last executing test programs: 4.521892229s ago: executing program 3 (id=15970): bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="1a0000000000000000000000008000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x1, 0x2d0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @perf_config_ext, 0x10c002, 0xac5d, 0x10000200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x1, 0x4, 0xfffffffc, 0xa}], 0x10, 0x1861}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001280)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r3 = socket$kcm(0xa, 0x2, 0x88) setsockopt$sock_attach_bpf(r3, 0x88, 0x64, &(0x7f00000009c0)=r2, 0x4) 3.512280041s ago: executing program 1 (id=15971): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x65ed}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xfe123, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_config_ext={0xd, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3, 0x1}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r1) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) r5 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000f7ff0000850000006100000095a1752f98bb3363d666ccc3c3014391d14d4d2b2acae38af9436a71ac847615acea3d53d82c03c330207fe502a432732057c3cf"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1a41, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x8b26, &(0x7f0000000280)={'wlan1\x00', @random="26e9b28de000"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r7, 0x2f, 0xe, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e00008100", 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0xf, 0x0, 0x5, [{0x1, 0x0, 0x3}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, &(0x7f0000000280)=""/266, 0x3a, 0x10a, 0x6}, 0x20) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000011008b88040f80ec59acbc0413a1f8480f0000005e2900421803001825000a001400000002800000121f", 0x2e}], 0x1}, 0x0) close(r9) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r11 = perf_event_open$cgroup(&(0x7f00000001c0)={0x1, 0x80, 0x2, 0x1, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x19c, 0x2, @perf_config_ext={0x9, 0x3}, 0x100208, 0x519, 0xf5f, 0x2, 0xe, 0x9, 0x1, 0x0, 0xffffffff, 0x0, 0xe}, 0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x1) perf_event_open$cgroup(&(0x7f0000000080)={0x5, 0x80, 0x9, 0xa7, 0x5, 0xf6, 0x0, 0x80, 0x8, 0x9, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x1, @perf_bp={&(0x7f0000000040), 0x8}, 0x100, 0x1, 0x7, 0x9, 0x0, 0x0, 0x7, 0x0, 0x1740, 0x0, 0x2}, r10, 0x6, r11, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) syz_clone(0x6801400, 0x0, 0x0, 0x0, 0x0, 0x0) 3.470936291s ago: executing program 4 (id=15972): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e406dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00'/19, @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ca5dabc1927dfeca095f5560d6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b188cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2f24d36ad2db161c3083", 0x8a}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='cpu\t>0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) 3.466460712s ago: executing program 0 (id=15973): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c3068461957e5357", 0x60}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) socket$kcm(0x2, 0x5, 0x84) 3.398126024s ago: executing program 3 (id=15975): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c306", 0x5a}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000050000000000004321ae30ba7a7e49d964"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, 0x0, 0x0}, 0x20) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x33, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 3.190351391s ago: executing program 4 (id=15976): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x3f, 0x40, 0x42}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x2b, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x25, &(0x7f0000000200)=r4, 0x4) 3.188432851s ago: executing program 0 (id=15977): socket$kcm(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffa}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a118001500060014ef030000120800040043000000a8001600a40001", 0x37}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.782068904s ago: executing program 0 (id=15980): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000002, 0xe, 0xffffffffffffffa0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.361670466s ago: executing program 0 (id=15981): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000005000000000000000000000085000000270000001801000020646c2500000000402020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffffff850000007300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a8", 0x0, 0x0, 0x60000000, 0x0, 0xfffffe99, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) close(0x3) close(0x4) socket$kcm(0x2, 0x5, 0x84) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f0000000280)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 2.361072966s ago: executing program 1 (id=15982): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x17, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) 2.360776066s ago: executing program 3 (id=15983): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x9, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="100000000400000008"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r3}, 0x20) 2.152020683s ago: executing program 2 (id=15984): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.121780624s ago: executing program 4 (id=15985): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8f}, 0x0, 0x5, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480000, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x8, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[], 0x0, 0x46}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000100000000000000000000007911c000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x70) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='GPL\x00'}, 0x94) sendmsg$sock(0xffffffffffffffff, 0x0, 0x20008010) 2.066628766s ago: executing program 3 (id=15986): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e406dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32=r1, @ANYBLOB='\x00'/19, @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ca5dabc1927dfeca095f5560d6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b188cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2f24d36ad2db161c3083", 0x8a}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='cpu\t>0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) 1.874271272s ago: executing program 4 (id=15987): socket$kcm(0xa, 0x5, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000120000000000000000"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r2, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.871734002s ago: executing program 2 (id=15997): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xefffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x44001) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r2, &(0x7f0000000900)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x3, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020642500000000202020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000002500)="d2ff03076003008cb89e08f088a8", 0x0, 0xd5b5, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.830173963s ago: executing program 1 (id=15988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5a", 0x8e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYRESDEC=r0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='cpu\t>0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) 1.59790822s ago: executing program 3 (id=15989): socket$kcm(0x1e, 0x53c31970268673d3, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000036000295"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f00000001c0)="05000000df000000428b4c6588f5", 0x0, 0xffffffff, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffffffa4) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x6, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.554672802s ago: executing program 2 (id=15990): socket$kcm(0x29, 0x5, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x2f, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.525874963s ago: executing program 1 (id=15991): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="6000000022007f029e607dd75fcb520002a124b244de91f7f414adcf41bfafdd1b1e93c6292aefa3ca89563a63fb94b2584ca2faa20f2c308b0fe298acec10e3019e1e26e6efd0166e6c1b01132e5423294ac2f4d53c3870c306", 0x5a}], 0x1, 0x0, 0x0, 0x6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r0, &(0x7f0000002a80)={0x0, 0x0, 0x0}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x32, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000"], 0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="03000000050000000000004321ae30ba7a7e49d964"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, 0x0, 0x0}, 0x20) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r6, 0x0, 0x33, 0x0, 0x0) socket$kcm(0x2, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1.466977345s ago: executing program 0 (id=15992): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) socket$kcm(0x10, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x6, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x92db, 0x0, 0x6, 0x42000, r1, 0x10001, '\x00', 0x0, r2, 0x0, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf09"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.154568234s ago: executing program 2 (id=15993): socket$kcm(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, @perf_bp={0x0}, 0x21, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000003840)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="fbe6bd8dfcdda5a210b8cfefbd66f459c7261b927d25d3cf74d2f7c97735eba47f606a290d18492592230700000000000000081fdbd921ed4db0e67c9d5ab1452445a1e0da5ac68b13f4afe2712eeaad350d07", 0x53}], 0x1}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0xc4, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f0000000080)=r3, 0x4) close(r0) 1.089533626s ago: executing program 4 (id=15994): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, @perf_config_ext, 0x10c002, 0x89}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x80, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$kcm(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001cc0)={{r0}, &(0x7f0000001c40), &(0x7f0000001c80)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000080)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 470.079476ms ago: executing program 3 (id=15995): socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffee}, 0x12002) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f00000006c0)="3ef015c4cded6aaa8c6e9e93c400"/23, 0x17}], 0x1}, 0x3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000000c0)="1800000014006b05c84e21000ab16d6e230675f811000000440002", 0x1b}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x24000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000d48159070000000000000000"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ec0)={0x7, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x8, 0x4}, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003f00000000feffff7f10001f0e0027000f00000000800200121f", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0xffffffffffffffff, 0x8, 0xc}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r0, &(0x7f0000000e80)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x2, 0x2, 0x3}}, 0x10, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="06224df6b38479894b0cc06abb41c6a3d29677f69548e307fb6e8e0aca4db0a73c44ffd5ffc1fa3e864e741a5c4378093a9ab98b78d405ecb356548a1291ce36b0ca01eb3369722fd4f4360d3829e293866a73d0a53a0f724b761038313343c6da08f1dadd7de4e8f3b5689a66787f40441e18ab20237f7ddcc1c19d90b510e7b06de1178a9b8151dc5b3b8947143aa119047061c7ad752f27a345f70abc1e2e3e4ec1f884a7611c39d901c6312b29c711ffc6dadf38c6838a6a58758746f2957fa084f932d79cd6fa2fc8293d24d58b396f394046c35e8ec5bc49aba095753d928697796c3d10913e088b0d95", 0xed}, {0x0}, {&(0x7f0000000540)="6c84d01125407e8b43abe8ff4f7ff30d065870c801bbec6eeb63a440b4e901bd15ebb34ed718c1e90ba724bb603938cb7fb9e7569f4bcd585d1388f7226f4c8cc45f2d6f5105c2dfddf5fcb43d1cc42fa634c15dda01126fdd392e5ab49a45e2169928bb86d4f4c1623956552d6a8a39b4", 0x71}, {&(0x7f0000000840)="fc2d08c73fc0b950572eeb28638c7c5e86afd876a10b9335b7ecf75c0e8165f544d79ddbe3a5fff78053095543614921edcd723579c13f34274b3b995dfa81e5b1b29bde33eb6b482ff43da436b40775b9332ac2", 0x54}, {&(0x7f00000008c0)="76f8b70f6e1c0e4faf8d20e61f008dbe47088c42897f2bad77ca73cb4b6074c829b2b8cb88d503651cb5e094e59e2dd64ffb541e58dbf94cf176e1249ada26612196f7b55d6720094a9a704d3ef5ffecaea222156a039ba153cffd2a7b79b5b054e7f12e019315adad8c5e67360468eb9dc59ad4f257f88dec4353a221e26fa4572dd23a4e77f7c99f9f25faf8ed151fdf48c48738ff4b6fd0d0267822a70e6d72208ea337bcf3160da37a895c5bc9b1d6957188a3e5d5b6abd1d9eeca64cf75ca37079ccd40ed27", 0xc8}, {&(0x7f0000000ac0)="f70da3e2cf7108be3e8fad8aae344fc741310b0a2b4ab74d32955047d948477ac689a39e5f92dea3773553877592a635b28671d88767afba55fc0c1f4d80d1dca0983cf6879059406704628dc76a40093cc7c3f9f34c723eed36df16a14a1196ea3d44a7d24809eee01db03ea4d6156f5e3bd18d907013708cbc9563864b4f215c224cb9226f42ee26656494", 0x8c}, {&(0x7f0000000b80)="1110ce3d085ccc2b56f79f324bddedc797398493612d6d5d78037143e809fd9d5dea9bff969c7f330add38db581b014715b86ba1b76476828f7f32e809ad53ff1bd48672ff95a091307570035cb40c0a898dc9d6f84e1ac71352242b05fe7f91af8af98e35ca14591786da2ebfd5cb98a3878ef0", 0x74}, {&(0x7f0000000c40)="56ba70d96de076197c7ebb7ed641be33bf71805d586f1aa1be3f32d6f8c0adaf416cc35d55541534d9afc2f40ff00334de792e20476c9315a983956c2111faedac0e21fbe900bb9eb93c5e5a1f9ff33f3d", 0x51}], 0x8, &(0x7f0000000d80)="b93c036ca88e9f9babc7db93a35f2e5ca53d9185b79173a6d42931c3e36eb6370e19369f37128a24dfcecf1dcf4d8e9b69fdef1d4aace5c09500eab96ea999c114bb8244f46a74d20b59f60dfd9dfe6a30fd28dce52272d4ffe20c4f0330565b8267897468a45ca25eab7b84260a098f44d35f29948c5d2a58d54b4c630a633b682c29d64291299617e6751876765e382bee1e4d697f7a614c0bfaf07f8301bd01ac36eabd6228583d1e43f74b7d31ef3ba0060227df23351b3d1099bef78dcdc09ba8785a2c504074aa4ad70c25e450", 0xd0, 0x20000008}, 0x4c0c1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext, 0x10c002, 0xac5d, 0x0, 0x7, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x8010, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000100)=0xbc) 436.007617ms ago: executing program 1 (id=15996): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, 0x0}, 0x45) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x200400c0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d080005000000e8fe55a1180015000600142603600e120900210000000401a8001600a40001", 0x37}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48000000e8fe55a1180015000600142603600e120900210000000401a80016000a", 0x35}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) socket$kcm(0x29, 0x5, 0x0) 366.489509ms ago: executing program 2 (id=15998): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$kcm(0x23, 0x5, 0x0) close(r0) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x100001, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff3, 0x0, @perf_config_ext={0x85, 0xffffffffffffffff}, 0x3212, 0x7, 0x2, 0x2, 0xc, 0x3, 0x2, 0x0, 0x0, 0x0, 0x800000000e48}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000004c0)='cpu&\t03\t\t') perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x7c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800}, 