last executing test programs: 5.576068687s ago: executing program 3 (id=8341): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f00000000000000040000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a0000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x49c8, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a1, &(0x7f0000000080)) 5.56205595s ago: executing program 0 (id=8351): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000001040)='memory.current\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb79070511"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 5.104383166s ago: executing program 3 (id=8348): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x4400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62"], 0x10b8}, 0x106) recvmsg$kcm(r2, 0x0, 0x100) socket$kcm(0x21, 0x2, 0xa) socket$kcm(0x10, 0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x1, [{0x5, 0x2, 0x3}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f, 0x5f]}}, 0x0, 0x37, 0x0, 0x1}, 0x28) close(r1) socketpair(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af3653c001ac004000202080002000600010009000300eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYRES16=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x10000}, 0x94) r4 = perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x605, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xa5ba, 0x1, @perf_bp={0x0, 0x1}, 0x100410, 0x200, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x40000300, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0xe}, 0x4040, 0x3, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffefffffffffffff, r4, 0xb) 4.350955718s ago: executing program 2 (id=8352): socket$kcm(0x10, 0x400000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70300000400000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f00000000c0), 0xb}, 0x1004, 0x4, 0x0, 0x3, 0x1, 0x800000, 0x0, 0x0, 0x8, 0x0, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) socketpair(0x22, 0x2, 0x2, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="d8000000180001004e81f782db4cb904021d0800fe00ff00000055a10a000f000200142603600e12080005007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd7}], 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xa, 0xc, &(0x7f0000001bc0)=ANY=[@ANYBLOB="180200000000000000000000d15100008500000027000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000007100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x6, 0x0, 0x0, 0x0, 0x8001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x10c00e, 0xac5c, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x100000000000}, 0x0, 0xffffffffffff8003, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3000c085) sendmsg$inet(0xffffffffffffffff, 0x0, 0x52cc) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371600000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair(0x1d, 0x3, 0x1, &(0x7f00000014c0)) 4.349492059s ago: executing program 0 (id=8362): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000001040)='memory.current\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb79070511"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 3.972968589s ago: executing program 1 (id=8354): socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000001, 0x1, @perf_bp={0x0}, 0x8061, 0x3, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1000000000000000100100000b000000140000"], 0x28}, 0x0) r1 = getpid() syz_open_procfs$namespace(r1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000200)=@raw=[@call, @exit], &(0x7f0000000280)='GPL\x00', 0x5, 0x81, &(0x7f00000002c0)=""/123, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0x0, 0x0, 0x90, 0x0, 0x100000}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x77, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b20, 0x0) r6 = perf_event_open$cgroup(&(0x7f0000000040)={0x2, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000140)='!!=prio\x0ea&\x00') r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x50) close(r7) 3.484624312s ago: executing program 2 (id=8356): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x18, 0x0, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x110123, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002700080085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$kcm(0xa, 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2.938937305s ago: executing program 2 (id=8357): r0 = socket$kcm(0x2, 0x3, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x5c, &(0x7f0000000180), 0x14}, 0x40fd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300000002030000000200000000000000000080f9c6a541488f57e47cc2e7c8375bae4c4086765fe2eafdfd7030f81336316b2ac0a7d8aa0eba273f541e44a74a41238f35fbb12c1a7803cd7527a1beb073279132432988"], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x100000000000000, 0x0, 0x8, 0x1607}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(r0, &(0x7f0000000d80)={&(0x7f00000002c0)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="ea5e8f654182fb7bc11e67fdcc0978bb634bacb66c389a975d0ed73afa3552974f4a5126c53c735265d2ae72284eaf49fbc394f1566ff5089ed395016d016e27", 0x40}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="dd20b20484b872db4670bff5491e299cc7d6e8987ff6200aa8840b58be2c43e7e73fcaef5c1b7424ed0ae0da6f63818dca730b16bebf17ab2d8c0ab04ae821be2c5868801e8392678eda6518da54073207e8de86028e2ca9b5a64a63ed9483f6bbb5a2c8b789df78291b6eb4c120", 0x6e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x2000c080) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x140) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001080)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)="69e075b925a880715c2ba9e23768cc2f84b044479c6bd5bba3d75e45a4da67b4d616c0d0a6fba245582d", 0x2a}, {&(0x7f0000000600)="961a40d92a62e8c4a9873b745bd27928c9b80096d5fb19f8f9", 0x19}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x288}, 0x20048811) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814) 2.679068694s ago: executing program 0 (id=8358): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8917, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={0x0, r2}, 0x18) setsockopt$sock_attach_bpf(r5, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 2.559780146s ago: executing program 4 (id=8359): perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x2, 0x6, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x1}, 0x80000, 0xca, 0x3, 0x0, 0x9922, 0x2, 0x0, 0x0, 0xe, 0x0, 0x6}, 0xffffffffffffffff, 0x100000000000, 0xffffffffffffffff, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x200000000}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x17, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1, @ANYRES32=0xffffffffffffffff, @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x31, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0x7f, 0x208}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x46e}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000600)={r3, r5}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x10, 0x0, 0x0, 0x4}, @union={0x0, 0x0, 0x0, 0x9, 0x0, 0x2}]}}, 0x0, 0x36}, 0x28) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x30}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) recvmsg$unix(r0, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="02"], 0x9a) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="2e000000380005ffd25a80698c63940d0300fc602f02000000000200001ec0003715de60cfd9a1af05d81d00d1bdbaac91673e42640bcfa2acffa5ef31cf6591e09fb7a4c5b81a3a", 0x48}], 0x1, 0x0, 0x0, 0x39c}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000100000001000"], 0x0, 0x2a}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xbb}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r10, 0x40042408, r9) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000001340)=ANY=[@ANYRES16=r2, @ANYRESOCT=r2, @ANYRESDEC=r10, @ANYRES32=r4, @ANYRESOCT=r4, @ANYRESDEC=r8], 0x18, 0x68000000}, 0x0) r11 = socket$kcm(0xa, 0x5, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) setsockopt$sock_attach_bpf(r11, 0x29, 0x22, &(0x7f0000000100)=r12, 0x120) 2.533412781s ago: executing program 2 (id=8360): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="180000007f00000000000000040000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000001008500000083000000bf090000000000005509010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020000200000000002000000850000002000000085000000a0000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x10) socketpair(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x49c8, 0x0, 0xfffffffc, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001580)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x10081, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000002, 0xe, 0xfffffffffffffda9, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x42082, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0xffffffffffffffc1, 0xa5}, 0x0, 0x10, 0x4, 0x8, 0x2, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r7, 0x89a0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x89a2, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89a1, &(0x7f0000000080)) 2.466869584s ago: executing program 1 (id=8361): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x402, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 2.466474134s ago: executing program 3 (id=8363): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0xb}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x844) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r6, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 2.204809054s ago: executing program 4 (id=8364): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8916, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={r3, &(0x7f0000000500), &(0x7f0000000c00)=""/236}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa0000000000007110170000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x0, 0x2, 0x2, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) getpid() socketpair(0x2b, 0x1, 0x2, &(0x7f0000000580)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r3, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000340)=r6, 0x4) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xf, 0x2a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x7, 0x0, 0xf, 0x0, 0x8}, @func, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbf}}, @generic={0x4, 0xf, 0xd, 0x7, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x9, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x1, '\x00', r4, @cgroup_device=0x6, r6, 0x8, &(0x7f0000000a40)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x3, &(0x7f0000000b00)=[r3], &(0x7f0000000b40)=[{0x0, 0x2, 0xb, 0x6}, {0x1, 0x2, 0x5, 0x1}, {0x1, 0x3, 0xf, 0x6}]}, 0x94) 2.097569444s ago: executing program 1 (id=8365): r0 = socket$kcm(0x10, 0x7, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb1b0018000000000000000c0000000c0000000200000000000000000091ed000000000000"], 0x0, 0x26}, 0x28) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000070000000100010009"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0900000005000000080000000f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000000000001c5e83c4e230109fc85ca80725521e3bcff67042d4c8d5eb1871e743a69b16171317fbd371c813e0af09544d"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f00000001c0), 0x12) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) perf_event_open(&(0x7f0000000400)={0x3, 0x80, 0xf9, 0x66, 0x7, 0x3, 0x0, 0x2, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, @perf_config_ext={0x8, 0x7}, 0x910, 0x8, 0xae3343a, 0x9, 0x981, 0x40, 0x0, 0x0, 0x80000001, 0x0, 0xfffffffffffffff8}, 0x0, 0x2, r2, 0x1) r7 = openat$cgroup_ro(r6, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1, 0x12) mkdirat$cgroup(r3, &(0x7f0000000100)='syz0\x00', 0x1ff) r8 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r8, &(0x7f00000000c0)='THAWED\x00', 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="c88d437a77dc8ad766bab54784c9dd83492a8b78c6ad30d55dde20b212771693", @ANYRESOCT=r1], &(0x7f0000000280)='GPL\x00', 0x405, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x4}, 0x10}, 0x94) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 2.087865375s ago: executing program 0 (id=8366): socket$kcm(0xa, 0x3, 0x73) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) close(0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5d2e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_config_ext={0xfffffffffffffffe, 0x5}, 0x51f5, 0x0, 0xfffffffc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xf, &(0x7f0000000400)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{0x0}], 0x1}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) r5 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0f000000040000000400"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$kcm(r5, &(0x7f0000005140)={0x0, 0x0, &(0x7f0000005000)=[{&(0x7f0000000840)=""/196, 0xc4}], 0x1}, 0x10000) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x1, @perf_config_ext, 0x108282, 0xac5d, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000022003505d25a806f8c6394f97e24fc60", 0x14}], 0x1, 0x0, 0x0, 0x74000000}, 0x10) 2.072009468s ago: executing program 3 (id=8367): perf_event_open(&(0x7f0000000600)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$kcm(0x10, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0x3) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r2}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="5c00000026006bab9a3fe3d86e17aa31106b876cff0000007ea60864160af36504001a0038001d004231a0e69ee517d34460bc06000000a70d251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) recvmsg$kcm(r3, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x40000100) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100001, 0x0, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r4 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext, 0x0, 0x0, 0xfffffffc, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r5, &(0x7f0000000140)={'full'}, 0xfffffdef) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000200d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 1.902538571s ago: executing program 4 (id=8368): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x208, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$kcm(0x18, 0x0, 0x2) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xde, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80720, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x110123, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fdffffff0000000000000000850000002700080085000000230000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socketpair(0x1d, 0x2, 0x6, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socket$kcm(0xa, 0x1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x2000, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.833073063s ago: executing program 2 (id=8369): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000001040)='memory.current\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r7, 0x4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb79070511"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.726143404s ago: executing program 1 (id=8370): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x8, 0x92, 0x3, 0x9, 0x0, 0x80000001, 0x171301, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x21ed000000000, 0x5}, 0x802, 0x1, 0x5, 0x9, 0x3, 0x8, 0x6, 0x0, 0x7f, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x9c) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001000)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000001040)='memory.current\x00', 0x0, 0x0) r4 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r4, 0x40042409, 0x0) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x19, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb79070511"], 0xfdef) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 1.474571391s ago: executing program 4 (id=8371): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xa, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001700)={{r0}, &(0x7f0000001680), &(0x7f00000016c0)='%pK \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000075"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e003d0010000000028000", 0x2b}], 0x1}, 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) socketpair(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'tunl0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000080)) syz_clone(0x80164000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.001691101s ago: executing program 0 (id=8372): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8917, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000000c0)='./file0/../file0/../file0/file0\x00', r2}, 0x18) setsockopt$sock_attach_bpf(r5, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 574.910981ms ago: executing program 3 (id=8373): r0 = socket$kcm(0x2, 0x3, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x5c, &(0x7f0000000180), 0x14}, 0x40fd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300000002030000000200000000000000000080f9c6a541488f57e47cc2e7c8375bae4c4086765fe2eafdfd7030f81336316b2ac0a7d8aa0eba273f541e44a74a41238f35fbb12c1a7803cd7527a1beb073279132432988"], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x100000000000000, 0x0, 0x8, 0x1607}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(r0, &(0x7f0000000d80)={&(0x7f00000002c0)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="ea5e8f654182fb7bc11e67fdcc0978bb634bacb66c389a975d0ed73afa3552974f4a5126c53c735265d2ae72284eaf49fbc394f1566ff5089ed395016d016e27", 0x40}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="dd20b20484b872db4670bff5491e299cc7d6e8987ff6200aa8840b58be2c43e7e73fcaef5c1b7424ed0ae0da6f63818dca730b16bebf17ab2d8c0ab04ae821be2c5868801e8392678eda6518da54073207e8de86028e2ca9b5a64a63ed9483f6bbb5a2c8b789df78291b6eb4c120", 0x6e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x2000c080) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x140) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001080)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)="69e075b925a880715c2ba9e23768cc2f84b044479c6bd5bba3d75e45a4da67b4d616c0d0a6fba245582d", 0x2a}, {&(0x7f0000000600)="961a40d92a62e8c4a9873b745bd27928c9b80096d5fb19f8f9", 0x19}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x288}, 0x20048811) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814) 523.648841ms ago: executing program 4 (id=8374): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair(0x1, 0x3, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="5c00000052006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038021d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d49380e78ff6a1577ae18c819945fb4e37e70e4509c5", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x10) recvmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20000000) recvmsg$kcm(r2, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x100) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0xc2ba, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg(r2, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x40000120) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) getpid() socketpair(0x1, 