last executing test programs: 7.380199169s ago: executing program 0 (id=9257): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000f00)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@cgroup=r2, 0x22, 0x1, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000e40)=[0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x1}}, 0x80, 0x0}, 0x4880) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd704000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x31, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0]}, 0x40) 7.084633144s ago: executing program 0 (id=9260): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x1aa0d, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000005cf32e2a669d"], &(0x7f0000000400)=""/188, 0x3a, 0xbc, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)}, {&(0x7f0000000700)="27b7f5ac42a84364145309afff5adaf9022fe976ed039033c440211d43d2eaa18ade23419435f04f5c6ece9d6720eda180f9d6ad4919e76f18bd6b3b52572fc8bf040b538acdf1d27b6fc2266371602c59dfbeaf7892ecb7469216203f3d8e03c0a4cf134526f33dedbaba01c947609331bf8f6e514a569e1bbe752341021d752138f25b88bfd47860dd9d28ec2654db2cc8b6a6d014da6eb73f8b5b1e1c7d5522fe93639b", 0xa5}], 0x2, &(0x7f0000000800)=[{0x90, 0x6, 0xc73, "3037697ae410f85e04920fd573a934219d193fa66400cfbe716702f65a26ca1f166478b355428d4d115f5b88821f13f79e9a725b65e5959a5ab30e7ab395c081358f6769b915c0a9af65c7f932534040ec6c1a1198a8a18b95db401403ca9e1395be92e014ce71f65d19ecde63b87ed294a0cf1bd2604feeff46"}, {0x70, 0x109, 0x74c8, "5758643a8245544c0d18d49b2b6950d00aa91313535829fb0c46a6d4a4626aeb4f00c72847b478967a58820caa79bc2bcba7f7fc079ed457aea280daebdbfc9e4b5519868da4d8deb13dac1f29f4e533d421d1523340b4f27a53ff"}], 0x100}, 0x4040014) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e488a8637286dd"], 0xfdef) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) 6.518569432s ago: executing program 2 (id=9262): perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x3, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x9, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0xa) socket$kcm(0x11, 0x3, 0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x114905, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged\x00', 0x26e1, 0x0) r3 = socket$kcm(0x2, 0x6, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x3e, &(0x7f00000002c0)=r2, 0x4) sendmsg$inet(r3, &(0x7f0000001a40)={0x0, 0x0, 0x0}, 0x0) 6.443304796s ago: executing program 0 (id=9263): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000f00)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@cgroup=r2, 0x22, 0x1, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000e40)=[0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x1}}, 0x80, 0x0}, 0x4880) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r7, 0x4, r8}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x31, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0]}, 0x40) 6.202778908s ago: executing program 2 (id=9265): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff014}, {0x6, 0x0, 0x7, 0x8}]}) 5.940160121s ago: executing program 1 (id=9268): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x4) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/15], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000085000000190000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 5.890301624s ago: executing program 0 (id=9269): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x1, 0x8e, 0xe7c9, 0x1}, 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0x1}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="5c00000014006b03000000d86e6c1d00028409fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6aee6d700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x84) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x80a, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c30000000e8fe55a1190015000600142603600e120900180000000401a80016000a0004400a080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f00000001c0)=r5, 0x4) bpf$MAP_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xe30a, r0}, 0x38) r6 = socket$kcm(0x2, 0x5, 0x84) perf_event_open(&(0x7f00000012c0)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x400000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x840, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115f00000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r7) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r6, 0x84, 0xb, &(0x7f0000000040), 0x2) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10, &(0x7f0000000200)=[{&(0x7f00000001c0)="92", 0x1}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r6, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x1, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000300)="e4", 0x1}], 0x1}, 0x4000) 4.853617846s ago: executing program 1 (id=9271): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, 0x0, 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff014}, {0x6, 0x0, 0x7, 0x8}]}) 4.76508626s ago: executing program 2 (id=9273): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff014}, {0x6, 0x0, 0x7, 0x8}]}) 3.891142024s ago: executing program 3 (id=9275): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000100), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg(r3, 0x0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 2.753478091s ago: executing program 3 (id=9276): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x7f, 0xfffe, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x2) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x4d, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="3af6303ea6fedea42d5949a9e835edead37cf054a8083bba53f22e70b94a8f04f63a4f86f0369f92de8eccf90cd13de3b4a6eb1cec46806f3b4198ee4fbc53b92ea30eb2744ab5572b75f9cb2ee4", 0x4e}, {0x0}, {0x0}, {&(0x7f00000008c0)="3f9c1a6ad2b39c2c3943b486dc38dd9dea472009d8f0870c67bf2ff4ff", 0x1d}, {0x0}], 0x5}, 0x24044810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 2.658104306s ago: executing program 1 (id=9277): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000f00)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@cgroup=r2, 0x22, 0x1, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000e40)=[0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x1}}, 0x80, 0x0}, 0x4880) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, 0xffffffffffffffff, 0x4, r7}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000009702000020febfff7a0af0fff8ff00f869a4f0ff00000000b70600001218d1fe2d640500000000002404000000ffffffd704000040000000b704000010000020720700fe00000000850000002f000000b70000000a00000095000000000000006458c2c62fca868f0399d909a63396c113943219aab9d607000000cb3924b611f5969f62c28b22edf3cf393d14c46cc4f79fd2b316da4f0de8163f6242fa8a23f1740637c48468766af54043000000ec44631ac2622cdcae18c3d14bfbe96dd87235b44174f7c034318508f49f09781dc7a2cfbb9a0f119e31975f551557f05dc2dc2739e2e735d0ab961dac07f4f6d8aa1c3f16765d427c0e01000000fe4c16737d50d2a4bfc463450d524eacf2b734b0289c7a3a16eeca71296746681d61af491e4fa734318e0d72b8dbbc2b2b869af2f87903000000b6ecc7de09a2257e908cd92e664fa7aba7f07474863333c460e34caf0806a7e2575a56fba3eadd8efbd5dae6c024585d972b1bf8c4e872bba38160be9e92b6ddb90fc51b894917b50876b5708e64e70f7d8225da90ce9bc019084873ed07c0c59c4ba053fe77e0d37ccc3318da2e9fefaf025527e734ed1de5d12b4c56ca3b03dc121086061d1f26821a428d28eefa22ead6a3dab9388da53263b81ebe6be197a48a63440000a356240c4e2df57457000100000000000000000000008d2516510b29804b3cc034c19cef0d773f01064709edd63a185cbab8456c25283b9514b220fe401503ff536478088eb9fd932a0703a7bf9ea40429b2d49177824f210a69f8e5227fd32e7d5a2c7ecf57ac64509224090000000000000096e5a55d2c805bf725b9d14756c8cfa292aae0872866cf9fe063317741a0db9081d4393a7f9bcc0917d60a11b4a9ece831660ce625de441cef915eba31255d163f7033045ceb97f8ea006efc5b84f75ca1fb74c9faef444eb12f46b435de87feb2f7f2d7fb659395e4b38178b5c67e6ac100000000000000001b2e77bd5de136fa1bec1a26c622bb9662d9ee70147acc5605aa2318855cb8b918000000c5f265dcb5dce05f94ea051c4e8dcdf37d01ad7aff64f84ce32b841c799f47c2949725285fc50f1dd3f5e264023082eec752704c1f598151aa7d29e0d79522df196278acf327a74777d1f658f50c27020198770ff8ebef9df1b750d56d4d195ad7a267c46b3348b0e03ed33b5bca13cafc304dc6da78d20f029742d8d2f36acfdd331081ca00c1d5c8b7bed2ef603d6e7f1764246aab2d7d531559a971939a038055ac28625ec837f824ff537cd67993a3589be73a18680da50287b9e962b1a0235c290346a21ca5de55c49c78e411c791617000ef8df75411a5d300000000000000e0ffffff004deb8d49806823655735bd6deb49edb2e42f4ed9e6e9080366660b847bf03c144f6796920726dcf29e9a6c808459e82cbb0000000000000000000000000000000000006b5530865aaa7aa6171f66f2bca881a4201588427bb65ed3d5e7a74e9b5ece44067d4a9875a310bc7ec42b844b9eb3c9083560ef5c92b8a01188d615efbf70893d2eaf76517e990021fa5020a71023bca1194ad87cade480ba3dce8f57294e31ca24a8d181210bb6d18ff2c58293c2e314a7447ed3a1c870908aa8e3b33e6a94c7381bce9fa71dcbb758451f247e38d80d66e03d7564a5cddfaf06574b05cefb2670f30c2d501ee625ce3ffc08f15b53d28ce552c1807bc6866f06098a0e5517068aa48f2a82496fe83ee85218fe7f52b48742c7055f2a144c13e9c54be60b0a4f979ef7eb216897875946dc6ca1571930b1cf7c93de103f5289f782ae538e02612c717a76c787a873936eb8dcf1bfe581cc8ef965a0424bc140939e3274e251e519d188f6af680402c49458065dccfcb4f0d4f2ec9cf6fb3cf0a1807e34fb8d0108007734c1d2bc6a9d32d2560a88bad976b6000100002b712e632eeca810fb73fc8aaef94acf8bde18b9149cadc688254eabbe91f943592ccf68e717bcc6852828bd621e3a9dcb1cc6f1a6d1915200d95087838c2dc0a002c3aa554f725b965714144652cdc14761b0236f1a05b7f50f4149057e63d713103b5a6c2919161efc165a2e6981d76d29c95ad9f180135fb8962f59495fd33be3a6d35274941790bc1bd9da5e9c67c39de2c9f6fe35b8f528edbd8ea2a77dccdc3fe247feb121d9"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89a2, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x31, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0]}, 0x40) 2.372906391s ago: executing program 3 (id=9278): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000480)='cpu.max\x00', 0x2, 0x0) r2 = openat$cgroup(r0, &(0x7f0000000f00)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000e80)={@cgroup=r2, 0x22, 0x1, 0x3, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000e40)=[0x0, 0x0, 0x0]}, 0x40) write$cgroup_subtree(r1, &(0x7f0000000340)=ANY=[], 0x27) r3 = socket$kcm(0x1e, 0x5, 0x0) sendmsg$kcm(r3, &(0x7f0000000540)={&(0x7f0000000780)=@tipc=@name={0x1e, 0x2, 0x0, {{0x43, 0x1}, 0x1}}, 0x80, 0x0}, 0x4880) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) socketpair(0x29, 0x2, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x0, 0x37, 0x0, 0x0, 0x1}, 0x28) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r6 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r5}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r6, r7, 0x4, r8}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@ifindex, 0x31, 0x1, 0x4, &(0x7f0000000040)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0]}, 0x40) 2.290445774s ago: executing program 2 (id=9279): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000000)={'wlan1\x00', @random="0200ff7fffff"}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x18, 0x0, 0x0, &(0x7f0000001400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x0, &(0x7f0000000840)}) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r3 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd}, 0x0, 0xfeffffffffffffff, 0xffffffffffffffff, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000000140)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = socket$kcm(0x1e, 0x1, 0x0) sendmsg$kcm(r5, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x80, 0x0}, 0x80c0) close(r2) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r6, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xb, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 2.158258801s ago: executing program 0 (id=9280): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd79, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x99, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x7}, 0x0, 0x8, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) write$cgroup_subtree(r2, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x4) write$cgroup_type(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200"/15], 0x0}, 0x94) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r3, &(0x7f0000000000)=ANY=[], 0xffdd) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000000085000000190000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.157790421s ago: executing program 1 (id=9281): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, 0x0, 0x0) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff014}, {0x6, 0x0, 0x7, 0x8}]}) 2.121571283s ago: executing program 3 (id=9282): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x1aa0d, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22ffef) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f00000000c0)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000005cf32e2a669d"], &(0x7f0000000400)=""/188, 0x3a, 0xbc, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xd0}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)}, {&(0x7f0000000700)="27b7f5ac42a84364145309afff5adaf9022fe976ed039033c440211d43d2eaa18ade23419435f04f5c6ece9d6720eda180f9d6ad4919e76f18bd6b3b52572fc8bf040b538acdf1d27b6fc2266371602c59dfbeaf7892ecb7469216203f3d8e03c0a4cf134526f33dedbaba01c947609331bf8f6e514a569e1bbe752341021d752138f25b88bfd47860dd9d28ec2654db2cc8b6a6d014da6eb73f8b5b1e1c7d5522fe93639b", 0xa5}], 0x2, &(0x7f0000000800)=[{0x90, 0x6, 0xc73, "3037697ae410f85e04920fd573a934219d193fa66400cfbe716702f65a26ca1f166478b355428d4d115f5b88821f13f79e9a725b65e5959a5ab30e7ab395c081358f6769b915c0a9af65c7f932534040ec6c1a1198a8a18b95db401403ca9e1395be92e014ce71f65d19ecde63b87ed294a0cf1bd2604feeff46"}, {0x70, 0x109, 0x74c8, "5758643a8245544c0d18d49b2b6950d00aa91313535829fb0c46a6d4a4626aeb4f00c72847b478967a58820caa79bc2bcba7f7fc079ed457aea280daebdbfc9e4b5519868da4d8deb13dac1f29f4e533d421d1523340b4f27a53ff"}], 0x100}, 0x4040014) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[], 0xffbf) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) 1.701561964s ago: executing program 3 (id=9283): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x104101, 0x4, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) r4 = socket$kcm(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000045) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="01f8ffffff8d"}) sendmsg$kcm(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000016c0)=[{0x10, 0x117, 0x400}, {0xb0, 0x107, 0x80, "4ff256fda981f2c159bd7a4bf5844a5352dae6460936cdd1265d7fa7738e65230d88b1f5321860436586454ca3100bad0eed79eea86d9473553a0e09c7db6c5db4985cae757ba022b0a3e148151a6a37d27a2fdb08c36c81f686be4f76b08864287d2768a603f563308bca3c75f98fff9ad64211b32da668b9b01642f23e95c41cd85d395d75dbfc7f0ddb8b35e4e425e4248f65c6c426ba5059ea12d4"}, {0x60, 0x0, 0x2, "71d593dd8e1ec3af6cf7c1b8a17317df7fbe53dfc457af782c19d1522bdf6821d316dfa00b80ace1b9cd91b7339deb5105f6068922cba0befcc4b9af55cff60d296832e3b9874c027a"}, {0xa0, 0x10f, 0xfffffffd, "bf9e33a0403498fd7527b06afdbf0f3a5c604a346e934e995525e7f163e99b3565094e398ebcb381938f1dbdf272a5ea8eacbac5bf699386ff04d377cc09e6f60dfca1d1ce9bb42c06ceafdd01fc5029dc16459d30f27e550fa5965d5ef0657ab75abd0fab40f1f7e88981945f03de33fee7b44ff1c2536e7b8bdbd2eb81623109a511fae4792219d0"}, {0x20, 0x109, 0x3c70, "158d99bdb8d7dd277fe2111ded55e64a"}], 0x1e0}, 0x44084) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r7 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000001f80)={&(0x7f0000001d00)=@ll={0x11, 0x3, 0x0, 0x1, 0x7}, 0x80, 0x0}, 0x0) r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000b, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x76, 0x1ef7}, 0x1beea, 0x4, 0x98, 0x0, 0x2, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x20}, r8, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x2, 0x922000000001, 0x106) ioctl$PERF_EVENT_IOC_SET_BPF(r9, 0x40042408, r10) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8918, &(0x7f0000000000)={'ipvlan0\x00', @random="0200ff7fffff"}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b40)={0x11, 0x6, &(0x7f0000001940)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, @jmp={0x5, 0x1, 0x6, 0xb, 0x8, 0xfffffffffffffffe, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}], 0x0, 0xb437, 0xa3, &(0x7f00000019c0)=""/163, 0x41100, 0xec, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000001a80)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000001ac0)={0x5, 0x6, 0x8, 0x7ff}, 0x10, 0x0, 0x0, 0x2, 0x0, &(0x7f0000001b00)=[{0x2, 0x2, 0x8, 0xc}, {0x4, 0x2, 0x4, 0xa}], 0x10, 0x3}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x8a, &(0x7f0000000180), 0x4bd) 1.554438902s ago: executing program 2 (id=9284): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000100), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg(r3, 0x0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 918.061864ms ago: executing program 2 (id=9285): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x40009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xffffffffffffffff, 0x3fff8000}, 0x0, 0xff, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3efd7ab4c41335d9, @perf_config_ext={0x0, 0x1000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000057700000000000000000000182ec0002020702500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb70200000800c309b703000024000000850000000600000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095000000"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0xc}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = perf_event_open(&(0x7f0000000540)={0x7, 0x80, 0xb, 0xc0, 0x7, 0x6, 0x0, 0x5, 0x100, 0x4, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x8, 0x1}, 0x8, 0x5, 0x6, 0x9, 0x7, 0x35b, 0x7, 0x0, 0x2, 0x0, 0x8}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x8) ioctl$SIOCSIFHWADDR(r1, 0x8b06, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)="d80000001a0081044e81f782db4cb904021d0800fe007c05e8fe55a115001c000200142603600e12080005007a010401a800160020001d400d000000035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000dc0)={0x0, 0x80, 0x0, 0x5, 0x8, 0x6, 0x0, 0xd, 0x20002, 0xf, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4, @perf_config_ext={0x5, 0x8}, 0x2a0f, 0xc046, 0x3e, 0xa, 0x0, 0x7, 0x8, 0x0, 0x8, 0x0, 0x4}, r4, 0xc, r2, 0x0) socket$kcm(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff07) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000140)={'wlan1\x00', @random="0100000000eb"}) recvmsg$unix(r3, &(0x7f00000005c0)={&(0x7f00000006c0), 0x6e, &(0x7f0000000e40)=[{&(0x7f0000000f00)=""/121, 0x79}, {&(0x7f0000000900)=""/148, 0x94}, {&(0x7f00000009c0)=""/93, 0x5d}, {&(0x7f0000000cc0)=""/216, 0xd8}, {0x0}], 0x5, &(0x7f0000000f80)}, 0x3) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x24, 0x12506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x7602}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2101, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100904}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000ec0)=ANY=[@ANYBLOB="720ac4ffe3d5332d6910160f848e00000000009500"], &(0x7f0000000480)='GPL\x00'}, 