0x8100, 0x0, 0x0, 0x0, 0x0, 0xd531}, 0x0, 0x0, 0xffffffffffffffff, 0x2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 135.508046ms ago: executing program 0 (id=15999): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000070000008500000010"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000180)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, 0x0, 0x6a) 119.448526ms ago: executing program 4 (id=16000): r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xe4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, @perf_bp={0x0, 0x8}, 0x63c4, 0x0, 0xc2ba, 0x0, 0x4000000, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000005, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000300), 0x4}, 0x11540}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r4) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') 50.650089ms ago: executing program 1 (id=16001): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e406dcdf51951f215ce3bb9ad809d5e1cace81ed0bffece0", 0xbd}], 0x1}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32=r1, @ANYRES32, @ANYRESDEC=r0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="eb673468a1d4b3f1ac274e1633766522438f7d55a7f22df8e28fc6ec8d677cf78b41c22adf922d8bef985d6e2242f74b76e8ca5dabc1927dfeca095f5560d6d775f9ee1ad23211415025ae15790d7c3f2fcb9953bca2f88e0798e851b188cb7c44a90bae28cc85cf22b325ff568f85d0124eea958e8cc8ca5f5983730a7f86af2f24d36ad2db161c3083", 0x8a}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r8 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r8, 0x84, 0x2, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r9}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='cpu\t>0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r4, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r10, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) 0s ago: executing program 2 (id=16002): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001", @ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1b000000000000000000000000000400000000", @ANYRES32=0x1, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0], 0x50) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000300)="d8000000180001004e81f782db4cb904021d0800fe007c05e8fe55a10a000f000200142603600e1208001e007f370401a8000700e00002400400027c035c0461c1d67f6f94007134cf6efb80009a38b540a6ea553e437a0ef0a007a290457f0189b3050000006bbace8017cbec4c2ee5015030485bca8aa7cef4090000001fb7d322fe7c9f8775730d16a4683f5a", 0x8e}], 0x1}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYRESDEC=r0], 0x50) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{0x0}], 0x1}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d, 0x9, 0x0, 0x0, 0x0, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x0, 0x0, 0x1}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c48", 0x15}], 0x1}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="33fe00002a0053ea"], 0xfe33) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r7 = socket$kcm(0xa, 0x5, 0x0) setsockopt$sock_attach_bpf(r7, 0x84, 0x2, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000007000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x40082406, &(0x7f0000000040)='cpu\t>0&&\t') perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="f300"}) kernel console output (not intermixed with test programs): tlink: 122896 bytes leftover after parsing attributes in process `syz.3.12879'. [ 2741.197764][T12182] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2741.237828][T12182] CPU: 1 PID: 12182 Comm: syz.3.12879 Not tainted syzkaller #0 [ 2741.245482][T12182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2741.255595][T12182] Call Trace: [ 2741.258929][T12182] [ 2741.261908][T12182] dump_stack_lvl+0x188/0x24e [ 2741.266668][T12182] ? show_regs_print_info+0x12/0x12 [ 2741.271945][T12182] ? load_image+0x410/0x410 [ 2741.276561][T12182] sysfs_warn_dup+0x8a/0xa0 [ 2741.281135][T12182] sysfs_do_create_link_sd+0xc0/0x110 [ 2741.286585][T12182] device_add+0x83b/0x1050 [ 2741.291084][T12182] wiphy_register+0x1d8b/0x2aa0 [ 2741.296053][T12182] ? cfg80211_event_work+0x40/0x40 [ 2741.301228][T12182] ? minstrel_ht_alloc+0x894/0xa20 [ 2741.306427][T12182] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2741.312588][T12182] ieee80211_register_hw+0x2d48/0x39f0 [ 2741.318142][T12182] ? ieee80211_register_hw+0xed1/0x39f0 [ 2741.323746][T12182] ? ieee80211_register_hw+0xed1/0x39f0 [ 2741.329371][T12182] ? ieee80211_tasklet_handler+0x20/0x20 [ 2741.335063][T12182] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2741.341044][T12182] ? __debug_object_init+0xed/0x440 [ 2741.346315][T12182] ? memset+0x1e/0x40 [ 2741.350340][T12182] ? __hrtimer_init+0x189/0x270 [ 2741.355243][T12182] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2741.361018][T12182] ? memcpy+0x3c/0x60 [ 2741.365046][T12182] hwsim_new_radio_nl+0xab7/0xc90 [ 2741.370135][T12182] genl_family_rcv_msg_doit+0x22f/0x350 [ 2741.375726][T12182] ? end_current_label_crit_section+0x170/0x170 [ 2741.382018][T12182] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2741.387976][T12182] ? bpf_lsm_capable+0x5/0x10 [ 2741.392703][T12182] ? security_capable+0x85/0xb0 [ 2741.397605][T12182] genl_rcv_msg+0x601/0x790 [ 2741.402174][T12182] ? genl_bind+0x360/0x360 [ 2741.406631][T12182] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2741.413034][T12182] netlink_rcv_skb+0x1ef/0x440 [ 2741.417853][T12182] ? genl_bind+0x360/0x360 [ 2741.422320][T12182] ? netlink_ack+0x1160/0x1160 [ 2741.427182][T12182] ? down_read+0x1a8/0x2d0 [ 2741.431668][T12182] genl_rcv+0x24/0x40 [ 2741.435712][T12182] netlink_unicast+0x7ad/0x920 [ 2741.440558][T12182] netlink_sendmsg+0x8ad/0xbd0 [ 2741.445393][T12182] ? netlink_getsockopt+0x550/0x550 [ 2741.450818][T12182] ? aa_sock_msg_perm+0x94/0x150 [ 2741.455801][T12182] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2741.461216][T12182] ? security_socket_sendmsg+0x7c/0xa0 [ 2741.466803][T12182] ? netlink_getsockopt+0x550/0x550 [ 2741.472045][T12182] ____sys_sendmsg+0x5ed/0x9a0 [ 2741.476866][T12182] ? __sys_sendmsg_sock+0x30/0x30 [ 2741.481930][T12182] ? __import_iovec+0x306/0x510 [ 2741.486841][T12182] ? import_iovec+0x6f/0xa0 [ 2741.491393][T12182] ___sys_sendmsg+0x2a2/0x360 [ 2741.496123][T12182] ? __sys_sendmsg+0x2a0/0x2a0 [ 2741.500997][T12182] ? ktime_get+0x7b/0x270 [ 2741.505427][T12182] __se_sys_sendmsg+0x1c3/0x2b0 [ 2741.510321][T12182] ? __x64_sys_sendmsg+0x80/0x80 [ 2741.515339][T12182] ? lockdep_hardirqs_on+0x94/0x140 [ 2741.520585][T12182] do_syscall_64+0x4c/0xa0 [ 2741.525042][T12182] ? clear_bhb_loop+0x60/0xb0 [ 2741.529754][T12182] ? clear_bhb_loop+0x60/0xb0 [ 2741.534498][T12182] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2741.540461][T12182] RIP: 0033:0x7f85c859ce59 [ 2741.544914][T12182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2741.564578][T12182] RSP: 002b:00007f85c94a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2741.573072][T12182] RAX: ffffffffffffffda RBX: 00007f85c8816090 RCX: 00007f85c859ce59 [ 2741.581087][T12182] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000c [ 2741.589107][T12182] RBP: 00007f85c8632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2741.597120][T12182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2741.605140][T12182] R13: 00007f85c8816128 R14: 00007f85c8816090 R15: 00007fffb78d5f88 [ 2741.613185][T12182] [ 2743.123644][T12236] validate_nla: 15 callbacks suppressed [ 2743.123684][T12236] netlink: 'syz.2.12896': attribute type 2 has an invalid length. [ 2743.184157][T12236] netlink: 'syz.2.12896': attribute type 8 has an invalid length. [ 2743.206045][T12231] netlink: 'syz.4.12894': attribute type 39 has an invalid length. [ 2743.232780][T12240] netlink: 'syz.2.12896': attribute type 2 has an invalid length. [ 2743.242806][T12240] netlink: 'syz.2.12896': attribute type 8 has an invalid length. [ 2743.292949][T12236] netlink: 'syz.2.12896': attribute type 10 has an invalid length. [ 2743.690619][T12249] delete_channel: no stack [ 2743.711662][T12249] delete_channel: no stack [ 2743.778024][T12248] delete_channel: no stack [ 2743.843102][T12252] netlink: 'syz.1.12903': attribute type 2 has an invalid length. [ 2743.865107][T12252] netlink: 'syz.1.12903': attribute type 8 has an invalid length. [ 2743.889310][T12252] __nla_validate_parse: 8 callbacks suppressed [ 2743.889346][T12252] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12903'. [ 2744.246101][T12253] can: request_module (can-proto-0) failed. [ 2744.653406][T12265] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12907'. [ 2744.732063][T12263] netlink: 'syz.0.12905': attribute type 29 has an invalid length. [ 2744.748383][T12263] netlink: 'syz.0.12905': attribute type 29 has an invalid length. [ 2744.795708][T12270] netlink: 164 bytes leftover after parsing attributes in process `syz.2.12908'. [ 2744.843764][T12263] netlink: 168 bytes leftover after parsing attributes in process `syz.0.12905'. [ 2744.863681][T12269] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12905'. [ 2744.997007][T12273] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2745.727462][T12289] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12915'. [ 2745.976363][T12299] delete_channel: no stack [ 2746.004319][T12299] delete_channel: no stack [ 2746.071225][T12296] delete_channel: no stack [ 2746.498234][T12310] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.12921'. [ 2746.519159][T12310] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12921'. [ 2746.580086][T12312] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2746.605290][T12314] netlink: 14 bytes leftover after parsing attributes in process `syz.1.12923'. [ 2747.347755][T12328] netlink: 140 bytes leftover after parsing attributes in process `syz.2.12928'. [ 2747.770095][T12343] sock: sock_set_timeout: `syz.3.12934' (pid 12343) tries to set negative timeout [ 2748.589884][T12357] validate_nla: 16 callbacks suppressed [ 2748.589923][T12357] netlink: 'syz.3.12939': attribute type 39 has an invalid length. [ 2748.926512][T12364] netlink: 'syz.2.12941': attribute type 21 has an invalid length. [ 2749.013699][T12364] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2749.059347][T12366] __nla_validate_parse: 3 callbacks suppressed [ 2749.059388][T12366] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12943'. [ 2750.024849][T12389] netlink: 'syz.1.12948': attribute type 10 has an invalid length. [ 2750.091159][T12388] netlink: 'syz.4.12950': attribute type 21 has an invalid length. [ 2750.109788][T12388] netlink: 128 bytes leftover after parsing attributes in process `syz.4.12950'. [ 2750.172958][T12388] netlink: 3 bytes leftover after parsing attributes in process `syz.4.12950'. [ 2750.300756][T12399] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12952'. [ 2750.450847][T12402] netlink: 'syz.4.12954': attribute type 39 has an invalid length. [ 2751.548235][T12418] netlink: 14 bytes leftover after parsing attributes in process `syz.3.12960'. [ 2751.842062][T12425] netlink: 'syz.1.12963': attribute type 2 has an invalid length. [ 2751.867107][T12425] netlink: 'syz.1.12963': attribute type 8 has an invalid length. [ 2751.888108][T12425] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12963'. [ 2751.947233][T12427] netlink: 'syz.1.12963': attribute type 2 has an invalid length. [ 2751.993839][T12427] netlink: 'syz.1.12963': attribute type 8 has an invalid length. [ 2752.049754][T12427] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12963'. [ 2752.106140][T12425] netlink: 'syz.1.12963': attribute type 10 has an invalid length. [ 2752.732194][T12443] can: request_module (can-proto-0) failed. [ 2753.021114][T12459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12971'. [ 2753.856903][T12470] netlink: 14 bytes leftover after parsing attributes in process `syz.4.12977'. [ 2754.601290][T12480] validate_nla: 1 callbacks suppressed [ 2754.601359][T12480] netlink: 'syz.1.12978': attribute type 29 has an invalid length. [ 2754.844317][T12480] netlink: 'syz.1.12978': attribute type 29 has an invalid length. [ 2754.902952][T12489] netlink: 'syz.3.12981': attribute type 2 has an invalid length. [ 2754.911212][T12489] netlink: 'syz.3.12981': attribute type 8 has an invalid length. [ 2754.948355][T12480] netlink: 'syz.1.12978': attribute type 1 has an invalid length. [ 2754.967505][T12489] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12981'. [ 2754.981948][T12480] netlink: 'syz.1.12978': attribute type 3 has an invalid length. [ 2755.012205][T12480] netlink: 132 bytes leftover after parsing attributes in process `syz.1.12978'. [ 2755.052748][T12487] netlink: 'syz.1.12978': attribute type 5 has an invalid length. [ 2755.148171][T12487] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12978'. [ 2755.176523][T12484] netlink: 'syz.1.12978': attribute type 29 has an invalid length. [ 2755.203502][T12493] netlink: 'syz.3.12981': attribute type 2 has an invalid length. [ 2755.222115][T12493] netlink: 'syz.3.12981': attribute type 8 has an invalid length. [ 2755.253046][T12493] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12981'. [ 2756.015277][T12509] netlink: 199824 bytes leftover after parsing attributes in process `syz.4.12991'. [ 2756.057964][T12509] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12991'. [ 2756.437968][T12523] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12992'. [ 2756.565011][T12519] can: request_module (can-proto-0) failed. [ 2756.590533][T12526] netlink: 140 bytes leftover after parsing attributes in process `syz.4.12993'. [ 2757.875833][T12538] netlink: 132 bytes leftover after parsing attributes in process `syz.4.12997'. [ 2758.092909][T12551] netlink: 168 bytes leftover after parsing attributes in process `syz.4.12997'. [ 2760.607080][T12566] validate_nla: 12 callbacks suppressed [ 2760.607149][T12566] netlink: 'syz.4.13002': attribute type 2 has an invalid length. [ 2760.634597][T12566] netlink: 'syz.4.13002': attribute type 8 has an invalid length. [ 2760.661378][T12566] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13002'. [ 2760.696425][T12570] netlink: 'syz.4.13002': attribute type 2 has an invalid length. [ 2760.718513][T12570] netlink: 'syz.4.13002': attribute type 8 has an invalid length. [ 2760.739235][T12570] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13002'. [ 2760.751076][T12571] netlink: 'syz.4.13002': attribute type 10 has an invalid length. [ 2760.767349][T12567] netlink: 'syz.1.13003': attribute type 1 has an invalid length. [ 2760.776523][T12567] netlink: 16134 bytes leftover after parsing attributes in process `syz.1.13003'. [ 2760.800032][T12576] : port 1(ip6gretap0) entered blocking state [ 2760.807529][T12576] : port 1(ip6gretap0) entered disabled state [ 2760.818069][T12576] device ip6gretap0 entered promiscuous mode [ 2760.844591][T12569] device ip6gretap0 left promiscuous mode [ 2760.850941][T12574] netlink: 'syz.2.13005': attribute type 3 has an invalid length. [ 2760.859961][T12574] netlink: 199824 bytes leftover after parsing attributes in process `syz.2.13005'. [ 2760.881268][T12569] : port 1(ip6gretap0) entered disabled state [ 2760.976160][T12577] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13005'. [ 2761.273248][T12581] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13007'. [ 2761.949050][T12592] netlink: 'syz.2.13009': attribute