0x1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) socket$kcm(0x29, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f97e24fc6004030e001c740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x74000000}, 0x0) 454.921964ms ago: executing program 1 (id=8375): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x8000, 0x4}, 0x10002a, 0xb, 0x100, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000000700000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}, 0x40002002) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x6, 0x5, 0x8, 0x2}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180100001720000000000000ff00000085000000a800000018110000e1450e985341574df349533da0b9368daa7758213da88964ea8c7e2e2f16f354d88de3fae9b7827610ada0cd018519ccea9c1a99a770ec8c21b675547c068f6dd38b2f64f17a8c87b9fee7ee0879b0661ec156ba44e8fa03e9cb3b58abd4b4753dd7dff60fbdf8a1", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0xc2ba, 0x3, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180080000000120000000000000000009524aadebf347ece601f8b6b7f2e150ee87db63e9935edcd6f9454bf7a81b7866097440da8a14a52b26aee1a45176a52485c537a414ebc0705a45a403fbf03fc16d26d0848472a4ead42"], &(0x7f0000000c00)='GPL\x00'}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r7) ioctl$TUNSETOFFLOAD(r7, 0x89e0, 0x110e22fff6) 433.390038ms ago: executing program 2 (id=8376): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x0, 0x0, 0x0, 0x7c3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d0e, 0x80218, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x7}, 0x2005, 0x0, 0x51, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1f, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000fcffffff000000000900000018010000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000040000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000ff7f00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'gre0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8917, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) mkdir(&(0x7f0000000040)='./file0/../file0/../file0/file0\x00', 0x0) r5 = socket$kcm(0x2b, 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={0x0, r2}, 0x18) setsockopt$sock_attach_bpf(r5, 0x0, 0x60, 0x0, 0x4310feed034fc9f2) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 408.607792ms ago: executing program 3 (id=8377): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0xb}, {0x2, 0x0, 0xf, 0x6}], 0x10, 0x4000000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x9, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x2, 0x5, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)}, 0x844) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x8, 0xb}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) setsockopt$sock_attach_bpf(r2, 0x84, 0x11, &(0x7f0000000000)=r6, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r9 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) 4.201509ms ago: executing program 4 (id=8378): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r2, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', r2, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x12003, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x120, 0xf, 0x0, 0x0, 0x0, 0x402, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32], 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10021, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0xb) ioctl$SIOCSIFHWADDR(r3, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x1, 0x0, 0x0, 0x0, 0x300000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100008d8dff"}) 1.438469ms ago: executing program 0 (id=8379): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000040), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) r2 = socket$kcm(0x2a, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x8916, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0xe, 0x40, 0x3, 0x41}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000d00)={r3, &(0x7f0000000500), &(0x7f0000000c00)=""/236}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7daa0000000000007110170000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x28, 0x0, 0x2, 0x2, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x22) getpid() socketpair(0x2b, 0x1, 0x2, &(0x7f0000000580)) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a00)={r3, 0x58, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f0000000340)=r6, 0x4) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xf, 0x2a, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @alu={0x7, 0x0, 0x7, 0x0, 0xf, 0x0, 0x8}, @func, @map_val={0x18, 0x2, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x80000001}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xbf}}, @generic={0x4, 0xf, 0xd, 0x7, 0x8}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000840)='GPL\x00', 0x9, 0xc3, &(0x7f0000000880)=""/195, 0x41100, 0x1, '\x00', r4, @cgroup_device=0x6, r6, 0x8, &(0x7f0000000a40)={0x2, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, r7, 0x3, &(0x7f0000000b00)=[r3], &(0x7f0000000b40)=[{0x0, 0x2, 0xb, 0x6}, {0x1, 0x2, 0x5, 0x1}, {0x1, 0x3, 0xf, 0x6}]}, 0x94) 0s ago: executing program 1 (id=8389): r0 = socket$kcm(0x2, 0x3, 0x84) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) recvmsg(r1, &(0x7f0000000180)={0x0, 0x5c, &(0x7f0000000180), 0x14}, 0x40fd) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000300000002030000000200000000000000000080f9c6a541488f57e47cc2e7c8375bae4c4086765fe2eafdfd7030f81336316b2ac0a7d8aa0eba273f541e44a74a41238f35fbb12c1a7803cd7527a1beb073279132432988"], 0x0, 0x32}, 0x28) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x1, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x4}, 0x0, 0x100000000000000, 0x0, 0x8, 0x1607}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x22, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0xdf61}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg(r0, &(0x7f0000000d80)={&(0x7f00000002c0)=@rc={0x1f, @any, 0x8}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000380)="ea5e8f654182fb7bc11e67fdcc0978bb634bacb66c389a975d0ed73afa3552974f4a5126c53c735265d2ae72284eaf49fbc394f1566ff5089ed395016d016e27", 0x40}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="dd20b20484b872db4670bff5491e299cc7d6e8987ff6200aa8840b58be2c43e7e73fcaef5c1b7424ed0ae0da6f63818dca730b16bebf17ab2d8c0ab04ae821be2c5868801e8392678eda6518da54073207e8de86028e2ca9b5a64a63ed9483f6bbb5a2c8b789df78291b6eb4c120", 0x6e}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x4c0}, 0x2000c080) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0}, 0x140) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="8000230d1100"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000001080)={&(0x7f0000000540)=@pptp={0x18, 0x2, {0x3, @broadcast}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000005c0)="69e075b925a880715c2ba9e23768cc2f84b044479c6bd5bba3d75e45a4da67b4d616c0d0a6fba245582d", 0x2a}, {&(0x7f0000000600)="961a40d92a62e8c4a9873b745bd27928c9b80096d5fb19f8f9", 0x19}], 0x2, &(0x7f0000000dc0)=ANY=[@ANYBLOB], 0x288}, 0x20048811) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af014a31ba377a1b2cc32b38d3aa2a70297400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="280000000000000000000000070000000717a87f000001ac141400e0000001ac1e0001ac1414bb011c000000000000000000000008000000", @ANYRES64=r0], 0x48}, 0x20028814) kernel console output (not intermixed with test programs): netlink: 60 bytes leftover after parsing attributes in process `syz.2.4703'. [ 898.564283][T18146] delete_channel: no stack [ 898.921577][T18158] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 898.979745][T18160] delete_channel: no stack [ 903.742423][T18207] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4728'. [ 903.985345][T18212] delete_channel: no stack [ 904.057038][T18215] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 904.338522][T18219] delete_channel: no stack [ 904.622339][T18235] netlink: 'syz.3.4739': attribute type 41 has an invalid length. [ 904.855850][T18239] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.4738'. [ 906.571822][T18255] delete_channel: no stack [ 906.644373][T18259] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4744'. [ 906.788012][T18264] netlink: 'syz.2.4752': attribute type 29 has an invalid length. [ 906.796793][T18264] netlink: 'syz.2.4752': attribute type 29 has an invalid length. [ 906.807813][T18264] netlink: 'syz.2.4752': attribute type 29 has an invalid length. [ 907.000354][T18264] netlink: 'syz.2.4752': attribute type 29 has an invalid length. [ 908.085498][T18295] netlink: 9286 bytes leftover after parsing attributes in process `syz.4.4758'. [ 908.307867][T18298] delete_channel: no stack [ 908.474094][T18303] netlink: 'syz.4.4761': attribute type 16 has an invalid length. [ 908.482657][T18303] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4761'. [ 909.327406][T18311] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4762'. [ 909.371959][T18313] netlink: 'syz.2.4774': attribute type 16 has an invalid length. [ 909.391788][T18313] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4774'. [ 909.598523][T18322] netlink: 'syz.3.4770': attribute type 29 has an invalid length. [ 909.618090][T18322] netlink: 'syz.3.4770': attribute type 29 has an invalid length. [ 909.638268][T18322] netlink: 'syz.3.4770': attribute type 29 has an invalid length. [ 909.660424][T18324] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 909.732108][T18324] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 909.824253][T18325] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 909.905683][T18321] netlink: 'syz.0.4771': attribute type 41 has an invalid length. [ 909.976890][T18331] netlink: 'syz.3.4770': attribute type 29 has an invalid length. [ 910.005063][T18325] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 910.044953][T18329] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 910.100658][T18329] netlink: 'syz.1.4772': attribute type 29 has an invalid length. [ 910.185516][T18324] can: request_module (can-proto-0) failed. [ 910.376093][T18338] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 910.559454][T18341] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.4776'. [ 910.809535][T18345] netlink: 'syz.4.4778': attribute type 2 has an invalid length. [ 910.839082][T18345] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4778'. [ 911.021980][T18350] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 911.031825][T18350] dvmrp1: linktype set to 768 [ 911.665141][T18375] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 911.789593][T18371] can: request_module (can-proto-0) failed. [ 912.223914][T18384] netlink: 9286 bytes leftover after parsing attributes in process `syz.3.4790'. [ 912.797642][T18404] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 912.804420][T18404] dvmrp1: linktype set to 768 [ 912.854988][T18406] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4802'. [ 912.911815][T18408] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4800'. [ 913.134210][T18411] can: request_module (can-proto-0) failed. [ 913.185196][T18418] mac80211_hwsim hwsim7 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 914.057244][T18443] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4817'. [ 914.459285][T18447] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 914.480270][T18447] dvmrp1: linktype set to 768 [ 914.644023][T18461] validate_nla: 23 callbacks suppressed [ 914.644160][T18461] netlink: 'syz.4.4820': attribute type 29 has an invalid length. [ 914.680338][T18461] netlink: 'syz.4.4820': attribute type 29 has an invalid length. [ 914.757291][T18459] can: request_module (can-proto-0) failed. [ 915.486108][T18479] netlink: 'syz.0.4827': attribute type 2 has an invalid length. [ 915.565279][T18479] netlink: 'syz.0.4827': attribute type 8 has an invalid length. [ 915.599329][T18479] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4827'. [ 916.714738][T18498] delete_channel: no stack [ 916.752856][T18504] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 916.771567][T18504] dvmrp1: linktype set to 768 [ 916.877049][T18508] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 917.417948][T18524] netlink: 'syz.2.4842': attribute type 2 has an invalid length. [ 917.435452][T18524] netlink: 'syz.2.4842': attribute type 8 has an invalid length. [ 917.443870][T18524] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4842'. [ 917.612907][T18529] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4844'. [ 918.034470][T18540] delete_channel: no stack [ 918.151237][T18545] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 918.168419][T18548] netlink: 'syz.2.4855': attribute type 29 has an invalid length. [ 918.191173][T18548] netlink: 'syz.2.4855': attribute type 29 has an invalid length. [ 918.205909][T18548] netlink: 'syz.2.4855': attribute type 29 has an invalid length. [ 918.333627][T18553] netlink: 'syz.2.4855': attribute type 29 has an invalid length. [ 918.385005][T18548] can: request_module (can-proto-0) failed. [ 919.411994][T18576] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.4866'. [ 919.475186][T18574] delete_channel: no stack [ 919.558315][T18583] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 919.716929][T18589] validate_nla: 2 callbacks suppressed [ 919.716990][T18589] netlink: 'syz.1.4871': attribute type 16 has an invalid length. [ 919.759196][T18589] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4871'. [ 920.974126][T18614] netlink: 'syz.2.4889': attribute type 16 has an invalid length. [ 921.007346][T18614] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4889'. [ 921.284118][T18627] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 921.294752][T18627] dvmrp1: linktype set to 768 [ 921.424997][T18630] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4882'. [ 921.425872][T18624] delete_channel: no stack [ 921.543488][T18632] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 921.670674][T18637] netlink: 'syz.2.4886': attribute type 16 has an invalid length. [ 921.683573][T18637] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4886'. [ 921.815316][T18642] netlink: 'syz.3.4890': attribute type 16 has an invalid length. [ 921.834497][T18642] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4890'. [ 922.398002][T18663] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 922.407796][T18663] dvmrp1: linktype set to 768 [ 922.517393][T18665] delete_channel: no stack [ 923.509819][T18697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4912'. [ 923.557436][T18697] netlink: 'syz.0.4912': attribute type 12 has an invalid length. [ 923.571088][T18697] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4912'. [ 923.582715][T18699] netlink: 'syz.4.4915': attribute type 16 has an invalid length. [ 923.592452][T18703] netlink: 'syz.2.4914': attribute type 29 has an invalid length. [ 923.600715][T18699] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4915'. [ 923.636577][T18703] netlink: 'syz.2.4914': attribute type 29 has an invalid length. [ 923.667387][T18704] netlink: 'syz.2.4914': attribute type 29 has an invalid length. [ 923.701031][T18700] delete_channel: no stack [ 923.784489][T18704] netlink: 'syz.2.4914': attribute type 29 has an invalid length. [ 923.914828][T18709] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 923.920560][T18703] can: request_module (can-proto-0) failed. [ 923.930331][T18709] dvmrp1: linktype set to 768 [ 925.453772][T18747] delete_channel: no stack [ 925.596810][T18758] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 925.604830][T18758] dvmrp1: linktype set to 768 [ 927.138430][T18776] validate_nla: 2 callbacks suppressed [ 927.138512][T18776] netlink: 'syz.0.4949': attribute type 29 has an invalid length. [ 927.209925][T18779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4941'. [ 927.226329][T18776] netlink: 'syz.0.4949': attribute type 29 has an invalid length. [ 927.313391][T18779] netlink: 'syz.1.4941': attribute type 12 has an invalid length. [ 927.347949][T18779] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4941'. [ 927.369997][T18783] netlink: 'syz.0.4949': attribute type 29 has an invalid length. [ 927.409652][T18783] netlink: 'syz.0.4949': attribute type 29 has an invalid length. [ 927.452292][T18783] netlink: 'syz.0.4949': attribute type 29 has an invalid length. [ 927.492486][T18783] netlink: 'syz.0.4949': attribute type 29 has an invalid length. [ 927.525058][T18789] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.4944'. [ 927.576727][T18776] can: request_module (can-proto-0) failed. [ 927.643469][T18792] netlink: 'syz.2.4943': attribute type 16 has an invalid length. [ 927.669982][T18791] delete_channel: no stack [ 927.674953][T18792] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4943'. [ 927.906539][T18802] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 927.916972][T18802] dvmrp1: linktype set to 768 [ 928.103114][T18806] netlink: 'syz.2.4962': attribute type 16 has an invalid length. [ 928.113065][T18806] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4962'. [ 929.804118][T18831] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4970'. [ 929.858863][T18833] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4958'. [ 929.869475][T18835] netlink: 'syz.2.4958': attribute type 12 has an invalid length. [ 929.877750][T18835] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4958'. [ 930.002904][T18839] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.4959'. [ 930.142517][T18837] delete_channel: no stack [ 930.321841][T18845] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4964'. [ 932.536396][T18869] validate_nla: 2 callbacks suppressed [ 932.536604][T18869] netlink: 'syz.2.4974': attribute type 16 has an invalid length. [ 932.552330][T18869] __nla_validate_parse: 2 callbacks suppressed [ 932.552389][T18869] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4974'. [ 932.581388][T18876] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4975'. [ 932.628801][T18878] netlink: 'syz.4.4975': attribute type 12 has an invalid length. [ 932.639124][T18878] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4975'. [ 932.828822][T18883] delete_channel: no stack [ 932.955992][T18894] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 933.187779][T18893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4978'. [ 933.211313][T18899] netlink: 'syz.2.4982': attribute type 16 has an invalid length. [ 933.219487][T18899] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4982'. [ 933.506043][T18901] netlink: 'syz.1.4983': attribute type 16 has an invalid length. [ 933.516116][T18901] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4983'. [ 933.651296][T18908] netlink: 'syz.2.4985': attribute type 16 has an invalid length. [ 