last executing test programs:

5.636458041s ago: executing program 0 (id=4882):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe50e})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc00000, 0x9}, 0x100108, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080))
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})

5.313802646s ago: executing program 1 (id=4885):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x3}]}}, 0x0, 0x26}, 0x28)
r2 = socket$kcm(0x2, 0x1000000000000002, 0x0)
sendmsg$inet(r2, 0x0, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB], 0xfe33)
socket$kcm(0xa, 0x5, 0x0)
socket$kcm(0xa, 0x5, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1})
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000880)="1a", 0x1}], 0x1}, 0x0)

4.341533029s ago: executing program 1 (id=4891):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010400001d0000"], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x8204)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71, 0x2e, 0x2e]}}, 0x0, 0x39}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)

1.886143503s ago: executing program 2 (id=4892):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x29, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00')
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"})
socketpair(0xb, 0x1, 0x0, &(0x7f0000000000))

1.838785114s ago: executing program 3 (id=4893):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x29, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00')
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"})
socketpair(0xb, 0x1, 0x0, &(0x7f0000000000))

1.838393114s ago: executing program 1 (id=4894):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48)
ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x806, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfe33)
r1 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000080)=@in6={0xa, 0x4e20, 0x0, @private0}, 0x80, 0x0}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x10, &(0x7f0000000440)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfffff000, 0xe, 0x0, &(0x7f0000000180)="61df7100c80400d572e12423b680", 0x0, 0x38000000, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000b00)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
r5 = socket$kcm(0x29, 0x0, 0x0)
sendmsg$kcm(r5, 0x0, 0x8040)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0)

1.815258154s ago: executing program 4 (id=4895):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.threads\x00', 0x2, 0x0)
close(r1)

1.754116285s ago: executing program 0 (id=4896):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r1 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000100), 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010)
close(r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

1.659154376s ago: executing program 2 (id=4897):
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bc02, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x14105, 0xf6a, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

1.548559168s ago: executing program 3 (id=4898):
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bc02, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

1.485852959s ago: executing program 4 (id=4899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)

1.449731579s ago: executing program 0 (id=4900):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(r1, 0x6, 0x17, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x1, 0x1, 0x5, 0x0, 0x1, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x576f, 0x2, @perf_config_ext={0x4, 0x100000001}, 0x10108, 0x2e1, 0x100, 0x3, 0x8000000000000000, 0x3, 0x1ff, 0x0, 0x22, 0x0, 0x1ff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe08a10a0015c00200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0)

1.42008235s ago: executing program 4 (id=4901):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r1, &(0x7f00000001c0)='cgroup.threads\x00', 0x2, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r2, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x5, 0x6, 0x10001, &(0x7f0000000200))
perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_int(r3, &(0x7f0000001180)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0)
write$cgroup_subtree(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='-', @ANYRESDEC=r3], 0x27)

1.301257211s ago: executing program 2 (id=4902):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$kcm(0x28, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r1, 0x0, 0x52cc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

1.265021232s ago: executing program 3 (id=4903):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

1.191535133s ago: executing program 0 (id=4904):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f00000000c0)={0x5, 0x9e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x20110, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x2, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$kcm(0xa, 0x5, 0x0)
r1 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000560013f16ff28e036afc004a07"], 0xfe33)
perf_event_open(&(0x7f0000000180)={0x5, 0x80, 0xb, 0x2, 0x5, 0x0, 0x0, 0x0, 0x21200, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext, 0x405, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff})
ioctl$TUNGETDEVNETNS(r2, 0x8982, 0x20000000)

882.653957ms ago: executing program 4 (id=4905):
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00010400001d0000"], 0x48)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0x8204)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008140)={&(0x7f0000008000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x71, 0x2e, 0x2e]}}, 0x0, 0x39}, 0x20)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8983, &(0x7f0000000080))
ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x8982, 0x20000000)

880.879527ms ago: executing program 3 (id=4906):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x29, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00')
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"})
socketpair(0xb, 0x1, 0x0, &(0x7f0000000000))

814.331068ms ago: executing program 2 (id=4907):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x0, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000700008000000000", @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000600)}, 0x20000054)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a40)='io.stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000840))
getpid()
r1 = socket$kcm(0xa, 0x6, 0x0)
setsockopt$sock_attach_bpf(r1, 0x10d, 0x2e, &(0x7f0000000100), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
close(r2)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="aba655f4036c"})

764.050409ms ago: executing program 0 (id=4908):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x29, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00')
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"})
socketpair(0xb, 0x1, 0x0, &(0x7f0000000000))

670.49978ms ago: executing program 1 (id=4909):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1})
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb)
r1 = socket$kcm(0x29, 0x2, 0x0)
close(r1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000001c0)='\x00')
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0))
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x12)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
close(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'ip6tnl0\x00', @random="7fff00004ec6"})
socketpair(0xb, 0x1, 0x0, &(0x7f0000000000))

470.886073ms ago: executing program 2 (id=4910):
socket$kcm(0x10, 0x2, 0x4)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9feb01001800"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f00000004c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94)
r1 = socket$kcm(0x21, 0x2, 0x2)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000100), 0xc)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20008000)
openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x20044010)
close(r1)
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060019c00164bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

409.714174ms ago: executing program 3 (id=4911):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8}, 0x50)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
close(r7)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10)

355.263184ms ago: executing program 0 (id=4912):
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bc02, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xae6}, 0x14105, 0xf6a, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

321.125555ms ago: executing program 1 (id=4913):
socket$kcm(0x2b, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
socket$kcm(0x10, 0x2, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6, 0x0, 0x0, 0xfffffffffff7bc02, 0x0, 0x0, 0x0, 0x5ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0x1}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x6, 0x0, 0xffda, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00')
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0x21, 0x2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080))

301.891735ms ago: executing program 4 (id=4914):
r0 = socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x8000000201a7f19, 0x0, 0x6, 0x9, 0x1, 0x94}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/net/\x00\x00t4/c+\x8fG\xf9aK\fX\a0\x04\x00\x00\x82q\xee'}, 0x30)
perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x8, 0x0, 0x39}, 0x0, 0x0, 0xffffffffffffffff, 0x9)
setsockopt$sock_attach_bpf(r1, 0x6, 0x17, 0x0, 0x0)
perf_event_open$cgroup(&(0x7f00000001c0)={0x3, 0x80, 0x7, 0x1, 0x1, 0x5, 0x0, 0x1, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x576f, 0x2, @perf_config_ext={0x4, 0x100000001}, 0x10108, 0x2e1, 0x100, 0x3, 0x8000000000000000, 0x3, 0x1ff, 0x0, 0x22, 0x0, 0x1ff}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x3)
sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001e0081064e81f782db44b9040a02080006007c09e8fe08a10a0015c00200142603600e120800080024000000a80009001100014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b4337", 0xd5}], 0x1}, 0x0)

241.908756ms ago: executing program 2 (id=4915):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001812"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000178500000043000000"], 0x0, 0x0, 0x0, 0x0, 0x61680, 0x20, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xafffffffffffffff, 0xffffffffffffffff, 0x0)
close(r1)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socketpair(0xa, 0x3, 0x4, &(0x7f0000000000))
r2 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000ec0)=""/4060, 0xfdc}, {&(0x7f00000037c0)=""/4069, 0xfe5}, {&(0x7f0000000bc0)=""/262, 0x106}, {&(0x7f00000002c0)=""/208, 0xd0}, {&(0x7f00000000c0)=""/45, 0x2d}, {&(0x7f0000000000)=""/44, 0x2c}], 0x7}, 0x2000)
sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000004)
recvmsg$kcm(r2, &(0x7f0000000e80)={0x0, 0x0, 0x0}, 0x40000002)
r3 = socket$kcm(0x10, 0x2, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x18}, 0x18)
setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000140)=r4, 0x4)

193.727827ms ago: executing program 3 (id=4916):
socket$kcm(0x15, 0x5, 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb8, 0x5, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x2, 0x3a)
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
socket$kcm(0x10, 0x2, 0x0)
perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x8183, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_config_ext, 0x40, 0x0, 0x0, 0x0, 0xc360, 0xfffffffe}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0))
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000004c0))
perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x57, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0x1400, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x7fffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50)
socket$kcm(0xa, 0x2, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)="1c0000001d008103e00f80ecdb4cb9f207", 0x11}], 0x1, 0x0, 0x0, 0x5865}, 0x0)
r1 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000200)=ANY=[], 0xfe33)

154.402117ms ago: executing program 1 (id=4917):
socket$kcm(0x10, 0x2, 0x0)
socket$kcm(0xa, 0x2, 0x73)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket$kcm(0xa, 0x5, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000000))
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$kcm(0x2, 0x1, 0x84)
setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

0s ago: executing program 4 (id=4918):
socket$kcm(0x2, 0x5, 0x84)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x15, 0x10, 0x2}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xe}}}, &(0x7f0000000080)='GPL\x00'}, 0x90)
socket$kcm(0x28, 0x5, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$kcm(0x2, 0x200000000000001, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000c40)="02", 0x1}], 0x1}, 0x408c4)
sendmsg$inet(r1, 0x0, 0x52cc)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0)
socket$kcm(0xa, 0x922000000003, 0x11)
r2 = socket$kcm(0x10, 0x2, 0x4)
sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