type 39 has an invalid length. [ 2762.055058][T12579] netlink: 'syz.4.13006': attribute type 2 has an invalid length. [ 2762.082614][T12579] netlink: 'syz.4.13006': attribute type 8 has an invalid length. [ 2762.101241][T12579] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13006'. [ 2762.165353][T12594] netlink: 140 bytes leftover after parsing attributes in process `syz.1.13010'. [ 2762.530876][T12606] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13013'. [ 2763.084862][T12619] netdevsim netdevsim4: Direct firmware load for failed with error -2 [ 2763.104107][T12619] netdevsim netdevsim4: Falling back to sysfs fallback for: [ 2763.783102][T12628] netlink: 128 bytes leftover after parsing attributes in process `syz.1.13018'. [ 2763.853473][T12630] : port 1(ip6gretap0) entered blocking state [ 2763.882163][T12630] : port 1(ip6gretap0) entered disabled state [ 2763.909292][T12630] device ip6gretap0 entered promiscuous mode [ 2763.964147][T12634] device ip6gretap0 left promiscuous mode [ 2763.970400][T12634] : port 1(ip6gretap0) entered disabled state [ 2764.747593][T12656] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2765.843265][T12668] __nla_validate_parse: 4 callbacks suppressed [ 2765.843286][T12668] netlink: 140 bytes leftover after parsing attributes in process `syz.3.13026'. [ 2766.009897][T12669] validate_nla: 4 callbacks suppressed [ 2766.009939][T12669] netlink: 'syz.1.13027': attribute type 2 has an invalid length. [ 2766.074098][T12669] netlink: 'syz.1.13027': attribute type 8 has an invalid length. [ 2766.082280][T12669] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13027'. [ 2766.412055][T12684] netlink: 'syz.2.13032': attribute type 21 has an invalid length. [ 2766.441630][T12684] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13032'. [ 2766.484170][T12684] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13032'. [ 2766.670564][T12699] : port 1(ip6gretap0) entered blocking state [ 2766.693263][T12699] : port 1(ip6gretap0) entered disabled state [ 2766.700909][T12699] device ip6gretap0 entered promiscuous mode [ 2766.803759][T12691] device ip6gretap0 left promiscuous mode [ 2766.813035][T12691] : port 1(ip6gretap0) entered disabled state [ 2767.000366][T12704] netlink: 122896 bytes leftover after parsing attributes in process `syz.0.13037'. [ 2767.091441][T12704] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2767.132606][T12704] CPU: 1 PID: 12704 Comm: syz.0.13037 Not tainted syzkaller #0 [ 2767.140243][T12704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2767.150446][T12704] Call Trace: [ 2767.153774][T12704] [ 2767.156738][T12704] dump_stack_lvl+0x188/0x24e [ 2767.161462][T12704] ? show_regs_print_info+0x12/0x12 [ 2767.166697][T12704] ? load_image+0x410/0x410 [ 2767.171297][T12704] sysfs_warn_dup+0x8a/0xa0 [ 2767.175874][T12704] sysfs_do_create_link_sd+0xc0/0x110 [ 2767.181296][T12704] device_add+0x83b/0x1050 [ 2767.185956][T12704] wiphy_register+0x1d8b/0x2aa0 [ 2767.190886][T12704] ? cfg80211_event_work+0x40/0x40 [ 2767.196047][T12704] ? minstrel_ht_alloc+0x894/0xa20 [ 2767.201232][T12704] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2767.207364][T12704] ieee80211_register_hw+0x2d48/0x39f0 [ 2767.212898][T12704] ? ieee80211_register_hw+0xed1/0x39f0 [ 2767.218502][T12704] ? ieee80211_register_hw+0xed1/0x39f0 [ 2767.224132][T12704] ? ieee80211_tasklet_handler+0x20/0x20 [ 2767.229806][T12704] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2767.235750][T12704] ? __debug_object_init+0xed/0x440 [ 2767.240992][T12704] ? memset+0x1e/0x40 [ 2767.245004][T12704] ? __hrtimer_init+0x189/0x270 [ 2767.249998][T12704] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2767.255762][T12704] ? memcpy+0x3c/0x60 [ 2767.259795][T12704] hwsim_new_radio_nl+0xab7/0xc90 [ 2767.264883][T12704] genl_family_rcv_msg_doit+0x22f/0x350 [ 2767.270477][T12704] ? end_current_label_crit_section+0x170/0x170 [ 2767.276750][T12704] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2767.282690][T12704] ? bpf_lsm_capable+0x5/0x10 [ 2767.287422][T12704] ? security_capable+0x85/0xb0 [ 2767.292329][T12704] genl_rcv_msg+0x601/0x790 [ 2767.296897][T12704] ? genl_bind+0x360/0x360 [ 2767.301438][T12704] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2767.307825][T12704] netlink_rcv_skb+0x1ef/0x440 [ 2767.312624][T12704] ? genl_bind+0x360/0x360 [ 2767.317079][T12704] ? netlink_ack+0x1160/0x1160 [ 2767.321894][T12704] ? down_read+0x1a8/0x2d0 [ 2767.326351][T12704] genl_rcv+0x24/0x40 [ 2767.330370][T12704] netlink_unicast+0x7ad/0x920 [ 2767.335173][T12704] netlink_sendmsg+0x8ad/0xbd0 [ 2767.339979][T12704] ? netlink_getsockopt+0x550/0x550 [ 2767.345214][T12704] ? aa_sock_msg_perm+0x94/0x150 [ 2767.350190][T12704] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2767.355505][T12704] ? security_socket_sendmsg+0x7c/0xa0 [ 2767.360996][T12704] ? netlink_getsockopt+0x550/0x550 [ 2767.366238][T12704] ____sys_sendmsg+0x5ed/0x9a0 [ 2767.371045][T12704] ? __sys_sendmsg_sock+0x30/0x30 [ 2767.376097][T12704] ? __import_iovec+0x306/0x510 [ 2767.381074][T12704] ? import_iovec+0x6f/0xa0 [ 2767.385610][T12704] ___sys_sendmsg+0x2a2/0x360 [ 2767.390332][T12704] ? __sys_sendmsg+0x2a0/0x2a0 [ 2767.395177][T12704] __se_sys_sendmsg+0x1c3/0x2b0 [ 2767.400067][T12704] ? __x64_sys_sendmsg+0x80/0x80 [ 2767.405057][T12704] ? lockdep_hardirqs_on+0x94/0x140 [ 2767.410311][T12704] do_syscall_64+0x4c/0xa0 [ 2767.414843][T12704] ? clear_bhb_loop+0x60/0xb0 [ 2767.419678][T12704] ? clear_bhb_loop+0x60/0xb0 [ 2767.424420][T12704] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2767.430370][T12704] RIP: 0033:0x7f1055b9ce59 [ 2767.434819][T12704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2767.454470][T12704] RSP: 002b:00007f1056995028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2767.462923][T12704] RAX: ffffffffffffffda RBX: 00007f1055e16360 RCX: 00007f1055b9ce59 [ 2767.470948][T12704] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2767.478945][T12704] RBP: 00007f1055c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2767.486957][T12704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2767.494963][T12704] R13: 00007f1055e163f8 R14: 00007f1055e16360 R15: 00007ffc8707e698 [ 2767.502987][T12704] [ 2767.585384][T12706] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13039'. [ 2767.652444][T12709] netlink: 188 bytes leftover after parsing attributes in process `syz.3.13051'. [ 2767.682507][T12709] ksmbd: Unknown IPC event: 10, ignore. [ 2768.094422][T12716] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13053'. [ 2768.711197][T12722] can: request_module (can-proto-0) failed. [ 2769.286916][T12726] netlink: 'syz.0.13042': attribute type 39 has an invalid length. [ 2769.372681][T12732] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13055'. [ 2770.166693][T12751] netlink: 'syz.4.13047': attribute type 21 has an invalid length. [ 2770.175404][T12751] netlink: 128 bytes leftover after parsing attributes in process `syz.4.13047'. [ 2770.754070][T12770] : port 1(ip6gretap0) entered blocking state [ 2770.772969][T12770] : port 1(ip6gretap0) entered disabled state [ 2770.792970][T12770] device ip6gretap0 entered promiscuous mode [ 2770.851676][T12766] device ip6gretap0 left promiscuous mode [ 2770.859904][T12766] : port 1(ip6gretap0) entered disabled state [ 2770.926110][T12754] netlink: 'syz.3.13048': attribute type 2 has an invalid length. [ 2770.955497][T12754] netlink: 'syz.3.13048': attribute type 8 has an invalid length. [ 2771.005597][T12754] __nla_validate_parse: 2 callbacks suppressed [ 2771.005634][T12754] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13048'. [ 2771.073823][T12773] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2771.094606][T12773] CPU: 0 PID: 12773 Comm: syz.2.13054 Not tainted syzkaller #0 [ 2771.102253][T12773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2771.112379][T12773] Call Trace: [ 2771.115727][T12773] [ 2771.118711][T12773] dump_stack_lvl+0x188/0x24e [ 2771.123459][T12773] ? show_regs_print_info+0x12/0x12 [ 2771.128724][T12773] ? load_image+0x410/0x410 [ 2771.133309][T12773] sysfs_warn_dup+0x8a/0xa0 [ 2771.137877][T12773] sysfs_do_create_link_sd+0xc0/0x110 [ 2771.143321][T12773] device_add+0x83b/0x1050 [ 2771.147980][T12773] wiphy_register+0x1d8b/0x2aa0 [ 2771.152917][T12773] ? cfg80211_event_work+0x40/0x40 [ 2771.158094][T12773] ? minstrel_ht_alloc+0x894/0xa20 [ 2771.163270][T12773] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2771.169426][T12773] ieee80211_register_hw+0x2d48/0x39f0 [ 2771.174964][T12773] ? ieee80211_register_hw+0xed1/0x39f0 [ 2771.180564][T12773] ? ieee80211_register_hw+0xed1/0x39f0 [ 2771.186175][T12773] ? ieee80211_tasklet_handler+0x20/0x20 [ 2771.191867][T12773] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2771.197835][T12773] ? __debug_object_init+0xed/0x440 [ 2771.203105][T12773] ? memset+0x1e/0x40 [ 2771.207150][T12773] ? __hrtimer_init+0x189/0x270 [ 2771.212073][T12773] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2771.217863][T12773] ? memcpy+0x3c/0x60 [ 2771.221907][T12773] hwsim_new_radio_nl+0xab7/0xc90 [ 2771.227014][T12773] genl_family_rcv_msg_doit+0x22f/0x350 [ 2771.232633][T12773] ? end_current_label_crit_section+0x170/0x170 [ 2771.238961][T12773] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2771.245026][T12773] ? bpf_lsm_capable+0x5/0x10 [ 2771.249777][T12773] ? security_capable+0x85/0xb0 [ 2771.254696][T12773] genl_rcv_msg+0x601/0x790 [ 2771.259264][T12773] ? lock_chain_count+0x20/0x20 [ 2771.264193][T12773] ? genl_bind+0x360/0x360 [ 2771.268668][T12773] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2771.275078][T12773] netlink_rcv_skb+0x1ef/0x440 [ 2771.279899][T12773] ? genl_bind+0x360/0x360 [ 2771.284378][T12773] ? netlink_ack+0x1160/0x1160 [ 2771.289216][T12773] ? down_read+0x1a8/0x2d0 [ 2771.293696][T12773] genl_rcv+0x24/0x40 [ 2771.297738][T12773] netlink_unicast+0x7ad/0x920 [ 2771.302572][T12773] netlink_sendmsg+0x8ad/0xbd0 [ 2771.307414][T12773] ? netlink_getsockopt+0x550/0x550 [ 2771.312685][T12773] ? aa_sock_msg_perm+0x94/0x150 [ 2771.317708][T12773] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2771.323052][T12773] ? security_socket_sendmsg+0x7c/0xa0 [ 2771.328567][T12773] ? netlink_getsockopt+0x550/0x550 [ 2771.333834][T12773] ____sys_sendmsg+0x5ed/0x9a0 [ 2771.338676][T12773] ? __sys_sendmsg_sock+0x30/0x30 [ 2771.343757][T12773] ? __import_iovec+0x306/0x510 [ 2771.348681][T12773] ? import_iovec+0x6f/0xa0 [ 2771.353251][T12773] ___sys_sendmsg+0x2a2/0x360 [ 2771.357994][T12773] ? __sys_sendmsg+0x2a0/0x2a0 [ 2771.362880][T12773] __se_sys_sendmsg+0x1c3/0x2b0 [ 2771.367799][T12773] ? __x64_sys_sendmsg+0x80/0x80 [ 2771.372815][T12773] ? lockdep_hardirqs_on+0x94/0x140 [ 2771.378087][T12773] do_syscall_64+0x4c/0xa0 [ 2771.382565][T12773] ? clear_bhb_loop+0x60/0xb0 [ 2771.387344][T12773] ? clear_bhb_loop+0x60/0xb0 [ 2771.392087][T12773] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2771.398056][T12773] RIP: 0033:0x7fb312b9ce59 [ 2771.402531][T12773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2771.422286][T12773] RSP: 002b:00007fb310db4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2771.430770][T12773] RAX: ffffffffffffffda RBX: 00007fb312e16180 RCX: 00007fb312b9ce59 [ 2771.438805][T12773] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2771.446877][T12773] RBP: 00007fb312c32e6f R08: 0000000000000000 R09: 0000000000000000 [ 2771.454906][T12773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2771.462941][T12773] R13: 00007fb312e16218 R14: 00007fb312e16180 R15: 00007ffe54a06018 [ 2771.471085][T12773] [ 2772.009086][T12780] netlink: 'syz.1.13057': attribute type 39 has an invalid length. [ 2772.030663][T12791] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13060'. [ 2773.153338][T12804] netlink: 'syz.1.13061': attribute type 39 has an invalid length. [ 2773.561797][T12816] netlink: 'syz.4.13068': attribute type 2 has an invalid length. [ 2773.607826][T12816] netlink: 'syz.4.13068': attribute type 10 has an invalid length. [ 2774.094028][T12820] can: request_module (can-proto-0) failed. [ 2774.697446][T12834] netlink: 'syz.4.13071': attribute type 39 has an invalid length. [ 2774.716798][T12838] : port 1(ip6gretap0) entered blocking state [ 2774.733776][T12838] : port 1(ip6gretap0) entered disabled state [ 2774.756665][T12838] device ip6gretap0 entered promiscuous mode [ 2774.788512][T12839] netlink: 'syz.2.13069': attribute type 2 has an invalid length. [ 2774.817056][T12839] netlink: 'syz.2.13069': attribute type 8 has an invalid length. [ 2774.868831][T12839] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13069'. [ 2774.892606][T12840] device ip6gretap0 left promiscuous mode [ 2774.898583][T12840] : port 1(ip6gretap0) entered disabled state [ 2775.171345][T12844] netlink: 'syz.1.13083': attribute type 39 has an invalid length. [ 2775.410639][T12856] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13075'. [ 2775.440801][T12851] netlink: 122896 bytes leftover after parsing attributes in process `syz.3.13072'. [ 2775.566609][T12851] sysfs: cannot create duplicate filename '/class/ieee80211/!!!' [ 2775.646402][T12851] CPU: 1 PID: 12851 Comm: syz.3.13072 Not tainted syzkaller #0 [ 2775.654052][T12851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 2775.664161][T12851] Call Trace: [ 2775.667474][T12851] [ 2775.670442][T12851] dump_stack_lvl+0x188/0x24e [ 2775.675226][T12851] ? show_regs_print_info+0x12/0x12 [ 2775.680491][T12851] ? load_image+0x410/0x410 [ 2775.685083][T12851] sysfs_warn_dup+0x8a/0xa0 [ 2775.689662][T12851] sysfs_do_create_link_sd+0xc0/0x110 [ 2775.695113][T12851] device_add+0x83b/0x1050 [ 2775.699599][T12851] wiphy_register+0x1d8b/0x2aa0 [ 2775.704525][T12851] ? cfg80211_event_work+0x40/0x40 [ 2775.709690][T12851] ? minstrel_ht_alloc+0x894/0xa20 [ 2775.714850][T12851] ? ieee80211_init_rate_ctrl_alg+0x55e/0x5e0 [ 2775.721063][T12851] ieee80211_register_hw+0x2d48/0x39f0 [ 2775.726591][T12851] ? ieee80211_register_hw+0xed1/0x39f0 [ 2775.732188][T12851] ? ieee80211_register_hw+0xed1/0x39f0 [ 2775.737792][T12851] ? ieee80211_tasklet_handler+0x20/0x20 [ 2775.743477][T12851] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 2775.749455][T12851] ? __debug_object_init+0xed/0x440 [ 2775.754705][T12851] ? memset+0x1e/0x40 [ 2775.758730][T12851] ? __hrtimer_init+0x189/0x270 [ 2775.763631][T12851] mac80211_hwsim_new_radio+0x2927/0x4cd0 [ 2775.769409][T12851] ? memcpy+0x3c/0x60 [ 2775.773447][T12851] hwsim_new_radio_nl+0xab7/0xc90 [ 2775.778535][T12851] genl_family_rcv_msg_doit+0x22f/0x350 [ 2775.784148][T12851] ? end_current_label_crit_section+0x170/0x170 [ 2775.790451][T12851] ? genl_family_rcv_msg_dumpit+0x3c0/0x3c0 [ 2775.796412][T12851] ? bpf_lsm_capable+0x5/0x10 [ 2775.801186][T12851] ? security_capable+0x85/0xb0 [ 2775.806107][T12851] genl_rcv_msg+0x601/0x790 [ 2775.810676][T12851] ? lock_chain_count+0x20/0x20 [ 2775.815603][T12851] ? genl_bind+0x360/0x360 [ 2775.820083][T12851] ? hwsim_tx_info_frame_received_nl+0xe30/0xe30 [ 2775.826485][T12851] netlink_rcv_skb+0x1ef/0x440 [ 2775.831314][T12851] ? genl_bind+0x360/0x360 [ 2775.835790][T12851] ? netlink_ack+0x1160/0x1160 [ 2775.840616][T12851] ? down_read+0x1a8/0x2d0 [ 2775.845084][T12851] genl_rcv+0x24/0x40 [ 2775.849124][T12851] netlink_unicast+0x7ad/0x920 [ 2775.853946][T12851] netlink_sendmsg+0x8ad/0xbd0 [ 2775.858769][T12851] ? netlink_getsockopt+0x550/0x550 [ 2775.864029][T12851] ? aa_sock_msg_perm+0x94/0x150 [ 2775.869017][T12851] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 2775.874383][T12851] ? security_socket_sendmsg+0x7c/0xa0 [ 2775.879890][T12851] ? netlink_getsockopt+0x550/0x550 [ 2775.885140][T12851] ____sys_sendmsg+0x5ed/0x9a0 [ 2775.889963][T12851] ? __sys_sendmsg_sock+0x30/0x30 [ 2775.895034][T12851] ? __import_iovec+0x306/0x510 [ 2775.899946][T12851] ? import_iovec+0x6f/0xa0 [ 2775.904501][T12851] ___sys_sendmsg+0x2a2/0x360 [ 2775.909242][T12851] ? __sys_sendmsg+0x2a0/0x2a0 [ 2775.914108][T12851] __se_sys_sendmsg+0x1c3/0x2b0 [ 2775.919029][T12851] ? perf_trace_preemptirq_template+0x268/0x320 [ 2775.925366][T12851] ? __x64_sys_sendmsg+0x80/0x80 [ 2775.930381][T12851] ? lockdep_hardirqs_on+0x94/0x140 [ 2775.935637][T12851] do_syscall_64+0x4c/0xa0 [ 2775.940097][T12851] ? clear_bhb_loop+0x60/0xb0 [ 2775.944823][T12851] ? clear_bhb_loop+0x60/0xb0 [ 2775.949564][T12851] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2775.955523][T12851] RIP: 0033:0x7f85c859ce59 [ 2775.959999][T12851] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2775.979664][T12851] RSP: 002b:00007f85c94a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2775.988264][T12851] RAX: ffffffffffffffda RBX: 00007f85c8816090 RCX: 00007f85c859ce59 [ 2775.996298][T12851] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000b [ 2776.004325][T12851] RBP: 00007f85c8632e6f R08: 0000000000000000 R09: 0000000000000000 [ 2776.012346][T12851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2776.020377][T12851] R13: 00007f85c8816128 R14: 00007f85c8816090 R15: 00007fffb78d5f88 [ 2776.028429][T12851] [ 2776.508453][T12868] netlink: 'syz.1.13079': attribute type 39 has an invalid length. [ 2777.519830][T12878] netlink: 'syz.3.13081': attribute type 39 has an invalid length. [ 2778.441221][T12892] netlink: 134056 bytes leftover after parsing attributes in process `syz.4.13088'. [ 2778.507014][T12889] netlink: 'syz.3.13087': attribute type 39 has an invalid length. [ 2778.887178][T12898] netlink: 'syz.2.13086': attribute type 10 has an invalid length. [ 2778.916025][T12898] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13086'. [ 2778.957819][T12901] netlink: 'syz.2.13086': attribute type 10 has an invalid length. [ 2779.034511][T12893] netlink: 'syz.0.13085': attribute type 2 has an invalid length. [ 2779.052928][T12893] netlink: 'syz.0.13085': attribute type 8 has an invalid length. [ 2779.102746][T12893] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13085'. [ 2779.255276][T12908] netlink: 'syz.1.13100': attribute type 39 has an invalid length. [ 2779.327977][T12910] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13090'. [ 2779.957123][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2779.964117][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2780.075817][T12915] can: request_module (can-proto-0) failed. [ 2780.413466][T12929] netlink: 'syz.2.13091': attribute type 2 has an invalid length. [ 2780.464360][T12929] netlink: 'syz.2.13091': attribute type 8 has an invalid length. [ 2780.497478][T12929] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13091'. [ 2780.635344][T12933] netlink: 'syz.1.13097': attribute type 39 has an invalid length. [ 2780.951801][T12941] device wlan1 entered promiscuous mode [ 2781.014171][T12944] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13101'. [ 2781.328331][T12952] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13103'. [ 2784.244897][T12963] netlink: 'syz.3.13105': attribute type 39 has an invalid length. [ 2784.590375][T12968] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13107'. [ 2784.829158][T12983] : port 1(ip6gretap0) entered blocking state [ 2784.892740][T12983] : port 1(ip6gretap0) entered disabled state [ 2784.900182][T12983] device ip6gretap0 entered promiscuous mode [ 2785.043074][T12970] netlink: 'syz.4.13106': attribute type 2 has an invalid length. [ 2785.051323][T12970] netlink: 'syz.4.13106': attribute type 8 has an invalid length. [ 2785.098914][T12970] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13106'. [ 2786.012809][T12992] netlink: 'syz.2.13113': attribute type 21 has an invalid length. [ 2786.021084][T12992] netlink: 128 bytes leftover after parsing attributes in process `syz.2.13113'. [ 2786.083166][T12992] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13113'. [ 2786.124928][T12994] netlink: 'syz.0.13114': attribute type 39 has an invalid length. [ 2786.143644][T13000] netlink: 'syz.4.13115': attribute type 21 has an invalid length. [ 2786.512275][T13008] netlink: 'syz.2.13118': attribute type 39 has an invalid length. [ 2786.587369][T13006] netlink: 'syz.3.13117': attribute type 2 has an invalid length. [ 2786.623568][T13006] netlink: 'syz.3.13117': attribute type 8 has an invalid length. [ 2786.646290][T13006] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13117'. [ 2786.767958][T13013] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13119'. [ 2787.026238][T13018] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13121'. [ 2788.234663][T13033] netlink: 'syz.4.13122': attribute type 1 has an invalid length. [ 2788.317014][T13033] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.13122'. [ 2790.125180][T13051] validate_nla: 2 callbacks suppressed [ 2790.125201][T13051] netlink: 'syz.2.13130': attribute type 39 has an invalid length. [ 2790.233811][T13049] netlink: 'syz.3.13129': attribute type 10 has an invalid length. [ 2790.277725][T13049] netlink: 2 bytes leftover after parsing attributes in process `syz.3.13129'. [ 2790.327170][T13055] netlink: 65047 bytes leftover after parsing attributes in process `syz.3.13129'. [ 2793.666445][T13077] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13136'. [ 2794.031824][T13083] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.13138'. [ 2794.103342][T13084] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2794.133778][T13084] dvmrp1: linktype set to 768 [ 2794.930727][T13091] netlink: 'syz.3.13139': attribute type 39 has an invalid length. [ 2797.246525][T13099] netlink: 'syz.1.13142': attribute type 10 has an invalid length. [ 2797.301900][T13099] netlink: 55 bytes leftover after parsing attributes in process `syz.1.13142'. [ 2797.333519][T13105] netlink: 'syz.4.13145': attribute type 1 has an invalid length. [ 2797.341964][T13105] netlink: 16134 bytes leftover after parsing attributes in process `syz.4.13145'. [ 2797.819071][T13113] netlink: 188 bytes leftover after parsing attributes in process `syz.0.13148'. [ 2797.910182][T13113] ksmbd: Unknown IPC event: 10, ignore. [ 2798.061633][T13118] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13150'. [ 2798.862685][T13134] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13153'. [ 2798.949890][T13135] netlink: 'syz.0.13151': attribute type 21 has an invalid length. [ 2798.990283][T13135] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13151'. [ 2799.038809][T13135] netlink: 3 bytes leftover after parsing attributes in process `syz.0.13151'. [ 2799.626618][T13144] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13167'. [ 2800.083711][T13164] netlink: 'syz.0.13157': attribute type 21 has an invalid length. [ 2800.126238][T13164] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2800.466775][T13175] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13163'. [ 2800.723453][T13178] netlink: 'syz.0.13168': attribute type 39 has an invalid length. [ 2800.758704][T13182] netlink: 'syz.3.13169': attribute type 1 has an invalid length. [ 2800.779484][T13182] netlink: 16134 bytes leftover after parsing attributes in process `syz.3.13169'. [ 2801.294238][T13194] netlink: 'syz.4.13173': attribute type 39 has an invalid length. [ 2802.675330][T13217] __nla_validate_parse: 2 callbacks suppressed [ 2802.675370][T13217] netlink: 188 bytes leftover after parsing attributes in process `syz.4.13180'. [ 2802.765078][T13217] ksmbd: Unknown IPC event: 10, ignore. [ 2802.996998][T13224] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13182'. [ 2803.356916][T13234] netlink: 'syz.2.13185': attribute type 39 has an invalid length. [ 2803.666950][T13238] netlink: 'syz.3.13186': attribute type 39 has an invalid length. [ 2803.840040][T13244] netlink: 'syz.2.13188': attribute type 1 has an invalid length. [ 2803.862771][T13244] netlink: 16134 bytes leftover after parsing attributes in process `syz.2.13188'. [ 2804.044515][T13247] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13191'. [ 2805.223329][T13272] netlink: 'syz.0.13199': attribute type 39 has an invalid length. [ 2805.317576][T13275] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13210'. [ 2805.369257][T13277] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13200'. [ 2805.568751][T13280] netlink: 'syz.1.13201': attribute type 39 has an invalid length. [ 2805.589532][T13282] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13202'. [ 2807.029314][T13308] netlink: 'syz.3.13213': attribute type 39 has an invalid length. [ 2807.246096][T13316] netlink: 'syz.0.13215': attribute type 3 has an invalid length. [ 2807.287812][T13319] netlink: 'syz.1.13216': attribute type 39 has an invalid length. [ 2807.294389][T13316] netlink: 199824 bytes leftover after parsing attributes in process `syz.0.13215'. [ 2807.431172][T13323] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13218'. [ 2807.610533][T13328] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13221'. [ 2809.302886][T13351] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13225'. [ 2809.327941][T13353] netlink: 'syz.4.13227': attribute type 10 has an invalid length. [ 2809.358907][T13353] netlink: 2 bytes leftover after parsing attributes in process `syz.4.13227'. [ 2809.394602][T13364] netlink: 'syz.3.13229': attribute type 39 has an invalid length. [ 2809.422932][T13363] netlink: 'syz.0.13230': attribute type 39 has an invalid length. [ 2809.770972][T13374] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13236'. [ 2809.976511][T13382] netlink: 'syz.0.13239': attribute type 17 has an invalid length. [ 2811.134198][T13402] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13243'. [ 2811.163512][T13403] netlink: 'syz.4.13244': attribute type 39 has an invalid length. [ 2811.200539][T13406] netlink: 'syz.3.13245': attribute type 39 has an invalid length. [ 2811.637870][T13421] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13250'. [ 2811.695223][T13423] netlink: 'syz.4.13252': attribute type 11 has an invalid length. [ 2812.090765][T13435] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13255'. [ 2813.243939][T13449] netlink: 'syz.1.13259': attribute type 39 has an invalid length. [ 2813.276038][T13451] netlink: 'syz.4.13260': attribute type 39 has an invalid length. [ 2813.555653][T13463] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13265'. [ 2815.073572][T13474] device syzkaller0 entered promiscuous mode [ 2815.089467][T13480] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13270'. [ 2818.001780][T13487] netlink: 'syz.0.13272': attribute type 39 has an invalid length. [ 2818.291744][T13512] netlink: 'syz.2.13279': attribute type 39 has an invalid length. [ 2818.562318][T13518] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13283'. [ 2818.795678][T13525] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13286'. [ 2818.929702][T13523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13285'. [ 2819.072092][T13528] netlink: 'syz.1.13287': attribute type 39 has an invalid length. [ 2819.184761][T13522] netlink: 'syz.3.13284': attribute type 2 has an invalid length. [ 2819.237284][T13522] netlink: 'syz.3.13284': attribute type 8 has an invalid length. [ 2819.296758][T13522] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13284'. [ 2819.475765][T13537] netlink: 'syz.2.13288': attribute type 28 has an invalid length. [ 2819.498832][T13539] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.13290'. [ 2819.575337][T13539] netlink: 'syz.0.13290': attribute type 20 has an invalid length. [ 2819.616890][T13539] IPv6: NLM_F_CREATE should be specified when creating new route [ 2819.653167][T13539] netlink: 1 bytes leftover after parsing attributes in process `syz.0.13290'. [ 2819.769534][T13539] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13290'. [ 2819.794986][T13545] netlink: 'syz.2.13288': attribute type 10 has an invalid length. [ 2819.917652][T13549] netlink: 'syz.0.13290': attribute type 2 has an invalid length. [ 2819.952631][T13549] netlink: 'syz.0.13290': attribute type 8 has an invalid length. [ 2819.972059][T13549] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13290'. [ 2820.250901][T13547] netlink: 132 bytes leftover after parsing attributes in process `syz.4.13292'. [ 2820.952276][T13571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13302'. [ 2821.050271][T13575] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13303'. [ 2821.708410][T13583] Q6`Ҙ: renamed from lo [ 2823.112421][T13616] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13316'. [ 2823.347196][T13622] netlink: 152 bytes leftover after parsing attributes in process `syz.1.13317'. [ 2823.653156][T13624] delete_channel: no stack [ 2823.895038][T13632] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13320'. [ 2824.408607][T13646] validate_nla: 6 callbacks suppressed [ 2824.408630][T13646] netlink: 'syz.1.13325': attribute type 39 has an invalid length. [ 2824.491163][T13647] netlink: 'syz.2.13326': attribute type 39 has an invalid length. [ 2824.840070][T13655] netlink: 'syz.0.13329': attribute type 10 has an invalid length. [ 2825.418167][T13664] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13333'. [ 2826.157454][T13679] netlink: 'syz.3.13337': attribute type 39 has an invalid length. [ 2826.407275][T13683] netlink: 'syz.2.13338': attribute type 39 has an invalid length. [ 2826.839077][T13692] netlink: 'syz.3.13341': attribute type 10 has an invalid length. [ 2826.974914][T13696] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.13341'. [ 2827.151922][T13698] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13343'. [ 2827.267256][T13700] device wlan1 entered promiscuous mode [ 2827.917993][T13713] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13350'. [ 2828.127406][T13719] netlink: 'syz.3.13352': attribute type 39 has an invalid length. [ 2828.294556][T13721] netlink: 'syz.2.13353': attribute type 39 has an invalid length. [ 2829.495098][T13751] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13364'. [ 2829.696737][T13755] netlink: 'syz.4.13367': attribute type 39 has an invalid length. [ 2829.953016][T13762] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13370'. [ 2830.042006][T13761] netlink: 'syz.3.13368': attribute type 39 has an invalid length. [ 2831.405398][T13791] netlink: 'syz.2.13381': attribute type 39 has an invalid length. [ 2831.587270][T13800] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13385'. [ 2831.809105][T13808] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13388'. [ 2832.024685][T13811] netlink: 'syz.4.13390': attribute type 39 has an invalid length. [ 2833.038168][T13842] netlink: 'syz.1.13399': attribute type 39 has an invalid length. [ 2833.222282][T13847] netlink: 'syz.2.13403': attribute type 39 has an invalid length. [ 2833.468858][T13855] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13406'. [ 