933.675963][T18908] netlink: 156 bytes leftover after parsing attributes in process `syz.2.4985'. [ 934.059326][T18916] netlink: 'syz.3.4988': attribute type 16 has an invalid length. [ 934.086174][T18916] netlink: 156 bytes leftover after parsing attributes in process `syz.3.4988'. [ 934.121469][T18925] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 934.693234][T18938] delete_channel: no stack [ 934.716719][T18935] netlink: 'syz.3.5003': attribute type 16 has an invalid length. [ 934.729114][T18935] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5003'. [ 934.976389][T18947] netlink: 'syz.0.4998': attribute type 16 has an invalid length. [ 934.999131][T18947] netlink: 156 bytes leftover after parsing attributes in process `syz.0.4998'. [ 935.361460][T18954] netlink: 'syz.3.5002': attribute type 16 has an invalid length. [ 935.736620][T18965] delete_channel: no stack [ 935.812505][T18969] netlink: 'syz.4.5009': attribute type 16 has an invalid length. [ 936.726355][T18995] delete_channel: no stack [ 937.906695][T19026] delete_channel: no stack [ 937.944263][T19029] validate_nla: 7 callbacks suppressed [ 937.944300][T19029] netlink: 'syz.1.5036': attribute type 16 has an invalid length. [ 937.962958][T19029] __nla_validate_parse: 11 callbacks suppressed [ 937.963004][T19029] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5036'. [ 938.331528][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 938.337992][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.456707][T19048] netlink: 'syz.1.5043': attribute type 16 has an invalid length. [ 938.471142][T19048] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5043'. [ 938.576851][T19053] netlink: 'syz.2.5046': attribute type 16 has an invalid length. [ 938.615376][T19053] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5046'. [ 938.666108][T19056] netlink: 'syz.0.5047': attribute type 16 has an invalid length. [ 938.677144][T19056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5047'. [ 938.766569][T19057] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5045'. [ 938.991727][T19060] delete_channel: no stack [ 939.097975][T19062] netlink: 'syz.1.5058': attribute type 16 has an invalid length. [ 939.109393][T19062] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5058'. [ 939.433203][T19074] delete_channel: no stack [ 939.575146][T19079] netlink: 'syz.2.5052': attribute type 21 has an invalid length. [ 939.624953][T19079] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5052'. [ 939.670184][T19079] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5052'. [ 939.732700][T19084] netlink: 'syz.0.5054': attribute type 16 has an invalid length. [ 939.749296][T19084] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5054'. [ 940.068790][T19093] netlink: 'syz.4.5059': attribute type 16 has an invalid length. [ 940.087320][T19093] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5059'. [ 940.154876][T19096] netlink: 'syz.3.5060': attribute type 16 has an invalid length. [ 940.276608][T19099] netlink: 'syz.0.5062': attribute type 16 has an invalid length. [ 941.050962][T19111] delete_channel: no stack [ 943.553371][T19174] validate_nla: 7 callbacks suppressed [ 943.553654][T19174] netlink: 'syz.1.5088': attribute type 16 has an invalid length. [ 943.584072][T19174] __nla_validate_parse: 11 callbacks suppressed [ 943.584153][T19174] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5088'. [ 943.611203][T19175] netlink: 'syz.2.5087': attribute type 16 has an invalid length. [ 943.632838][T19175] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5087'. [ 943.741464][T19181] netlink: 'syz.0.5090': attribute type 16 has an invalid length. [ 943.761103][T19181] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5090'. [ 943.943046][T19185] netlink: 'syz.1.5091': attribute type 16 has an invalid length. [ 943.969054][T19185] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5091'. [ 945.212282][T19217] netlink: 'syz.0.5102': attribute type 16 has an invalid length. [ 945.229088][T19217] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5102'. [ 945.287061][T19221] netlink: 'syz.1.5106': attribute type 16 has an invalid length. [ 945.326974][T19221] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5106'. [ 945.340123][T19224] netlink: 'syz.2.5104': attribute type 16 has an invalid length. [ 945.368070][T19224] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5104'. [ 945.394442][T19222] netlink: 'syz.3.5103': attribute type 16 has an invalid length. [ 945.405570][T19222] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5103'. [ 945.860295][T19230] netlink: 'syz.0.5107': attribute type 2 has an invalid length. [ 946.974630][T19230] device .*! entered promiscuous mode [ 947.009505][T19244] netlink: 'syz.1.5111': attribute type 21 has an invalid length. [ 947.028951][T19244] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5111'. [ 947.038171][T19244] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5111'. [ 948.053343][T19283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 948.845976][T19309] __nla_validate_parse: 5 callbacks suppressed [ 948.846001][T19309] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5127'. [ 948.930688][T19305] validate_nla: 5 callbacks suppressed [ 948.930718][T19305] netlink: 'syz.2.5127': attribute type 2 has an invalid length. [ 949.247986][T19305] device .*! entered promiscuous mode [ 949.418996][T19311] netlink: 'syz.0.5133': attribute type 16 has an invalid length. [ 949.460522][T19311] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5133'. [ 950.036061][T19319] netlink: 'syz.1.5136': attribute type 16 has an invalid length. [ 950.088594][T19319] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5136'. [ 950.307424][T19324] netlink: 'syz.0.5137': attribute type 16 has an invalid length. [ 950.316651][T19324] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5137'. [ 951.496023][T19358] netlink: 'syz.2.5145': attribute type 16 has an invalid length. [ 951.507689][T19358] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5145'. [ 951.532171][T19359] netlink: 'syz.1.5147': attribute type 16 has an invalid length. [ 951.546935][T19359] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5147'. [ 951.971829][T19368] netlink: 'syz.0.5150': attribute type 16 has an invalid length. [ 951.984310][T19368] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5150'. [ 952.148415][T19372] netlink: 'syz.2.5152': attribute type 16 has an invalid length. [ 952.169221][T19372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5152'. [ 952.611931][T19380] netlink: 'syz.4.5155': attribute type 21 has an invalid length. [ 952.620071][T19380] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5155'. [ 952.629622][T19380] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5155'. [ 953.362321][T19398] netlink: 'syz.4.5162': attribute type 16 has an invalid length. [ 953.960249][T19405] validate_nla: 2 callbacks suppressed [ 953.960310][T19405] netlink: 'syz.4.5176': attribute type 16 has an invalid length. [ 954.036442][T19405] __nla_validate_parse: 3 callbacks suppressed [ 954.036555][T19405] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5176'. [ 954.549936][T19424] netlink: 'syz.4.5169': attribute type 21 has an invalid length. [ 954.558680][T19424] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5169'. [ 954.571395][T19424] netlink: 3 bytes leftover after parsing attributes in process `syz.4.5169'. [ 954.582173][T19425] netlink: 'syz.3.5168': attribute type 16 has an invalid length. [ 954.616326][T19425] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5168'. [ 954.950106][T19433] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5171'. [ 955.447107][T19433] netlink: 'syz.1.5171': attribute type 2 has an invalid length. [ 955.520968][T19433] device .*! entered promiscuous mode [ 955.715623][T19446] netlink: 'syz.0.5178': attribute type 16 has an invalid length. [ 955.799924][T19446] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5178'. [ 956.182858][T19451] netlink: 'syz.3.5179': attribute type 10 has an invalid length. [ 956.209098][T19451] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5179'. [ 956.243284][T19451] nr0: port 1(hsr0) entered disabled state [ 956.344063][T19453] netlink: 'syz.4.5181': attribute type 16 has an invalid length. [ 956.379220][T19453] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5181'. [ 956.720138][T19465] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 956.741349][T19465] nr0: port 1(hsr0) entered blocking state [ 956.747356][T19465] nr0: port 1(hsr0) entered forwarding state [ 956.820933][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): nr0: link becomes ready [ 957.031887][T19472] netlink: 'syz.1.5186': attribute type 16 has an invalid length. [ 957.058316][T19472] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5186'. [ 957.355239][ T4277] Bluetooth: hci0: unexpected subevent 0x1a length: 150 > 6 [ 957.519436][T19489] netlink: 'syz.2.5195': attribute type 16 has an invalid length. [ 957.528030][T19489] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5195'. [ 957.641880][T19485] netlink: 'syz.4.5193': attribute type 3 has an invalid length. [ 957.914655][T19502] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 959.369044][ T4277] Bluetooth: hci0: command 0x2067 tx timeout [ 959.628047][T19506] validate_nla: 1 callbacks suppressed [ 959.628093][T19506] netlink: 'syz.1.5202': attribute type 16 has an invalid length. [ 959.644544][T19506] __nla_validate_parse: 3 callbacks suppressed [ 959.644583][T19506] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5202'. [ 960.361633][T19526] netlink: 'syz.4.5207': attribute type 16 has an invalid length. [ 960.409805][T19526] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5207'. [ 960.961058][T19539] netlink: 'syz.2.5211': attribute type 2 has an invalid length. [ 961.451639][T19528] netlink: 'syz.0.5210': attribute type 3 has an invalid length. [ 961.509534][T19528] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.5210'. [ 963.486924][T19555] netlink: 'syz.1.5217': attribute type 16 has an invalid length. [ 963.511848][T19555] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5217'. [ 963.639572][T19558] netlink: 'syz.0.5226': attribute type 21 has an invalid length. [ 963.653190][T19558] netlink: 128 bytes leftover after parsing attributes in process `syz.0.5226'. [ 963.667293][T19558] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5226'. [ 963.956914][T19574] nr0: port 1(hsr0) entered blocking state [ 963.965871][T19574] nr0: port 1(hsr0) entered disabled state [ 963.998972][T19574] nr0: port 1(hsr0) entered blocking state [ 964.005623][T19574] nr0: port 1(hsr0) entered forwarding state [ 964.152353][T19577] netlink: 'syz.1.5223': attribute type 16 has an invalid length. [ 964.163183][T19577] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5223'. [ 964.176516][T19580] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 964.185128][T19580] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 964.647048][T19592] netlink: 'syz.3.5225': attribute type 3 has an invalid length. [ 964.740018][T19592] netlink: 105116 bytes leftover after parsing attributes in process `syz.3.5225'. [ 965.207230][T19597] netlink: 'syz.4.5231': attribute type 39 has an invalid length. [ 965.305211][T19598] netlink: 'syz.1.5230': attribute type 16 has an invalid length. [ 965.313844][T19598] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5230'. [ 965.689686][T19601] netlink: 'syz.1.5242': attribute type 16 has an invalid length. [ 965.707008][T19601] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5242'. [ 966.328666][T19617] netlink: 'syz.1.5237': attribute type 21 has an invalid length. [ 966.339037][T19617] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5237'. [ 966.361001][T19617] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5237'. [ 966.564099][T19625] netlink: 'syz.0.5240': attribute type 16 has an invalid length. [ 966.575289][T19625] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5240'. [ 966.608274][T19628] netlink: 'syz.3.5253': attribute type 21 has an invalid length. [ 966.618185][T19628] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5253'. [ 966.644039][T19628] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5253'. [ 966.815553][T19635] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 966.822396][T19635] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 966.942131][T19638] netlink: 'syz.0.5245': attribute type 16 has an invalid length. [ 967.009667][T19638] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5245'. [ 967.101542][T19639] netlink: 'syz.4.5246': attribute type 10 has an invalid length. [ 967.111183][T19639] netlink: 2 bytes leftover after parsing attributes in process `syz.4.5246'. [ 967.128669][T19639] nr0: port 1(hsr0) entered disabled state [ 967.390118][T19633] netlink: 'syz.1.5243': attribute type 3 has an invalid length. [ 968.922268][T19679] nr0: port 1(hsr0) entered disabled state [ 969.617019][T19696] nr0: port 1(hsr0) entered blocking state [ 969.630979][T19696] nr0: port 1(hsr0) entered disabled state [ 970.055430][T19707] validate_nla: 5 callbacks suppressed [ 970.055470][T19707] netlink: 'syz.1.5272': attribute type 16 has an invalid length. [ 970.070217][T19707] __nla_validate_parse: 4 callbacks suppressed [ 970.070303][T19707] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5272'. [ 970.131711][T19711] netlink: 'syz.4.5274': attribute type 16 has an invalid length. [ 970.143266][T19711] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5274'. [ 970.315297][T19716] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 970.322175][T19716] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 970.642116][T19725] netlink: 'syz.2.5278': attribute type 10 has an invalid length. [ 970.655143][T19725] netlink: 2 bytes leftover after parsing attributes in process `syz.2.5278'. [ 970.669034][T19725] nr0: port 1(hsr0) entered disabled state [ 971.263697][T19748] netlink: 'syz.2.5287': attribute type 16 has an invalid length. [ 971.272265][T19748] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5287'. [ 971.300617][T19750] netlink: 'syz.1.5288': attribute type 16 has an invalid length. [ 971.309863][T19750] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5288'. [ 972.215069][T19778] netlink: 'syz.4.5299': attribute type 16 has an invalid length. [ 972.228333][T19778] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5299'. [ 972.348007][T19780] netlink: 'syz.2.5300': attribute type 16 has an invalid length. [ 972.361726][T19780] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5300'. [ 974.422748][T19802] nr0: port 1(hsr0) entered blocking state [ 974.443639][T19802] nr0: port 1(hsr0) entered disabled state [ 974.479820][T19802] nr0: port 1(hsr0) entered blocking state [ 974.485858][T19802] nr0: port 1(hsr0) entered forwarding state [ 974.752573][T19815] delete_channel: no stack [ 974.886056][T19821] netlink: 'syz.0.5314': attribute type 16 has an invalid length. [ 974.905616][T19821] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5314'. [ 975.195067][T19828] netlink: 'syz.1.5317': attribute type 10 has an invalid length. [ 975.203951][T19828] netlink: 2 bytes leftover after parsing attributes in process `syz.1.5317'. [ 975.217638][T19828] nr0: port 1(hsr0) entered disabled state [ 975.807359][T19844] netlink: 'syz.0.5320': attribute type 2 has an invalid length. [ 976.162353][T19848] nr0: port 1(hsr0) entered blocking state [ 976.191039][T19848] nr0: port 1(hsr0) entered disabled state [ 976.236672][T19848] nr0: port 1(hsr0) entered blocking state [ 976.243142][T19848] nr0: port 1(hsr0) entered forwarding state [ 976.655769][T19863] delete_channel: no stack [ 976.843765][T19872] netlink: 'syz.0.5331': attribute type 16 has an invalid length. [ 976.864986][T19872] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5331'. [ 977.300682][T19883] netlink: 'syz.1.5336': attribute type 16 has an invalid length. [ 977.320083][T19883] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5336'. [ 977.964430][T19895] netlink: 'syz.1.5350': attribute type 16 has an invalid length. [ 977.989341][T19895] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5350'. [ 978.154035][T19900] netlink: 'syz.3.5343': attribute type 10 has an invalid length. [ 978.175851][T19900] netlink: 2 bytes leftover after parsing attributes in process `syz.3.5343'. [ 978.191750][T19900] nr0: port 1(hsr0) entered disabled state [ 978.271232][T19906] netlink: 'syz.0.5345': attribute type 16 has an invalid length. [ 978.280618][T19906] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5345'. [ 978.635177][T19915] netlink: 'syz.4.5346': attribute type 2 has an invalid length. [ 978.877807][T19915] device .