0 entered promiscuous mode [ 2213.061402][T29198] netlink: 60 bytes leftover after parsing attributes in process `syz.4.41316'. [ 2213.273222][T29213] validate_nla: 5 callbacks suppressed [ 2213.273261][T29213] netlink: 'syz.4.41320': attribute type 20 has an invalid length. [ 2213.317602][T29209] netlink: 399 bytes leftover after parsing attributes in process `syz.3.41318'. [ 2213.425555][T29220] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2213.478203][T29219] netlink: 'syz.3.41322': attribute type 39 has an invalid length. [ 2214.371832][T29240] netlink: 'syz.2.41341': attribute type 2 has an invalid length. [ 2214.380170][T29240] netlink: 164 bytes leftover after parsing attributes in process `syz.2.41341'. [ 2214.492309][T29244] netlink: 'syz.2.41331': attribute type 10 has an invalid length. [ 2214.655077][T29251] netlink: 'syz.4.41336': attribute type 2 has an invalid length. [ 2214.699856][T29251] netlink: 'syz.4.41336': attribute type 8 has an invalid length. [ 2214.734453][T29251] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41336'. [ 2214.796055][T29254] netlink: 'syz.3.41334': attribute type 20 has an invalid length. [ 2215.005175][T29267] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2215.168258][T29273] netlink: 'syz.1.41344': attribute type 2 has an invalid length. [ 2215.176785][T29273] netlink: 164 bytes leftover after parsing attributes in process `syz.1.41344'. [ 2215.572436][T29293] netlink: 'syz.1.41351': attribute type 20 has an invalid length. [ 2215.727472][T29302] netlink: 60 bytes leftover after parsing attributes in process `syz.3.41358'. [ 2215.989366][T29313] netlink: 'syz.4.41362': attribute type 2 has an invalid length. [ 2216.014471][T29313] netlink: 164 bytes leftover after parsing attributes in process `syz.4.41362'. [ 2216.266848][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.317542][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.364356][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.395801][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.414336][T29333] device hsr0 entered promiscuous mode [ 2216.435919][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.444365][T29332] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2216.754415][T29344] device syzkaller0 entered promiscuous mode [ 2216.784860][T29346] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2216.971694][T29355] netlink: 144 bytes leftover after parsing attributes in process `syz.4.41389'. [ 2216.991199][T29357] netlink: 164 bytes leftover after parsing attributes in process `syz.0.41377'. [ 2217.218322][T29368] sctp: [Deprecated]: syz.4.41383 (pid 29368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2217.218322][T29368] Use struct sctp_sack_info instead [ 2217.241103][T29370] device syzkaller0 entered promiscuous mode [ 2217.439962][T29374] device syzkaller0 entered promiscuous mode [ 2217.446348][T29374] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2217.700006][T29383] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.709854][T29383] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.751735][T29383] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2217.782151][T29383] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2220.901427][T29397] device syzkaller0 entered promiscuous mode [ 2221.591123][T29413] device syzkaller0 entered promiscuous mode [ 2221.605197][T29413] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2221.836196][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2221.842666][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.038681][T29420] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2222.319811][T29441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41414'. [ 2222.367521][T29441] netlink: 1 bytes leftover after parsing attributes in process `syz.1.41414'. [ 2222.502425][T29443] device syzkaller0 entered promiscuous mode [ 2222.756727][T29455] validate_nla: 8 callbacks suppressed [ 2222.756784][T29455] netlink: 'syz.0.41420': attribute type 41 has an invalid length. [ 2222.783072][T29455] netlink: 'syz.0.41420': attribute type 41 has an invalid length. [ 2222.835618][T29456] netlink: 'syz.1.41421': attribute type 10 has an invalid length. [ 2222.866333][T29456] nr0: port 1(hsr0) entered disabled state [ 2223.805214][T29473] netlink: 4 bytes leftover after parsing attributes in process `syz.3.41429'. [ 2224.210630][T29484] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 2224.288906][T29482] device syzkaller0 entered promiscuous mode [ 2224.757551][T29492] netlink: 'syz.4.41436': attribute type 10 has an invalid length. [ 2224.796172][T29492] nr0: port 1(hsr0) entered disabled state [ 2225.302086][T29504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41442'. [ 2225.531604][T29516] device syzkaller0 entered promiscuous mode [ 2226.870105][T29538] device syzkaller0 entered promiscuous mode [ 2227.010609][T29559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2227.020675][T29559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2227.029621][T29559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2227.038124][T29559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2227.047159][T29559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2227.055911][T29559] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2227.065959][T29560] netlink: 'syz.2.41460': attribute type 10 has an invalid length. [ 2227.075288][T29560] nr0: port 1(hsr0) entered disabled state [ 2227.341005][T29569] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.41466'. [ 2227.376934][T29569] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2227.410195][T29569] CPU: 0 PID: 29569 Comm: syz.1.41466 Not tainted syzkaller #0 [ 2227.417822][T29569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2227.428015][T29569] Call Trace: [ 2227.431324][T29569] [ 2227.434271][T29569] dump_stack_lvl+0x188/0x250 [ 2227.438986][T29569] ? show_regs_print_info+0x20/0x20 [ 2227.444236][T29569] ? load_image+0x400/0x400 [ 2227.448816][T29569] sysfs_warn_dup+0x8a/0xa0 [ 2227.453359][T29569] sysfs_do_create_link_sd+0xc0/0x110 [ 2227.458779][T29569] device_add+0x7ed/0xfb0 [ 2227.463157][T29569] wiphy_register+0x1e81/0x2c30 [ 2227.468099][T29569] ? cfg80211_event_work+0x40/0x40 [ 2227.473238][T29569] ? minstrel_ht_alloc+0x808/0x980 [ 2227.478377][T29569] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2227.484493][T29569] ieee80211_register_hw+0x2aa1/0x3af0 [ 2227.490007][T29569] ? ieee80211_tasklet_handler+0x20/0x20 [ 2227.495665][T29569] ? rcu_is_watching+0x11/0xa0 [ 2227.500448][T29569] ? memset+0x1e/0x40 [ 2227.504462][T29569] ? hrtimer_init+0x10c/0x220 [ 2227.509179][T29569] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2227.514953][T29569] hwsim_new_radio_nl+0xa6f/0xc40 [ 2227.520020][T29569] genl_rcv_msg+0xcea/0xf90 [ 2227.524551][T29569] ? genl_bind+0x380/0x380 [ 2227.529008][T29569] ? __dev_queue_xmit+0x1c51/0x2fd0 [ 2227.534239][T29569] ? verify_lock_unused+0x140/0x140 [ 2227.539471][T29569] ? kmalloc_large_node+0xf2/0x190 [ 2227.544602][T29569] ? dev_queue_xmit+0x20/0x20 [ 2227.549301][T29569] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2227.555870][T29569] netlink_rcv_skb+0x1f5/0x440 [ 2227.560662][T29569] ? genl_bind+0x380/0x380 [ 2227.565109][T29569] ? netlink_ack+0xb50/0xb50 [ 2227.569727][T29569] ? __lock_acquire+0x7d10/0x7d10 [ 2227.574795][T29569] ? down_read+0x1aa/0x2e0 [ 2227.579239][T29569] genl_rcv+0x24/0x40 [ 2227.583255][T29569] netlink_unicast+0x774/0x920 [ 2227.588168][T29569] netlink_sendmsg+0x8ba/0xbe0 [ 2227.592995][T29569] ? netlink_getsockopt+0x570/0x570 [ 2227.598218][T29569] ? aa_sock_msg_perm+0x94/0x150 [ 2227.603199][T29569] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2227.608507][T29569] ? security_socket_sendmsg+0x7c/0xa0 [ 2227.613990][T29569] ? netlink_getsockopt+0x570/0x570 [ 2227.619214][T29569] ____sys_sendmsg+0x5b7/0x8f0 [ 2227.624007][T29569] ? __sys_sendmsg_sock+0x30/0x30 [ 2227.629068][T29569] ? import_iovec+0x6f/0xa0 [ 2227.633617][T29569] ___sys_sendmsg+0x236/0x2e0 [ 2227.638332][T29569] ? __sys_sendmsg+0x2a0/0x2a0 [ 2227.643144][T29569] ? percpu_counter_add_batch+0x13b/0x160 [ 2227.648931][T29569] __se_sys_sendmsg+0x1af/0x290 [ 2227.653816][T29569] ? __x64_sys_sendmsg+0x80/0x80 [ 2227.658784][T29569] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2227.664816][T29569] ? lockdep_hardirqs_on+0x94/0x140 [ 2227.670043][T29569] do_syscall_64+0x4c/0xa0 [ 2227.674495][T29569] ? clear_bhb_loop+0x30/0x80 [ 2227.679197][T29569] ? clear_bhb_loop+0x30/0x80 [ 2227.683914][T29569] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2227.689827][T29569] RIP: 0033:0x7f9859ebaf79 [ 2227.694269][T29569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2227.713929][T29569] RSP: 002b:00007f9858116028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2227.722374][T29569] RAX: ffffffffffffffda RBX: 00007f985a135fa0 RCX: 00007f9859ebaf79 [ 2227.730420][T29569] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2227.738411][T29569] RBP: 00007f9859f516e0 R08: 0000000000000000 R09: 0000000000000000 [ 2227.746403][T29569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2227.754381][T29569] R13: 00007f985a136038 R14: 00007f985a135fa0 R15: 00007ffdacb86c88 [ 2227.762386][T29569] [ 2229.051599][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.41474'. [ 2229.163514][T29607] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.41480'. [ 2229.319791][T29616] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2229.363331][T29616] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2229.402816][T29616] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2229.440010][T29619] netlink: 'syz.0.41479': attribute type 10 has an invalid length. [ 2229.455770][T29616] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2229.474724][T29616] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2229.502582][T29616] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2231.243377][T29647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41494'. [ 2231.279834][T29645] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.41495'. [ 2231.298898][T29649] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.41507'. [ 2231.321605][T29649] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 2231.334405][T29649] CPU: 0 PID: 29649 Comm: syz.2.41507 Not tainted syzkaller #0 [ 2231.341989][T29649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2231.352073][T29649] Call Trace: [ 2231.355364][T29649] [ 2231.358301][T29649] dump_stack_lvl+0x188/0x250 [ 2231.362996][T29649] ? show_regs_print_info+0x20/0x20 [ 2231.368215][T29649] ? load_image+0x400/0x400 [ 2231.372747][T29649] sysfs_warn_dup+0x8a/0xa0 [ 2231.377350][T29649] sysfs_do_create_link_sd+0xc0/0x110 [ 2231.382729][T29649] device_add+0x7ed/0xfb0 [ 2231.387085][T29649] wiphy_register+0x1e81/0x2c30 [ 2231.391972][T29649] ? cfg80211_event_work+0x40/0x40 [ 2231.397087][T29649] ? minstrel_ht_alloc+0x808/0x980 [ 2231.402210][T29649] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2231.408306][T29649] ieee80211_register_hw+0x2aa1/0x3af0 [ 2231.413810][T29649] ? ieee80211_tasklet_handler+0x20/0x20 [ 2231.419447][T29649] ? rcu_is_watching+0x11/0xa0 [ 2231.424223][T29649] ? memset+0x1e/0x40 [ 2231.428226][T29649] ? hrtimer_init+0x10c/0x220 [ 2231.432920][T29649] mac80211_hwsim_new_radio+0x20d3/0x4080 [ 2231.438670][T29649] hwsim_new_radio_nl+0xa6f/0xc40 [ 2231.443742][T29649] genl_rcv_msg+0xcea/0xf90 [ 2231.448271][T29649] ? genl_bind+0x380/0x380 [ 2231.452710][T29649] ? vmacache_find+0x238/0x590 [ 2231.457478][T29649] ? verify_lock_unused+0x140/0x140 [ 2231.462683][T29649] ? verify_lock_unused+0x140/0x140 [ 2231.467895][T29649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2231.473879][T29649] ? lock_chain_count+0x20/0x20 [ 2231.478748][T29649] ? hwsim_tx_info_frame_received_nl+0x1020/0x1020 [ 2231.485274][T29649] netlink_rcv_skb+0x1f5/0x440 [ 2231.490039][T29649] ? genl_bind+0x380/0x380 [ 2231.494459][T29649] ? netlink_ack+0xb50/0xb50 [ 2231.499057][T29649] ? __lock_acquire+0x7d10/0x7d10 [ 2231.504114][T29649] ? down_read+0x1aa/0x2e0 [ 2231.508548][T29649] genl_rcv+0x24/0x40 [ 2231.512547][T29649] netlink_unicast+0x774/0x920 [ 2231.517348][T29649] netlink_sendmsg+0x8ba/0xbe0 [ 2231.522133][T29649] ? netlink_getsockopt+0x570/0x570 [ 2231.527349][T29649] ? aa_sock_msg_perm+0x94/0x150 [ 2231.532292][T29649] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2231.537585][T29649] ? security_socket_sendmsg+0x7c/0xa0 [ 2231.543056][T29649] ? netlink_getsockopt+0x570/0x570 [ 2231.548267][T29649] ____sys_sendmsg+0x5b7/0x8f0 [ 2231.553054][T29649] ? __sys_sendmsg_sock+0x30/0x30 [ 2231.558125][T29649] ? import_iovec+0x6f/0xa0 [ 2231.562654][T29649] ___sys_sendmsg+0x236/0x2e0 [ 2231.567357][T29649] ? __sys_sendmsg+0x2a0/0x2a0 [ 2231.572142][T29649] ? percpu_counter_add_batch+0x13b/0x160 [ 2231.577898][T29649] __se_sys_sendmsg+0x1af/0x290 [ 2231.582765][T29649] ? __x64_sys_sendmsg+0x80/0x80 [ 2231.587714][T29649] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 2231.593729][T29649] ? lockdep_hardirqs_on+0x94/0x140 [ 2231.598943][T29649] do_syscall_64+0x4c/0xa0 [ 2231.603412][T29649] ? clear_bhb_loop+0x30/0x80 [ 2231.608103][T29649] ? clear_bhb_loop+0x30/0x80 [ 2231.612818][T29649] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2231.618715][T29649] RIP: 0033:0x7f296673bf79 [ 2231.623146][T29649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2231.642767][T29649] RSP: 002b:00007f2964997028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2231.651195][T29649] RAX: ffffffffffffffda RBX: 00007f29669b6fa0 RCX: 00007f296673bf79 [ 2231.659185][T29649] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2231.667187][T29649] RBP: 00007f29667d26e0 R08: 0000000000000000 R09: 0000000000000000 [ 2231.675176][T29649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2231.683168][T29649] R13: 00007f29669b7038 R14: 00007f29669b6fa0 R15: 00007ffcdfa461e8 [ 2231.691174][T29649] [ 2231.737780][T29651] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.41496'. [ 2231.783694][T29660] netlink: 68 bytes leftover after parsing attributes in process `syz.4.41499'. [ 2231.855708][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41512'. [ 2232.213195][T29687] netlink: 'syz.1.41510': attribute type 10 has an invalid length. [ 2232.356805][T29691] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.41513'. [ 2232.452264][T29698] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41516'. [ 2232.760379][T29708] device syzkaller0 entered promiscuous mode [ 2233.179630][T29726] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.41526'. [ 2233.416553][T29733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.41529'. [ 2233.875361][T29749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2233.884141][T29749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2233.915990][T29749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2233.935205][T29749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2233.942545][T29754] netlink: 'syz.3.41534': attribute type 10 has an invalid length. [ 2233.984342][T29749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2233.993370][T29749] Dead loop on virtual device ip6_vti0, fix it urgently! [ 2234.118534][T29761] netlink: 'syz.2.41540': attribute type 10 has an invalid length. [ 2234.127233][T29761] netlink: 40 bytes leftover after parsing attributes in process `syz.2.41540'. [ 2234.138989][T29761] device team0 entered promiscuous mode [ 2234.149308][T29761] device team_slave_1 entered promiscuous mode [ 2234.158148][T29761] device geneve1 entered promiscuous mode [ 2234.166434][T29761] device wlan1 entered promiscuous mode [ 2234.175332][T29761] 8021q: adding VLAN 0 to HW filter on device team0 [ 2234.186256][T29761] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2234.233071][T29768] netlink: 'syz.4.41541': attribute type 3 has an invalid length. [ 2234.246681][T29767] netlink: 68 bytes leftover after parsing attributes in process `syz.0.41542'. [ 2234.260834][T29768] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41541'. [ 2234.706997][T29799] netlink: 68 bytes leftover after parsing attributes in process `syz.3.41554'. [ 2234.730112][T29796] netlink: 'syz.4.41556': attribute type 10 has an invalid length. [ 2234.754550][T29796] netlink: 40 bytes leftover after parsing attributes in process `syz.4.41556'. [ 2234.765562][T29796] bridge0: port 1(team0) entered disabled state [ 2234.803896][T29796] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 2234.854723][T29800] netlink: 'syz.0.41555': attribute type 41 has an invalid length. [ 2234.866846][T29804] netlink: 68 bytes leftover after parsing attributes in process `syz.1.41567'. [ 2235.505936][T29837] netlink: 'syz.1.41569': attribute type 41 has an invalid length. [ 2235.545314][T29837] bridge0: port 3(netdevsim0) entered disabled state [ 2235.693868][T29844] device syzkaller0 entered promiscuous mode [ 2235.769870][T29846] netlink: 'syz.1.41572': attribute type 10 has an invalid length. [ 2236.825021][T29877] netlink: 'syz.3.41585': attribute type 41 has an invalid length. [ 2239.206318][T29957] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2239.351775][T29955] device syzkaller0 entered promiscuous mode [ 2239.405669][T29965] __nla_validate_parse: 3 callbacks suppressed [ 2239.405704][T29965] netlink: 4 bytes leftover after parsing attributes in process `syz.4.41623'. [ 2240.060971][T29980] netlink: 12527 bytes leftover after parsing attributes in process `syz.0.41629'. [ 2240.361566][T29995] netlink: 'syz.1.41635': attribute type 3 has an invalid length. [ 2240.380102][T29995] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.41635'. [ 2240.580100][T29999] device syzkaller0 entered promiscuous mode [ 2240.839466][T30018] netlink: 12527 bytes leftover after parsing attributes in process `syz.2.41645'. [ 2241.192265][T30036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.41662'. [ 2241.242871][T30036] netlink: 1 bytes leftover after parsing attributes in process `syz.1.41662'. [ 2241.265978][T30038] netlink: 'syz.0.41653': attribute type 3 has an invalid length. [ 2241.298559][T30038] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41653'. [ 2244.698151][T30147] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2245.822602][T30186] device syzkaller0 entered promiscuous mode [ 2245.934416][T26698] wlan1: Trigger new scan to find