2833.628469][T13859] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13409'. [ 2834.671860][T13873] netlink: 'syz.2.13415': attribute type 39 has an invalid length. [ 2835.551821][T13882] netlink: 'syz.1.13419': attribute type 39 has an invalid length. [ 2835.750492][T13900] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13426'. [ 2835.889880][T13902] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13427'. [ 2836.023323][T13908] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13429'. [ 2836.463678][T13912] netlink: 'syz.2.13431': attribute type 39 has an invalid length. [ 2837.148128][T13930] netlink: 'syz.1.13436': attribute type 39 has an invalid length. [ 2838.008219][T13949] netlink: 'syz.4.13445': attribute type 39 has an invalid length. [ 2838.089932][T13953] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13448'. [ 2838.172027][T13957] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13449'. [ 2838.764120][T13966] netlink: 'syz.4.13452': attribute type 39 has an invalid length. [ 2839.510254][T13980] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.13457'. [ 2839.985449][T13996] netlink: 'syz.4.13462': attribute type 39 has an invalid length. [ 2840.051428][T13998] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13465'. [ 2840.246467][T14003] netlink: 'syz.2.13467': attribute type 39 has an invalid length. [ 2840.457169][T14009] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13470'. [ 2841.000408][T14023] netlink: 'syz.1.13476': attribute type 2 has an invalid length. [ 2841.052510][T14023] netlink: 164 bytes leftover after parsing attributes in process `syz.1.13476'. [ 2841.088597][T14026] netlink: 'syz.0.13477': attribute type 39 has an invalid length. [ 2841.414211][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2841.420876][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2841.523709][T14031] netlink: 'syz.1.13479': attribute type 39 has an invalid length. [ 2841.736917][T14043] netlink: 161700 bytes leftover after parsing attributes in process `syz.4.13485'. [ 2841.772258][T14040] netlink: 'syz.0.13482': attribute type 39 has an invalid length. [ 2841.811578][T14043] openvswitch: netlink: Key type 8194 is out of range max 32 [ 2842.075571][T14052] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13489'. [ 2842.180331][T14059] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13492'. [ 2843.239646][T14076] netlink: 'syz.3.13498': attribute type 39 has an invalid length. [ 2843.337876][T14080] netlink: 'syz.2.13500': attribute type 39 has an invalid length. [ 2844.560694][T14110] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13511'. [ 2844.583186][T14115] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13513'. [ 2844.714941][T14119] netlink: 'syz.0.13514': attribute type 10 has an invalid length. [ 2844.755451][T14119] netlink: 2 bytes leftover after parsing attributes in process `syz.0.13514'. [ 2844.814998][T14118] netlink: 'syz.4.13515': attribute type 39 has an invalid length. [ 2844.870091][T14123] netlink: 'syz.2.13516': attribute type 10 has an invalid length. [ 2845.144456][T14127] netlink: 'syz.0.13518': attribute type 39 has an invalid length. [ 2845.597174][T14145] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13527'. [ 2846.385149][T14163] validate_nla: 2 callbacks suppressed [ 2846.385171][T14163] netlink: 'syz.4.13532': attribute type 39 has an invalid length. [ 2846.490346][T14162] netlink: 'syz.1.13534': attribute type 39 has an invalid length. [ 2846.643851][T14167] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.13536'. [ 2846.679687][T14167] bridge_slave_1: default FDB implementation only supports local addresses [ 2846.771519][T14171] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13538'. [ 2847.757145][T14192] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13547'. [ 2848.103603][T14199] netlink: 'syz.0.13549': attribute type 39 has an invalid length. [ 2848.186865][T14202] netlink: 'syz.4.13550': attribute type 39 has an invalid length. [ 2849.054501][T14225] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13560'. [ 2849.326441][T14232] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13562'. [ 2849.957050][T14242] netlink: 'syz.1.13565': attribute type 39 has an invalid length. [ 2850.068975][T14241] netlink: 'syz.0.13566': attribute type 39 has an invalid length. [ 2850.116395][T14244] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13568'. [ 2850.352620][T14250] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13570'. [ 2851.096162][T14266] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13578'. [ 2851.284020][T14269] netlink: 'syz.0.13579': attribute type 39 has an invalid length. [ 2851.452963][T14273] netlink: 'syz.4.13580': attribute type 39 has an invalid length. [ 2852.064214][T14292] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13585'. [ 2852.485175][T14303] netlink: 'syz.3.13593': attribute type 39 has an invalid length. [ 2852.692653][T14312] netlink: 'syz.2.13595': attribute type 39 has an invalid length. [ 2852.730013][T14314] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13598'. [ 2852.884343][T14319] netlink: 'syz.3.13600': attribute type 39 has an invalid length. [ 2854.131889][T14337] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13605'. [ 2854.143731][T14341] netlink: 'syz.3.13609': attribute type 10 has an invalid length. [ 2854.316338][T14350] netlink: 'syz.3.13611': attribute type 39 has an invalid length. [ 2854.378863][T14352] netlink: 'syz.2.13612': attribute type 39 has an invalid length. [ 2854.604998][T14360] netlink: 'syz.3.13616': attribute type 10 has an invalid length. [ 2854.890078][T14366] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13619'. [ 2855.232996][T14377] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13625'. [ 2855.510971][T14384] netlink: 'syz.4.13627': attribute type 39 has an invalid length. [ 2855.741806][T14387] netlink: 'syz.0.13628': attribute type 39 has an invalid length. [ 2856.454680][T14408] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13637'. [ 2856.569696][T14413] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13640'. [ 2856.684265][T14416] validate_nla: 1 callbacks suppressed [ 2856.684308][T14416] netlink: 'syz.2.13641': attribute type 39 has an invalid length. [ 2856.763024][T14418] netlink: 'syz.4.13642': attribute type 39 has an invalid length. [ 2856.889406][T14422] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13644'. [ 2857.901314][T14442] netlink: 'syz.4.13651': attribute type 10 has an invalid length. [ 2857.921262][T14442] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13651'. [ 2858.319015][T14453] netlink: 'syz.4.13656': attribute type 39 has an invalid length. [ 2858.447158][T14456] netlink: 'syz.2.13657': attribute type 39 has an invalid length. [ 2858.489636][T14461] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13660'. [ 2858.513023][T14459] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13659'. [ 2859.530536][T14491] netlink: 152 bytes leftover after parsing attributes in process `syz.2.13671'. [ 2859.690951][T14493] netlink: 'syz.0.13672': attribute type 39 has an invalid length. [ 2859.715206][T14495] netlink: 'syz.1.13673': attribute type 39 has an invalid length. [ 2859.893355][T14501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13676'. [ 2860.098114][T14507] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13680'. [ 2860.178645][T14514] netlink: 'syz.3.13681': attribute type 10 has an invalid length. [ 2861.027569][T14526] netlink: 'syz.3.13687': attribute type 39 has an invalid length. [ 2861.325959][T14532] netlink: 'syz.0.13690': attribute type 39 has an invalid length. [ 2861.610303][T14543] IPv6: Can't replace route, no match found [ 2861.993446][T14551] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13699'. [ 2862.096661][T14555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13701'. [ 2862.321745][T14563] netlink: 'syz.4.13704': attribute type 29 has an invalid length. [ 2862.370331][T14561] netlink: 'syz.0.13703': attribute type 39 has an invalid length. [ 2862.390269][T14563] netlink: 'syz.4.13704': attribute type 29 has an invalid length. [ 2862.413665][T14564] netlink: 'syz.4.13704': attribute type 29 has an invalid length. [ 2862.717481][T14569] netlink: 'syz.3.13706': attribute type 39 has an invalid length. [ 2863.808288][T14594] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13717'. [ 2864.151106][T14600] netlink: 'syz.0.13718': attribute type 39 has an invalid length. [ 2864.534744][T14608] netlink: 'syz.3.13722': attribute type 39 has an invalid length. [ 2864.926328][T14612] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13724'. [ 2866.048316][T14635] netlink: 'syz.0.13733': attribute type 39 has an invalid length. [ 2866.120491][T14640] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13735'. [ 2866.150564][T14642] netlink: 'syz.1.13736': attribute type 39 has an invalid length. [ 2866.831164][T14657] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13744'. [ 2867.341978][T14671] netlink: 'syz.3.13749': attribute type 39 has an invalid length. [ 2867.716901][T14672] netlink: 'syz.0.13750': attribute type 39 has an invalid length. [ 2868.286888][T14696] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13758'. [ 2868.412135][T14702] netlink: 'syz.3.13762': attribute type 39 has an invalid length. [ 2868.861730][T14711] netlink: 'syz.4.13765': attribute type 39 has an invalid length. [ 2868.919202][T14714] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13766'. [ 2869.797777][T14724] netlink: 'syz.2.13769': attribute type 21 has an invalid length. [ 2870.359883][T14737] netlink: 'syz.0.13776': attribute type 39 has an invalid length. [ 2870.693555][T14745] netlink: 'syz.4.13778': attribute type 39 has an invalid length. [ 2870.751039][T14747] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13780'. [ 2870.822035][T14754] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13782'. [ 2872.835938][T14779] netlink: 'syz.4.13792': attribute type 39 has an invalid length. [ 2873.030642][T14785] netlink: 'syz.0.13795': attribute type 39 has an invalid length. [ 2873.209994][T14793] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13799'. [ 2873.296109][T14796] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13800'. [ 2873.708264][T14810] netlink: 'syz.2.13805': attribute type 10 has an invalid length. [ 2873.799698][T14813] netlink: 'syz.3.13806': attribute type 2 has an invalid length. [ 2873.808236][T14813] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13806'. [ 2874.485508][T14826] netlink: 'syz.2.13809': attribute type 39 has an invalid length. [ 2874.498768][T14835] netlink: 'syz.0.13812': attribute type 39 has an invalid length. [ 2874.749052][T14844] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13818'. [ 2875.165059][T14852] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13822'. [ 2875.837838][T14870] netlink: 'syz.4.13828': attribute type 39 has an invalid length. [ 2875.874973][T14867] netlink: 'syz.3.13827': attribute type 39 has an invalid length. [ 2877.023298][T14894] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13837'. [ 2877.256219][T14904] IPv6: NLM_F_CREATE should be specified when creating new route [ 2877.284919][T14904] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13841'. [ 2877.426957][T14907] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13843'. [ 2877.486654][T14909] netlink: 'syz.0.13844': attribute type 39 has an invalid length. [ 2877.580685][T14911] netlink: 'syz.3.13845': attribute type 39 has an invalid length. [ 2878.188517][T14931] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13853'. [ 2878.697069][T14941] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.13857'. [ 2878.833160][T14945] netlink: 'syz.2.13859': attribute type 39 has an invalid length. [ 2878.862814][T14944] netlink: 'syz.3.13858': attribute type 39 has an invalid length. [ 2879.280724][T14961] netlink: 'syz.3.13865': attribute type 10 has an invalid length. [ 2879.303076][T14961] netlink: 152 bytes leftover after parsing attributes in process `syz.3.13865'. [ 2879.416970][T14963] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13867'. [ 2880.257312][T14971] netlink: 'syz.3.13870': attribute type 10 has an invalid length. [ 2880.293235][T14978] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13872'. [ 2880.420602][T14982] netlink: 'syz.3.13873': attribute type 39 has an invalid length. [ 2880.515332][T14984] netlink: 'syz.1.13874': attribute type 39 has an invalid length. [ 2880.587183][T14991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13876'. [ 2880.613181][T14991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13876'. [ 2880.627724][T14991] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13876'. [ 2881.071041][T15006] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13884'. [ 2881.358558][T15015] netlink: 14 bytes leftover after parsing attributes in process `syz.4.13888'. [ 2881.591725][T15019] netlink: 'syz.3.13889': attribute type 39 has an invalid length. [ 2882.084985][T15025] netlink: 'syz.3.13890': attribute type 39 has an invalid length. [ 2882.541966][T15038] netlink: 156 bytes leftover after parsing attributes in process `syz.2.13897'. [ 2882.816570][T15044] netlink: 'syz.2.13900': attribute type 39 has an invalid length. [ 2883.281386][T15061] netlink: 'syz.2.13907': attribute type 39 has an invalid length. [ 2884.019200][T15086] __nla_validate_parse: 2 callbacks suppressed [ 2884.019260][T15086] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13919'. [ 2884.478266][T15093] validate_nla: 1 callbacks suppressed [ 2884.478289][T15093] netlink: 'syz.0.13920': attribute type 39 has an invalid length. [ 2885.083996][T15114] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13927'. [ 2885.259338][T15120] netlink: 'syz.2.13930': attribute type 15 has an invalid length. [ 2885.307115][T15120] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13930'. [ 2885.583017][T15125] netlink: 'syz.3.13931': attribute type 39 has an invalid length. [ 2886.011807][T15129] netlink: 'syz.4.13934': attribute type 39 has an invalid length. [ 2886.790378][T15144] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13939'. [ 2889.227613][T15163] netlink: 132 bytes leftover after parsing attributes in process `syz.1.13946'. [ 2889.304020][T15161] netlink: 'syz.3.13945': attribute type 39 has an invalid length. [ 2889.397497][T15166] netlink: 14 bytes leftover after parsing attributes in process `syz.0.13948'. [ 2889.737770][T15176] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13952'. [ 2889.998404][T15184] netlink: 'syz.2.13954': attribute type 39 has an invalid length. [ 2890.627680][T15202] netlink: 'syz.3.13962': attribute type 39 has an invalid length. [ 2891.582191][T15214] netlink: 14 bytes leftover after parsing attributes in process `syz.1.13967'. [ 2891.863529][T15220] netlink: 'syz.3.13969': attribute type 39 has an invalid length. [ 2892.147352][T15227] netlink: 14 bytes leftover after parsing attributes in process `syz.2.13972'. [ 2892.197899][T15229] netlink: 'syz.3.13973': attribute type 10 has an invalid length. [ 2892.221808][T15229] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13973'. [ 2892.343998][T15236] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13975'. [ 2892.368212][T15235] netlink: 'syz.4.13974': attribute type 39 