94.236704][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.763104][ T6221] delete_channel: no stack
[  194.806471][ T6221] delete_channel: no stack
[  195.567218][ T6231] device syzkaller0 entered promiscuous mode
[  195.765757][ T6243] syzkaller0: create flow: hash 4039206805 index 1
[  195.786753][ T6238] netlink: 'syz.3.717': attribute type 21 has an invalid length.
[  195.813921][ T6238] netlink: 'syz.3.717': attribute type 1 has an invalid length.
[  196.288543][ T4268] Bluetooth: hci1: command 0x0406 tx timeout
[  196.288640][ T4263] Bluetooth: hci4: command 0x0406 tx timeout
[  196.294750][ T4268] Bluetooth: hci3: command 0x0406 tx timeout
[  196.300781][ T4257] Bluetooth: hci0: command 0x0406 tx timeout
[  196.306887][ T4267] Bluetooth: hci2: command 0x0406 tx timeout
[  197.010898][ T6261] delete_channel: no stack
[  197.022827][ T6261] delete_channel: no stack
[  197.979184][ T4332] syzkaller0: tun_net_xmit 76
[  197.984065][ T4332] syzkaller0: tun_net_xmit 48
[  198.005951][   T22] syzkaller0: tun_net_xmit 76
[  198.031400][ T6232] syzkaller0: delete flow: hash 4039206805 index 1
[  199.721259][ T4268] Bluetooth: hci1: unexpected event 0x04 length: 15 > 10
[  200.697437][ T6285] netlink: 'syz.0.732': attribute type 21 has an invalid length.
[  200.745377][ T6285] netlink: 'syz.0.732': attribute type 1 has an invalid length.
[  200.935486][ T6299] device syzkaller0 entered promiscuous mode
[  201.805372][ T4268] Bluetooth: hci1: command 0x0409 tx timeout
[  202.542919][ T6313] delete_channel: no stack
[  202.581038][ T6313] delete_channel: no stack
[  203.610770][ T4268] Bluetooth: hci3: unexpected event 0x04 length: 15 > 10
[  204.065115][ T6344] syzkaller0: create flow: hash 4039206805 index 1
[  204.148430][ T6340] netlink: 'syz.3.753': attribute type 21 has an invalid length.
[  204.166904][ T6340] netlink: 'syz.3.753': attribute type 1 has an invalid length.
[  204.203584][ T1197] syzkaller0: tun_net_xmit 76
[  204.213764][ T1197] syzkaller0: tun_net_xmit 48
[  204.228477][   T22] syzkaller0: tun_net_xmit 76
[  204.454433][ T6335] syzkaller0: delete flow: hash 4039206805 index 1
[  204.862078][ T6362] delete_channel: no stack
[  204.922392][ T6362] delete_channel: no stack
[  205.645304][ T4263] Bluetooth: hci3: command 0x0409 tx timeout
[  207.741009][ T6385] netlink: 'syz.0.768': attribute type 21 has an invalid length.
[  207.783151][ T6385] netlink: 'syz.0.768': attribute type 1 has an invalid length.
[  208.356364][ T6403] delete_channel: no stack
[  208.361785][ T6403] delete_channel: no stack
[  209.393822][ T6427] netlink: 'syz.2.783': attribute type 21 has an invalid length.
[  209.424210][ T6427] netlink: 'syz.2.783': attribute type 1 has an invalid length.
[  210.077669][ T6446] delete_channel: no stack
[  210.116471][ T6446] delete_channel: no stack
[  211.909179][ T6481] netlink: 'syz.1.801': attribute type 21 has an invalid length.
[  211.934177][ T6481] netlink: 'syz.1.801': attribute type 1 has an invalid length.
[  212.538407][ T6491] delete_channel: no stack
[  212.555010][ T6491] delete_channel: no stack
[  213.790330][ T6521] delete_channel: no stack
[  213.810711][ T6519] netlink: 'syz.2.818': attribute type 21 has an invalid length.
[  213.827105][ T6519] netlink: 'syz.2.818': attribute type 1 has an invalid length.
[  213.842353][ T6521] delete_channel: no stack
[  214.670648][ T6538] netlink: 'syz.4.836': attribute type 21 has an invalid length.
[  214.935725][ T6538] netlink: 'syz.4.836': attribute type 1 has an invalid length.
[  215.272892][ T6530] syz.1.824 (6530) used greatest stack depth: 16128 bytes left
[  216.589818][ T6569] device veth1_macvtap left promiscuous mode
[  216.667686][ T6570] device veth1_macvtap entered promiscuous mode
[  216.714086][ T6570] device macsec0 entered promiscuous mode
[  216.761129][   T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  218.205212][ T6597] netlink: 'syz.1.860': attribute type 21 has an invalid length.
[  218.244923][ T6597] netlink: 'syz.1.860': attribute type 1 has an invalid length.
[  219.270846][ T6616] netlink: 'syz.0.865': attribute type 21 has an invalid length.
[  219.344128][ T6616] netlink: 'syz.0.865': attribute type 1 has an invalid length.
[  219.974979][ T6621] device veth1_macvtap left promiscuous mode
[  220.014459][ T6620] netlink: 'syz.2.868': attribute type 21 has an invalid length.
[  220.047866][ T6620] netlink: 'syz.2.868': attribute type 1 has an invalid length.
[  220.092797][ T6621] device veth1_macvtap entered promiscuous mode
[  220.106343][ T6621] device macsec0 entered promiscuous mode
[  220.117544][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  220.608454][ T4263] Bluetooth: hci3: unexpected event 0x31 length: 15 > 6
[  222.839612][ T6663] netlink: 'syz.1.874': attribute type 21 has an invalid length.
[  222.875917][ T6663] netlink: 'syz.1.874': attribute type 1 has an invalid length.
[  223.156061][ T6668] device veth1_macvtap left promiscuous mode
[  223.212235][ T6670] device veth1_macvtap entered promiscuous mode
[  223.248218][ T6670] device macsec0 entered promiscuous mode
[  223.306119][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  226.549788][ T6719] device veth1_macvtap left promiscuous mode
[  226.740617][ T6719] device veth1_macvtap entered promiscuous mode
[  226.845368][ T6719] device macsec0 entered promiscuous mode
[  226.873763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  227.545902][ T6738] device veth1_macvtap left promiscuous mode
[  227.630512][ T6743] device veth1_macvtap entered promiscuous mode
[  227.660843][ T6743] device macsec0 entered promiscuous mode
[  230.713877][ T6789] device syzkaller0 entered promiscuous mode
[  234.258412][ T6812] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  234.327855][ T6812] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  234.418055][ T6812] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  236.241741][ T6848] netlink: 'syz.1.950': attribute type 10 has an invalid length.
[  236.365374][ T6848] netlink: 55 bytes leftover after parsing attributes in process `syz.1.950'.
[  237.624114][ T6863] device syzkaller0 entered promiscuous mode
[  241.766866][ T6904] netlink: 'syz.4.962': attribute type 10 has an invalid length.
[  241.796208][ T6904] netlink: 55 bytes leftover after parsing attributes in process `syz.4.962'.
[  242.541357][ T6918] netlink: 'syz.0.968': attribute type 2 has an invalid length.
[  242.565532][ T6918] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.968'.
[  243.859634][ T6938] Dead loop on virtual device ip6_vti0, fix it urgently!
[  247.881408][ T7054] IPv6: Can't replace route, no match found
[  250.286395][ T7098] Dead loop on virtual device ip6_vti0, fix it urgently!
[  250.896035][ T7138] Zero length message leads to an empty skb
[  254.493365][ T7166] netlink: 'syz.3.1026': attribute type 10 has an invalid length.
[  254.535350][ T7166] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1026'.
[  254.610238][ T7166] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  255.023789][ T7179] Dead loop on virtual device ip6_vti0, fix it urgently!
[  255.296709][ T7187] IPv6: Can't replace route, no match found
[  255.643812][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.650389][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  257.123360][ T7218] netlink: 'syz.3.1045': attribute type 10 has an invalid length.
[  257.145398][ T7218] netlink: 55 bytes leftover after parsing attributes in process `syz.3.1045'.
[  257.843553][ T7229] Dead loop on virtual device ip6_vti0, fix it urgently!
[  257.874453][ T7223] netlink: 'syz.0.1060': attribute type 10 has an invalid length.
[  257.888639][ T7223] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1060'.
[  258.844787][ T7239] device syzkaller0 entered promiscuous mode
[  262.701675][ T4263] Bluetooth: hci0: unexpected event 0x33 length: 15 > 10
[  264.013152][ T7295] device syzkaller0 entered promiscuous mode
[  266.496087][ T7309] IPv6: Can't replace route, no match found
[  267.613877][ T7357] netlink: 'syz.2.1098': attribute type 10 has an invalid length.
[  267.882484][ T7357] device veth0_vlan left promiscuous mode
[  268.098499][ T7357] device veth0_vlan entered promiscuous mode
[  268.422804][ T7357] team0: Device veth0_vlan failed to register rx_handler
[  268.734368][ T7366] IPv6: Can't replace route, no match found
[  269.772935][ T7402] netlink: 'syz.3.1119': attribute type 10 has an invalid length.
[  270.603699][ T7402] device veth0_vlan left promiscuous mode
[  270.636931][ T7402] device veth0_vlan entered promiscuous mode
[  270.676848][ T7402] team0: Device veth0_vlan failed to register rx_handler
[  270.871344][ T7401] IPv6: Can't replace route, no match found
[  272.438931][ T7440] sock: sock_set_timeout: `syz.0.1131' (pid 7440) tries to set negative timeout
[  272.562573][ T7424] device syzkaller0 entered promiscuous mode
[  277.102551][ T7461] netlink: 'syz.1.1138': attribute type 10 has an invalid length.
[  277.146479][ T7461] device veth0_vlan left promiscuous mode
[  277.177044][ T7461] device veth0_vlan entered promiscuous mode
[  277.204532][ T7461] team0: Device veth0_vlan failed to register rx_handler
[  277.702862][ T7494] sock: sock_set_timeout: `syz.3.1152' (pid 7494) tries to set negative timeout
[  279.817555][ T7525] device syzkaller0 entered promiscuous mode
[  281.521960][ T7538] device syzkaller0 entered promiscuous mode
[  281.535488][ T7541] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  281.552654][ T7541] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  281.562605][ T7541] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  284.131592][ T7544] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  284.141399][ T7544] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  284.151602][ T7544] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  285.681031][ T7588] device syzkaller0 entered promiscuous mode
[  287.669857][ T7602] netlink: 'syz.2.1195': attribute type 39 has an invalid length.
[  287.688027][ T7611] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  287.719235][ T7611] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  287.749368][ T7611] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  288.433853][ T7623] IPv6: GPL: Disabled Multicast RS
[  289.016539][ T7628] device syzkaller0 entered promiscuous mode
[  291.267484][ T7657] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  291.277055][ T7657] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  291.287380][ T7657] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  291.568862][ T7662] netlink: 'syz.2.1220': attribute type 19 has an invalid length.
[  291.579464][ T4263] Bluetooth: hci2: unexpected event 0x0b length: 15 > 11
[  291.590052][ T7662] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1220'.
[  291.884353][ T7675] netlink: 'syz.3.1225': attribute type 17 has an invalid length.
[  291.995357][ T7675] netlink: 'syz.3.1225': attribute type 16 has an invalid length.
[  292.045483][ T7675] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1225'.
[  292.090642][ T4263] Bluetooth: hci0: unexpected event 0x0b length: 15 > 11
[  293.912896][ T7705] netlink: 'syz.1.1233': attribute type 21 has an invalid length.
[  293.934196][ T7705] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1233'.
[  293.968711][ T7705] netlink: 'syz.1.1233': attribute type 4 has an invalid length.
[  294.243330][ T7711] netlink: 'syz.3.1235': attribute type 39 has an invalid length.
[  294.642648][ T7715] netlink: 14564 bytes leftover after parsing attributes in process `syz.4.1237'.
[  294.684706][ T7720] netlink: 'syz.1.1240': attribute type 17 has an invalid length.
[  294.723545][ T7720] netlink: 'syz.1.1240': attribute type 16 has an invalid length.
[  294.765637][ T7720] netlink: 144 bytes leftover after parsing attributes in process `syz.1.1240'.
[  295.006883][ T7722] Q�6�`Ҙ: renamed from lo
[  296.223616][ T7742] syz.0.1259 uses obsolete (PF_INET,SOCK_PACKET)
[  296.758352][ T7038] wlan1: Trigger new scan to find an IBSS to join
[  297.078403][ T7756] netlink: 'syz.0.1253': attribute type 39 has an invalid length.
[  298.074950][ T7762] Q�6�`Ҙ: renamed from lo
[  298.125867][ T7764] netlink: 14564 bytes leftover after parsing attributes in process `syz.0.1256'.
[  299.388136][ T7790] netlink: 'syz.4.1270': attribute type 39 has an invalid length.
[  299.593706][ T7794] device veth1_macvtap left promiscuous mode
[  299.619183][ T7794] device macsec0 left promiscuous mode
[  299.687317][ T7794] device veth1_macvtap entered promiscuous mode
[  299.706844][ T7794] device macsec0 entered promiscuous mode
[  299.796665][ T7015] wlan1: Trigger new scan to find an IBSS to join
[  299.814348][ T7040] wlan1: Trigger new scan to find an IBSS to join
[  300.910704][ T7822] device syzkaller0 entered promiscuous mode
[  301.055057][ T7831] netlink: 'syz.3.1287': attribute type 39 has an invalid length.
[  301.796341][ T7040] wlan1: Trigger new scan to find an IBSS to join
[  302.774464][ T7040] wlan1: Trigger new scan to find an IBSS to join
[  302.836658][ T7032] wlan1: Trigger new scan to find an IBSS to join
[  303.165505][ T7839] device veth1_macvtap left promiscuous mode
[  303.171565][ T7839] device macsec0 left promiscuous mode
[  303.194364][ T7842] device veth1_macvtap entered promiscuous mode
[  303.210454][ T7842] device macsec0 entered promiscuous mode
[  303.756205][ T7044] wlan1: Creating new IBSS network, BSSID de:86:a4:93:1b:3c
[  303.851534][ T7858] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1296'.
[  303.897567][ T7858] device bond_slave_0 entered promiscuous mode
[  303.906635][ T7858] device bond_slave_1 entered promiscuous mode
[  304.358920][ T7872] netlink: 'syz.1.1303': attribute type 4 has an invalid length.
[  304.372001][ T7872] netlink: 128124 bytes leftover after parsing attributes in process `syz.1.1303'.
[  304.524695][ T7876] device veth1_macvtap left promiscuous mode
[  304.574280][ T7876] device macsec0 left promiscuous mode
[  304.613190][ T7882] device veth1_macvtap entered promiscuous mode
[  304.686510][ T7882] device macsec0 entered promiscuous mode
[  304.735055][ T7883] netlink: 'syz.1.1308': attribute type 10 has an invalid length.
[  304.765349][ T7013] wlan1: Trigger new scan to find an IBSS to join
[  304.896026][ T7883] device macvlan0 entered promiscuous mode
[  304.921708][ T7883] team0: Port device macvlan0 added
[  305.467800][ T7888] device syzkaller0 entered promiscuous mode
[  305.796149][ T7038] wlan1: Trigger new scan to find an IBSS to join
[  305.807484][ T7044] wlan1: Creating new IBSS network, BSSID 36:2b:8d:80:d0:34
[  307.795612][ T7015] wlan1: Trigger new scan to find an IBSS to join
[  308.174356][ T7904] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1315'.
[  308.183713][ T7904] device bond_slave_0 entered promiscuous mode
[  308.189994][ T7904] device bond_slave_1 entered promiscuous mode
[  308.749801][ T7044] wlan1: Creating new IBSS network, BSSID 7a:41:bd:49:38:22
[  308.836213][ T7038] wlan1: Trigger new scan to find an IBSS to join
[  309.084354][ T7917] device syzkaller0 entered promiscuous mode
[  310.010109][ T7945] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1331'.
[  311.800671][ T7013] wlan1: Trigger new scan to find an IBSS to join
[  312.705467][ T7015] wlan1: Creating new IBSS network, BSSID 3e:d0:e0:37:ae:b7
[  312.775772][ T7946] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1332'.
[  312.785052][ T7946] device bond_slave_0 entered promiscuous mode
[  312.791314][ T7946] device bond_slave_1 entered promiscuous mode
[  313.097471][ T7958] netlink: 14564 bytes leftover after parsing attributes in process `syz.3.1335'.
[  313.682024][ T7963] device syzkaller0 entered promiscuous mode
[  315.795466][ T7038] wlan1: Trigger new scan to find an IBSS to join
[  316.487029][ T7983] device syzkaller0 entered promiscuous mode
[  316.506536][ T7991] netlink: 'syz.3.1344': attribute type 10 has an invalid length.
[  316.782678][ T7991] device macvlan0 entered promiscuous mode
[  316.804403][ T7991] team0: Port device macvlan0 added
[  317.077941][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  317.084748][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  318.821692][ T8012] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1350'.
[  318.835696][ T7040] wlan1: Trigger new scan to find an IBSS to join
[  318.887206][ T8012] device bond_slave_0 entered promiscuous mode
[  318.893554][ T8012] device bond_slave_1 entered promiscuous mode
[  321.323002][ T8042] delete_channel: no stack
[  321.394597][ T8038] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  321.795664][ T7044] wlan1: Creating new IBSS network, BSSID 6e:c7:b8:d9:2b:0a
[  322.044393][ T8047] device syzkaller0 entered promiscuous mode
[  328.650506][ T8065] netlink: 'syz.4.1375': attribute type 10 has an invalid length.
[  328.681263][ T8065] device macvlan0 entered promiscuous mode
[  328.729889][ T8065] team0: Port device macvlan0 added
[  328.748087][ T8073] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1380'.
[  329.076907][ T8083] netlink: 'syz.3.1385': attribute type 10 has an invalid length.
[  329.309578][ T8086] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  329.358094][ T8086] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  332.063455][ T8114] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1395'.
[  332.477618][ T8123] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  332.532566][ T8123] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  333.848101][ T7044] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  334.500569][ T8155] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1413'.
[  334.900324][ T7038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  335.021885][ T8167] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  335.097458][ T8167] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  335.170730][ T8161] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1428'.