*! entered promiscuous mode [ 979.907373][T19937] nr0: port 1(hsr0) entered blocking state [ 979.915127][T19937] nr0: port 1(hsr0) entered disabled state [ 979.984912][T19937] nr0: port 1(hsr0) entered blocking state [ 979.991994][T19937] nr0: port 1(hsr0) entered forwarding state [ 980.205874][T19945] netlink: 'syz.0.5358': attribute type 16 has an invalid length. [ 980.226976][T19945] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5358'. [ 980.344175][T19951] netlink: 'syz.4.5361': attribute type 16 has an invalid length. [ 980.363332][T19951] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5361'. [ 981.190762][T19966] delete_channel: no stack [ 981.916199][T19979] nr0: port 1(hsr0) entered blocking state [ 981.940350][T19979] nr0: port 1(hsr0) entered disabled state [ 982.105869][T19979] nr0: port 1(hsr0) entered blocking state [ 982.115199][T19979] nr0: port 1(hsr0) entered forwarding state [ 982.370881][T19991] netlink: 'syz.0.5376': attribute type 16 has an invalid length. [ 982.389379][T19991] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5376'. [ 982.932618][T20005] netlink: 'syz.2.5380': attribute type 16 has an invalid length. [ 982.943344][T20005] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5380'. [ 984.764265][T20037] IPv6: …: Disabled Multicast RS [ 985.180571][T20045] netlink: 'syz.3.5397': attribute type 16 has an invalid length. [ 985.194383][T20045] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5397'. [ 985.237665][T20048] netlink: 'syz.4.5398': attribute type 16 has an invalid length. [ 985.301712][T20048] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5398'. [ 985.576554][T20056] netlink: 'syz.0.5400': attribute type 16 has an invalid length. [ 985.588736][T20056] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5400'. [ 987.420341][T20090] netlink: 'syz.4.5412': attribute type 16 has an invalid length. [ 987.437635][T20090] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5412'. [ 987.736756][T20096] netlink: 'syz.2.5414': attribute type 16 has an invalid length. [ 987.757530][T20096] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5414'. [ 989.278999][T20133] netlink: 'syz.4.5427': attribute type 16 has an invalid length. [ 989.287497][T20133] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5427'. [ 989.357403][T20136] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 989.364869][T20136] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 990.729142][T20165] netlink: 'syz.3.5436': attribute type 16 has an invalid length. [ 990.807665][T20165] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5436'. [ 991.282855][T20176] IPv6: …: Disabled Multicast RS [ 991.438045][T20183] netlink: 'syz.1.5444': attribute type 16 has an invalid length. [ 991.467627][T20183] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5444'. [ 992.384798][T20204] netlink: 'syz.1.5453': attribute type 16 has an invalid length. [ 992.393536][T20204] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5453'. [ 992.660398][T20210] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.5456'. [ 992.961368][T20221] netlink: 'syz.3.5459': attribute type 16 has an invalid length. [ 992.989130][T20221] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5459'. [ 993.964143][T20231] IPv6: …: Disabled Multicast RS [ 994.234524][T20244] netlink: 'syz.4.5468': attribute type 16 has an invalid length. [ 994.259366][T20244] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5468'. [ 994.641954][T20253] netlink: 'syz.2.5472': attribute type 16 has an invalid length. [ 994.672104][T20253] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5472'. [ 995.466443][T20284] netlink: 'syz.1.5483': attribute type 16 has an invalid length. [ 995.498849][T20284] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5483'. [ 995.836741][T20293] netlink: 'syz.1.5487': attribute type 16 has an invalid length. [ 995.909084][T20293] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5487'. [ 996.019842][T20299] IPv6: …: Disabled Multicast RS [ 996.632885][T20319] netlink: 'syz.3.5497': attribute type 16 has an invalid length. [ 996.668124][T20319] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5497'. [ 997.024227][T20335] netlink: 'syz.3.5503': attribute type 16 has an invalid length. [ 997.043541][T20335] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5503'. [ 997.702609][T20355] netlink: 'syz.0.5513': attribute type 16 has an invalid length. [ 997.722727][T20355] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5513'. [ 998.023849][T20363] netlink: 'syz.3.5516': attribute type 16 has an invalid length. [ 998.112895][T20363] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5516'. [ 998.193445][T20370] netlink: 'syz.2.5520': attribute type 16 has an invalid length. [ 998.238896][T20370] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5520'. [ 999.036678][T20391] netlink: 'syz.0.5526': attribute type 16 has an invalid length. [ 999.070960][T20391] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5526'. [ 999.271006][T20399] netlink: 'syz.2.5529': attribute type 16 has an invalid length. [ 999.299196][T20399] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5529'. [ 999.347324][T20401] netlink: 152 bytes leftover after parsing attributes in process `syz.4.5530'. [ 999.773410][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 999.779904][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1000.802901][T20432] netlink: 'syz.2.5541': attribute type 39 has an invalid length. [ 1002.142085][T20464] netlink: 'syz.0.5552': attribute type 16 has an invalid length. [ 1002.153398][T20464] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5552'. [ 1002.325442][T20470] netlink: 'syz.3.5553': attribute type 16 has an invalid length. [ 1002.335314][T20470] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5553'. [ 1002.507595][T20474] netlink: 'syz.0.5555': attribute type 16 has an invalid length. [ 1002.519584][T20474] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5555'. [ 1003.263299][T20496] netlink: 'syz.1.5564': attribute type 16 has an invalid length. [ 1003.290933][T20496] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5564'. [ 1003.495239][T20501] netlink: 'syz.4.5566': attribute type 16 has an invalid length. [ 1003.507489][T20501] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5566'. [ 1003.653335][T20505] netlink: 'syz.0.5568': attribute type 16 has an invalid length. [ 1003.679373][T20505] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5568'. [ 1004.755132][T20540] netlink: 'syz.0.5580': attribute type 16 has an invalid length. [ 1004.789392][T20540] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5580'. [ 1004.812540][T20542] netlink: 'syz.1.5581': attribute type 16 has an invalid length. [ 1004.831095][T20542] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5581'. [ 1004.924857][T20549] netlink: 'syz.3.5583': attribute type 16 has an invalid length. [ 1004.935036][T20549] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5583'. [ 1004.976331][T20550] netlink: 'syz.2.5584': attribute type 16 has an invalid length. [ 1004.996986][T20550] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5584'. [ 1007.274725][T20618] validate_nla: 4 callbacks suppressed [ 1007.274874][T20618] netlink: 'syz.1.5610': attribute type 16 has an invalid length. [ 1007.341709][T20618] __nla_validate_parse: 4 callbacks suppressed [ 1007.342055][T20618] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5610'. [ 1007.395092][T20621] netlink: 'syz.2.5611': attribute type 16 has an invalid length. [ 1007.404815][T20621] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5611'. [ 1007.740850][T20629] netlink: 'syz.1.5614': attribute type 16 has an invalid length. [ 1007.753874][T20629] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5614'. [ 1007.822756][T20630] netlink: 'syz.4.5613': attribute type 16 has an invalid length. [ 1007.867887][T20630] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5613'. [ 1008.587312][T20658] netlink: 'syz.4.5624': attribute type 16 has an invalid length. [ 1008.599731][T20658] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5624'. [ 1008.725597][T20662] netlink: 'syz.0.5625': attribute type 16 has an invalid length. [ 1008.748972][T20662] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5625'. [ 1008.950971][T20670] netlink: 'syz.4.5628': attribute type 16 has an invalid length. [ 1008.969298][T20670] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5628'. [ 1009.145791][T20673] netlink: 'syz.2.5630': attribute type 16 has an invalid length. [ 1009.158979][T20673] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5630'. [ 1009.891896][T20698] netlink: 'syz.4.5638': attribute type 16 has an invalid length. [ 1009.949189][T20698] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5638'. [ 1010.097849][T20706] netlink: 'syz.1.5641': attribute type 16 has an invalid length. [ 1010.117179][T20706] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5641'. [ 1013.231698][T20765] validate_nla: 4 callbacks suppressed [ 1013.231858][T20765] netlink: 'syz.0.5663': attribute type 16 has an invalid length. [ 1013.255310][T20765] __nla_validate_parse: 4 callbacks suppressed [ 1013.255368][T20765] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5663'. [ 1013.298109][T20763] netlink: 'syz.4.5661': attribute type 16 has an invalid length. [ 1013.319512][T20763] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5661'. [ 1014.181623][T20786] netlink: 'syz.3.5668': attribute type 16 has an invalid length. [ 1014.293606][T20786] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5668'. [ 1014.348539][T20785] netlink: 'syz.4.5669': attribute type 16 has an invalid length. [ 1014.384244][T20785] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5669'. [ 1015.653953][T20812] netlink: 'syz.2.5677': attribute type 16 has an invalid length. [ 1015.674619][T20812] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5677'. [ 1015.729829][T20814] netlink: 'syz.0.5679': attribute type 16 has an invalid length. [ 1015.799238][T20814] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5679'. [ 1016.291226][T20826] netlink: 'syz.3.5681': attribute type 16 has an invalid length. [ 1016.316802][T20826] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5681'. [ 1016.954986][T20839] netlink: 'syz.4.5686': attribute type 16 has an invalid length. [ 1016.974219][T20839] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5686'. [ 1017.877004][T20858] netlink: 'syz.1.5693': attribute type 16 has an invalid length. [ 1017.912377][T20858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5693'. [ 1017.985990][T20856] netlink: 'syz.3.5692': attribute type 16 has an invalid length. [ 1018.069596][T20856] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5692'. [ 1018.661527][T20879] validate_nla: 1 callbacks suppressed [ 1018.661702][T20879] netlink: 'syz.2.5701': attribute type 16 has an invalid length. [ 1018.725944][T20879] __nla_validate_parse: 1 callbacks suppressed [ 1018.726070][T20879] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5701'. [ 1019.542944][T20896] netlink: 'syz.3.5707': attribute type 16 has an invalid length. [ 1019.580847][T20896] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5707'. [ 1019.744929][T20903] netlink: 'syz.2.5710': attribute type 16 has an invalid length. [ 1019.776776][T20903] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5710'. [ 1020.153732][T20911] netlink: 'syz.4.5711': attribute type 16 has an invalid length. [ 1020.179092][T20911] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5711'. [ 1020.319467][T20915] netlink: 'syz.2.5714': attribute type 16 has an invalid length. [ 1020.350003][T20915] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5714'. [ 1021.448042][T20944] netlink: 'syz.1.5724': attribute type 16 has an invalid length. [ 1021.482875][T20944] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5724'. [ 1021.517318][T20945] netlink: 'syz.2.5723': attribute type 16 has an invalid length. [ 1021.539977][T20945] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5723'. [ 1022.186018][T20965] netlink: 'syz.3.5729': attribute type 16 has an invalid length. [ 1022.194680][T20965] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5729'. [ 1022.209862][T20959] netlink: 'syz.1.5727': attribute type 16 has an invalid length. [ 1022.223133][T20959] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5727'. [ 1023.081146][T20985] netlink: 'syz.3.5737': attribute type 16 has an invalid length. [ 1023.121813][T20985] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5737'. [ 1024.201458][T21023] validate_nla: 3 callbacks suppressed [ 1024.201565][T21023] netlink: 'syz.1.5753': attribute type 16 has an invalid length. [ 1024.240049][T21023] __nla_validate_parse: 3 callbacks suppressed [ 1024.240088][T21023] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5753'. [ 1024.297383][T21026] netlink: 'syz.4.5754': attribute type 16 has an invalid length. [ 1024.335285][T21026] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5754'. [ 1024.434496][T21035] netlink: 'syz.3.5756': attribute type 16 has an invalid length. [ 1024.444331][T21035] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5756'. [ 1024.526248][T21037] netlink: 'syz.0.5757': attribute type 16 has an invalid length. [ 1024.553347][T21037] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5757'. [ 1025.354618][T21066] netlink: 'syz.4.5769': attribute type 16 has an invalid length. [ 1025.396860][T21066] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5769'. [ 1025.432851][T21069] netlink: 'syz.3.5768': attribute type 16 has an invalid length. [ 1025.444464][T21069] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5768'. [ 1025.699703][T21076] netlink: 'syz.0.5771': attribute type 16 has an invalid length. [ 1025.721157][T21076] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5771'. [ 1025.771348][T21078] netlink: 'syz.4.5773': attribute type 16 has an invalid length. [ 1025.807924][T21078] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5773'. [ 1026.346537][T21100] netlink: 'syz.1.5783': attribute type 16 has an invalid length. [ 1026.382994][T21100] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5783'. [ 1026.405465][T21098] netlink: 'syz.0.5782': attribute type 16 has an invalid length. [ 1026.429630][T21098] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5782'. [ 1029.328211][T21212] validate_nla: 10 callbacks suppressed [ 1029.328236][T21212] netlink: 'syz.3.5828': attribute type 16 has an invalid length. [ 1029.488847][T21212] __nla_validate_parse: 10 callbacks suppressed [ 1029.488871][T21212] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5828'. [ 1029.549566][T21211] netlink: 'syz.1.5829': attribute type 16 has an invalid length. [ 1029.558025][T21211] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5829'. [ 1029.586303][T21214] netlink: 'syz.2.5830': attribute type 16 has an invalid length. [ 1029.604045][T21214] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5830'. [ 1029.761080][T21221] netlink: 'syz.4.5832': attribute type 16 has an invalid length. [ 1029.789855][T21221] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5832'. [ 1030.463628][T21247] netlink: 'syz.0.5843': attribute type 16 has an invalid length. [ 1030.474598][T21247] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1030.587051][T21252] netlink: 'syz.1.5844': attribute type 16 has an invalid length. [ 1030.619288][T21252] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5844'. [ 1030.641193][T21254] netlink: 'syz.2.5845': attribute type 16 has an invalid length. [ 1030.689068][T21254] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5845'. [ 1030.877716][T21263] netlink: 'syz.4.5848': attribute type 16 has an invalid length. [ 1030.902901][T21263] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5848'. [ 1031.252942][T21278] netlink: 'syz.3.5857': attribute type 16 has an invalid length. [ 1031.274146][T21278] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5857'. [ 1031.647146][T21291] netlink: 'syz.3.5860': attribute type 16 has an invalid length. [ 1031.667635][T21291] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5860'. [ 1034.533176][T21393] validate_nla: 11 callbacks suppressed [ 1034.533217][T21393] netlink: 'syz.3.5903': attribute type 16 has an invalid length. [ 1034.569462][T21393] __nla_validate_parse: 11 callbacks suppressed [ 1034.569506][T21393] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5903'. [ 1034.737551][T21398] netlink: 'syz.2.5905': attribute type 16 has an invalid length. [ 1034.750427][T21398] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5905'. [ 1034.979454][T21408] netlink: 'syz.0.5909': attribute type 16 has an invalid length. [ 1035.048989][T21408] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5909'. [ 1035.441051][T21421] netlink: 'syz.1.5915': attribute type 16 has an invalid length. [ 1035.459503][T21421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5915'. [ 1035.599380][T21425] netlink: 'syz.0.5917': attribute type 16 has an invalid length. [ 1035.607692][T21425] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5917'. [ 1035.772952][T21435] netlink: 'syz.1.5920': attribute type 16 has an invalid length. [ 1035.820212][T21435] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5920'. [ 1036.093802][T21444] netlink: 'syz.0.5923': attribute type 16 has an invalid length. [ 1036.122337][T21444] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5923'. [ 1036.936815][T21467] netlink: 'syz.2.5933': attribute type 16 has an invalid length. [ 1036.945794][T21467] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5933'. [ 1036.964937][T21462] netlink: 'syz.4.5930': attribute type 16 has an invalid length. [ 1036.999025][T21462] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5930'. [ 1037.152275][T21473] netlink: 'syz.1.5935': attribute type 16 has an invalid length. [ 1037.176392][T21473] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5935'. [ 1039.545302][T21541] validate_nla: 6 callbacks suppressed [ 1039.545329][T21541] netlink: 'syz.2.5962': attribute type 16 has an invalid length. [ 1039.699483][T21544] netlink: 'syz.1.5964': attribute type 16 has an invalid length. [ 1039.707434][T21544] __nla_validate_parse: 7 callbacks suppressed [ 1039.707454][T21544] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5964'. [ 1039.890179][T21552] netlink: 'syz.3.5968': attribute type 16 has an invalid length. [ 1039.905726][T21552] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5968'. [ 1040.342128][T21569] netlink: 'syz.4.5976': attribute type 16 has an invalid length. [ 1040.361026][T21569] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5976'. [ 1040.708389][T21580] netlink: 'syz.1.5979': attribute type 16 has an invalid length. [ 1040.733151][T21580] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5979'. [ 1040.858241][T21584] netlink: 'syz.4.5981': attribute type 16 has an invalid length. [ 1040.877252][T21584] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5981'. [ 1041.080041][T21590] netlink: 'syz.0.5983': attribute type 16 has an invalid length. [ 1041.094253][T21590] netlink: 156 bytes leftover after parsing attributes in process `syz.0.5983'. [ 1041.797791][T21620] netlink: 'syz.2.5994': attribute type 16 has an invalid length. [ 1041.906597][T21620] netlink: 156 bytes leftover after parsing attributes in process `syz.2.5994'. [ 1041.944857][T21623] netlink: 'syz.4.5997': attribute type 16 has an invalid length. [ 1041.956067][T21623] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5997'. [ 1041.968162][T21617] netlink: 'syz.3.5995': attribute type 16 has an invalid length. [ 1041.988999][T21617] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5995'. [ 1042.195534][T21631] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5998'. [ 1045.135445][T21726] validate_nla: 9 callbacks suppressed [ 1045.135534][T21726] netlink: 'syz.4.6039': attribute type 16 has an invalid length. [ 1045.204834][T21726] __nla_validate_parse: 8 callbacks suppressed [ 1045.204924][T21726] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6039'. [ 1045.456136][T21732] netlink: 'syz.0.6042': attribute type 16 has an invalid length. [ 1045.476473][T21732] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6042'. [ 1045.538366][T21734] netlink: 'syz.4.6041': attribute type 16 has an invalid length. [ 1045.558926][T21734] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6041'. [ 1045.739594][T21738] netlink: 'syz.3.6044': attribute type 16 has an invalid length. [ 1045.758449][T21738] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6044'. [ 1046.108163][T21754] netlink: 'syz.2.6051': attribute type 16 has an invalid length. [ 1046.128001][T21754] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6051'. [ 1046.394358][T21762] netlink: 'syz.0.6055': attribute type 16 has an invalid length. [ 1046.432316][T21762] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6055'. [ 