last executing test programs: 2.594584354s ago: executing program 0 (id=5663): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.389567647s ago: executing program 4 (id=5664): bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000021c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000002000000000000000100008018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000001801000020756c2500000000002020207b1a00ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000002c0)="e02742e86c0d85ff9782762f0800", 0x0, 0x46b, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0xc5bf) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x5, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8982, &(0x7f0000000080)) 2.255024749s ago: executing program 3 (id=5665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r0, 0x0, r8}, 0x10) 2.073874623s ago: executing program 3 (id=5667): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 2.019995574s ago: executing program 0 (id=5669): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 1.63638779s ago: executing program 4 (id=5671): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 1.543977432s ago: executing program 0 (id=5672): socket$kcm(0xa, 0x5, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005", @ANYRES32], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x1, 0x200, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_percpu\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 1.543746362s ago: executing program 3 (id=5673): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x30004081) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x29, 0x23, &(0x7f0000000040), 0xcf) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x6, &(0x7f0000000000), 0x84) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@in6={0xa, 0x4e23, 0xe, @empty, 0x7}, 0x80, 0x0}, 0x0) getpid() socketpair(0x1d, 0x803, 0x1, &(0x7f0000000040)) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000040), 0x4) recvmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x100) 1.487510223s ago: executing program 2 (id=5674): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 1.462078033s ago: executing program 1 (id=5675): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000700)='cpuset.memory_spread_page\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21bef5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9b24be41a9169bdfaf16da915b2e249ee1c6eee84309e7a23c19a39484809539fca4e0b6eab1aa7d55545a34effa077faa56d59e88254f54077f799bf168301000000bf2255d6a0244d35b213bda84cc172afd8cc2e59a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d0faab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f94306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b09012175484135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f8a4cf796b07a6ff61c5552417fd703f7f14d8b78a602ca3cdf6a9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e559d17879570c8ad9433269af3be5fa6a9a5c24e392955f4e979ea13201bafe4f0f6ea508000000a0c548552b571bed5647223c78a992810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151ffdf6f7820549cda6cb799c6e924966a7f90bf8fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ede62fc28839b5301160ecec37e83efceefd7ca2533659edc8be05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d35a142a9ec9a7a3755e0f209150a07682c4e14e3a835701bea8240399c56ce8f58df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b262341c5e093fd66a2946501559335781092cf8ce3c7c56cd31121624d76517fd3666276c3c0e812b28e2f30d035cee5d0e77a3c70008ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856cf24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31651e0ecea5ece8fb11a4ee288eb149f1fa33669cc8d901fa8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463baf28345bde0c195bc9f021da8f3025ee9c8e3168b4177ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262fa3f1dabeb4fc4bda345360200000001fbddeacd3adaa4d2715e21c772ccd44341f7fd53df58ae791ee8b489a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b70d10355b07466d1ef0056b5af553d18a6cc50feeb7bfad9b7be3283b6450d014e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5671820420bf5b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff2418a18217747ae442e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20b30f87af976a46f9a9a1ac7dea1ea6845f9aa6623920dacc107f532348cc21164efe794874eac73381e961f3d9c8c21578fe3245097c280abe51427a7f6cd72b5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f721303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d17eb0000000000000000000000fa08ad0731c4b839688b22c4da2a6b00008a1949a6ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce69418a282bffff2481a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6810fae05334d5a44a020000001c0d882a564d74a7c72bf9a2152b261e58fea6d2f93589cfe261dc0410b5ccc92a5a0eab327a33431d62d2b7c75ce654d556c9e1817c1abca762ab53d40da51560351b673363652e1ecb56cfe4a746a45ab13c6014e9f361ab687d1cd1795ce9e05c817b83d76046bdb3709de5df7499a02d2f636a454b85b987580ada025d83bd7b8df28a540d5ec5537942e79f2f1ab25ea5f563bc77e4f9468bd309469880c7e34150ca886d1f9ac2f7e82dbe296c877d925c38c54cc8137b29028854b6bd57ca893927c331300e16aba792289e135589d93302fc37c73c303e383cdf8ef3f6d6265fe5ee01759d24027475c8901039a898582022bc95992b86dce0710887c8a625d9cbb897bdbfaf49a3f642a169827a9bae4fcfa5212461db000000000000e6ed75ca8fcda7ef3ee336189fef3b3ffb9f38fefc5ff39c4e69e3fa1f8b10ee97123e99b61eba065b1ad67530e7c4f11f9da7ae000002000000610101ad7f79cb9bbf64a0fc109f49fe8799fe266e2ccac80fefe750151f5ddfe51833ec65ece70e07ce8ab5d97db47da8f80000664dc0b86ae2b3ff9d4e220752a6b2f3ea9f793612386496dca5af7b8952aafa796ea7b156d19612297c63bb20e1e0469f7615f67a9218cbace38f5236821314f76302b98afa93044b83989339ca10e6ae30e70e17a82f03e915b8425e8e7a91614306d2ae0bc3550d856f2d7293672b5673d264fc886b0c8bdf436a0fcd21bf9da7bdca98e34cd6e59b0a7ce4ba1b466561aaa35448dff47bb1d7df23d467689a6669e4300d5acf12e4d0b35abf91569f605b2f6df0d861"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 1.394395185s ago: executing program 4 (id=5676): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x95, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x9, 0x1000000009}, 0x0, 0x0, 0xf7, 0x0, 0x3}, 0x0, 0x6, 0xffffffffffffffff, 0xd) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x55, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x44490, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14101, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) r1 = socket$kcm(0x2, 0x5, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f00000002c0)=r0, 0x4) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)="9f", 0x1}], 0x1}, 0x3e8) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge0\x00', @random="010000201000"}) 1.312209276s ago: executing program 1 (id=5677): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r0, 0x0, r8}, 0x10) 1.10670694s ago: executing program 0 (id=5678): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000055c381d64a06c990241c38788925131557182b83a32f4854153e44cbc1cb2cd8b92b441e1e6cfa900c9babba7d71e1f2f673e0b3157d6025"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x16) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x10000000, &(0x7f0000000180)="5ca44104bacbd4ed9a63193f03d96fcefefd4c56923e051251f71eefebe02d822d2c0d9349613b", 0x27, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r2, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) 1.10637607s ago: executing program 1 (id=5679): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0xfc, 0xfd, 0x0, 0x0, 0x1001, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0xca, 0x0, 0x2, 0xffffffffffffff81, 0x3}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2020) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x7ff}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x2f}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x100e68, 0x0, 0x4000, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_subtree(r2, &(0x7f0000000200)=ANY=[@ANYRES8=r1, @ANYRES8=r4], 0x12) 1.08612763s ago: executing program 2 (id=5680): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xffffffff}}, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r2) setsockopt$sock_attach_bpf(r3, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\v'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)={0x0, 0x0}) close(r5) setsockopt$sock_attach_bpf(r6, 0x10f, 0x87, &(0x7f0000000180), 0x4bd) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r0) 886.182964ms ago: executing program 2 (id=5681): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x80, 0x0, 0x20, 0x4, 0x0, 0x0, 0x5, 0x81402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000980), 0x7}, 0x80, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0xffffff0000000000, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xff22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x24000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 851.568084ms ago: executing program 1 (id=5682): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00'}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, 0x0, 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) 811.429275ms ago: executing program 4 (id=5683): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x8) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14869}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000200)={'veth0_to_team\x00'}) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r2 = socket$kcm(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r2, 0x29, 0x10, 0x0, 0x1300) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0x0, @loopback}, 0x80, 0x0}, 0x24044840) setsockopt$sock_attach_bpf(r0, 0x6, 0x1e, &(0x7f0000000500)=r1, 0x4) 727.573017ms ago: executing program 0 (id=5684): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 586.341279ms ago: executing program 3 (id=5685): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_config_ext, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xa6, &(0x7f0000000340)=""/166}, 0x80) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x4, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 580.432629ms ago: executing program 2 (id=5686): r0 = perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}], 0x1, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x36}}, @ip_tos_u8={{0x11, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 507.065291ms ago: executing program 4 (id=5687): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0xa}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400000000000}, 0x0, 0x0, 0x0, 0x0, 0xf60}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x7, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r0, &(0x7f0000001600), 0x0}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 425.433712ms ago: executing program 1 (id=5688): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r3}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x8}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r9, r0, 0x0, r8}, 0x10) 393.934632ms ago: executing program 2 (id=5689): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 292.110284ms ago: executing program 3 (id=5690): perf_event_open(&(0x7f0000000900)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_config_ext={0xf477, 0x61}, 0x8ac02, 0x3, 0x8, 0x0, 0x0, 0x200, 0x1, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffff0000000000, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xff22) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f00000001c0)='D', 0x33fe0}], 0x1}, 0x20000040) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) close(r0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x24000000) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 140.398017ms ago: executing program 4 (id=5691): close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x82901, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) close(r0) 129.110407ms ago: executing program 0 (id=5692): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0xa, 0x2, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x5, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100808, 0x0, 0x400, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r3, 0x84, 0x9, &(0x7f0000000380), 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 76.816178ms ago: executing program 1 (id=5693): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) close(r3) socketpair(0x1e, 0x1, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) socket$kcm(0x22, 0x2, 0x21) sendmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)=[{}], 0x1}, 0x480c0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000001080)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7602, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 11.555959ms ago: executing program 3 (id=5694): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x3, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7b, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000240)='ns/user\x00') perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb8}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1d, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8946, &(0x7f0000000080)) 0s ago: executing program 2 (id=5695): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000055c381d64a06c990241c38788925131557182b83a32f4854153e44cbc1cb2cd8b92b441e1e6cfa900c9babba7d71e1f2f673e0b3157d6025"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x16) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x10000000, &(0x7f0000000180)="5ca44104bacbd4ed9a63193f03d96fcefefd4c56923e051251f71eefebe02d822d2c0d9349613b", 0x27, &(0x7f00000001c0), &(0x7f0000000280), &(0x7f0000000300)) syz_open_procfs$namespace(r2, &(0x7f0000000380)='ns/user\x00') socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89a1, &(0x7f0000000080)) kernel console output (not intermixed with test programs): ] netlink: 'syz.1.2206': attribute type 29 has an invalid length. [ 429.047749][T10326] netlink: 'syz.1.2206': attribute type 29 has an invalid length. [ 429.072045][T10327] netlink: 'syz.1.2206': attribute type 29 has an invalid length. [ 430.626695][T10353] device syzkaller0 entered promiscuous mode [ 431.100060][T10371] netlink: 'syz.1.2220': attribute type 10 has an invalid length. [ 431.136997][T10371] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 432.692131][T10408] device syzkaller0 entered promiscuous mode [ 433.103581][T10424] netlink: 'syz.0.2242': attribute type 10 has an invalid length. [ 433.192152][T10424] team0: Device ipvlan1 failed to register rx_handler [ 434.344454][T10460] netlink: 'syz.3.2255': attribute type 29 has an invalid length. [ 434.490023][T10438] bridge0: port 3(bond0) entered blocking state [ 434.510237][T10438] bridge0: port 3(bond0) entered disabled state [ 434.523453][T10438] device bond0 entered promiscuous mode [ 434.540285][T10438] device bond_slave_0 entered promiscuous mode [ 434.573761][T10438] device bond_slave_1 entered promiscuous mode [ 434.597309][T10438] device wlan1 entered promiscuous mode [ 434.603833][T10447] device bond0 left promiscuous mode [ 434.634325][T10447] device bond_slave_0 left promiscuous mode [ 434.640413][T10447] device bond_slave_1 left promiscuous mode [ 434.655212][T10447] device wlan1 left promiscuous mode [ 434.689048][T10447] bridge0: port 3(bond0) entered disabled state [ 434.704764][T10457] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2255'. [ 434.718856][T10460] netlink: 'syz.3.2255': attribute type 29 has an invalid length. [ 434.737916][T10468] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 435.141496][T10490] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2272'. [ 435.251180][T10492] netlink: 'syz.4.2260': attribute type 10 has an invalid length. [ 435.369625][T10492] team0: Device ipvlan1 failed to register rx_handler [ 435.431331][T10490] netlink: 'syz.0.2272': attribute type 29 has an invalid length. [ 435.463543][T10490] netlink: 'syz.0.2272': attribute type 29 has an invalid length. [ 436.245651][T10516] bridge0: port 5(bond0) entered blocking state [ 436.271186][T10516] bridge0: port 5(bond0) entered disabled state [ 436.324825][T10516] device bond0 entered promiscuous mode [ 436.335178][T10516] device bond_slave_0 entered promiscuous mode [ 436.354993][T10516] device bond_slave_1 entered promiscuous mode [ 436.373291][T10516] device wlan1 entered promiscuous mode [ 436.418921][T10521] device bond0 left promiscuous mode [ 436.444333][T10521] device bond_slave_0 left promiscuous mode [ 436.456718][T10521] device bond_slave_1 left promiscuous mode [ 436.463410][T10521] device wlan1 left promiscuous mode [ 436.470436][T10521] bridge0: port 5(bond0) entered disabled state [ 437.018877][T10538] netlink: 'syz.3.2279': attribute type 10 has an invalid length. [ 437.060294][T10538] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 437.089781][T10544] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2282'. [ 437.376884][T10544] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 437.506003][T10544] netlink: 'syz.1.2282': attribute type 29 has an invalid length. [ 437.555779][T10559] device syzkaller0 entered promiscuous mode [ 438.163297][T10571] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 438.241763][T10571] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 438.859476][T10582] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 439.572575][T10609] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 