[  335.835014][ T8179] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  335.914839][ T8179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  336.195407][ T4263] Bluetooth: hci4: unexpected event 0x0f length: 15 > 4
[  337.072996][ T8202] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.1440'.
[  337.324293][ T8202] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[  337.812650][ T8210] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1433'.
[  338.374679][ T8224] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  338.777527][ T7040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  339.788690][ T7038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  340.146486][ T8254] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1451'.
[  340.277366][ T4263] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  340.286147][ T4263] Bluetooth: hci4: Injecting HCI hardware error event
[  340.294685][ T4268] Bluetooth: hci4: hardware error 0x00
[  340.350287][ T8255] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.1453'.
[  340.548594][ T8255] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[  340.953695][ T8262] netlink: 766 bytes leftover after parsing attributes in process `syz.0.1467'.
[  341.343308][ T8269] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.1469'.
[  341.484003][ T8275] netlink: 766 bytes leftover after parsing attributes in process `syz.3.1470'.
[  341.553242][ T8269] debugfs: Directory '!!
' with parent 'ieee80211' already present!
[  342.436371][ T4268] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  342.755940][ T4336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  343.451407][ T8291] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1478'.
[  343.495174][ T8291] device bond_slave_0 entered promiscuous mode
[  343.505157][ T8291] device bond_slave_1 entered promiscuous mode
[  343.779963][ T7032] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  344.182240][ T8301] netlink: 766 bytes leftover after parsing attributes in process `syz.2.1481'.
[  344.855962][ T8311] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1485'.
[  345.522618][ T8312] device syzkaller0 entered promiscuous mode
[  348.296253][ T3623] udevd[3623]: worker [8074] terminated by signal 33 (Unknown signal 33)
[  348.322091][ T3623] udevd[3623]: worker [8074] failed while handling '/devices/virtual/block/loop4'
[  348.665253][ T8336] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  349.526269][ T8350] device syzkaller0 entered promiscuous mode
[  349.540293][ T8353] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  349.607318][ T8353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  349.820727][ T7040] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  351.417439][ T8367] netlink: 'syz.0.1506': attribute type 39 has an invalid length.
[  356.459183][ T8405] device syzkaller0 entered promiscuous mode
[  358.760847][ T8428] device syzkaller0 entered promiscuous mode
[  362.690465][ T8459] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.1530'.
[  363.798706][ T8459] sysfs: cannot create duplicate filename '/class/ieee80211/!!
'
[  363.837036][ T8459] CPU: 1 PID: 8459 Comm: syz.1.1530 Not tainted 6.1.142-syzkaller #0
[  363.845187][ T8459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  363.855299][ T8459] Call Trace:
[  363.858612][ T8459]  <TASK>
[  363.861573][ T8459]  dump_stack_lvl+0x168/0x22e
[  363.866311][ T8459]  ? show_regs_print_info+0x12/0x12
[  363.871546][ T8459]  ? load_image+0x3b0/0x3b0
[  363.876099][ T8459]  sysfs_warn_dup+0x8a/0xa0
[  363.880644][ T8459]  sysfs_do_create_link_sd+0xc0/0x110
[  363.886064][ T8459]  device_add+0x7ed/0xfb0
[  363.890460][ T8459]  wiphy_register+0x1e68/0x2bd0
[  363.895372][ T8459]  ? cfg80211_event_work+0x40/0x40
[  363.900527][ T8459]  ? minstrel_ht_alloc+0x894/0xa20
[  363.905688][ T8459]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  363.911790][ T8459]  ieee80211_register_hw+0x2c29/0x38c0
[  363.917295][ T8459]  ? ieee80211_register_hw+0xee1/0x38c0
[  363.922869][ T8459]  ? ieee80211_register_hw+0xee1/0x38c0
[  363.928445][ T8459]  ? ieee80211_tasklet_handler+0x20/0x20
[  363.934118][ T8459]  ? memset+0x1e/0x40
[  363.938114][ T8459]  ? __hrtimer_init+0x186/0x270
[  363.942982][ T8459]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  363.948743][ T8459]  hwsim_new_radio_nl+0xafa/0xce0
[  363.953805][ T8459]  genl_family_rcv_msg_doit+0x22e/0x320
[  363.959367][ T8459]  ? end_current_label_crit_section+0x170/0x170
[  363.965625][ T8459]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  363.971553][ T8459]  ? bpf_lsm_capable+0x5/0x10
[  363.976251][ T8459]  ? security_capable+0x85/0xb0
[  363.981118][ T8459]  genl_rcv_msg+0x5f2/0x780
[  363.985634][ T8459]  ? genl_bind+0x350/0x350
[  363.990055][ T8459]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  363.996412][ T8459]  netlink_rcv_skb+0x1de/0x420
[  364.001194][ T8459]  ? genl_bind+0x350/0x350
[  364.005627][ T8459]  ? netlink_ack+0x1100/0x1100
[  364.010419][ T8459]  ? down_read+0x1a8/0x2d0
[  364.014851][ T8459]  genl_rcv+0x24/0x40
[  364.018845][ T8459]  netlink_unicast+0x74c/0x8c0
[  364.023641][ T8459]  netlink_sendmsg+0x89e/0xbc0
[  364.028436][ T8459]  ? netlink_getsockopt+0x540/0x540
[  364.033654][ T8459]  ? aa_sock_msg_perm+0x94/0x150
[  364.038610][ T8459]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  364.043907][ T8459]  ? security_socket_sendmsg+0x7c/0xa0
[  364.049376][ T8459]  ? netlink_getsockopt+0x540/0x540
[  364.054599][ T8459]  ____sys_sendmsg+0x59b/0x970
[  364.059401][ T8459]  ? __sys_sendmsg_sock+0x30/0x30
[  364.064482][ T8459]  ? __import_iovec+0x315/0x500
[  364.069360][ T8459]  ? import_iovec+0x6f/0xa0
[  364.073878][ T8459]  ___sys_sendmsg+0x21c/0x290
[  364.078578][ T8459]  ? __sys_sendmsg+0x270/0x270
[  364.083381][ T8459]  ? ktime_get_real_ts64+0x420/0x420
[  364.088694][ T8459]  ? __fdget+0x17c/0x200
[  364.092966][ T8459]  __se_sys_sendmsg+0x19e/0x270
[  364.097861][ T8459]  ? __x64_sys_sendmsg+0x80/0x80
[  364.102846][ T8459]  ? lockdep_hardirqs_on+0x94/0x140
[  364.108053][ T8459]  do_syscall_64+0x4c/0xa0
[  364.112487][ T8459]  ? clear_bhb_loop+0x60/0xb0
[  364.117170][ T8459]  ? clear_bhb_loop+0x60/0xb0
[  364.121850][ T8459]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  364.127764][ T8459] RIP: 0033:0x7f0d58d8e929
[  364.132198][ T8459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.151822][ T8459] RSP: 002b:00007f0d59cc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  364.160267][ T8459] RAX: ffffffffffffffda RBX: 00007f0d58fb5fa0 RCX: 00007f0d58d8e929
[  364.168257][ T8459] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008
[  364.176238][ T8459] RBP: 00007f0d58e10b39 R08: 0000000000000000 R09: 0000000000000000
[  364.184212][ T8459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  364.192192][ T8459] R13: 0000000000000000 R14: 00007f0d58fb5fa0 R15: 00007ffc7f6258a8
[  364.200188][ T8459]  </TASK>
[  364.392364][ T8466] device hsr0 entered promiscuous mode
[  366.410366][ T7044] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  369.314181][ T8513] device hsr0 entered promiscuous mode
[  369.500457][ T8534] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  370.623578][ T8567] netlink: 'syz.3.1563': attribute type 6 has an invalid length.
[  370.642192][ T8567] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1563'.
[  370.914781][ T7015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  371.129096][ T8578] device syzkaller0 entered promiscuous mode
[  371.137095][ T8580] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.010898][ T7015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  375.591738][ T8605] netlink: 'syz.2.1582': attribute type 6 has an invalid length.
[  375.603737][ T8605] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1582'.
[  375.963424][ T8623] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  375.996362][ T8618] delete_channel: no stack
[  376.330542][ T8627] device syzkaller0 entered promiscuous mode
[  377.926042][ T8650] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1595'.
[  378.530579][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  378.537040][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  379.761544][ T8657] device syzkaller0 entered promiscuous mode
[  381.797107][ T8662] netlink: 'syz.4.1599': attribute type 6 has an invalid length.
[  381.804920][ T8662] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1599'.
[  382.030296][ T8670] delete_channel: no stack
[  382.045717][ T8670] delete_channel: no stack
[  382.205489][ T8670] device syzkaller0 entered promiscuous mode
[  384.390155][ T8679] delete_channel: no stack
[  384.394801][ T8679] delete_channel: no stack
[  384.618782][ T8679] device syzkaller0 entered promiscuous mode
[  385.144281][ T8691] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1608'.
[  386.201696][ T8696] delete_channel: no stack
[  389.828006][ T8736] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1631'.
[  390.218209][ T8741] delete_channel: no stack
[  397.347557][ T7038] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  400.650704][ T8850] netlink: 'syz.0.1669': attribute type 10 has an invalid length.
[  400.660848][ T8850] device veth0_macvtap left promiscuous mode
[  400.700651][ T8850] device veth0_macvtap entered promiscuous mode
[  400.758550][ T8850] team0: Device macvtap0 failed to register rx_handler
[  400.778571][ T8850] device veth0_macvtap left promiscuous mode
[  401.945439][ T4336] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  403.639538][ T8885] netlink: 'syz.2.1682': attribute type 10 has an invalid length.
[  403.720588][ T8885] device bridge_slave_1 entered promiscuous mode
[  403.748493][ T8885] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  403.856023][ T8886] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1682'.
[  403.894240][ T8886] device bond_slave_0 left promiscuous mode
[  403.911252][ T8886] device bond_slave_1 left promiscuous mode
[  403.932536][ T8886] device bridge_slave_1 left promiscuous mode
[  404.443621][ T8886] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.481100][ T8886] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.553418][ T8886] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  404.594603][ T8886] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  404.619603][ T8886] bond0 (unregistering): Released all slaves
[  404.694083][ T8896] netlink: 'syz.3.1687': attribute type 10 has an invalid length.
[  404.717558][ T8896] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.736712][ T8896] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.751335][ T8896] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.777291][ T8896] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  404.877715][ T8896] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  404.915333][ T8896] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  404.930415][ T8896] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  404.941040][ T8896] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  404.994073][ T8896] device geneve1 entered promiscuous mode
[  405.021021][ T8896] team0: Port device geneve1 added
[  406.040623][ T7015] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  406.294167][ T8924] netlink: 15231 bytes leftover after parsing attributes in process `syz.2.1698'.
[  406.367698][ T8924] netlink: 'syz.2.1698': attribute type 21 has an invalid length.
[  406.387236][ T8924] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1698'.
[  406.527851][ T8928] netlink: 'syz.4.1700': attribute type 10 has an invalid length.
[  406.573340][ T8928] device bridge_slave_1 entered promiscuous mode
[  406.611488][ T8928] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  406.659918][ T8932] netlink: 'syz.2.1703': attribute type 10 has an invalid length.
[  406.814766][ T8932] device geneve1 entered promiscuous mode
[  406.844721][ T8932] team0: Port device geneve1 added
[  406.879723][ T8933] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1700'.
[  406.901630][ T8933] device bond_slave_0 left promiscuous mode
[  406.908200][ T8933] device bond_slave_1 left promiscuous mode
[  406.918058][ T8933] device bridge_slave_1 left promiscuous mode
[  407.193562][ T8933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  407.231607][ T8933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  407.264629][ T8933] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface
[  407.283515][ T8933] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface
[  407.331304][ T8933] bond0 (unregistering): Released all slaves
[  408.414728][ T8959] netlink: 'syz.0.1710': attribute type 4 has an invalid length.
[  408.464191][ T8959] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1710'.
[  408.761029][ T8969] netlink: 15231 bytes leftover after parsing attributes in process `syz.0.1714'.
[  408.813080][ T8969] netlink: 'syz.0.1714': attribute type 21 has an invalid length.
[  408.894052][ T8969] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1714'.
[  409.408512][ T8980] netlink: 'syz.4.1720': attribute type 10 has an invalid length.
[  409.541613][ T8980] device geneve1 entered promiscuous mode
[  409.551777][ T8980] team0: Port device geneve1 added
[  411.312558][ T9008] netlink: 'syz.3.1729': attribute type 4 has an invalid length.
[  411.334141][ T9008] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1729'.
[  411.577064][ T9012] netlink: 15231 bytes leftover after parsing attributes in process `syz.4.1733'.
[  411.661265][ T9012] netlink: 'syz.4.1733': attribute type 21 has an invalid length.
[  411.711994][ T9012] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1733'.
[  412.265279][ T9026] device syzkaller0 entered promiscuous mode
[  413.494098][ T9045] netlink: 'syz.4.1750': attribute type 4 has an invalid length.
[  413.566692][ T9045] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.1750'.
[  413.911868][ T9052] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.1752'.
[  413.989420][ T9052] netlink: 'syz.3.1752': attribute type 21 has an invalid length.
[  414.010140][ T9052] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1752'.
[  415.603674][ T9070] netlink: 'syz.1.1758': attribute type 10 has an invalid length.
[  415.784858][ T9070] device geneve1 entered promiscuous mode
[  415.814223][ T9070] team0: Port device geneve1 added
[  416.159832][ T9081] netlink: 'syz.1.1763': attribute type 4 has an invalid length.
[  416.183982][ T9081] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1763'.
[  416.796613][ T9093] netlink: 15231 bytes leftover after parsing attributes in process `syz.1.1768'.
[  416.919342][ T9094] netlink: 'syz.1.1768': attribute type 21 has an invalid length.
[  416.943742][ T9094] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1768'.
[  418.343047][ T9116] netlink: 'syz.3.1779': attribute type 4 has an invalid length.
[  418.375618][ T9116] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1779'.
[  419.891202][ T9137] netlink: 'syz.0.1789': attribute type 10 has an invalid length.
[  420.014960][ T9137] device geneve1 entered promiscuous mode
[  420.033968][ T9137] team0: Port device geneve1 added
[  420.322940][ T9148] netlink: 'syz.0.1802': attribute type 10 has an invalid length.
[  423.212869][ T9199] netlink: 'syz.3.1821': attribute type 10 has an invalid length.
[  423.232291][ T9199] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.250145][ T9199] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.271464][ T9199] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  423.281594][ T9199] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  425.294507][ T9236] netlink: 'syz.3.1826': attribute type 10 has an invalid length.
[  425.623800][ T9244] device batadv0 entered promiscuous mode
[  427.209368][ T9257] netlink: 'syz.1.1833': attribute type 10 has an invalid length.
[  428.430694][ T9287] device batadv0 entered promiscuous mode
[  429.627075][ T9301] netlink: 'syz.4.1852': attribute type 10 has an invalid length.
[  430.490661][ T9306] netlink: 'syz.2.1851': attribute type 2 has an invalid length.
[  430.535113][ T9307] netlink: 'syz.2.1851': attribute type 2 has an invalid length.
[  431.019661][ T9324] netlink: 'syz.0.1869': attribute type 10 has an invalid length.
[  431.127011][ T9324] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.168956][ T9324] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.213327][ T9324] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  431.553549][ T9325] device batadv0 entered promiscuous mode
[  431.984461][ T9335] netlink: 'syz.2.1865': attribute type 3 has an invalid length.
[  432.023300][ T9335] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1865'.
[  432.980972][ T7022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  433.368726][ T9362] netlink: 'syz.3.1872': attribute type 2 has an invalid length.
[  433.438149][ T9361] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1881'.
[  433.476166][ T9363] netlink: 'syz.3.1872': attribute type 2 has an invalid length.
[  433.873699][ T9371] netlink: 'syz.3.1875': attribute type 10 has an invalid length.
[  434.926386][ T9380] device batadv0 entered promiscuous mode
[  435.370428][ T9397] netlink: 'syz.1.1887': attribute type 3 has an invalid length.
[  435.418227][ T9397] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.1887'.
[  435.963228][ T9404] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.1888'.
[  437.066661][ T7044] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  439.968177][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  439.974629][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  441.666975][ T9507] netlink: 'syz.4.1922': attribute type 10 has an invalid length.
[  444.159314][ T9583] netlink: 'syz.2.1942': attribute type 10 has an invalid length.
[  445.681915][ T9625] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  445.710579][ T9625] batman_adv: batadv0: Removing interface: batadv_slave_1