has an invalid length. [ 2892.392743][T15236] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13975'. [ 2892.434420][T15233] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13975'. [ 2892.475059][T15239] netlink: 4083 bytes leftover after parsing attributes in process `syz.0.13975'. [ 2893.255950][T15259] netlink: 'syz.0.13984': attribute type 39 has an invalid length. [ 2893.635025][T15269] netlink: 'syz.0.13989': attribute type 39 has an invalid length. [ 2893.686895][T15273] netlink: 'syz.1.13991': attribute type 3 has an invalid length. [ 2894.555858][T15292] netlink: 'syz.4.13999': attribute type 39 has an invalid length. [ 2894.580542][T15298] netlink: 'syz.1.14003': attribute type 39 has an invalid length. [ 2894.609839][T15303] __nla_validate_parse: 4 callbacks suppressed [ 2894.609858][T15303] netlink: 4083 bytes leftover after parsing attributes in process `syz.3.14001'. [ 2894.933866][T15313] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14008'. [ 2895.144894][T15318] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14011'. [ 2895.745967][T15332] netlink: 'syz.4.14015': attribute type 39 has an invalid length. [ 2895.895667][T15334] netlink: 'syz.1.14016': attribute type 39 has an invalid length. [ 2896.651236][T15353] netlink: 'syz.0.14032': attribute type 39 has an invalid length. [ 2896.898117][T15361] netlink: 'syz.0.14036': attribute type 39 has an invalid length. [ 2897.007395][T15365] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14027'. [ 2897.160817][T15373] netlink: 156 bytes leftover after parsing attributes in process `syz.3.14029'. [ 2897.265035][T15375] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14031'. [ 2897.613035][T15380] netlink: 'syz.3.14033': attribute type 21 has an invalid length. [ 2897.649253][T15380] netlink: 128 bytes leftover after parsing attributes in process `syz.3.14033'. [ 2897.691692][T15380] netlink: 3 bytes leftover after parsing attributes in process `syz.3.14033'. [ 2898.570928][T15401] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14044'. [ 2898.586670][T15399] netlink: 'syz.1.14043': attribute type 39 has an invalid length. [ 2898.968396][T15408] netlink: 'syz.0.14048': attribute type 2 has an invalid length. [ 2899.007753][T15408] netlink: 'syz.0.14048': attribute type 10 has an invalid length. [ 2899.140559][T15417] netlink: 156 bytes leftover after parsing attributes in process `syz.4.14049'. [ 2899.597555][T15427] netlink: 'syz.0.14053': attribute type 21 has an invalid length. [ 2899.737560][T15427] __nla_validate_parse: 2 callbacks suppressed [ 2899.737581][T15427] netlink: 128 bytes leftover after parsing attributes in process `syz.0.14053'. [ 2899.762887][T15427] netlink: 3 bytes leftover after parsing attributes in process `syz.0.14053'. [ 2900.418203][T15443] netlink: 'syz.1.14058': attribute type 39 has an invalid length. [ 2900.932012][T15459] validate_nla: 1 callbacks suppressed [ 2900.932055][T15459] netlink: 'syz.0.14064': attribute type 39 has an invalid length. [ 2901.500368][T15473] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14070'. [ 2901.803417][T15464] netlink: 'syz.4.14068': attribute type 2 has an invalid length. [ 2901.834014][T15464] netlink: 'syz.4.14068': attribute type 8 has an invalid length. [ 2901.864062][T15464] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14068'. [ 2902.704576][T15489] netlink: 'syz.1.14076': attribute type 21 has an invalid length. [ 2902.837855][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2902.844410][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2903.099359][T15495] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14079'. [ 2903.188967][T15501] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14078'. [ 2906.201258][T15518] netlink: 'syz.1.14083': attribute type 1 has an invalid length. [ 2906.302643][T15518] netlink: 127868 bytes leftover after parsing attributes in process `syz.1.14083'. [ 2906.353714][T15519] netlink: 'syz.1.14083': attribute type 29 has an invalid length. [ 2906.433197][T15519] netlink: 'syz.1.14083': attribute type 29 has an invalid length. [ 2906.645040][T15523] netlink: 'syz.0.14086': attribute type 39 has an invalid length. [ 2906.686485][T15527] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14085'. [ 2907.055615][T15531] netlink: 'syz.3.14089': attribute type 39 has an invalid length. [ 2907.141163][T15533] netlink: 'syz.0.14100': attribute type 39 has an invalid length. [ 2907.313280][T15539] netlink: 'syz.1.14090': attribute type 21 has an invalid length. [ 2907.373402][T15539] netlink: 128 bytes leftover after parsing attributes in process `syz.1.14090'. [ 2907.406027][T15539] netlink: 3 bytes leftover after parsing attributes in process `syz.1.14090'. [ 2907.448893][T15543] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14091'. [ 2907.507246][T15544] netlink: 'syz.3.14092': attribute type 2 has an invalid length. [ 2907.589801][T15544] netlink: 'syz.3.14092': attribute type 10 has an invalid length. [ 2907.934477][T15546] delete_channel: no stack [ 2907.976766][T15548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14105'. [ 2908.268442][T15556] netlink: 'syz.4.14096': attribute type 17 has an invalid length. [ 2908.482183][T15564] netlink: 199824 bytes leftover after parsing attributes in process `syz.3.14101'. [ 2911.435388][T15578] validate_nla: 1 callbacks suppressed [ 2911.435455][T15578] netlink: 'syz.3.14103': attribute type 39 has an invalid length. [ 2911.540373][T15586] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14107'. [ 2911.872169][T15588] netlink: 'syz.2.14106': attribute type 21 has an invalid length. [ 2911.886011][T15588] netlink: 128 bytes leftover after parsing attributes in process `syz.2.14106'. [ 2911.900420][T15588] netlink: 3 bytes leftover after parsing attributes in process `syz.2.14106'. [ 2912.258311][T15599] netlink: 'syz.2.14108': attribute type 2 has an invalid length. [ 2912.369952][T15599] netlink: 'syz.2.14108': attribute type 10 has an invalid length. [ 2915.387396][T15618] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14112'. [ 2915.685786][T15625] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14115'. [ 2916.125539][T15630] netlink: 'syz.1.14121': attribute type 39 has an invalid length. [ 2916.217431][T15633] device wlan1 entered promiscuous mode [ 2916.319870][T15635] netlink: 'syz.4.14122': attribute type 21 has an invalid length. [ 2916.334231][T15635] netlink: 128 bytes leftover after parsing attributes in process `syz.4.14122'. [ 2916.353271][T15635] netlink: 3 bytes leftover after parsing attributes in process `syz.4.14122'. [ 2916.387007][T15637] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14123'. [ 2916.417584][T15623] netlink: 'syz.0.14114': attribute type 2 has an invalid length. [ 2916.481061][T15623] netlink: 'syz.0.14114': attribute type 8 has an invalid length. [ 2916.493926][T15623] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14114'. [ 2916.535347][T15640] netlink: 'syz.1.14134': attribute type 39 has an invalid length. [ 2916.597886][T15642] netlink: 'syz.3.14124': attribute type 39 has an invalid length. [ 2917.064927][T15649] netlink: 'syz.1.14126': attribute type 2 has an invalid length. [ 2917.163353][T15654] netlink: 'syz.1.14126': attribute type 10 has an invalid length. [ 2917.186354][T15655] netlink: 'syz.0.14137': attribute type 39 has an invalid length. [ 2919.011990][T15666] netlink: 'syz.0.14143': attribute type 39 has an invalid length. [ 2919.014406][T15662] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2919.031248][T15679] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14131'. [ 2919.050889][T15662] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2919.070915][T15662] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2919.823375][T15687] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2919.829263][T15687] dvmrp1: linktype set to 768 [ 2919.922523][T15686] netlink: 16098 bytes leftover after parsing attributes in process `syz.4.14136'. [ 2920.288716][T15694] netlink: 'syz.0.14150': attribute type 39 has an invalid length. [ 2920.383844][T15695] netlink: 'syz.2.14139': attribute type 39 has an invalid length. [ 2920.396604][T15698] netlink: 'syz.3.14135': attribute type 1 has an invalid length. [ 2920.466330][T15698] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.14135'. [ 2920.486088][T15700] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14140'. [ 2920.974760][T15697] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14138'. [ 2922.242771][T15723] validate_nla: 5 callbacks suppressed [ 2922.242812][T15723] netlink: 'syz.2.14148': attribute type 21 has an invalid length. [ 2923.479214][T15752] netlink: 'syz.3.14154': attribute type 39 has an invalid length. [ 2923.493262][T15753] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14152'. [ 2923.809570][T15763] netlink: 'syz.3.14156': attribute type 39 has an invalid length. [ 2923.989614][T15767] netlink: 'syz.4.14171': attribute type 39 has an invalid length. [ 2924.244541][T15769] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14158'. [ 2924.599425][T15783] netlink: 'syz.0.14157': attribute type 1 has an invalid length. [ 2924.762802][T15783] netlink: 127868 bytes leftover after parsing attributes in process `syz.0.14157'. [ 2924.790537][T15772] netlink: 'syz.3.14159': attribute type 2 has an invalid length. [ 2924.815539][T15765] netlink: 'syz.0.14157': attribute type 29 has an invalid length. [ 2924.832921][T15772] netlink: 'syz.3.14159': attribute type 8 has an invalid length. [ 2924.862173][T15772] netlink: 132 bytes leftover after parsing attributes in process `syz.3.14159'. [ 2924.901982][T15780] netlink: 16098 bytes leftover after parsing attributes in process `syz.2.14161'. [ 2924.930249][T15785] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2924.963391][T15785] dvmrp1: linktype set to 768 [ 2925.013488][T15765] netlink: 'syz.0.14157': attribute type 29 has an invalid length. [ 2925.435815][T15795] netlink: 'syz.0.14167': attribute type 39 has an invalid length. [ 2926.223907][T15811] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14176'. [ 2926.738029][T15816] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14175'. [ 2927.174625][T15826] netlink: 55 bytes leftover after parsing attributes in process `syz.4.14179'. [ 2927.440465][T15824] validate_nla: 5 callbacks suppressed [ 2927.440507][T15824] netlink: 'syz.2.14178': attribute type 2 has an invalid length. [ 2927.500738][T15824] netlink: 'syz.2.14178': attribute type 8 has an invalid length. [ 2927.533821][T15824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14178'. [ 2928.386311][T15844] netlink: 'syz.0.14187': attribute type 39 has an invalid length. [ 2928.486461][T15846] netlink: 'syz.2.14185': attribute type 39 has an invalid length. [ 2928.724044][T15855] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14189'. [ 2928.948235][T15857] netlink: 'syz.0.14200': attribute type 39 has an invalid length. [ 2929.568114][T15868] netlink: 'syz.0.14192': attribute type 39 has an invalid length. [ 2929.839617][T15872] netlink: 'syz.4.14194': attribute type 39 has an invalid length. [ 2929.880094][T15874] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14204'. [ 2930.412572][T15883] netlink: 'syz.1.14205': attribute type 39 has an invalid length. [ 2930.424686][T15885] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14193'. [ 2930.660095][T15889] netlink: 'syz.0.14195': attribute type 10 has an invalid length. [ 2930.683347][T15889] netlink: 55 bytes leftover after parsing attributes in process `syz.0.14195'. [ 2931.027439][T15892] netlink: 'syz.1.14197': attribute type 2 has an invalid length. [ 2931.074177][T15892] netlink: 132 bytes leftover after parsing attributes in process `syz.1.14197'. [ 2934.744841][T15916] validate_nla: 3 callbacks suppressed [ 2934.744861][T15916] netlink: 'syz.1.14216': attribute type 39 has an invalid length. [ 2935.069447][T15928] netlink: 'syz.2.14206': attribute type 39 has an invalid length. [ 2935.182312][T15927] device wlan1 entered promiscuous mode [ 2935.495916][T15938] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14208'. [ 2935.803589][T15941] netlink: 'syz.2.14210': attribute type 39 has an invalid length. [ 2936.514886][T15959] netlink: 'syz.2.14214': attribute type 10 has an invalid length. [ 2936.552441][T15959] netlink: 55 bytes leftover after parsing attributes in process `syz.2.14214'. [ 2936.846693][T15958] netlink: 'syz.0.14217': attribute type 2 has an invalid length. [ 2936.890608][T15958] netlink: 'syz.0.14217': attribute type 8 has an invalid length. [ 2936.911603][T15958] netlink: 132 bytes leftover after parsing attributes in process `syz.0.14217'. [ 2937.000521][T15964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14220'. [ 2937.071867][T15970] netlink: 'syz.3.14222': attribute type 28 has an invalid length. [ 2937.193311][T15972] netlink: 'syz.2.14221': attribute type 39 has an invalid length. [ 2937.266202][T15974] netlink: 'syz.1.14223': attribute type 39 has an invalid length. [ 2937.310423][T15975] netlink: 'syz.3.14222': attribute type 10 has an invalid length. [ 2937.791122][T15989] device wlan1 entered promiscuous mode [ 2937.955263][T15993] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14230'. [ 2938.294106][T16002] netlink: 65047 bytes leftover after parsing attributes in process `syz.4.14233'. [ 2938.441427][T16002] IPv6: NLM_F_CREATE should be specified when creating new route [ 2938.478715][T16002] netlink: 1 bytes leftover after parsing attributes in process `syz.4.14233'. [ 2938.628012][T16007] netlink: 4083 bytes leftover after parsing attributes in process `syz.4.14233'. [ 2938.687170][T16008] netlink: 132 bytes leftover after parsing attributes in process `syz.4.14233'. [ 2939.705915][T16023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14236'. [ 2939.969982][T16028] validate_nla: 9 callbacks suppressed [ 2939.970004][T16028] netlink: 'syz.2.14250': attribute type 39 has an invalid length. [ 2940.241226][T16035] netlink: 'syz.1.14243': attribute type 39 has an invalid length. [ 2940.740625][T16044] netlink: 'syz.1.14244': attribute type 39 has an invalid length. [ 2941.314868][T16058] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14247'. [ 2943.330626][T16062] netlink: 'syz.3.14249': attribute type 39 has an invalid length. [ 2943.346264][T16064] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.14252'. [ 2943.450970][T16064] netlink: 'syz.2.14252': attribute type 20 has an invalid length. [ 2943.491949][T16067] netlink: 'syz.1.14251': attribute type 28 has an invalid length. [ 2943.586248][T16064] IPv6: NLM_F_CREATE should be specified when creating new route [ 2943.611876][T16075] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.14252'. [ 2943.642726][T16064] netlink: 1 bytes leftover after parsing attributes in process `syz.2.14252'. [ 2943.769212][T16076] netlink: 'syz.2.14252': attribute type 2 has an invalid length. [ 2943.782581][T16076] netlink: 'syz.2.14252': attribute type 8 has an invalid length. [ 2943.794051][T16076] netlink: 132 bytes leftover after parsing attributes in process `syz.2.14252'. [ 2943.865969][T16071] netlink: 'syz.1.14251': attribute type 10 has an invalid length. [ 2944.341922][T16084] netlink: 'syz.0.14264': attribute type 39 has an invalid length. [ 