1046.477965][T21767] netlink: 'syz.4.6056': attribute type 16 has an invalid length. [ 1046.486926][T21767] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6056'. [ 1046.775474][T21777] netlink: 'syz.4.6060': attribute type 16 has an invalid length. [ 1046.785629][T21777] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6060'. [ 1046.972198][T21785] netlink: 'syz.4.6064': attribute type 16 has an invalid length. [ 1046.989617][T21785] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6064'. [ 1047.472761][T21797] netlink: 'syz.0.6069': attribute type 16 has an invalid length. [ 1047.509026][T21797] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6069'. [ 1050.326713][T21896] validate_nla: 12 callbacks suppressed [ 1050.326781][T21896] netlink: 'syz.4.6114': attribute type 16 has an invalid length. [ 1050.373621][T21896] __nla_validate_parse: 12 callbacks suppressed [ 1050.373684][T21896] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6114'. [ 1050.594738][T21907] netlink: 'syz.4.6120': attribute type 16 has an invalid length. [ 1050.616504][T21907] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6120'. [ 1050.850568][T21916] netlink: 'syz.4.6124': attribute type 16 has an invalid length. [ 1050.870385][T21916] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6124'. [ 1051.302329][T21929] netlink: 'syz.0.6129': attribute type 16 has an invalid length. [ 1051.325159][T21929] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6129'. [ 1051.368103][T21936] netlink: 'syz.3.6131': attribute type 16 has an invalid length. [ 1051.378043][T21936] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6131'. [ 1051.628018][T21944] netlink: 'syz.0.6134': attribute type 16 has an invalid length. [ 1051.641728][T21944] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6134'. [ 1051.877984][T21954] netlink: 'syz.3.6140': attribute type 16 has an invalid length. [ 1051.965940][T21954] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6140'. [ 1052.203992][T21964] netlink: 'syz.2.6144': attribute type 16 has an invalid length. [ 1052.229014][T21964] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6144'. [ 1052.317510][T21968] netlink: 'syz.4.6145': attribute type 16 has an invalid length. [ 1052.339859][T21968] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6145'. [ 1052.505759][T21978] netlink: 'syz.2.6149': attribute type 16 has an invalid length. [ 1052.523070][T21978] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6149'. [ 1055.431685][T22070] validate_nla: 11 callbacks suppressed [ 1055.431769][T22070] netlink: 'syz.3.6191': attribute type 16 has an invalid length. [ 1055.487976][T22070] __nla_validate_parse: 11 callbacks suppressed [ 1055.488036][T22070] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6191'. [ 1056.040907][T22093] netlink: 'syz.1.6202': attribute type 16 has an invalid length. [ 1056.052555][T22093] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6202'. [ 1056.135201][T22095] netlink: 'syz.2.6201': attribute type 16 has an invalid length. [ 1056.154253][T22095] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6201'. [ 1056.191121][T22097] netlink: 'syz.4.6203': attribute type 16 has an invalid length. [ 1056.209976][T22097] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6203'. [ 1056.275946][T22102] netlink: 'syz.3.6205': attribute type 39 has an invalid length. [ 1056.603180][T22110] netlink: 'syz.2.6207': attribute type 16 has an invalid length. [ 1056.626398][T22110] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1057.131341][T22127] netlink: 'syz.0.6216': attribute type 16 has an invalid length. [ 1057.162135][T22127] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6216'. [ 1057.174456][T22129] netlink: 'syz.1.6217': attribute type 16 has an invalid length. [ 1057.190850][T22129] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6217'. [ 1057.238807][T22132] netlink: 'syz.2.6218': attribute type 16 has an invalid length. [ 1057.257797][T22132] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6218'. [ 1057.482650][T22143] netlink: 'syz.4.6222': attribute type 16 has an invalid length. [ 1057.494958][T22143] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6222'. [ 1057.802515][T22149] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6234'. [ 1060.697730][T22243] validate_nla: 14 callbacks suppressed [ 1060.697788][T22243] netlink: 'syz.4.6269': attribute type 16 has an invalid length. [ 1060.730027][T22243] __nla_validate_parse: 11 callbacks suppressed [ 1060.730145][T22243] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6269'. [ 1060.950961][T22253] netlink: 'syz.0.6272': attribute type 16 has an invalid length. [ 1060.979166][T22253] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6272'. [ 1061.044015][T22257] netlink: 'syz.2.6275': attribute type 39 has an invalid length. [ 1061.198734][T22262] netlink: 'syz.1.6277': attribute type 16 has an invalid length. [ 1061.212398][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.218837][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.232349][T22262] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6277'. [ 1061.283793][T22263] netlink: 'syz.3.6278': attribute type 16 has an invalid length. [ 1061.308992][T22263] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6278'. [ 1061.711265][T22279] netlink: 'syz.4.6286': attribute type 16 has an invalid length. [ 1061.735788][T22279] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6286'. [ 1061.970894][T22289] netlink: 'syz.1.6289': attribute type 16 has an invalid length. [ 1061.986066][T22289] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6289'. [ 1062.059122][T22293] netlink: 'syz.3.6291': attribute type 39 has an invalid length. [ 1062.162062][T22297] netlink: 'syz.4.6292': attribute type 16 has an invalid length. [ 1062.170933][T22297] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6292'. [ 1062.250351][T22299] netlink: 'syz.1.6294': attribute type 16 has an invalid length. [ 1062.259279][T22299] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6294'. [ 1062.683932][T22311] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6300'. [ 1062.778435][T22317] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6303'. [ 1066.102455][T22435] validate_nla: 19 callbacks suppressed [ 1066.102484][T22435] netlink: 'syz.2.6361': attribute type 39 has an invalid length. [ 1066.235401][T22441] netlink: 'syz.0.6364': attribute type 16 has an invalid length. [ 1066.244271][T22441] __nla_validate_parse: 14 callbacks suppressed [ 1066.244314][T22441] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6364'. [ 1066.288615][T22440] netlink: 'syz.3.6363': attribute type 16 has an invalid length. [ 1066.330380][T22440] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6363'. [ 1066.426937][T22446] netlink: 'syz.4.6366': attribute type 16 has an invalid length. [ 1066.435503][T22446] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6366'. [ 1066.637213][T22451] netlink: 'syz.3.6367': attribute type 16 has an invalid length. [ 1066.657122][T22451] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6367'. [ 1067.636714][T22472] netlink: 'syz.0.6377': attribute type 16 has an invalid length. [ 1067.661557][T22472] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6377'. [ 1067.749992][T22476] netlink: 'syz.3.6379': attribute type 16 has an invalid length. [ 1067.769077][T22476] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6379'. [ 1067.789723][T22475] netlink: 'syz.2.6380': attribute type 16 has an invalid length. [ 1067.798316][T22475] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6380'. [ 1068.078546][T22482] netlink: 'syz.2.6384': attribute type 16 has an invalid length. [ 1068.112496][T22482] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6384'. [ 1068.358656][T22496] netlink: 'syz.2.6390': attribute type 39 has an invalid length. [ 1068.554979][T22502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6392'. [ 1068.605381][T22500] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6393'. [ 1071.167136][T22598] validate_nla: 15 callbacks suppressed [ 1071.167172][T22598] netlink: 'syz.1.6439': attribute type 39 has an invalid length. [ 1071.298123][T22602] netlink: 'syz.0.6441': attribute type 16 has an invalid length. [ 1071.306975][T22602] __nla_validate_parse: 11 callbacks suppressed [ 1071.307013][T22602] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6441'. [ 1071.466299][T22606] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1071.474200][T22606] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1071.555800][T22610] netlink: 'syz.4.6445': attribute type 16 has an invalid length. [ 1071.584703][T22610] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6445'. [ 1071.980472][T22624] netlink: 'syz.3.6451': attribute type 16 has an invalid length. [ 1072.008930][T22624] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6451'. [ 1072.422500][T22636] netlink: 'syz.0.6457': attribute type 16 has an invalid length. [ 1072.540317][T22636] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6457'. [ 1072.652056][T22644] netlink: 'syz.4.6460': attribute type 16 has an invalid length. [ 1072.669842][T22644] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1073.791191][T22657] netlink: 'syz.4.6466': attribute type 16 has an invalid length. [ 1073.808837][T22657] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6466'. [ 1074.285799][T22671] netlink: 'syz.1.6473': attribute type 39 has an invalid length. [ 1074.355176][T22673] netlink: 'syz.0.6474': attribute type 16 has an invalid length. [ 1074.375962][T22673] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6474'. [ 1074.457477][T22675] netlink: 'syz.4.6476': attribute type 16 has an invalid length. [ 1074.515793][T22675] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6476'. [ 1075.134373][T22686] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6479'. [ 1075.191231][T22690] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6482'. [ 1076.284929][T22720] validate_nla: 3 callbacks suppressed [ 1076.284976][T22720] netlink: 'syz.1.6492': attribute type 16 has an invalid length. [ 1076.343064][T22720] __nla_validate_parse: 1 callbacks suppressed [ 1076.343133][T22720] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6492'. [ 1076.527227][T22728] netlink: 'syz.4.6496': attribute type 16 has an invalid length. [ 1076.541032][T22728] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6496'. [ 1076.945194][T22744] netlink: 'syz.3.6503': attribute type 39 has an invalid length. [ 1077.050813][T22749] netlink: 'syz.0.6504': attribute type 16 has an invalid length. [ 1077.061437][T22749] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6504'. [ 1077.445665][T22760] netlink: 'syz.2.6511': attribute type 16 has an invalid length. [ 1077.465778][T22760] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6511'. [ 1077.507957][T22764] netlink: 'syz.1.6512': attribute type 16 has an invalid length. [ 1077.546776][T22764] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6512'. [ 1077.975958][T22780] netlink: 'syz.2.6519': attribute type 16 has an invalid length. [ 1077.994945][T22780] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6519'. [ 1078.329781][T22796] netlink: 'syz.2.6525': attribute type 16 has an invalid length. [ 1078.338344][T22796] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6525'. [ 1078.482985][T22802] netlink: 'syz.1.6528': attribute type 39 has an invalid length. [ 1078.615299][T22804] netlink: 'syz.4.6529': attribute type 16 has an invalid length. [ 1078.624484][T22804] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6529'. [ 1078.979702][T22816] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6535'. [ 1079.320709][T22832] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6542'. [ 1081.760912][T22912] validate_nla: 11 callbacks suppressed [ 1081.760950][T22912] netlink: 'syz.1.6582': attribute type 16 has an invalid length. [ 1081.782762][T22912] __nla_validate_parse: 7 callbacks suppressed [ 1081.782800][T22912] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6582'. [ 1081.927557][T22920] netlink: 'syz.0.6585': attribute type 39 has an invalid length. [ 1081.947483][T22922] netlink: 'syz.2.6586': attribute type 16 has an invalid length. [ 1081.959446][T22922] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6586'. [ 1082.174389][T22926] netlink: 'syz.3.6589': attribute type 16 has an invalid length. [ 1082.183502][T22926] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6589'. [ 1082.325851][T22934] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1082.332866][T22934] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1082.731742][T22948] netlink: 'syz.3.6599': attribute type 16 has an invalid length. [ 1082.758868][T22948] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6599'. [ 1082.834712][T22950] netlink: 'syz.1.6601': attribute type 16 has an invalid length. [ 1082.846672][T22950] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6601'. [ 1083.072518][T22959] netlink: 'syz.0.6605': attribute type 16 has an invalid length. [ 1083.092959][T22959] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6605'. [ 1083.190571][T22962] netlink: 'syz.1.6607': attribute type 39 has an invalid length. [ 1083.547603][T22976] netlink: 'syz.0.6614': attribute type 16 has an invalid length. [ 1083.572831][T22976] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6614'. [ 1083.803260][T22988] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1083.810984][T22988] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1083.839876][T22985] netlink: 'syz.2.6618': attribute type 16 has an invalid length. [ 1083.848495][T22985] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6618'. [ 1084.033055][T22991] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6620'. [ 1084.288280][T23004] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6627'. [ 1084.753735][T23022] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1084.760891][T23022] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1086.781052][T23064] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1086.788297][T23064] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1086.851667][T23068] validate_nla: 8 callbacks suppressed [ 1086.851710][T23068] netlink: 'syz.0.6658': attribute type 16 has an invalid length. [ 1086.866328][T23068] __nla_validate_parse: 4 callbacks suppressed [ 1086.866364][T23068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6658'. [ 1086.921302][T23070] netlink: 'syz.2.6657': attribute type 16 has an invalid length. [ 1086.956896][T23070] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6657'. [ 1087.409299][T23088] netlink: 'syz.2.6666': attribute type 39 has an invalid length. [ 1087.577384][T23096] netlink: 'syz.0.6667': attribute type 16 has an invalid length. [ 1087.585884][T23096] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6667'. [ 1088.651768][T23104] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1088.659350][T23104] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1088.732437][T23109] netlink: 'syz.2.6673': attribute type 16 has an invalid length. [ 1088.749825][T23109] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6673'. [ 1089.230032][T23115] netlink: 'syz.2.6677': attribute type 16 has an invalid length. [ 1089.263596][T23115] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6677'. [ 1089.732117][T23127] netlink: 'syz.2.6680': attribute type 16 has an invalid length. [ 1089.750361][T23127] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6680'. [ 1089.905836][T23133] netlink: 134056 bytes leftover after parsing attributes in process `syz.3.6685'. [ 1090.000137][T23137] netlink: 'syz.1.6687': attribute type 16 has an invalid length. [ 1090.039086][T23137] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6687'. [ 1090.352966][T23145] netlink: 'syz.0.6690': attribute type 16 has an invalid length. [ 1090.369021][T23145] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6690'. [ 1090.627499][T23155] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1090.635473][T23155] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1090.966125][T23165] netlink: 'syz.4.6699': attribute type 16 has an invalid length. [ 1090.996362][T23165] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6699'. [ 1092.006214][T23191] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1092.014870][T23191] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1092.347633][T23200] __nla_validate_parse: 2 callbacks suppressed [ 1092.347668][T23200] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6713'. [ 1092.532027][T23206] validate_nla: 2 callbacks suppressed [ 1092.532074][T23206] netlink: 'syz.3.6715': attribute type 16 has an invalid length. [ 1092.559405][T23206] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6715'. [ 1092.827106][T23213] netlink: 'syz.1.6717': attribute type 16 has an invalid length. [ 1092.862979][T23213] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6717'. [ 1093.004294][T23218] netlink: 'syz.3.6719': attribute type 16 has an invalid length. [ 1093.015329][T23218] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6719'. [ 1093.266041][T23226] netlink: 'syz.0.6732': attribute type 16 has an invalid length. [ 1093.288596][T23226] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6732'. [ 1093.534051][T23231] netlink: 'syz.4.6725': attribute type 39 has an invalid length. [ 1094.165145][T23244] netlink: 'syz.0.6730': attribute type 16 has an invalid length. [ 1094.215458][T23244] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6730'. [ 1094.233369][T23250] netlink: 'syz.1.6734': attribute type 16 has an invalid length. [ 1094.246328][T23250] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6734'. [ 1094.301935][T23253] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1094.309424][T23253] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1094.536858][T23262] netlink: 'syz.1.6739': attribute type 39 has an invalid length. [ 1094.584008][T23258] netlink: 'syz.4.6737': attribute type 16 has an invalid length. [ 1094.603932][T23258] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6737'. [ 1094.962557][T23274] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6743'. [ 1095.445486][T23285] netlink: 'syz.1.6748': attribute type 16 has an invalid length. [ 1095.470458][T23285] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6748'. [ 1095.756501][T23290] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1095.764709][T23290] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1097.331270][T23328] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1097.338474][T23328] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1097.349483][T23329] __nla_validate_parse: 4 callbacks suppressed [ 1097.349521][T23329] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6769'. [ 1097.715006][T23345] validate_nla: 7 callbacks