[  445.941907][ T9632] netlink: 'syz.3.1959': attribute type 2 has an invalid length.
[  446.102133][ T9632] device 0 entered promiscuous mode
[  446.114865][ T9635] device ipvlan1 entered promiscuous mode
[  446.520880][ T9649] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  446.628424][ T9649] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  448.240437][ T9686] netlink: 'syz.0.1978': attribute type 2 has an invalid length.
[  448.265516][ T9688] netlink: 'syz.2.1980': attribute type 10 has an invalid length.
[  448.595591][ T9686] device 0 entered promiscuous mode
[  448.609527][ T9692] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  449.490150][ T9734] netlink: 'syz.2.1985': attribute type 10 has an invalid length.
[  450.592263][ T9752] device ipvlan1 entered promiscuous mode
[  450.638590][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  450.665389][ T9749] batman_adv: batadv0: Removing interface: batadv_slave_0
[  450.722279][ T9749] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  450.765325][ T9749] batman_adv: batadv0: Removing interface: batadv_slave_1
[  450.932745][ T9756] netlink: 'syz.2.1994': attribute type 15 has an invalid length.
[  450.949623][ T9756] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.1994'.
[  451.150573][ T9761] netlink: 'syz.4.1995': attribute type 2 has an invalid length.
[  451.328722][ T9761] device 0 entered promiscuous mode
[  451.385566][ T9764] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  451.427682][ T9764] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  452.106062][ T9778] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  452.212181][ T9778] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  453.122858][ T9794] netlink: 'syz.1.2007': attribute type 2 has an invalid length.
[  453.180078][ T9795] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  453.253076][ T9795] batman_adv: batadv0: Removing interface: batadv_slave_1
[  453.504466][ T9794] device 0 entered promiscuous mode
[  453.947694][ T9803] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2009'.
[  455.162992][ T9849] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  455.208906][ T9850] netlink: 'syz.1.2028': attribute type 10 has an invalid length.
[  455.265534][ T9850] device wlan1 entered promiscuous mode
[  455.274659][ T9850] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  455.363354][ T9854] netlink: 'syz.0.2021': attribute type 15 has an invalid length.
[  455.391175][ T9854] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2021'.
[  455.423701][ T9856] netlink: 'syz.4.2023': attribute type 2 has an invalid length.
[  455.566930][ T9856] device 1 entered promiscuous mode
[  455.640742][ T9858] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.648587][ T9858] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.851246][ T9864] netlink: 'syz.0.2038': attribute type 2 has an invalid length.
[  455.948231][ T9864] device 1 entered promiscuous mode
[  457.009311][ T9879] netlink: 'syz.2.2044': attribute type 29 has an invalid length.
[  457.024252][ T9879] netlink: 'syz.2.2044': attribute type 29 has an invalid length.
[  457.671579][ T9898] netlink: 'syz.1.2036': attribute type 15 has an invalid length.
[  457.724125][ T9898] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2036'.
[  458.786298][ T9928] netlink: 'syz.4.2042': attribute type 21 has an invalid length.
[  458.822862][ T9928] netlink: 'syz.4.2042': attribute type 1 has an invalid length.
[  458.878491][ T9928] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2042'.
[  459.103434][ T9940] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2049'.
[  459.951694][ T9953] netlink: 'syz.3.2057': attribute type 15 has an invalid length.
[  459.965225][ T9953] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2057'.
[  460.300496][ T9971] netlink: 'syz.3.2062': attribute type 21 has an invalid length.
[  460.335724][ T9971] netlink: 'syz.3.2062': attribute type 1 has an invalid length.
[  460.356657][ T9971] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2062'.
[  460.528088][ T9975] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  460.689061][ T9975] device syzkaller0 entered promiscuous mode
[  461.098328][ T9983] netlink: 'syz.3.2064': attribute type 29 has an invalid length.
[  463.906007][ T9983] netlink: 'syz.3.2064': attribute type 29 has an invalid length.
[  464.052247][T10019] device syzkaller0 entered promiscuous mode
[  464.306975][T10026] netlink: 'syz.4.2094': attribute type 29 has an invalid length.
[  464.413767][T10026] netlink: 'syz.4.2094': attribute type 29 has an invalid length.
[  465.081873][T10043] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2101'.
[  465.143064][T10047] netlink: 15358 bytes leftover after parsing attributes in process `syz.3.2088'.
[  465.404526][T10055] netlink: 'syz.4.2095': attribute type 2 has an invalid length.
[  465.487369][T10055] device 2 entered promiscuous mode
[  466.506895][T10085] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2109'.
[  466.644063][T10091] netlink: 'syz.3.2112': attribute type 2 has an invalid length.
[  466.690107][T10091] device 1 entered promiscuous mode
[  467.821417][T10127] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2125'.
[  468.618098][T10160] device syzkaller0 entered promiscuous mode
[  468.991079][T10174] netlink: 'syz.1.2146': attribute type 10 has an invalid length.
[  469.080595][T10174] bond0: (slave wlan1): Releasing backup interface
[  469.111371][T10174] device wlan1 left promiscuous mode
[  469.142333][T10174] device wlan1 entered promiscuous mode
[  469.169418][T10174] team0: Port device wlan1 added
[  470.261502][T10210] netlink: 'syz.1.2161': attribute type 2 has an invalid length.
[  470.347755][T10210] device 1 entered promiscuous mode
[  471.344684][T10241] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2181'.
[  471.987195][T10262] netlink: 'syz.3.2177': attribute type 2 has an invalid length.
[  472.070287][T10262] device 2 entered promiscuous mode
[  473.023720][T10285] netlink: 'syz.2.2188': attribute type 10 has an invalid length.
[  473.172418][T10285] device wlan1 entered promiscuous mode
[  473.236594][T10285] team0: Port device wlan1 added
[  474.381626][T10320] netlink: 'syz.3.2206': attribute type 10 has an invalid length.
[  474.687497][T10320] device wlan1 entered promiscuous mode
[  474.720168][T10320] team0: Port device wlan1 added
[  477.144349][T10383] netlink: 'syz.4.2226': attribute type 10 has an invalid length.
[  477.526849][T10383] device wlan1 entered promiscuous mode
[  477.601186][T10383] team0: Port device wlan1 added
[  477.653069][T10388] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2229'.
[  478.098112][T10393] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2240'.
[  479.304888][T10423] netlink: 'syz.2.2239': attribute type 29 has an invalid length.
[  479.367417][T10423] netlink: 'syz.2.2239': attribute type 29 has an invalid length.
[  479.796383][ T7028] wlan1: Trigger new scan to find an IBSS to join
[  479.837200][T10439] netlink: 'syz.0.2243': attribute type 10 has an invalid length.
[  480.115461][T10439] device wlan1 entered promiscuous mode
[  480.237586][T10439] team0: Port device wlan1 added
[  480.279677][T10443] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2247'.
[  480.660438][T10449] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.2250'.
[  481.254113][T10453] netlink: 67 bytes leftover after parsing attributes in process `syz.4.2249'.
[  482.822050][T10499] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.2262'.
[  482.837559][ T7032] wlan1: Trigger new scan to find an IBSS to join
[  483.922335][T10520] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.2280'.
[  485.056299][T10540] netlink: 67 bytes leftover after parsing attributes in process `syz.0.2276'.
[  485.795296][ T7028] wlan1: Trigger new scan to find an IBSS to join
[  485.828683][T10550] netlink: 'syz.4.2281': attribute type 29 has an invalid length.
[  485.856509][T10550] netlink: 'syz.4.2281': attribute type 29 has an invalid length.
[  486.616901][T10573] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2289'.
[  486.685764][ T7028] wlan1: Creating new IBSS network, BSSID ca:b1:dc:07:68:b2
[  486.705351][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  486.759450][T10572] netlink: 'syz.3.2288': attribute type 29 has an invalid length.
[  486.994609][T10572] netlink: 'syz.3.2288': attribute type 29 has an invalid length.
[  487.734825][T10585] netlink: 'syz.4.2296': attribute type 29 has an invalid length.
[  487.773393][T10585] netlink: 'syz.4.2296': attribute type 29 has an invalid length.
[  488.697381][T10610] netlink: 'syz.4.2304': attribute type 10 has an invalid length.
[  488.880423][T10618] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  488.903677][T10602] netlink: 'syz.2.2301': attribute type 29 has an invalid length.
[  488.971935][T10618] netlink: 'syz.0.2306': attribute type 29 has an invalid length.
[  489.225662][T10620] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2307'.
[  490.742995][T10659] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.2323'.
[  490.840913][T10657] validate_nla: 6 callbacks suppressed
[  490.840951][T10657] netlink: 'syz.4.2321': attribute type 29 has an invalid length.
[  490.891146][T10657] netlink: 'syz.4.2321': attribute type 29 has an invalid length.
[  491.424706][T10676] netlink: 'syz.1.2329': attribute type 29 has an invalid length.
[  491.467064][T10676] netlink: 'syz.1.2329': attribute type 29 has an invalid length.
[  491.861580][T10692] netlink: 'syz.1.2334': attribute type 29 has an invalid length.
[  491.889734][T10692] netlink: 'syz.1.2334': attribute type 29 has an invalid length.
[  491.918144][T10697] netlink: 13054 bytes leftover after parsing attributes in process `syz.0.2335'.
[  492.160041][T10699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  492.240145][T10701] netlink: 'syz.1.2338': attribute type 29 has an invalid length.
[  492.256973][T10699] device syzkaller0 entered promiscuous mode
[  492.313408][T10701] netlink: 'syz.1.2338': attribute type 29 has an invalid length.
[  492.388682][T10711] netlink: 'syz.0.2340': attribute type 10 has an invalid length.
[  494.171507][T10721] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2353'.
[  494.249824][T10724] netlink: 'syz.4.2344': attribute type 29 has an invalid length.
[  494.589491][T10735] netlink: 13054 bytes leftover after parsing attributes in process `syz.4.2349'.
[  495.704594][T10760] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2359'.
[  495.859148][T10762] validate_nla: 5 callbacks suppressed
[  495.859164][T10762] netlink: 'syz.1.2360': attribute type 29 has an invalid length.
[  496.201993][T10775] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2364'.
[  496.430955][T10777] netlink: 'syz.1.2366': attribute type 29 has an invalid length.
[  496.464757][T10777] netlink: 'syz.1.2366': attribute type 29 has an invalid length.
[  496.824327][T10791] netlink: 'syz.2.2370': attribute type 21 has an invalid length.
[  497.855961][T10806] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2374'.
[  498.212563][T10811] netlink: 'syz.0.2376': attribute type 29 has an invalid length.
[  498.294143][T10811] netlink: 'syz.0.2376': attribute type 29 has an invalid length.
[  498.549803][T10817] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2380'.
[  499.057319][T10824] netlink: 'syz.4.2381': attribute type 29 has an invalid length.
[  499.080595][T10824] netlink: 'syz.4.2381': attribute type 29 has an invalid length.
[  499.239869][T10837] netlink: 12798 bytes leftover after parsing attributes in process `syz.3.2387'.
[  500.271914][T10852] netlink: 'syz.0.2393': attribute type 29 has an invalid length.
[  500.308820][T10852] netlink: 'syz.0.2393': attribute type 29 has an invalid length.
[  500.471516][T10861] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2395'.
[  501.147805][T10880] netlink: 'syz.0.2401': attribute type 21 has an invalid length.
[  501.319941][T10881] netlink: 12798 bytes leftover after parsing attributes in process `syz.1.2400'.
[  501.397870][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  501.404583][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  501.791298][T10894] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2408'.
[  502.429717][T10899] netlink: 'syz.1.2409': attribute type 29 has an invalid length.
[  502.555979][T10899] netlink: 'syz.1.2409': attribute type 29 has an invalid length.
[  504.082315][T10932] netlink: 'syz.4.2419': attribute type 21 has an invalid length.
[  504.187355][T10934] netlink: 12798 bytes leftover after parsing attributes in process `syz.0.2420'.
[  504.315249][T10939] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2421'.
[  504.904656][T10945] netlink: 'syz.2.2427': attribute type 29 has an invalid length.
[  504.960206][T10945] netlink: 'syz.2.2427': attribute type 29 has an invalid length.
[  506.161743][T10981] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2435'.
[  506.468672][T10989] netlink: 'syz.3.2439': attribute type 21 has an invalid length.
[  506.523672][T10991] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2440'.
[  507.100345][T10996] netlink: 'syz.2.2444': attribute type 29 has an invalid length.
[  507.138370][T10996] netlink: 'syz.2.2444': attribute type 29 has an invalid length.
[  507.489582][T11009] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  507.509707][T11009] netlink: 'syz.0.2448': attribute type 29 has an invalid length.
[  507.740939][T11013] device syzkaller0 entered promiscuous mode
[  508.576343][T11029] netlink: 'syz.0.2454': attribute type 29 has an invalid length.
[  508.611955][T11034] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2458'.
[  508.648533][T11029] netlink: 'syz.0.2454': attribute type 29 has an invalid length.
[  509.402855][T11047] netlink: 'syz.4.2462': attribute type 29 has an invalid length.
[  509.434131][T11047] netlink: 'syz.4.2462': attribute type 29 has an invalid length.
[  509.927695][T11051] netlink: 'syz.1.2464': attribute type 29 has an invalid length.
[  510.380909][T11067] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  510.516454][T11067] device syzkaller0 entered promiscuous mode
[  512.994484][T11078] validate_nla: 3 callbacks suppressed
[  512.994499][T11078] netlink: 'syz.3.2473': attribute type 29 has an invalid length.
[  513.011563][T11086] device syzkaller0 entered promiscuous mode
[  514.038383][T11102] netlink: 'syz.3.2480': attribute type 29 has an invalid length.
[  514.085214][T11102] netlink: 'syz.3.2480': attribute type 29 has an invalid length.
[  514.463823][T11119] netlink: 'syz.2.2486': attribute type 15 has an invalid length.
[  514.937230][T11129] netlink: 'syz.4.2492': attribute type 29 has an invalid length.
[  514.979628][T11129] netlink: 'syz.4.2492': attribute type 29 has an invalid length.
[  516.233871][T11159] netlink: 'syz.3.2501': attribute type 29 has an invalid length.
[  516.305133][T11159] netlink: 'syz.3.2501': attribute type 29 has an invalid length.
[  516.685724][T11169] netlink: 'syz.4.2505': attribute type 15 has an invalid length.
[  517.091114][T11179] netlink: 'syz.3.2506': attribute type 29 has an invalid length.
[  517.636487][T11193] device syzkaller0 entered promiscuous mode
[  518.027607][T11202] validate_nla: 1 callbacks suppressed
[  518.027645][T11202] netlink: 'syz.2.2517': attribute type 29 has an invalid length.
[  518.071336][T11202] netlink: 'syz.2.2517': attribute type 29 has an invalid length.
[  518.326667][T11215] netlink: 'syz.3.2522': attribute type 15 has an invalid length.
[  518.688527][T11216] netlink: 'syz.1.2523': attribute type 29 has an invalid length.
[  518.750201][T11216] netlink: 'syz.1.2523': attribute type 29 has an invalid length.
[  519.472023][T11238] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2529'.
[  519.727290][T11247] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2532'.
[  520.396995][T11267] netlink: 'syz.2.2539': attribute type 29 has an invalid length.
[  520.409020][T11267] netlink: 'syz.2.2539': attribute type 29 has an invalid length.
[  520.761339][T11278] netlink: 'syz.2.2542': attribute type 29 has an invalid length.
[  520.794729][T11279] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2543'.
[  520.807119][T11278] netlink: 'syz.2.2542': attribute type 29 has an invalid length.
[  520.847977][T11281] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2545'.
[  521.263603][T11294] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2560'.
[  521.579966][T11307] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2563'.
[  521.828503][T11308] netlink: 'syz.1.2554': attribute type 29 has an invalid length.
[  522.102056][T11320] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2559'.
[  523.300474][T11348] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2569'.
[  523.713116][T11360] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2574'.
[  524.080043][T11366] validate_nla: 5 callbacks suppressed
[  524.080064][T11366] netlink: 'syz.1.2577': attribute type 29 has an invalid length.
[  524.160668][T11364] netlink: 'syz.4.2578': attribute type 29 has an invalid length.
[  524.204761][T11359] device syzkaller0 entered promiscuous mode
[  524.216257][T11366] netlink: 'syz.1.2577': attribute type 29 has an invalid length.
[  524.228477][T11364] netlink: 'syz.4.2578': attribute type 29 has an invalid length.
[  526.345167][T11383] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2583'.
[  526.450425][T11385] netlink: 'syz.1.2595': attribute type 10 has an invalid length.
[  526.465524][T11385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2595'.
[  526.520611][T11385] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  526.559101][T11387] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2597'.
[  527.284768][T11403] netlink: 'syz.1.2591': attribute type 29 has an invalid length.
[  527.322379][T11403] netlink: 'syz.1.2591': attribute type 29 has an invalid length.