439.631261][T10609] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 439.978375][T10623] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 439.994244][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.994334][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.073546][T10623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.198088][T10627] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 440.920622][T10652] netlink: 'syz.0.2339': attribute type 10 has an invalid length. [ 441.004091][T10652] team0: Device ipvlan1 failed to register rx_handler [ 441.379919][T10667] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 441.431331][T10667] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.534717][T10689] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2338'. [ 442.850540][T10702] netlink: 'syz.0.2345': attribute type 21 has an invalid length. [ 442.940138][T10702] netlink: 'syz.0.2345': attribute type 6 has an invalid length. [ 442.981590][T10689] netlink: 'syz.4.2338': attribute type 29 has an invalid length. [ 442.996772][T10702] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2345'. [ 443.063159][T10689] netlink: 'syz.4.2338': attribute type 29 has an invalid length. [ 444.255054][T10739] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2363'. [ 444.606804][T10739] netlink: 'syz.4.2363': attribute type 29 has an invalid length. [ 444.627243][T10739] netlink: 'syz.4.2363': attribute type 29 has an invalid length. [ 445.141993][T10775] netlink: 'syz.0.2379': attribute type 10 has an invalid length. [ 445.153802][T10775] team0: Device ipvlan1 failed to register rx_handler [ 445.466820][T10781] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 445.567431][T10781] device syzkaller0 entered promiscuous mode [ 448.229302][T10838] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2403'. [ 448.853604][T10849] netlink: 'syz.2.2407': attribute type 21 has an invalid length. [ 448.889485][T10849] netlink: 'syz.2.2407': attribute type 6 has an invalid length. [ 448.942590][T10849] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2407'. [ 449.409282][T10863] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 449.508334][T10863] device syzkaller0 entered promiscuous mode [ 452.474230][T10909] netlink: 'syz.0.2432': attribute type 10 has an invalid length. [ 452.497821][T10909] team0: Device ipvlan1 failed to register rx_handler [ 452.531466][T10910] netlink: 'syz.4.2431': attribute type 21 has an invalid length. [ 452.549622][T10910] netlink: 'syz.4.2431': attribute type 6 has an invalid length. [ 452.594163][T10910] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2431'. [ 452.603416][T10914] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2434'. [ 454.625613][T10956] netlink: 'syz.3.2450': attribute type 21 has an invalid length. [ 454.664985][T10956] netlink: 'syz.3.2450': attribute type 6 has an invalid length. [ 454.673409][T10956] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2450'. [ 454.697044][T10950] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 454.821082][T10950] device syzkaller0 entered promiscuous mode [ 457.306416][T10995] netlink: 'syz.1.2467': attribute type 10 has an invalid length. [ 457.324602][T10995] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 457.804655][T11012] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2474'. [ 458.255359][T11031] netlink: 'syz.0.2480': attribute type 15 has an invalid length. [ 458.263376][T11031] netlink: 11594 bytes leftover after parsing attributes in process `syz.0.2480'. [ 458.507612][T11035] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2482'. [ 458.646247][T11039] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 458.712514][T11039] device syzkaller0 entered promiscuous mode [ 461.067750][T11042] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 461.075935][T11042] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 461.245242][T11067] netlink: 'syz.1.2503': attribute type 10 has an invalid length. [ 461.280157][T11067] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 461.329090][T11074] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2496'. [ 462.360145][T11109] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 462.460324][T11109] device syzkaller0 entered promiscuous mode [ 462.486467][T11112] netlink: 'syz.3.2508': attribute type 10 has an invalid length. [ 462.502545][T11112] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 464.759298][T11122] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2512'. [ 465.168134][T11151] netlink: 'syz.1.2520': attribute type 21 has an invalid length. [ 465.180035][T11151] netlink: 'syz.1.2520': attribute type 6 has an invalid length. [ 465.204168][T11151] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2520'. [ 465.381123][T11156] netlink: 'syz.3.2526': attribute type 10 has an invalid length. [ 465.415119][T11156] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 465.913072][T11173] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 465.980961][T11173] device syzkaller0 entered promiscuous mode [ 467.059705][T11203] netlink: 'syz.4.2545': attribute type 29 has an invalid length. [ 468.265739][T11190] netlink: 'syz.0.2540': attribute type 10 has an invalid length. [ 468.275969][T11190] team0: Device ipvlan1 failed to register rx_handler [ 468.286593][T11199] netlink: 'syz.3.2544': attribute type 10 has an invalid length. [ 468.306451][T11199] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2544'. [ 468.318415][T11202] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2545'. [ 468.353197][T11203] netlink: 'syz.4.2545': attribute type 29 has an invalid length. [ 468.798020][T11226] netlink: 'syz.1.2555': attribute type 21 has an invalid length. [ 468.936681][T11233] netlink: 'syz.2.2556': attribute type 21 has an invalid length. [ 469.007947][T11233] netlink: 'syz.2.2556': attribute type 6 has an invalid length. [ 469.086309][T11233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2556'. [ 469.301438][T11242] netlink: 'syz.0.2559': attribute type 10 has an invalid length. [ 469.365048][T11242] team0: Device ipvlan1 failed to register rx_handler [ 469.401702][T11244] netlink: 'syz.2.2560': attribute type 10 has an invalid length. [ 469.415746][T11244] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2560'. [ 469.427142][T11244] device team0 entered promiscuous mode [ 469.433004][T11244] device team_slave_0 entered promiscuous mode [ 469.443680][T11244] device team_slave_1 entered promiscuous mode [ 469.451071][T11244] device geneve1 entered promiscuous mode [ 469.458386][T11244] device macvlan0 entered promiscuous mode [ 469.466477][T11244] device wlan1 entered promiscuous mode [ 469.480985][T11244] bridge0: port 3(team0) entered blocking state [ 469.494796][T11244] bridge0: port 3(team0) entered disabled state [ 469.566621][T11252] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2564'. [ 469.722673][T11252] netlink: 'syz.4.2564': attribute type 29 has an invalid length. [ 469.933539][T11247] device syzkaller0 entered promiscuous mode [ 471.945734][T11272] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2572'. [ 472.265467][T11292] validate_nla: 4 callbacks suppressed [ 472.265500][T11292] netlink: 'syz.3.2577': attribute type 10 has an invalid length. [ 472.321510][T11292] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 472.741644][T11309] netlink: 'syz.2.2583': attribute type 8 has an invalid length. [ 472.753387][T11309] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2583'. [ 472.905976][T11317] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2586'. [ 473.152887][T11321] netlink: 'syz.2.2588': attribute type 10 has an invalid length. [ 473.186676][T11317] netlink: 'syz.3.2586': attribute type 29 has an invalid length. [ 473.210703][T11321] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 473.263396][T11317] netlink: 'syz.3.2586': attribute type 29 has an invalid length. [ 473.305016][T11323] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 473.341526][T11323] device syzkaller0 entered promiscuous mode [ 475.299424][T11337] netlink: 'syz.3.2596': attribute type 10 has an invalid length. [ 475.307444][T11337] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 475.558727][T11354] netlink: 'syz.3.2604': attribute type 10 has an invalid length. [ 475.567460][T11354] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 475.582790][T11349] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 476.687896][T11381] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 476.800032][T11381] device syzkaller0 entered promiscuous mode [ 476.814791][T11385] netlink: 'syz.3.2617': attribute type 10 has an invalid length. [ 476.823440][T11385] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 477.528144][T11408] netlink: 'syz.1.2625': attribute type 29 has an invalid length. [ 478.043739][T11421] netlink: 'syz.4.2630': attribute type 29 has an invalid length. [ 479.277587][T11408] netlink: 'syz.1.2625': attribute type 29 has an invalid length. [ 479.285911][T11417] netlink: 'syz.0.2639': attribute type 10 has an invalid length. [ 479.295157][T11417] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2639'. [ 479.305492][T11417] device team0 entered promiscuous mode [ 479.335475][T11417] device team_slave_0 entered promiscuous mode [ 479.341845][T11417] device team_slave_1 entered promiscuous mode [ 479.366781][T11417] device geneve1 entered promiscuous mode [ 479.372728][T11417] device macvlan0 entered promiscuous mode [ 479.380366][T11417] bridge0: port 3(team0) entered blocking state [ 479.387166][T11417] bridge0: port 3(team0) entered disabled state [ 479.431766][T11419] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2630'. [ 479.459986][T11421] netlink: 'syz.4.2630': attribute type 29 has an invalid length. [ 479.485149][T11424] netlink: 'syz.1.2631': attribute type 10 has an invalid length. [ 479.536246][T11424] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 479.854966][T11442] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 480.041158][T11446] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 480.050239][T11446] netlink: 'syz.4.2642': attribute type 29 has an invalid length. [ 480.536044][T11463] netlink: 'syz.3.2650': attribute type 10 has an invalid length. [ 480.577970][T11463] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 480.991695][T11482] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 481.169910][T11484] netlink: 'syz.2.2658': attribute type 29 has an invalid length. [ 481.438651][T11502] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 481.479936][T11503] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2664'. [ 481.756635][T11512] netlink: 399 bytes leftover after parsing attributes in process `syz.1.2671'. [ 482.391256][T11536] team0: Device ipvlan1 failed to register rx_handler [ 482.560606][T11546] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2686'. [ 482.698007][T11546] validate_nla: 9 callbacks suppressed [ 482.698041][T11546] netlink: 'syz.0.2686': attribute type 29 has an invalid length. [ 482.737093][T11546] netlink: 'syz.0.2686': attribute type 29 has an invalid length. [ 482.797629][T11555] netlink: 'syz.4.2698': attribute type 15 has an invalid length. [ 482.952522][T11563] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2700'. [ 483.081613][T11563] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 483.116445][T11563] netlink: 'syz.0.2700': attribute type 29 has an invalid length. [ 483.449015][T11574] netlink: 'syz.2.2694': attribute type 29 has an invalid length. [ 483.496311][T11580] netlink: 'syz.4.2699': attribute type 10 has an invalid length. [ 483.601961][T11580] team0: Device ipvlan1 failed to register rx_handler [ 483.697878][T11574] netlink: 'syz.2.2694': attribute type 29 has an invalid length. [ 483.827461][T11585] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 483.926778][T11585] device syzkaller0 entered promiscuous mode [ 483.993231][T11592] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2705'. [ 484.191122][T11592] netlink: 'syz.4.2705': attribute type 29 has an invalid length. [ 485.710539][T11592] netlink: 'syz.4.2705': attribute type 29 has an invalid length. [ 486.402304][T11622] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 486.766740][T11638] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 487.800694][T11674] validate_nla: 8 callbacks suppressed [ 487.800732][T11674] netlink: 'syz.3.2736': attribute type 10 has an invalid length. [ 487.834978][T11674] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 487.862969][T11672] netlink: 'syz.4.2735': attribute type 29 has an invalid length. [ 487.883246][T11672] netlink: 'syz.4.2735': attribute type 29 has an invalid length. [ 488.080637][T11679] netlink: 'syz.2.2737': attribute type 29 has an invalid length. [ 488.131289][T11679] netlink: 'syz.2.2737': attribute type 29 has an invalid length. [ 488.585273][T11698] netlink: 'syz.3.2744': attribute type 29 has an invalid length. [ 488.615164][T11698] netlink: 'syz.3.2744': attribute type 29 has an invalid length. [ 488.736603][T11715] netlink: 'syz.0.2751': attribute type 10 has an invalid length. [ 488.787643][T11715] team0: Device ipvlan1 failed to register rx_handler [ 489.142912][T11722] netlink: 'syz.3.2752': attribute type 29 has an invalid length. [ 489.183313][T11722] netlink: 'syz.3.2752': attribute type 29 has an invalid length. [ 489.812203][T11756] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 490.170044][T11769] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 490.777128][T11795] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 491.170363][T11807] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 491.800361][T11833] team0: Device ipvlan1 failed to register rx_handler [ 492.388108][T11854] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 493.256237][T11882] validate_nla: 16 callbacks suppressed [ 493.256269][T11882] netlink: 'syz.1.2810': attribute type 10 has an invalid length. [ 493.303129][T11882] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 493.724744][T11898] netlink: 'syz.4.2818': attribute type 10 has an invalid length. [ 493.771926][T11898] team0: Device ipvlan1 failed to register rx_handler [ 494.013611][T11907] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 494.087554][T11904] netlink: 'syz.2.2820': attribute type 29 has an invalid length. [ 494.129675][T11907] device syzkaller0 entered promiscuous mode [ 494.154977][T11904] netlink: 'syz.2.2820': attribute type 29 has an invalid length. [ 494.601638][T11918] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 496.552068][T11918] netlink: 'syz.0.2834': attribute type 29 has an invalid length. [ 496.977469][T11936] netlink: 'syz.4.2828': attribute type 10 has an invalid length. [ 497.010038][T11936] team0: Device ipvlan1 failed to register rx_handler [ 497.156810][T11944] netlink: 'syz.2.2833': attribute type 10 has an invalid length. [ 497.185654][T11944] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 497.397991][T11937] device syzkaller0 entered promiscuous mode [ 497.436406][T11949] device bridge_slave_1 left promiscuous mode [ 497.473734][T11949] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.560504][T11949] device bridge_slave_0 left promiscuous mode [ 497.592122][T11949] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.099360][T11963] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 500.888399][T11963] netlink: 'syz.0.2838': attribute type 29 has an invalid length. [ 501.078863][T11986] netlink: 'syz.0.2848': attribute type 10 has an invalid length. [ 501.155167][T11986] team0: Device ipvlan1 failed to register rx_handler [ 501.426402][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.432795][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.527922][T11998] bridge0: port 4(macsec0) entered disabled state [ 501.592500][T11998] bridge0: port 3(team0) entered disabled state [ 501.635580][T11997] netlink: 'syz.2.2853': attribute type 29 has an invalid length. [ 501.675870][T11998] device bridge_slave_1 left promiscuous mode [ 501.683493][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.721953][T11998] device bridge_slave_0 left promiscuous mode [ 501.730588][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.967127][T12013] netlink: 'syz.1.2858': attribute type 29 has an invalid length. [ 502.017576][T11997] netlink: 'syz.2.2853': attribute type 29 has an invalid length. [ 502.026840][T12009] netlink: 'syz.0.2856': attribute type 10 has an invalid length. [ 502.056714][T12009] team0: Device ipvlan1 failed to register rx_handler [ 502.179210][T12013] netlink: 'syz.1.2858': attribute type 29 has an invalid length. [ 502.270703][T12019] device syzkaller0 entered promiscuous mode [ 502.642012][T12032] netlink: 'syz.2.2865': attribute type 10 has an invalid length. [ 502.664343][T12032] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 503.395984][T12057] netlink: 'syz.1.2873': attribute type 10 has an invalid length. [ 503.424588][T12057] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 503.478027][T12055] netlink: 'syz.0.2872': attribute type 29 has an invalid length. [ 503.744333][T12063] device bridge_slave_1 left promiscuous mode [ 503.774989][T12063] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.849524][T12063] device bridge_slave_0 left promiscuous mode [ 