0x94) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x10000, 0x0) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f0000000500)) socket$kcm(0xa, 0x7, 0x88) close(0x3) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000100)={&(0x7f0000000180)="8621457b1771c16215fa9f61f75cf2b7f246ca4726d77339de5f19bddf0e5e56d67a9c943710e1856ef4ad79e01a9e315c18d7cfe9f2b7527bb11ccb33e891fa895730a87e5468f436edbb5d4eba1e745b31397bed3c53a4c68eaf5697a2c64ed886ef9b468a17df0d2b8c040881d9bedade4bdde343850d24292a7c60802c73cf50c1ae0025bd41c61d4c0b3102ef54a5f3794886c958e725ec90ce3eca7054853eec33b7402219c45ff36057cf8b61e733ff4aeeac7cd30de0c2ecc2acd297be4c9ef5be139211942840f35ce90696aee14a5897b38c31f11599d9130fda79a950312b9a3c827897be60496a100454", &(0x7f0000000280)=""/154, &(0x7f0000000040)="5c40ff6c90ecb6021e46e04c1f7aae2f2d8e506a417ab09fbb2b537853cfa3e9c5d04be090aed655ef6821faf3ca9dadea8cafd1a9", &(0x7f0000000340)="784be7fc6158bb0b3359fdfa2a5268088c9a001d031aeebbe7ea32e7d7471d6a12035e3e287920198e1e8b7f4b9ea835cd3507f75eeb3d14aaf87b67cd380c6aca71308453aa304c285216186aa407310c25a9cdc6f262efe072fe58b303a96c51616cffa3f1235c60d84dd19034455c78646b6318116eef81d035553dc7f149e23c84b72fc2cd5363fbe9411d5f4c8ac8a75c352e0e4a24a1c50f95d3d2e6eb9c4d4afff03860fe1455a9fc8b2ddcdc38cbee31137a544b36fa3690d6449ea78c1a3702c99a11ccbb998d210cb81c5c11", 0x8a8, 0xffffffffffffffff, 0x4}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xfffffffffffffd5f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 915.758024ms ago: executing program 0 (id=9293): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x19d5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r3, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x20000001) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="01000000420000000600000008"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r4}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r5, &(0x7f00000002c0), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000100), &(0x7f0000000200)=r2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}, {0x0, [0x61]}}, 0x0, 0x43}, 0x28) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r6, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800"/16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7}, 0x94) sendmsg(r3, 0x0, 0x40001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmsg$kcm(r3, &(0x7f0000000fc0)={0x0, 0x0, 0x0}, 0x100) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8712360000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x200000000000000) 737.240923ms ago: executing program 1 (id=9286): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0xa, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x7f, 0xfffe, 0x0, 0x0, 0x0, 0xd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x400000002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x402, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x86bf2056334f3ae6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = perf_event_open(&(0x7f0000001100)={0x5, 0x80, 0x9, 0x8, 0xb, 0xfb, 0x0, 0x3c, 0xc002, 0xa, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x18842, 0x0, 0x7fffffff, 0x7, 0x9, 0x3, 0x7, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, r2, 0x2) r3 = getpid() perf_event_open(0x0, r3, 0x0, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.stat\x00', 0x60ff, 0x8cffffff) syz_open_procfs$namespace(0x0, 0xfffffffffffffffc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r5, 0x29, 0x4d, 0x0, 0x0) sendmsg$kcm(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="3af6303ea6fedea42d5949a9e835edead37cf054a8083bba53f22e70b94a8f04f63a4f86f0369f92de8eccf90cd13de3b4a6eb1cec46806f3b4198ee4fbc53b92ea30eb2744ab5572b75f9cb2ee4", 0x4e}, {0x0}, {0x0}, {&(0x7f00000008c0)="3f9c1a6ad2b39c2c3943b486dc38dd9dea472009d8f0870c67bf2ff4ff", 0x1d}, {0x0}], 0x5}, 0x24044810) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) 569.654062ms ago: executing program 3 (id=9287): r0 = socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = socket$kcm(0xa, 0x3, 0x3a) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x20000010) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890b, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x890c, &(0x7f0000000100)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r3 = openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) r5 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r5, &(0x7f00000000c0)='THAWED\x00', 0x7) socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) r6 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r6, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000140)={0x2, &(0x7f0000000000)=[{0x20, 0x10, 0x0, 0xfffff014}, {0x6, 0x0, 0x7, 0x8}]}) 0s ago: executing program 1 (id=9288): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000d60000000900000005"], 0x50) r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) r1 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xed, 0x0, 0x0, 0x0, 0x0, 0x8, 0x400, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, @perf_config_ext={0xffffffffffffff7f}, 0x111311, 0x1, 0x0, 0x1, 0x20000, 0x0, 0x1}, 0x0, 0x1, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r3, 0x40042409, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x4, 0x80, 0xe2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000b80)="d80000001c0081044e81f782db44b904021d080201000000000018a118000c000600142603600e1208000f0100810401a8001600200001400300600803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e0852", 0x63}, {&(0x7f0000000580)="bf49498ca8a07dba227599c311a0bf08264860a910e5b37ab4ad33df43fa70ffc79eeeca2f38ba06e1ee93acd310f99a76337ed6de248944844da26865dceabeffe8a47ad8193b82f36fcbb3f27e052690d0c8ccbd8cbf72db", 0x59}, {&(0x7f0000000a00)="7e29d1a3098934975681c85ab33606d77b4970ba01a81851b3eb4ab5", 0x1c}], 0x3, 0x0, 0x0, 0x7400}, 0x4804) sendmsg$kcm(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087"], 0x0}, 0x94) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000200)={&(0x7f0000001340)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000640)="076293e01be94104e82fd2634380ef9f056c4a5d449c690391bdf36799652379fe5fa52a2b49942b530f507162903bf6bbc369826675de3f870a47f3db526d7c6c38aa68717d6192f2256af1250611cfa9157e3c93f99aedd9916e7f96c032634fe71aa1bff366a0eff269c596a732b1957bc8c0913d4274080e10e63d77600b5f7f98eb96e2d37bfc654332d1ff1dea4f8326e1e690a902bfdef9d73529a7eac5edd9c0d8f987b3d6d60fae1efbfb6e8a2e07126f9a8d97a17b2e7fe48b6d11d28b96b3e5c8c23f2d574a923dfaf2ad", 0xd0}], 0x1}, 0x480c0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3, 0x0, 0x8}, 0x0, 0xff7fffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000054382fbc37bcea70c16eaf"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) close(0xffffffffffffffff) r7 = socket$kcm(0xa, 0x2, 0x73) sendmsg$kcm(r7, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xff, @private2, 0x8}, 0x80, 0x0, 0x0, &(0x7f0000003f40)=ANY=[@ANYBLOB="18000000000000002900000005000000000002"], 0x18}, 0x0) r8 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$kcm(r8, &(0x7f0000000380)={&(0x7f0000000000)=@phonet={0x23, 0x0, 0x0, 0x7}, 0x14, &(0x7f0000000340)=[{&(0x7f0000000200)="b3", 0x1}, {0x0}], 0x2}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r6, 0x0, 0x0}, 0x10) kernel console output (not intermixed with test programs): [ 1478.384106][T28572] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1478.526359][T28576] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1478.561708][T28576] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1478.699603][T28580] netlink: 'syz.3.7438': attribute type 21 has an invalid length. [ 1478.710668][T28580] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7438'. [ 1478.722393][T28580] netlink: 'syz.3.7438': attribute type 4 has an invalid length. [ 1478.732508][T28580] netlink: 'syz.3.7438': attribute type 5 has an invalid length. [ 1478.741456][T28580] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7438'. [ 1478.793556][T28582] netlink: 'syz.2.7440': attribute type 10 has an invalid length. [ 1479.087935][T28593] netlink: 121460 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1479.108274][T28593] netlink: 21068 bytes leftover after parsing attributes in process `syz.3.7443'. [ 1480.240905][T28615] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1480.259853][T28615] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1480.345050][T28614] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1480.362729][T28614] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1481.216131][T28635] netlink: 'syz.3.7457': attribute type 10 has an invalid length. [ 1481.390864][T28639] netlink: 'syz.2.7459': attribute type 10 has an invalid length. [ 1481.421058][T28639] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7459'. [ 1481.913483][T28644] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1481.920886][T28644] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1482.068259][T28652] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1482.076046][T28652] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1482.089600][T28647] netlink: 'syz.2.7462': attribute type 21 has an invalid length. [ 1482.106189][T28647] netlink: 128 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1482.115510][T28647] netlink: 'syz.2.7462': attribute type 4 has an invalid length. [ 1482.136960][T28647] netlink: 'syz.2.7462': attribute type 5 has an invalid length. [ 1482.144815][T28647] netlink: 3 bytes leftover after parsing attributes in process `syz.2.7462'. [ 1482.359447][T28660] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1482.446721][T28660] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1483.091341][T28670] netlink: 'syz.1.7470': attribute type 10 has an invalid length. [ 1483.102173][T28670] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7470'. [ 1483.396196][T28681] IPv6: NLM_F_CREATE should be specified when creating new route [ 1483.417840][T28682] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1483.450354][T28682] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1483.589829][T28685] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1483.642273][T28685] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1483.660142][T28678] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7472'. [ 1484.436246][T28693] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1484.443123][T28693] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1484.544281][T28694] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1484.551654][T28694] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1484.643366][T28696] validate_nla: 1 callbacks suppressed [ 1484.643395][T28696] netlink: 'syz.0.7477': attribute type 21 has an invalid length. [ 1484.668685][T28696] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7477'. [ 1484.691678][T28696] netlink: 'syz.0.7477': attribute type 4 has an invalid length. [ 1484.708330][T28696] netlink: 'syz.0.7477': attribute type 5 has an invalid length. [ 1484.844234][T28696] netlink: 3 bytes leftover after parsing attributes in process `syz.0.7477'. [ 1485.100612][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.109991][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.122046][T28699] netlink: 121460 bytes leftover after parsing attributes in process `syz.2.7479'. [ 1485.159939][T28699] netlink: 21068 bytes leftover after parsing attributes in process `syz.2.7479'. [ 1485.173531][T28699] tipc: Started in network mode [ 1485.188943][T28699] tipc: Node identity d, cluster identity 56 [ 1485.210031][T28699] tipc: Node number set to 13 [ 1485.582217][T28706] netlink: 'syz.0.7480': attribute type 10 has an invalid length. [ 1485.591663][T28706] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7480'. [ 1485.618727][T28706] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1485.777853][T28711] netlink: 'syz.2.7484': attribute type 10 has an invalid length. [ 1486.600917][T28730] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1486.635506][T28730] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1486.766699][T28725] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1486.778014][T28725] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1487.670601][T28736] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7490'. [ 1487.938191][T28746] netlink: 121460 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1488.030106][T28746] netlink: 21068 bytes leftover after parsing attributes in process `syz.0.7491'. [ 1488.045107][T28746] tipc: Started in network mode [ 1488.052356][T28746] tipc: Node identity d, cluster identity 56 [ 1488.060074][T28746] tipc: Node number set to 13 [ 1488.392835][T28754] netlink: 'syz.1.7494': attribute type 10 has an invalid length. [ 1488.430978][T28754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7494'. [ 1489.215283][T28779] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7505'. [ 1489.427632][T28779] .` (unregistering): (slave 1@ÿ): Releasing backup interface [ 1489.475338][T28779] @ÿ: left promiscuous mode [ 1489.697585][T28779] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1489.994345][T28779] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1490.004165][T28779] batadv_slave_0: left promiscuous mode [ 1490.021414][T28779] .` (unregistering): Released all slaves [ 1490.041001][T28788] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7506'. [ 1490.051100][T28787] netlink: 'syz.2.7508': attribute type 10 has an invalid length. [ 1490.070525][T28787] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7508'. [ 1490.883189][T28809] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1490.903994][T28809] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1490.939861][T28812] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1490.949651][T28812] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1490.967016][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.0 [ 1491.776148][T28829] netlink: 'syz.2.7520': attribute type 10 has an invalid length. [ 1491.816226][T28829] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7520'. [ 1493.001524][T28842] netlink: 'syz.3.7524': attribute type 10 has an invalid length. [ 1493.032118][T28847] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7532'. [ 1493.376497][T28854] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1493.383376][T28854] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1493.439650][T28852] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1493.456649][T28852] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1493.847306][T28862] netlink: 'syz.1.7530': attribute type 10 has an invalid length. [ 1493.850820][T28863] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7529'. [ 1493.858075][T28862] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7530'. [ 1494.063417][T28866] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7534'. [ 1494.111201][T28866] IPv6: Can't replace route, no match found [ 1495.430205][T28885] netlink: 'syz.3.7536': attribute type 10 has an invalid length. [ 1495.690231][T28891] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1495.738772][T28891] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1495.785953][T28894] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1495.821193][T28894] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1495.831159][T28893] netlink: 'syz.3.7541': attribute type 10 has an invalid length. [ 1495.861087][T28893] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7541'. [ 1496.432524][T28899] netlink: 'syz.0.7550': attribute type 10 has an invalid length. [ 1496.441986][T28899] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7550'. [ 1496.477332][T28899] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1496.498107][T28904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7542'. [ 1497.016488][T28904] .` (unregistering): (slave 1@ÿ): Releasing backup interface [ 1497.041550][T28904] @ÿ: left promiscuous mode [ 1497.063906][T28904] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1497.108887][T28904] .` (unregistering): (slave netdevsim0): Releasing backup interface [ 1497.132791][T28904] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 1497.342448][T28904] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1497.358491][T28904] batadv_slave_0: left promiscuous mode [ 1497.383736][T28904] .` (unregistering): Released all slaves [ 1497.465873][T28914] netlink: 'syz.0.7544': attribute type 22 has an invalid length. [ 1497.494680][T28914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7544'. [ 1498.658520][T28935] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1498.665468][T28935] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1499.056871][T28933] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1499.097866][T28933] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1499.322749][ T5773] Bluetooth: hci0: unexpected event 0x3c length: 15 > 7 [ 1499.547826][T28942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7554'. [ 1499.666702][T28942] IPv6: Can't replace route, no match found [ 1500.144452][T28956] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7557'. [ 1500.857835][T28956] .` (unregistering): (slave 1@ÿ): Releasing backup interface [ 1500.967429][T28956] @ÿ: left promiscuous mode [ 1501.021527][T28956] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1501.041942][T28956] .` (unregistering): (slave batadv_slave_0): Releasing backup interface [ 1501.051575][T28956] batadv_slave_0: left promiscuous mode [ 1501.060074][T28956] .