[  527.348492][T11404] netlink: 'syz.0.2593': attribute type 29 has an invalid length.
[  527.398930][T11407] netlink: 'syz.4.2592': attribute type 29 has an invalid length.
[  527.424821][T11404] netlink: 'syz.0.2593': attribute type 29 has an invalid length.
[  528.208832][T11430] device syzkaller0 entered promiscuous mode
[  528.220882][T11437] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2601'.
[  531.234170][T11462] validate_nla: 1 callbacks suppressed
[  531.234212][T11462] netlink: 'syz.2.2608': attribute type 29 has an invalid length.
[  531.249567][T11462] netlink: 'syz.2.2608': attribute type 29 has an invalid length.
[  531.900396][T11479] device syzkaller0 entered promiscuous mode
[  532.269216][T11491] netlink: 'syz.4.2621': attribute type 29 has an invalid length.
[  533.893123][T11491] netlink: 'syz.4.2621': attribute type 29 has an invalid length.
[  534.472893][T11516] netlink: 'syz.2.2628': attribute type 29 has an invalid length.
[  534.484708][T11516] netlink: 'syz.2.2628': attribute type 29 has an invalid length.
[  535.113133][T11531] netlink: 'syz.1.2636': attribute type 29 has an invalid length.
[  535.122967][T11531] netlink: 'syz.1.2636': attribute type 29 has an invalid length.
[  535.691853][T11542] device syzkaller0 entered promiscuous mode
[  535.713478][T11544] netlink: 'syz.3.2641': attribute type 10 has an invalid length.
[  535.722812][T11544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2641'.
[  535.755436][T11544] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  535.772429][T11549] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2643'.
[  535.981560][T11551] netlink: 'syz.2.2644': attribute type 29 has an invalid length.
[  537.824976][T11551] netlink: 'syz.2.2644': attribute type 29 has an invalid length.
[  537.838183][T11559] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  537.854136][T11559] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  537.864149][T11559] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  538.157055][T11567] netlink: 'syz.3.2649': attribute type 29 has an invalid length.
[  538.166837][T11567] netlink: 'syz.3.2649': attribute type 29 has an invalid length.
[  538.502272][T11576] netlink: 'syz.0.2660': attribute type 29 has an invalid length.
[  538.547255][T11576] netlink: 'syz.0.2660': attribute type 29 has an invalid length.
[  539.008664][T11592] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2656'.
[  539.831539][T11601] netlink: 'syz.3.2658': attribute type 29 has an invalid length.
[  539.878567][T11601] netlink: 'syz.3.2658': attribute type 29 has an invalid length.
[  540.159109][T11613] netlink: 'syz.2.2665': attribute type 29 has an invalid length.
[  540.169371][T11613] netlink: 'syz.2.2665': attribute type 29 has an invalid length.
[  540.319119][T11622] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2669'.
[  541.602007][T11650] netlink: 'syz.1.2678': attribute type 29 has an invalid length.
[  542.221527][T11671] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2684'.
[  543.679196][T11707] device syzkaller0 entered promiscuous mode
[  544.131806][T11711] validate_nla: 5 callbacks suppressed
[  544.132588][T11711] netlink: 'syz.2.2697': attribute type 29 has an invalid length.
[  545.908818][T11717] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2699'.
[  545.918681][T11711] netlink: 'syz.2.2697': attribute type 29 has an invalid length.
[  546.581495][T11733] netlink: 'syz.4.2708': attribute type 29 has an invalid length.
[  546.607593][T11733] netlink: 'syz.4.2708': attribute type 29 has an invalid length.
[  546.800892][T11747] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2713'.
[  548.240792][T11789] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2725'.
[  548.496253][T11796] netlink: 'syz.2.2728': attribute type 10 has an invalid length.
[  548.562576][T11793] netlink: 'syz.3.2726': attribute type 29 has an invalid length.
[  548.672408][T11793] netlink: 'syz.3.2726': attribute type 29 has an invalid length.
[  549.301411][T11810] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.2730'.
[  549.463472][T11807] netlink: 'syz.0.2739': attribute type 29 has an invalid length.
[  549.505780][T11807] netlink: 'syz.0.2739': attribute type 29 has an invalid length.
[  550.637596][T11843] netlink: 'syz.3.2744': attribute type 9 has an invalid length.
[  550.646324][T11843] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2744'.
[  550.897919][T11858] netlink: 'syz.0.2750': attribute type 29 has an invalid length.
[  550.952463][T11858] netlink: 'syz.0.2750': attribute type 29 has an invalid length.
[  551.382798][T11868] netlink: 'syz.0.2752': attribute type 29 has an invalid length.
[  551.942122][T11863] device syzkaller0 entered promiscuous mode
[  552.000369][T11868] netlink: 'syz.0.2752': attribute type 29 has an invalid length.
[  554.097216][T11885] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2768'.
[  554.499502][T11898] netlink: 'syz.1.2764': attribute type 29 has an invalid length.
[  554.567593][T11898] netlink: 'syz.1.2764': attribute type 29 has an invalid length.
[  554.615457][T11906] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  554.989055][T11912] netlink: 'syz.3.2767': attribute type 10 has an invalid length.
[  555.053970][T11912] team0: Device ipvlan1 failed to register rx_handler
[  555.134835][T11920] netlink: 'syz.2.2769': attribute type 29 has an invalid length.
[  555.242912][T11920] netlink: 'syz.2.2769': attribute type 29 has an invalid length.
[  555.530255][T11931] netlink: 11594 bytes leftover after parsing attributes in process `syz.4.2776'.
[  556.295911][T11954] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  556.421930][T11958] netlink: 'syz.1.2786': attribute type 10 has an invalid length.
[  556.526162][T11958] team0: Device ipvlan1 failed to register rx_handler
[  556.547346][T11956] netlink: 'syz.0.2785': attribute type 29 has an invalid length.
[  556.747790][T11956] netlink: 'syz.0.2785': attribute type 29 has an invalid length.
[  557.221698][T11972] netlink: 'syz.3.2792': attribute type 29 has an invalid length.
[  557.286869][T11975] netlink: 11594 bytes leftover after parsing attributes in process `syz.1.2791'.
[  557.298380][T11972] netlink: 'syz.3.2792': attribute type 29 has an invalid length.
[  558.342801][T12005] team0: Device ipvlan1 failed to register rx_handler
[  558.587409][T12011] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2804'.
[  559.631448][T12043] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  560.446349][T12055] validate_nla: 5 callbacks suppressed
[  560.446369][T12055] netlink: 'syz.4.2819': attribute type 29 has an invalid length.
[  560.505715][T12055] netlink: 'syz.4.2819': attribute type 29 has an invalid length.
[  561.251760][T12077] netlink: 'syz.3.2824': attribute type 29 has an invalid length.
[  561.292214][T12077] netlink: 'syz.3.2824': attribute type 29 has an invalid length.
[  561.427874][T12079] netlink: 'syz.4.2825': attribute type 29 has an invalid length.
[  561.504884][T12079] netlink: 'syz.4.2825': attribute type 29 has an invalid length.
[  561.753567][T12095] netlink: 13310 bytes leftover after parsing attributes in process `syz.3.2829'.
[  562.491605][T12112] netlink: 'syz.4.2835': attribute type 29 has an invalid length.
[  562.527119][T12112] netlink: 'syz.4.2835': attribute type 29 has an invalid length.
[  562.837471][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  562.843920][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  563.616776][T12141] device syzkaller0 entered promiscuous mode
[  563.872837][T12144] netlink: 'syz.1.2843': attribute type 29 has an invalid length.
[  563.900552][T12144] netlink: 'syz.1.2843': attribute type 29 has an invalid length.
[  564.001715][T12156] netlink: 13310 bytes leftover after parsing attributes in process `syz.4.2848'.
[  565.297580][T12182] netlink: 11594 bytes leftover after parsing attributes in process `syz.2.2857'.
[  565.831370][T12194] device syzkaller0 entered promiscuous mode
[  566.023274][T12195] validate_nla: 4 callbacks suppressed
[  566.023309][T12195] netlink: 'syz.4.2861': attribute type 29 has an invalid length.
[  566.058883][T12195] netlink: 'syz.4.2861': attribute type 29 has an invalid length.
[  566.328461][T12205] netlink: 'syz.0.2864': attribute type 29 has an invalid length.
[  566.371991][T12205] netlink: 'syz.0.2864': attribute type 29 has an invalid length.
[  566.466138][T12216] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.2866'.
[  566.563769][T12218] netlink: 11594 bytes leftover after parsing attributes in process `syz.3.2869'.
[  567.006480][T12223] netlink: 'syz.0.2871': attribute type 29 has an invalid length.
[  567.042370][T12223] netlink: 'syz.0.2871': attribute type 29 has an invalid length.
[  567.386917][T12235] device syzkaller0 entered promiscuous mode
[  568.011808][T12256] netlink: 'syz.1.2879': attribute type 29 has an invalid length.
[  568.153835][T12260] netlink: 'syz.0.2881': attribute type 29 has an invalid length.
[  569.809349][T12246] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.2888'.
[  569.821253][T12256] netlink: 'syz.1.2879': attribute type 29 has an invalid length.
[  569.830047][T12260] netlink: 'syz.0.2881': attribute type 29 has an invalid length.
[  570.437526][T12280] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  570.890971][T12292] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2892'.
[  571.073939][T12300] netlink: 13310 bytes leftover after parsing attributes in process `syz.1.2894'.
[  571.234311][T12297] validate_nla: 4 callbacks suppressed
[  571.234366][T12297] netlink: 'syz.4.2895': attribute type 29 has an invalid length.
[  571.383136][T12297] netlink: 'syz.4.2895': attribute type 29 has an invalid length.
[  571.527723][T12306] netlink: 'syz.3.2897': attribute type 29 has an invalid length.
[  571.541214][T12306] netlink: 'syz.3.2897': attribute type 29 has an invalid length.
[  572.135396][T12315] netlink: 'syz.2.2910': attribute type 29 has an invalid length.
[  572.205695][T12315] netlink: 'syz.2.2910': attribute type 29 has an invalid length.
[  572.334098][T12330] netlink: 13310 bytes leftover after parsing attributes in process `syz.1.2914'.
[  572.747132][T12341] netlink: 'syz.0.2905': attribute type 10 has an invalid length.
[  572.821486][T12335] netlink: 'syz.2.2906': attribute type 29 has an invalid length.
[  572.837771][T12341] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  572.871054][T12335] netlink: 'syz.2.2906': attribute type 29 has an invalid length.
[  573.002686][T12349] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.2908'.
[  573.421198][T12357] netlink: 'syz.3.2912': attribute type 29 has an invalid length.
[  574.210940][T12388] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2931'.
[  575.208057][T12401] team0: Device ipvlan1 failed to register rx_handler
[  575.893128][T12429] IPv6: NLM_F_CREATE should be specified when creating new route
[  575.949024][T12429] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2938'.
[  576.148155][T12436] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.2940'.
[  576.497792][T12444] validate_nla: 8 callbacks suppressed
[  576.497837][T12444] netlink: 'syz.2.2943': attribute type 10 has an invalid length.
[  576.563431][T12444] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  577.055640][T12459] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.2955'.
[  577.947422][T12475] netlink: 'syz.4.2953': attribute type 29 has an invalid length.
[  578.034414][T12475] netlink: 'syz.4.2953': attribute type 29 has an invalid length.
[  578.109717][T12484] netlink: 'syz.1.2958': attribute type 10 has an invalid length.
[  578.160424][T12484] team0: Device ipvlan1 failed to register rx_handler
[  578.839628][T12492] netlink: 'syz.3.2960': attribute type 29 has an invalid length.
[  578.917391][T12492] netlink: 'syz.3.2960': attribute type 29 has an invalid length.
[  579.343202][T12507] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.2966'.
[  579.449037][T12507] sysfs: cannot create duplicate filename '/class/ieee80211/!!
'
[  579.460204][T12507] CPU: 1 PID: 12507 Comm: syz.0.2966 Not tainted 6.1.142-syzkaller #0
[  579.468449][T12507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  579.478552][T12507] Call Trace:
[  579.481876][T12507]  <TASK>
[  579.484842][T12507]  dump_stack_lvl+0x168/0x22e
[  579.489573][T12507]  ? show_regs_print_info+0x12/0x12
[  579.494811][T12507]  ? load_image+0x3b0/0x3b0
[  579.499347][T12507]  sysfs_warn_dup+0x8a/0xa0
[  579.503881][T12507]  sysfs_do_create_link_sd+0xc0/0x110
[  579.509286][T12507]  device_add+0x7ed/0xfb0
[  579.513676][T12507]  wiphy_register+0x1e68/0x2bd0
[  579.518751][T12507]  ? cfg80211_event_work+0x40/0x40
[  579.523889][T12507]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  579.530076][T12507]  ieee80211_register_hw+0x2c29/0x38c0
[  579.535581][T12507]  ? ieee80211_register_hw+0xee1/0x38c0
[  579.541155][T12507]  ? ieee80211_register_hw+0xee1/0x38c0
[  579.546732][T12507]  ? ieee80211_tasklet_handler+0x20/0x20
[  579.552393][T12507]  ? memset+0x1e/0x40
[  579.556396][T12507]  ? __hrtimer_init+0x186/0x270
[  579.561273][T12507]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  579.567026][T12507]  hwsim_new_radio_nl+0xafa/0xce0
[  579.572086][T12507]  genl_family_rcv_msg_doit+0x22e/0x320
[  579.577664][T12507]  ? end_current_label_crit_section+0x170/0x170
[  579.583925][T12507]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  579.589837][T12507]  ? bpf_lsm_capable+0x5/0x10
[  579.594532][T12507]  ? security_capable+0x85/0xb0
[  579.599411][T12507]  genl_rcv_msg+0x5f2/0x780
[  579.603945][T12507]  ? genl_bind+0x350/0x350
[  579.608376][T12507]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  579.614737][T12507]  netlink_rcv_skb+0x1de/0x420
[  579.619533][T12507]  ? genl_bind+0x350/0x350
[  579.623973][T12507]  ? netlink_ack+0x1100/0x1100
[  579.628884][T12507]  ? down_read+0x1a8/0x2d0
[  579.633332][T12507]  genl_rcv+0x24/0x40
[  579.637331][T12507]  netlink_unicast+0x74c/0x8c0
[  579.642130][T12507]  netlink_sendmsg+0x89e/0xbc0
[  579.646934][T12507]  ? netlink_getsockopt+0x540/0x540
[  579.652165][T12507]  ? aa_sock_msg_perm+0x94/0x150
[  579.657127][T12507]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  579.662461][T12507]  ? security_socket_sendmsg+0x7c/0xa0
[  579.667938][T12507]  ? netlink_getsockopt+0x540/0x540
[  579.673171][T12507]  ____sys_sendmsg+0x59b/0x970
[  579.677972][T12507]  ? __sys_sendmsg_sock+0x30/0x30
[  579.683020][T12507]  ? __import_iovec+0x315/0x500
[  579.687903][T12507]  ? import_iovec+0x6f/0xa0
[  579.692436][T12507]  ___sys_sendmsg+0x21c/0x290
[  579.697140][T12507]  ? __sys_sendmsg+0x270/0x270
[  579.701968][T12507]  ? __fdget+0x17c/0x200
[  579.706244][T12507]  __se_sys_sendmsg+0x19e/0x270
[  579.711123][T12507]  ? __x64_sys_sendmsg+0x80/0x80
[  579.716103][T12507]  ? syscall_enter_from_user_mode+0x2a/0x80
[  579.722022][T12507]  do_syscall_64+0x4c/0xa0
[  579.726461][T12507]  ? clear_bhb_loop+0x60/0xb0
[  579.731154][T12507]  ? clear_bhb_loop+0x60/0xb0
[  579.735850][T12507]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  579.741768][T12507] RIP: 0033:0x7fbb4c78e929
[  579.746197][T12507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.765823][T12507] RSP: 002b:00007fbb4d588038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  579.774255][T12507] RAX: ffffffffffffffda RBX: 00007fbb4c9b5fa0 RCX: 00007fbb4c78e929
[  579.782244][T12507] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  579.790231][T12507] RBP: 00007fbb4c810b39 R08: 0000000000000000 R09: 0000000000000000
[  579.798215][T12507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  579.806201][T12507] R13: 0000000000000000 R14: 00007fbb4c9b5fa0 R15: 00007ffd11ae3a78
[  579.814213][T12507]  </TASK>
[  580.054654][T12517] netlink: 'syz.1.2971': attribute type 8 has an invalid length.
[  580.086651][T12517] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2971'.
[  580.111083][T12519] netlink: 'syz.2.2972': attribute type 10 has an invalid length.
[  580.127148][T12519] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  580.501470][T12527] netlink: 'syz.1.2986': attribute type 10 has an invalid length.
[  580.630822][T12527] team0: Device ipvlan1 failed to register rx_handler
[  580.862164][T12535] IPv6: NLM_F_CREATE should be specified when creating new route
[  580.879250][T12535] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2977'.
[  581.481613][T12537] netlink: 'syz.2.2978': attribute type 29 has an invalid length.
[  581.527274][T12537] netlink: 'syz.2.2978': attribute type 29 has an invalid length.
[  582.251846][T12567] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.2988'.
[  584.724137][T12612] netlink: 'syz.2.3003': attribute type 29 has an invalid length.
[  584.747699][T12612] netlink: 'syz.2.3003': attribute type 29 has an invalid length.
[  585.680506][T12636] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.3018'.
[  586.569603][T12655] netlink: 'syz.4.3016': attribute type 29 has an invalid length.
[  586.590192][T12655] netlink: 'syz.4.3016': attribute type 29 has an invalid length.
[  586.771462][T12662] netlink: 'syz.0.3017': attribute type 29 has an invalid length.
[  586.809633][T12662] netlink: 'syz.0.3017': attribute type 29 has an invalid length.
[  587.374800][T12684] netlink: 'syz.3.3025': attribute type 10 has an invalid length.
[  587.420206][T12684] team0: Device ipvlan1 failed to register rx_handler
[  588.545211][T12701] netlink: 'syz.1.3031': attribute type 29 has an invalid length.
[  588.596722][T12701] netlink: 'syz.1.3031': attribute type 29 has an invalid length.
[  588.827029][T12705] netlink: 'syz.0.3033': attribute type 29 has an invalid length.
[  589.002521][T12705] netlink: 'syz.0.3033': attribute type 29 has an invalid length.
[  589.269817][T12726] sock: sock_timestamping_bind_phc: sock not bind to device