503.870851][T12063] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.335481][T12079] team0: Device ipvlan1 failed to register rx_handler [ 504.787730][T12093] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 504.971899][T12097] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 505.496705][T12112] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2903'. [ 506.452690][T12133] validate_nla: 8 callbacks suppressed [ 506.452720][T12133] netlink: 'syz.3.2901': attribute type 10 has an invalid length. [ 506.505069][T12133] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 506.670341][T12141] netlink: 'syz.0.2904': attribute type 10 has an invalid length. [ 506.712934][T12141] team0: Device ipvlan1 failed to register rx_handler [ 507.254769][T12151] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2909'. [ 507.490053][T12151] netlink: 'syz.0.2909': attribute type 29 has an invalid length. [ 507.782209][T12151] netlink: 'syz.0.2909': attribute type 29 has an invalid length. [ 508.600589][T12184] netlink: 'syz.0.2918': attribute type 10 has an invalid length. [ 508.653516][T12184] team0: Device ipvlan1 failed to register rx_handler [ 509.233425][T12200] netlink: 'syz.3.2923': attribute type 10 has an invalid length. [ 509.261710][T12200] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 509.559157][T12203] netlink: 'syz.4.2924': attribute type 29 has an invalid length. [ 509.615135][T12203] netlink: 'syz.4.2924': attribute type 29 has an invalid length. [ 510.629314][T12225] device syzkaller0 entered promiscuous mode [ 510.696723][T12230] netlink: 'syz.1.2934': attribute type 10 has an invalid length. [ 510.729793][T12230] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 513.241486][T12266] netlink: 'syz.3.2943': attribute type 29 has an invalid length. [ 514.979111][T12250] bridge0: port 3(team0) entered disabled state [ 514.988655][T12250] bridge0: port 2(macsec0) entered disabled state [ 514.997834][T12250] device bridge_slave_0 left promiscuous mode [ 515.004177][T12250] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.076291][T12266] netlink: 'syz.3.2943': attribute type 29 has an invalid length. [ 515.090219][T12269] device syzkaller0 entered promiscuous mode [ 515.108571][T12274] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2944'. [ 515.169840][T12274] netlink: 'syz.0.2944': attribute type 29 has an invalid length. [ 515.205358][T12274] netlink: 'syz.0.2944': attribute type 29 has an invalid length. [ 515.551372][T12288] netlink: 'syz.0.2948': attribute type 10 has an invalid length. [ 515.572186][T12288] team0: Device ipvlan1 failed to register rx_handler [ 516.138043][T12315] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2960'. [ 516.208223][T12309] netlink: 'syz.2.2959': attribute type 29 has an invalid length. [ 516.217898][T12309] netlink: 'syz.2.2959': attribute type 29 has an invalid length. [ 516.327196][T12315] netlink: 'syz.0.2960': attribute type 29 has an invalid length. [ 516.365050][T12315] netlink: 'syz.0.2960': attribute type 29 has an invalid length. [ 516.519165][T12326] netlink: 'syz.4.2966': attribute type 10 has an invalid length. [ 516.558659][T12326] team0: Device ipvlan1 failed to register rx_handler [ 516.730804][T12329] bridge0: port 3(team0) entered disabled state [ 516.794966][T12329] device bridge_slave_1 left promiscuous mode [ 516.833882][T12329] bridge0: port 2(bridge_slave_1) entered disabled state [ 516.887841][T12329] device bridge_slave_0 left promiscuous mode [ 516.926125][T12329] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.255070][T12348] device syzkaller0 entered promiscuous mode [ 518.069703][T12369] team0: Device ipvlan1 failed to register rx_handler [ 518.252713][T12366] validate_nla: 3 callbacks suppressed [ 518.252751][T12366] netlink: 'syz.2.2975': attribute type 29 has an invalid length. [ 518.276377][T12366] netlink: 'syz.2.2975': attribute type 29 has an invalid length. [ 518.774666][T12384] netlink: 'syz.3.2983': attribute type 9 has an invalid length. [ 518.782777][T12384] netlink: 61951 bytes leftover after parsing attributes in process `syz.3.2983'. [ 519.472527][T12405] netlink: 'syz.4.2992': attribute type 10 has an invalid length. [ 519.493701][T12405] team0: Device ipvlan1 failed to register rx_handler [ 519.812237][T12407] netlink: 'syz.0.2990': attribute type 29 has an invalid length. [ 519.885106][T12407] netlink: 'syz.0.2990': attribute type 29 has an invalid length. [ 520.331236][T12420] netlink: 'syz.2.2996': attribute type 29 has an invalid length. [ 520.481974][T12420] netlink: 'syz.2.2996': attribute type 29 has an invalid length. [ 521.494285][T12453] netlink: 'syz.2.3006': attribute type 10 has an invalid length. [ 521.525654][T12453] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 521.881119][T12463] netlink: 'syz.4.3010': attribute type 29 has an invalid length. [ 522.966387][T12477] device syzkaller0 entered promiscuous mode [ 524.895616][T12514] validate_nla: 3 callbacks suppressed [ 524.895635][T12514] netlink: 'syz.4.3027': attribute type 29 has an invalid length. [ 528.035551][T12504] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 528.042035][T12514] netlink: 'syz.4.3027': attribute type 29 has an invalid length. [ 528.044998][T12504] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 528.062776][T12504] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 528.375152][T12531] netlink: 'syz.2.3032': attribute type 27 has an invalid length. [ 528.449930][T12531] netlink: 'syz.2.3032': attribute type 3 has an invalid length. [ 528.505264][T12531] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3032'. [ 528.585107][T12528] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3031'. [ 528.616428][T12535] netlink: 'syz.0.3034': attribute type 10 has an invalid length. [ 528.645758][T12535] team0: Device ipvlan1 failed to register rx_handler [ 529.050974][T12549] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3039'. [ 529.090086][T12549] device caif0 entered promiscuous mode [ 529.150803][T12550] netlink: 'syz.2.3040': attribute type 29 has an invalid length. [ 529.180191][T12558] netlink: 'syz.4.3041': attribute type 10 has an invalid length. [ 529.211716][T12558] team0: Device ipvlan1 failed to register rx_handler [ 529.318852][T12550] netlink: 'syz.2.3040': attribute type 29 has an invalid length. [ 530.125114][T12582] netlink: 'syz.4.3050': attribute type 10 has an invalid length. [ 530.163698][T12582] team0: Device ipvlan1 failed to register rx_handler [ 530.288977][T12584] netlink: 'syz.1.3051': attribute type 29 has an invalid length. [ 530.312415][T12584] netlink: 'syz.1.3051': attribute type 29 has an invalid length. [ 530.352382][T12592] sock: sock_timestamping_bind_phc: sock not bind to device [ 530.570926][T12595] netlink: 'syz.4.3054': attribute type 10 has an invalid length. [ 530.592795][T12595] team0: Device ipvlan1 failed to register rx_handler [ 530.632540][T12597] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3055'. [ 530.651599][T12599] netlink: 'syz.1.3056': attribute type 29 has an invalid length. [ 530.662257][T12597] device caif0 entered promiscuous mode [ 530.697480][T12599] netlink: 'syz.1.3056': attribute type 29 has an invalid length. [ 530.922371][T12603] netlink: 67 bytes leftover after parsing attributes in process `syz.0.3067'. [ 531.309607][T12621] netlink: 188 bytes leftover after parsing attributes in process `syz.1.3063'. [ 532.036831][T12630] netlink: 'syz.2.3065': attribute type 10 has an invalid length. [ 532.054645][T12630] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 532.404411][T12645] netlink: 'syz.3.3071': attribute type 29 has an invalid length. [ 532.483263][T12647] netlink: 'syz.0.3072': attribute type 10 has an invalid length. [ 532.536376][T12647] team0: Device ipvlan1 failed to register rx_handler [ 532.617299][T12645] netlink: 'syz.3.3071': attribute type 29 has an invalid length. [ 532.643379][T12650] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3070'. [ 532.684721][T12650] device caif0 entered promiscuous mode [ 533.806520][T12676] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3078'. [ 534.529685][T12689] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 534.857799][T12703] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3087'. [ 534.901401][T12703] device caif0 entered promiscuous mode [ 534.931843][T12705] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 535.238107][T12711] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.3091'. [ 535.343206][T12711] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 535.366261][T12709] validate_nla: 4 callbacks suppressed [ 535.366302][T12709] netlink: 'syz.1.3100': attribute type 29 has an invalid length. [ 535.394215][T12711] CPU: 0 PID: 12711 Comm: syz.3.3091 Not tainted 6.1.142-syzkaller #0 [ 535.402419][T12711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 535.412790][T12711] Call Trace: [ 535.416098][T12711] [ 535.419043][T12711] dump_stack_lvl+0x168/0x22e [ 535.423762][T12711] ? show_regs_print_info+0x12/0x12 [ 535.429000][T12711] ? load_image+0x3b0/0x3b0 [ 535.433541][T12711] ? sysfs_warn_dup+0x61/0xa0 [ 535.438274][T12711] sysfs_warn_dup+0x8a/0xa0 [ 535.442821][T12711] sysfs_do_create_link_sd+0xc0/0x110 [ 535.448228][T12711] device_add+0x7ed/0xfb0 [ 535.452599][T12711] wiphy_register+0x1e68/0x2bd0 [ 535.457511][T12711] ? cfg80211_event_work+0x40/0x40 [ 535.462658][T12711] ? minstrel_ht_alloc+0x894/0xa20 [ 535.467812][T12711] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 535.473915][T12711] ieee80211_register_hw+0x2c29/0x38c0 [ 535.479426][T12711] ? ieee80211_register_hw+0xee1/0x38c0 [ 535.485004][T12711] ? ieee80211_register_hw+0xee1/0x38c0 [ 535.490598][T12711] ? ieee80211_tasklet_handler+0x20/0x20 [ 535.496367][T12711] ? memset+0x1e/0x40 [ 535.500394][T12711] ? __hrtimer_init+0x186/0x270 [ 535.505269][T12711] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 535.511037][T12711] hwsim_new_radio_nl+0xafa/0xce0 [ 535.516103][T12711] genl_family_rcv_msg_doit+0x22e/0x320 [ 535.521678][T12711] ? end_current_label_crit_section+0x170/0x170 [ 535.527950][T12711] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 535.533891][T12711] ? bpf_lsm_capable+0x5/0x10 [ 535.538598][T12711] ? security_capable+0x85/0xb0 [ 535.543489][T12711] genl_rcv_msg+0x5f2/0x780 [ 535.548030][T12711] ? genl_bind+0x350/0x350 [ 535.552476][T12711] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 535.558858][T12711] netlink_rcv_skb+0x1de/0x420 [ 535.563653][T12711] ? genl_bind+0x350/0x350 [ 535.568127][T12711] ? netlink_ack+0x1100/0x1100 [ 535.572925][T12711] ? down_read+0x1a8/0x2d0 [ 535.577389][T12711] genl_rcv+0x24/0x40 [ 535.581388][T12711] netlink_unicast+0x74c/0x8c0 [ 535.586166][T12711] netlink_sendmsg+0x89e/0xbc0 [ 535.590937][T12711] ? netlink_getsockopt+0x540/0x540 [ 535.596138][T12711] ? aa_sock_msg_perm+0x94/0x150 [ 535.601073][T12711] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 535.606352][T12711] ? security_socket_sendmsg+0x7c/0xa0 [ 535.611813][T12711] ? netlink_getsockopt+0x540/0x540 [ 535.617011][T12711] ____sys_sendmsg+0x59b/0x970 [ 535.621779][T12711] ? rcu_is_watching+0x11/0xa0 [ 535.626547][T12711] ? __sys_sendmsg_sock+0x30/0x30 [ 535.631583][T12711] ? ___sys_sendmsg+0x202/0x290 [ 535.636444][T12711] ___sys_sendmsg+0x21c/0x290 [ 535.641122][T12711] ? __sys_sendmsg+0x270/0x270 [ 535.645921][T12711] ? __fdget+0x17c/0x200 [ 535.650170][T12711] __se_sys_sendmsg+0x19e/0x270 [ 535.655023][T12711] ? __x64_sys_sendmsg+0x80/0x80 [ 535.659977][T12711] ? syscall_enter_from_user_mode+0x2a/0x80 [ 535.665868][T12711] do_syscall_64+0x4c/0xa0 [ 535.670283][T12711] ? clear_bhb_loop+0x60/0xb0 [ 535.675050][T12711] ? clear_bhb_loop+0x60/0xb0 [ 535.679720][T12711] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 535.685625][T12711] RIP: 0033:0x7f038838e929 [ 535.690033][T12711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.709635][T12711] RSP: 002b:00007f038927b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.718056][T12711] RAX: ffffffffffffffda RBX: 00007f03885b5fa0 RCX: 00007f038838e929 [ 535.726019][T12711] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 535.734157][T12711] RBP: 00007f0388410b39 R08: 0000000000000000 R09: 0000000000000000 [ 535.742119][T12711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.750082][T12711] R13: 0000000000000000 R14: 00007f03885b5fa0 R15: 00007ffd61d78cf8 [ 535.758061][T12711] [ 535.804343][T12709] netlink: 'syz.1.3100': attribute type 29 has an invalid length. [ 536.813080][T12731] netlink: 67 bytes leftover after parsing attributes in process `syz.2.3097'. [ 536.998752][T12747] netlink: 'syz.4.3102': attribute type 10 has an invalid length. [ 537.063514][T12747] team0: Device ipvlan1 failed to register rx_handler [ 537.162164][T12750] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3103'. [ 537.202669][T12750] device caif0 entered promiscuous mode [ 537.238826][T12751] netlink: 'syz.3.3104': attribute type 10 has an invalid length. [ 537.257880][T12751] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 537.810674][T12758] netlink: 'syz.3.3107': attribute type 29 has an invalid length. [ 537.841372][T12758] netlink: 'syz.3.3107': attribute type 29 has an invalid length. [ 538.206651][T12774] netlink: 'syz.3.3110': attribute type 12 has an invalid length. [ 538.278205][T12774] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3110'. [ 538.420626][T12773] netlink: 'syz.1.3111': attribute type 29 has an invalid length. [ 538.439940][T12773] netlink: 'syz.1.3111': attribute type 29 has an invalid length. [ 538.863447][T12789] netlink: 'syz.1.3116': attribute type 10 has an invalid length. [ 538.875784][T12787] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3117'. [ 538.898055][T12789] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 539.260559][T12791] device syzkaller0 entered promiscuous mode [ 539.273882][T12795] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 539.330836][T12800] netlink: 188 bytes leftover after parsing attributes in process `syz.3.3119'. [ 541.824472][T12806] validate_nla: 4 callbacks suppressed [ 541.824484][T12806] netlink: 'syz.1.3120': attribute type 29 has an invalid length. [ 542.159870][T12829] netlink: 'syz.2.3132': attribute type 10 has an invalid length. [ 542.169504][T12829] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 542.722741][T12836] netlink: 'syz.2.3135': attribute type 29 has an invalid length. [ 542.786800][T12836] netlink: 'syz.2.3135': attribute type 29 has an invalid length. [ 542.975127][T12839] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3133'. [ 543.112913][T12846] netlink: 'syz.1.3139': attribute type 29 has an invalid length. [ 543.215996][T12846] netlink: 'syz.1.3139': attribute type 29 has an invalid length. [ 543.946230][T12862] device syzkaller0 entered promiscuous mode [ 544.008466][T12868] netlink: 'syz.4.3145': attribute type 10 has an invalid length. [ 544.069969][T12868] team0: Device ipvlan1 failed to register rx_handler [ 544.515338][T12874] netlink: 192156 bytes leftover after parsing attributes in process `syz.4.3148'. [ 544.556028][T12874] netlink: zone id is out of range [ 544.563003][T12874] netlink: zone id is out of range [ 546.213548][T12877] netlink: 'syz.4.3148': attribute type 12 has an invalid length. [ 546.221631][T12877] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3148'. [ 546.234270][T12885] netlink: 'syz.1.3152': attribute type 10 has an invalid length. [ 546.247524][T12885] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 546.728055][T12892] netlink: 67 bytes leftover after parsing attributes in process `syz.4.3157'. [ 547.072384][T12901] netlink: 'syz.2.3159': attribute type 29 has an invalid length. [ 547.095615][T12901] netlink: 'syz.2.3159': attribute type 29 has an invalid length. [ 547.512433][T12917] netlink: 'syz.2.3165': attribute type 10 has an invalid length. [ 547.554301][T12917] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 547.801280][T12920] device syzkaller0 entered promiscuous mode [ 547.833920][T12926] netlink: 'syz.3.3168': attribute type 29 has an invalid length. [ 547.856272][T12926] netlink: 'syz.3.3168': attribute type 29 has an invalid length. [ 548.081857][T12930] sock: sock_timestamping_bind_phc: sock not bind to device [ 550.092686][T12949] netlink: 'syz.1.3178': attribute type 10 has an invalid length. [ 550.110199][T12949] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 550.421223][T12951] netlink: 'syz.3.3179': attribute type 29 has an invalid length. [ 550.471312][T12951] netlink: 'syz.3.3179': attribute type 29 has an invalid length. [ 550.490665][T12961] sock: sock_timestamping_bind_phc: sock not bind to device [ 550.589043][T12964] netlink: 'syz.1.3183': attribute type 10 has an invalid length. [ 550.654800][T12964] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 551.283760][T12983] netlink: 'syz.4.3191': attribute type 10 has an invalid length. [ 551.316546][T12983] team0: Device ipvlan1 failed to register rx_handler [ 552.252983][T13007] validate_nla: 2 callbacks suppressed [ 552.253002][T13007] netlink: 'syz.1.3199': attribute type 12 has an invalid length. [ 552.282401][T13007] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3199'. [ 552.908271][T13030] netlink: 'syz.3.3208': attribute type 10 has an invalid length. [ 552.925036][T13030] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 