` (unregistering): Released all slaves [ 1501.121931][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1501.644589][T28979] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1501.663731][T28979] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1501.686526][T28981] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1501.701340][T28981] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1502.017549][T28985] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1502.122237][T28985] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1502.435592][T28986] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1502.498787][T28986] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1503.911945][T29016] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1503.920820][T29016] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1503.942032][T29020] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1503.949516][T29020] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1504.460648][T29026] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1504.477014][T29026] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1504.542003][T29030] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1504.622826][T29030] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1504.661493][ T5773] Bluetooth: hci3: unexpected event 0x20 length: 15 > 7 [ 1504.818866][ T5773] Bluetooth: hci3: unexpected event 0x3c length: 15 > 7 [ 1505.887264][T29051] netlink: 'syz.0.7583': attribute type 10 has an invalid length. [ 1505.965816][T29051] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7583'. [ 1505.991903][T29051] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1511.660533][T29149] netlink: 'syz.3.7612': attribute type 10 has an invalid length. [ 1511.670780][T29149] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7612'. [ 1512.911549][T29172] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1512.926922][T29172] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1512.945180][T29172] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1512.954362][T29172] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1513.299898][T29183] netlink: 'syz.2.7619': attribute type 27 has an invalid length. [ 1513.308619][T29183] netlink: 'syz.2.7619': attribute type 4 has an invalid length. [ 1513.317125][T29183] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7619'. [ 1514.823066][T29212] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1514.845797][T29212] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1514.881646][T29212] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1514.905959][T29212] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1515.515120][T29221] netlink: 'syz.2.7631': attribute type 19 has an invalid length. [ 1515.524835][T29229] netlink: 'syz.2.7631': attribute type 19 has an invalid length. [ 1516.609955][T29253] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1516.670183][T29253] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1516.713890][T29254] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1516.752505][T29254] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1517.276005][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.187 [ 1517.440252][T29270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7645'. [ 1517.508875][T29267] IPv6: Can't replace route, no match found [ 1517.972520][T29281] netlink: 'syz.0.7648': attribute type 27 has an invalid length. [ 1518.006746][T29281] netlink: 'syz.0.7648': attribute type 4 has an invalid length. [ 1518.015281][T29281] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7648'. [ 1519.563519][T29317] netlink: 'syz.1.7663': attribute type 27 has an invalid length. [ 1519.603925][T29317] netlink: 'syz.1.7663': attribute type 4 has an invalid length. [ 1519.620174][T29317] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7663'. [ 1520.784073][T29353] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1520.791705][T29353] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1520.830309][T29353] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1520.842474][T29353] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1521.772506][T29371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7678'. [ 1521.900770][T29371] IPv6: Can't replace route, no match found [ 1522.863335][T29395] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1522.870896][T29395] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1522.893861][T29393] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1522.901541][T29393] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1523.392173][T29402] netlink: 'syz.1.7697': attribute type 1 has an invalid length. [ 1523.468776][T29402] netlink: 193500 bytes leftover after parsing attributes in process `syz.1.7697'. [ 1523.795283][T29386] netlink: 'syz.2.7684': attribute type 4 has an invalid length. [ 1523.897946][T29386] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.7684'. [ 1525.432415][T29436] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1525.468515][T29436] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1525.568851][T29432] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1525.637084][T29432] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1525.745107][T29438] netlink: 'syz.2.7699': attribute type 10 has an invalid length. [ 1525.768762][T29438] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7699'. [ 1525.829934][T29444] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1525.837647][T29444] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1525.900422][T29443] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1525.912507][T29443] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1526.691238][T29458] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1526.730759][T29458] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1526.793250][T29459] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1526.825850][T29459] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1526.953936][T29462] netlink: 'syz.3.7705': attribute type 1 has an invalid length. [ 1527.015786][T29462] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7705'. [ 1527.575772][T29475] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7708'. [ 1527.697811][T29475] IPv6: Can't replace route, no match found [ 1527.766416][T29481] netlink: 'syz.1.7710': attribute type 10 has an invalid length. [ 1527.902733][T29481] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7710'. [ 1529.660742][T29509] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1529.683702][T29509] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1529.725745][T29512] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1529.738007][T29512] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1530.021701][T29521] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7722'. [ 1530.201866][T29523] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7723'. [ 1530.273454][T29521] IPv6: Can't replace route, no match found [ 1530.670274][T29526] netlink: 'syz.0.7724': attribute type 10 has an invalid length. [ 1530.685448][T29526] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7724'. [ 1530.715364][T29526] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1531.660136][T29540] netlink: 'syz.2.7729': attribute type 10 has an invalid length. [ 1531.988432][T29550] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1531.995298][T29550] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1532.136346][T29549] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1532.193749][T29549] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1532.368487][T29557] netlink: 'syz.0.7733': attribute type 1 has an invalid length. [ 1532.386574][T29557] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7733'. [ 1532.410408][T29554] netlink: 'syz.1.7734': attribute type 10 has an invalid length. [ 1532.444120][T29554] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7734'. [ 1532.641992][T29563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1532.712157][T29563] IPv6: Can't replace route, no match found [ 1533.112286][T29567] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1533.148509][T29567] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1533.286269][T29570] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1533.304987][T29568] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7736'. [ 1533.333343][T29570] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1533.806997][T29581] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1533.866016][T29581] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1533.955794][T29582] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1533.974211][T29582] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1534.781621][T29593] netlink: 'syz.1.7740': attribute type 10 has an invalid length. [ 1535.374131][T29599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7745'. [ 1535.559955][T29604] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1535.599381][T29604] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1535.650745][T29605] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1535.677564][T29605] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1535.701817][T29599] IPv6: Can't replace route, no match found [ 1536.364698][T29611] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1536.378390][T29611] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1536.421552][T29613] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1536.463689][T29613] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1536.763092][T29617] syzkaller0: entered promiscuous mode [ 1536.772130][T29617] syzkaller0: entered allmulticast mode [ 1537.203752][T29620] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1537.212872][T29620] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1537.229510][T29620] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1537.239280][T29620] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1537.503464][T29628] netlink: 'syz.2.7752': attribute type 16 has an invalid length. [ 1537.565969][T29628] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7752'. [ 1538.030301][T29642] netlink: 'syz.2.7754': attribute type 1 has an invalid length. [ 1538.032466][T29633] netlink: 'syz.3.7755': attribute type 10 has an invalid length. [ 1538.055846][T29642] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7754'. [ 1538.085996][T29633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7755'. [ 1538.168743][T29639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7757'. [ 1538.312815][T29647] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1538.338861][T29647] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1538.499371][T29650] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1538.926773][T29650] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1539.106373][T29641] IPv6: Can't replace route, no match found [ 1539.877079][T29662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7771'. [ 1540.069985][T29662] IPv6: Can't replace route, no match found [ 1540.171276][T29666] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1540.256049][T29666] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1540.367621][T29665] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1540.400500][T29665] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1541.283820][T29672] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1541.290962][T29672] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1541.370397][T29671] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1541.428365][T29671] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1542.325372][T29675] netlink: 'syz.2.7774': attribute type 1 has an invalid length. [ 1542.437526][T29675] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7774'. [ 1543.247861][T29685] netlink: 'syz.0.7764': attribute type 10 has an invalid length. [ 1543.258681][T29685] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1543.938204][T29707] netlink: 'syz.1.7775': attribute type 16 has an invalid length. [ 1543.957632][T29707] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7775'. [ 1544.574475][T29710] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1544.605889][T29710] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1544.645162][T29706] netlink: 'syz.2.7768': attribute type 22 has an invalid length. [ 1544.686067][T29706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7768'. [ 1544.867086][T29712] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1544.879510][T29712] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1545.367505][T29726] netlink: 'syz.0.7781': attribute type 1 has an invalid length. [ 1545.375326][T29726] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7781'. [ 1545.871874][T29714] netlink: 'syz.3.7777': attribute type 4 has an invalid length. [ 1545.895966][T29714] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7777'. [ 1546.211335][T29737] netlink: 'syz.1.7784': attribute type 21 has an invalid length. [ 1546.235899][T29737] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7784'. [ 1546.380970][T29745] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7784'. [ 1546.399753][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.402505][T29744] netlink: 'syz.0.7791': attribute type 1 has an invalid length. [ 1546.406245][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.555525][T29744] netlink: 193500 bytes leftover after parsing attributes in process `syz.0.7791'. [ 1546.789108][T29736] netlink: 'syz.3.7783': attribute type 10 has an invalid length. [ 1546.983844][T29742] netlink: 'syz.2.7785': attribute type 10 has an invalid length. [ 1547.049644][T29742] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7785'. [ 1547.328438][T29751] netlink: 'syz.3.7787': attribute type 16 has an invalid length. [ 1547.360865][T29751] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7787'. [ 1547.673507][T29757] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1547.684808][T29757] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1547.707292][T29760] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1547.723377][T29760] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1549.425252][T29765] netlink: 'syz.0.7792': attribute type 4 has an invalid length. [ 1549.646135][T29765] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.7792'. [ 1550.564459][T29786] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1550.616188][T29786] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1550.746656][T29785] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1550.812621][T29785] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1551.144617][T29788] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1551.214335][T29788] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1551.256048][T29793] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1551.334411][T29793] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1551.583835][T29796] netlink: 'syz.3.7801': attribute type 1 has an invalid length. [ 1551.695914][T29796] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7801'. [ 1552.386028][T29805] netlink: 'syz.0.7803': attribute type 21 has an invalid length. [ 1552.487470][T29805] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7803'. [ 1553.057709][T29808] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7803'. [ 1554.499688][T29816] syzkaller0: left promiscuous mode [ 1554.516368][T29816] syzkaller0: left allmulticast mode [ 1555.018068][T29822] netlink: 'syz.0.7804': attribute type 16 has an invalid length. [ 1555.238314][T29822] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7804'. [ 1556.401445][T29845] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1556.470561][T29845] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1556.509315][T29849] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1556.536142][T29849] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1556.730308][T29852] netlink: 'syz.2.7814': attribute type 21 has an invalid length. [ 1556.775918][T29852] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7814'. [ 1557.008311][T29857] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7814'. [ 1557.673714][T29872] netlink: 'syz.3.7821': attribute type 1 has an invalid length. [ 1557.740523][T29872] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7821'. [ 1557.920153][T17174] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1558.631431][T29884] netlink: 'syz.1.7823': attribute type 10 has an invalid length. [ 1558.641093][T29884] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7823'. [ 1559.138706][T29892] netlink: 'syz.1.7832': attribute type 10 has an invalid length. [ 1559.223400][T29892] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7832'. [ 1560.091501][T29898] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1560.123490][T29898] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1560.359331][T29900] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1560.395942][T29900] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1561.338551][T29927] netlink: 'syz.0.7835': attribute type 10 has an invalid length. [ 1561.358773][T29934] netlink: 'syz.3.7834': attribute type 1 has an invalid length. [ 1561.363383][T29927] netlink: 9279 bytes leftover after parsing attributes in process `syz.0.7835'. [ 1561.476460][T29934] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1561.546064][T29931] netlink: 'syz.1.7837': attribute type 10 has an invalid length. [ 1562.649414][T29944] delete_channel: no stack [ 1563.467256][T29952] netlink: 'syz.0.7842': attribute type 10 has an invalid length. [ 1563.485184][T29952] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7842'. [ 1563.511353][T29952] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1564.298442][T29971] netlink: 'syz.2.7848': attribute type 10 has an invalid length. [ 1564.323490][T29971] netlink: 9279 bytes leftover after parsing attributes in process `syz.2.7848'. [ 1564.845337][T29976] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1564.892962][T29976] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1565.211004][T29978] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1565.235881][T29978] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1565.289555][T29979] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1565.356023][T29979] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1565.412883][T29982] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1565.437999][T29982] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1565.628768][T29988] netlink: 'syz.0.7853': attribute type 10 has an invalid length. [ 1565.670673][T29988] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7853'. [ 1565.711076][T29988] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1565.839052][T29983] delete_channel: no stack [ 1566.306058][T29999] netlink: 'syz.2.7858': attribute type 1 has an invalid length. [ 1566.355899][T29999] netlink: 193500 bytes leftover after parsing attributes in process `syz.2.7858'. [ 1566.551122][T30003] netlink: 'syz.1.7859': attribute type 10 has an invalid length. [ 1566.577526][T30003] netlink: 9279 bytes leftover after parsing attributes in process `syz.1.7859'. [ 1566.603409][T30001] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7857'. [ 1567.782050][T30023] netlink: 'syz.0.7865': attribute type 10 has an invalid length. [ 1567.809225][T30023] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7865'. [ 1567.855155][T30023] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1569.570377][T30038] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1569.605754][T30038] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1569.660257][T30037] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1569.689482][T30037] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1569.882537][T30040] netlink: 'syz.1.7870': attribute type 10 has an invalid length. [ 1570.265975][T30045] netlink: 'syz.3.7871': attribute type 10 has an invalid length. [ 1570.330580][T30045] netlink: 9279 bytes leftover after parsing attributes in process `syz.3.7871'. [ 1570.715421][T30058] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1570.805807][T30058] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1570.856283][T30060] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1570.863522][T30060] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1571.374074][T30065] syzkaller0: entered promiscuous mode [ 1571.396671][T30065] syzkaller0: entered allmulticast mode [ 1571.895291][T30074] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1571.915809][T30074] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1572.046201][T30074] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1572.096035][T30074] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1572.342729][T30076] sit0: left promiscuous mode [ 1572.448694][T30082] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.7886'. [ 1572.479201][T30082] openvswitch: netlink: Flow key attribute not present in set flow. [ 1572.607274][T30082] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.7886'. [ 1573.168651][T30097] netlink: 'syz.3.7887': attribute type 39 has an invalid length. [ 1574.219965][T30118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7895'. [ 1574.237572][T30118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7895'. [ 1574.395774][T30118] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7895'. [ 1574.612894][T30124] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1574.624608][T30124] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1574.712433][T30123] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1574.937752][T30123] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1575.291393][T30132] netlink: 'syz.2.7899': attribute type 39 has an invalid length. [ 1575.797386][T30136] delete_channel: no stack [ 1577.435509][T30159] netlink: 'syz.1.7906': attribute type 13 has an invalid length. [ 1577.443667][T30159] netlink: 160 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1577.466784][T30159] erspan0: refused to change device tx_queue_len [ 1577.473226][T30159] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1577.477541][T30170] netlink: 'syz.2.7908': attribute type 16 has an invalid length. [ 1577.499766][T30170] netlink: 'syz.2.7908': attribute type 3 has an invalid length. [ 1577.501122][T30163] netlink: 'syz.1.7906': attribute type 4 has an invalid length. [ 1577.515841][T30170] netlink: 132 bytes leftover after parsing attributes in process `syz.2.7908'. [ 1577.530337][T30163] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1577.895594][T30177] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7921'. [ 1577.906395][T30177] openvswitch: netlink: Flow key attribute not present in set flow. [ 1577.989818][T30177] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7921'. [ 1578.518415][T30188] netlink: 'syz.0.7924': attribute type 39 has an invalid length. [ 1578.773228][T30192] netlink: 'syz.0.7917': attribute type 10 has an invalid length. [ 1578.784266][T30192] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7917'. [ 1578.808942][T30192] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1581.069155][T30213] netlink: 'syz.3.7923': attribute type 29 has an invalid length. [ 1581.105823][T30213] netlink: 'syz.3.7923': attribute type 29 has an invalid length. [ 1581.191257][T30218] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1581.233391][T30218] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1581.265260][T30213] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1581.286257][T30214] netlink: 'syz.0.7926': attribute type 16 has an invalid length. [ 1581.304548][T30214] netlink: 'syz.0.7926': attribute type 3 has an invalid length. [ 1581.318505][T30221] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.7923'. [ 1581.330009][T30214] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7926'. [ 1581.450849][T30218] netlink: 'syz.3.7923': attribute type 3 has an invalid length. [ 1581.881822][T30232] netlink: 'syz.1.7930': attribute type 39 has an invalid length. [ 1582.060644][T30235] netlink: 'syz.3.7933': attribute type 10 has an invalid length. [ 1582.456926][T30241] openvswitch: netlink: Flow key attribute not present in set flow. [ 1582.648025][T30245] netlink: 'syz.3.7936': attribute type 39 has an invalid length. [ 1582.994347][T30258] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1583.003373][T30258] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1583.022411][T30253] __nla_validate_parse: 4 callbacks suppressed [ 1583.022450][T30253] netlink: 180 bytes leftover after parsing attributes in process `syz.2.7940'. [ 1583.072994][T30258] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1583.084058][T30258] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1583.165878][T30261] netlink: 132 bytes leftover after parsing attributes in process `syz.1.7939'. [ 1583.597806][T30265] validate_nla: 2 callbacks suppressed [ 1583.597963][T30265] netlink: 'syz.0.7942': attribute type 39 has an invalid length. [ 1583.838502][T30267] netlink: 'syz.2.7943': attribute type 3 has an invalid length. [ 1583.849422][T30267] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.7943'. [ 1584.756205][T30287] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1584.804784][T30287] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1584.823001][T30288] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1584.830640][T30288] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1585.142882][T30292] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.7953'. [ 1585.155978][T30292] openvswitch: netlink: Flow key attribute not present in set flow. [ 1585.174712][T30298] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.7953'. [ 1585.184583][T30295] netlink: 'syz.1.7954': attribute type 39 has an invalid length. [ 1585.251964][T30297] sit0: left promiscuous mode [ 1585.709453][T30307] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1585.716367][T30307] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1585.732216][T30303] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1585.780390][T30303] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1585.926434][T30306] netlink: 'syz.3.7956': attribute type 16 has an invalid length. [ 1585.934507][T30306] netlink: 'syz.3.7956': attribute type 3 has an invalid length. [ 1585.942864][T30306] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7956'. [ 1586.244243][T30321] netlink: 'syz.2.7961': attribute type 29 has an invalid length. [ 1586.253354][T30321] netlink: 'syz.2.7961': attribute type 29 has an invalid length. [ 1586.269608][T30319] netlink: 'syz.2.7961': attribute type 29 has an invalid length. [ 1586.655993][T30336] netlink: 'syz.1.7964': attribute type 39 has an invalid length. [ 1586.776889][T30333] netlink: 'syz.2.7968': attribute type 39 has an invalid length. [ 1587.031197][T30345] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.7970'. [ 1587.092951][T30345] openvswitch: netlink: Flow key attribute not present in set flow. [ 1587.104729][T30347] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1587.182060][T30347] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1587.258637][T30350] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1587.285942][T30350] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1587.293768][T30345] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.7970'. [ 1588.219950][T30369] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1588.237341][T30370] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1588.297118][T30369] openvswitch: netlink: Flow key attribute not present in set flow. [ 1588.796679][T30382] validate_nla: 1 callbacks suppressed [ 1588.796742][T30382] netlink: 'syz.2.7982': attribute type 10 has an invalid length. [ 1589.027963][T30387] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1589.034820][T30387] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1589.098120][T30385] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1589.150636][T30385] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1589.502809][T30394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1589.534078][T30394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1589.571764][T30395] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1589.601383][T30394] netlink: 60 bytes leftover after parsing attributes in process `syz.2.7986'. [ 1589.828718][T30399] bridge0: port 1(erspan0) entered blocking state [ 1589.841416][T30399] bridge0: port 1(erspan0) entered disabled state [ 1589.856002][T30399] erspan0: entered allmulticast mode [ 1589.870099][T30399] erspan0: entered promiscuous mode [ 1590.038322][T30405] netlink: 'syz.1.7989': attribute type 29 has an invalid length. [ 1590.056741][T30405] netlink: 'syz.1.7989': attribute type 29 has an invalid length. [ 1590.170581][T30408] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1590.208480][T30408] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1590.270712][T30405] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1590.318126][T30410] netlink: 4083 bytes leftover after parsing attributes in process `syz.1.7989'. [ 1590.471317][T30408] netlink: 'syz.1.7989': attribute type 3 has an invalid length. [ 1590.935189][T30417] netlink: 'syz.0.7993': attribute type 39 has an invalid length. [ 1591.088577][T30423] openvswitch: netlink: Flow key attribute not present in set flow. [ 1591.319688][T30428] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1591.365327][T30428] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1591.483159][T30429] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1591.540675][T30429] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1592.443960][T30438] netlink: 'syz.1.7998': attribute type 10 has an invalid length. [ 1592.898067][ C1] icmp: detected local route for 172.20.20.170 during ICMP sending, src 172.20.20.1 [ 1593.433639][T30466] netlink: 'syz.2.8006': attribute type 29 has an invalid length. [ 1593.515148][T30454] sit0: left promiscuous mode [ 1593.544232][T30468] __nla_validate_parse: 3 callbacks suppressed [ 1593.544250][T30468] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1593.657513][T30463] netlink: 'syz.0.8005': attribute type 39 has an invalid length. [ 1593.739122][T30466] netlink: 'syz.2.8006': attribute type 29 has an invalid length. [ 1593.784710][T30466] netlink: 'syz.2.8006': attribute type 3 has an invalid length. [ 1593.786480][T30468] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1593.795739][T30466] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1593.892970][T30467] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1593.923338][T30469] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.8006'. [ 1593.958901][T30475] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1593.966067][T30475] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1593.986305][T30475] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1593.993751][T30475] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1594.644719][T30483] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1594.675399][T30483] openvswitch: netlink: Flow key attribute not present in set flow. [ 1594.694713][T30484] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1595.245043][T30488] netlink: 'syz.1.8019': attribute type 28 has an invalid length. [ 1595.275957][T30488] netlink: 'syz.1.8019': attribute type 29 has an invalid length. [ 1595.283858][T30488] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8019'. [ 1595.659986][T30494] netlink: 'syz.0.8012': attribute type 10 has an invalid length. [ 1596.422654][T30497] netlink: 'syz.2.8014': attribute type 10 has an invalid length. [ 1596.436573][T30497] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8014'. [ 1597.469471][T30514] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1597.483275][T30514] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1597.532014][T30515] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1597.544349][T30515] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1597.893950][T30520] netlink: 188 bytes leftover after parsing attributes in process `syz.2.8020'. [ 1597.927315][T30519] netlink: 'syz.3.8021': attribute type 39 has an invalid length. [ 1598.552404][T30522] sit0: left promiscuous mode [ 1599.372906][T30539] netlink: 'syz.1.8025': attribute type 10 has an invalid length. [ 1599.409089][T30539] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8025'. [ 1600.458693][T30560] netlink: 'syz.1.8028': attribute type 10 has an invalid length. [ 1600.939837][T30559] netlink: 'syz.0.8029': attribute type 3 has an invalid length. [ 1600.959147][T30559] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.8029'. [ 1601.738145][T30571] netlink: 'syz.1.8031': attribute type 39 has an invalid length. [ 1601.971243][T30577] netlink: 'syz.3.8036': attribute type 10 has an invalid length. [ 1602.161389][T30583] netlink: 'syz.2.8037': attribute type 10 has an invalid length. [ 1602.185984][T30583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8037'. [ 1604.478994][T30609] netlink: 188 bytes leftover after parsing attributes in process `syz.3.8044'. [ 1605.507072][T30092] page_pool_release_retry() stalled pool shutdown 1 inflight 60 sec [ 1605.748292][T30614] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1605.755374][T30614] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1605.769700][T30612] netlink: 'syz.2.8046': attribute type 4 has an invalid length. [ 1605.788203][T30612] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8046'. [ 1605.891981][T30611] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1605.930346][T30611] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1606.757847][T30616] netlink: 'syz.0.8048': attribute type 10 has an invalid length. [ 1606.803624][T30616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8048'. [ 1606.896510][T30616] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1607.440127][T30625] netlink: 'syz.2.8051': attribute type 10 has an invalid length. [ 1608.112647][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.126077][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1610.219442][T30647] netlink: 188 bytes leftover after parsing attributes in process `syz.1.8056'. [ 1611.081283][T30652] netlink: 'syz.3.8058': attribute type 10 has an invalid length. [ 1611.112779][T30652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8058'. [ 1611.233059][ T5773] Bluetooth: hci0: unexpected event 0x34 length: 15 > 6 [ 1611.797679][T30671] netlink: 'syz.2.8065': attribute type 28 has an invalid length. [ 1611.867106][T30671] netlink: 'syz.2.8065': attribute type 29 has an invalid length. [ 1611.875185][T30671] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8065'. [ 1611.926306][T30672] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1611.981155][T30672] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1612.133028][T30676] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1612.145192][T30676] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1612.203193][T30674] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1612.266450][T30674] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1612.366988][T30675] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1612.408382][T30675] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1612.873939][T30688] netlink: 'syz.3.8072': attribute type 10 has an invalid length. [ 1612.883995][T30688] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8072'. [ 1614.371128][ T5773] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 1614.390588][T30710] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1614.412790][T30710] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1614.431894][T30710] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1614.439298][T30710] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1614.676714][T30713] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1614.693264][T30713] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1614.741361][T30712] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1614.766956][T30712] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1615.329398][T30729] netlink: 'syz.0.8082': attribute type 10 has an invalid length. [ 1615.348414][T30729] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8082'. [ 1615.386196][T30729] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1617.271440][T30760] netlink: 'syz.3.8090': attribute type 28 has an invalid length. [ 1617.284412][T30760] netlink: 'syz.3.8090': attribute type 29 has an invalid length. [ 1617.412341][T30760] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8090'. [ 1617.969420][T30772] netlink: 'syz.2.8093': attribute type 10 has an invalid length. [ 1617.977640][T30772] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8093'. [ 1618.115619][T30774] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8094'. [ 1618.237125][T30774] IPv6: Can't replace route, no match found [ 1618.459199][T20974] tipc: Subscription rejected, illegal request [ 1620.448233][T30806] netlink: 'syz.2.8107': attribute type 10 has an invalid length. [ 1620.466751][T30806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8107'. [ 1621.068774][T30832] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1621.077386][T30832] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1621.119479][T30835] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1621.126809][T30835] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1621.644372][T30846] netlink: 'syz.0.8115': attribute type 28 has an invalid length. [ 1621.675996][T30846] netlink: 'syz.0.8115': attribute type 29 has an invalid length. [ 1621.717033][T30846] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8115'. [ 1624.129326][T30860] netlink: 'syz.1.8120': attribute type 4 has an invalid length. [ 1624.179218][T30860] netlink: 152 bytes leftover after parsing attributes in process `syz.1.8120'. [ 1624.262986][T30871] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1624.276494][T30871] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1624.325249][T30873] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1624.356175][T30873] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1626.299444][ T5773] Bluetooth: hci0: unexpected event 0x35 length: 15 > 6 [ 1627.311595][T30908] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1627.375889][T30908] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1627.676736][T30915] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1627.683788][T30915] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1628.251807][T30918] netlink: 'syz.2.8138': attribute type 10 has an invalid length. [ 1628.336920][T30918] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8138'. [ 1628.725950][T30927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1629.934199][T30927] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1629.943844][T30930] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1629.979632][T30934] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8140'. [ 1630.080166][T30925] netlink: 'syz.0.8136': attribute type 4 has an invalid