[  589.579229][T12735] netlink: 'syz.1.3040': attribute type 10 has an invalid length.
[  589.652519][T12735] team0: Device ipvlan1 failed to register rx_handler
[  591.168567][T12768] team0: Device ipvlan1 is up. Set it down before adding it as a team port
[  591.182913][T12773] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.3052'.
[  592.173195][T12793] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3069'.
[  592.260544][T12793] sysfs: cannot create duplicate filename '/class/ieee80211/!!
'
[  592.311486][T12793] CPU: 0 PID: 12793 Comm: syz.1.3069 Not tainted 6.1.142-syzkaller #0
[  592.319735][T12793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  592.329925][T12793] Call Trace:
[  592.333248][T12793]  <TASK>
[  592.336225][T12793]  dump_stack_lvl+0x168/0x22e
[  592.340961][T12793]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  592.347173][T12793]  ? show_regs_print_info+0x12/0x12
[  592.352435][T12793]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  592.358660][T12793]  sysfs_warn_dup+0x8a/0xa0
[  592.363234][T12793]  sysfs_do_create_link_sd+0xc0/0x110
[  592.368670][T12793]  device_add+0x7ed/0xfb0
[  592.373070][T12793]  wiphy_register+0x1e68/0x2bd0
[  592.378006][T12793]  ? cfg80211_event_work+0x40/0x40
[  592.383187][T12793]  ? minstrel_ht_alloc+0x894/0xa20
[  592.388372][T12793]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  592.394506][T12793]  ieee80211_register_hw+0x2c29/0x38c0
[  592.400046][T12793]  ? ieee80211_register_hw+0xee1/0x38c0
[  592.405663][T12793]  ? ieee80211_register_hw+0xee1/0x38c0
[  592.411269][T12793]  ? ieee80211_tasklet_handler+0x20/0x20
[  592.416959][T12793]  ? memset+0x1e/0x40
[  592.420974][T12793]  ? __hrtimer_init+0x186/0x270
[  592.425855][T12793]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  592.431644][T12793]  hwsim_new_radio_nl+0xafa/0xce0
[  592.436718][T12793]  genl_family_rcv_msg_doit+0x22e/0x320
[  592.442283][T12793]  ? end_current_label_crit_section+0x170/0x170
[  592.448548][T12793]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  592.454467][T12793]  ? bpf_lsm_capable+0x5/0x10
[  592.459165][T12793]  ? security_capable+0x85/0xb0
[  592.464047][T12793]  genl_rcv_msg+0x5f2/0x780
[  592.468576][T12793]  ? genl_bind+0x350/0x350
[  592.473012][T12793]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  592.479372][T12793]  netlink_rcv_skb+0x1de/0x420
[  592.484164][T12793]  ? genl_bind+0x350/0x350
[  592.488608][T12793]  ? netlink_ack+0x1100/0x1100
[  592.493412][T12793]  ? down_read+0x1a8/0x2d0
[  592.497848][T12793]  genl_rcv+0x24/0x40
[  592.501845][T12793]  netlink_unicast+0x74c/0x8c0
[  592.506645][T12793]  netlink_sendmsg+0x89e/0xbc0
[  592.511442][T12793]  ? netlink_getsockopt+0x540/0x540
[  592.516668][T12793]  ? aa_sock_msg_perm+0x94/0x150
[  592.521640][T12793]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  592.526944][T12793]  ? security_socket_sendmsg+0x7c/0xa0
[  592.532445][T12793]  ? netlink_getsockopt+0x540/0x540
[  592.537685][T12793]  ____sys_sendmsg+0x59b/0x970
[  592.542485][T12793]  ? __sys_sendmsg_sock+0x30/0x30
[  592.547544][T12793]  ? ___sys_sendmsg+0x1f8/0x290
[  592.552420][T12793]  ___sys_sendmsg+0x21c/0x290
[  592.557121][T12793]  ? __sys_sendmsg+0x270/0x270
[  592.561951][T12793]  ? __fdget+0x17c/0x200
[  592.566222][T12793]  __se_sys_sendmsg+0x19e/0x270
[  592.571114][T12793]  ? __x64_sys_sendmsg+0x80/0x80
[  592.576094][T12793]  ? syscall_enter_from_user_mode+0x2a/0x80
[  592.582004][T12793]  do_syscall_64+0x4c/0xa0
[  592.586439][T12793]  ? clear_bhb_loop+0x60/0xb0
[  592.591130][T12793]  ? clear_bhb_loop+0x60/0xb0
[  592.595830][T12793]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  592.601752][T12793] RIP: 0033:0x7f0d58d8e929
[  592.606180][T12793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  592.625805][T12793] RSP: 002b:00007f0d59cc3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  592.634242][T12793] RAX: ffffffffffffffda RBX: 00007f0d58fb5fa0 RCX: 00007f0d58d8e929
[  592.642229][T12793] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  592.650215][T12793] RBP: 00007f0d58e10b39 R08: 0000000000000000 R09: 0000000000000000
[  592.658198][T12793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  592.666182][T12793] R13: 0000000000000000 R14: 00007f0d58fb5fa0 R15: 00007ffc7f6258a8
[  592.674188][T12793]  </TASK>
[  593.381299][T12805] validate_nla: 5 callbacks suppressed
[  593.381339][T12805] netlink: 'syz.3.3063': attribute type 29 has an invalid length.
[  593.518231][T12805] netlink: 'syz.3.3063': attribute type 29 has an invalid length.
[  594.144158][T12830] netlink: 'syz.3.3068': attribute type 29 has an invalid length.
[  594.157329][T12830] netlink: 'syz.3.3068': attribute type 29 has an invalid length.
[  594.807323][T12837] netlink: 'syz.2.3082': attribute type 29 has an invalid length.
[  594.898393][T12851] netlink: 'syz.0.3077': attribute type 39 has an invalid length.
[  594.949813][T12837] netlink: 'syz.2.3082': attribute type 29 has an invalid length.
[  595.169705][T12856] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3078'.
[  595.270528][T12856] sysfs: cannot create duplicate filename '/class/ieee80211/!!
'
[  595.303256][T12856] CPU: 0 PID: 12856 Comm: syz.3.3078 Not tainted 6.1.142-syzkaller #0
[  595.311513][T12856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  595.321622][T12856] Call Trace:
[  595.324945][T12856]  <TASK>
[  595.327916][T12856]  dump_stack_lvl+0x168/0x22e
[  595.332653][T12856]  ? show_regs_print_info+0x12/0x12
[  595.337930][T12856]  ? load_image+0x3b0/0x3b0
[  595.342509][T12856]  sysfs_warn_dup+0x8a/0xa0
[  595.347073][T12856]  sysfs_do_create_link_sd+0xc0/0x110
[  595.352508][T12856]  device_add+0x7ed/0xfb0
[  595.356943][T12856]  wiphy_register+0x1e68/0x2bd0
[  595.361876][T12856]  ? cfg80211_event_work+0x40/0x40
[  595.367065][T12856]  ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0
[  595.373184][T12856]  ieee80211_register_hw+0x2c29/0x38c0
[  595.378714][T12856]  ? ieee80211_register_hw+0xee1/0x38c0
[  595.384314][T12856]  ? ieee80211_register_hw+0xee1/0x38c0
[  595.389923][T12856]  ? ieee80211_tasklet_handler+0x20/0x20
[  595.395707][T12856]  ? memset+0x1e/0x40
[  595.399731][T12856]  ? __hrtimer_init+0x186/0x270
[  595.404629][T12856]  mac80211_hwsim_new_radio+0x28c2/0x4c40
[  595.410433][T12856]  hwsim_new_radio_nl+0xafa/0xce0
[  595.415543][T12856]  genl_family_rcv_msg_doit+0x22e/0x320
[  595.421147][T12856]  ? end_current_label_crit_section+0x170/0x170
[  595.427443][T12856]  ? genl_family_rcv_msg_dumpit+0x340/0x340
[  595.433432][T12856]  ? bpf_lsm_capable+0x5/0x10
[  595.438166][T12856]  ? security_capable+0x85/0xb0
[  595.443076][T12856]  genl_rcv_msg+0x5f2/0x780
[  595.447635][T12856]  ? genl_bind+0x350/0x350
[  595.452099][T12856]  ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0
[  595.458506][T12856]  ? lock_acquire+0x20f/0x490
[  595.463248][T12856]  netlink_rcv_skb+0x1de/0x420
[  595.468073][T12856]  ? genl_bind+0x350/0x350
[  595.472538][T12856]  ? netlink_ack+0x1100/0x1100
[  595.477369][T12856]  ? down_read+0x1a8/0x2d0
[  595.481840][T12856]  genl_rcv+0x24/0x40
[  595.485881][T12856]  netlink_unicast+0x74c/0x8c0
[  595.490726][T12856]  netlink_sendmsg+0x89e/0xbc0
[  595.495583][T12856]  ? netlink_getsockopt+0x540/0x540
[  595.500855][T12856]  ? aa_sock_msg_perm+0x94/0x150
[  595.505850][T12856]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  595.511210][T12856]  ? security_socket_sendmsg+0x7c/0xa0
[  595.516731][T12856]  ? netlink_getsockopt+0x540/0x540
[  595.522006][T12856]  ____sys_sendmsg+0x59b/0x970
[  595.526852][T12856]  ? __sys_sendmsg_sock+0x30/0x30
[  595.531943][T12856]  ? __import_iovec+0x315/0x500
[  595.536860][T12856]  ? import_iovec+0x6f/0xa0
[  595.541425][T12856]  ___sys_sendmsg+0x21c/0x290
[  595.546173][T12856]  ? __sys_sendmsg+0x270/0x270
[  595.551049][T12856]  ? __fdget+0x17c/0x200
[  595.555364][T12856]  __se_sys_sendmsg+0x19e/0x270
[  595.560280][T12856]  ? __x64_sys_sendmsg+0x80/0x80
[  595.565294][T12856]  ? syscall_enter_from_user_mode+0x2a/0x80
[  595.571249][T12856]  do_syscall_64+0x4c/0xa0
[  595.575715][T12856]  ? clear_bhb_loop+0x60/0xb0
[  595.580440][T12856]  ? clear_bhb_loop+0x60/0xb0
[  595.585175][T12856]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  595.591142][T12856] RIP: 0033:0x7fce3298e929
[  595.595611][T12856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  595.615276][T12856] RSP: 002b:00007fce3388c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  595.623740][T12856] RAX: ffffffffffffffda RBX: 00007fce32bb5fa0 RCX: 00007fce3298e929
[  595.631763][T12856] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c
[  595.639779][T12856] RBP: 00007fce32a10b39 R08: 0000000000000000 R09: 0000000000000000
[  595.647806][T12856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  595.655820][T12856] R13: 0000000000000000 R14: 00007fce32bb5fa0 R15: 00007ffd08efbc48
[  595.663857][T12856]  </TASK>
[  596.146637][T12868] netlink: 'syz.1.3081': attribute type 29 has an invalid length.
[  596.173494][T12868] netlink: 'syz.1.3081': attribute type 29 has an invalid length.
[  596.688349][T12882] netlink: 'syz.4.3086': attribute type 29 has an invalid length.
[  598.606846][T12934] validate_nla: 3 callbacks suppressed
[  598.606886][T12934] netlink: 'syz.1.3102': attribute type 29 has an invalid length.
[  598.623866][T12934] netlink: 'syz.1.3102': attribute type 29 has an invalid length.
[  599.312462][T12955] netlink: 'syz.3.3109': attribute type 39 has an invalid length.
[  601.149687][T12984] netlink: 'syz.4.3116': attribute type 29 has an invalid length.
[  601.252141][T12984] netlink: 'syz.4.3116': attribute type 29 has an invalid length.
[  601.527255][T13000] device syzkaller0 entered promiscuous mode
[  601.548294][T13004] netlink: 'syz.4.3126': attribute type 10 has an invalid length.
[  601.582195][T13004] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3126'.
[  601.638916][T13004] batman_adv: batadv0: Adding interface: hsr_slave_1
[  601.648736][T13004] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  601.680139][T13004] batman_adv: batadv0: Interface activated: hsr_slave_1
[  601.698481][T13013] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.3127'.
[  603.628038][T13033] netlink: 'syz.1.3133': attribute type 29 has an invalid length.
[  604.730820][T13018] netlink: 13310 bytes leftover after parsing attributes in process `syz.4.3128'.
[  604.755336][T13033] netlink: 'syz.1.3133': attribute type 29 has an invalid length.
[  605.269972][T13040] netlink: 'syz.1.3136': attribute type 39 has an invalid length.
[  605.618924][T13065] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.3142'.
[  606.352390][T13074] netlink: 13310 bytes leftover after parsing attributes in process `syz.1.3144'.
[  607.485439][T13101] netlink: 'syz.2.3153': attribute type 39 has an invalid length.
[  607.858613][T13117] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.3159'.
[  607.901013][T13118] netlink: 13310 bytes leftover after parsing attributes in process `syz.0.3160'.
[  609.191255][T13153] netlink: 13310 bytes leftover after parsing attributes in process `syz.4.3173'.
[  609.793307][T13164] netlink: 13310 bytes leftover after parsing attributes in process `syz.1.3186'.
[  609.834370][T13175] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.3179'.
[  610.699489][T13196] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.3194'.
[  611.170351][T13208] netlink: 13310 bytes leftover after parsing attributes in process `syz.4.3191'.
[  612.184175][T13229] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.3207'.
[  612.923884][T13242] netlink: 'syz.3.3201': attribute type 29 has an invalid length.
[  612.964308][T13242] netlink: 'syz.3.3201': attribute type 29 has an invalid length.
[  613.262013][T13263] netlink: 13310 bytes leftover after parsing attributes in process `syz.1.3219'.
[  613.588533][T13266] netlink: 'syz.4.3209': attribute type 29 has an invalid length.
[  613.612798][T13266] netlink: 'syz.4.3209': attribute type 29 has an invalid length.
[  614.476584][T13288] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.3216'.
[  614.536487][T13290] netlink: 'syz.2.3228': attribute type 29 has an invalid length.
[  614.588143][T13290] netlink: 'syz.2.3228': attribute type 29 has an invalid length.
[  615.018347][T13307] netlink: 13310 bytes leftover after parsing attributes in process `syz.2.3224'.
[  615.044591][T13308] netlink: 'syz.1.3223': attribute type 10 has an invalid length.
[  615.068655][T13308] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3223'.
[  615.121646][T13308] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  615.161619][T13302] netlink: 'syz.0.3232': attribute type 29 has an invalid length.
[  615.185686][T13302] netlink: 'syz.0.3232': attribute type 29 has an invalid length.
[  616.089657][T13337] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.3233'.
[  616.836846][T13355] netlink: 'syz.0.3239': attribute type 10 has an invalid length.
[  616.856995][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3239'.
[  616.891880][T13355] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  617.894876][T13397] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.3252'.
[  618.246689][T13406] validate_nla: 4 callbacks suppressed
[  618.246728][T13406] netlink: 'syz.2.3256': attribute type 10 has an invalid length.
[  618.283859][T13406] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3256'.
[  618.323568][T13406] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check.
[  618.449188][T13404] netlink: 'syz.0.3255': attribute type 29 has an invalid length.
[  618.489202][T13404] netlink: 'syz.0.3255': attribute type 29 has an invalid length.
[  619.570218][T13443] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3267'.
[  620.105854][T13456] netlink: 'syz.2.3270': attribute type 29 has an invalid length.
[  620.114262][T13456] netlink: 'syz.2.3270': attribute type 29 has an invalid length.
[  621.308968][T13491] netlink: 'syz.1.3282': attribute type 10 has an invalid length.
[  621.351010][T13491] netlink: 55 bytes leftover after parsing attributes in process `syz.1.3282'.
[  621.901843][T13499] netlink: 'syz.4.3285': attribute type 29 has an invalid length.
[  621.986708][T13499] netlink: 'syz.4.3285': attribute type 29 has an invalid length.
[  622.444622][T13527] netlink: 'syz.1.3292': attribute type 9 has an invalid length.
[  623.264294][T13551] netlink: 'syz.2.3297': attribute type 21 has an invalid length.
[  623.290624][T13551] netlink: 'syz.2.3297': attribute type 1 has an invalid length.
[  623.788811][T13563] netlink: 'syz.0.3302': attribute type 29 has an invalid length.
[  623.804052][T13563] netlink: 'syz.0.3302': attribute type 29 has an invalid length.
[  624.182748][T13571] netlink: 'syz.4.3305': attribute type 29 has an invalid length.
[  624.286167][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  624.292542][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  624.316079][T13571] netlink: 'syz.4.3305': attribute type 29 has an invalid length.
[  624.451352][T13585] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3318'.
[  624.529846][T13585] device caif0 entered promiscuous mode
[  624.633748][T13594] netlink: 'syz.4.3309': attribute type 9 has an invalid length.
[  624.675654][T13598] netlink: 'syz.1.3310': attribute type 12 has an invalid length.
[  624.753702][T13598] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3310'.
[  624.897849][T13608] netlink: 12542 bytes leftover after parsing attributes in process `syz.0.3312'.
[  625.459703][T13621] netlink: 'syz.3.3316': attribute type 21 has an invalid length.
[  625.505482][T13621] netlink: 'syz.3.3316': attribute type 1 has an invalid length.
[  627.368028][T13675] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  628.303316][T13704] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3344'.
[  628.384370][T13704] device caif0 entered promiscuous mode
[  628.723232][T13717] netlink: 192156 bytes leftover after parsing attributes in process `syz.3.3349'.
[  628.796521][T13717] netlink: zone id is out of range
[  628.815843][T13721] validate_nla: 8 callbacks suppressed
[  628.815862][T13721] netlink: 'syz.3.3349': attribute type 12 has an invalid length.
[  628.819650][T13720] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  628.821466][T13721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3349'.
[  628.952177][T13723] netlink: 'syz.1.3358': attribute type 29 has an invalid length.
[  628.972793][T13717] netlink: zone id is out of range
[  629.010547][T13723] netlink: 'syz.1.3358': attribute type 29 has an invalid length.
[  629.222650][T13731] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.3352'.
[  629.250638][T13731] netlink: zone id is out of range
[  629.330847][T13731] netlink: del zone limit has 4 unknown bytes
[  629.538661][T13735] netlink: 'syz.3.3354': attribute type 29 has an invalid length.
[  629.576999][T13735] netlink: 'syz.3.3354': attribute type 29 has an invalid length.
[  629.635451][T13746] netlink: 'syz.0.3356': attribute type 9 has an invalid length.
[  629.954288][T13759] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3361'.
[  629.971058][T13759] device caif0 entered promiscuous mode
[  630.130601][T13765] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[  630.384723][T13764] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  630.390191][T13769] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.3366'.
[  630.409034][T13764] netlink: 'syz.2.3364': attribute type 29 has an invalid length.
[  630.423375][T13769] netlink: zone id is out of range
[  630.438995][T13774] netlink: 'syz.4.3366': attribute type 12 has an invalid length.
[  630.442374][T13769] netlink: zone id is out of range
[  630.481586][T13774] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3366'.
[  630.598412][ T4268] Bluetooth: hci2: unexpected event 0x35 length: 15 > 6
[  631.119705][T13781] netlink: 'syz.2.3372': attribute type 29 has an invalid length.