suppressed [ 1097.715072][T23345] netlink: 'syz.4.6777': attribute type 16 has an invalid length. [ 1097.730950][T23345] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6777'. [ 1097.905851][T23350] netlink: 'syz.2.6779': attribute type 16 has an invalid length. [ 1097.920538][T23350] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6779'. [ 1098.056043][T23353] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.6781'. [ 1098.330328][T23361] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1098.337725][T23361] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1098.514903][T23366] netlink: 'syz.1.6786': attribute type 39 has an invalid length. [ 1098.881007][T23372] netlink: 'syz.2.6788': attribute type 16 has an invalid length. [ 1098.909014][T23372] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6788'. [ 1099.705376][T23381] netlink: 'syz.0.6792': attribute type 16 has an invalid length. [ 1099.739752][T23381] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6792'. [ 1099.815192][T23390] netlink: 'syz.2.6794': attribute type 16 has an invalid length. [ 1099.926750][T23390] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6794'. [ 1100.215006][T23399] netlink: 'syz.4.6799': attribute type 39 has an invalid length. [ 1100.418287][T23407] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1100.425857][T23407] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1100.510232][T23409] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6804'. [ 1100.642817][T23413] netlink: 'syz.4.6805': attribute type 16 has an invalid length. [ 1100.678984][T23413] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6805'. [ 1100.805063][T23417] netlink: 'syz.3.6807': attribute type 16 has an invalid length. [ 1100.829124][T23417] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6807'. [ 1101.552290][T23432] netlink: 'syz.2.6812': attribute type 16 has an invalid length. [ 1102.223340][T23455] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1102.230758][T23455] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1102.387732][T23459] __nla_validate_parse: 3 callbacks suppressed [ 1102.387801][T23459] netlink: 134056 bytes leftover after parsing attributes in process `syz.1.6825'. [ 1102.686636][T23467] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6828'. [ 1103.323791][T23482] validate_nla: 4 callbacks suppressed [ 1103.323834][T23482] netlink: 'syz.0.6834': attribute type 16 has an invalid length. [ 1103.376903][T23482] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6834'. [ 1103.508991][T23489] netlink: 'syz.4.6839': attribute type 39 has an invalid length. [ 1103.548468][T23491] netlink: 'syz.1.6837': attribute type 16 has an invalid length. [ 1103.560265][T23491] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6837'. [ 1103.828275][T23497] netlink: 'syz.0.6850': attribute type 16 has an invalid length. [ 1103.858906][T23497] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6850'. [ 1104.011714][T23505] netlink: 'syz.1.6843': attribute type 16 has an invalid length. [ 1104.031422][T23505] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6843'. [ 1104.527333][T23516] netlink: 'syz.0.6858': attribute type 16 has an invalid length. [ 1104.549284][T23516] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1104.680419][T23520] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6848'. [ 1104.721950][T23524] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6848'. [ 1104.738303][T23520] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1105.161442][T23537] netlink: 'syz.4.6856': attribute type 39 has an invalid length. [ 1105.180538][T23534] netlink: 'syz.3.6854': attribute type 16 has an invalid length. [ 1105.199652][T23534] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6854'. [ 1105.543955][T23545] netlink: 'syz.1.6861': attribute type 16 has an invalid length. [ 1106.311647][T23561] netlink: 'syz.4.6867': attribute type 16 has an invalid length. [ 1107.514222][T23592] __nla_validate_parse: 6 callbacks suppressed [ 1107.514316][T23592] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6882'. [ 1107.986793][T23605] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6887'. [ 1108.236719][T23607] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6888'. [ 1108.372575][T23615] validate_nla: 6 callbacks suppressed [ 1108.372604][T23615] netlink: 'syz.4.6892': attribute type 39 has an invalid length. [ 1108.737189][T23623] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6896'. [ 1108.806106][T23626] netlink: 'syz.4.6898': attribute type 16 has an invalid length. [ 1108.823485][T23626] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6898'. [ 1108.835201][T23632] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6896'. [ 1108.889556][T23623] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1109.312496][T23638] netlink: 'syz.3.6902': attribute type 16 has an invalid length. [ 1109.322843][T23638] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6902'. [ 1109.743486][T23649] netlink: 'syz.3.6906': attribute type 16 has an invalid length. [ 1109.774054][T23649] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6906'. [ 1109.993391][T23654] netlink: 'syz.1.6908': attribute type 39 has an invalid length. [ 1110.049492][T23656] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6910'. [ 1110.819551][T23672] netlink: 'syz.0.6914': attribute type 16 has an invalid length. [ 1110.839627][T23672] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6914'. [ 1111.073511][T23678] netlink: 'syz.2.6916': attribute type 16 has an invalid length. [ 1111.585592][T23690] netlink: 'syz.0.6922': attribute type 16 has an invalid length. [ 1111.795082][T23696] netlink: 'syz.3.6925': attribute type 39 has an invalid length. [ 1112.042330][T23702] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1112.193185][T23706] netlink: 'syz.3.6930': attribute type 16 has an invalid length. [ 1113.091075][T23722] __nla_validate_parse: 6 callbacks suppressed [ 1113.091121][T23722] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6934'. [ 1113.484899][T23730] validate_nla: 1 callbacks suppressed [ 1113.484965][T23730] netlink: 'syz.4.6938': attribute type 16 has an invalid length. [ 1113.529563][T23730] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6938'. [ 1113.945142][T23741] netlink: 'syz.3.6943': attribute type 16 has an invalid length. [ 1113.990029][T23741] netlink: 156 bytes leftover after parsing attributes in process `syz.3.6943'. [ 1114.051735][T23747] netlink: 'syz.4.6944': attribute type 39 has an invalid length. [ 1114.497689][T23755] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6948'. [ 1114.566881][T23755] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6948'. [ 1114.615282][T23760] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1114.656358][T23762] netlink: 'syz.0.6949': attribute type 16 has an invalid length. [ 1114.685656][T23762] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6949'. [ 1115.130280][T23770] netlink: 134056 bytes leftover after parsing attributes in process `syz.2.6952'. [ 1115.873973][T23782] netlink: 'syz.3.6956': attribute type 39 has an invalid length. [ 1116.447041][T23790] netlink: 'syz.0.6959': attribute type 16 has an invalid length. [ 1116.509344][T23790] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6959'. [ 1117.233611][T23810] netlink: 'syz.0.6965': attribute type 16 has an invalid length. [ 1117.257279][T23810] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6965'. [ 1117.522982][T23818] netlink: 'syz.1.6970': attribute type 16 has an invalid length. [ 1117.572380][T23818] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6970'. [ 1117.700680][T23821] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1117.786220][T23825] netlink: 'syz.2.6972': attribute type 39 has an invalid length. [ 1118.377174][T23831] netlink: 'syz.2.6975': attribute type 16 has an invalid length. [ 1118.397361][T23831] __nla_validate_parse: 2 callbacks suppressed [ 1118.397810][T23831] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6975'. [ 1119.224121][T23849] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.6977'. [ 1119.718054][T23860] netlink: 'syz.2.6984': attribute type 16 has an invalid length. [ 1119.757955][T23860] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6984'. [ 1119.849818][T23858] netlink: 'syz.1.6983': attribute type 16 has an invalid length. [ 1119.893006][T23858] netlink: 156 bytes leftover after parsing attributes in process `syz.1.6983'. [ 1120.224629][T23866] netlink: 'syz.0.6985': attribute type 39 has an invalid length. [ 1120.696166][T23875] netlink: 'syz.2.6988': attribute type 16 has an invalid length. [ 1120.729122][T23875] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1122.049688][T23897] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6995'. [ 1122.090827][T23902] netlink: 164 bytes leftover after parsing attributes in process `syz.1.6995'. [ 1122.154366][T23899] netlink: 'syz.2.6997': attribute type 16 has an invalid length. [ 1122.165363][T23899] netlink: 156 bytes leftover after parsing attributes in process `syz.2.6997'. [ 1122.212566][T23903] netlink: 'syz.0.6998': attribute type 16 has an invalid length. [ 1122.224137][T23897] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1122.259136][T23903] netlink: 156 bytes leftover after parsing attributes in process `syz.0.6998'. [ 1122.376416][T23906] netlink: 'syz.3.6999': attribute type 39 has an invalid length. [ 1122.657337][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1122.664016][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1122.769494][T23914] netlink: 'syz.2.7011': attribute type 16 has an invalid length. [ 1122.808901][T23914] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7011'. [ 1122.964337][T23919] netlink: 'syz.0.7002': attribute type 16 has an invalid length. [ 1124.507542][T23947] netlink: 'syz.3.7012': attribute type 39 has an invalid length. [ 1124.651552][T23949] __nla_validate_parse: 2 callbacks suppressed [ 1124.651610][T23949] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7013'. [ 1124.981161][T23954] validate_nla: 1 callbacks suppressed [ 1124.981225][T23954] netlink: 'syz.4.7016': attribute type 16 has an invalid length. [ 1125.116056][T23954] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7016'. [ 1125.159433][T23961] netlink: 'syz.2.7018': attribute type 16 has an invalid length. [ 1125.179699][T23961] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7018'. [ 1125.239880][T23960] netlink: 'syz.3.7017': attribute type 10 has an invalid length. [ 1126.340389][T23985] netlink: 'syz.4.7027': attribute type 39 has an invalid length. [ 1126.496437][T23987] netlink: 'syz.0.7028': attribute type 16 has an invalid length. [ 1126.531320][T23987] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7028'. [ 1126.585264][T23993] netlink: 'syz.2.7031': attribute type 16 has an invalid length. [ 1126.604646][T23993] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7031'. [ 1126.709232][T23995] netlink: 'syz.1.7030': attribute type 16 has an invalid length. [ 1126.717610][T23995] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7030'. [ 1127.046820][T23999] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7032'. [ 1127.197797][T24005] netlink: 'syz.2.7035': attribute type 10 has an invalid length. [ 1128.180843][T24023] netlink: 'syz.2.7042': attribute type 39 has an invalid length. [ 1128.382866][T24027] netlink: 'syz.1.7043': attribute type 16 has an invalid length. [ 1128.406201][T24027] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7043'. [ 1128.637136][T24037] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7046'. [ 1128.953611][T24040] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7047'. [ 1129.908385][T24066] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7060'. [ 1129.939267][T24063] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.7059'. [ 1130.034090][T24068] validate_nla: 5 callbacks suppressed [ 1130.034159][T24068] netlink: 'syz.0.7061': attribute type 16 has an invalid length. [ 1130.077723][T24068] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7061'. [ 1130.773046][T24084] netlink: 'syz.0.7065': attribute type 16 has an invalid length. [ 1130.810055][T24084] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7065'. [ 1131.622723][T24103] netlink: 'syz.1.7073': attribute type 39 has an invalid length. [ 1131.701432][T24105] netlink: 'syz.0.7074': attribute type 16 has an invalid length. [ 1131.714814][T24105] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7074'. [ 1131.730926][T24108] netlink: 'syz.3.7076': attribute type 16 has an invalid length. [ 1131.753553][T24108] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7076'. [ 1131.783489][T24109] netlink: 'syz.4.7075': attribute type 10 has an invalid length. [ 1132.085574][T24118] netlink: 'syz.2.7079': attribute type 16 has an invalid length. [ 1132.105121][T24118] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7079'. [ 1132.597635][T24138] netlink: 134056 bytes leftover after parsing attributes in process `syz.0.7086'. [ 1133.202496][T24147] netlink: 'syz.4.7090': attribute type 39 has an invalid length. [ 1133.473535][T24153] netlink: 'syz.1.7092': attribute type 16 has an invalid length. [ 1133.492740][T24153] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7092'. [ 1133.517323][T24154] netlink: 'syz.2.7093': attribute type 16 has an invalid length. [ 1133.529627][T24154] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7093'. [ 1134.972697][T24200] __nla_validate_parse: 4 callbacks suppressed [ 1134.972748][T24200] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7110'. [ 1135.423795][T24212] validate_nla: 6 callbacks suppressed [ 1135.423858][T24212] netlink: 'syz.4.7116': attribute type 10 has an invalid length. [ 1135.589934][T24220] netlink: 'syz.1.7119': attribute type 39 has an invalid length. [ 1135.765834][T24227] netlink: 'syz.2.7122': attribute type 16 has an invalid length. [ 1135.800593][T24227] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7122'. [ 1135.945740][T24233] netlink: 'syz.3.7124': attribute type 16 has an invalid length. [ 1135.982332][T24233] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7124'. [ 1136.085494][T24238] netlink: 'syz.4.7126': attribute type 16 has an invalid length. [ 1136.109599][T24238] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7126'. [ 1136.441249][T24249] netlink: 'syz.2.7132': attribute type 10 has an invalid length. [ 1136.560764][T24257] netlink: 'syz.3.7136': attribute type 39 has an invalid length. [ 1136.699621][T24261] netlink: 'syz.4.7138': attribute type 16 has an invalid length. [ 1136.707853][T24261] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7138'. [ 1136.821887][T24266] netlink: 'syz.1.7140': attribute type 16 has an invalid length. [ 1136.843662][T24266] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7140'. [ 1137.095209][T24274] netlink: 'syz.4.7144': attribute type 16 has an invalid length. [ 1137.120508][T24274] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7144'. [ 1137.614300][T24295] netlink: 148 bytes leftover after parsing attributes in process `syz.3.7152'. [ 1137.705653][T24299] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7154'. [ 1137.838009][T24305] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7155'. [ 1140.466214][T24400] validate_nla: 14 callbacks suppressed [ 1140.466254][T24400] netlink: 'syz.3.7202': attribute type 16 has an invalid length. [ 1140.484118][T24400] __nla_validate_parse: 10 callbacks suppressed [ 1140.484159][T24400] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7202'. [ 1140.507970][T24402] netlink: 148 bytes leftover after parsing attributes in process `syz.4.7203'. [ 1140.566926][T24406] netlink: 'syz.1.7204': attribute type 16 has an invalid length. [ 1140.589038][T24406] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1140.733064][T24413] netlink: 'syz.4.7207': attribute type 16 has an invalid length. [ 1140.750775][T24413] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7207'. [ 1141.049387][T24423] netlink: 'syz.1.7212': attribute type 39 has an invalid length. [ 1141.438078][T24437] netlink: 'syz.2.7219': attribute type 16 has an invalid length. [ 1141.490565][T24437] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7219'. [ 1141.614792][T24435] netlink: 126588 bytes leftover after parsing attributes in process `syz.4.7217'. [ 1141.685875][T24448] netlink: 'syz.3.7222': attribute type 16 has an invalid length. [ 1141.708861][T24448] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7222'. [ 1141.875440][T24450] netlink: 'syz.0.7223': attribute type 16 has an invalid length. [ 1141.898895][T24450] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7223'. [ 1141.967661][T24456] netlink: 'syz.1.7227': attribute type 39 has an invalid length. [ 1142.535847][T24481] netlink: 'syz.0.7236': attribute type 16 has an invalid length. [ 1142.544175][T24481] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7236'. [ 1142.711799][T24482] netlink: 126588 bytes leftover after parsing attributes in process `syz.2.7237'. [ 1143.258505][T24487] netlink: 'syz.3.7238': attribute type 16 has an invalid length. [ 1146.124684][T24574] validate_nla: 11 callbacks suppressed [ 1146.124729][T24574] netlink: 'syz.2.7284': attribute type 16 has an invalid length. [ 1146.144984][T24574] __nla_validate_parse: 11 callbacks suppressed [ 1146.145022][T24574] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7284'. [ 1146.337954][T24578] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.7274'. [ 1146.573481][T24587] netlink: 'syz.1.7280': attribute type 39 has an invalid length. [ 1146.665879][T24592] netlink: 'syz.3.7282': attribute type 16 has an invalid length. [ 1146.688957][T24592] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1146.801092][T24594] netlink: 'syz.2.7283': attribute type 16 has an invalid length. [ 1146.818892][T24594] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7283'. [ 1147.097756][T24606] netlink: 'syz.1.7288': attribute type 29 has an invalid length. [ 1147.115093][T24607] netlink: 'syz.3.7290': attribute type 16 has an invalid length. [ 1147.124096][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1147.138491][T24607] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7290'. [ 1147.168338][T24606] netlink: 'syz.1.7288': attribute type 29 has an invalid length. [ 1147.212192][T24606] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7288'. [ 1148.067355][T24627] netlink: 'syz.0.7297': attribute type 39 has an invalid length. [ 1148.292602][T24622] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.7294'. [ 1148.450335][T24637] netlink: 'syz.1.7301': attribute type 16 has an invalid length. [ 1148.458526][T24637] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7301'. [ 1148.616544][T24646] netlink: 'syz.2.7305': attribute type 16 has an invalid length. [ 