length. [ 1630.118475][T30925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8136'. [ 1631.343754][T30952] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1631.392626][T30952] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1631.503148][T30954] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1631.570182][T30954] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1632.091290][T30962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8147'. [ 1632.338831][T30968] netlink: 'syz.2.8149': attribute type 28 has an invalid length. [ 1632.346110][T30960] netlink: 'syz.1.8148': attribute type 10 has an invalid length. [ 1632.359231][T30968] netlink: 'syz.2.8149': attribute type 29 has an invalid length. [ 1632.359261][T30968] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8149'. [ 1632.597161][T30960] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8148'. [ 1632.630416][T30967] IPv6: Can't replace route, no match found [ 1634.675715][T31000] sit0: entered promiscuous mode [ 1635.486299][T31005] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1635.493262][T31005] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1635.656075][T30990] netlink: 'syz.3.8154': attribute type 4 has an invalid length. [ 1635.664074][T30990] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8154'. [ 1635.884829][T31012] netlink: 'syz.0.8160': attribute type 10 has an invalid length. [ 1635.911457][T31012] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8160'. [ 1635.962133][T31012] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1636.039998][T20974] tipc: Subscription rejected, illegal request [ 1637.228860][T31026] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1637.236497][T31026] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1637.768130][T31040] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1637.778810][T31040] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1637.846357][T31042] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1637.888363][T31042] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1638.594609][T31053] IPv6: Can't replace route, no match found [ 1638.621644][T31051] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8171'. [ 1638.951643][ T5773] Bluetooth: hci3: unexpected event 0x35 length: 15 > 6 [ 1639.147045][T31061] netlink: 'syz.1.8173': attribute type 10 has an invalid length. [ 1639.213316][T31061] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8173'. [ 1639.994012][T31077] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1640.044608][T31077] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1640.128391][T31080] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1640.145896][T31080] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1640.167939][T31081] sit0: entered promiscuous mode [ 1642.437705][T31105] netlink: 'syz.1.8187': attribute type 10 has an invalid length. [ 1642.545580][T31105] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8187'. [ 1643.754651][ T1131] tipc: Subscription rejected, illegal request [ 1646.282083][T31157] netlink: 'syz.2.8198': attribute type 10 has an invalid length. [ 1646.303940][T31157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8198'. [ 1646.585892][T31165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8202'. [ 1646.605393][T31165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8202'. [ 1646.642193][T31165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8202'. [ 1647.083204][T31165] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8202'. [ 1647.880157][T20959] tipc: Subscription rejected, illegal request [ 1649.682737][T31197] netlink: 'syz.3.8209': attribute type 10 has an invalid length. [ 1649.725970][T31197] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8209'. [ 1650.493264][T31207] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1650.503257][T31207] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1650.532516][T31210] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1650.541147][T31210] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1650.768494][T31218] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1650.789048][T31218] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1650.823803][T31215] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1650.847236][T31215] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1650.937793][T31219] sit0: entered promiscuous mode [ 1651.776897][T31230] netlink: 'syz.1.8218': attribute type 10 has an invalid length. [ 1651.784822][T31230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8218'. [ 1652.592456][T31243] sit0: left promiscuous mode [ 1652.837682][T31238] netlink: 'syz.2.8221': attribute type 10 has an invalid length. [ 1652.856307][T31238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8221'. [ 1653.240030][T31270] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1653.255883][T31270] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1653.274561][T31263] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1653.311257][T31263] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1654.251640][T31283] sit0: entered promiscuous mode [ 1655.587415][T31302] netlink: 'syz.3.8234': attribute type 10 has an invalid length. [ 1655.605944][T31302] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8234'. [ 1656.471404][T31322] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1656.496611][T31322] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1656.832281][T31326] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1656.856200][T31326] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1658.347872][T31341] netlink: 'syz.3.8246': attribute type 4 has an invalid length. [ 1658.387111][T31341] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8246'. [ 1660.178914][T31361] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1660.187604][T31361] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1660.240593][T31363] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1660.248118][T31363] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1660.502604][T31373] netlink: 'syz.0.8253': attribute type 28 has an invalid length. [ 1660.662852][T31373] netlink: 'syz.0.8253': attribute type 29 has an invalid length. [ 1660.758773][T31373] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8253'. [ 1668.590349][T31472] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1668.598638][T31472] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1668.631459][T31476] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1668.638780][T31476] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1669.291256][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.297966][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.892096][T31507] netlink: 14 bytes leftover after parsing attributes in process `syz.0.8293'. [ 1670.947060][T31516] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1670.953834][T31516] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1671.389944][T31510] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1671.427331][T31510] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1672.712990][T31536] netlink: 'syz.3.8297': attribute type 28 has an invalid length. [ 1672.736011][T31536] netlink: 'syz.3.8297': attribute type 29 has an invalid length. [ 1672.744217][T31536] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8297'. [ 1673.241975][T31541] netlink: 'syz.1.8299': attribute type 10 has an invalid length. [ 1673.414286][T31541] netlink: 'syz.1.8299': attribute type 9 has an invalid length. [ 1673.505999][T31541] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8299'. [ 1673.831962][T31540] netlink: 'syz.1.8299': attribute type 9 has an invalid length. [ 1673.842964][T31540] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.8299'. [ 1675.660464][T31566] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1675.677275][T31566] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1675.846791][T31570] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1675.867150][T31570] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1676.260981][T31579] netlink: 'syz.3.8311': attribute type 10 has an invalid length. [ 1676.277389][T31579] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8311'. [ 1676.332348][T31577] netlink: 144 bytes leftover after parsing attributes in process `syz.0.8310'. [ 1677.685947][T31604] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8318'. [ 1677.862511][T31607] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1677.885830][T31607] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1677.959636][T31606] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1678.064710][T31606] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1678.533241][T31619] delete_channel: no stack [ 1678.743505][T31622] netlink: 'syz.1.8324': attribute type 10 has an invalid length. [ 1678.770863][T31622] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8324'. [ 1678.993915][T31627] netlink: 'syz.3.8325': attribute type 10 has an invalid length. [ 1679.088854][T31627] netlink: 'syz.3.8325': attribute type 9 has an invalid length. [ 1679.097823][T31627] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8325'. [ 1679.808210][T31642] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1679.815494][T31642] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1679.830769][T31645] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1679.837973][T31645] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1679.858310][T31633] netlink: 'syz.3.8325': attribute type 9 has an invalid length. [ 1679.866372][T31633] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.8325'. [ 1680.666471][T31665] netlink: 'syz.3.8336': attribute type 10 has an invalid length. [ 1680.685589][T31665] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8336'. [ 1681.864503][T31680] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1681.886209][T31680] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1682.161668][T31686] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1682.169274][T31686] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1682.179454][T31682] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8341'. [ 1683.002607][T31703] netlink: 'syz.3.8347': attribute type 10 has an invalid length. [ 1683.010904][T31703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8347'. [ 1683.568858][T31704] delete_channel: no stack [ 1685.331872][T31729] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1685.356013][T31729] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1685.399154][T31730] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1685.427048][T31730] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1685.470393][T31731] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1685.496458][T31731] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1685.507930][T31732] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1685.547080][T31732] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1686.161698][T31737] netlink: 'syz.2.8357': attribute type 10 has an invalid length. [ 1686.170770][T31737] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8357'. [ 1686.516342][T31745] netlink: 'syz.0.8358': attribute type 10 has an invalid length. [ 1686.635327][T31745] netlink: 'syz.0.8358': attribute type 9 has an invalid length. [ 1686.662940][T31745] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8358'. [ 1687.422673][T31749] netlink: 'syz.0.8358': attribute type 9 has an invalid length. [ 1687.433093][T31749] netlink: 209836 bytes leftover after parsing attributes in process `syz.0.8358'. [ 1687.499710][T31766] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8364'. [ 1687.690931][T31766] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8364'. [ 1687.781763][T31771] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1687.789051][T31771] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1687.805075][T31773] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1687.812413][T31773] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1687.823725][T31768] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8364'. [ 1688.516928][T31782] netlink: 'syz.0.8368': attribute type 10 has an invalid length. [ 1688.527251][T31782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8368'. [ 1688.582858][T31777] delete_channel: no stack [ 1688.583137][T31782] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1693.226073][T31803] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.8377'. [ 1693.506511][T31805] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1693.536735][T31805] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1693.741431][T31809] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1693.748991][T31809] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1693.796397][T31814] netlink: 'syz.3.8379': attribute type 10 has an invalid length. [ 1693.814855][T31814] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8379'. [ 1696.169203][T31845] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.8388'. [ 1696.442669][T31850] delete_channel: no stack [ 1696.877239][T31863] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8393'. [ 1697.036741][T31863] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8393'. [ 1697.184086][T31867] netlink: 4595 bytes leftover after parsing attributes in process `syz.2.8393'. [ 1697.789746][T31881] netlink: 'syz.2.8396': attribute type 10 has an invalid length. [ 1698.021034][T31881] netlink: 'syz.2.8396': attribute type 9 has an invalid length. [ 1698.115796][T31881] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8396'. [ 1698.388445][T31875] netlink: 'syz.2.8396': attribute type 9 has an invalid length. [ 1698.446107][T31875] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.8396'. [ 1698.938071][T31890] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.8401'. [ 1699.923975][T31896] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1699.937497][T31896] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1699.953447][T31899] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1699.962114][T31899] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1699.987803][T31906] delete_channel: no stack [ 1700.623631][T31923] netlink: 'syz.0.8410': attribute type 9 has an invalid length. [ 1700.645097][T31923] netlink: 126588 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1701.673388][T31938] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1701.888513][T31945] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1701.907261][T31945] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1701.957036][T31941] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1701.965318][T31941] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1702.406528][T31953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1702.426785][T31953] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1702.615962][T31957] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8419'. [ 1702.682712][T31956] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8420'. [ 1704.936652][T31999] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1704.973644][T31999] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1705.100684][T32000] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8432'. [ 1705.996939][T32007] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8433'. [ 1706.103567][T32017] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1706.126040][T32017] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1706.195972][T32018] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1706.203112][T32018] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1709.646697][T32061] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8451'. [ 1709.867592][T32068] netlink: 'syz.3.8452': attribute type 9 has an invalid length. [ 1709.876196][T32068] netlink: 126588 bytes leftover after parsing attributes in process `syz.3.8452'. [ 1711.692234][T32096] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1711.715736][T32096] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1712.191617][T32097] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1712.199201][T32097] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1713.811034][T32121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8465'. [ 1713.829593][T32127] netlink: 'syz.2.8467': attribute type 10 has an invalid length. [ 1714.498884][T32144] netlink: 'syz.2.8471': attribute type 10 has an invalid length. [ 1716.069488][T32170] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8482'. [ 1716.422503][T32175] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1716.447468][T32175] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1716.521121][T32178] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1716.528699][T32178] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1717.348618][T32195] netlink: 'syz.2.8490': attribute type 10 has an invalid length. [ 1717.414878][T32195] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8490'. [ 1719.553495][T32223] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1719.571121][T32223] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1719.714425][T32218] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1719.730423][T32218] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1720.273248][T32230] netlink: 'syz.1.8500': attribute type 10 has an invalid length. [ 1720.295250][T32230] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8500'. [ 1720.692196][T32239] netlink: 16211 bytes leftover after parsing attributes in process `syz.1.8504'. [ 1721.245472][T32250] netlink: 196 bytes leftover after parsing attributes in process `syz.3.8506'. [ 1721.463921][T32250] netlink: 'syz.3.8506': attribute type 29 has an invalid length. [ 1721.511222][T32250] netlink: 'syz.3.8506': attribute type 29 has an invalid length. [ 1721.737100][T32251] netlink: 'syz.3.8506': attribute type 29 has an invalid length. [ 1721.848976][T32254] netlink: 'syz.3.8506': attribute type 29 has an invalid length. [ 1721.896692][T32257] netlink: 'syz.3.8506': attribute type 29 has an invalid length. [ 1722.027593][T32263] netlink: 144316 bytes leftover after parsing attributes in process `syz.0.8510'. [ 1723.372789][T32262] delete_channel: no stack [ 1723.787271][T32269] netlink: 'syz.0.8512': attribute type 10 has an invalid length. [ 1723.805991][T32269] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8512'. [ 1723.849172][T32269] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1726.060671][T32310] netlink: 'syz.0.8524': attribute type 10 has an invalid length. [ 1726.071325][T32310] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8524'. [ 1726.095636][T32310] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1728.458969][T32340] netlink: 16211 bytes leftover after parsing attributes in process `syz.2.8533'. [ 1729.740622][T32348] netlink: 'syz.1.8536': attribute type 