553.621498][T13047] netlink: 'syz.4.3214': attribute type 29 has an invalid length. [ 553.646434][T13047] netlink: 'syz.4.3214': attribute type 29 has an invalid length. [ 553.809802][T13059] netlink: 'syz.3.3218': attribute type 10 has an invalid length. [ 553.839869][T13059] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 553.912769][T13063] netlink: 'syz.2.3217': attribute type 12 has an invalid length. [ 553.944130][T13063] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3217'. [ 554.346845][T13075] netlink: 'syz.2.3223': attribute type 10 has an invalid length. [ 554.384332][T13075] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 555.243580][T13100] netlink: 'syz.1.3232': attribute type 10 has an invalid length. [ 555.256219][T13098] netlink: 'syz.3.3231': attribute type 29 has an invalid length. [ 555.282923][T13100] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 555.353730][T13098] netlink: 'syz.3.3231': attribute type 29 has an invalid length. [ 555.861515][T13118] team0: Device ipvlan1 failed to register rx_handler [ 555.991156][T13119] netlink: 192156 bytes leftover after parsing attributes in process `syz.0.3236'. [ 556.062735][T13119] netlink: zone id is out of range [ 556.062961][T13116] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3236'. [ 556.081093][T13119] netlink: zone id is out of range [ 556.393325][T13132] netlink: 122896 bytes leftover after parsing attributes in process `syz.2.3243'. [ 556.461815][T13132] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 556.534401][T13132] CPU: 0 PID: 13132 Comm: syz.2.3243 Not tainted 6.1.142-syzkaller #0 [ 556.542622][T13132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 556.552705][T13132] Call Trace: [ 556.555992][T13132] [ 556.558932][T13132] dump_stack_lvl+0x168/0x22e [ 556.563629][T13132] ? show_regs_print_info+0x12/0x12 [ 556.568857][T13132] ? load_image+0x3b0/0x3b0 [ 556.573398][T13132] sysfs_warn_dup+0x8a/0xa0 [ 556.577946][T13132] sysfs_do_create_link_sd+0xc0/0x110 [ 556.583350][T13132] device_add+0x7ed/0xfb0 [ 556.587717][T13132] wiphy_register+0x1e68/0x2bd0 [ 556.592623][T13132] ? cfg80211_event_work+0x40/0x40 [ 556.597768][T13132] ? minstrel_ht_alloc+0x894/0xa20 [ 556.602903][T13132] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 556.608979][T13132] ieee80211_register_hw+0x2c29/0x38c0 [ 556.614498][T13132] ? ieee80211_register_hw+0xee1/0x38c0 [ 556.620070][T13132] ? ieee80211_register_hw+0xee1/0x38c0 [ 556.625642][T13132] ? ieee80211_tasklet_handler+0x20/0x20 [ 556.631308][T13132] ? memset+0x1e/0x40 [ 556.635315][T13132] ? __hrtimer_init+0x186/0x270 [ 556.640186][T13132] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 556.645940][T13132] hwsim_new_radio_nl+0xafa/0xce0 [ 556.651083][T13132] genl_family_rcv_msg_doit+0x22e/0x320 [ 556.656660][T13132] ? end_current_label_crit_section+0x170/0x170 [ 556.662926][T13132] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 556.668852][T13132] ? bpf_lsm_capable+0x5/0x10 [ 556.673549][T13132] ? security_capable+0x85/0xb0 [ 556.678428][T13132] genl_rcv_msg+0x5f2/0x780 [ 556.682968][T13132] ? genl_bind+0x350/0x350 [ 556.687401][T13132] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 556.693774][T13132] netlink_rcv_skb+0x1de/0x420 [ 556.698569][T13132] ? genl_bind+0x350/0x350 [ 556.703009][T13132] ? netlink_ack+0x1100/0x1100 [ 556.707811][T13132] ? down_read+0x1a8/0x2d0 [ 556.712249][T13132] genl_rcv+0x24/0x40 [ 556.716252][T13132] netlink_unicast+0x74c/0x8c0 [ 556.721056][T13132] netlink_sendmsg+0x89e/0xbc0 [ 556.725854][T13132] ? netlink_getsockopt+0x540/0x540 [ 556.731090][T13132] ? netlink_getsockopt+0x540/0x540 [ 556.736315][T13132] ____sys_sendmsg+0x59b/0x970 [ 556.741123][T13132] ? __sys_sendmsg_sock+0x30/0x30 [ 556.746181][T13132] ? __import_iovec+0x315/0x500 [ 556.751076][T13132] ? import_iovec+0x6f/0xa0 [ 556.755609][T13132] ___sys_sendmsg+0x21c/0x290 [ 556.760314][T13132] ? __sys_sendmsg+0x270/0x270 [ 556.765123][T13132] ? ktime_get_real_ts64+0x420/0x420 [ 556.770477][T13132] ? __fdget+0x17c/0x200 [ 556.774825][T13132] __se_sys_sendmsg+0x19e/0x270 [ 556.779694][T13132] ? ct_nmi_exit+0x145/0x1c0 [ 556.784291][T13132] ? __x64_sys_sendmsg+0x80/0x80 [ 556.789330][T13132] ? lockdep_hardirqs_on+0x94/0x140 [ 556.794527][T13132] do_syscall_64+0x4c/0xa0 [ 556.798946][T13132] ? clear_bhb_loop+0x60/0xb0 [ 556.803618][T13132] ? clear_bhb_loop+0x60/0xb0 [ 556.808289][T13132] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 556.814182][T13132] RIP: 0033:0x7fdccbf8e929 [ 556.818596][T13132] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.838202][T13132] RSP: 002b:00007fdcccdd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 556.846634][T13132] RAX: ffffffffffffffda RBX: 00007fdccc1b5fa0 RCX: 00007fdccbf8e929 [ 556.854612][T13132] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 556.862607][T13132] RBP: 00007fdccc010b39 R08: 0000000000000000 R09: 0000000000000000 [ 556.870683][T13132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.878649][T13132] R13: 0000000000000000 R14: 00007fdccc1b5fa0 R15: 00007ffde8a2c5f8 [ 556.886626][T13132] [ 557.310098][T13150] validate_nla: 2 callbacks suppressed [ 557.310137][T13150] netlink: 'syz.0.3248': attribute type 10 has an invalid length. [ 557.337298][T13146] netlink: 'syz.3.3247': attribute type 29 has an invalid length. [ 557.370192][T13150] team0: Device ipvlan1 failed to register rx_handler [ 557.457063][T13146] netlink: 'syz.3.3247': attribute type 29 has an invalid length. [ 558.341357][T13173] netlink: 'syz.2.3256': attribute type 10 has an invalid length. [ 558.389994][T13173] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 559.128834][T13198] netlink: 'syz.1.3263': attribute type 10 has an invalid length. [ 559.167131][T13198] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 559.228983][T13196] netlink: 'syz.3.3262': attribute type 29 has an invalid length. [ 559.270788][T13196] netlink: 'syz.3.3262': attribute type 29 has an invalid length. [ 559.428973][T13204] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.3265'. [ 559.471315][T13204] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 559.510333][T13204] CPU: 0 PID: 13204 Comm: syz.0.3265 Not tainted 6.1.142-syzkaller #0 [ 559.518562][T13204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.528655][T13204] Call Trace: [ 559.531952][T13204] [ 559.534896][T13204] dump_stack_lvl+0x168/0x22e [ 559.539613][T13204] ? show_regs_print_info+0x12/0x12 [ 559.544848][T13204] ? load_image+0x3b0/0x3b0 [ 559.549392][T13204] sysfs_warn_dup+0x8a/0xa0 [ 559.553948][T13204] sysfs_do_create_link_sd+0xc0/0x110 [ 559.559356][T13204] device_add+0x7ed/0xfb0 [ 559.563741][T13204] wiphy_register+0x1e68/0x2bd0 [ 559.568650][T13204] ? cfg80211_event_work+0x40/0x40 [ 559.573892][T13204] ? minstrel_ht_alloc+0x894/0xa20 [ 559.579046][T13204] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 559.585153][T13204] ieee80211_register_hw+0x2c29/0x38c0 [ 559.590664][T13204] ? ieee80211_register_hw+0xee1/0x38c0 [ 559.596232][T13204] ? ieee80211_register_hw+0xee1/0x38c0 [ 559.601797][T13204] ? ieee80211_tasklet_handler+0x20/0x20 [ 559.607468][T13204] ? memset+0x1e/0x40 [ 559.611461][T13204] ? __hrtimer_init+0x186/0x270 [ 559.616320][T13204] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 559.622074][T13204] hwsim_new_radio_nl+0xafa/0xce0 [ 559.627172][T13204] genl_family_rcv_msg_doit+0x22e/0x320 [ 559.632724][T13204] ? end_current_label_crit_section+0x170/0x170 [ 559.638969][T13204] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 559.644867][T13204] ? bpf_lsm_capable+0x5/0x10 [ 559.649547][T13204] ? security_capable+0x85/0xb0 [ 559.654408][T13204] genl_rcv_msg+0x5f2/0x780 [ 559.658918][T13204] ? genl_bind+0x350/0x350 [ 559.663331][T13204] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 559.669667][T13204] netlink_rcv_skb+0x1de/0x420 [ 559.674440][T13204] ? genl_bind+0x350/0x350 [ 559.678857][T13204] ? netlink_ack+0x1100/0x1100 [ 559.683632][T13204] ? down_read+0x1a8/0x2d0 [ 559.688052][T13204] genl_rcv+0x24/0x40 [ 559.692035][T13204] netlink_unicast+0x74c/0x8c0 [ 559.696900][T13204] netlink_sendmsg+0x89e/0xbc0 [ 559.701674][T13204] ? netlink_getsockopt+0x540/0x540 [ 559.706880][T13204] ? aa_sock_msg_perm+0x94/0x150 [ 559.712513][T13204] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 559.717892][T13204] ? security_socket_sendmsg+0x7c/0xa0 [ 559.723349][T13204] ? netlink_getsockopt+0x540/0x540 [ 559.728564][T13204] ____sys_sendmsg+0x59b/0x970 [ 559.733343][T13204] ? __sys_sendmsg_sock+0x30/0x30 [ 559.738378][T13204] ? __import_iovec+0x315/0x500 [ 559.743232][T13204] ? import_iovec+0x6f/0xa0 [ 559.747737][T13204] ___sys_sendmsg+0x21c/0x290 [ 559.752422][T13204] ? __sys_sendmsg+0x270/0x270 [ 559.757220][T13204] ? __fdget+0x17c/0x200 [ 559.761467][T13204] __se_sys_sendmsg+0x19e/0x270 [ 559.766321][T13204] ? __x64_sys_sendmsg+0x80/0x80 [ 559.771280][T13204] ? syscall_enter_from_user_mode+0x2a/0x80 [ 559.777176][T13204] do_syscall_64+0x4c/0xa0 [ 559.781602][T13204] ? clear_bhb_loop+0x60/0xb0 [ 559.786725][T13204] ? clear_bhb_loop+0x60/0xb0 [ 559.791402][T13204] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 559.797328][T13204] RIP: 0033:0x7fcbc218e929 [ 559.801741][T13204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.821349][T13204] RSP: 002b:00007fcbc1fff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.829777][T13204] RAX: ffffffffffffffda RBX: 00007fcbc23b5fa0 RCX: 00007fcbc218e929 [ 559.837744][T13204] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 559.845728][T13204] RBP: 00007fcbc2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 559.853694][T13204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.861663][T13204] R13: 0000000000000000 R14: 00007fcbc23b5fa0 R15: 00007ffd4335c0b8 [ 559.869646][T13204] [ 559.989536][T13214] netlink: 'syz.3.3268': attribute type 10 has an invalid length. [ 560.023172][T13214] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 562.089129][T13247] netlink: 'syz.3.3278': attribute type 29 has an invalid length. [ 562.115448][T13247] netlink: 'syz.3.3278': attribute type 29 has an invalid length. [ 562.289294][T13255] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3281'. [ 562.408851][T13258] device syzkaller0 entered promiscuous mode [ 562.433774][T13255] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 562.452891][T13255] CPU: 0 PID: 13255 Comm: syz.1.3281 Not tainted 6.1.142-syzkaller #0 [ 562.461108][T13255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 562.471192][T13255] Call Trace: [ 562.474485][T13255] [ 562.477426][T13255] dump_stack_lvl+0x168/0x22e [ 562.482234][T13255] ? show_regs_print_info+0x12/0x12 [ 562.487471][T13255] ? load_image+0x3b0/0x3b0 [ 562.492109][T13255] sysfs_warn_dup+0x8a/0xa0 [ 562.496650][T13255] sysfs_do_create_link_sd+0xc0/0x110 [ 562.502055][T13255] device_add+0x7ed/0xfb0 [ 562.506429][T13255] wiphy_register+0x1e68/0x2bd0 [ 562.511318][T13255] ? cfg80211_event_work+0x40/0x40 [ 562.516454][T13255] ? minstrel_ht_alloc+0x894/0xa20 [ 562.521606][T13255] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 562.527809][T13255] ieee80211_register_hw+0x2c29/0x38c0 [ 562.533311][T13255] ? ieee80211_register_hw+0xee1/0x38c0 [ 562.538884][T13255] ? ieee80211_register_hw+0xee1/0x38c0 [ 562.544468][T13255] ? ieee80211_tasklet_handler+0x20/0x20 [ 562.550128][T13255] ? memset+0x1e/0x40 [ 562.554114][T13255] ? __hrtimer_init+0x186/0x270 [ 562.558975][T13255] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 562.564717][T13255] hwsim_new_radio_nl+0xafa/0xce0 [ 562.569799][T13255] genl_family_rcv_msg_doit+0x22e/0x320 [ 562.575371][T13255] ? end_current_label_crit_section+0x170/0x170 [ 562.581647][T13255] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 562.587571][T13255] ? bpf_lsm_capable+0x5/0x10 [ 562.592271][T13255] ? security_capable+0x85/0xb0 [ 562.597144][T13255] genl_rcv_msg+0x5f2/0x780 [ 562.601657][T13255] ? lockdep_hardirqs_on+0x94/0x140 [ 562.606869][T13255] ? genl_bind+0x350/0x350 [ 562.611289][T13255] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 562.617717][T13255] netlink_rcv_skb+0x1de/0x420 [ 562.622488][T13255] ? genl_bind+0x350/0x350 [ 562.626910][T13255] ? netlink_ack+0x1100/0x1100 [ 562.631685][T13255] ? down_read+0x1a8/0x2d0 [ 562.636103][T13255] genl_rcv+0x24/0x40 [ 562.640082][T13255] netlink_unicast+0x74c/0x8c0 [ 562.644924][T13255] netlink_sendmsg+0x89e/0xbc0 [ 562.649708][T13255] ? netlink_getsockopt+0x540/0x540 [ 562.654916][T13255] ? aa_sock_msg_perm+0x94/0x150 [ 562.659849][T13255] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 562.665132][T13255] ? security_socket_sendmsg+0x7c/0xa0 [ 562.670603][T13255] ? netlink_getsockopt+0x540/0x540 [ 562.675823][T13255] ____sys_sendmsg+0x59b/0x970 [ 562.680607][T13255] ? __sys_sendmsg_sock+0x30/0x30 [ 562.685632][T13255] ? __import_iovec+0x315/0x500 [ 562.690486][T13255] ? import_iovec+0x6f/0xa0 [ 562.694993][T13255] ___sys_sendmsg+0x21c/0x290 [ 562.699674][T13255] ? __sys_sendmsg+0x270/0x270 [ 562.704457][T13255] ? ktime_get_real_ts64+0x420/0x420 [ 562.709774][T13255] ? __fdget+0x17c/0x200 [ 562.714034][T13255] __se_sys_sendmsg+0x19e/0x270 [ 562.718907][T13255] ? ct_nmi_exit+0x145/0x1c0 [ 562.723520][T13255] ? __x64_sys_sendmsg+0x80/0x80 [ 562.728485][T13255] ? lockdep_hardirqs_on+0x94/0x140 [ 562.733688][T13255] do_syscall_64+0x4c/0xa0 [ 562.738141][T13255] ? clear_bhb_loop+0x60/0xb0 [ 562.742836][T13255] ? clear_bhb_loop+0x60/0xb0 [ 562.747576][T13255] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 562.753579][T13255] RIP: 0033:0x7f4c7b98e929 [ 562.757997][T13255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.777688][T13255] RSP: 002b:00007f4c7b7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 562.786101][T13255] RAX: ffffffffffffffda RBX: 00007f4c7bbb5fa0 RCX: 00007f4c7b98e929 [ 562.794067][T13255] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 562.802031][T13255] RBP: 00007f4c7ba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 562.809999][T13255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.817967][T13255] R13: 0000000000000000 R14: 00007f4c7bbb5fa0 R15: 00007ffff01e9a28 [ 562.825969][T13255] [ 562.886502][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.892917][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.034800][T13277] netlink: 'syz.4.3287': attribute type 10 has an invalid length. [ 565.048885][T13277] team0: Device ipvlan1 failed to register rx_handler [ 566.075672][T13290] netlink: 'syz.1.3292': attribute type 29 has an invalid length. [ 566.143607][T13290] netlink: 'syz.1.3292': attribute type 29 has an invalid length. [ 566.312763][T13301] IPv6: Can't replace route, no match found [ 566.758813][T13315] netlink: 'syz.2.3301': attribute type 10 has an invalid length. [ 566.774387][T13315] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 567.305818][T13335] netlink: 'syz.0.3308': attribute type 10 has an invalid length. [ 567.361503][T13335] team0: Device ipvlan1 failed to register rx_handler [ 568.494454][T13349] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3312'. [ 568.536284][T13366] netlink: 'syz.0.3314': attribute type 10 has an invalid length. [ 568.548035][T13366] team0: Device ipvlan1 failed to register rx_handler [ 570.218774][T13407] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.3329'. [ 570.236330][T13407] netlink: zone id is out of range [ 570.263231][T13405] netlink: 'syz.4.3330': attribute type 10 has an invalid length. [ 570.312783][T13405] team0: Device ipvlan1 failed to register rx_handler [ 570.324459][T13407] netlink: del zone limit has 4 unknown bytes [ 570.600480][T13414] netlink: 67 bytes leftover after parsing attributes in process `syz.3.3331'. [ 571.663793][T13448] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.3345'. [ 571.711904][T13448] netlink: zone id is out of range [ 571.726626][T13446] netlink: 'syz.1.3344': attribute type 29 has an invalid length. [ 571.765083][T13448] netlink: del zone limit has 4 unknown bytes [ 571.813590][T13446] netlink: 'syz.1.3344': attribute type 29 has an invalid length. [ 572.086299][T13460] IPv6: Can't replace route, no match found [ 572.093456][T13457] netlink: 'syz.0.3347': attribute type 10 has an invalid length. [ 572.142921][T13457] team0: Device ipvlan1 failed to register rx_handler [ 572.429836][T13468] netlink: 'syz.0.3352': attribute type 10 has an invalid length. [ 572.496538][T13468] team0: Device ipvlan1 failed to register rx_handler [ 572.621836][T13471] netlink: 67 bytes leftover after parsing attributes in process `syz.1.3353'. [ 573.113891][T13478] netlink: 'syz.0.3356': attribute type 29 has an invalid length. [ 573.149440][T13478] netlink: 'syz.0.3356': attribute type 29 has an invalid length. [ 573.942301][T13498] IPv6: Can't replace route, no match found [ 574.211483][T13505] netlink: 'syz.3.3363': attribute type 10 has an invalid length. [ 574.242347][T13505] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 574.506725][T13516] netlink: 'syz.3.3378': attribute type 10 has an invalid length. [ 574.539561][T13516] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 574.567602][T13518] netlink: 122896 bytes leftover after parsing attributes in process `syz.4.3365'. [ 574.648953][T13518] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 574.672121][T13518] CPU: 1 PID: 13518 Comm: syz.4.3365 Not tainted 6.1.142-syzkaller #0 [ 