1148.625985][T24646] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7305'. [ 1151.772228][T24744] validate_nla: 13 callbacks suppressed [ 1151.772253][T24744] netlink: 'syz.0.7344': attribute type 39 has an invalid length. [ 1151.801372][T24747] netlink: 'syz.2.7342': attribute type 16 has an invalid length. [ 1151.838782][T24747] __nla_validate_parse: 11 callbacks suppressed [ 1151.838807][T24747] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1154.334780][T24753] netlink: 'syz.2.7345': attribute type 29 has an invalid length. [ 1154.349349][T24753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7345'. [ 1154.379283][T24753] netlink: 'syz.2.7345': attribute type 29 has an invalid length. [ 1154.421410][T24753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7345'. [ 1154.537158][T24761] netlink: 'syz.4.7349': attribute type 16 has an invalid length. [ 1154.558900][T24761] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7349'. [ 1154.666472][T24765] netlink: 'syz.3.7351': attribute type 16 has an invalid length. [ 1154.709632][T24765] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7351'. [ 1154.897232][T24775] netlink: 'syz.0.7358': attribute type 39 has an invalid length. [ 1154.929537][T24773] netlink: 'syz.4.7356': attribute type 16 has an invalid length. [ 1154.949242][T24773] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7356'. [ 1158.239172][T24795] netlink: 'syz.3.7365': attribute type 29 has an invalid length. [ 1158.260119][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7365'. [ 1158.304071][T24798] netlink: 'syz.0.7366': attribute type 16 has an invalid length. [ 1158.337027][T24798] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7366'. [ 1158.349508][T24795] netlink: 'syz.3.7365': attribute type 29 has an invalid length. [ 1158.368966][T24795] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7365'. [ 1158.577445][T24808] netlink: 'syz.2.7370': attribute type 16 has an invalid length. [ 1158.586349][T24808] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7370'. [ 1158.733248][T24814] netlink: 'syz.1.7373': attribute type 16 has an invalid length. [ 1158.752093][T24814] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7373'. [ 1158.870123][T24818] netlink: 'syz.2.7376': attribute type 39 has an invalid length. [ 1159.193714][T24831] netlink: 'syz.3.7381': attribute type 29 has an invalid length. [ 1159.219063][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1159.247945][T24831] netlink: 'syz.3.7381': attribute type 29 has an invalid length. [ 1159.272226][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7381'. [ 1159.357150][T24836] netlink: 'syz.1.7383': attribute type 16 has an invalid length. [ 1159.366024][T24836] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7383'. [ 1162.337023][T24846] netlink: 'syz.0.7386': attribute type 16 has an invalid length. [ 1162.370299][T24846] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7386'. [ 1162.456702][T24850] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7389'. [ 1163.318525][T24881] __nla_validate_parse: 3 callbacks suppressed [ 1163.318594][T24881] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7402'. [ 1163.371392][T24883] validate_nla: 5 callbacks suppressed [ 1163.371455][T24883] netlink: 'syz.0.7404': attribute type 16 has an invalid length. [ 1163.426191][T24883] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7404'. [ 1163.584598][T24887] netlink: 'syz.2.7406': attribute type 16 has an invalid length. [ 1163.608467][T24887] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7406'. [ 1163.751879][T24893] netlink: 'syz.0.7407': attribute type 16 has an invalid length. [ 1163.763781][T24893] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7407'. [ 1163.809882][T24899] netlink: 'syz.3.7410': attribute type 16 has an invalid length. [ 1163.817909][T24899] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7410'. [ 1164.070583][T24904] netlink: 'syz.4.7412': attribute type 39 has an invalid length. [ 1164.165166][T24907] netlink: 'syz.1.7414': attribute type 29 has an invalid length. [ 1164.184978][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1164.202784][T24907] netlink: 'syz.1.7414': attribute type 29 has an invalid length. [ 1164.212469][T24907] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7414'. [ 1164.507926][T24917] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7418'. [ 1164.527637][T24920] netlink: 'syz.1.7419': attribute type 16 has an invalid length. [ 1164.549807][T24920] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7419'. [ 1164.693703][T24925] netlink: 'syz.4.7421': attribute type 16 has an invalid length. [ 1164.712817][T24925] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7421'. [ 1164.814312][T24930] netlink: 'syz.1.7424': attribute type 16 has an invalid length. [ 1168.342315][T25050] __nla_validate_parse: 19 callbacks suppressed [ 1168.342360][T25050] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7479'. [ 1168.452733][T25054] validate_nla: 20 callbacks suppressed [ 1168.452797][T25054] netlink: 'syz.4.7480': attribute type 16 has an invalid length. [ 1168.478876][T25054] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7480'. [ 1168.657357][T25062] netlink: 'syz.2.7484': attribute type 16 has an invalid length. [ 1168.686357][T25062] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7484'. [ 1169.112745][T25076] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7489'. [ 1169.188108][T25078] netlink: 'syz.1.7490': attribute type 39 has an invalid length. [ 1169.609641][T25089] netlink: 'syz.4.7495': attribute type 16 has an invalid length. [ 1169.618336][T25089] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7495'. [ 1169.738495][T25093] netlink: 'syz.3.7497': attribute type 16 has an invalid length. [ 1169.760297][T25093] netlink: 156 bytes leftover after parsing attributes in process `syz.3.7497'. [ 1169.823615][T25097] netlink: 'syz.2.7498': attribute type 16 has an invalid length. [ 1169.849251][T25097] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7498'. [ 1169.884242][T25095] netlink: 'syz.1.7499': attribute type 16 has an invalid length. [ 1169.897397][T25095] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7499'. [ 1170.220145][T25109] netlink: 'syz.1.7504': attribute type 39 has an invalid length. [ 1170.419379][T25116] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7507'. [ 1170.620719][T25124] netlink: 'syz.0.7511': attribute type 16 has an invalid length. [ 1170.645738][T25124] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7511'. [ 1170.815275][T25130] netlink: 'syz.2.7513': attribute type 16 has an invalid length. [ 1174.453899][T25148] validate_nla: 3 callbacks suppressed [ 1174.453967][T25148] netlink: 'syz.0.7520': attribute type 16 has an invalid length. [ 1174.483326][T25148] __nla_validate_parse: 3 callbacks suppressed [ 1174.483365][T25148] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7520'. [ 1175.239209][T25176] netlink: 'syz.0.7531': attribute type 16 has an invalid length. [ 1175.247941][T25176] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7531'. [ 1175.306032][T25177] netlink: 'syz.3.7530': attribute type 39 has an invalid length. [ 1175.504287][T25184] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.7533'. [ 1175.573415][T25180] netlink: 'syz.4.7534': attribute type 16 has an invalid length. [ 1175.588903][T25180] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7534'. [ 1176.068365][T25202] netlink: 14975 bytes leftover after parsing attributes in process `syz.0.7543'. [ 1178.859937][T25217] netlink: 'syz.2.7547': attribute type 16 has an invalid length. [ 1178.879064][T25217] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7547'. [ 1178.916696][T25223] netlink: 'syz.3.7548': attribute type 39 has an invalid length. [ 1179.087898][T25228] netlink: 'syz.1.7551': attribute type 16 has an invalid length. [ 1179.124253][T25228] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7551'. [ 1180.108528][T25251] netlink: 'syz.2.7560': attribute type 16 has an invalid length. [ 1180.135471][T25251] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7560'. [ 1180.222382][T25260] netlink: 'syz.1.7562': attribute type 39 has an invalid length. [ 1180.276699][T25253] netlink: 'syz.0.7561': attribute type 10 has an invalid length. [ 1180.316466][T25253] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7561'. [ 1180.804543][T25271] netlink: 'syz.2.7566': attribute type 16 has an invalid length. [ 1180.828906][T25271] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7566'. [ 1181.430578][T25292] netlink: 'syz.2.7576': attribute type 16 has an invalid length. [ 1181.439668][T25292] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7576'. [ 1181.576271][T25298] netlink: 'syz.0.7579': attribute type 39 has an invalid length. [ 1181.833666][T25303] netlink: 'syz.1.7582': attribute type 16 has an invalid length. [ 1181.842736][T25303] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7582'. [ 1182.617139][T25323] netlink: 'syz.0.7590': attribute type 16 has an invalid length. [ 1182.639314][T25323] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7590'. [ 1183.551031][T25330] device syzkaller0 entered promiscuous mode [ 1183.653593][T25335] netlink: 'syz.1.7593': attribute type 39 has an invalid length. [ 1184.091610][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1184.098126][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.199209][T25349] netlink: 'syz.2.7598': attribute type 10 has an invalid length. [ 1186.228426][T25349] device wlan1 left promiscuous mode [ 1186.250865][T25351] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7598'. [ 1186.637548][T25363] netlink: 'syz.1.7604': attribute type 16 has an invalid length. [ 1186.656686][T25363] netlink: 156 bytes leftover after parsing attributes in process `syz.1.7604'. [ 1186.810911][T25371] netlink: 'syz.0.7606': attribute type 39 has an invalid length. [ 1187.118126][T25385] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1187.737518][T25402] netlink: 'syz.4.7619': attribute type 16 has an invalid length. [ 1187.746539][T25402] netlink: 156 bytes leftover after parsing attributes in process `syz.4.7619'. [ 1187.788787][T25404] netlink: 'syz.3.7620': attribute type 39 has an invalid length. [ 1188.083919][ T4288] Bluetooth: hci1: unexpected event 0x16 length: 151 > 6 [ 1188.304940][T25419] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1188.957492][T25438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1188.976585][T25441] netlink: 'syz.4.7634': attribute type 39 has an invalid length. [ 1188.986969][T25438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1189.007668][T25438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1189.045037][T25438] netlink: 'syz.0.7635': attribute type 21 has an invalid length. [ 1189.064487][T25438] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1189.114855][T25438] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7635'. [ 1189.429746][T25452] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.823704][ T4288] Bluetooth: hci4: unexpected event 0x16 length: 151 > 6 [ 1189.947538][T25470] netlink: 'syz.1.7650': attribute type 39 has an invalid length. [ 1191.093403][T25511] netlink: 'syz.2.7667': attribute type 39 has an invalid length. [ 1191.165909][ T4288] Bluetooth: hci0: unexpected event 0x16 length: 151 > 6 [ 1195.159752][T25545] netlink: 'syz.2.7681': attribute type 39 has an invalid length. [ 1196.418470][T25568] netlink: 'syz.1.7692': attribute type 10 has an invalid length. [ 1196.456912][T25568] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7692'. [ 1197.036495][T25575] netlink: 'syz.3.7695': attribute type 39 has an invalid length. [ 1198.204469][T25610] netlink: 'syz.2.7710': attribute type 39 has an invalid length. [ 1198.284113][T25608] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.7711'. [ 1201.113856][T25640] netlink: 'syz.1.7723': attribute type 39 has an invalid length. [ 1202.597305][T25677] netlink: 'syz.0.7737': attribute type 39 has an invalid length. [ 1203.816340][T25716] netlink: 'syz.3.7754': attribute type 39 has an invalid length. [ 1204.902899][T25755] netlink: 'syz.3.7770': attribute type 39 has an invalid length. [ 1205.067186][T25759] netlink: 'syz.2.7771': attribute type 10 has an invalid length. [ 1205.077439][T25759] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7771'. [ 1206.855691][T25800] netlink: 'syz.1.7786': attribute type 39 has an invalid length. [ 1207.260313][T25813] netlink: 'syz.4.7794': attribute type 10 has an invalid length. [ 1207.329226][T25813] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7794'. [ 1207.472874][ T4288] Bluetooth: hci3: unexpected event 0x16 length: 151 > 6 [ 1207.894073][T25837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1207.941497][T25837] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1207.963272][T25840] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1208.024878][T25837] netlink: 'syz.1.7802': attribute type 21 has an invalid length. [ 1208.040503][T25837] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1208.060371][T25837] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7802'. [ 1208.081417][T25843] netlink: 'syz.4.7803': attribute type 39 has an invalid length. [ 1208.511137][T25854] netlink: 'syz.2.7808': attribute type 10 has an invalid length. [ 1208.536982][T25854] netlink: 55 bytes leftover after parsing attributes in process `syz.2.7808'. [ 1209.498510][T25857] netlink: 'syz.4.7810': attribute type 10 has an invalid length. [ 1210.109225][T25881] device syzkaller0 entered promiscuous mode [ 1210.154985][T25876] netlink: 'syz.1.7817': attribute type 39 has an invalid length. [ 1210.226656][T25879] netlink: 'syz.3.7816': attribute type 10 has an invalid length. [ 1210.236727][T25879] netlink: 55 bytes leftover after parsing attributes in process `syz.3.7816'. [ 1210.731065][T25899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1212.666624][T25899] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1212.676993][T25903] netlink: 'syz.3.7823': attribute type 21 has an invalid length. [ 1212.686355][T25903] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1212.709302][T25903] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7823'. [ 1212.729121][T25906] netlink: 'syz.1.7824': attribute type 10 has an invalid length. [ 1212.737027][T25906] netlink: 55 bytes leftover after parsing attributes in process `syz.1.7824'. [ 1213.288076][T25910] netlink: 'syz.2.7826': attribute type 10 has an invalid length. [ 1213.566243][T25925] netlink: 'syz.1.7832': attribute type 39 has an invalid length. [ 1213.658531][T25927] netlink: 'syz.4.7834': attribute type 10 has an invalid length. [ 1213.689022][T25927] netlink: 55 bytes leftover after parsing attributes in process `syz.4.7834'. [ 1213.964279][T25936] device syzkaller0 entered promiscuous mode [ 1213.978406][T25940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1214.001172][T25940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1214.025590][T25940] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7839'. [ 1214.101602][T25940] netlink: 'syz.4.7839': attribute type 21 has an invalid length. [ 1216.690583][T25952] netlink: 'syz.0.7845': attribute type 10 has an invalid length. [ 1216.698855][T25952] __nla_validate_parse: 3 callbacks suppressed [ 1216.698872][T25952] netlink: 55 bytes leftover after parsing attributes in process `syz.0.7845'. [ 1217.010718][T25963] netlink: 'syz.1.7848': attribute type 39 has an invalid length. [ 1217.375248][T25970] netlink: 'syz.0.7849': attribute type 10 has an invalid length. [ 1218.373307][T25993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1218.391520][T25993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1218.422533][T25993] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1218.475635][T25993] netlink: 'syz.2.7857': attribute type 21 has an invalid length. [ 1218.498486][T25993] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1218.511632][T25993] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7857'. [ 1221.694983][T26013] netlink: 'syz.4.7863': attribute type 39 has an invalid length. [ 1222.826874][T26050] netlink: 'syz.3.7874': attribute type 1 has an invalid length. [ 1222.852395][T26050] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1222.995312][T26059] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.7874'. [ 1223.217420][T26062] netlink: 'syz.0.7877': attribute type 39 has an invalid length. [ 1223.700969][T26072] netlink: 'syz.1.7881': attribute type 10 has an invalid length. [ 1223.717630][T26075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1223.923839][T26075] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1224.021409][T26080] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1224.098358][T26075] netlink: 'syz.2.7883': attribute type 21 has an invalid length. [ 1224.115284][T26075] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1224.129605][T26075] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7883'. [ 1224.902593][T26111] netlink: 'syz.1.7892': attribute type 39 has an invalid length. [ 1225.475879][T26131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7899'. [ 1225.494961][T26131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7899'. [ 1225.513144][T26131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7899'. [ 1225.554446][T26131] netlink: 'syz.2.7899': attribute type 21 has an invalid length. [ 1225.853400][T26141] netlink: 'syz.2.7901': attribute type 1 has an invalid length. [ 1226.255368][T26155] netlink: 'syz.4.7905': attribute type 39 has an invalid length. [ 1227.595254][T26185] device syzkaller0 entered promiscuous mode [ 1227.946433][T26201] __nla_validate_parse: 4 callbacks suppressed [ 1227.946507][T26201] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.7914'. [ 1230.658837][T26213] netlink: 'syz.4.7919': attribute type 39 has an invalid length. [ 1231.122666][T26231] netlink: 'syz.1.7927': attribute type 1 has an invalid length. [ 1231.143753][T26231] netlink: 112865 bytes leftover after parsing attributes in process `syz.1.7927'. [ 1231.277149][T26236] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.7927'. [ 1232.347120][T26264] netlink: 'syz.4.7937': attribute type 39 has an invalid length. [ 1234.928181][T26266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1234.949471][T26266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1234.974892][T26266] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1235.070285][T26274] device syzkaller0 entered promiscuous mode [ 1235.078661][T26266] netlink: 'syz.1.7939': attribute type 21 has an invalid length. [ 1235.087784][T26266] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1235.099413][T26266] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1240.951033][T26318] device syzkaller0 entered promiscuous mode [ 