2944.504271][T16079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14254'. [ 2945.347565][T16110] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14261'. [ 2945.764006][T16115] validate_nla: 3 callbacks suppressed [ 2945.764038][T16115] netlink: 'syz.1.14262': attribute type 39 has an invalid length. [ 2946.768785][T16127] netlink: 16098 bytes leftover after parsing attributes in process `syz.0.14266'. [ 2946.864302][T16127] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 2946.871357][T16127] dvmrp1: linktype set to 768 [ 2947.628121][T16139] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14270'. [ 2950.081706][T16151] netlink: 'syz.2.14273': attribute type 39 has an invalid length. [ 2950.317960][T16163] netlink: 'syz.2.14278': attribute type 39 has an invalid length. [ 2950.329951][T16166] netlink: 'syz.1.14279': attribute type 39 has an invalid length. [ 2950.393978][T16164] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14277'. [ 2951.162504][T16180] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14292'. [ 2951.834513][T16197] netlink: 'syz.2.14282': attribute type 1 has an invalid length. [ 2951.865136][T16197] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.14282'. [ 2951.924731][T16197] netlink: 'syz.2.14282': attribute type 29 has an invalid length. [ 2952.025129][T16189] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14285'. [ 2952.111947][T16197] netlink: 'syz.2.14282': attribute type 29 has an invalid length. [ 2952.396013][T16207] netlink: 'syz.3.14288': attribute type 39 has an invalid length. [ 2952.854848][T16217] netlink: 'syz.4.14295': attribute type 39 has an invalid length. [ 2952.938209][T16215] netlink: 'syz.2.14293': attribute type 39 has an invalid length. [ 2952.974858][T16219] netlink: 'syz.0.14290': attribute type 28 has an invalid length. [ 2953.097672][T16224] netlink: 'syz.3.14296': attribute type 39 has an invalid length. [ 2953.219417][T16219] netlink: 'syz.0.14290': attribute type 10 has an invalid length. [ 2953.399460][T16229] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14297'. [ 2953.957203][T16241] netlink: 'syz.2.14299': attribute type 10 has an invalid length. [ 2954.164671][T16241] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.14299'. [ 2955.165930][T16264] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14307'. [ 2956.039246][T16279] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14312'. [ 2957.228080][T16303] validate_nla: 7 callbacks suppressed [ 2957.228121][T16303] netlink: 'syz.0.14319': attribute type 39 has an invalid length. [ 2957.254027][T16306] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14321'. [ 2957.460225][T16312] netlink: 'syz.3.14314': attribute type 1 has an invalid length. [ 2957.559628][T16319] netlink: 'syz.3.14314': attribute type 29 has an invalid length. [ 2957.620916][T16312] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.14314'. [ 2957.650116][T16318] netlink: 'syz.1.14323': attribute type 39 has an invalid length. [ 2957.697633][T16314] netlink: 'syz.0.14322': attribute type 39 has an invalid length. [ 2957.744998][T16319] netlink: 'syz.3.14314': attribute type 29 has an invalid length. [ 2958.370327][T16326] netlink: 'syz.4.14324': attribute type 28 has an invalid length. [ 2958.441607][T16328] netlink: 'syz.3.14325': attribute type 39 has an invalid length. [ 2958.698146][T16330] netlink: 'syz.4.14324': attribute type 10 has an invalid length. [ 2958.988115][T16336] netlink: 'syz.1.14327': attribute type 39 has an invalid length. [ 2959.251775][T16341] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14328'. [ 2960.253885][T16362] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14335'. [ 2961.764301][T16399] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14346'. [ 2963.301458][T16422] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14361'. [ 2963.617455][T16436] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14354'. [ 2963.671762][T16433] validate_nla: 9 callbacks suppressed [ 2963.671801][T16433] netlink: 'syz.1.14355': attribute type 39 has an invalid length. [ 2963.733044][T16438] netlink: 'syz.2.14357': attribute type 39 has an invalid length. [ 2964.127049][T16445] netlink: 'syz.4.14360': attribute type 39 has an invalid length. [ 2964.280312][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 2964.286944][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 2964.317760][T16451] Q6`Ҙ: renamed from lo [ 2964.609320][T16457] netlink: 'syz.1.14365': attribute type 39 has an invalid length. [ 2964.786551][T16463] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14367'. [ 2965.470440][T16479] netlink: 'syz.2.14372': attribute type 39 has an invalid length. [ 2965.701268][T16484] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14374'. [ 2966.177886][T16493] netlink: 'syz.3.14377': attribute type 39 has an invalid length. [ 2966.240548][T16495] Q6`Ҙ: renamed from lo [ 2966.383043][T16500] netlink: 'syz.2.14378': attribute type 39 has an invalid length. [ 2966.526832][T16503] netlink: 'syz.0.14380': attribute type 39 has an invalid length. [ 2966.701521][T16509] netlink: 'syz.2.14382': attribute type 2 has an invalid length. [ 2966.732698][T16509] netlink: 164 bytes leftover after parsing attributes in process `syz.2.14382'. [ 2966.856766][T16513] netlink: 'syz.1.14381': attribute type 10 has an invalid length. [ 2966.921654][T16513] netlink: 16186 bytes leftover after parsing attributes in process `syz.1.14381'. [ 2967.985256][T16546] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.14390'. [ 2968.118135][T16549] netlink: 164 bytes leftover after parsing attributes in process `syz.4.14395'. [ 2968.267500][T16545] Q6`Ҙ: renamed from lo [ 2968.625779][T16555] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.14398'. [ 2968.675662][T16560] validate_nla: 9 callbacks suppressed [ 2968.675683][T16560] netlink: 'syz.2.14400': attribute type 39 has an invalid length. [ 2969.168043][T16570] netlink: 'syz.1.14403': attribute type 39 has an invalid length. [ 2969.414933][T16581] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14409'. [ 2970.097535][T16594] netlink: 'syz.1.14415': attribute type 39 has an invalid length. [ 2970.250870][T16598] netlink: 'syz.4.14411': attribute type 1 has an invalid length. [ 2970.293026][T16598] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.14411'. [ 2970.334580][T16598] netlink: 'syz.4.14411': attribute type 29 has an invalid length. [ 2970.449601][T16598] netlink: 'syz.4.14411': attribute type 29 has an invalid length. [ 2970.497253][T16605] netlink: 'syz.0.14417': attribute type 10 has an invalid length. [ 2970.583515][T16606] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.14417'. [ 2970.955959][T16613] netlink: 'syz.4.14420': attribute type 39 has an invalid length. [ 2971.276155][T16623] netlink: 'syz.0.14433': attribute type 39 has an invalid length. [ 2971.430610][T16628] netlink: 'syz.1.14424': attribute type 39 has an invalid length. [ 2971.736511][T16637] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14428'. [ 2972.468563][T16649] device syzkaller0 left promiscuous mode [ 2972.925365][T16660] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14446'. [ 2973.749152][T16682] validate_nla: 4 callbacks suppressed [ 2973.749194][T16682] netlink: 'syz.2.14453': attribute type 39 has an invalid length. [ 2973.964463][T16690] netlink: 'syz.4.14447': attribute type 39 has an invalid length. [ 2974.377127][T16698] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14450'. [ 2975.022774][T16706] netlink: 'syz.2.14452': attribute type 39 has an invalid length. [ 2975.414938][T16714] netlink: 'syz.3.14456': attribute type 39 has an invalid length. [ 2976.020530][T16728] netlink: 'syz.4.14459': attribute type 39 has an invalid length. [ 2976.741493][T16740] netlink: 'syz.0.14464': attribute type 39 has an invalid length. [ 2977.144968][T16745] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14466'. [ 2977.315452][T16742] netlink: 'syz.3.14465': attribute type 1 has an invalid length. [ 2977.326435][T16742] netlink: 127868 bytes leftover after parsing attributes in process `syz.3.14465'. [ 2977.339958][T16747] netlink: 'syz.3.14465': attribute type 29 has an invalid length. [ 2977.387187][T16747] netlink: 'syz.3.14465': attribute type 29 has an invalid length. [ 2978.111412][T16762] netlink: 'syz.2.14471': attribute type 39 has an invalid length. [ 2978.411388][T16767] IPv6: Can't replace route, no match found [ 2979.645566][T16794] validate_nla: 2 callbacks suppressed [ 2979.645610][T16794] netlink: 'syz.1.14493': attribute type 39 has an invalid length. [ 2979.855052][T16797] netlink: 'syz.4.14480': attribute type 1 has an invalid length. [ 2979.894655][T16797] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.14480'. [ 2980.026823][T16797] netlink: 'syz.4.14480': attribute type 29 has an invalid length. [ 2980.123206][T16797] netlink: 'syz.4.14480': attribute type 29 has an invalid length. [ 2980.248247][T16802] netlink: 'syz.2.14485': attribute type 39 has an invalid length. [ 2980.567177][T16810] IPv6: Can't replace route, no match found [ 2980.639915][T16809] netlink: 'syz.0.14499': attribute type 39 has an invalid length. [ 2980.884761][T16812] netlink: 'syz.2.14488': attribute type 39 has an invalid length. [ 2981.478729][T16821] netlink: 'syz.4.14491': attribute type 21 has an invalid length. [ 2981.532971][T16822] netlink: 'syz.0.14503': attribute type 39 has an invalid length. [ 2982.515992][T16840] netlink: 'syz.0.14511': attribute type 39 has an invalid length. [ 2983.500783][T16857] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.14506'. [ 2984.998051][T16887] validate_nla: 6 callbacks suppressed [ 2984.998094][T16887] netlink: 'syz.1.14517': attribute type 39 has an invalid length. [ 2985.073295][T16892] netlink: 'syz.3.14519': attribute type 39 has an invalid length. [ 2985.452903][T16897] netlink: 'syz.1.14533': attribute type 39 has an invalid length. [ 2986.434819][T16925] netlink: 'syz.4.14526': attribute type 1 has an invalid length. [ 2986.460340][T16925] netlink: 127868 bytes leftover after parsing attributes in process `syz.4.14526'. [ 2986.526462][T16927] netlink: 'syz.3.14532': attribute type 39 has an invalid length. [ 2986.621484][T16908] netlink: 'syz.4.14526': attribute type 29 has an invalid length. [ 2986.638939][T16928] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14535'. [ 2986.689445][T16908] netlink: 'syz.4.14526': attribute type 29 has an invalid length. [ 2986.723537][T16931] netlink: 'syz.0.14536': attribute type 39 has an invalid length. [ 2987.462642][T16939] netlink: 'syz.0.14549': attribute type 39 has an invalid length. [ 2987.720373][T16947] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14553'. [ 2988.765144][T16971] netlink: 'syz.4.14552': attribute type 39 has an invalid length. [ 2989.950431][T16985] netlink: 127868 bytes leftover after parsing attributes in process `syz.2.14555'. [ 2990.010416][T16975] validate_nla: 3 callbacks suppressed [ 2990.010456][T16975] netlink: 'syz.2.14555': attribute type 29 has an invalid length. [ 2990.043426][T16975] netlink: 'syz.2.14555': attribute type 29 has an invalid length. [ 2991.523956][T16987] device syzkaller0 entered promiscuous mode [ 2996.052519][T17009] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14563'. [ 2996.067923][T17019] netlink: 'syz.3.14569': attribute type 39 has an invalid length. [ 2996.278133][T17029] netlink: 'syz.2.14581': attribute type 39 has an invalid length. [ 2996.353881][T17033] netlink: 'syz.4.14572': attribute type 39 has an invalid length. [ 2996.639993][T17046] netlink: 'syz.1.14585': attribute type 39 has an invalid length. [ 2996.917252][T17053] netlink: 'syz.2.14578': attribute type 39 has an invalid length. [ 2998.195973][T17069] device syzkaller0 entered promiscuous mode [ 3001.144855][T17072] netlink: 'syz.1.14586': attribute type 39 has an invalid length. [ 3001.162896][T17086] netlink: 'syz.2.14593': attribute type 39 has an invalid length. [ 3004.204960][T17100] netlink: 'syz.0.14598': attribute type 39 has an invalid length. [ 3004.232479][T17106] netlink: 'syz.1.14610': attribute type 39 has an invalid length. [ 3005.479159][T17134] device syzkaller0 entered promiscuous mode [ 3010.178060][T17191] device syzkaller0 entered promiscuous mode [ 3010.186759][T17201] netlink: 'syz.4.14633': attribute type 39 has an invalid length. [ 3014.793696][T17270] netlink: 'syz.4.14655': attribute type 17 has an invalid length. [ 3014.823463][T17270] netlink: 148 bytes leftover after parsing attributes in process `syz.4.14655'. [ 3015.055414][T17273] netlink: 'syz.1.14656': attribute type 39 has an invalid length. [ 3015.151594][T17275] netlink: 'syz.3.14657': attribute type 39 has an invalid length. [ 3015.314582][T17283] netlink: 'syz.0.14661': attribute type 1 has an invalid length. [ 3015.370816][T17283] netlink: 5 bytes leftover after parsing attributes in process `syz.0.14661'. [ 3019.309878][T17315] netlink: 'syz.2.14671': attribute type 17 has an invalid length. [ 3019.380479][T17315] netlink: 148 bytes leftover after parsing attributes in process `syz.2.14671'. [ 3019.629367][T17317] netlink: 'syz.1.14675': attribute type 39 has an invalid length. [ 3019.707828][T17322] netlink: 'syz.3.14676': attribute type 1 has an invalid length. [ 3019.758841][T17322] netlink: 5 bytes leftover after parsing attributes in process `syz.3.14676'. [ 3019.875149][T17325] netlink: 'syz.0.14678': attribute type 39 has an invalid length. [ 3021.202929][T17341] device syzkaller0 entered promiscuous mode [ 3024.329055][T17363] netlink: 'syz.1.14688': attribute type 17 has an invalid length. [ 3024.343050][T17363] netlink: 148 bytes leftover after parsing attributes in process `syz.1.14688'. [ 3024.507083][T17372] netlink: 'syz.1.14692': attribute type 1 has an invalid length. [ 3024.519245][T17372] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14692'. [ 3024.770705][T17376] netlink: 'syz.4.14694': attribute type 39 has an invalid length. [ 3025.247644][ T3446] tipc: Subscription rejected, illegal request [ 3025.258065][T17387] netlink: 'syz.3.14700': attribute type 39 has an invalid length. [ 3025.715707][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3025.723703][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3025.877364][T17398] device syzkaller0 entered promiscuous mode [ 3026.229148][T17417] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14712'. [ 3029.488247][T17420] netlink: 44 bytes leftover after parsing attributes in process `syz.3.14713'. [ 3029.503612][T17432] netlink: 'syz.4.14716': attribute type 39 has an invalid length. [ 3029.522877][T17436] netlink: 'syz.1.14717': attribute type 39 has an invalid length. [ 3029.697940][T17440] netlink: 9275 bytes leftover after parsing attributes in process `syz.3.14719'. [ 3029.985457][T17775] tipc: Subscription rejected, illegal request [ 3030.191638][T17457] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14727'. [ 3030.927949][T17474] netlink: 'syz.2.14735': attribute type 2 has an invalid length. [ 3030.981319][T17471] netlink: 'syz.3.14731': attribute type 39 has an invalid length. [ 3031.015266][T17474] netlink: 198692 bytes leftover after parsing attributes in process `syz.2.14735'. [ 3031.045854][T17775] tipc: Subscription rejected, illegal request [ 3031.518120][T17493] netlink: 'syz.3.14743': attribute type 39 