10 has an invalid length. [ 1729.750300][T32348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8536'. [ 1729.882797][T32359] netlink: 144316 bytes leftover after parsing attributes in process `syz.1.8538'. [ 1730.026092][T32358] delete_channel: no stack [ 1731.409616][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1731.417593][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1733.913101][T32396] netlink: 'syz.3.8546': attribute type 10 has an invalid length. [ 1733.934829][T32396] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8546'. [ 1734.584762][T32401] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1734.597515][T32401] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1735.213932][T32416] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1735.288129][T32416] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1735.478523][T32409] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1735.525522][T32409] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1736.025139][T32422] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1736.048436][T32422] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1736.084887][T32425] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8556'. [ 1736.857946][T32432] netlink: 'syz.2.8558': attribute type 10 has an invalid length. [ 1736.878803][T32432] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8558'. [ 1737.794623][T32447] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1737.805843][T32447] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1737.891335][T32443] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1737.912309][T32443] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1738.622697][T32461] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1738.634951][T32461] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1738.701224][T32463] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1738.711912][T32463] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1739.789793][T32471] netlink: 'syz.2.8569': attribute type 10 has an invalid length. [ 1739.803766][T32471] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8569'. [ 1740.682741][T32488] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1740.696126][T32488] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1740.803479][T32487] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8575'. [ 1740.840762][T32496] netlink: 'syz.2.8576': attribute type 33 has an invalid length. [ 1740.848888][T32496] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8576'. [ 1740.961487][T32485] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1740.975518][T32485] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1741.052795][T32487] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8575'. [ 1741.106587][T32490] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.8575'. [ 1741.843629][T32509] netlink: 'syz.0.8580': attribute type 10 has an invalid length. [ 1741.853068][T32509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8580'. [ 1741.865576][T32509] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1742.740462][T32529] netlink: 'syz.2.8585': attribute type 29 has an invalid length. [ 1742.797027][T32529] netlink: 'syz.2.8585': attribute type 29 has an invalid length. [ 1742.817673][T32533] netlink: 'syz.2.8585': attribute type 29 has an invalid length. [ 1742.826822][T32535] netlink: 'syz.2.8585': attribute type 29 has an invalid length. [ 1742.875436][T32529] netlink: 'syz.2.8585': attribute type 29 has an invalid length. [ 1743.568833][T32545] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1743.608038][T32545] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1743.642682][T32547] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.8590'. [ 1743.855447][T32548] netlink: 'syz.1.8591': attribute type 10 has an invalid length. [ 1743.927461][T32548] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8591'. [ 1745.928822][T32568] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1745.974010][T32568] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1746.009388][T32571] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1746.021740][T32570] netlink: 'syz.2.8598': attribute type 2 has an invalid length. [ 1746.030150][T32570] netlink: 'syz.2.8598': attribute type 8 has an invalid length. [ 1746.044147][T32570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8598'. [ 1746.061530][T32568] netlink: 4595 bytes leftover after parsing attributes in process `syz.0.8597'. [ 1746.088485][T32570] netlink: 'syz.2.8598': attribute type 2 has an invalid length. [ 1746.096673][T32570] netlink: 'syz.2.8598': attribute type 8 has an invalid length. [ 1746.104465][T32570] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8598'. [ 1747.005570][T32591] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8601'. [ 1747.986759][T32605] validate_nla: 1 callbacks suppressed [ 1747.986781][T32605] netlink: 'syz.3.8608': attribute type 2 has an invalid length. [ 1748.106861][T32605] netlink: 'syz.3.8608': attribute type 8 has an invalid length. [ 1748.114670][T32605] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8608'. [ 1748.754292][T32613] netlink: 'syz.3.8608': attribute type 2 has an invalid length. [ 1748.764317][T32613] netlink: 'syz.3.8608': attribute type 8 has an invalid length. [ 1748.773760][T32613] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8608'. [ 1750.150400][T32633] netlink: 'syz.3.8615': attribute type 10 has an invalid length. [ 1750.168911][T32633] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8615'. [ 1750.378777][T32641] netlink: 'syz.2.8619': attribute type 10 has an invalid length. [ 1754.862575][T32671] netlink: 'syz.0.8625': attribute type 29 has an invalid length. [ 1754.914175][T32668] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8625'. [ 1755.010194][T32671] netlink: 'syz.0.8625': attribute type 29 has an invalid length. [ 1755.149187][T32673] netlink: 'syz.0.8625': attribute type 29 has an invalid length. [ 1755.487093][T32670] netlink: 'syz.3.8626': attribute type 10 has an invalid length. [ 1755.512615][T32670] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8626'. [ 1755.524154][T32668] netlink: 'syz.0.8625': attribute type 29 has an invalid length. [ 1755.638516][T32671] netlink: 'syz.0.8625': attribute type 29 has an invalid length. [ 1758.202716][T32707] netlink: 'syz.3.8636': attribute type 10 has an invalid length. [ 1758.218109][T32707] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8636'. [ 1759.820949][T32727] netlink: 'syz.3.8641': attribute type 10 has an invalid length. [ 1761.048570][T32744] netlink: 'syz.0.8646': attribute type 10 has an invalid length. [ 1761.080780][T32744] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8646'. [ 1761.277703][T32744] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1762.258449][T32752] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1762.281831][T32752] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1762.434668][T32754] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1762.456146][T32754] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1762.697767][T32762] netlink: 'syz.1.8653': attribute type 10 has an invalid length. [ 1767.636863][ T319] netlink: 'syz.2.8659': attribute type 10 has an invalid length. [ 1767.674378][ T319] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8659'. [ 1767.725086][ T324] netlink: 'syz.0.8658': attribute type 10 has an invalid length. [ 1767.849871][ T324] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8658'. [ 1767.871687][ T324] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 1767.928412][ T329] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 1767.935454][ T329] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 1768.877552][ T343] netlink: 'syz.0.8663': attribute type 10 has an invalid length. [ 1771.081880][ T357] netlink: 'syz.3.8670': attribute type 10 has an invalid length. [ 1771.161249][ T357] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8670'. [ 1771.695207][ T368] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1771.703820][ T368] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1771.741844][ T367] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1771.759142][ T367] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1772.153997][ T373] netlink: 'syz.1.8674': attribute type 12 has an invalid length. [ 1772.196927][ T373] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8674'. [ 1772.277208][ T379] netlink: 'syz.1.8674': attribute type 10 has an invalid length. [ 1774.134009][ T393] netlink: 'syz.3.8680': attribute type 10 has an invalid length. [ 1774.150289][ T393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8680'. [ 1775.642420][ T413] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1775.657664][ T413] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1775.675205][ T413] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1775.685353][ T413] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1775.903514][ T418] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1775.910862][ T418] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1776.043777][ T419] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1776.070108][ T419] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1778.731135][ T436] netlink: 'syz.1.8692': attribute type 10 has an invalid length. [ 1778.742847][ T436] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8692'. [ 1778.775732][ T439] netlink: 'syz.0.8691': attribute type 12 has an invalid length. [ 1778.786832][ T439] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8691'. [ 1778.845716][ T437] netlink: 'syz.0.8691': attribute type 10 has an invalid length. [ 1779.557010][ T451] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1779.570273][ T451] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1779.652971][ T450] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1779.667161][ T450] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1781.218251][ T474] netlink: 'syz.3.8704': attribute type 10 has an invalid length. [ 1781.243235][ T474] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8704'. [ 1782.651254][ T496] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1782.660840][ T496] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1782.677191][ T496] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1782.685392][ T496] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1783.976223][ T525] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1783.982992][ T525] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1783.995838][ T523] netlink: 'syz.1.8715': attribute type 10 has an invalid length. [ 1784.007230][ T523] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8715'. [ 1784.017725][ T516] netlink: 'syz.3.8716': attribute type 10 has an invalid length. [ 1784.048947][ T516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8716'. [ 1784.184803][ T521] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1784.206784][ T521] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1784.567031][ T533] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1784.615008][ T533] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1784.967610][ T530] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1784.977243][ T530] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1786.241543][ T557] netlink: 'syz.1.8728': attribute type 10 has an invalid length. [ 1786.252335][ T557] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8728'. [ 1786.826422][ T567] netlink: 'syz.3.8729': attribute type 10 has an invalid length. [ 1786.834339][ T567] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8729'. [ 1787.306144][ T573] netlink: 'syz.2.8731': attribute type 12 has an invalid length. [ 1787.355208][ T573] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8731'. [ 1787.437358][ T572] netlink: 'syz.2.8731': attribute type 10 has an invalid length. [ 1791.864422][ T611] netlink: 'syz.1.8739': attribute type 10 has an invalid length. [ 1791.888391][ T611] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8739'. [ 1792.276077][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1792.282502][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.476940][ T635] netlink: 'syz.0.8748': attribute type 29 has an invalid length. [ 1794.513336][ T635] netlink: 'syz.0.8748': attribute type 29 has an invalid length. [ 1794.530143][ T637] netlink: 'syz.0.8748': attribute type 29 has an invalid length. [ 1794.568189][ T635] netlink: 'syz.0.8748': attribute type 29 has an invalid length. [ 1794.659974][ T635] netlink: 'syz.0.8748': attribute type 29 has an invalid length. [ 1795.545379][ T647] netlink: 'syz.0.8748': attribute type 29 has an invalid length. [ 1795.556346][ T650] netlink: 'syz.1.8752': attribute type 10 has an invalid length. [ 1795.564228][ T650] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1798.735207][ T689] netlink: 'syz.2.8763': attribute type 10 has an invalid length. [ 1798.766321][ T689] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8763'. [ 1799.150065][ T691] netlink: 'syz.1.8764': attribute type 29 has an invalid length. [ 1799.416471][ T701] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1799.429021][ T701] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1799.470772][ T691] netlink: 'syz.1.8764': attribute type 29 has an invalid length. [ 1799.518941][ T698] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 1799.533027][ T698] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 1799.582380][ T696] netlink: 'syz.1.8764': attribute type 29 has an invalid length. [ 1799.611018][ T699] netlink: 'syz.1.8764': attribute type 29 has an invalid length. [ 1799.901532][ T702] netlink: 'syz.1.8764': attribute type 29 has an invalid length. [ 1799.911070][ T699] netlink: 'syz.1.8764': attribute type 29 has an invalid length. [ 1801.862579][ T734] netlink: 'syz.3.8774': attribute type 10 has an invalid length. [ 1801.971797][ T734] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8774'. [ 1802.001412][ T733] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.8775'. [ 1802.944319][ T741] mac80211_hwsim hwsim52 wlan0: left promiscuous mode [ 1802.958293][ T741] mac80211_hwsim hwsim52 wlan0: left allmulticast mode [ 1803.045241][ T745] mac80211_hwsim hwsim52 wlan0: entered promiscuous mode [ 1803.067201][ T745] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 1804.869632][ T774] netlink: 'syz.2.8785': attribute type 10 has an invalid length. [ 1804.946714][ T774] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8785'. [ 1805.751717][ T786] mac80211_hwsim hwsim60 wlan0: left promiscuous mode [ 1805.824303][ T786] mac80211_hwsim hwsim60 wlan0: left allmulticast mode [ 1806.042955][ T788] mac80211_hwsim hwsim60 wlan0: entered promiscuous mode [ 1806.084417][ T788] mac80211_hwsim hwsim60 wlan0: entered allmulticast mode [ 1808.881502][ T817] netlink: 'syz.3.8796': attribute type 10 has an invalid length. [ 1808.893577][ T817] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8796'. [ 1809.213566][ T822] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.8799'. [ 1809.394788][ T829] netlink: 'syz.0.8805': attribute type 10 has an invalid length. [ 1809.408697][ T829] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8805'. [ 1809.426527][ T829] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1809.796202][ T834] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1809.804609][ T834] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1809.900161][ T832] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1810.506981][ T834] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1811.083483][ T836] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1811.228222][ T841] netlink: 'syz.3.8800': attribute type 29 has an invalid length. [ 1813.425235][ T881] netlink: 'syz.1.8811': attribute type 10 has an invalid length. [ 1813.446068][ T881] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8811'. [ 1819.381335][ T947] netlink: 'syz.3.8824': attribute type 12 has an invalid length. [ 1819.426167][ T947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8824'. [ 1821.380267][ T978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1821.402429][ T978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1821.433785][ T978] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1821.535393][ T983] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8830'. [ 1823.220435][ T997] netlink: 'syz.2.8844': attribute type 12 has an invalid length. [ 1823.265667][ T997] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8844'. [ 1826.189759][ T1040] netlink: 'syz.2.8842': attribute type 29 has an invalid length. [ 1826.241468][ T1040] netlink: 'syz.2.8842': attribute type 29 has an invalid length. [ 1826.366842][ T1034] netlink: 'syz.2.8842': attribute type 29 has an invalid length. [ 1826.639490][ T1040] netlink: 'syz.2.8842': attribute type 29 has an invalid length. [ 1827.445718][ T1049] netlink: 'syz.2.8842': attribute type 29 has an invalid length. [ 1827.454559][ T1050] netlink: 'syz.2.8842': attribute type 29 has an invalid length. [ 1830.605386][ T1091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1830.651465][ T1091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1830.825042][ T1095] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1830.887852][ T1092] netlink: 'syz.0.8858': attribute type 12 has an invalid length. [ 1830.916228][ T1096] netlink: 'syz.2.8859': attribute type 29 has an invalid length. [ 1830.923812][ T1092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8858'. [ 1830.935348][ T1091] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8855'. [ 1831.071731][ T1096] netlink: 'syz.2.8859': attribute type 29 has an invalid length. [ 1831.090702][ T1101] netlink: 'syz.2.8859': attribute type 29 has an invalid length. [ 1831.755922][ T1101] validate_nla: 2 callbacks suppressed [ 1831.755944][ T1101] netlink: 'syz.2.8859': attribute type 29 has an invalid length. [ 1832.771623][ T1122] netlink: 'syz.0.8867': attribute type 10 has an invalid length. [ 1832.818171][ T1122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8867'. [ 1833.012560][ T1122] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1834.259775][ T1138] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 1834.267190][ T1138] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 1834.292571][ T1135] netlink: 'syz.0.8870': attribute type 12 has an invalid length. [ 1834.310933][ T1135] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8870'. [ 1834.662088][ T1145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1834.706476][ T1145] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1834.908053][ T1149] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8872'. [ 1835.453119][ T1154] netlink: 'syz.1.8873': attribute type 4 has an invalid length. [ 1837.485468][ T1172] netlink: 