an IBSS to join [ 2246.494631][T30203] device lo left promiscuous mode [ 2246.536122][T30203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2246.581508][T30208] netlink: 44 bytes leftover after parsing attributes in process `syz.4.41720'. [ 2247.582204][T30233] netlink: 'syz.3.41730': attribute type 3 has an invalid length. [ 2247.632280][T30233] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.41730'. [ 2247.923302][T30246] netlink: 44 bytes leftover after parsing attributes in process `syz.3.41739'. [ 2248.055845][T30250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2248.119459][T30257] device syzkaller0 entered promiscuous mode [ 2248.226522][T30267] netlink: 'syz.2.41747': attribute type 10 has an invalid length. [ 2248.413796][T30272] netlink: 'syz.3.41750': attribute type 39 has an invalid length. [ 2248.868256][T30293] netlink: 44 bytes leftover after parsing attributes in process `syz.0.41756'. [ 2248.994078][T30299] device lo left promiscuous mode [ 2249.013744][T30299] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2249.070807][T30305] netlink: 'syz.3.41760': attribute type 10 has an invalid length. [ 2249.147258][T30306] device syzkaller0 entered promiscuous mode [ 2249.211618][T30314] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2249.249698][T30317] netlink: 'syz.4.41775': attribute type 10 has an invalid length. [ 2249.481386][T30328] netlink: 'syz.4.41768': attribute type 12 has an invalid length. [ 2249.513373][T30328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41768'. [ 2249.787158][T30326] device syzkaller0 entered promiscuous mode [ 2249.804039][T30331] netlink: 'syz.4.41768': attribute type 21 has an invalid length. [ 2249.824767][T30331] netlink: 'syz.4.41768': attribute type 6 has an invalid length. [ 2249.832632][T30331] netlink: 132 bytes leftover after parsing attributes in process `syz.4.41768'. [ 2250.224470][T30348] device syzkaller0 entered promiscuous mode [ 2250.282938][T30357] netlink: 'syz.1.41778': attribute type 10 has an invalid length. [ 2250.503178][T30363] device syzkaller0 entered promiscuous mode [ 2250.519853][T30365] netlink: 'syz.1.41782': attribute type 39 has an invalid length. [ 2250.534636][T30375] device syzkaller0 entered promiscuous mode [ 2250.544804][T19021] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2250.874682][T19021] wlan1: Trigger new scan to find an IBSS to join [ 2251.331156][T30414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41804'. [ 2251.576322][T30414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41804'. [ 2251.765989][T30407] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2251.916301][ T4272] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 2252.163622][T30426] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.41811'. [ 2252.332658][T30440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41819'. [ 2252.392827][T30440] netlink: 132 bytes leftover after parsing attributes in process `syz.2.41819'. [ 2252.410255][T30438] device syzkaller0 entered promiscuous mode [ 2252.475758][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2252.536347][T30448] device syzkaller0 entered promiscuous mode [ 2252.740354][T30449] device syzkaller0 entered promiscuous mode [ 2253.187212][T30469] device syzkaller0 entered promiscuous mode [ 2253.457975][T30474] validate_nla: 11 callbacks suppressed [ 2253.458040][T30474] netlink: 'syz.4.41829': attribute type 39 has an invalid length. [ 2253.852744][T30486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2254.445707][T30503] netlink: 'syz.4.41840': attribute type 3 has an invalid length. [ 2254.453649][T30503] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.41840'. [ 2254.639655][T30514] netlink: 'syz.0.41843': attribute type 12 has an invalid length. [ 2254.672201][T30514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41843'. [ 2254.751875][T30514] netlink: 'syz.0.41843': attribute type 21 has an invalid length. [ 2254.774705][T30514] netlink: 'syz.0.41843': attribute type 6 has an invalid length. [ 2254.818051][T30514] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41843'. [ 2256.290609][T30554] netlink: 'syz.3.41856': attribute type 9 has an invalid length. [ 2256.354540][T30554] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.41856'. [ 2256.392426][T30565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2257.286240][T30583] device syzkaller0 entered promiscuous mode [ 2257.475622][T30592] netlink: 10 bytes leftover after parsing attributes in process `syz.2.41873'. [ 2257.875347][T30593] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2258.715318][T30615] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2259.739077][T30641] netlink: 10 bytes leftover after parsing attributes in process `syz.3.41890'. [ 2259.831186][T30643] netlink: 'syz.1.41889': attribute type 9 has an invalid length. [ 2259.848633][T30643] netlink: 61951 bytes leftover after parsing attributes in process `syz.1.41889'. [ 2260.090248][T30646] netlink: 'syz.3.41893': attribute type 12 has an invalid length. [ 2260.194686][T30646] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41893'. [ 2260.221275][T30652] netlink: 'syz.3.41893': attribute type 21 has an invalid length. [ 2260.237659][T30652] netlink: 'syz.3.41893': attribute type 6 has an invalid length. [ 2260.260357][T30652] netlink: 132 bytes leftover after parsing attributes in process `syz.3.41893'. [ 2260.454919][T30656] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2260.547148][T30649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2261.002774][T30686] netlink: 'syz.0.41907': attribute type 12 has an invalid length. [ 2261.021448][T30686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41907'. [ 2261.070148][T30686] netlink: 'syz.0.41907': attribute type 21 has an invalid length. [ 2261.125016][T30686] netlink: 'syz.0.41907': attribute type 6 has an invalid length. [ 2261.144004][T30686] netlink: 132 bytes leftover after parsing attributes in process `syz.0.41907'. [ 2261.469381][T30699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2261.575359][T30708] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2261.987374][T30711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2262.036440][T30716] netlink: 