[  631.607005][T13805] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3377'.
[  631.686416][T13805] device caif0 entered promiscuous mode
[  632.151084][T13817] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.3383'.
[  632.402237][T13825] netlink: 10 bytes leftover after parsing attributes in process `syz.2.3386'.
[  633.422201][ T4268] Bluetooth: hci1: unexpected event 0x35 length: 15 > 6
[  633.438020][T13847] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3394'.
[  633.462170][T13847] netlink: zone id is out of range
[  633.579398][T13847] netlink: del zone limit has 4 unknown bytes
[  633.987578][T13853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3393'.
[  634.010648][T13853] device caif0 entered promiscuous mode
[  634.019530][T13860] netlink: 12542 bytes leftover after parsing attributes in process `syz.4.3398'.
[  634.280109][T13871] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3403'.
[  634.472649][T13875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  634.480048][T13875] IPv6: NLM_F_CREATE should be set when creating new route
[  634.487404][T13875] IPv6: NLM_F_CREATE should be set when creating new route
[  634.573357][T13872] validate_nla: 6 callbacks suppressed
[  634.573394][T13872] netlink: 'syz.1.3399': attribute type 29 has an invalid length.
[  634.594746][T13872] netlink: 'syz.1.3399': attribute type 29 has an invalid length.
[  634.883682][T13885] netlink: 'syz.2.3406': attribute type 9 has an invalid length.
[  635.496639][ T4268] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6
[  635.944861][T13917] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3418'.
[  635.978155][T13916] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.3415'.
[  636.256555][T13927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  636.263883][T13927] IPv6: NLM_F_CREATE should be set when creating new route
[  636.271209][T13927] IPv6: NLM_F_CREATE should be set when creating new route
[  636.481446][T13937] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3427'.
[  636.967972][T13951] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3433'.
[  637.783763][T13969] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  637.791999][T13969] IPv6: NLM_F_CREATE should be set when creating new route
[  637.800393][T13969] IPv6: NLM_F_CREATE should be set when creating new route
[  638.735851][T13998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3450'.
[  638.796249][T14002] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3448'.
[  639.778067][T14023] netlink: 'syz.3.3457': attribute type 29 has an invalid length.
[  639.870944][T14023] netlink: 'syz.3.3457': attribute type 29 has an invalid length.
[  640.134821][T14033] netlink: 12542 bytes leftover after parsing attributes in process `syz.2.3463'.
[  640.461137][T14042] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3467'.
[  640.831183][T14056] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3473'.
[  640.971071][T14058] IPv6: Can't replace route, no match found
[  641.113172][T14061] netlink: 'syz.1.3475': attribute type 10 has an invalid length.
[  641.212149][T14061] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  641.260483][T14065] netlink: 12542 bytes leftover after parsing attributes in process `syz.3.3477'.
[  641.270573][T14066] netlink: 'syz.0.3476': attribute type 29 has an invalid length.
[  641.311519][T14066] netlink: 'syz.0.3476': attribute type 29 has an invalid length.
[  641.436032][T14071] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.3479'.
[  641.874540][T14078] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3492'.
[  642.390107][T14094] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3487'.
[  642.550088][T14098] netlink: 12542 bytes leftover after parsing attributes in process `syz.1.3490'.
[  642.587072][T14100] netlink: 'syz.3.3489': attribute type 10 has an invalid length.
[  642.616086][T14100] device hsr0 left promiscuous mode
[  642.681674][T14100] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  643.008208][T14105] netlink: 'syz.0.3493': attribute type 29 has an invalid length.
[  643.037840][T14105] netlink: 'syz.0.3493': attribute type 29 has an invalid length.
[  643.559769][T14118] netlink: 'syz.1.3508': attribute type 29 has an invalid length.
[  643.614335][T14118] netlink: 'syz.1.3508': attribute type 29 has an invalid length.
[  643.945047][T14134] netlink: 10 bytes leftover after parsing attributes in process `syz.0.3503'.
[  644.306678][T14144] device hsr0 left promiscuous mode
[  644.354495][T14144] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  644.507062][T14151] netlink: 16174 bytes leftover after parsing attributes in process `syz.4.3510'.
[  645.188149][T14168] validate_nla: 3 callbacks suppressed
[  645.188168][T14168] netlink: 'syz.4.3516': attribute type 29 has an invalid length.
[  645.222436][T14168] netlink: 'syz.4.3516': attribute type 29 has an invalid length.
[  646.175327][T14186] netlink: 'syz.0.3521': attribute type 10 has an invalid length.
[  646.245445][T14186] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  646.263500][T14187] netlink: 16174 bytes leftover after parsing attributes in process `syz.1.3522'.
[  646.984879][T14201] netlink: 'syz.1.3528': attribute type 29 has an invalid length.
[  646.996908][T14201] netlink: 'syz.1.3528': attribute type 29 has an invalid length.
[  648.302132][T14237] netlink: 'syz.0.3539': attribute type 9 has an invalid length.
[  648.683764][T14249] netlink: 'syz.4.3544': attribute type 9 has an invalid length.
[  648.817074][T14247] netlink: 'syz.0.3543': attribute type 29 has an invalid length.
[  648.878179][T14247] netlink: 'syz.0.3543': attribute type 29 has an invalid length.
[  649.811957][T14276] netlink: 'syz.2.3552': attribute type 9 has an invalid length.
[  650.305874][T14282] netlink: 'syz.3.3555': attribute type 9 has an invalid length.
[  650.607827][T14287] netlink: 'syz.0.3557': attribute type 9 has an invalid length.
[  651.390351][T14314] netlink: 'syz.4.3566': attribute type 9 has an invalid length.
[  651.618559][T14319] netlink: 'syz.4.3567': attribute type 10 has an invalid length.
[  651.703377][T14319] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  651.729647][T14321] netlink: 'syz.2.3568': attribute type 9 has an invalid length.
[  651.741489][T14324] netlink: 'syz.1.3570': attribute type 9 has an invalid length.
[  652.880544][T14350] netlink: 'syz.1.3577': attribute type 9 has an invalid length.
[  653.144700][T14360] netlink: 'syz.1.3582': attribute type 9 has an invalid length.
[  653.236189][T14365] netlink: 'syz.2.3583': attribute type 10 has an invalid length.
[  653.259868][T14365] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  653.346835][T14367] netlink: 'syz.0.3584': attribute type 9 has an invalid length.
[  654.328139][T14395] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.3595'.
[  655.468732][T14430] validate_nla: 2 callbacks suppressed
[  655.468753][T14430] netlink: 'syz.4.3606': attribute type 9 has an invalid length.
[  656.972372][T14444] netlink: 'syz.3.3613': attribute type 10 has an invalid length.
[  657.895810][T14475] netlink: 'syz.2.3623': attribute type 10 has an invalid length.
[  657.920572][T14475] device team0 left promiscuous mode
[  657.949680][T14475] device team_slave_0 left promiscuous mode
[  657.957588][T14475] device team_slave_1 left promiscuous mode
[  657.964051][T14475] device geneve1 left promiscuous mode
[  657.971853][T14475] device wlan1 left promiscuous mode
[  658.947758][T14496] delete_channel: no stack
[  658.952361][T14496] delete_channel: no stack
[  660.520943][T14532] delete_channel: no stack
[  660.528811][T14531] netlink: 'syz.2.3642': attribute type 10 has an invalid length.
[  660.545336][T14532] delete_channel: no stack
[  661.113272][T14543] netlink: 'syz.2.3648': attribute type 9 has an invalid length.
[  661.891277][T14561] device wlan0 entered promiscuous mode
[  662.061410][T14565] netlink: 'syz.1.3656': attribute type 10 has an invalid length.
[  662.090938][T14565] device team0 left promiscuous mode
[  662.106664][T14565] device team_slave_0 left promiscuous mode
[  662.114521][T14565] device team_slave_1 left promiscuous mode
[  662.128625][T14565] device macvlan0 left promiscuous mode
[  662.135182][T14565] device geneve1 left promiscuous mode
[  662.141488][T14565] device wlan1 left promiscuous mode
[  662.158223][T14565] 8021q: adding VLAN 0 to HW filter on device team0
[  662.170746][T14565] device team_slave_0 entered promiscuous mode
[  662.177478][T14565] device team_slave_1 entered promiscuous mode
[  662.183816][T14565] device geneve1 entered promiscuous mode
[  662.191413][T14565] bond0: (slave team0): Enslaving as an active interface with an up link
[  662.202248][T14567] netlink: 'syz.0.3657': attribute type 9 has an invalid length.
[  664.077735][T14615] netlink: 'syz.3.3670': attribute type 9 has an invalid length.
[  664.352318][T14625] netlink: 'syz.4.3675': attribute type 10 has an invalid length.
[  664.876912][T14637] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3690'.
[  664.925632][T14643] netlink: 'syz.1.3681': attribute type 9 has an invalid length.
[  664.939631][T14641] netlink: 'syz.3.3679': attribute type 10 has an invalid length.
[  664.956905][T14641] device team0 left promiscuous mode
[  664.962421][T14641] device team_slave_0 left promiscuous mode
[  664.969980][T14641] device team_slave_1 left promiscuous mode
[  664.980278][T14641] device macvlan0 left promiscuous mode
[  664.988187][T14641] device geneve1 left promiscuous mode
[  664.994544][T14641] device wlan1 left promiscuous mode
[  665.067698][T14641] 8021q: adding VLAN 0 to HW filter on device team0
[  665.088800][T14641] device team_slave_0 entered promiscuous mode
[  665.095178][T14641] device team_slave_1 entered promiscuous mode
[  665.101472][T14641] device wlan1 entered promiscuous mode
[  665.115773][T14641] bond0: (slave team0): Enslaving as an active interface with an up link
[  665.139400][T14647] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3694'.
[  666.664746][T14681] netlink: 'syz.4.3695': attribute type 9 has an invalid length.
[  666.677065][T14683] netlink: 'syz.2.3696': attribute type 9 has an invalid length.
[  666.977916][T14690] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3699'.
[  667.994874][T14716] netlink: 'syz.4.3710': attribute type 9 has an invalid length.
[  668.147731][T14718] netlink: 'syz.2.3711': attribute type 9 has an invalid length.
[  668.519906][T14729] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.3714'.
[  669.542073][T14759] netlink: 'syz.4.3723': attribute type 9 has an invalid length.
[  669.556548][T14764] device wlan0 entered promiscuous mode
[  669.564477][T14763] netlink: 'syz.3.3725': attribute type 9 has an invalid length.
[  670.610322][T14791] netlink: 'syz.4.3731': attribute type 9 has an invalid length.
[  671.090470][T14801] netlink: 'syz.4.3737': attribute type 9 has an invalid length.
[  672.101711][T14833] netlink: 'syz.1.3750': attribute type 9 has an invalid length.
[  672.211056][T14839] netlink: 'syz.4.3753': attribute type 9 has an invalid length.
[  674.124175][T14869] netlink: 'syz.4.3763': attribute type 9 has an invalid length.
[  675.109548][T14900] A link change request failed with some changes committed already. Interface Q�6�`Ҙ may have been left with an inconsistent configuration, please check.
[  675.683149][T14909] netlink: 'syz.2.3777': attribute type 9 has an invalid length.
[  675.882739][T14926] netlink: 'syz.2.3779': attribute type 9 has an invalid length.
[  675.961744][T14924] netlink: 'syz.0.3789': attribute type 9 has an invalid length.
[  678.056216][T14967] netlink: 'syz.1.3795': attribute type 9 has an invalid length.
[  678.494047][T14972] netlink: 'syz.1.3797': attribute type 10 has an invalid length.
[  679.921152][T14996] netlink: 'syz.4.3807': attribute type 9 has an invalid length.
[  680.520098][T15003] device sit0 entered promiscuous mode
[  681.735754][T15017] netlink: 'syz.2.3814': attribute type 9 has an invalid length.
[  682.254250][T15039] netlink: 'syz.1.3821': attribute type 9 has an invalid length.
[  682.468945][T15047] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3825'.
[  683.147876][T15052] netlink: 'syz.3.3836': attribute type 9 has an invalid length.
[  684.500311][T15086] device sit0 entered promiscuous mode
[  685.092196][T15088] netlink: 'syz.4.3839': attribute type 28 has an invalid length.
[  685.124124][T15099] netlink: 'syz.1.3842': attribute type 9 has an invalid length.
[  685.718469][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  685.724979][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  686.273019][T15133] device sit0 entered promiscuous mode
[  686.946961][T15140] netlink: 'syz.0.3857': attribute type 28 has an invalid length.
[  686.955932][T15143] netlink: 'syz.2.3858': attribute type 9 has an invalid length.
[  687.255669][T15156] netlink: 'syz.4.3862': attribute type 9 has an invalid length.
[  687.806203][T15179] device sit0 entered promiscuous mode
[  688.029903][T15185] netlink: 'syz.2.3876': attribute type 28 has an invalid length.
[  688.622854][T15201] netlink: 'syz.2.3882': attribute type 9 has an invalid length.
[  689.368932][T15218] netlink: 'syz.0.3900': attribute type 9 has an invalid length.
[  689.474704][T15224] device sit0 entered promiscuous mode
[  689.954197][T15228] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3892'.
[  690.268289][T15232] netlink: 'syz.0.3894': attribute type 1 has an invalid length.
[  691.194806][T15265] netlink: 'syz.3.3906': attribute type 9 has an invalid length.
[  691.623324][T15277] netlink: 'syz.3.3921': attribute type 9 has an invalid length.
[  691.773499][T15282] netlink: 'syz.2.3912': attribute type 1 has an invalid length.
[  692.716755][T15304] netlink: 'syz.3.3922': attribute type 9 has an invalid length.
[  692.809796][T15311] device sit0 left promiscuous mode
[  693.005101][T15312] device sit0 entered promiscuous mode
[  693.563227][T15315] netlink: 'syz.4.3937': attribute type 9 has an invalid length.
[  693.767902][T15330] netlink: 830 bytes leftover after parsing attributes in process `syz.0.3927'.
[  694.429648][T15357] netlink: 'syz.3.3941': attribute type 9 has an invalid length.
[  694.572381][T15359] device sit0 left promiscuous mode
[  694.729675][T15360] device sit0 entered promiscuous mode
[  696.089841][T15395] netlink: 'syz.2.3956': attribute type 9 has an invalid length.
[  696.126589][T15393] netlink: 'syz.0.3955': attribute type 9 has an invalid length.
[  696.516236][T15406] device sit0 left promiscuous mode
[  696.885472][T15410] device sit0 entered promiscuous mode
[  697.448383][T15433] netlink: 'syz.0.3962': attribute type 9 has an invalid length.
[  697.514961][T15437] netlink: 830 bytes leftover after parsing attributes in process `syz.3.3964'.
[  697.906916][T15446] netlink: 'syz.3.3969': attribute type 9 has an invalid length.
[  699.337099][T15474] netlink: 'syz.0.3978': attribute type 9 has an invalid length.
[  699.537338][T15483] netlink: 'syz.0.3990': attribute type 9 has an invalid length.
[  699.639504][T15484] netlink: 830 bytes leftover after parsing attributes in process `syz.2.3979'.
[  700.095902][T15502] netlink: 'syz.0.3999': attribute type 9 has an invalid length.
[  700.514796][T15509] device sit0 left promiscuous mode
[  700.738663][T15510] device sit0 entered promiscuous mode
[  701.189238][T15522] netlink: 'syz.3.3998': attribute type 9 has an invalid length.
[  701.281118][T15526] netlink: 830 bytes leftover after parsing attributes in process `syz.1.4001'.
[  701.622444][T15538] netlink: 'syz.1.4006': attribute type 9 has an invalid length.
[  702.699930][T15556] netlink: 'syz.2.4015': attribute type 9 has an invalid length.
[  703.140468][T15573] netlink: 'syz.0.4021': attribute type 9 has an invalid length.
[  703.473472][T15586] device sit0 left promiscuous mode
[  703.999425][T15588] device sit0 entered promiscuous mode
[  704.762557][T15609] netlink: 'syz.0.4035': attribute type 9 has an invalid length.
[  705.826825][T15633] netlink: 'syz.1.4045': attribute type 9 has an invalid length.
[  706.164092][T15642] netlink: 'syz.1.4049': attribute type 9 has an invalid length.
[  706.724681][T15649] netlink: 'syz.1.4052': attribute type 21 has an invalid length.
[  706.797902][T15649] netlink: 'syz.1.4052': attribute type 1 has an invalid length.
[  707.546004][T15673] netlink: 'syz.3.4062': attribute type 9 has an invalid length.
[  707.579321][T15670] netlink: 'syz.4.4059': attribute type 9 has an invalid length.
[  708.268417][T15681] netlink: 830 bytes leftover after parsing attributes in process `syz.2.4063'.
[  709.250676][T15708] netlink: 'syz.2.4075': attribute type 9 has an invalid length.
[  710.061889][T15722] netlink: 'syz.1.4090': attribute type 29 has an invalid length.
[  710.130989][T15722] netlink: 'syz.1.4090': attribute type 29 has an invalid length.
[  710.201479][T15727] netlink: 'syz.3.4080': attribute type 21 has an invalid length.
[  710.219943][T15727] netlink: 'syz.3.4080': attribute type 1 has an invalid length.
[  710.250184][T15726] netlink: 'syz.1.4090': attribute type 29 has an invalid length.
[  712.058865][T15758] netlink: 'syz.3.4091': attribute type 21 has an invalid length.
[  712.070211][T15758] netlink: 128 bytes leftover after parsing attributes in process `syz.3.4091'.
[  712.080516][T15758] netlink: 'syz.3.4091': attribute type 5 has an invalid length.
[  712.089642][T15758] netlink: 'syz.3.4091': attribute type 6 has an invalid length.
[  712.098090][T15758] netlink: 3 bytes leftover after parsing attributes in process `syz.3.4091'.
[  712.110499][T15760] netlink: 'syz.0.4089': attribute type 9 has an invalid length.
[  712.443594][T15773] netlink: 'syz.3.4097': attribute type 29 has an invalid length.
[  714.550176][T15830] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4116'.
[  716.216548][T15862] validate_nla: 12 callbacks suppressed
[  716.216594][T15862] netlink: 'syz.4.4132': attribute type 21 has an invalid length.