1241.676551][T26336] netlink: 'syz.0.7958': attribute type 39 has an invalid length. [ 1241.847249][T26338] device syzkaller0 entered promiscuous mode [ 1244.862317][T26374] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.7969'. [ 1244.961429][T26378] netlink: 'syz.4.7971': attribute type 39 has an invalid length. [ 1245.437332][T26391] netlink: 'syz.3.7974': attribute type 10 has an invalid length. [ 1245.539995][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1245.546431][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1246.818816][T26415] netlink: 'syz.4.7984': attribute type 39 has an invalid length. [ 1247.511999][T26421] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.7985'. [ 1248.116494][T26450] netlink: 'syz.0.7992': attribute type 10 has an invalid length. [ 1248.750376][T26457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1248.761241][T26457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1248.792430][T26457] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1248.840107][T26461] netlink: 'syz.1.7995': attribute type 39 has an invalid length. [ 1248.877589][T26457] netlink: 'syz.0.8004': attribute type 21 has an invalid length. [ 1248.901339][T26457] netlink: 128 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1248.966646][T26457] netlink: 3 bytes leftover after parsing attributes in process `syz.0.8004'. [ 1249.200328][T26474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1249.211683][T26476] netlink: 'syz.0.8009': attribute type 39 has an invalid length. [ 1249.221694][T26474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1249.237789][T26474] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8010'. [ 1249.310189][T26474] netlink: 'syz.1.8010': attribute type 21 has an invalid length. [ 1249.887778][T26488] __nla_validate_parse: 3 callbacks suppressed [ 1249.887867][T26488] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8002'. [ 1250.211982][T26505] netlink: 'syz.1.8012': attribute type 39 has an invalid length. [ 1250.339395][T26508] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.8013'. [ 1251.553606][T26546] netlink: 'syz.0.8024': attribute type 39 has an invalid length. [ 1251.975526][T26553] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8026'. [ 1253.584970][T26586] netlink: 4595 bytes leftover after parsing attributes in process `syz.4.8035'. [ 1253.959201][T26596] netlink: 'syz.0.8036': attribute type 39 has an invalid length. [ 1254.409962][T26605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8040'. [ 1254.601187][T26605] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8040'. [ 1254.615419][T26601] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.8039'. [ 1255.605722][T26633] netlink: 'syz.1.8050': attribute type 39 has an invalid length. [ 1258.423362][T26688] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8058'. [ 1259.148160][T26705] netlink: 'syz.3.8063': attribute type 39 has an invalid length. [ 1260.349604][T26733] netlink: 'syz.1.8073': attribute type 16 has an invalid length. [ 1260.379935][T26733] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8073'. [ 1260.705796][T26738] netlink: 'syz.0.8086': attribute type 16 has an invalid length. [ 1260.716234][T26738] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8086'. [ 1260.741824][T26740] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1261.034437][T26740] netlink: 72 bytes leftover after parsing attributes in process `syz.4.8077'. [ 1261.170954][T26753] netlink: 'syz.0.8080': attribute type 29 has an invalid length. [ 1261.210596][T26753] netlink: 'syz.0.8080': attribute type 29 has an invalid length. [ 1261.251295][T26755] netlink: 'syz.0.8080': attribute type 29 has an invalid length. [ 1261.263693][T26744] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.8076'. [ 1261.278984][T26753] netlink: 'syz.0.8080': attribute type 29 has an invalid length. [ 1261.334009][T26753] netlink: 'syz.0.8080': attribute type 29 has an invalid length. [ 1261.572910][T26758] netlink: 'syz.2.8082': attribute type 39 has an invalid length. [ 1261.748472][T26765] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8084'. [ 1261.787654][T26765] netlink: 'syz.0.8084': attribute type 10 has an invalid length. [ 1261.815447][T26765] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8084'. [ 1262.127569][T26777] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8088'. [ 1263.502633][T26797] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8091'. [ 1264.096547][T26812] tun0: tun_chr_ioctl cmd 2148553947 [ 1264.160832][T26807] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.8095'. [ 1264.737156][T26821] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8100'. [ 1265.113245][T26842] validate_nla: 3 callbacks suppressed [ 1265.113269][T26842] netlink: 'syz.4.8107': attribute type 16 has an invalid length. [ 1265.216984][T26842] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8107'. [ 1265.715438][T26856] netlink: 'syz.1.8111': attribute type 29 has an invalid length. [ 1265.740051][T26856] netlink: 'syz.1.8111': attribute type 29 has an invalid length. [ 1265.761138][T26858] netlink: 'syz.2.8110': attribute type 39 has an invalid length. [ 1265.779505][T26859] netlink: 'syz.1.8111': attribute type 29 has an invalid length. [ 1265.824827][T26856] netlink: 'syz.1.8111': attribute type 29 has an invalid length. [ 1265.860727][T26856] netlink: 'syz.1.8111': attribute type 29 has an invalid length. [ 1265.883362][T26857] netlink: 'syz.0.8112': attribute type 21 has an invalid length. [ 1266.206377][T26867] tun0: tun_chr_ioctl cmd 2148553947 [ 1266.234408][T26867] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.8114'. [ 1266.550513][T26879] netlink: 'syz.4.8119': attribute type 16 has an invalid length. [ 1266.578906][T26879] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8119'. [ 1266.590381][T26882] netlink: 'syz.0.8120': attribute type 21 has an invalid length. [ 1266.598507][T26882] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8120'. [ 1266.901377][T26899] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8134'. [ 1267.895763][T26922] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8132'. [ 1268.561191][T26934] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8135'. [ 1269.266332][T26940] netlink: 156 bytes leftover after parsing attributes in process `syz.4.8137'. [ 1270.357116][T26964] validate_nla: 12 callbacks suppressed [ 1270.357184][T26964] netlink: 'syz.2.8145': attribute type 16 has an invalid length. [ 1270.395487][T26964] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8145'. [ 1270.727817][T26972] netlink: 'syz.1.8157': attribute type 16 has an invalid length. [ 1270.747066][T26972] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8157'. [ 1270.804605][T26975] netlink: 'syz.2.8146': attribute type 21 has an invalid length. [ 1270.915245][T26976] netlink: 'syz.3.8147': attribute type 10 has an invalid length. [ 1271.512268][T26997] netlink: 'syz.2.8153': attribute type 29 has an invalid length. [ 1271.564958][T26997] netlink: 'syz.2.8153': attribute type 29 has an invalid length. [ 1271.574965][T26999] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8154'. [ 1271.585975][T27001] netlink: 'syz.2.8153': attribute type 29 has an invalid length. [ 1271.608892][T26999] netlink: 'syz.3.8154': attribute type 10 has an invalid length. [ 1271.616858][T26999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8154'. [ 1271.638955][T26997] netlink: 'syz.2.8153': attribute type 29 has an invalid length. [ 1271.667998][T26997] netlink: 'syz.2.8153': attribute type 29 has an invalid length. [ 1271.985313][T27006] tun0: tun_chr_ioctl cmd 2148553947 [ 1272.006341][T27016] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8159'. [ 1272.043550][T27006] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.8158'. [ 1272.722793][T27027] netlink: 156 bytes leftover after parsing attributes in process `syz.3.8161'. [ 1274.057757][T27063] tun0: tun_chr_ioctl cmd 2148553947 [ 1274.172701][T27063] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.8173'. [ 1274.789409][T27075] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8177'. [ 1275.263713][T27085] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8189'. [ 1276.888282][T27096] tun0: tun_chr_ioctl cmd 2148553947 [ 1276.939333][T27096] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8192'. [ 1276.996053][T27108] validate_nla: 10 callbacks suppressed [ 1276.996075][T27108] netlink: 'syz.2.8181': attribute type 21 has an invalid length. [ 1277.558812][T27117] tun0: tun_chr_ioctl cmd 2148553947 [ 1277.680668][T27117] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.8197'. [ 1277.757660][T27119] netlink: 'syz.4.8183': attribute type 10 has an invalid length. [ 1278.059421][T27125] tap0: tun_chr_ioctl cmd 35111 [ 1278.693507][T27149] netlink: 'syz.4.8196': attribute type 21 has an invalid length. [ 1279.550214][T16129] wlan1: Trigger new scan to find an IBSS to join [ 1280.047799][T27163] netlink: 'syz.1.8200': attribute type 39 has an invalid length. [ 1280.345134][T27173] netlink: 'syz.1.8215': attribute type 39 has an invalid length. [ 1280.836706][T27183] netlink: 'syz.2.8204': attribute type 10 has an invalid length. [ 1281.867197][T27211] netlink: 'syz.2.8214': attribute type 21 has an invalid length. [ 1282.281915][T27219] netlink: 'syz.0.8216': attribute type 39 has an invalid length. [ 1282.488804][T20003] wlan1: Trigger new scan to find an IBSS to join [ 1283.640481][T27227] netlink: 'syz.3.8219': attribute type 39 has an invalid length. [ 1283.944171][T27236] netlink: 'syz.0.8221': attribute type 10 has an invalid length. [ 1285.529078][ T4440] wlan1: Trigger new scan to find an IBSS to join [ 1286.096081][T27274] netlink: 'syz.2.8236': attribute type 39 has an invalid length. [ 1286.317937][T27279] netlink: 'syz.1.8237': attribute type 21 has an invalid length. [ 1286.451948][T16134] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 1286.473828][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1289.487217][T27319] netlink: 'syz.1.8250': attribute type 39 has an invalid length. [ 1290.562868][ T4288] Bluetooth: Frame is too long (len 149, expected len 4) [ 1294.070640][T27406] device syzkaller0 entered promiscuous mode [ 1297.929016][T27427] netlink: 'syz.1.8283': attribute type 10 has an invalid length. [ 1298.491352][T27442] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1298.661255][T27440] netlink: 'syz.4.8288': attribute type 39 has an invalid length. [ 1298.908283][T27457] device sit0 left promiscuous mode [ 1299.025100][T27461] device sit0 entered promiscuous mode [ 1300.348312][T27496] netlink: 'syz.1.8304': attribute type 39 has an invalid length. [ 1300.580946][T27499] netlink: 'syz.2.8305': attribute type 16 has an invalid length. [ 1300.615323][T27499] netlink: 156 bytes leftover after parsing attributes in process `syz.2.8305'. [ 1301.177451][T27517] netlink: 'syz.0.8312': attribute type 13 has an invalid length. [ 1301.193845][T27517] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.8312'. [ 1302.371552][T27552] netlink: 'syz.0.8322': attribute type 16 has an invalid length. [ 1302.380507][T27552] netlink: 156 bytes leftover after parsing attributes in process `syz.0.8322'. [ 1302.791229][T27569] netlink: 'syz.0.8329': attribute type 39 has an invalid length. [ 1304.507807][T27598] netlink: 'syz.1.8340': attribute type 16 has an invalid length. [ 1304.538339][T27598] netlink: 156 bytes leftover after parsing attributes in process `syz.1.8340'. [ 1305.017041][T27603] netlink: 'syz.1.8343': attribute type 39 has an invalid length. [ 1305.056835][ T4288] Bluetooth: Frame is too long (len 149, expected len 4) [ 1305.296276][T27616] netlink: 'syz.1.8345': attribute type 13 has an invalid length. [ 1305.304689][T27616] netlink: 24859 bytes leftover after parsing attributes in process `syz.1.8345'. [ 1306.777530][T27638] netlink: 'syz.2.8352': attribute type 39 has an invalid length. [ 1307.002032][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1307.008473][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1307.378479][T27652] netlink: 'syz.2.8356': attribute type 39 has an invalid length. [ 1308.086392][ T4288] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1308.143068][T27670] mac80211_hwsim hwsim6 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1308.159130][T16134] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 1308.167699][T16134] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 1308.216049][T20003] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 1308.227700][T20003] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1308.246317][T20003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1308.790228][T27685] netlink: 'syz.4.8368': attribute type 39 has an invalid length. [ 1308.969012][T27695] netlink: 'syz.3.8367': attribute type 12 has an invalid length. [ 1309.024648][T27695] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8367'. [ 1310.186211][T27715] netlink: 68520 bytes leftover after parsing attributes in process `syz.4.8374'. [ 1310.634917][T27730] mac80211_hwsim hwsim11 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1310.666975][T16129] wlan1: Created IBSS using preconfigured BSSID 00:00:00:00:70:25 [ 1310.687149][T16129] wlan1: Creating new IBSS network, BSSID 00:00:00:00:70:25 [ 1310.713221][ T4418] ------------[ cut here ]------------ [ 1310.719181][ T4418] WARNING: CPU: 1 PID: 4418 at net/wireless/ibss.c:37 __cfg80211_ibss_joined+0x419/0x4a0 [ 1310.729435][ T4418] Modules linked in: [ 1310.733492][ T4418] CPU: 1 PID: 4418 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1310.741262][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1310.751450][ T4418] Workqueue: cfg80211 cfg80211_event_work [ 1310.757343][ T4418] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1310.763705][ T4418] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 a9 e8 f7 0f 0b eb bf e8 b7 a9 e8 f7 <0f> 0b eb b6 e8 ae a9 e8 f7 0f 0b e9 82 fd ff ff e8 a2 a9 e8 f7 0f [ 1310.783555][ T4418] RSP: 0018:ffffc9000515fac0 EFLAGS: 00010293 [ 1310.789732][ T4418] RAX: ffffffff89998929 RBX: 1ffff92000a2bf5c RCX: ffff888019b3da00 [ 1310.797785][ T4418] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 1310.805923][ T4418] RBP: ffffc9000515fb70 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1310.814386][ T4418] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: ffff88807588b5f8 [ 1310.822458][ T4418] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88802e254c90 [ 1310.830531][ T4418] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1310.839637][ T4418] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1310.846295][ T4418] CR2: 0000001b30110ff8 CR3: 0000000038c8a000 CR4: 00000000003506e0 [ 1310.854375][ T4418] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1310.862427][ T4418] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1310.870479][ T4418] Call Trace: [ 1310.873909][ T4418] [ 1310.876986][ T4418] ? trace_rdev_return_void+0x240/0x240 [ 1310.882729][ T4418] cfg80211_process_wdev_events+0x359/0x4d0 [ 1310.888747][ T4418] ? process_one_work+0x7b4/0x1160 [ 1310.894111][ T4418] cfg80211_process_rdev_events+0x9d/0x110 [ 1310.900042][ T4418] cfg80211_event_work+0x2b/0x40 [ 1310.905035][ T4418] process_one_work+0x8ab/0x1160 [ 1310.910094][ T4418] ? worker_detach_from_pool+0x240/0x240 [ 1310.915802][ T4418] ? _raw_spin_lock_irq+0x86/0xf0 [ 1310.921160][ T4418] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1310.926263][ T4418] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1310.931936][ T4418] ? wq_worker_running+0x97/0x190 [ 1310.937028][ T4418] worker_thread+0xaf5/0x12a0 [ 1310.941849][ T4418] kthread+0x29d/0x330 [ 1310.946034][ T4418] ? worker_clr_flags+0x1a0/0x1a0 [ 1310.951176][ T4418] ? kthread_blkcg+0xd0/0xd0 [ 1310.955814][ T4418] ret_from_fork+0x1f/0x30 [ 1310.960424][ T4418] [ 1310.963526][ T4418] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1310.970831][ T4418] CPU: 1 PID: 4418 Comm: kworker/u4:18 Not tainted syzkaller #0 [ 1310.978488][ T4418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1310.988579][ T4418] Workqueue: cfg80211 cfg80211_event_work [ 1310.994344][ T4418] Call Trace: [ 1310.997700][ T4418] [ 1311.000658][ T4418] dump_stack_lvl+0x188/0x24e [ 1311.005440][ T4418] ? memcpy+0x3c/0x60 [ 1311.009508][ T4418] ? show_regs_print_info+0x12/0x12 [ 1311.014733][ T4418] ? load_image+0x410/0x410 [ 1311.019277][ T4418] panic+0x2d3/0x710 [ 1311.023224][ T4418] ? bpf_jit_dump+0xd0/0xd0 [ 1311.027778][ T4418] ? ret_from_fork+0x1f/0x30 [ 1311.032401][ T4418] __warn+0x2f8/0x4f0 [ 1311.036411][ T4418] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1311.042007][ T4418] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1311.047924][ T4418] report_bug+0x2ba/0x4f0 [ 1311.052338][ T4418] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1311.057919][ T4418] handle_bug+0x3a/0x70 [ 1311.062115][ T4418] exc_invalid_op+0x16/0x40 [ 1311.066659][ T4418] asm_exc_invalid_op+0x16/0x20 [ 1311.071545][ T4418] RIP: 0010:__cfg80211_ibss_joined+0x419/0x4a0 [ 1311.077830][ T4418] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 57 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 c0 a9 e8 f7 0f 0b eb bf e8 b7 a9 e8 f7 <0f> 0b eb b6 e8 ae a9 e8 f7 0f 0b e9 82 fd ff ff e8 a2 a9 e8 f7 0f [ 1311.097481][ T4418] RSP: 0018:ffffc9000515fac0 EFLAGS: 00010293 [ 1311.103581][ T4418] RAX: ffffffff89998929 RBX: 1ffff92000a2bf5c RCX: ffff888019b3da00 [ 1311.111578][ T4418] RDX: 0000000000000000 RSI: ffffffff8a8c18a0 RDI: ffffffff8adf68a0 [ 1311.119577][ T4418] RBP: ffffc9000515fb70 R08: ffffffff90b0f2af R09: 1ffffffff2161e55 [ 1311.127571][ T4418] R10: dffffc0000000000 R11: fffffbfff2161e56 R12: ffff88807588b5f8 [ 1311.135566][ T4418] R13: dffffc0000000000 R14: 000000000000001f R15: ffff88802e254c90 [ 1311.143571][ T4418] ? __cfg80211_ibss_joined+0x419/0x4a0 [ 1311.149165][ T4418] ? trace_rdev_return_void+0x240/0x240 [ 1311.154745][ T4418] cfg80211_process_wdev_events+0x359/0x4d0 [ 1311.160680][ T4418] ? process_one_work+0x7b4/0x1160 [ 1311.165912][ T4418] cfg80211_process_rdev_events+0x9d/0x110 [ 1311.171747][ T4418] cfg80211_event_work+0x2b/0x40 [ 1311.176703][ T4418] process_one_work+0x8ab/0x1160 [ 1311.181682][ T4418] ? worker_detach_from_pool+0x240/0x240 [ 1311.187335][ T4418] ? _raw_spin_lock_irq+0x86/0xf0 [ 1311.192393][ T4418] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1311.197467][ T4418] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1311.203046][ T4418] ? wq_worker_running+0x97/0x190 [ 1311.208118][ T4418] worker_thread+0xaf5/0x12a0 [ 1311.212881][ T4418] kthread+0x29d/0x330 [ 1311.217000][ T4418] ? worker_clr_flags+0x1a0/0x1a0 [ 1311.222073][ T4418] ? kthread_blkcg+0xd0/0xd0 [ 1311.226726][ T4418] ret_from_fork+0x1f/0x30 [ 1311.231201][ T4418] [ 1311.235149][ T4418] Kernel Offset: disabled [ 1311.239629][ T4418] Rebooting in 86400 seconds..