'syz.1.41917': attribute type 10 has an invalid length. [ 2262.064462][T30716] netlink: 55 bytes leftover after parsing attributes in process `syz.1.41917'. [ 2262.698063][T30730] device syzkaller0 entered promiscuous mode [ 2262.777085][T30732] netlink: 'syz.0.41934': attribute type 7 has an invalid length. [ 2266.616333][T30752] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 2266.751776][T30762] netlink: 10 bytes leftover after parsing attributes in process `syz.1.41932'. [ 2266.872988][T30765] netlink: 10 bytes leftover after parsing attributes in process `syz.2.41935'. [ 2266.899954][T30767] netlink: 'syz.4.41948': attribute type 10 has an invalid length. [ 2266.944509][T30767] netlink: 55 bytes leftover after parsing attributes in process `syz.4.41948'. [ 2267.272122][T30778] netlink: 'syz.1.41939': attribute type 7 has an invalid length. [ 2267.495560][T30792] netlink: 'syz.2.41960': attribute type 7 has an invalid length. [ 2267.569271][T30795] netlink: 10 bytes leftover after parsing attributes in process `syz.4.41949'. [ 2267.724955][T30794] delete_channel: no stack [ 2267.849239][T30800] netlink: 10 bytes leftover after parsing attributes in process `syz.4.41951'. [ 2268.209095][T30804] netlink: 10 bytes leftover after parsing attributes in process `syz.0.41964'. [ 2268.312209][T30810] netlink: 'syz.2.41956': attribute type 10 has an invalid length. [ 2268.320562][T30810] netlink: 55 bytes leftover after parsing attributes in process `syz.2.41956'. [ 2269.174035][T30832] netlink: 'syz.3.41963': attribute type 7 has an invalid length. [ 2269.326545][T30841] netlink: 'syz.2.41980': attribute type 2 has an invalid length. [ 2269.796495][T30854] device wlan1 left promiscuous mode [ 2269.836746][T30854] netlink: 10 bytes leftover after parsing attributes in process `syz.3.41970'. [ 2269.938715][T30861] sock: sock_timestamping_bind_phc: sock not bind to device [ 2270.048831][T30863] netlink: 'syz.3.41972': attribute type 10 has an invalid length. [ 2270.068088][T30863] netlink: 55 bytes leftover after parsing attributes in process `syz.3.41972'. [ 2270.175220][T30870] netlink: 'syz.1.41979': attribute type 1 has an invalid length. [ 2270.204662][T30870] netlink: 'syz.1.41979': attribute type 3 has an invalid length. [ 2270.229207][T30870] netlink: 132 bytes leftover after parsing attributes in process `syz.1.41979'. [ 2270.746981][T30883] netlink: 'syz.4.41981': attribute type 7 has an invalid length. [ 2271.146445][T30898] device syzkaller0 entered promiscuous mode [ 2275.178821][T30936] validate_nla: 1 callbacks suppressed [ 2275.178883][T30936] netlink: 'syz.4.42002': attribute type 2 has an invalid length. [ 2275.232694][T30939] netlink: 'syz.1.42004': attribute type 19 has an invalid length. [ 2275.243651][T30939] __nla_validate_parse: 2 callbacks suppressed [ 2275.243763][T30939] netlink: 14552 bytes leftover after parsing attributes in process `syz.1.42004'. [ 2275.511589][T30951] device syzkaller0 entered promiscuous mode [ 2275.797726][T30957] delete_channel: no stack [ 2275.821173][T30965] device syzkaller0 entered promiscuous mode [ 2275.928081][T30969] netlink: 'syz.3.42017': attribute type 10 has an invalid length. [ 2276.587439][T30991] delete_channel: no stack [ 2276.673158][T31003] netlink: 'syz.1.42030': attribute type 10 has an invalid length. [ 2276.702434][T31003] bridge0: port 4(gretap0) entered disabled state [ 2276.709079][T31003] bridge0: port 2(bridge_slave_1) entered disabled state [ 2276.716268][T31003] bridge0: port 1(bridge_slave_0) entered disabled state [ 2276.843311][T31005] device syzkaller0 entered promiscuous mode [ 2277.316767][T31030] netlink: 'syz.0.42051': attribute type 1 has an invalid length. [ 2277.325262][T31031] delete_channel: no stack [ 2277.344108][T31030] netlink: 'syz.0.42051': attribute type 3 has an invalid length. [ 2277.420882][T31030] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42051'. [ 2277.426182][T31038] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42051'. [ 2277.513883][T31040] netlink: 'syz.2.42055': attribute type 1 has an invalid length. [ 2277.527114][T31040] netlink: 'syz.2.42055': attribute type 3 has an invalid length. [ 2277.535337][T31040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42055'. [ 2277.551329][T31040] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42055'. [ 2277.593057][T31042] device syzkaller0 entered promiscuous mode [ 2278.410214][T31075] device syzkaller0 entered promiscuous mode [ 2278.463045][T31077] netlink: 40 bytes leftover after parsing attributes in process `syz.1.42061'. [ 2278.851421][T31102] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42081'. [ 2279.205662][T31121] netlink: 'syz.4.42074': attribute type 1 has an invalid length. [ 2279.213700][T31121] netlink: 'syz.4.42074': attribute type 3 has an invalid length. [ 2279.222879][T31121] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42074'. [ 2279.258899][T31121] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42074'. [ 2279.603932][T31138] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42086'. [ 2280.326310][T31190] __nla_validate_parse: 4 callbacks suppressed [ 2280.326351][T31190] netlink: 40 bytes leftover after parsing attributes in process `syz.4.42107'. [ 2281.215594][T31208] validate_nla: 5 callbacks suppressed [ 2281.215611][T31208] netlink: 'syz.2.42117': attribute type 9 has an invalid length. [ 2281.239680][T31208] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.42117'. [ 2281.885721][T31233] netlink: 'syz.1.42135': attribute type 9 has an invalid length. [ 2281.902636][T31233] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.42135'. [ 2282.280366][T31250] netlink: 'syz.3.42128': attribute type 1 has an invalid length. [ 2282.289501][T31250] netlink: 'syz.3.42128': attribute type 3 has an invalid length. [ 2282.299128][T31250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42128'. [ 2282.314069][T31250] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42128'. [ 2282.712703][T31281] netlink: 