[  716.232990][T15862] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4132'.
[  716.246821][T15862] netlink: 'syz.4.4132': attribute type 5 has an invalid length.
[  716.259020][T15862] netlink: 'syz.4.4132': attribute type 6 has an invalid length.
[  716.269218][T15862] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4132'.
[  716.270506][T15868] netlink: 'syz.2.4133': attribute type 29 has an invalid length.
[  716.291849][T15868] netlink: 'syz.2.4133': attribute type 29 has an invalid length.
[  716.304672][T15872] netlink: 'syz.2.4133': attribute type 29 has an invalid length.
[  716.332305][T15866] netlink: 'syz.0.4129': attribute type 21 has an invalid length.
[  716.364209][T15866] netlink: 'syz.0.4129': attribute type 1 has an invalid length.
[  716.504602][T15876] netlink: 'syz.3.4135': attribute type 9 has an invalid length.
[  716.736929][T15883] netlink: 'syz.3.4139': attribute type 9 has an invalid length.
[  717.819825][T15903] device wlan0 left promiscuous mode
[  717.843576][T15907] mac80211_hwsim hwsim6 ������: renamed from wlan0
[  718.127583][T15915] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4147'.
[  718.181287][T15915] netlink: 3 bytes leftover after parsing attributes in process `syz.2.4147'.
[  719.502740][T15950] delete_channel: no stack
[  719.627563][ T7044] tipc: Subscription rejected, illegal request
[  721.557375][T16000] validate_nla: 6 callbacks suppressed
[  721.557416][T16000] netlink: 'syz.4.4176': attribute type 29 has an invalid length.
[  721.589465][T16000] netlink: 'syz.4.4176': attribute type 29 has an invalid length.
[  721.631705][T15995] netlink: 'syz.3.4175': attribute type 9 has an invalid length.
[  721.673762][T15995] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4175'.
[  721.768278][T16006] netlink: 'syz.1.4178': attribute type 9 has an invalid length.
[  721.789495][T16004] netlink: 'syz.4.4176': attribute type 29 has an invalid length.
[  722.089487][T16014] netlink: 'syz.2.4181': attribute type 9 has an invalid length.
[  723.462077][T16034] delete_channel: no stack
[  723.846314][T16046] netlink: 'syz.2.4192': attribute type 9 has an invalid length.
[  726.173758][T16100] netlink: 'syz.4.4211': attribute type 9 has an invalid length.
[  726.206339][T16100] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.4211'.
[  728.592716][T16149] netlink: 'syz.3.4229': attribute type 9 has an invalid length.
[  728.810675][T16157] netlink: 'syz.0.4243': attribute type 9 has an invalid length.
[  729.220761][T16165] sock: sock_timestamping_bind_phc: sock not bind to device
[  730.072345][T16186] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4241'.
[  730.145015][T16183] netlink: 'syz.2.4239': attribute type 9 has an invalid length.
[  730.153595][T16183] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4239'.
[  731.215123][T16204] netlink: 'syz.1.4259': attribute type 9 has an invalid length.
[  731.286795][T16207] netlink: 'syz.4.4248': attribute type 9 has an invalid length.
[  731.676859][T16217] delete_channel: no stack
[  731.990927][T16232] netlink: 'syz.3.4262': attribute type 10 has an invalid length.
[  732.031256][T16232] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4262'.
[  732.452218][T16232] team0: Port device macvlan0 removed
[  732.523269][T16238] netlink: 'syz.0.4264': attribute type 9 has an invalid length.
[  732.746476][T16240] netlink: 'syz.1.4265': attribute type 9 has an invalid length.
[  733.259757][T16258] netlink: 'syz.2.4281': attribute type 9 has an invalid length.
[  733.773531][T16265] delete_channel: no stack
[  734.239253][T16271] netlink: 'syz.1.4277': attribute type 9 has an invalid length.
[  735.410856][T16294] netlink: 'syz.3.4286': attribute type 9 has an invalid length.
[  736.367500][T16311] delete_channel: no stack
[  736.697726][T16319] netlink: 'syz.3.4295': attribute type 9 has an invalid length.
[  737.459843][T16327] netlink: 'syz.2.4300': attribute type 9 has an invalid length.
[  737.483626][T16328] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.4299'.
[  737.641476][T16332] sock: sock_timestamping_bind_phc: sock not bind to device
[  737.932011][T16344] netlink: 'syz.1.4306': attribute type 10 has an invalid length.
[  737.940464][T16344] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4306'.
[  738.480946][T16344] team0: Port device macvlan0 removed
[  738.502440][T16353] delete_channel: no stack
[  738.588617][T16346] netlink: 'syz.3.4307': attribute type 9 has an invalid length.
[  739.233330][T16365] netlink: 'syz.3.4315': attribute type 9 has an invalid length.
[  739.741495][T16376] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4317'.
[  740.429341][T16384] netlink: 'syz.0.4322': attribute type 9 has an invalid length.
[  740.730449][T16390] delete_channel: no stack
[  741.010435][T16402] netlink: 'syz.4.4329': attribute type 9 has an invalid length.
[  741.614617][T16414] netlink: 'syz.2.4333': attribute type 10 has an invalid length.
[  741.646644][T16414] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4333'.
[  743.303905][T16439] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4339'.
[  743.414116][T16444] netlink: 'syz.0.4342': attribute type 9 has an invalid length.
[  743.602570][T16448] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.4344'.
[  745.213705][T16486] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  745.327175][T16484] netlink: 'syz.4.4358': attribute type 9 has an invalid length.
[  745.681068][T16494] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4360'.
[  747.157775][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  747.164344][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  749.247646][T16532] netlink: 'syz.0.4372': attribute type 9 has an invalid length.
[  750.374585][T16558] netlink: 'syz.0.4380': attribute type 10 has an invalid length.
[  750.425986][T16558] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4380'.
[  751.169955][T16555] device syzkaller0 entered promiscuous mode
[  753.615095][T16577] netlink: 'syz.0.4388': attribute type 9 has an invalid length.
[  755.481860][T16613] netlink: 'syz.4.4398': attribute type 10 has an invalid length.
[  755.521720][T16613] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4398'.
[  756.385237][T16613] device macvlan0 left promiscuous mode
[  756.394125][T16613] team0: Port device macvlan0 removed
[  757.952575][T16665] netlink: 'syz.4.4419': attribute type 10 has an invalid length.
[  757.961014][T16665] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4419'.
[  759.700261][T16697] netlink: 'syz.3.4433': attribute type 10 has an invalid length.
[  761.507079][T16720] netlink: 'syz.2.4450': attribute type 39 has an invalid length.
[  765.135587][T16754] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4453'.
[  765.166151][T16755] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4452'.
[  770.217271][T16798] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4471'.
[  770.865695][T16827] mac80211_hwsim hwsim8 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  771.853356][T16847] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4486'.
[  772.237981][T16853] netlink: 'syz.0.4491': attribute type 39 has an invalid length.
[  778.457598][T16969] netlink: 'syz.1.4532': attribute type 9 has an invalid length.
[  778.730712][T16973] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4534'.
[  781.238001][T17010] device syzkaller0 entered promiscuous mode
[  783.404565][T17018] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4550'.
[  785.890867][T17093] netlink: 'syz.3.4576': attribute type 10 has an invalid length.
[  785.908903][T17093] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4576'.
[  785.982295][T17093] bond0: (slave team0): Releasing backup interface
[  786.031708][T17093] device team_slave_0 left promiscuous mode
[  786.039227][T17093] device team_slave_1 left promiscuous mode
[  786.046195][T17093] device wlan1 left promiscuous mode
[  786.113742][T17093] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  786.912262][T17112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4585'.
[  789.823442][T17178] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4610'.
[  791.847326][T17228] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4631'.
[  794.580520][T17264] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4647'.
[  794.826596][T17281] netlink: 'syz.1.4652': attribute type 9 has an invalid length.
[  798.020918][T17326] netlink: 'syz.1.4668': attribute type 9 has an invalid length.
[  798.189853][T17331] netlink: 'syz.3.4670': attribute type 39 has an invalid length.
[  799.051566][T17360] netlink: 'syz.0.4682': attribute type 10 has an invalid length.
[  799.107834][T17360] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4682'.
[  799.126369][T17360] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  799.456243][T17363] netlink: 'syz.4.4683': attribute type 9 has an invalid length.
[  802.909980][T17443] netlink: 'syz.0.4715': attribute type 39 has an invalid length.
[  803.274390][T17460] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4723'.
[  804.162023][T17484] netlink: 'syz.2.4733': attribute type 39 has an invalid length.
[  804.643897][T17502] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4738'.
[  804.743154][T17506] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4741'.
[  806.669151][T17559] netlink: 'syz.4.4761': attribute type 2 has an invalid length.
[  806.698056][T17559] netlink: 'syz.4.4761': attribute type 8 has an invalid length.
[  806.713443][T17557] netlink: 'syz.2.4759': attribute type 11 has an invalid length.
[  806.729764][T17557] netlink: 173820 bytes leftover after parsing attributes in process `syz.2.4759'.
[  806.742418][T17559] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4761'.
[  806.784841][T17555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  806.817324][T17560] netlink: 'syz.0.4758': attribute type 10 has an invalid length.
[  806.827713][T17560] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4758'.
[  808.348509][T17605] netlink: 'syz.3.4775': attribute type 11 has an invalid length.
[  808.385886][T17607] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4774'.
[  808.396878][T17605] netlink: 173820 bytes leftover after parsing attributes in process `syz.3.4775'.
[  808.408899][T17603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  808.600039][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  808.607257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  809.829758][T17645] netlink: 'syz.3.4789': attribute type 2 has an invalid length.
[  809.885202][T17645] netlink: 'syz.3.4789': attribute type 8 has an invalid length.
[  809.940571][T17645] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4789'.
[  811.337816][T17676] netlink: 'syz.0.4800': attribute type 11 has an invalid length.
[  811.346752][T17676] netlink: 173820 bytes leftover after parsing attributes in process `syz.0.4800'.
[  811.485728][T17675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  811.854597][T17689] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4804'.
[  812.439903][T17712] netlink: 'syz.1.4812': attribute type 2 has an invalid length.
[  812.483068][T17712] netlink: 'syz.1.4812': attribute type 8 has an invalid length.
[  812.521530][T17712] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4812'.
[  814.002294][T17741] netlink: 'syz.4.4819': attribute type 11 has an invalid length.
[  814.031107][T17741] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.4819'.
[  814.118661][T17739] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  815.605341][T17787] netlink: 'syz.1.4835': attribute type 10 has an invalid length.
[  815.652685][T17787] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4835'.
[  818.742235][T17863] device syzkaller0 entered promiscuous mode
[  818.914797][T17883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4864'.
[  821.802646][T17883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4864'.
[  823.882649][T17935] device syzkaller0 entered promiscuous mode
[  828.946985][T18026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4915'.
[  828.990334][T18026] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4915'.
[  829.059057][T18018] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4915'.
[  829.082628][T18025] BUG: kernel NULL pointer dereference, address: 0000000000000000
[  829.090505][T18025] #PF: supervisor instruction fetch in kernel mode
[  829.097050][T18025] #PF: error_code(0x0010) - not-present page
[  829.103078][T18025] PGD 25c09067 P4D 25c09067 PUD 0 
[  829.108241][T18025] Oops: 0010 [#1] PREEMPT SMP KASAN
[  829.113477][T18025] CPU: 1 PID: 18025 Comm: syz.1.4917 Not tainted 6.1.142-syzkaller #0
[  829.121669][T18025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  829.131767][T18025] RIP: 0010:0x0
[  829.135273][T18025] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  829.142679][T18025] RSP: 0018:ffffc9000ce67398 EFLAGS: 00010246
[  829.148797][T18025] RAX: 1ffffffff15eb29b RBX: 000000000000000f RCX: 0000000000000000
[  829.156810][T18025] RDX: ffffc9000ce67440 RSI: 0000000000000001 RDI: ffff888058a6c000
[  829.164821][T18025] RBP: ffffc9000ce674b0 R08: dffffc0000000000 R09: ffffed100b14d808
[  829.172828][T18025] R10: ffffed100b14d808 R11: 1ffff1100b14d807 R12: ffffe8ffffd46ca8
[  829.180841][T18025] R13: ffffffff8af594d8 R14: 0000000000000000 R15: ffff888058a6c000
[  829.188855][T18025] FS:  00007f0d59cc36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  829.197831][T18025] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  829.201152][T18028] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4915'.
[  829.204429][T18025] CR2: ffffffffffffffd6 CR3: 000000002f217000 CR4: 00000000003506e0
[  829.204453][T18025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  829.204467][T18025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  829.237389][T18025] Call Trace:
[  829.240707][T18025]  <TASK>
[  829.243679][T18025]  bond_xdp_xmit+0x309/0x520
[  829.248332][T18025]  ? bond_xdp_xmit+0x93/0x520
[  829.253075][T18025]  ? bond_xdp+0x840/0x840
[  829.257474][T18025]  ? page_pool_put_defragged_page+0x5ca/0x8c0
[  829.263681][T18025]  bq_xmit_all+0xc99/0x10d0
[  829.268248][T18025]  ? __next_zones_zonelist+0x99/0x120
[  829.273675][T18025]  ? perf_trace_preemptirq_template+0x287/0x330
[  829.279969][T18025]  ? __dev_flush+0x1b0/0x1b0
[  829.284624][T18025]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  829.290671][T18025]  ? lock_chain_count+0x20/0x20
[  829.295577][T18025]  ? rcu_is_watching+0x11/0xa0
[  829.300397][T18025]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  829.306592][T18025]  ? lockdep_hardirqs_on+0x94/0x140
[  829.311801][T18025]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  829.317969][T18025]  ? rcu_is_watching+0x11/0xa0
[  829.322746][T18025]  bq_enqueue+0x337/0x3d0
[  829.327099][T18025]  dev_map_enqueue+0x1b4/0x340
[  829.331881][T18025]  xdp_do_redirect_frame+0x30c/0x650
[  829.337183][T18025]  bpf_test_run_xdp_live+0x9dd/0x1970
[  829.342660][T18025]  ? bpf_test_run_xdp_live+0x45c/0x1970
[  829.348234][T18025]  ? xdp_convert_md_to_buff+0x330/0x330
[  829.353826][T18025]  ? trace_raw_output_bpf_test_finish+0xd0/0xd0
[  829.360209][T18025]  ? bpf_prog_change_xdp+0xe/0x30
[  829.365309][T18025]  bpf_prog_test_run_xdp+0x6f1/0xe50
[  829.370775][T18025]  ? dev_put+0x80/0x80
[  829.375701][T18025]  ? dev_put+0x80/0x80
[  829.379987][T18025]  bpf_prog_test_run+0x31e/0x390
[  829.385043][T18025]  __sys_bpf+0x593/0x6d0
[  829.389325][T18025]  ? bpf_link_show_fdinfo+0x310/0x310
[  829.394826][T18025]  ? lock_chain_count+0x20/0x20
[  829.399738][T18025]  __x64_sys_bpf+0x78/0x90
[  829.404178][T18025]  do_syscall_64+0x4c/0xa0
[  829.408610][T18025]  ? clear_bhb_loop+0x60/0xb0
[  829.413332][T18025]  ? clear_bhb_loop+0x60/0xb0
[  829.418022][T18025]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  829.423938][T18025] RIP: 0033:0x7f0d58d8e929
[  829.428370][T18025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  829.448006][T18025] RSP: 002b:00007f0d59cc3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  829.456436][T18025] RAX: ffffffffffffffda RBX: 00007f0d58fb5fa0 RCX: 00007f0d58d8e929
[  829.464447][T18025] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a
[  829.472446][T18025] RBP: 00007f0d58e10b39 R08: 0000000000000000 R09: 0000000000000000
[  829.480434][T18025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  829.488424][T18025] R13: 0000000000000000 R14: 00007f0d58fb5fa0 R15: 00007ffc7f6258a8
[  829.496425][T18025]  </TASK>
[  829.499478][T18025] Modules linked in:
[  829.503391][T18025] CR2: 0000000000000000
[  829.507570][T18025] ---[ end trace 0000000000000000 ]---
[  829.513061][T18025] RIP: 0010:0x0
[  829.516535][T18025] Code: Unable to access opcode bytes at 0xffffffffffffffd6.
[  829.523909][T18025] RSP: 0018:ffffc9000ce67398 EFLAGS: 00010246
[  829.529990][T18025] RAX: 1ffffffff15eb29b RBX: 000000000000000f RCX: 0000000000000000
[  829.537974][T18025] RDX: ffffc9000ce67440 RSI: 0000000000000001 RDI: ffff888058a6c000
[  829.545962][T18025] RBP: ffffc9000ce674b0 R08: dffffc0000000000 R09: ffffed100b14d808
[  829.553945][T18025] R10: ffffed100b14d808 R11: 1ffff1100b14d807 R12: ffffe8ffffd46ca8
[  829.561964][T18025] R13: ffffffff8af594d8 R14: 0000000000000000 R15: ffff888058a6c000
[  829.570047][T18025] FS:  00007f0d59cc36c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  829.579166][T18025] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  829.585773][T18025] CR2: ffffffffffffffd6 CR3: 000000002f217000 CR4: 00000000003506e0
[  829.593776][T18025] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  829.601761][T18025] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  829.609744][T18025] Kernel panic - not syncing: Fatal exception in interrupt
[  829.617299][T18025] Kernel Offset: disabled
[  829.621649][T18025] Rebooting in 86400 seconds..