'syz.1.8879': attribute type 10 has an invalid length. [ 1837.509097][ T1172] __nla_validate_parse: 2 callbacks suppressed [ 1837.509473][ T1172] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8879'. [ 1837.644405][ T1173] netlink: 'syz.3.8878': attribute type 2 has an invalid length. [ 1837.693585][ T1173] netlink: 'syz.3.8878': attribute type 8 has an invalid length. [ 1837.702551][ T1173] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8878'. [ 1837.727872][ T1176] netlink: 'syz.0.8880': attribute type 12 has an invalid length. [ 1837.776730][ T1176] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8880'. [ 1837.830561][ T1178] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 1837.862521][ T1178] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 1838.726674][ T1185] netlink: 'syz.2.8884': attribute type 29 has an invalid length. [ 1838.923016][ T1185] netlink: 'syz.2.8884': attribute type 29 has an invalid length. [ 1839.107709][ T1188] netlink: 'syz.2.8884': attribute type 29 has an invalid length. [ 1839.435963][ T1193] netlink: 'syz.2.8884': attribute type 29 has an invalid length. [ 1839.536173][ T1195] netlink: 'syz.2.8884': attribute type 29 has an invalid length. [ 1839.766683][ T1188] netlink: 'syz.2.8884': attribute type 29 has an invalid length. [ 1840.383770][ T1207] netlink: 55 bytes leftover after parsing attributes in process `syz.1.8886'. [ 1841.191626][ T1224] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8892'. [ 1841.320171][ T1220] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8890'. [ 1841.726287][ T1233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1841.742110][ T1233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1841.766701][ T1238] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1841.810023][ T1233] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1843.467661][ T1262] validate_nla: 3 callbacks suppressed [ 1843.467685][ T1262] netlink: 'syz.2.8901': attribute type 10 has an invalid length. [ 1843.508287][ T1262] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8901'. [ 1843.599170][ T1266] netlink: 'syz.0.8902': attribute type 12 has an invalid length. [ 1843.619935][ T1266] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8902'. [ 1844.015981][ T1277] netlink: 'syz.0.8905': attribute type 2 has an invalid length. [ 1844.023912][ T1277] netlink: 'syz.0.8905': attribute type 8 has an invalid length. [ 1844.168894][ T1277] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8905'. [ 1845.170415][ T1296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1845.201899][ T1296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1845.337333][ T1299] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1845.467572][ T1296] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8908'. [ 1847.043239][ T1315] netlink: 'syz.2.8913': attribute type 10 has an invalid length. [ 1847.060862][ T1315] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8913'. [ 1847.368127][ C0] icmp: detected local route for 172.20.20.14 during ICMP sending, src 172.20.20.0 [ 1847.895165][ T1328] netlink: 'syz.2.8914': attribute type 12 has an invalid length. [ 1847.918396][ T1328] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8914'. [ 1848.319690][ T1332] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.8916'. [ 1849.125363][ T1345] netlink: 'syz.2.8919': attribute type 29 has an invalid length. [ 1849.146864][ T1332] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1849.155292][ T1332] CPU: 0 PID: 1332 Comm: syz.3.8916 Not tainted syzkaller #0 [ 1849.162804][ T1332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1849.172915][ T1332] Call Trace: [ 1849.176227][ T1332] [ 1849.179198][ T1332] dump_stack_lvl+0x18c/0x250 [ 1849.183930][ T1332] ? show_regs_print_info+0x20/0x20 [ 1849.189266][ T1332] ? load_image+0x400/0x400 [ 1849.193826][ T1332] sysfs_warn_dup+0x8e/0xa0 [ 1849.198362][ T1332] sysfs_do_create_link_sd+0xc0/0x110 [ 1849.203778][ T1332] device_add_class_symlinks+0x1cf/0x240 [ 1849.209451][ T1332] device_add+0x507/0xc20 [ 1849.213812][ T1332] wiphy_register+0x1dad/0x2ae0 [ 1849.218707][ T1332] ? cfg80211_event_work+0x40/0x40 [ 1849.223829][ T1332] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1849.230148][ T1332] ieee80211_register_hw+0x3464/0x4250 [ 1849.235663][ T1332] ? ieee80211_tasklet_handler+0x20/0x20 [ 1849.241442][ T1332] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1849.247529][ T1332] ? __debug_object_init+0xec/0x450 [ 1849.252754][ T1332] ? __asan_memset+0x22/0x40 [ 1849.257368][ T1332] ? __hrtimer_init+0x186/0x270 [ 1849.262238][ T1332] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1849.268274][ T1332] ? mac80211_hwsim_free+0x220/0x220 [ 1849.273751][ T1332] ? rcu_is_watching+0x15/0xb0 [ 1849.278563][ T1332] ? kstrndup+0xbd/0x140 [ 1849.282859][ T1332] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1849.288012][ T1332] ? mark_lock+0x94/0x320 [ 1849.292368][ T1332] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1849.298722][ T1332] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1849.304894][ T1332] ? lockdep_hardirqs_on+0x98/0x150 [ 1849.310113][ T1332] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1849.316305][ T1332] genl_family_rcv_msg_doit+0x211/0x310 [ 1849.321881][ T1332] ? end_current_label_crit_section+0x170/0x170 [ 1849.328298][ T1332] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1849.334569][ T1332] ? bpf_lsm_capable+0x9/0x10 [ 1849.339262][ T1332] ? security_capable+0x89/0xb0 [ 1849.344136][ T1332] genl_rcv_msg+0x619/0x7a0 [ 1849.348769][ T1332] ? genl_bind+0x360/0x360 [ 1849.353456][ T1332] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1849.359813][ T1332] ? perf_trace_lock+0xfc/0x3b0 [ 1849.364779][ T1332] netlink_rcv_skb+0x241/0x4d0 [ 1849.369595][ T1332] ? genl_bind+0x360/0x360 [ 1849.374050][ T1332] ? netlink_ack+0x1180/0x1180 [ 1849.378874][ T1332] ? __lock_acquire+0x7d40/0x7d40 [ 1849.383973][ T1332] ? down_read+0x1ac/0x2e0 [ 1849.388423][ T1332] genl_rcv+0x28/0x40 [ 1849.392514][ T1332] netlink_unicast+0x751/0x8d0 [ 1849.397314][ T1332] netlink_sendmsg+0x8d0/0xbf0 [ 1849.402107][ T1332] ? netlink_getsockopt+0x590/0x590 [ 1849.407338][ T1332] ? aa_sock_msg_perm+0x94/0x150 [ 1849.412310][ T1332] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1849.417707][ T1332] ? security_socket_sendmsg+0x80/0xa0 [ 1849.423272][ T1332] ? netlink_getsockopt+0x590/0x590 [ 1849.428537][ T1332] ____sys_sendmsg+0x5ba/0x960 [ 1849.433675][ T1332] ? __asan_memset+0x22/0x40 [ 1849.438372][ T1332] ? __sys_sendmsg_sock+0x30/0x30 [ 1849.443579][ T1332] ? __import_iovec+0x5f2/0x850 [ 1849.448639][ T1332] ? import_iovec+0x73/0xa0 [ 1849.453250][ T1332] ___sys_sendmsg+0x2a6/0x360 [ 1849.457947][ T1332] ? __sys_sendmsg+0x2a0/0x2a0 [ 1849.462837][ T1332] ? seqcount_lockdep_reader_access+0x17b/0x1d0 [ 1849.469123][ T1332] __se_sys_sendmsg+0x1c2/0x2b0 [ 1849.474078][ T1332] ? __x64_sys_sendmsg+0x80/0x80 [ 1849.479059][ T1332] ? lockdep_hardirqs_on+0x98/0x150 [ 1849.484278][ T1332] do_syscall_64+0x55/0xa0 [ 1849.488723][ T1332] ? clear_bhb_loop+0x40/0x90 [ 1849.493412][ T1332] ? clear_bhb_loop+0x40/0x90 [ 1849.498115][ T1332] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1849.504107][ T1332] RIP: 0033:0x7fa5c619c799 [ 1849.508541][ T1332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1849.528420][ T1332] RSP: 002b:00007fa5c6fa3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1849.536936][ T1332] RAX: ffffffffffffffda RBX: 00007fa5c6415fa0 RCX: 00007fa5c619c799 [ 1849.545003][ T1332] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1849.553078][ T1332] RBP: 00007fa5c6232c99 R08: 0000000000000000 R09: 0000000000000000 [ 1849.561062][ T1332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1849.569044][ T1332] R13: 00007fa5c6416038 R14: 00007fa5c6415fa0 R15: 00007ffd49c5a118 [ 1849.577227][ T1332] [ 1849.625771][ T1345] netlink: 'syz.2.8919': attribute type 29 has an invalid length. [ 1849.710303][ T1342] netlink: 'syz.2.8919': attribute type 29 has an invalid length. [ 1849.770910][ T1342] netlink: 'syz.2.8919': attribute type 29 has an invalid length. [ 1849.819904][ T1344] netlink: 'syz.2.8919': attribute type 29 has an invalid length. [ 1849.938902][ T1351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1850.043576][ T1351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1850.053344][ T1346] netlink: 'syz.2.8919': attribute type 29 has an invalid length. [ 1850.065820][ T1352] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1850.125764][ T1351] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8921'. [ 1850.681751][ T1362] netlink: 'syz.0.8923': attribute type 10 has an invalid length. [ 1850.726169][ T1362] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8923'. [ 1850.763741][ T1362] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1850.785071][ T1357] netlink: 'syz.2.8922': attribute type 10 has an invalid length. [ 1850.797922][ T1357] netlink: 55 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1851.307192][ T1375] netlink: 'syz.1.8926': attribute type 12 has an invalid length. [ 1851.315116][ T1375] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8926'. [ 1852.631963][ T1377] netlink: 'syz.3.8924': attribute type 4 has an invalid length. [ 1852.688692][ T1377] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8924'. [ 1852.936839][ T1385] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8931'. [ 1853.626838][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.633263][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.676759][ T1396] netlink: 164 bytes leftover after parsing attributes in process `syz.2.8933'. [ 1854.302230][ T1411] validate_nla: 4 callbacks suppressed [ 1854.302367][ T1411] netlink: 'syz.0.8938': attribute type 12 has an invalid length. [ 1854.434915][ T1413] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1854.444057][ T1413] CPU: 0 PID: 1413 Comm: syz.1.8936 Not tainted syzkaller #0 [ 1854.451510][ T1413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1854.461654][ T1413] Call Trace: [ 1854.464979][ T1413] [ 1854.467956][ T1413] dump_stack_lvl+0x18c/0x250 [ 1854.472832][ T1413] ? show_regs_print_info+0x20/0x20 [ 1854.478209][ T1413] ? load_image+0x400/0x400 [ 1854.482823][ T1413] sysfs_warn_dup+0x8e/0xa0 [ 1854.487458][ T1413] sysfs_do_create_link_sd+0xc0/0x110 [ 1854.492878][ T1413] device_add_class_symlinks+0x1cf/0x240 [ 1854.498570][ T1413] device_add+0x507/0xc20 [ 1854.502967][ T1413] wiphy_register+0x1dad/0x2ae0 [ 1854.507919][ T1413] ? cfg80211_event_work+0x40/0x40 [ 1854.513321][ T1413] ? minstrel_ht_alloc+0x88a/0x990 [ 1854.518548][ T1413] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1854.524939][ T1413] ieee80211_register_hw+0x3464/0x4250 [ 1854.530519][ T1413] ? ieee80211_tasklet_handler+0x20/0x20 [ 1854.536196][ T1413] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1854.542234][ T1413] ? __debug_object_init+0xec/0x450 [ 1854.547498][ T1413] ? __asan_memset+0x22/0x40 [ 1854.552142][ T1413] ? __hrtimer_init+0x186/0x270 [ 1854.557044][ T1413] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1854.562899][ T1413] ? mac80211_hwsim_free+0x220/0x220 [ 1854.568341][ T1413] ? rcu_is_watching+0x15/0xb0 [ 1854.573152][ T1413] ? kstrndup+0xbd/0x140 [ 1854.577643][ T1413] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1854.582830][ T1413] ? __nla_validate+0x50/0x50 [ 1854.587600][ T1413] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1854.594024][ T1413] ? __nla_parse+0x40/0x50 [ 1854.598516][ T1413] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1854.604928][ T1413] genl_family_rcv_msg_doit+0x211/0x310 [ 1854.610544][ T1413] ? end_current_label_crit_section+0x170/0x170 [ 1854.616858][ T1413] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1854.622826][ T1413] ? bpf_lsm_capable+0x9/0x10 [ 1854.627544][ T1413] ? security_capable+0x89/0xb0 [ 1854.632459][ T1413] genl_rcv_msg+0x619/0x7a0 [ 1854.637024][ T1413] ? genl_bind+0x360/0x360 [ 1854.641473][ T1413] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1854.647938][ T1413] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1854.654569][ T1413] ? perf_trace_lock+0xfc/0x3b0 [ 1854.659562][ T1413] netlink_rcv_skb+0x241/0x4d0 [ 1854.664376][ T1413] ? genl_bind+0x360/0x360 [ 1854.668938][ T1413] ? netlink_ack+0x1180/0x1180 [ 1854.673796][ T1413] ? __lock_acquire+0x7d40/0x7d40 [ 1854.678891][ T1413] ? down_read+0x1ac/0x2e0 [ 1854.683543][ T1413] genl_rcv+0x28/0x40 [ 1854.687562][ T1413] netlink_unicast+0x751/0x8d0 [ 1854.692442][ T1413] netlink_sendmsg+0x8d0/0xbf0 [ 1854.697330][ T1413] ? netlink_getsockopt+0x590/0x590 [ 1854.702654][ T1413] ? aa_sock_msg_perm+0x94/0x150 [ 1854.708117][ T1413] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1854.713582][ T1413] ? security_socket_sendmsg+0x80/0xa0 [ 1854.719102][ T1413] ? netlink_getsockopt+0x590/0x590 [ 1854.724391][ T1413] ____sys_sendmsg+0x5ba/0x960 [ 1854.729260][ T1413] ? __asan_memset+0x22/0x40 [ 1854.733916][ T1413] ? __sys_sendmsg_sock+0x30/0x30 [ 1854.739064][ T1413] ? __import_iovec+0x5f2/0x850 [ 1854.743996][ T1413] ? import_iovec+0x73/0xa0 [ 1854.748658][ T1413] ___sys_sendmsg+0x2a6/0x360 [ 1854.753487][ T1413] ? __sys_sendmsg+0x2a0/0x2a0 [ 1854.758537][ T1413] __se_sys_sendmsg+0x1c2/0x2b0 [ 1854.763440][ T1413] ? __x64_sys_sendmsg+0x80/0x80 [ 1854.768476][ T1413] ? lockdep_hardirqs_on+0x98/0x150 [ 1854.773724][ T1413] do_syscall_64+0x55/0xa0 [ 1854.778185][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1854.782904][ T1413] ? clear_bhb_loop+0x40/0x90 [ 1854.787625][ T1413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1854.793727][ T1413] RIP: 0033:0x7f55d059c799 [ 1854.798279][ T1413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1854.818126][ T1413] RSP: 002b:00007f55ce7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1854.826584][ T1413] RAX: ffffffffffffffda RBX: 00007f55d0816180 RCX: 00007f55d059c799 [ 1854.834593][ T1413] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1854.842684][ T1413] RBP: 00007f55d0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 1854.850687][ T1413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1854.858778][ T1413] R13: 00007f55d0816218 R14: 00007f55d0816180 R15: 00007ffc77d57f08 [ 1854.866839][ T1413] [ 1856.453276][ T1437] netlink: 'syz.1.8944': attribute type 10 has an invalid length. [ 1856.556055][ T1437] __nla_validate_parse: 5 callbacks suppressed [ 1856.556076][ T1437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1857.569172][ T1443] netlink: 'syz.1.8946': attribute type 4 has an invalid length. [ 1857.613018][ T1443] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.8946'. [ 1858.011269][ T1434] netlink: 'syz.0.8943': attribute type 4 has an invalid length. [ 1858.035693][ T1434] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8943'. [ 1858.251149][ T1451] netlink: 'syz.2.8949': attribute type 12 has an invalid length. [ 1858.286105][ T1451] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8949'. [ 1858.457159][ T1452] netlink: 'syz.3.8947': attribute type 10 has an invalid length. [ 1858.468931][ T1452] netlink: 55 bytes leftover after parsing attributes in process `syz.3.8947'. [ 1859.670995][ T1469] netlink: 17279 bytes leftover after parsing attributes in process `syz.1.8953'. [ 1859.818111][ T1462] netlink: 668 bytes leftover after parsing attributes in process `syz.3.8951'. [ 1859.841743][ T1462] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1859.909584][ T1462] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1860.546441][ T1477] netlink: 'syz.0.8954': attribute type 10 has an invalid length. [ 1860.554532][ T1477] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8954'. [ 1860.589086][ T1477] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1861.383591][ T1491] netlink: 'syz.3.8960': attribute type 12 has an invalid length. [ 1861.396697][ T1491] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8960'. [ 1862.446588][ T1497] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8962'. [ 1862.932944][ T1506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8965'. [ 1863.858664][ T1506] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8965'. [ 1864.450568][ T1522] netlink: 'syz.1.8966': attribute type 10 has an invalid length. [ 1864.477561][ T1522] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8966'. [ 1864.834789][ T1510] netlink: 'syz.2.8963': attribute type 4 has an invalid length. [ 1864.876269][ T1510] netlink: 152 bytes leftover after parsing attributes in process `syz.2.8963'. [ 1865.828873][ T1550] netlink: 'syz.3.8977': attribute type 13 has an invalid length. [ 1865.938951][ T1550] netlink: 164 bytes leftover after parsing attributes in process `syz.3.8977'. [ 1866.873859][ T1543] netlink: 'syz.3.8977': attribute type 2 has an invalid length. [ 1866.887800][ T1543] netlink: 'syz.3.8977': attribute type 8 has an invalid length. [ 1866.915831][ T1543] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8977'. [ 1867.406059][ T1568] netlink: 'syz.2.8979': attribute type 10 has an invalid length. [ 1867.458462][ T1568] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8979'. [ 1867.669424][ T1567] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.8980'. [ 1867.791087][ T1567] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô!' [ 1867.920112][ T1567] CPU: 1 PID: 1567 Comm: syz.0.8980 Not tainted syzkaller #0 [ 1867.927618][ T1567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1867.937924][ T1567] Call Trace: [ 1867.941267][ T1567] [ 1867.944262][ T1567] dump_stack_lvl+0x18c/0x250 [ 1867.949134][ T1567] ? show_regs_print_info+0x20/0x20 [ 1867.954459][ T1567] ? load_image+0x400/0x400 [ 1867.959069][ T1567] sysfs_warn_dup+0x8e/0xa0 [ 1867.963700][ T1567] sysfs_do_create_link_sd+0xc0/0x110 [ 1867.969128][ T1567] device_add_class_symlinks+0x1cf/0x240 [ 1867.975117][ T1567] device_add+0x507/0xc20 [ 1867.979534][ T1567] wiphy_register+0x1dad/0x2ae0 [ 1867.984502][ T1567] ? cfg80211_event_work+0x40/0x40 [ 1867.989672][ T1567] ? minstrel_ht_alloc+0x88a/0x990 [ 1867.994951][ T1567] ? ieee80211_init_rate_ctrl_alg+0x562/0x5e0 [ 1868.001080][ T1567] ieee80211_register_hw+0x3464/0x4250 [ 1868.006755][ T1567] ? ieee80211_tasklet_handler+0x20/0x20 [ 1868.012518][ T1567] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1868.018476][ T1567] ? __debug_object_init+0xec/0x450 [ 1868.024005][ T1567] ? __asan_memset+0x22/0x40 [ 1868.028646][ T1567] ? __hrtimer_init+0x186/0x270 [ 1868.033570][ T1567] mac80211_hwsim_new_radio+0x2a00/0x4d10 [ 1868.039455][ T1567] ? mac80211_hwsim_free+0x220/0x220 [ 1868.044808][ T1567] ? rcu_is_watching+0x15/0xb0 [ 1868.049622][ T1567] ? kstrndup+0xbd/0x140 [ 1868.053945][ T1567] hwsim_new_radio_nl+0xdc9/0x1a90 [ 1868.059129][ T1567] ? __nla_validate+0x50/0x50 [ 1868.063891][ T1567] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1868.070496][ T1567] ? __nla_parse+0x40/0x50 [ 1868.074967][ T1567] ? genl_family_rcv_msg_attrs_parse+0x1c6/0x290 [ 1868.081447][ T1567] genl_family_rcv_msg_doit+0x211/0x310 [ 1868.087117][ T1567] ? end_current_label_crit_section+0x170/0x170 [ 1868.093411][ T1567] ? genl_family_rcv_msg_dumpit+0x310/0x310 [ 1868.099372][ T1567] ? bpf_lsm_capable+0x9/0x10 [ 1868.104092][ T1567] ? security_capable+0x89/0xb0 [ 1868.109010][ T1567] genl_rcv_msg+0x619/0x7a0 [ 1868.113660][ T1567] ? genl_bind+0x360/0x360 [ 1868.118638][ T1567] ? hwsim_tx_info_frame_received_nl+0xd60/0xd60 [ 1868.125385][ T1567] ? trace_event_raw_event_lock_acquire+0x2c0/0x2c0 [ 1868.132019][ T1567] ? perf_trace_lock+0xfc/0x3b0 [ 1868.136945][ T1567] netlink_rcv_skb+0x241/0x4d0 [ 1868.141845][ T1567] ? genl_bind+0x360/0x360 [ 1868.146445][ T1567] ? netlink_ack+0x1180/0x1180 [ 1868.151417][ T1567] ? __lock_acquire+0x7d40/0x7d40 [ 1868.156509][ T1567] ? down_read+0x1ac/0x2e0 [ 1868.160974][ T1567] genl_rcv+0x28/0x40 [ 1868.165001][ T1567] netlink_unicast+0x751/0x8d0 [ 1868.169966][ T1567] netlink_sendmsg+0x8d0/0xbf0 [ 1868.175032][ T1567] ? netlink_getsockopt+0x590/0x590 [ 1868.180306][ T1567] ? aa_sock_msg_perm+0x94/0x150 [ 1868.185308][ T1567] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1868.190655][ T1567] ? security_socket_sendmsg+0x80/0xa0 [ 1868.196151][ T1567] ? netlink_getsockopt+0x590/0x590 [ 1868.201491][ T1567] ____sys_sendmsg+0x5ba/0x960 [ 1868.206322][ T1567] ? __asan_memset+0x22/0x40 [ 1868.210953][ T1567] ? __sys_sendmsg_sock+0x30/0x30 [ 1868.216009][ T1567] ? __import_iovec+0x5f2/0x850 [ 1868.220932][ T1567] ? import_iovec+0x73/0xa0 [ 1868.225655][ T1567] ___sys_sendmsg+0x2a6/0x360 [ 1868.230534][ T1567] ? __sys_sendmsg+0x2a0/0x2a0 [ 1868.235517][ T1567] __se_sys_sendmsg+0x1c2/0x2b0 [ 1868.240437][ T1567] ? __x64_sys_sendmsg+0x80/0x80 [ 1868.245470][ T1567] ? lockdep_hardirqs_on+0x98/0x150 [ 1868.250722][ T1567] do_syscall_64+0x55/0xa0 [ 1868.255178][ T1567] ? clear_bhb_loop+0x40/0x90 [ 1868.260071][ T1567] ? clear_bhb_loop+0x40/0x90 [ 1868.264793][ T1567] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1868.270723][ T1567] RIP: 0033:0x7f42f679c799 [ 1868.275380][ T1567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1868.295572][ T1567] RSP: 002b:00007f42f762b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1868.304066][ T1567] RAX: ffffffffffffffda RBX: 00007f42f6a16180 RCX: 00007f42f679c799 [ 1868.312070][ T1567] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 1868.320163][ T1567] RBP: 00007f42f6832c99 R08: 0000000000000000 R09: 0000000000000000 [ 1868.328292][ T1567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1868.336557][ T1567] R13: 00007f42f6a16218 R14: 00007f42f6a16180 R15: 00007ffd6a3a1378 [ 1868.344629][ T1567] [ 1871.326344][ T1605] netlink: 'syz.0.8992': attribute type 10 has an invalid length. [ 1871.458870][ T1605] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8992'. [ 1871.522439][ T1605] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1873.939919][ T1636] netlink: 208064 bytes leftover after parsing attributes in process `syz.1.9000'. [ 1874.755786][ T1642] netlink: 'syz.0.9003': attribute type 10 has an invalid length. [ 1874.765842][ T1642] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9003'. [ 1875.017860][ T1642] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1880.137012][ T1703] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9024'. [ 1880.256906][ T1695] netlink: 668 bytes leftover after parsing attributes in process `syz.1.9020'. [ 1880.316299][ T1695] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 1880.376649][ T1695] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1882.861849][ T1728] netlink: 'syz.3.9027': attribute type 4 has an invalid length. [ 1882.879223][ T1728] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9027'. [ 1884.618115][ T1753] netlink: 'syz.3.9036': attribute type 3 has an invalid length. [ 1884.661076][ T1753] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9036'. [ 1886.534871][ T1785] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9046'. [ 1886.851648][ T1786] netlink: 'syz.0.9046': attribute type 10 has an invalid length. [ 1888.194874][ T1822] netlink: 208064 bytes leftover after parsing attributes in process `syz.2.9055'. [ 1888.272629][ T1821] netlink: 'syz.0.9056': attribute type 3 has an invalid length. [ 1888.291272][ T1821] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.9056'. [ 1890.740420][ T1854] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 1890.760135][ T1854] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 1892.707946][ T1887] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1892.727561][ T1887] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 1894.169524][ T1910] netlink: 'syz.1.9084': attribute type 4 has an invalid length. [ 1894.334530][ T1910] netlink: 152 bytes leftover after parsing attributes in process `syz.1.9084'. [ 1894.635513][ T1912] netlink: 'syz.2.9089': attribute type 3 has an invalid length. [ 1894.748500][ T1912] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.9089'. [ 1899.004769][ T1943] netlink: 'syz.0.9098': attribute type 10 has an invalid length. [ 1899.025752][ T1943] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9098'. [ 1899.035249][ T1943] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1899.414612][ T1946] netlink: 'syz.1.9100': attribute type 3 has an invalid length. [ 1899.441350][ T1946] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9100'. [ 1899.861741][ T1947] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9099'. [ 1900.067438][ T1949] netlink: 'syz.3.9099': attribute type 10 has an invalid length. [ 1900.127235][ T1959] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9104'. [ 1902.986396][ T1979] netlink: 'syz.3.9110': attribute type 10 has an invalid length. [ 1902.994409][ T1979] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9110'. [ 1903.861142][ T1997] sit0: left promiscuous mode [ 1904.496865][ T2005] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1904.526341][ T2006] netlink: 'syz.3.9118': attribute type 17 has an invalid length. [ 1904.557726][ T2006] netlink: 152 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1904.640596][ T2006] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1904.667208][ T2010] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1905.086991][ T2017] netlink: 'syz.1.9120': attribute type 10 has an invalid length. [ 1905.108441][ T2017] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9120'. [ 1906.020383][ T2022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9121'. [ 1906.444635][ T2022] netlink: 'syz.2.9121': attribute type 10 has an invalid length. [ 1906.923749][ T2043] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 1906.943546][ T2043] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 1907.127773][ T2051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1907.431593][ T2052] netlink: 'syz.3.9132': attribute type 10 has an invalid length. [ 1907.567396][ T2052] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9132'. [ 1907.584806][ T2053] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9131'. [ 1909.368721][ T1131] wlan1: Trigger new scan to find an IBSS to join [ 1909.387772][ T2078] netlink: 'syz.3.9141': attribute type 10 has an invalid length. [ 1909.910255][ T2083] netlink: 'syz.1.9142': attribute type 10 has an invalid length. [ 1909.948336][ T2083] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9142'. [ 1910.564332][ T2102] netlink: 'syz.3.9145': attribute type 3 has an invalid length. [ 1910.611118][ T2097] netlink: 'syz.1.9153': attribute type 10 has an invalid length. [ 1910.626320][ T2097] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9153'. [ 1910.648885][ T2102] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.9145'. [ 1910.752438][ T2101] netlink: 'syz.2.9147': attribute type 12 has an invalid length. [ 1910.772881][ T2101] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9147'. [ 1912.950531][ T2132] netlink: 'syz.1.9157': attribute type 10 has an invalid length. [ 1912.976843][ T2132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9157'. [ 1913.298430][ T2145] netlink: 'syz.0.9160': attribute type 12 has an invalid length. [ 1913.318405][ T2145] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9160'. [ 1913.355771][T20974] wlan1: Trigger new scan to find an IBSS to join [ 1913.617310][ T2148] netlink: 'syz.1.9161': attribute type 28 has an invalid length. [ 1913.695789][ T2148] netlink: 'syz.1.9161': attribute type 29 has an invalid length. [ 1913.812124][ T2148] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9161'. [ 1914.438764][T20974] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 1915.155406][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.162503][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 1916.160201][ T2183] netlink: 'syz.1.9169': attribute type 10 has an invalid length. [ 1916.198820][ T2183] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9169'. [ 1917.185128][ T2199] netlink: 'syz.0.9173': attribute type 10 has an invalid length. [ 1917.379020][ T2199] hsr_slave_0 (unregistering): left promiscuous mode [ 1918.136369][ T2219] netlink: 'syz.3.9180': attribute type 10 has an invalid length. [ 1918.144359][ T2219] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9180'. [ 1919.053196][ T2233] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1919.337383][ T2237] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9182'. [ 1919.976977][ T2244] netlink: 'syz.3.9185': attribute type 3 has an invalid length. [ 1919.988769][ T2244] netlink: 'syz.3.9185': attribute type 1 has an invalid length. [ 1920.036932][ T2244] netlink: 181400 bytes leftover after parsing attributes in process `syz.3.9185'. [ 1920.810160][ T2258] netlink: 'syz.1.9191': attribute type 12 has an invalid length. [ 1920.860770][ T2258] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9191'. [ 1922.951620][ T2278] netlink: 'syz.1.9198': attribute type 10 has an invalid length. [ 1923.041346][ T2278] hsr_slave_0 (unregistering): left promiscuous mode [ 1924.064247][ T2314] netlink: 'syz.0.9209': attribute type 28 has an invalid length. [ 1924.076029][ T2314] netlink: 'syz.0.9209': attribute type 29 has an invalid length. [ 1924.084011][ T2314] netlink: 132 bytes leftover after parsing attributes in process `syz.0.9209'. [ 1924.467519][ T2322] netlink: 'syz.1.9210': attribute type 3 has an invalid length. [ 1924.477403][ T2322] netlink: 'syz.1.9210': attribute type 1 has an invalid length. [ 1924.487362][ T2322] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.9210'. [ 1925.926101][ T2341] netlink: 'syz.3.9215': attribute type 12 has an invalid length. [ 1925.934012][ T2341] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9215'. [ 1928.620620][ T2382] netlink: 'syz.0.9231': attribute type 3 has an invalid length. [ 1928.645823][ T2382] netlink: 'syz.0.9231': attribute type 1 has an invalid length. [ 1928.679611][ T2382] netlink: 181400 bytes leftover after parsing attributes in process `syz.0.9231'. [ 1930.636789][ T2423] netlink: 'syz.2.9242': attribute type 10 has an invalid length. [ 1930.967118][ T2423] hsr_slave_0 (unregistering): left promiscuous mode [ 1932.967597][ T2464] netlink: 'syz.1.9254': attribute type 10 has an invalid length. [ 1936.205866][ T2536] netlink: 'syz.0.9269': attribute type 4 has an invalid length. [ 1936.213762][ T2536] netlink: 152 bytes leftover after parsing attributes in process `syz.0.9269'. [ 1937.290956][ T2543] netlink: 'syz.3.9275': attribute type 10 has an invalid length. [ 1937.334793][ T2543] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9275'. [ 1939.126886][ T2583] netlink: 'syz.2.9284': attribute type 10 has an invalid length. [ 1939.148221][ T2583] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9284'. [ 1939.823966][ T2589] netlink: 'syz.2.9285': attribute type 28 has an invalid length. [ 1939.834556][ T2589] netlink: 'syz.2.9285': attribute type 29 has an invalid length. [ 1939.853607][ T2589] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9285'. [ 1942.654813][ T2589] ------------[ cut here ]------------ [ 1942.660524][ T2589] WARNING: CPU: 0 PID: 2589 at kernel/events/core.c:6806 perf_pending_task+0x35c/0x470 [ 1942.670441][ T2589] Modules linked in: [ 1942.674378][ T2589] CPU: 0 PID: 2589 Comm: syz.2.9285 Not tainted syzkaller #0 [ 1942.682087][ T2589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.692270][ T2589] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1942.698116][ T2589] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 1942.717838][ T2589] RSP: 0018:ffffc9000bc5f9c0 EFLAGS: 00010293 [ 1942.723949][ T2589] RAX: ffffffff81b13c0c RBX: ffff88805d7a96b0 RCX: ffff888025130000 [ 1942.732367][ T2589] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1942.740438][ T2589] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 1942.748566][ T2589] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888025130000 [ 1942.756655][ T2589] R13: ffff88805f85ed30 R14: ffff88805d7a9470 R15: 1ffff1100baf528e [ 1942.764659][ T2589] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1942.773661][ T2589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1942.780618][ T2589] CR2: 000000110c30e0d9 CR3: 000000004ff9b000 CR4: 00000000003506f0 [ 1942.788667][ T2589] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1942.796734][ T2589] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1942.804746][ T2589] Call Trace: [ 1942.808122][ T2589] [ 1942.811179][ T2589] task_work_run+0x1d4/0x260 [ 1942.816022][ T2589] ? task_work_cancel+0x220/0x220 [ 1942.821111][ T2589] do_exit+0x95a/0x2460 [ 1942.825381][ T2589] ? put_task_struct+0xc0/0xc0 [ 1942.830222][ T2589] ? lockdep_hardirqs_on+0x98/0x150 [ 1942.835455][ T2589] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1942.841823][ T2589] do_group_exit+0x21b/0x2d0 [ 1942.846489][ T2589] ? lockdep_hardirqs_on+0x98/0x150 [ 1942.851725][ T2589] get_signal+0x12fc/0x13f0 [ 1942.856353][ T2589] arch_do_signal_or_restart+0xc2/0x800 [ 1942.861948][ T2589] ? get_sigframe_size+0x20/0x20 [ 1942.866988][ T2589] ? exit_to_user_mode_loop+0x3b/0x110 [ 1942.872487][ T2589] exit_to_user_mode_loop+0x70/0x110 [ 1942.877900][ T2589] exit_to_user_mode_prepare+0xee/0x180 [ 1942.883690][ T2589] syscall_exit_to_user_mode+0x1a/0x50 [ 1942.889222][ T2589] do_syscall_64+0x61/0xa0 [ 1942.893678][ T2589] ? clear_bhb_loop+0x40/0x90 [ 1942.898454][ T2589] ? clear_bhb_loop+0x40/0x90 [ 1942.903688][ T2589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1942.909652][ T2589] RIP: 0033:0x7f1ac839c799 [ 1942.914098][ T2589] Code: Unable to access opcode bytes at 0x7f1ac839c76f. [ 1942.921216][ T2589] RSP: 002b:00007f1ac92630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1942.929702][ T2589] RAX: fffffffffffffe00 RBX: 00007f1ac8615fa8 RCX: 00007f1ac839c799 [ 1942.937783][ T2589] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ac8615fa8 [ 1942.945910][ T2589] RBP: 00007f1ac8615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1942.953912][ T2589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1942.962159][ T2589] R13: 00007f1ac8616038 R14: 00007ffef530e820 R15: 00007ffef530e908 [ 1942.970396][ T2589] [ 1942.973449][ T2589] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1942.980742][ T2589] CPU: 0 PID: 2589 Comm: syz.2.9285 Not tainted syzkaller #0 [ 1942.988134][ T2589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1942.998212][ T2589] Call Trace: [ 1943.001609][ T2589] [ 1943.004646][ T2589] dump_stack_lvl+0x18c/0x250 [ 1943.009375][ T2589] ? show_regs_print_info+0x20/0x20 [ 1943.014613][ T2589] ? load_image+0x400/0x400 [ 1943.019249][ T2589] panic+0x2dc/0x730 [ 1943.023178][ T2589] ? bpf_jit_dump+0xd0/0xd0 [ 1943.027815][ T2589] __warn+0x2e0/0x470 [ 1943.031821][ T2589] ? perf_pending_task+0x35c/0x470 [ 1943.036971][ T2589] ? perf_pending_task+0x35c/0x470 [ 1943.042136][ T2589] report_bug+0x2be/0x4f0 [ 1943.046609][ T2589] ? perf_pending_task+0x35c/0x470 [ 1943.051781][ T2589] ? perf_pending_task+0x35c/0x470 [ 1943.056962][ T2589] ? perf_pending_task+0x35e/0x470 [ 1943.062106][ T2589] handle_bug+0xcf/0x120 [ 1943.066413][ T2589] exc_invalid_op+0x1a/0x50 [ 1943.070951][ T2589] asm_exc_invalid_op+0x1a/0x20 [ 1943.075831][ T2589] RIP: 0010:perf_pending_task+0x35c/0x470 [ 1943.081584][ T2589] Code: ff 84 db 75 14 e8 74 e0 d5 ff 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 60 e0 d5 ff e8 7b 61 4f ff eb e5 e8 54 e0 d5 ff <0f> 0b e9 f3 fe ff ff e8 48 e0 d5 ff 48 c7 c7 70 f3 1c 8d 4c 89 f6 [ 1943.101220][ T2589] RSP: 0018:ffffc9000bc5f9c0 EFLAGS: 00010293 [ 1943.107321][ T2589] RAX: ffffffff81b13c0c RBX: ffff88805d7a96b0 RCX: ffff888025130000 [ 1943.115405][ T2589] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1943.123425][ T2589] RBP: 0000000000000001 R08: ffffffff8e8aeeef R09: 1ffffffff1d15ddd [ 1943.131434][ T2589] R10: dffffc0000000000 R11: fffffbfff1d15dde R12: ffff888025130000 [ 1943.139444][ T2589] R13: ffff88805f85ed30 R14: ffff88805d7a9470 R15: 1ffff1100baf528e [ 1943.147539][ T2589] ? perf_pending_task+0x35c/0x470 [ 1943.152701][ T2589] task_work_run+0x1d4/0x260 [ 1943.157329][ T2589] ? task_work_cancel+0x220/0x220 [ 1943.162402][ T2589] do_exit+0x95a/0x2460 [ 1943.166607][ T2589] ? put_task_struct+0xc0/0xc0 [ 1943.171398][ T2589] ? lockdep_hardirqs_on+0x98/0x150 [ 1943.176712][ T2589] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1943.183021][ T2589] do_group_exit+0x21b/0x2d0 [ 1943.187657][ T2589] ? lockdep_hardirqs_on+0x98/0x150 [ 1943.192916][ T2589] get_signal+0x12fc/0x13f0 [ 1943.197491][ T2589] arch_do_signal_or_restart+0xc2/0x800 [ 1943.203099][ T2589] ? get_sigframe_size+0x20/0x20 [ 1943.208114][ T2589] ? exit_to_user_mode_loop+0x3b/0x110 [ 1943.213615][ T2589] exit_to_user_mode_loop+0x70/0x110 [ 1943.218933][ T2589] exit_to_user_mode_prepare+0xee/0x180 [ 1943.224513][ T2589] syscall_exit_to_user_mode+0x1a/0x50 [ 1943.230185][ T2589] do_syscall_64+0x61/0xa0 [ 1943.234725][ T2589] ? clear_bhb_loop+0x40/0x90 [ 1943.239428][ T2589] ? clear_bhb_loop+0x40/0x90 [ 1943.244132][ T2589] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1943.250486][ T2589] RIP: 0033:0x7f1ac839c799 [ 1943.255034][ T2589] Code: Unable to access opcode bytes at 0x7f1ac839c76f. [ 1943.262076][ T2589] RSP: 002b:00007f1ac92630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1943.270614][ T2589] RAX: fffffffffffffe00 RBX: 00007f1ac8615fa8 RCX: 00007f1ac839c799 [ 1943.278694][ T2589] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1ac8615fa8 [ 1943.286857][ T2589] RBP: 00007f1ac8615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1943.294849][ T2589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1943.302841][ T2589] R13: 00007f1ac8616038 R14: 00007ffef530e820 R15: 00007ffef530e908 [ 1943.310857][ T2589] [ 1943.314051][ T2589] Kernel Offset: disabled [ 1943.318396][ T2589] Rebooting in 86400 seconds..