'syz.4.42143': attribute type 1 has an invalid length. [ 2282.721766][T31281] netlink: 'syz.4.42143': attribute type 3 has an invalid length. [ 2282.749947][T31281] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42143'. [ 2282.766012][T31282] netlink: 'syz.3.42139': attribute type 1 has an invalid length. [ 2282.775562][T31282] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42139'. [ 2282.787306][T31284] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42143'. [ 2283.124968][T31296] netlink: 'syz.0.42157': attribute type 1 has an invalid length. [ 2283.133521][T31296] netlink: 4 bytes leftover after parsing attributes in process `syz.0.42157'. [ 2283.259773][T31311] netlink: 'syz.2.42154': attribute type 1 has an invalid length. [ 2283.268612][T31311] netlink: 'syz.2.42154': attribute type 3 has an invalid length. [ 2283.277404][T31311] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42154'. [ 2283.288158][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2283.294656][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2284.092585][T31337] device gretap0 left promiscuous mode [ 2284.148322][T31337] bridge0: port 4(gretap0) entered disabled state [ 2284.243520][T31337] device netdevsim0 left promiscuous mode [ 2284.300152][T31337] bridge0: port 3(netdevsim0) entered disabled state [ 2284.378785][T31337] device bridge_slave_1 left promiscuous mode [ 2284.418757][T31337] bridge0: port 2(bridge_slave_1) entered disabled state [ 2284.469777][T31337] device bridge_slave_0 left promiscuous mode [ 2284.503638][T31337] bridge0: port 1(bridge_slave_0) entered disabled state [ 2285.211356][T31375] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2285.906093][T31423] __nla_validate_parse: 3 callbacks suppressed [ 2285.906110][T31423] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.42199'. [ 2286.198030][T31445] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.42223'. [ 2286.311466][T31446] device syzkaller0 entered promiscuous mode [ 2287.245952][T31482] validate_nla: 3 callbacks suppressed [ 2287.245970][T31482] netlink: 'syz.3.42231': attribute type 39 has an invalid length. [ 2287.737930][T31502] mac80211_hwsim hwsim110 O3ãc¤±: renamed from wlan1 [ 2287.782303][T31491] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2288.007926][T31517] netlink: 'syz.2.42247': attribute type 39 has an invalid length. [ 2288.321294][T31534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42252'. [ 2288.525898][T31542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2288.903714][T31558] netlink: 202920 bytes leftover after parsing attributes in process `syz.2.42264'. [ 2291.190896][T31594] mac80211_hwsim hwsim91 O3ãc¤±: renamed from wlan1 [ 2291.915747][T31640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42296'. [ 2292.223118][T31646] mac80211_hwsim hwsim108 O3ãc¤±: renamed from wlan1 [ 2292.803379][T31667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.42307'. [ 2293.349903][T31688] mac80211_hwsim hwsim130 O3ãc¤±: renamed from wlan1 [ 2295.435608][T31741] mac80211_hwsim hwsim96 O3ãc¤±: renamed from wlan1 [ 2298.155859][T31776] netlink: 'syz.0.42358': attribute type 21 has an invalid length. [ 2298.243346][T31776] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42358'. [ 2302.126853][T31827] netlink: 'syz.2.42378': attribute type 10 has an invalid length. [ 2302.136387][T31827] netlink: 55 bytes leftover after parsing attributes in process `syz.2.42378'. [ 2302.398922][T31827] device vlan0 left promiscuous mode [ 2302.406605][T31827] À: port 1(vlan0) entered disabled state [ 2303.295059][T31864] netlink: 'syz.1.42380': attribute type 21 has an invalid length. [ 2303.318249][T31864] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42380'. [ 2303.684817][T31872] netlink: 'syz.3.42387': attribute type 10 has an invalid length. [ 2303.748880][T31872] netlink: 55 bytes leftover after parsing attributes in process `syz.3.42387'. [ 2304.230448][T31872] device vlan0 left promiscuous mode [ 2304.237995][T31872] À: port 1(vlan0) entered disabled state [ 2304.517869][T31897] netlink: 'syz.2.42397': attribute type 21 has an invalid length. [ 2304.529673][T31897] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42397'. [ 2305.713297][T31927] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 2305.730190][T31927] device syzkaller0 entered promiscuous mode [ 2306.062496][T31938] netlink: 'syz.0.42410': attribute type 10 has an invalid length. [ 2306.081515][T31938] netlink: 55 bytes leftover after parsing attributes in process `syz.0.42410'. [ 2306.818866][T31938] device vlan0 left promiscuous mode [ 2306.826458][T31938] À: port 1(vlan0) entered disabled state [ 2306.877733][T31944] netlink: 'syz.3.42413': attribute type 21 has an invalid length. [ 2306.885844][T31944] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42413'. [ 2307.262610][T31967] netlink: 'syz.0.42424': attribute type 3 has an invalid length. [ 2307.282820][T31967] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.42424'. [ 2310.148271][T31997] netlink: 'syz.4.42432': attribute type 21 has an invalid length. [ 2310.172506][T31997] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42432'. [ 2310.597825][T32012] netlink: 'syz.1.42435': attribute type 10 has an invalid length. [ 2310.612070][T32012] netlink: 55 bytes leftover after parsing attributes in process `syz.1.42435'. [ 2313.254187][T32015] netlink: 'syz.3.42441': attribute type 9 has an invalid length. [ 2313.262409][T32015] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.42441'. [ 2313.272094][T32022] netlink: 'syz.2.42446': attribute type 2 has an invalid length. [ 2313.280385][T32022] netlink: 'syz.2.42446': attribute type 8 has an invalid length. [ 2313.295073][T32022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.42446'. [ 2313.377224][T32028] netlink: 144316 bytes leftover after parsing attributes in process `syz.2.42448'. [ 2313.388766][T32028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42448'. [ 2313.416361][T32028] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.42448'. [ 2313.739627][T32051] netlink: 'syz.0.42460': attribute type 2 has an invalid