574.680320][T13518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 574.690394][T13518] Call Trace: [ 574.693703][T13518] [ 574.696646][T13518] dump_stack_lvl+0x168/0x22e [ 574.701355][T13518] ? show_regs_print_info+0x12/0x12 [ 574.706586][T13518] ? load_image+0x3b0/0x3b0 [ 574.711118][T13518] sysfs_warn_dup+0x8a/0xa0 [ 574.715643][T13518] sysfs_do_create_link_sd+0xc0/0x110 [ 574.721052][T13518] device_add+0x7ed/0xfb0 [ 574.725422][T13518] wiphy_register+0x1e68/0x2bd0 [ 574.730314][T13518] ? cfg80211_event_work+0x40/0x40 [ 574.735449][T13518] ? minstrel_ht_alloc+0x894/0xa20 [ 574.740591][T13518] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 574.746674][T13518] ieee80211_register_hw+0x2c29/0x38c0 [ 574.752165][T13518] ? ieee80211_register_hw+0xee1/0x38c0 [ 574.757716][T13518] ? ieee80211_register_hw+0xee1/0x38c0 [ 574.763295][T13518] ? ieee80211_tasklet_handler+0x20/0x20 [ 574.768962][T13518] ? memset+0x1e/0x40 [ 574.772969][T13518] ? __hrtimer_init+0x186/0x270 [ 574.777838][T13518] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 574.783572][T13518] hwsim_new_radio_nl+0xafa/0xce0 [ 574.788970][T13518] genl_family_rcv_msg_doit+0x22e/0x320 [ 574.794509][T13518] ? end_current_label_crit_section+0x170/0x170 [ 574.800946][T13518] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 574.806861][T13518] ? bpf_lsm_capable+0x5/0x10 [ 574.811564][T13518] ? security_capable+0x85/0xb0 [ 574.816448][T13518] genl_rcv_msg+0x5f2/0x780 [ 574.820984][T13518] ? genl_bind+0x350/0x350 [ 574.825411][T13518] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 574.831761][T13518] netlink_rcv_skb+0x1de/0x420 [ 574.836541][T13518] ? genl_bind+0x350/0x350 [ 574.840960][T13518] ? netlink_ack+0x1100/0x1100 [ 574.845733][T13518] ? down_read+0x1a8/0x2d0 [ 574.850151][T13518] genl_rcv+0x24/0x40 [ 574.854132][T13518] netlink_unicast+0x74c/0x8c0 [ 574.858904][T13518] netlink_sendmsg+0x89e/0xbc0 [ 574.863694][T13518] ? netlink_getsockopt+0x540/0x540 [ 574.868906][T13518] ? tomoyo_socket_sendmsg+0x12/0x30 [ 574.874286][T13518] ? aa_sock_msg_perm+0x94/0x150 [ 574.879311][T13518] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 574.884594][T13518] ? security_socket_sendmsg+0x7c/0xa0 [ 574.890056][T13518] ? netlink_getsockopt+0x540/0x540 [ 574.895253][T13518] ____sys_sendmsg+0x59b/0x970 [ 574.900023][T13518] ? __sys_sendmsg_sock+0x30/0x30 [ 574.905169][T13518] ? __import_iovec+0x315/0x500 [ 574.910031][T13518] ? import_iovec+0x6f/0xa0 [ 574.914539][T13518] ___sys_sendmsg+0x21c/0x290 [ 574.919217][T13518] ? __sys_sendmsg+0x270/0x270 [ 574.924016][T13518] ? __fdget+0x17c/0x200 [ 574.928268][T13518] __se_sys_sendmsg+0x19e/0x270 [ 574.933122][T13518] ? __x64_sys_sendmsg+0x80/0x80 [ 574.938059][T13518] ? lockdep_hardirqs_on+0x94/0x140 [ 574.943267][T13518] ? __x64_sys_sendmsg+0x19/0x80 [ 574.948216][T13518] ? __sanitizer_cov_trace_pc+0x37/0x60 [ 574.953756][T13518] do_syscall_64+0x4c/0xa0 [ 574.958171][T13518] ? clear_bhb_loop+0x60/0xb0 [ 574.962839][T13518] ? clear_bhb_loop+0x60/0xb0 [ 574.967509][T13518] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 574.973397][T13518] RIP: 0033:0x7f79c678e929 [ 574.977807][T13518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.997407][T13518] RSP: 002b:00007f79c7668038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.005830][T13518] RAX: ffffffffffffffda RBX: 00007f79c69b5fa0 RCX: 00007f79c678e929 [ 575.013795][T13518] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 575.021757][T13518] RBP: 00007f79c6810b39 R08: 0000000000000000 R09: 0000000000000000 [ 575.029719][T13518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.037689][T13518] R13: 0000000000000000 R14: 00007f79c69b5fa0 R15: 00007ffe8166cad8 [ 575.045665][T13518] [ 575.843850][T13541] netlink: 'syz.0.3371': attribute type 29 has an invalid length. [ 575.898096][T13541] netlink: 'syz.0.3371': attribute type 29 has an invalid length. [ 576.339789][T13554] netlink: 'syz.0.3389': attribute type 10 has an invalid length. [ 576.357463][T13554] team0: Device ipvlan1 failed to register rx_handler [ 576.439210][T13557] IPv6: Can't replace route, no match found [ 576.905125][T13561] netlink: 'syz.0.3381': attribute type 29 has an invalid length. [ 576.999858][T13566] device syzkaller0 entered promiscuous mode [ 577.033426][T13561] netlink: 'syz.0.3381': attribute type 29 has an invalid length. [ 579.881566][T13596] netlink: 'syz.2.3393': attribute type 10 has an invalid length. [ 579.919065][T13596] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 580.979510][T13610] IPv6: Can't replace route, no match found [ 581.105734][T13604] netlink: 'syz.4.3398': attribute type 29 has an invalid length. [ 581.333771][T13608] device syzkaller0 entered promiscuous mode [ 581.384614][T13604] netlink: 'syz.4.3398': attribute type 29 has an invalid length. [ 582.004751][T13636] netlink: 122896 bytes leftover after parsing attributes in process `syz.1.3406'. [ 583.497004][T13636] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 583.518206][T13636] CPU: 0 PID: 13636 Comm: syz.1.3406 Not tainted 6.1.142-syzkaller #0 [ 583.526419][T13636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 583.536577][T13636] Call Trace: [ 583.539873][T13636] [ 583.542817][T13636] dump_stack_lvl+0x168/0x22e [ 583.547539][T13636] ? show_regs_print_info+0x12/0x12 [ 583.552768][T13636] ? load_image+0x3b0/0x3b0 [ 583.557312][T13636] sysfs_warn_dup+0x8a/0xa0 [ 583.561847][T13636] sysfs_do_create_link_sd+0xc0/0x110 [ 583.567248][T13636] device_add+0x7ed/0xfb0 [ 583.571632][T13636] wiphy_register+0x1e68/0x2bd0 [ 583.576623][T13636] ? cfg80211_event_work+0x40/0x40 [ 583.581769][T13636] ? minstrel_ht_alloc+0x894/0xa20 [ 583.586920][T13636] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 583.593021][T13636] ieee80211_register_hw+0x2c29/0x38c0 [ 583.598526][T13636] ? ieee80211_register_hw+0xee1/0x38c0 [ 583.604094][T13636] ? ieee80211_register_hw+0xee1/0x38c0 [ 583.609687][T13636] ? ieee80211_tasklet_handler+0x20/0x20 [ 583.615371][T13636] ? memset+0x1e/0x40 [ 583.619374][T13636] ? __hrtimer_init+0x186/0x270 [ 583.624247][T13636] mac80211_hwsim_new_radio+0x28c2/0x4c40 [ 583.630001][T13636] hwsim_new_radio_nl+0xafa/0xce0 [ 583.635070][T13636] genl_family_rcv_msg_doit+0x22e/0x320 [ 583.640642][T13636] ? end_current_label_crit_section+0x170/0x170 [ 583.646912][T13636] ? genl_family_rcv_msg_dumpit+0x340/0x340 [ 583.652832][T13636] ? bpf_lsm_capable+0x5/0x10 [ 583.657534][T13636] ? security_capable+0x85/0xb0 [ 583.662398][T13636] genl_rcv_msg+0x5f2/0x780 [ 583.666917][T13636] ? genl_bind+0x350/0x350 [ 583.671336][T13636] ? hwsim_tx_info_frame_received_nl+0xfb0/0xfb0 [ 583.677678][T13636] netlink_rcv_skb+0x1de/0x420 [ 583.682443][T13636] ? genl_bind+0x350/0x350 [ 583.686856][T13636] ? netlink_ack+0x1100/0x1100 [ 583.691628][T13636] ? down_read+0x1a8/0x2d0 [ 583.696040][T13636] genl_rcv+0x24/0x40 [ 583.700023][T13636] netlink_unicast+0x74c/0x8c0 [ 583.704842][T13636] netlink_sendmsg+0x89e/0xbc0 [ 583.709615][T13636] ? netlink_getsockopt+0x540/0x540 [ 583.714816][T13636] ? aa_sock_msg_perm+0x94/0x150 [ 583.719765][T13636] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 583.725051][T13636] ? security_socket_sendmsg+0x7c/0xa0 [ 583.730502][T13636] ? netlink_getsockopt+0x540/0x540 [ 583.735716][T13636] ____sys_sendmsg+0x59b/0x970 [ 583.740510][T13636] ? __sys_sendmsg_sock+0x30/0x30 [ 583.745552][T13636] ? __import_iovec+0x315/0x500 [ 583.750417][T13636] ? import_iovec+0x6f/0xa0 [ 583.754918][T13636] ___sys_sendmsg+0x21c/0x290 [ 583.759599][T13636] ? __sys_sendmsg+0x270/0x270 [ 583.764376][T13636] ? ktime_get_real_ts64+0x420/0x420 [ 583.769674][T13636] ? __fdget+0x17c/0x200 [ 583.773919][T13636] __se_sys_sendmsg+0x19e/0x270 [ 583.778769][T13636] ? ct_nmi_exit+0x145/0x1c0 [ 583.783380][T13636] ? __x64_sys_sendmsg+0x80/0x80 [ 583.788329][T13636] ? lockdep_hardirqs_on+0x94/0x140 [ 583.793527][T13636] do_syscall_64+0x4c/0xa0 [ 583.797940][T13636] ? clear_bhb_loop+0x60/0xb0 [ 583.802608][T13636] ? clear_bhb_loop+0x60/0xb0 [ 583.807284][T13636] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 583.813175][T13636] RIP: 0033:0x7f4c7b98e929 [ 583.817581][T13636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.837179][T13636] RSP: 002b:00007f4c7b7ff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 583.845587][T13636] RAX: ffffffffffffffda RBX: 00007f4c7bbb5fa0 RCX: 00007f4c7b98e929 [ 583.853552][T13636] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 583.861604][T13636] RBP: 00007f4c7ba10b39 R08: 0000000000000000 R09: 0000000000000000 [ 583.869567][T13636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.877542][T13636] R13: 0000000000000000 R14: 00007f4c7bbb5fa0 R15: 00007ffff01e9a28 [ 583.885541][T13636] [ 584.255100][T13644] device syzkaller0 entered promiscuous mode [ 584.406449][T13654] netlink: 'syz.4.3412': attribute type 29 has an invalid length. [ 584.533380][T13658] netlink: 'syz.1.3413': attribute type 29 has an invalid length. [ 586.112153][T13654] netlink: 'syz.4.3412': attribute type 29 has an invalid length. [ 586.120373][T13658] netlink: 'syz.1.3413': attribute type 29 has an invalid length. [ 586.133154][T13662] netlink: 'syz.3.3414': attribute type 10 has an invalid length. [ 586.149811][T13662] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 586.300025][T13664] netlink: 'syz.4.3417': attribute type 10 has an invalid length. [ 586.328715][T13664] team0: Device ipvlan1 failed to register rx_handler [ 586.749646][T13679] netlink: 'syz.4.3423': attribute type 9 has an invalid length. [ 586.979434][T13690] netlink: 'syz.1.3424': attribute type 29 has an invalid length. [ 587.004643][T13690] netlink: 'syz.1.3424': attribute type 29 has an invalid length. [ 587.136372][T13686] netlink: 'syz.4.3427': attribute type 29 has an invalid length. [ 587.163651][T13686] netlink: 'syz.4.3427': attribute type 29 has an invalid length. [ 587.168944][T13688] netlink: 'syz.0.3426': attribute type 29 has an invalid length. [ 587.206649][T13688] netlink: 'syz.0.3426': attribute type 29 has an invalid length. [ 587.401635][T13700] device syzkaller0 entered promiscuous mode [ 587.413725][T13702] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 590.121419][T13737] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 591.471121][T13762] device syzkaller0 entered promiscuous mode [ 591.593713][T13768] validate_nla: 4 callbacks suppressed [ 591.593749][T13768] netlink: 'syz.4.3454': attribute type 29 has an invalid length. [ 593.418698][T13768] netlink: 'syz.4.3454': attribute type 29 has an invalid length. [ 593.427381][T13776] netlink: 'syz.1.3457': attribute type 10 has an invalid length. [ 593.437053][T13776] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 593.558759][T13782] netlink: 'syz.4.3460': attribute type 10 has an invalid length. [ 593.588546][T13782] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3460'. [ 593.602928][T13782] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 593.612475][T13782] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 593.641261][T13782] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 593.694958][T13786] netlink: 'syz.0.3461': attribute type 10 has an invalid length. [ 593.703347][T13785] netlink: 'syz.1.3462': attribute type 10 has an invalid length. [ 593.715284][T13785] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 594.000873][T13793] netlink: 'syz.4.3464': attribute type 29 has an invalid length. [ 594.040913][T13793] netlink: 'syz.4.3464': attribute type 29 has an invalid length. [ 594.474942][T13813] netlink: 'syz.4.3471': attribute type 29 has an invalid length. [ 594.503402][T13813] netlink: 'syz.4.3471': attribute type 29 has an invalid length. [ 594.700780][T13820] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 595.133140][T13830] team0: Device ipvlan1 failed to register rx_handler [ 596.302719][T13872] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 596.418666][T13874] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 597.331478][T13900] validate_nla: 9 callbacks suppressed [ 597.331513][T13900] netlink: 'syz.0.3503': attribute type 29 has an invalid length. [ 597.378752][T13900] netlink: 'syz.0.3503': attribute type 29 has an invalid length. [ 597.452932][T13908] netlink: 'syz.1.3505': attribute type 10 has an invalid length. [ 597.488328][T13908] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 597.605961][T13919] netlink: 'syz.3.3507': attribute type 10 has an invalid length. [ 597.614756][T13919] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 597.910160][T13918] netlink: 'syz.0.3509': attribute type 29 has an invalid length. [ 597.968283][T13918] netlink: 'syz.0.3509': attribute type 29 has an invalid length. [ 599.105560][T13949] netlink: 'syz.0.3518': attribute type 10 has an invalid length. [ 599.113592][T13949] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3518'. [ 599.182359][T13949] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 599.198367][T13949] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 599.269214][T13949] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 599.435241][T13957] netlink: 'syz.4.3521': attribute type 10 has an invalid length. [ 599.452475][T13953] netlink: 'syz.3.3520': attribute type 29 has an invalid length. [ 599.475857][T13957] team0: Device ipvlan1 failed to register rx_handler [ 599.577503][T13953] netlink: 'syz.3.3520': attribute type 29 has an invalid length. [ 600.301053][T13978] team0: Device ipvlan1 failed to register rx_handler [ 601.755057][T14016] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 602.608042][T14039] validate_nla: 14 callbacks suppressed [ 602.608080][T14039] netlink: 'syz.2.3562': attribute type 29 has an invalid length. [ 602.663129][T14039] netlink: 'syz.2.3562': attribute type 29 has an invalid length. [ 602.674496][T14042] netlink: 'syz.0.3561': attribute type 29 has an invalid length. [ 602.691532][T14042] netlink: 'syz.0.3561': attribute type 29 has an invalid length. [ 603.528892][T14059] netlink: 'syz.3.3554': attribute type 10 has an invalid length. [ 603.554596][T14059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3554'. [ 603.576500][T14059] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 603.593714][T14059] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 603.652195][T14059] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 603.972284][T14076] netlink: 'syz.2.3560': attribute type 10 has an invalid length. [ 604.021416][T14076] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 604.457980][T14086] netlink: 'syz.2.3567': attribute type 29 has an invalid length. [ 604.558160][T14086] netlink: 'syz.2.3567': attribute type 29 has an invalid length. [ 604.798273][T14090] netlink: 'syz.2.3569': attribute type 29 has an invalid length. [ 604.860960][T14090] netlink: 'syz.2.3569': attribute type 29 has an invalid length. [ 605.808572][T14118] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 606.753862][T14145] device team0 left promiscuous mode [ 606.763141][T14145] device team_slave_0 left promiscuous mode [ 606.778336][T14145] device team_slave_1 left promiscuous mode [ 606.791928][T14145] device geneve1 left promiscuous mode [ 606.802734][T14145] device macvlan0 left promiscuous mode [ 606.832116][T14145] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.860385][T14145] bond0: (slave team0): Enslaving as an active interface with an up link [ 607.238710][T14158] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3593'. [ 607.252294][T14158] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 607.545832][T14161] team0: Device ipvlan1 failed to register rx_handler [ 608.305757][T14170] validate_nla: 10 callbacks suppressed [ 608.305802][T14170] netlink: 'syz.3.3598': attribute type 29 has an invalid length. [ 608.418544][T14170] netlink: 'syz.3.3598': attribute type 29 has an invalid length. [ 608.548161][T14176] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 608.580208][T14184] netlink: 'syz.1.3605': attribute type 10 has an invalid length. [ 608.623796][T14184] device hsr0 left promiscuous mode [ 608.689610][T14184] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 608.708366][T14176] netlink: 'syz.0.3599': attribute type 29 has an invalid length. [ 608.910125][T14196] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3609'. [ 608.994577][T14198] netlink: 'syz.1.3607': attribute type 10 has an invalid length. [ 609.014186][T14198] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3607'. [ 609.061601][T14198] batman_adv: batadv0: Adding interface: hsr_slave_1 [ 609.088546][T14198] batman_adv: batadv0: The MTU of interface hsr_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 609.147676][T14198] batman_adv: batadv0: Interface activated: hsr_slave_1 [ 609.192731][T14200] netlink: 'syz.0.3610': attribute type 10 has an invalid length. [ 609.227990][T14200] team0: Device ipvlan1 failed to register rx_handler [ 611.684824][T14228] netlink: 'syz.4.3622': attribute type 10 has an invalid length. [ 611.696626][T14228] team0: Device ipvlan1 failed to register rx_handler [ 611.706291][T14230] netlink: 'syz.2.3621': attribute type 10 has an invalid length. [ 611.738080][T14230] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 611.907452][T14233] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3624'. [ 611.971706][T14238] netlink: 'syz.3.3626': attribute type 10 has an