length. [ 2313.758644][T32051] netlink: 'syz.0.42460': attribute type 8 has an invalid length. [ 2313.797467][T32051] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42460'. [ 2314.009311][T32059] netlink: 156 bytes leftover after parsing attributes in process `syz.3.42466'. [ 2314.074604][T32069] netlink: 148 bytes leftover after parsing attributes in process `syz.3.42466'. [ 2314.207014][T32067] netlink: 'syz.4.42463': attribute type 10 has an invalid length. [ 2315.973514][T32138] netlink: 'syz.0.42491': attribute type 10 has an invalid length. [ 2315.994034][T32138] __nla_validate_parse: 2 callbacks suppressed [ 2315.994078][T32138] netlink: 55 bytes leftover after parsing attributes in process `syz.0.42491'. [ 2316.386436][T32153] netlink: 156 bytes leftover after parsing attributes in process `syz.0.42498'. [ 2316.515541][T32158] netlink: 148 bytes leftover after parsing attributes in process `syz.0.42498'. [ 2317.498507][T32198] netlink: 156 bytes leftover after parsing attributes in process `syz.2.42516'. [ 2317.559856][T32200] netlink: 148 bytes leftover after parsing attributes in process `syz.2.42516'. [ 2318.259975][T32222] netlink: 'syz.3.42528': attribute type 2 has an invalid length. [ 2318.303092][T32222] netlink: 'syz.3.42528': attribute type 8 has an invalid length. [ 2318.325413][T32222] netlink: 132 bytes leftover after parsing attributes in process `syz.3.42528'. [ 2319.106038][T32259] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.42540'. [ 2319.396504][T32274] netlink: 'syz.2.42547': attribute type 39 has an invalid length. [ 2319.497881][T32267] netlink: 132 bytes leftover after parsing attributes in process `syz.1.42542'. [ 2319.564008][T32280] netlink: 'syz.4.42545': attribute type 2 has an invalid length. [ 2319.587862][T32280] netlink: 'syz.4.42545': attribute type 8 has an invalid length. [ 2319.614386][T32280] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42545'. [ 2320.392179][T32322] device syzkaller0 entered promiscuous mode [ 2321.174749][T32371] netlink: 'syz.0.42582': attribute type 3 has an invalid length. [ 2321.213499][T32371] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.42582'. [ 2325.628213][T32424] device syzkaller0 entered promiscuous mode [ 2325.894096][T32432] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.42604'. [ 2326.704686][T32459] netlink: 132 bytes leftover after parsing attributes in process `syz.4.42614'. [ 2329.820046][T32495] netlink: 'syz.2.42631': attribute type 3 has an invalid length. [ 2329.890253][T32496] delete_channel: no stack [ 2333.345727][T32659] netlink: 'syz.3.42699': attribute type 3 has an invalid length. [ 2334.906237][T32697] netlink: 'syz.4.42714': attribute type 6 has an invalid length. [ 2335.731946][T32741] netlink: 'syz.1.42731': attribute type 6 has an invalid length. [ 2336.243492][ T303] netdevsim netdevsim4: Direct firmware load for Ö failed with error -2 [ 2336.264322][ T303] netdevsim netdevsim4: Falling back to sysfs fallback for: Ö [ 2336.369455][ T314] netlink: 'syz.3.42747': attribute type 6 has an invalid length. [ 2336.934096][ T346] netlink: 'syz.0.42759': attribute type 10 has an invalid length. [ 2337.086301][ T352] netlink: 'syz.0.42761': attribute type 6 has an invalid length. [ 2337.330428][ T371] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2337.497684][ T378] netlink: 'syz.4.42773': attribute type 3 has an invalid length. [ 2338.176397][ T397] delete_channel: no stack [ 2338.222900][ T402] netlink: 'syz.2.42780': attribute type 6 has an invalid length. [ 2338.549376][ T427] netlink: 'syz.0.42787': attribute type 3 has an invalid length. [ 2338.728354][ T437] delete_channel: no stack [ 2338.880482][ T445] device sit0 entered promiscuous mode [ 2339.431891][ T480] netlink: 'syz.2.42809': attribute type 10 has an invalid length. [ 2339.448512][ T480] team0: Device hsr_slave_0 failed to register rx_handler [ 2340.728135][ T524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2341.264326][ T555] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.42839'. [ 2341.339688][ T555] device syzkaller0 entered promiscuous mode [ 2341.374991][ T553] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 2341.654152][ T561] netlink: 'syz.3.42841': attribute type 10 has an invalid length. [ 2341.720343][ T561] team0: Device hsr_slave_0 failed to register rx_handler [ 2342.418499][ T586] netdevsim netdevsim1: Direct firmware load for Ö failed with error -2 [ 2342.441616][ T586] netdevsim netdevsim1: Falling back to sysfs fallback for: Ö [ 2342.932114][ T602] netlink: 'syz.4.42856': attribute type 10 has an invalid length. [ 2342.955988][ T602] team0: Device hsr_slave_0 failed to register rx_handler [ 2344.532825][ T678] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.42887'. [ 2344.659626][ T678] device syzkaller0 entered promiscuous mode [ 2344.717253][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 2344.723662][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 2345.735424][ T730] netlink: 'syz.0.42910': attribute type 21 has an invalid length. [ 2345.743471][ T730] netlink: 132 bytes leftover after parsing attributes in process `syz.0.42910'. [ 2345.836321][ T732] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.42912'. [ 2345.993226][ T732] device syzkaller0 entered promiscuous mode [ 2346.802797][ T778] device sit0 entered promiscuous mode [ 2347.497531][ T798] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.42936'. [ 2347.559544][ T798] device syzkaller0 entered promiscuous mode [ 2347.583773][ T807] netlink: 191416 bytes leftover after parsing attributes in process `syz.3.42943'. [ 2347.594425][ T807] netlink: 16770 bytes leftover after parsing attributes in process `syz.3.42943'. [ 2347.604119][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.42943'. [ 2348.285448][ T825] netlink: 14463 bytes leftover after parsing attributes in process `syz.2.42951'. [ 2349.077292][ T850] netlink: 'syz.0.42960': attribute type 10 has an invalid length. [ 2349.098148][ T850] netlink: 168 bytes leftover after parsing attributes in process `syz.0.42960'. [ 2350.161340][ T903] netlink: 14463 bytes leftover after parsing attributes in process `syz.3.42979'. [ 2351.037478][ T959] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.42997'. [ 2352.865943][ T1029] device sit0 entered promiscuous mode [ 2354.016914][ T1066] netlink: 'syz.1.43041': attribute type 9 has an invalid length. [ 2354.084442][ T1066] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.43041'. [ 2354.151812][ T1064] device wlan0 entered promiscuous mode [ 2354.314204][ T1078] netlink: 14463 bytes leftover after parsing attributes in process `syz.4.43045'. [ 2354.633460][ T1097] netlink: 'syz.4.43052': attribute type 10 has an invalid length. [ 2354.672634][ T1097] netlink: 55 bytes leftover after parsing attributes in process `syz.4.43052'. [ 2354.854843][ T1107] device sit0 entered promiscuous mode [ 2355.656808][ T1122] device wlan0 entered promiscuous mode [ 2355.675606][ T1122] netlink: 'syz.2.43060': attribute type 9 has an invalid length. [ 2355.689319][ T1122] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.43060'. [ 2356.175171][ T1115] general protection fault, probably for non-canonical address 0xdffffc0000000019: 0000 [#1] PREEMPT SMP KASAN [ 2356.186982][ T1115] KASAN: null-ptr-deref in range [0x00000000000000c8-0x00000000000000cf] [ 2356.195420][ T1115] CPU: 0 PID: 1115 Comm: syz.4.43057 Not tainted syzkaller #0 [ 2356.202896][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 2356.212971][ T1115] RIP: 0010:sk_psock_verdict_data_ready+0x143/0x1d0 [ 2356.219587][ T1115] Code: 24 50 48 c7 44 24 48 01 00 00 00 43 80 3c 2e 00 74 08 4c 89 ff e8 ed 3c c2 f9 41 bc c8 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ce 3c c2 f9 48 8b 7c 24 18 48 8d [ 2356.239214][ T1115] RSP: 0018:ffffc9000310f800 EFLAGS: 00010202 [ 2356.245314][ T1115] RAX: 0000000000000019 RBX: 1ffff92000621f04 RCX: 0000000000080000 [ 2356.253299][ T1115] RDX: ffffc90003d33000 RSI: 0000000000064f91 RDI: 0000000000064f92 [ 2356.261276][ T1115] RBP: ffffc9000310f8d0 R08: ffffc9000310f85f R09: ffffc9000310f840 [ 2356.269249][ T1115] R10: dffffc0000000000 R11: fffff52000621f0c R12: 00000000000000c8 [ 2356.277225][ T1115] R13: dffffc0000000000 R14: 1ffff1101019bcc4 R15: ffff888080cde620 [ 2356.285202][ T1115] FS: 00007f8cccfad6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 2356.294134][ T1115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2356.300719][ T1115] CR2: 00002000004fc000 CR3: 0000000065c92000 CR4: 00000000003506f0 [ 2356.308705][ T1115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2356.316688][ T1115] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 2356.324664][ T1115] Call Trace: [ 2356.327946][ T1115] [ 2356.330882][ T1115] ? __lock_acquire+0x7d10/0x7d10 [ 2356.335913][ T1115] ? sk_psock_start_verdict+0xc0/0xc0 [ 2356.341292][ T1115] ? preempt_schedule_thunk+0x16/0x18 [ 2356.346684][ T1115] unix_stream_sendmsg+0x7d1/0xc90 [ 2356.351800][ T1115] ? unix_stream_sendmsg+0x7c1/0xc90 [ 2356.357089][ T1115] ? unix_show_fdinfo+0xa0/0xa0 [ 2356.361936][ T1115] ? tomoyo_socket_sendmsg_permission+0x1dd/0x2f0 [ 2356.368363][ T1115] ? aa_sock_msg_perm+0x94/0x150 [ 2356.373311][ T1115] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2356.378603][ T1115] ? security_socket_sendmsg+0x7c/0xa0 [ 2356.384065][ T1115] ? unix_show_fdinfo+0xa0/0xa0 [ 2356.388934][ T1115] ____sys_sendmsg+0x5b7/0x8f0 [ 2356.393713][ T1115] ? __sys_sendmsg_sock+0x30/0x30 [ 2356.398748][ T1115] ? import_iovec+0x6f/0xa0 [ 2356.403258][ T1115] ___sys_sendmsg+0x236/0x2e0 [ 2356.407942][ T1115] ? __sys_sendmsg+0x2a0/0x2a0 [ 2356.412712][ T1115] ? ktime_get_real_ts64+0x440/0x440 [ 2356.418012][ T1115] __se_sys_sendmsg+0x1af/0x290 [ 2356.422888][ T1115] ? __x64_sys_sendmsg+0x80/0x80 [ 2356.427838][ T1115] ? syscall_enter_from_user_mode+0x2a/0x70 [ 2356.433734][ T1115] do_syscall_64+0x4c/0xa0 [ 2356.438167][ T1115] ? clear_bhb_loop+0x30/0x80 [ 2356.442871][ T1115] ? clear_bhb_loop+0x30/0x80 [ 2356.447552][ T1115] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 2356.453459][ T1115] RIP: 0033:0x7f8cced51f79 [ 2356.457883][ T1115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2356.477482][ T1115] RSP: 002b:00007f8cccfad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2356.485897][ T1115] RAX: ffffffffffffffda RBX: 00007f8ccefccfa0 RCX: 00007f8cced51f79 [ 2356.493874][ T1115] RDX: 0000000000000003 RSI: 0000200000000980 RDI: 0000000000000006 [ 2356.501842][ T1115] RBP: 00007f8ccede86e0 R08: 0000000000000000 R09: 0000000000000000 [ 2356.509813][ T1115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2356.517782][ T1115] R13: 00007f8ccefcd038 R14: 00007f8ccefccfa0 R15: 00007ffc3d966f78 [ 2356.525776][ T1115] [ 2356.528836][ T1115] Modules linked in: [ 2356.554357][ T1115] ---[ end trace c39d218c00820b46 ]--- [ 2356.560088][ T1115] RIP: 0010:sk_psock_verdict_data_ready+0x143/0x1d0 [ 2356.586869][ T1115] Code: 24 50 48 c7 44 24 48 01 00 00 00 43 80 3c 2e 00 74 08 4c 89 ff e8 ed 3c c2 f9 41 bc c8 00 00 00 4d 03 27 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 ce 3c c2 f9 48 8b 7c 24 18 48 8d [ 2356.608665][ T1115] RSP: 0018:ffffc9000310f800 EFLAGS: 00010202 [ 2356.616450][ T1115] RAX: 0000000000000019 RBX: 1ffff92000621f04 RCX: 0000000000080000 [ 2356.625404][ T1115] RDX: ffffc90003d33000 RSI: 0000000000064f91 RDI: 0000000000064f92 [ 2356.634892][ T1115] RBP: ffffc9000310f8d0 R08: ffffc9000310f85f R09: ffffc9000310f840 [ 2356.643281][ T1115] R10: dffffc0000000000 R11: fffff52000621f0c R12: 00000000000000c8 [ 2356.654156][ T1115] R13: dffffc0000000000 R14: 1ffff1101019bcc4 R15: ffff888080cde620 [ 2356.662910][ T1115] FS: 00007f8cccfad6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 2356.672314][ T1115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2356.679008][ T1115] CR2: 0000555565a4c4e8 CR3: 0000000065c92000 CR4: 00000000003506e0 [ 2356.687277][ T1115] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000200000000300 [ 2356.695345][ T1115] DR3: 0000000000000000 DR6: 00000000ffff0ff1 DR7: 0000000000000600 [ 2356.703448][ T1115] Kernel panic - not syncing: Fatal exception [ 2356.709835][ T1115] Kernel Offset: disabled [ 2356.714173][ T1115] Rebooting in 86400 seconds..