invalid length. [ 611.991203][T14238] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3626'. [ 612.189076][T14242] team0: Device ipvlan1 failed to register rx_handler [ 613.521292][T14282] validate_nla: 4 callbacks suppressed [ 613.521333][T14282] netlink: 'syz.0.3642': attribute type 10 has an invalid length. [ 613.549385][T14282] team0: Device ipvlan1 failed to register rx_handler [ 613.981152][T14292] netlink: 'syz.2.3647': attribute type 29 has an invalid length. [ 615.628606][T14292] netlink: 'syz.2.3647': attribute type 29 has an invalid length. [ 616.046918][T14303] netlink: 'syz.4.3651': attribute type 39 has an invalid length. [ 616.096655][T14305] netlink: 'syz.2.3652': attribute type 10 has an invalid length. [ 616.105809][T14305] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 616.240014][T14308] netlink: 'syz.0.3653': attribute type 10 has an invalid length. [ 616.267554][T14308] device hsr0 left promiscuous mode [ 616.307794][T14308] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 617.267396][T14335] netlink: 'syz.2.3664': attribute type 39 has an invalid length. [ 617.467353][T14341] netlink: 'syz.4.3666': attribute type 29 has an invalid length. [ 617.513469][T14341] netlink: 'syz.4.3666': attribute type 29 has an invalid length. [ 618.995207][T14388] netlink: 'syz.2.3682': attribute type 29 has an invalid length. [ 619.034809][T14388] netlink: 'syz.2.3682': attribute type 29 has an invalid length. [ 619.323783][T14403] netlink: 'syz.1.3684': attribute type 39 has an invalid length. [ 620.281070][T14432] netlink: 'syz.1.3699': attribute type 29 has an invalid length. [ 620.356509][T14432] netlink: 'syz.1.3699': attribute type 29 has an invalid length. [ 620.899413][T14455] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 620.933049][T14455] device hsr0 left promiscuous mode [ 620.955477][T14453] netlink: 'syz.0.3713': attribute type 29 has an invalid length. [ 621.001515][T14455] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 621.044338][T14453] netlink: 'syz.0.3713': attribute type 29 has an invalid length. [ 622.152979][T14492] netlink: 'syz.2.3722': attribute type 10 has an invalid length. [ 622.174725][T14492] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 622.250720][T14499] netlink: 'syz.0.3723': attribute type 10 has an invalid length. [ 622.292321][T14499] team0: Device ipvlan1 failed to register rx_handler [ 623.703787][T14545] team0: Device ipvlan1 failed to register rx_handler [ 623.934747][T14549] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 624.238278][T14558] validate_nla: 5 callbacks suppressed [ 624.238318][T14558] netlink: 'syz.1.3754': attribute type 10 has an invalid length. [ 624.262503][T14558] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 624.312554][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.318992][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.638599][T14595] netlink: 'syz.2.3759': attribute type 10 has an invalid length. [ 625.665350][T14595] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 626.733191][T14635] netlink: 'syz.1.3772': attribute type 39 has an invalid length. [ 626.831856][T14640] netlink: 'syz.3.3773': attribute type 10 has an invalid length. [ 626.894339][T14640] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 628.335265][T14680] netlink: 'syz.2.3787': attribute type 29 has an invalid length. [ 628.400022][T14680] netlink: 'syz.2.3787': attribute type 29 has an invalid length. [ 628.519939][T14689] netlink: 'syz.1.3789': attribute type 10 has an invalid length. [ 628.533356][T14689] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 629.922812][T14725] netlink: 'syz.0.3805': attribute type 10 has an invalid length. [ 629.972831][T14725] team0: Device ipvlan1 failed to register rx_handler [ 631.165210][T14752] netlink: 'syz.0.3813': attribute type 10 has an invalid length. [ 631.213113][T14752] team0: Device ipvlan1 failed to register rx_handler [ 631.446968][T14758] delete_channel: no stack [ 631.451771][T14758] delete_channel: no stack [ 631.816745][T14765] netlink: 'syz.3.3818': attribute type 39 has an invalid length. [ 633.743350][T14808] netlink: 'syz.2.3833': attribute type 29 has an invalid length. [ 633.820582][T14808] netlink: 'syz.2.3833': attribute type 29 has an invalid length. [ 634.394821][T14821] delete_channel: no stack [ 634.422711][T14821] delete_channel: no stack [ 634.723398][T14835] netlink: 'syz.1.3842': attribute type 10 has an invalid length. [ 634.750252][T14835] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 635.933953][T14860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 635.941674][T14860] IPv6: NLM_F_CREATE should be set when creating new route [ 635.949080][T14860] IPv6: NLM_F_CREATE should be set when creating new route [ 636.473039][T14875] netlink: 'syz.4.3856': attribute type 10 has an invalid length. [ 636.546674][T14875] team0: Device ipvlan1 failed to register rx_handler [ 638.262076][T14924] netlink: 'syz.4.3873': attribute type 10 has an invalid length. [ 638.315641][T14924] team0: Device ipvlan1 failed to register rx_handler [ 639.416771][T14953] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 639.424550][T14953] IPv6: NLM_F_CREATE should be set when creating new route [ 639.432527][T14953] IPv6: NLM_F_CREATE should be set when creating new route [ 641.097238][T15005] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 641.104814][T15005] IPv6: NLM_F_CREATE should be set when creating new route [ 641.112556][T15005] IPv6: NLM_F_CREATE should be set when creating new route [ 643.277994][T15049] netlink: 'syz.1.3913': attribute type 10 has an invalid length. [ 643.301171][T15049] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 644.904713][T15086] netlink: 'syz.3.3927': attribute type 10 has an invalid length. [ 644.984756][T15086] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 646.451047][T15133] netlink: 'syz.3.3943': attribute type 10 has an invalid length. [ 646.473667][T15133] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 646.949429][T15147] netlink: 'syz.4.3948': attribute type 10 has an invalid length. [ 647.013824][T15147] team0: Device ipvlan1 failed to register rx_handler [ 648.528061][T15185] netlink: 'syz.4.3960': attribute type 10 has an invalid length. [ 648.579915][T15185] team0: Device ipvlan1 failed to register rx_handler [ 650.522172][T15258] netlink: 'syz.0.3984': attribute type 10 has an invalid length. [ 650.586123][T15258] team0: Device ipvlan1 failed to register rx_handler [ 651.863988][T15298] netlink: 'syz.1.3999': attribute type 10 has an invalid length. [ 651.889645][T15298] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 653.375236][T15344] netlink: 'syz.1.4014': attribute type 10 has an invalid length. [ 653.389793][T15344] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 654.528747][T15383] netlink: 'syz.1.4028': attribute type 10 has an invalid length. [ 654.553198][T15383] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 655.711844][T15420] netlink: 'syz.2.4041': attribute type 10 has an invalid length. [ 655.735100][T15420] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 657.048908][T15459] netlink: 'syz.1.4054': attribute type 10 has an invalid length. [ 657.057423][T15459] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 657.199469][T15463] netlink: 'syz.3.4056': attribute type 10 has an invalid length. [ 657.231215][T15463] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 659.189746][T15526] netlink: 'syz.2.4079': attribute type 10 has an invalid length. [ 659.200873][T15526] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 660.700678][T15564] netlink: 'syz.4.4092': attribute type 10 has an invalid length. [ 660.733533][T15564] team0: Device ipvlan1 failed to register rx_handler [ 661.279052][T15581] netlink: 'syz.1.4099': attribute type 10 has an invalid length. [ 661.294284][T15581] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 662.297093][T15610] netlink: 'syz.0.4109': attribute type 10 has an invalid length. [ 662.336127][T15610] team0: Device ipvlan1 failed to register rx_handler [ 666.556392][T15734] netlink: 'syz.1.4151': attribute type 10 has an invalid length. [ 666.616200][T15734] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 667.702135][T15767] netlink: 'syz.2.4163': attribute type 10 has an invalid length. [ 667.729614][T15767] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 669.177822][T15813] netlink: 'syz.1.4179': attribute type 10 has an invalid length. [ 669.195252][T15813] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 669.274530][T15817] netlink: 'syz.3.4180': attribute type 10 has an invalid length. [ 669.282632][T15817] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 670.602433][T15859] netlink: 'syz.3.4195': attribute type 10 has an invalid length. [ 670.621634][T15859] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 672.280816][T15910] netlink: 'syz.1.4210': attribute type 10 has an invalid length. [ 672.304808][T15910] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 673.535597][T15952] netlink: 'syz.0.4227': attribute type 10 has an invalid length. [ 673.574955][T15952] team0: Device ipvlan1 failed to register rx_handler [ 674.356481][T15980] netlink: 'syz.2.4238': attribute type 10 has an invalid length. [ 674.374279][T15980] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 674.745565][T15995] netlink: 'syz.2.4244': attribute type 10 has an invalid length. [ 674.764365][T15995] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 675.633008][T16022] netlink: 'syz.1.4254': attribute type 10 has an invalid length. [ 675.662895][T16022] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 677.356875][T16063] netlink: 'syz.0.4269': attribute type 10 has an invalid length. [ 677.375396][T16063] team0: Device ipvlan1 failed to register rx_handler [ 679.388865][T16119] netlink: 'syz.3.4286': attribute type 10 has an invalid length. [ 679.407629][T16119] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 681.270906][T16155] netlink: 'syz.4.4300': attribute type 10 has an invalid length. [ 681.295575][T16155] team0: Device ipvlan1 failed to register rx_handler [ 681.340200][T16157] netlink: 'syz.3.4301': attribute type 10 has an invalid length. [ 681.349114][T16157] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 682.742022][T16187] device syzkaller0 entered promiscuous mode [ 684.581720][T16193] netlink: 'syz.4.4314': attribute type 10 has an invalid length. [ 684.596755][T16193] team0: Device ipvlan1 failed to register rx_handler [ 684.943055][T16205] IPv6: NLM_F_CREATE should be specified when creating new route [ 684.989916][T16205] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4319'. [ 685.745889][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.752226][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.754711][T16229] device wlan0 entered promiscuous mode [ 687.753223][T16293] netlink: 'syz.0.4349': attribute type 10 has an invalid length. [ 687.804584][T16293] team0: Device ipvlan1 failed to register rx_handler [ 689.574930][T16334] netlink: 'syz.0.4363': attribute type 10 has an invalid length. [ 689.600137][T16334] team0: Device ipvlan1 failed to register rx_handler [ 691.130597][T16367] netlink: 'syz.2.4375': attribute type 10 has an invalid length. [ 691.149283][T16367] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 691.336454][T16372] netlink: 'syz.0.4376': attribute type 10 has an invalid length. [ 691.403674][T16372] team0: Device ipvlan1 failed to register rx_handler [ 691.538383][T16378] IPv6: NLM_F_CREATE should be specified when creating new route [ 691.625327][T16378] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4379'. [ 691.872825][T16382] device wlan0 entered promiscuous mode [ 692.795687][T16414] netlink: 'syz.2.4391': attribute type 10 has an invalid length. [ 692.811857][T16414] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 693.838598][T16436] IPv6: NLM_F_CREATE should be specified when creating new route [ 693.847028][T16436] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4398'. [ 694.079107][T16441] device wlan0 entered promiscuous mode [ 695.165261][T16467] netlink: 'syz.4.4408': attribute type 10 has an invalid length. [ 695.194769][T16467] team0: Device ipvlan1 failed to register rx_handler [ 695.848879][T16489] netlink: 'syz.0.4425': attribute type 10 has an invalid length. [ 695.953421][T16489] team0: Device ipvlan1 failed to register rx_handler [ 696.327423][T16506] netlink: 'syz.0.4421': attribute type 10 has an invalid length. [ 696.352258][T16506] team0: Device ipvlan1 failed to register rx_handler [ 697.326462][T16540] netlink: 'syz.1.4433': attribute type 10 has an invalid length. [ 697.356021][T16540] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 697.468943][T16544] netlink: 'syz.3.4437': attribute type 10 has an invalid length. [ 697.497254][T16544] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 697.691674][T16556] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4440'. [ 697.914369][T16561] IPv6: NLM_F_CREATE should be specified when creating new route [ 697.948314][T16561] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4443'. [ 698.900000][T16593] netlink: 'syz.1.4454': attribute type 10 has an invalid length. [ 698.913492][T16593] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 698.994759][T16601] IPv6: NLM_F_CREATE should be specified when creating new route [ 699.041311][T16601] netlink: 1 bytes leftover after parsing attributes in process `syz.0.4456'. [ 699.453558][T16620] netlink: 'syz.0.4466': attribute type 10 has an invalid length. [ 699.476168][T16620] team0: Device ipvlan1 failed to register rx_handler [ 699.709471][T16627] netlink: 'syz.3.4470': attribute type 10 has an invalid length. [ 699.735169][T16627] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 700.069034][T16645] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4476'. [ 700.738148][T16671] netlink: 'syz.3.4486': attribute type 10 has an invalid length. [ 700.747481][T16671] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 701.321857][T16693] netlink: 1 bytes leftover after parsing attributes in process `syz.1.4494'. [ 701.566194][T16702] netlink: 766 bytes leftover after parsing attributes in process `syz.4.4497'. [ 701.605139][T16702] device bond_slave_0 entered promiscuous mode [ 701.611418][T16702] device bond_slave_1 entered promiscuous mode [ 701.617694][T16702] device wlan1 entered promiscuous mode [ 701.695774][T16705] netlink: 'syz.0.4500': attribute type 10 has an invalid length. [ 701.727549][T16705] team0: Device ipvlan1 failed to register rx_handler [ 701.779210][T16707] netlink: 'syz.1.4499': attribute type 10 has an invalid length. [ 701.807680][T16707] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 702.910969][T16750] netlink: 'syz.3.4515': attribute type 10 has an invalid length. [ 702.954179][T16750] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 703.208895][T16760] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4518'. [ 704.120590][T16798] netlink: 'syz.2.4532': attribute type 10 has an invalid length. [ 704.145373][T16798] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 705.345422][T16836] netlink: 766 bytes leftover after parsing attributes in process `syz.0.4547'. [ 705.394273][T16836] device bond_slave_0 entered promiscuous mode [ 705.400843][T16836] device bond_slave_1 entered promiscuous mode [ 705.407083][T16836] device wlan1 entered promiscuous mode [ 705.413075][T16836] device team_slave_0 entered promiscuous mode [ 705.419597][T16836] device team_slave_1 entered promiscuous mode [ 705.425848][T16836] device geneve1 entered promiscuous mode [ 705.620174][T16842] netlink: 'syz.2.4552': attribute type 10 has an invalid length. [ 706.604066][T16874] netlink: 'syz.0.4564': attribute type 10 has an invalid length. [ 706.627965][ T6951] tipc: Subscription rejected, illegal request [ 706.643235][T16874] team0: Device ipvlan1 failed to register rx_handler [ 707.401341][T16898] netlink: 766 bytes leftover after parsing attributes in process `syz.2.4574'. [ 707.649077][T16902] netlink: 'syz.3.4580': attribute type 10 has an invalid length. [ 707.737284][T16902] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 708.870488][T16939] netlink: 'syz.2.4595': attribute type 10 has an invalid length. [ 708.899567][T16939] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 709.358061][T16947] netlink: 'syz.2.4608': attribute type 10 has an invalid length. [ 709.388832][T16947] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 709.820383][T16958] netlink: 'syz.1.4602': attribute type 10 has an invalid length. [ 710.005239][T16965] netlink: 188 bytes leftover after parsing attributes in process `syz.0.4600'. [ 711.053390][T16983] netlink: 'syz.4.4613': attribute type 10 has an invalid length. [ 711.072430][T16983] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4613'. [ 712.426398][T16983] team0: Port device macvlan0 removed [ 712.714343][T17008] netlink: 188 bytes leftover after parsing attributes in process `syz.3.4621'. [ 714.052305][T17030] delete_channel: no stack [ 714.256820][T17039] netlink: 'syz.0.4636': attribute type 1 has an invalid length. [ 714.752770][T17055] netlink: 188 bytes leftover after parsing attributes in process `syz.4.4643'. [ 716.332379][T17074] delete_channel: no stack [ 716.427887][T17077] netlink: 'syz.2.4652': attribute type 1 has an invalid length. [ 716.614850][T17089] netlink: 'syz.1.4659': attribute type 29 has an invalid length. [ 716.623339][T17089] netlink: 'syz.1.4659': attribute type 29 has an invalid length. [ 716.641759][T17089] netlink: 'syz.1.4659': attribute type 29 has an invalid length. [ 717.097788][T17108] netlink: 188 bytes leftover after parsing attributes in process `syz.1.4660'. [ 717.123471][T17096] delete_channel: no stack [ 718.220764][T17124] netlink: 'syz.1.4671': attribute type 1 has an invalid length. [ 718.360590][T17130] netlink: 'syz.2.4676': attribute type 10 has an invalid length. [ 718.404180][T17130] netlink: 55 bytes leftover after parsing attributes in process `syz.2.4676'. [ 718.788070][T17130] device macvlan0 left promiscuous mode [ 718.800425][T17130] team0: Port device macvlan0 removed [ 719.037603][T17144] delete_channel: no stack [ 719.343884][T17159] netlink: 'syz.1.4685': attribute type 10 has an invalid length. [ 719.352437][T17159] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 719.973424][T17178] netlink: 'syz.0.4696': attribute type 10 has an invalid length. [ 720.076243][T17178] team0: Device ipvlan1 failed to register rx_handler [ 720.326546][T17186] netlink: 'syz.1.4697': attribute type 10 has an invalid length. [ 720.374310][T17186] netlink: 55 bytes leftover after parsing attributes in process `syz.1.4697'. [ 720.918385][T17186] team0: Port device macvlan0 removed [ 721.177084][T17210] netlink: 'syz.1.4713': attribute type 10 has an invalid length. [ 721.229767][T17214] netlink: 'syz.0.4711': attribute type 29 has an invalid length. [ 721.249415][T17214] netlink: 'syz.0.4711': attribute type 29 has an invalid length. [ 721.298057][T17214] netlink: 'syz.0.4711': attribute type 29 has an invalid length. [ 722.052810][T17237] netlink: 'syz.3.4718': attribute type 10 has an invalid length. [ 722.105030][T17237] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 722.520680][T17248] netlink: 'syz.3.4724': attribute type 10 has an invalid length. [ 722.534333][T17248] netlink: 55 bytes leftover after parsing attributes in process `syz.3.4724'. [ 723.284684][T17248] device macvlan0 left promiscuous mode [ 723.307377][T17248] team0: Port device macvlan0 removed [ 723.532564][T17273] netlink: 'syz.0.4737': attribute type 10 has an invalid length. [ 723.560489][T17274] delete_channel: no stack [ 723.581486][T17273] team0: Device ipvlan1 failed to register rx_handler [ 725.350825][T17314] netlink: 'syz.3.4753': attribute type 10 has an invalid length. [ 728.305448][T17329] netlink: 'syz.4.4768': attribute type 10 has an invalid length. [ 728.662819][T17335] netlink: 'syz.4.4761': attribute type 11 has an invalid length. [ 728.702170][T17335] netlink: 173820 bytes leftover after parsing attributes in process `syz.4.4761'. [ 728.743391][T17333] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 728.771216][T17338] netlink: 'syz.0.4759': attribute type 10 has an invalid length. [ 728.837485][T17338] netlink: 55 bytes leftover after parsing attributes in process `syz.0.4759'. [ 729.579228][T17338] team0: Port device macvlan0 removed [ 729.633283][T17356] netlink: 'syz.4.4765': attribute type 10 has an invalid length. [ 729.654190][T17356] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4765'. [ 729.774950][T17359] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4767'. [ 730.207102][T17372] netlink: 'syz.3.4773': attribute type 39 has an invalid length. [ 730.688305][T17382] netlink: 'syz.1.4775': attribute type 21 has an invalid length. [ 730.791878][T17382] netlink: 'syz.1.4775': attribute type 1 has an invalid length. [ 731.117529][T17394] netlink: 'syz.2.4779': attribute type 9 has an invalid length. [ 731.159426][T17394] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4779'. [ 731.333173][T17403] netlink: 144 bytes leftover after parsing attributes in process `syz.3.4784'. [ 731.587350][T17412] netlink: 'syz.0.4796': attribute type 10 has an invalid length. [ 732.712645][T17444] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4799'. [ 732.840282][T17448] netlink: 'syz.1.4800': attribute type 10 has an invalid length. [ 732.922538][T17451] netlink: 'syz.0.4803': attribute type 10 has an invalid length. [ 733.929603][T17479] netlink: 'syz.3.4815': attribute type 11 has an invalid length. [ 733.951465][T17474] netlink: 'syz.4.4813': attribute type 21 has an invalid length. [ 733.972930][T17479] netlink: 173820 bytes leftover after parsing attributes in process `syz.3.4815'. [ 733.993305][T17474] netlink: 'syz.4.4813': attribute type 1 has an invalid length. [ 734.034585][T17477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 734.071301][T17484] netlink: 'syz.2.4817': attribute type 10 has an invalid length. [ 734.152053][T17486] netlink: 'syz.1.4816': attribute type 9 has an invalid length. [ 734.181262][T17486] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.4816'. [ 734.303194][T17491] delete_channel: no stack [ 735.037690][T17511] delete_channel: no stack [ 735.401297][T17521] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4840'. [ 735.702408][T17531] validate_nla: 5 callbacks suppressed [ 735.702446][T17531] netlink: 'syz.3.4835': attribute type 9 has an invalid length. [ 735.722283][T17531] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.4835'. [ 735.880349][T17541] netlink: 'syz.4.4838': attribute type 10 has an invalid length. [ 735.894288][T17541] netlink: 55 bytes leftover after parsing attributes in process `syz.4.4838'. [ 735.927266][T17535] delete_channel: no stack [ 736.198078][T17544] delete_channel: no stack [ 736.312497][T17554] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 736.331637][T17553] netlink: 'syz.0.4844': attribute type 10 has an invalid length. [ 736.583852][T17558] netlink: 'syz.2.4845': attribute type 39 has an invalid length. [ 737.027306][T17572] netlink: 'syz.0.4850': attribute type 10 has an invalid length. [ 737.057809][T17572] netlink: 164 bytes leftover after parsing attributes in process `syz.0.4850'. [ 737.122048][T17573] delete_channel: no stack [ 737.190831][T17576] netlink: 'syz.4.4851': attribute type 10 has an invalid length. [ 737.638322][T17589] netlink: 'syz.0.4857': attribute type 10 has an invalid length. [ 737.704838][T17586] delete_channel: no stack [ 738.097029][T17596] netlink: 'syz.1.4861': attribute type 39 has an invalid length. [ 738.397034][T17607] delete_channel: no stack [ 738.437174][T17611] netlink: 'syz.2.4865': attribute type 11 has an invalid length. [ 738.446489][T17611] netlink: 173820 bytes leftover after parsing attributes in process `syz.2.4865'. [ 738.500936][T17609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 739.276569][T17621] netlink: 'syz.2.4868': attribute type 10 has an invalid length. [ 739.327530][T17621] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4868'. [ 739.387688][T17620] netlink: 'syz.0.4867': attribute type 10 has an invalid length. [ 739.811248][T17634] delete_channel: no stack [ 740.126295][T17641] delete_channel: no stack [ 740.782782][T17658] netlink: 'syz.0.4879': attribute type 11 has an invalid length. [ 740.814494][T17658] netlink: 173820 bytes leftover after parsing attributes in process `syz.0.4879'. [ 740.868940][T17657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 740.950635][T17665] validate_nla: 2 callbacks suppressed [ 740.950680][T17665] netlink: 'syz.1.4883': attribute type 10 has an invalid length. [ 741.089383][T17666] delete_channel: no stack [ 741.185272][T17675] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 741.319699][T17680] netlink: 'syz.4.4891': attribute type 39 has an invalid length. [ 741.848342][T17677] device syzkaller0 entered promiscuous mode [ 744.024053][T17706] netlink: 'syz.4.4900': attribute type 10 has an invalid length. [ 744.181493][T17707] delete_channel: no stack [ 744.315022][T17714] mac80211_hwsim hwsim10 »»»»»»: renamed from wlan0 [ 744.506998][T17723] netlink: 'syz.2.4907': attribute type 10 has an invalid length. [ 744.545995][T17723] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4907'. [ 744.566908][T17723] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 744.593795][T17725] netlink: 'syz.3.4905': attribute type 10 has an invalid length. [ 744.602033][T17725] netlink: 164 bytes leftover after parsing attributes in process `syz.3.4905'. [ 745.081248][T17741] netlink: 'syz.2.4912': attribute type 2 has an invalid length. [ 745.121153][T17741] netlink: 'syz.2.4912': attribute type 8 has an invalid length. [ 745.153069][T17741] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4912'. [ 745.252496][T17748] netlink: 'syz.3.4914': attribute type 10 has an invalid length. [ 745.420616][T17749] delete_channel: no stack [ 745.735962][T17755] device syzkaller0 entered promiscuous mode [ 745.748524][T17763] netlink: 'syz.1.4920': attribute type 39 has an invalid length. [ 747.201246][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.207745][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.946010][T17784] netlink: 'syz.1.4931': attribute type 10 has an invalid length. [ 748.225257][T17793] delete_channel: no stack [ 748.551520][T17806] netlink: 830 bytes leftover after parsing attributes in process `syz.3.4942'. [ 748.920698][T17810] device syzkaller0 entered promiscuous mode [ 748.934738][T17813] device wlan0 left promiscuous mode [ 748.959957][T17818] mac80211_hwsim hwsim2 »»»»»»: renamed from wlan0 [ 748.994148][T17820] netlink: 'syz.2.4947': attribute type 10 has an invalid length. [ 749.280529][T17825] delete_channel: no stack [ 751.166665][T17830] netlink: 'syz.3.4949': attribute type 10 has an invalid length. [ 751.174775][T17830] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4949'. [ 751.185456][T17830] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 751.804601][T17860] delete_channel: no stack [ 751.810474][T17862] delete_channel: no stack [ 752.107442][T17878] netlink: 'syz.3.4971': attribute type 10 has an invalid length. [ 752.382557][T17885] netlink: 'syz.4.4973': attribute type 10 has an invalid length. [ 752.419862][T17885] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4973'. [ 752.459873][T17885] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 752.978715][T17898] delete_channel: no stack [ 753.222260][T17913] netlink: 'syz.0.4985': attribute type 39 has an invalid length. [ 753.326328][T17900] delete_channel: no stack [ 753.542203][T17927] netlink: 'syz.3.4989': attribute type 2 has an invalid length. [ 753.598902][T17927] netlink: 'syz.3.4989': attribute type 8 has an invalid length. [ 753.644668][T17927] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4989'. [ 754.088711][T17943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 754.348731][T17946] delete_channel: no stack [ 754.609637][T17954] delete_channel: no stack [ 754.686553][T17964] netlink: 'syz.2.5002': attribute type 39 has an invalid length. [ 755.262420][T17975] netlink: 'syz.1.5018': attribute type 10 has an invalid length. [ 755.565208][T17986] delete_channel: no stack [ 755.825114][T17997] delete_channel: no stack [ 756.148922][T18010] device syzkaller0 entered promiscuous mode [ 757.047746][T18038] delete_channel: no stack [ 758.319313][T18022] netlink: 830 bytes leftover after parsing attributes in process `syz.4.5027'. [ 758.328826][T18029] netlink: 'syz.3.5029': attribute type 39 has an invalid length. [ 758.635155][T18049] netlink: 'syz.3.5037': attribute type 39 has an invalid length. [ 759.533779][T18079] netlink: 830 bytes leftover after parsing attributes in process `syz.0.5048'. [ 759.847053][T18087] netlink: 'syz.0.5052': attribute type 39 has an invalid length. [ 760.161995][T18089] device syzkaller0 entered promiscuous mode [ 760.196361][T18100] netlink: 'syz.4.5058': attribute type 39 has an invalid length. [ 761.988737][T18109] netlink: 'syz.4.5061': attribute type 39 has an invalid length. [ 762.237311][T18121] netlink: 830 bytes leftover after parsing attributes in process `syz.1.5063'. [ 762.309060][T18117] delete_channel: no stack [ 762.645536][T18133] netlink: 'syz.0.5071': attribute type 39 has an invalid length. [ 762.933828][T18148] netlink: 'syz.0.5085': attribute type 39 has an invalid length. [ 763.103115][T18153] netlink: 'syz.4.5078': attribute type 39 has an invalid length. [ 763.393240][T18163] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5081'. [ 763.517183][T18169] delete_channel: no stack [ 763.605565][T18167] device syzkaller0 entered promiscuous mode [ 765.302486][T18178] netlink: 'syz.2.5086': attribute type 39 has an invalid length. [ 765.448914][T18189] netlink: 'syz.2.5092': attribute type 39 has an invalid length. [ 765.465908][T18185] netlink: 'syz.3.5090': attribute type 39 has an invalid length. [ 765.496359][T18184] netlink: 'syz.4.5091': attribute type 39 has an invalid length. [ 765.673710][T18193] netlink: 'syz.0.5103': attribute type 39 has an invalid length. [ 765.855454][T18199] netlink: 'syz.1.5094': attribute type 21 has an invalid length. [ 765.880206][T18199] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5094'. [ 765.890373][T18199] netlink: 'syz.1.5094': attribute type 5 has an invalid length. [ 765.907741][T18199] netlink: 'syz.1.5094': attribute type 6 has an invalid length. [ 765.926402][T18199] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5094'. [ 766.048437][T18207] netlink: 'syz.0.5097': attribute type 39 has an invalid length. [ 766.145739][T18211] delete_channel: no stack [ 766.157048][T18210] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5099'. [ 766.262225][T18214] netlink: 'syz.1.5100': attribute type 28 has an invalid length. [ 766.404789][T18223] netlink: 830 bytes leftover after parsing attributes in process `syz.2.5105'. [ 766.553836][T18229] delete_channel: no stack [ 766.968593][T18249] delete_channel: no stack [ 767.236648][T18259] device sit0 entered promiscuous mode [ 767.798686][T18264] netlink: 14601 bytes leftover after parsing attributes in process `syz.0.5120'. [ 768.008298][T18271] delete_channel: no stack [ 768.595806][T18295] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 768.807575][T18301] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5134'. [ 768.830028][T18301] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5134'. [ 769.073141][T18313] delete_channel: no stack [ 769.889751][T18341] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 769.934252][T18339] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5149'. [ 769.954307][T18339] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5149'. [ 770.353872][T18355] validate_nla: 17 callbacks suppressed [ 770.380627][T18355] netlink: 'syz.1.5153': attribute type 39 has an invalid length. [ 770.470311][T18350] delete_channel: no stack [ 770.895445][T18365] netlink: 'syz.3.5157': attribute type 39 has an invalid length. [ 771.295308][T18376] device syzkaller0 entered promiscuous mode [ 771.955140][T18388] delete_channel: no stack [ 773.164208][T18382] netlink: 'syz.0.5163': attribute type 21 has an invalid length. [ 773.172137][T18382] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5163'. [ 773.181636][T18382] netlink: 'syz.0.5163': attribute type 5 has an invalid length. [ 773.189717][T18382] netlink: 'syz.0.5163': attribute type 6 has an invalid length. [ 773.197809][T18382] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5163'. [ 773.207022][T18383] netlink: 'syz.4.5164': attribute type 39 has an invalid length. [ 773.219525][T18386] netlink: 'syz.1.5165': attribute type 39 has an invalid length. [ 773.425457][T18393] netlink: 'syz.0.5178': attribute type 39 has an invalid length. [ 773.693372][T18409] netlink: 14601 bytes leftover after parsing attributes in process `syz.4.5173'. [ 774.568881][T18431] netlink: 'syz.1.5181': attribute type 39 has an invalid length. [ 774.892085][T18437] netlink: 'syz.4.5184': attribute type 39 has an invalid length. [ 775.220705][T18446] delete_channel: no stack [ 775.536583][T18459] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5193'. [ 776.067518][T18473] netlink: 'syz.1.5198': attribute type 39 has an invalid length. [ 776.412297][T18485] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5202'. [ 776.696031][T18488] delete_channel: no stack [ 777.485486][T18511] netlink: 'syz.3.5211': attribute type 39 has an invalid length. [ 777.514305][T18509] netlink: 'syz.0.5210': attribute type 39 has an invalid length. [ 777.798215][T18521] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.5215'. [ 778.305113][T18543] delete_channel: no stack [ 778.408417][T18548] netlink: 'syz.2.5227': attribute type 39 has an invalid length. [ 778.567216][T18551] netlink: 'syz.1.5228': attribute type 39 has an invalid length. [ 778.856983][T18558] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.5232'. [ 779.089869][T18565] netlink: 'syz.4.5233': attribute type 39 has an invalid length. [ 779.457924][T18577] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5239'. [ 779.523614][T18577] device hsr_slave_0 left promiscuous mode [ 779.557813][T18577] device hsr_slave_1 left promiscuous mode [ 779.822293][T18584] delete_channel: no stack [ 779.922602][T18589] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5244'. [ 780.570517][T18605] device sit0 entered promiscuous mode [ 781.292188][T18614] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.5263'. [ 781.389959][T18618] netlink: 'syz.4.5254': attribute type 39 has an invalid length. [ 781.618333][T18624] netlink: 'syz.4.5257': attribute type 3 has an invalid length. [ 781.627376][T18621] delete_channel: no stack [ 781.640902][T18624] netlink: 'syz.4.5257': attribute type 1 has an invalid length. [ 781.661437][T18624] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.5257'. [ 781.776929][T18630] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5259'. [ 782.016844][T18639] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 782.139798][T18634] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 782.155152][T18634] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 782.176289][T18634] device veth0_to_bridge entered promiscuous mode [ 782.240586][T18648] netlink: 'syz.4.5269': attribute type 39 has an invalid length. [ 782.330367][T18646] device sit0 entered promiscuous mode [ 783.031249][T18651] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5270'. [ 783.048094][T18651] device hsr_slave_0 left promiscuous mode [ 783.081101][T18651] device hsr_slave_1 left promiscuous mode [ 783.129743][T18656] delete_channel: no stack [ 783.388370][T18663] netlink: 'syz.1.5275': attribute type 3 has an invalid length. [ 783.399492][T18663] netlink: 'syz.1.5275': attribute type 1 has an invalid length. [ 783.425068][T18663] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.5275'. [ 783.877980][T18684] netlink: 'syz.3.5283': attribute type 39 has an invalid length. [ 784.132988][T18696] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 784.461816][T18704] netlink: 14 bytes leftover after parsing attributes in process `syz.4.5290'. [ 784.482638][T18703] netlink: 'syz.3.5291': attribute type 3 has an invalid length. [ 784.503810][T18704] device hsr_slave_0 left promiscuous mode [ 784.517032][T18703] netlink: 'syz.3.5291': attribute type 1 has an invalid length. [ 784.525404][T18703] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.5291'. [ 784.543720][T18704] device hsr_slave_1 left promiscuous mode [ 784.691205][T18709] netlink: 'syz.3.5292': attribute type 29 has an invalid length. [ 785.035893][T18716] delete_channel: no stack [ 785.257044][T18724] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 785.264178][T18724] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 785.272411][T18724] device veth0_to_bridge entered promiscuous mode [ 785.453666][T18735] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 785.726162][T18744] device sit0 entered promiscuous mode [ 786.736444][T18761] validate_nla: 4 callbacks suppressed [ 786.736481][T18761] netlink: 'syz.4.5312': attribute type 39 has an invalid length. [ 786.813569][T18763] netlink: 'syz.1.5322': attribute type 39 has an invalid length. [ 787.794724][T18792] delete_channel: no stack [ 788.033723][T18801] device sit0 entered promiscuous mode [ 788.765128][T18804] netlink: 'syz.0.5326': attribute type 39 has an invalid length. [ 788.773804][T18807] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 788.785054][T18812] netlink: 'syz.2.5329': attribute type 39 has an invalid length. [ 788.944738][T18819] netlink: 14 bytes leftover after parsing attributes in process `syz.1.5331'. [ 788.967388][T18819] device hsr_slave_0 left promiscuous mode [ 788.979327][T18819] device hsr_slave_1 left promiscuous mode [ 789.034608][T18822] delete_channel: no stack [ 789.049942][T18825] netlink: 'syz.2.5345': attribute type 39 has an invalid length. [ 789.440204][T18830] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 789.447605][T18830] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 789.462684][T18830] device veth0_to_bridge entered promiscuous mode [ 790.200072][T18855] netlink: 'syz.0.5346': attribute type 39 has an invalid length. [ 790.264596][T18856] delete_channel: no stack [ 791.118500][T18884] Ÿë: port 1(veth0_to_bridge) entered blocking state [ 791.138492][T18884] Ÿë: port 1(veth0_to_bridge) entered disabled state [ 791.172310][T18884] device veth0_to_bridge entered promiscuous mode [ 791.464767][T18895] delete_channel: no stack [ 791.643600][T18903] delete_channel: no stack [ 791.652308][T18906] device sit0 left promiscuous mode [ 791.746728][T18906] device sit0 entered promiscuous mode [ 792.192779][T18920] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5369'. [ 792.210119][T18920] device hsr_slave_0 left promiscuous mode [ 792.231260][T18920] device hsr_slave_1 left promiscuous mode [ 792.484647][T18929] delete_channel: no stack [ 792.571799][T18933] netlink: 'syz.2.5376': attribute type 39 has an invalid length. [ 792.614924][T18934] delete_channel: no stack [ 792.672297][T18941] device sit0 left promiscuous mode [ 792.809518][T18945] device sit0 entered promiscuous mode [ 793.645385][T18961] netlink: 14 bytes leftover after parsing attributes in process `syz.2.5388'. [ 793.775439][T18963] delete_channel: no stack [ 793.907283][T18969] netlink: 'syz.3.5391': attribute type 39 has an invalid length. [ 793.978447][T18974] netlink: 'syz.0.5393': attribute type 28 has an invalid length. [ 794.126654][T18982] device sit0 left promiscuous mode [ 794.506277][T18985] device sit0 entered promiscuous mode [ 795.243524][T18999] netlink: 'syz.3.5401': attribute type 9 has an invalid length. [ 795.264255][T18999] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.5401'. [ 795.288460][T19001] delete_channel: no stack [ 795.431532][T19006] netlink: 'syz.1.5404': attribute type 39 has an invalid length. [ 795.651300][T19016] netlink: 'syz.4.5408': attribute type 28 has an invalid length. [ 795.733512][T19024] device sit0 left promiscuous mode [ 796.007348][T19026] device sit0 entered promiscuous mode [ 796.828688][T19038] delete_channel: no stack [ 797.114759][T19049] netlink: 766 bytes leftover after parsing attributes in process `syz.3.5429'. [ 797.288839][T19049] device bond_slave_0 entered promiscuous mode [ 797.295149][T19049] device bond_slave_1 entered promiscuous mode [ 797.301382][T19049] device wlan1 entered promiscuous mode [ 797.960547][T19067] netlink: 'syz.3.5428': attribute type 39 has an invalid length. [ 798.119560][T19079] delete_channel: no stack [ 798.163282][T19078] netlink: 'syz.2.5431': attribute type 39 has an invalid length. [ 798.385257][T19089] netlink: 'syz.2.5436': attribute type 9 has an invalid length. [ 798.413576][T19089] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.5436'. [ 798.762750][T19106] netlink: 766 bytes leftover after parsing attributes in process `syz.4.5441'. [ 798.856875][T19107] netlink: 'syz.3.5443': attribute type 39 has an invalid length. [ 799.048674][T19113] netlink: 'syz.1.5445': attribute type 21 has an invalid length. [ 799.057316][T19113] netlink: 'syz.1.5445': attribute type 1 has an invalid length. [ 799.065794][T19113] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5445'. [ 799.183605][T19116] netlink: 'syz.0.5455': attribute type 39 has an invalid length. [ 799.544194][T19120] delete_channel: no stack [ 799.624644][T19124] netlink: 'syz.3.5448': attribute type 39 has an invalid length. [ 800.100857][T19145] netlink: 'syz.3.5461': attribute type 39 has an invalid length. [ 800.295699][T19156] delete_channel: no stack [ 800.385323][T19162] netlink: 'syz.2.5466': attribute type 39 has an invalid length. [ 800.591099][T19168] netlink: 766 bytes leftover after parsing attributes in process `syz.1.5464'. [ 801.168678][T19190] device sit0 left promiscuous mode [ 801.294926][T19190] device sit0 entered promiscuous mode [ 801.393684][T19191] delete_channel: no stack [ 802.299770][T19224] delete_channel: no stack [ 802.403775][T19231] delete_channel: no stack [ 802.580288][T19240] delete_channel: no stack [ 802.759390][T19254] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5499'. [ 803.022742][T19257] validate_nla: 4 callbacks suppressed [ 803.022778][T19257] netlink: 'syz.0.5501': attribute type 21 has an invalid length. [ 803.131584][T19257] netlink: 'syz.0.5501': attribute type 1 has an invalid length. [ 803.366223][T19257] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5501'. [ 803.840707][T19264] netlink: 'syz.4.5505': attribute type 39 has an invalid length. [ 803.997049][T19271] netlink: 'syz.2.5506': attribute type 28 has an invalid length. [ 804.290452][T19278] netlink: 'syz.0.5510': attribute type 39 has an invalid length. [ 804.468129][T19288] netlink: 'syz.2.5511': attribute type 39 has an invalid length. [ 804.585031][T19275] delete_channel: no stack [ 804.814902][T19295] netlink: 'syz.2.5516': attribute type 21 has an invalid length. [ 804.842682][T19295] netlink: 'syz.2.5516': attribute type 1 has an invalid length. [ 804.875450][T19295] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5516'. [ 804.982847][T19302] netlink: 'syz.3.5527': attribute type 39 has an invalid length. [ 805.261485][T19314] netlink: 'syz.4.5520': attribute type 39 has an invalid length. [ 805.510062][T19329] delete_channel: no stack [ 806.468767][T19368] delete_channel: no stack [ 807.169583][T19404] delete_channel: no stack [ 807.851380][T19430] delete_channel: no stack [ 808.035284][T19441] validate_nla: 15 callbacks suppressed [ 808.035317][T19441] netlink: 'syz.0.5573': attribute type 39 has an invalid length. [ 808.400965][T19458] netlink: 'syz.2.5581': attribute type 39 has an invalid length. [ 808.635805][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.642192][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.653171][T19470] delete_channel: no stack [ 808.862314][T19480] netlink: 'syz.2.5589': attribute type 39 has an invalid length. [ 808.891167][T19481] netlink: 'syz.1.5588': attribute type 39 has an invalid length. [ 809.049598][T19485] netlink: 766 bytes leftover after parsing attributes in process `syz.0.5587'. [ 809.212228][T19494] netlink: 'syz.1.5594': attribute type 39 has an invalid length. [ 809.568028][T19501] netlink: 'syz.2.5596': attribute type 39 has an invalid length. [ 809.607105][T19502] delete_channel: no stack [ 810.041957][T19518] netlink: 'syz.0.5604': attribute type 39 has an invalid length. [ 810.240052][T19528] netlink: 'syz.0.5607': attribute type 39 has an invalid length. [ 810.554774][T19536] delete_channel: no stack [ 810.694697][T19543] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5611'. [ 811.126703][T19559] netlink: 'syz.1.5619': attribute type 39 has an invalid length. [ 811.532675][T19573] netlink: 'syz.1.5622': attribute type 28 has an invalid length. [ 811.548715][T19566] delete_channel: no stack [ 811.841671][T19581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5627'. [ 811.881487][T19581] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5627'. [ 811.947273][T19582] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5627'. [ 812.043451][T19587] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5627'. [ 813.234890][T19637] delete_channel: no stack [ 813.301480][T19640] validate_nla: 1 callbacks suppressed [ 813.301518][T19640] netlink: 'syz.2.5648': attribute type 39 has an invalid length. [ 813.988284][T19671] netlink: 766 bytes leftover after parsing attributes in process `syz.2.5658'. [ 814.058144][T19670] netlink: 'syz.3.5659': attribute type 39 has an invalid length. [ 814.508936][T19673] delete_channel: no stack [ 814.761555][T19682] delete_channel: no stack [ 814.951421][T19690] netlink: 'syz.1.5666': attribute type 39 has an invalid length. [ 815.221625][T19695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5668'. [ 815.290931][T19695] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5668'. [ 815.370535][T19700] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5668'. [ 815.401816][T19703] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5668'. [ 815.829723][T19715] delete_channel: no stack [ 816.051664][ T4257] Bluetooth: hci1: unexpected event 0x14 length: 15 > 6 [ 816.232209][T19735] netlink: 'syz.2.5681': attribute type 39 has an invalid length. [ 816.837171][T19760] netlink: 'syz.3.5690': attribute type 39 has an invalid length. [ 817.079144][T19768] BUG: kernel NULL pointer dereference, address: 0000000000000000 [ 817.086992][T19768] #PF: supervisor instruction fetch in kernel mode [ 817.093500][T19768] #PF: error_code(0x0010) - not-present page [ 817.099495][T19768] PGD 2f7b7067 P4D 2f7b7067 PUD 0 [ 817.104632][T19768] Oops: 0010 [#1] PREEMPT SMP KASAN [ 817.109843][T19768] CPU: 0 PID: 19768 Comm: syz.0.5692 Not tainted 6.1.142-syzkaller #0 [ 817.118001][T19768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 817.128412][T19768] RIP: 0010:0x0 [ 817.131876][T19768] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 817.139228][T19768] RSP: 0018:ffffc90003407398 EFLAGS: 00010246 [ 817.145285][T19768] RAX: 1ffffffff15eb29b RBX: 000000000000000f RCX: 0000000000000000 [ 817.153684][T19768] RDX: ffffc90003407440 RSI: 0000000000000001 RDI: ffff8880290b4000 [ 817.161653][T19768] RBP: ffffc900034074b0 R08: dffffc0000000000 R09: ffffed1005216808 [ 817.169646][T19768] R10: ffffed1005216808 R11: 1ffff11005216807 R12: ffffe8ffffc46078 [ 817.177719][T19768] R13: ffffffff8af594d8 R14: 0000000000000000 R15: ffff8880290b4000 [ 817.185702][T19768] FS: 00007fcbc1fff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 817.194630][T19768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.201206][T19768] CR2: ffffffffffffffd6 CR3: 000000002d211000 CR4: 00000000003506f0 [ 817.209179][T19768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 817.217146][T19768] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 817.225120][T19768] Call Trace: [ 817.228397][T19768] [ 817.231323][T19768] bond_xdp_xmit+0x309/0x520 [ 817.235921][T19768] ? bond_xdp_xmit+0x93/0x520 [ 817.240596][T19768] ? bond_xdp+0x840/0x840 [ 817.244918][T19768] bq_xmit_all+0xc99/0x10d0 [ 817.249423][T19768] ? __dev_flush+0x1b0/0x1b0 [ 817.254010][T19768] ? perf_trace_preemptirq_template+0x287/0x330 [ 817.260243][T19768] ? irqentry_enter+0x33/0x50 [ 817.264915][T19768] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 817.270886][T19768] ? lock_chain_count+0x20/0x20 [ 817.275737][T19768] ? rcu_is_watching+0x11/0xa0 [ 817.280509][T19768] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.286671][T19768] ? lockdep_hardirqs_on+0x94/0x140 [ 817.291865][T19768] bq_enqueue+0x337/0x3d0 [ 817.296195][T19768] dev_map_enqueue+0x1b4/0x340 [ 817.300952][T19768] xdp_do_redirect_frame+0x30c/0x650 [ 817.306229][T19768] bpf_test_run_xdp_live+0x9dd/0x1970 [ 817.311602][T19768] ? bpf_test_run_xdp_live+0x45c/0x1970 [ 817.317141][T19768] ? xdp_convert_md_to_buff+0x330/0x330 [ 817.322687][T19768] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 817.328829][T19768] ? trace_raw_output_bpf_test_finish+0xd0/0xd0 [ 817.335076][T19768] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 817.340700][T19768] bpf_prog_test_run_xdp+0x6f1/0xe50 [ 817.345978][T19768] ? lock_chain_count+0x20/0x20 [ 817.350823][T19768] ? dev_put+0x80/0x80 [ 817.354888][T19768] ? dev_put+0x80/0x80 [ 817.358942][T19768] bpf_prog_test_run+0x31e/0x390 [ 817.363884][T19768] __sys_bpf+0x593/0x6d0 [ 817.368121][T19768] ? bpf_link_show_fdinfo+0x310/0x310 [ 817.373497][T19768] ? lock_chain_count+0x20/0x20 [ 817.378345][T19768] __x64_sys_bpf+0x78/0x90 [ 817.382753][T19768] do_syscall_64+0x4c/0xa0 [ 817.387167][T19768] ? clear_bhb_loop+0x60/0xb0 [ 817.391836][T19768] ? clear_bhb_loop+0x60/0xb0 [ 817.396525][T19768] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 817.402434][T19768] RIP: 0033:0x7fcbc218e929 [ 817.406874][T19768] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 817.426501][T19768] RSP: 002b:00007fcbc1fff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 817.434922][T19768] RAX: ffffffffffffffda RBX: 00007fcbc23b5fa0 RCX: 00007fcbc218e929 [ 817.442894][T19768] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 817.450857][T19768] RBP: 00007fcbc2210b39 R08: 0000000000000000 R09: 0000000000000000 [ 817.458816][T19768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.466776][T19768] R13: 0000000000000000 R14: 00007fcbc23b5fa0 R15: 00007ffd4335c0b8 [ 817.474745][T19768] [ 817.477759][T19768] Modules linked in: [ 817.481650][T19768] CR2: 0000000000000000 [ 817.485795][T19768] ---[ end trace 0000000000000000 ]--- [ 817.491234][T19768] RIP: 0010:0x0 [ 817.494687][T19768] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 817.502038][T19768] RSP: 0018:ffffc90003407398 EFLAGS: 00010246 [ 817.508090][T19768] RAX: 1ffffffff15eb29b RBX: 000000000000000f RCX: 0000000000000000 [ 817.516052][T19768] RDX: ffffc90003407440 RSI: 0000000000000001 RDI: ffff8880290b4000 [ 817.524016][T19768] RBP: ffffc900034074b0 R08: dffffc0000000000 R09: ffffed1005216808 [ 817.531975][T19768] R10: ffffed1005216808 R11: 1ffff11005216807 R12: ffffe8ffffc46078 [ 817.539936][T19768] R13: ffffffff8af594d8 R14: 0000000000000000 R15: ffff8880290b4000 [ 817.548022][T19768] FS: 00007fcbc1fff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 817.556947][T19768] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 817.563524][T19768] CR2: ffffffffffffffd6 CR3: 000000002d211000 CR4: 00000000003506f0 [ 817.571492][T19768] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 817.579476][T19768] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 817.587444][T19768] Kernel panic - not syncing: Fatal exception in interrupt [ 817.594892][T19768] Kernel Offset: disabled [ 817.599208][T19768] Rebooting in 86400 seconds..