has an invalid length. [ 3031.668319][T17496] netlink: 'syz.2.14744': attribute type 39 has an invalid length. [ 3032.187218][T17505] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14747'. [ 3032.701922][T17516] netlink: 'syz.1.14750': attribute type 39 has an invalid length. [ 3032.896155][T17524] netlink: 'syz.4.14754': attribute type 39 has an invalid length. [ 3033.150297][T17535] netlink: 'syz.1.14767': attribute type 39 has an invalid length. [ 3033.747948][T17547] netlink: 'syz.0.14762': attribute type 39 has an invalid length. [ 3033.849764][T17549] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14763'. [ 3034.016276][T17554] netlink: 112865 bytes leftover after parsing attributes in process `syz.3.14765'. [ 3034.595668][T17574] validate_nla: 2 callbacks suppressed [ 3034.595786][T17574] netlink: 'syz.3.14772': attribute type 39 has an invalid length. [ 3034.898726][T17581] netlink: 'syz.3.14775': attribute type 39 has an invalid length. [ 3035.190763][T17591] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14780'. [ 3035.766780][T17599] netlink: 'syz.2.14782': attribute type 39 has an invalid length. [ 3036.131047][T17608] netlink: 'syz.3.14785': attribute type 39 has an invalid length. [ 3036.451026][T17613] netlink: 'syz.1.14787': attribute type 39 has an invalid length. [ 3037.148970][T17638] netlink: 'syz.2.14796': attribute type 39 has an invalid length. [ 3037.185930][T17640] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14795'. [ 3037.947759][T17653] netlink: 'syz.3.14801': attribute type 39 has an invalid length. [ 3038.026783][T17660] netlink: 'syz.1.14802': attribute type 39 has an invalid length. [ 3038.100805][T17659] netlink: 'syz.0.14803': attribute type 21 has an invalid length. [ 3038.581680][T17669] netlink: 'syz.2.14805': attribute type 39 has an invalid length. [ 3039.344054][T17682] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14812'. [ 3039.615174][T17691] validate_nla: 1 callbacks suppressed [ 3039.615197][T17691] netlink: 'syz.4.14814': attribute type 29 has an invalid length. [ 3039.703566][T17692] netlink: 'syz.4.14814': attribute type 29 has an invalid length. [ 3039.795133][T17690] netlink: 'syz.2.14815': attribute type 39 has an invalid length. [ 3039.826900][T17691] netlink: 'syz.4.14814': attribute type 29 has an invalid length. [ 3039.912685][T17700] netlink: 'syz.0.14818': attribute type 2 has an invalid length. [ 3039.929249][T17700] netlink: 198692 bytes leftover after parsing attributes in process `syz.0.14818'. [ 3040.219838][T17705] netlink: 'syz.1.14830': attribute type 39 has an invalid length. [ 3040.497946][T17719] netlink: 'syz.4.14833': attribute type 39 has an invalid length. [ 3040.819973][T17725] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14837'. [ 3040.947959][T17727] netlink: 144 bytes leftover after parsing attributes in process `syz.3.14826'. [ 3040.978240][T17730] netlink: 'syz.2.14827': attribute type 1 has an invalid length. [ 3041.021307][T17730] netlink: 112865 bytes leftover after parsing attributes in process `syz.2.14827'. [ 3041.395878][T17735] netlink: 'syz.1.14828': attribute type 39 has an invalid length. [ 3041.776625][T17741] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14831'. [ 3041.882484][T17746] netlink: 'syz.0.14834': attribute type 39 has an invalid length. [ 3042.563446][T17766] netlink: 144 bytes leftover after parsing attributes in process `syz.4.14843'. [ 3042.628482][T17771] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14845'. [ 3043.750105][T17792] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14852'. [ 3044.682976][T17819] netlink: 144 bytes leftover after parsing attributes in process `syz.0.14864'. [ 3045.057674][T17831] validate_nla: 12 callbacks suppressed [ 3045.057717][T17831] netlink: 'syz.2.14868': attribute type 39 has an invalid length. [ 3046.127282][T17847] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14875'. [ 3046.374755][T17857] netlink: 'syz.1.14880': attribute type 29 has an invalid length. [ 3046.443642][T17856] netlink: 'syz.0.14879': attribute type 39 has an invalid length. [ 3046.455179][T17859] netlink: 'syz.1.14880': attribute type 29 has an invalid length. [ 3046.503827][T17857] netlink: 'syz.1.14880': attribute type 29 has an invalid length. [ 3047.126736][T17870] netlink: 'syz.2.14885': attribute type 39 has an invalid length. [ 3047.810206][T17892] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14894'. [ 3047.897682][T17898] netlink: 'syz.1.14897': attribute type 21 has an invalid length. [ 3048.594729][T17894] device syzkaller0 entered promiscuous mode [ 3051.162412][T17906] netlink: 'syz.2.14899': attribute type 39 has an invalid length. [ 3051.171470][T17908] netlink: 'syz.4.14900': attribute type 39 has an invalid length. [ 3052.168890][T17941] netlink: 'syz.4.14913': attribute type 21 has an invalid length. [ 3052.654190][T17946] device syzkaller0 entered promiscuous mode [ 3055.904233][T17952] netlink: 'syz.1.14915': attribute type 39 has an invalid length. [ 3055.913644][T17954] netlink: 'syz.4.14917': attribute type 39 has an invalid length. [ 3056.324248][T17981] netlink: 'syz.1.14926': attribute type 10 has an invalid length. [ 3056.655378][T17990] netlink: 14 bytes leftover after parsing attributes in process `syz.4.14930'. [ 3057.196212][T17999] netlink: 'syz.4.14936': attribute type 39 has an invalid length. [ 3057.366555][T18003] netlink: 'syz.2.14937': attribute type 39 has an invalid length. [ 3058.901939][T18034] netlink: 'syz.4.14951': attribute type 39 has an invalid length. [ 3059.038628][T18042] netlink: 'syz.0.14954': attribute type 39 has an invalid length. [ 3059.122810][T18048] netlink: 14 bytes leftover after parsing attributes in process `syz.2.14957'. [ 3059.276978][T18053] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14958'. [ 3059.325861][T18055] netlink: 'syz.0.14969': attribute type 39 has an invalid length. [ 3060.491288][T18070] netlink: 14 bytes leftover after parsing attributes in process `syz.1.14973'. [ 3060.795344][T18079] netlink: 'syz.2.14967': attribute type 39 has an invalid length. [ 3061.687961][T18090] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14974'. [ 3061.843692][T18093] netlink: 'syz.2.14971': attribute type 39 has an invalid length. [ 3063.002822][ T9367] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 3063.022070][T18113] device syzkaller0 entered promiscuous mode [ 3063.196556][T18121] netlink: 14 bytes leftover after parsing attributes in process `syz.0.14984'. [ 3063.304488][T18123] netlink: 'syz.1.14985': attribute type 39 has an invalid length. [ 3063.927042][T18139] netlink: 14 bytes leftover after parsing attributes in process `syz.3.14992'. [ 3063.969618][T18141] netlink: 'syz.4.14993': attribute type 39 has an invalid length. [ 3064.006868][T18144] netlink: 'syz.2.14994': attribute type 39 has an invalid length. [ 3064.201737][T18146] device syzkaller0 entered promiscuous mode [ 3067.239583][T18162] netlink: 'syz.3.15001': attribute type 39 has an invalid length. [ 3067.435741][T18174] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15005'. [ 3067.585743][T18177] netlink: 'syz.0.15006': attribute type 39 has an invalid length. [ 3067.650347][T18179] netlink: 'syz.1.15007': attribute type 39 has an invalid length. [ 3067.828321][T18182] netlink: 'syz.2.15008': attribute type 39 has an invalid length. [ 3068.103692][T18190] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15011'. [ 3068.202115][T18194] netlink: 'syz.1.15014': attribute type 21 has an invalid length. [ 3068.238735][T18194] netlink: 14548 bytes leftover after parsing attributes in process `syz.1.15014'. [ 3068.669640][T18206] device syzkaller0 entered promiscuous mode [ 3074.276265][T18218] netlink: 'syz.1.15020': attribute type 39 has an invalid length. [ 3074.294529][T18224] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15023'. [ 3074.307412][T18229] netlink: 'syz.3.15024': attribute type 39 has an invalid length. [ 3074.808860][T18248] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15031'. [ 3075.107640][T18255] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15037'. [ 3075.158106][T18260] netlink: 'syz.0.15038': attribute type 39 has an invalid length. [ 3075.212767][T18262] netlink: 'syz.2.15039': attribute type 39 has an invalid length. [ 3076.686461][T18296] netlink: 'syz.2.15050': attribute type 39 has an invalid length. [ 3076.882918][T18302] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15054'. [ 3076.947960][T18305] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15052'. [ 3076.993630][T18307] netlink: 'syz.4.15055': attribute type 39 has an invalid length. [ 3078.026948][T18340] netlink: 'syz.4.15066': attribute type 39 has an invalid length. [ 3078.106135][T18344] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15068'. [ 3078.211501][T18346] netlink: 'syz.1.15069': attribute type 39 has an invalid length. [ 3081.634113][T18372] mac80211_hwsim hwsim10 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 3081.936636][T18379] netlink: 'syz.4.15081': attribute type 39 has an invalid length. [ 3081.955207][T18381] netlink: 'syz.2.15083': attribute type 39 has an invalid length. [ 3082.593138][T18398] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15087'. [ 3083.299681][T18403] device syzkaller0 entered promiscuous mode [ 3087.152137][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3087.159209][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3089.268477][T18433] netlink: 'syz.4.15097': attribute type 39 has an invalid length. [ 3089.294602][T18437] netlink: 'syz.1.15099': attribute type 39 has an invalid length. [ 3089.452821][T18442] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15101'. [ 3090.225916][T18470] netlink: 'syz.3.15113': attribute type 39 has an invalid length. [ 3090.614135][T18476] netlink: 'syz.4.15116': attribute type 39 has an invalid length. [ 3090.796213][T18485] netlink: 'syz.3.15120': attribute type 39 has an invalid length. [ 3091.322408][T18496] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15123'. [ 3091.358314][T18501] netlink: 156 bytes leftover after parsing attributes in process `syz.4.15124'. [ 3091.850266][T18508] netlink: 'syz.4.15128': attribute type 39 has an invalid length. [ 3091.894318][T18514] device syzkaller0 entered promiscuous mode [ 3092.113694][T18517] netlink: 'syz.2.15132': attribute type 39 has an invalid length. [ 3092.669984][T18541] netlink: 156 bytes leftover after parsing attributes in process `syz.1.15140'. [ 3092.830289][T18544] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15141'. [ 3092.887497][T18549] netlink: 'syz.0.15143': attribute type 39 has an invalid length. [ 3093.607684][T18566] netlink: 'syz.2.15152': attribute type 39 has an invalid length. [ 3094.389298][T18584] netlink: 'syz.4.15157': attribute type 39 has an invalid length. [ 3094.677043][T18591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.15158'. [ 3094.704755][T18588] netlink: 'syz.1.15170': attribute type 39 has an invalid length. [ 3094.871415][T18596] netlink: 'syz.2.15161': attribute type 39 has an invalid length. [ 3095.306269][T18613] netlink: 'syz.0.15178': attribute type 39 has an invalid length. [ 3095.660192][T18626] netlink: 'syz.3.15174': attribute type 39 has an invalid length. [ 3096.056052][T18634] netlink: 'syz.4.15177': attribute type 39 has an invalid length. [ 3096.839500][T18644] netlink: 'syz.4.15182': attribute type 11 has an invalid length. [ 3096.879896][T18644] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.15182'. [ 3096.980873][T18643] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3097.096745][T18653] netlink: 'syz.1.15186': attribute type 39 has an invalid length. [ 3097.495153][T18666] netlink: 'syz.2.15192': attribute type 39 has an invalid length. [ 3097.660405][T18672] netlink: 'syz.4.15194': attribute type 39 has an invalid length. [ 3097.776913][T18674] netlink: 126288 bytes leftover after parsing attributes in process `syz.1.15195'. [ 3098.287488][T18690] netlink: 'syz.1.15200': attribute type 39 has an invalid length. [ 3099.700893][T18727] validate_nla: 1 callbacks suppressed [ 3099.701010][T18727] netlink: 'syz.3.15215': attribute type 39 has an invalid length. [ 3099.973308][T18734] netlink: 'syz.1.15217': attribute type 39 has an invalid length. [ 3100.719217][T18752] netlink: 'syz.4.15223': attribute type 39 has an invalid length. [ 3100.843267][T18760] netlink: 'syz.1.15226': attribute type 11 has an invalid length. [ 3100.880240][T18760] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.15226'. [ 3100.900883][T18766] netlink: 'syz.1.15226': attribute type 3 has an invalid length. [ 3100.942454][T18766] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.15226'. [ 3100.978622][T18759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 3103.658106][T18765] netlink: 'syz.3.15231': attribute type 39 has an invalid length. [ 3103.846765][T18783] netlink: 'syz.4.15237': attribute type 39 has an invalid length. [ 3104.050160][T18787] netlink: 'syz.0.15240': attribute type 39 has an invalid length. [ 3104.116656][T18790] netlink: 'syz.1.15241': attribute type 39 has an invalid length. [ 3107.681787][T18814] netlink: 'syz.2.15249': attribute type 39 has an invalid length. [ 3108.142545][T18829] netlink: 'syz.3.15256': attribute type 39 has an invalid length. [ 3108.157935][T18826] netlink: 'syz.0.15254': attribute type 39 has an invalid length. [ 3109.327912][T18846] netlink: 'syz.4.15262': attribute type 39 has an invalid length. [ 3109.600266][T18863] netlink: 'syz.1.15268': attribute type 39 has an invalid length. [ 3109.866144][T18867] netlink: 'syz.3.15269': attribute type 39 has an invalid length. [ 3109.891790][T18871] netlink: 'syz.4.15270': attribute type 39 has an invalid length. [ 3110.732412][T18884] netlink: 'syz.1.15275': attribute type 39 has an invalid length. [ 3112.887446][T18900] netlink: 'syz.2.15280': attribute type 39 has an invalid length. [ 3113.111523][T18906] netlink: 'syz.4.15283': attribute type 2 has an invalid length. [ 3113.147374][T18906] netlink: 17267 bytes leftover after parsing attributes in process `syz.4.15283'. [ 3113.218699][T18905] netlink: 'syz.3.15282': attribute type 39 has an invalid length. [ 3113.309196][T18911] netlink: 'syz.2.15285': attribute type 39 has an invalid length. [ 3113.684583][T18920] netlink: 'syz.0.15287': attribute type 39 has an invalid length. [ 3114.713637][T18936] device syzkaller0 entered promiscuous mode [ 3114.803146][T18939] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 65487 [ 3115.385565][T18941] netlink: 'syz.2.15295': attribute type 39 has an invalid length. [ 3115.412955][T18943] netlink: 'syz.3.15296': attribute type 39 has an invalid length. [ 3115.476182][T18945] netlink: 'syz.1.15299': attribute type 39 has an invalid length. [ 3115.811561][T18953] netlink: 'syz.2.15301': attribute type 39 has an invalid length. [ 3117.418958][T18981] netlink: 'syz.3.15311': attribute type 39 has an invalid length. [ 3117.556877][T18984] device syzkaller0 entered promiscuous mode [ 3121.218450][T18993] validate_nla: 1 callbacks suppressed [ 3121.218465][T18993] netlink: 'syz.0.15315': attribute type 39 has an invalid length. [ 3121.242437][T19003] netlink: 'syz.3.15316': attribute type 39 has an invalid length. [ 3121.590227][T19014] device syzkaller0 left promiscuous mode [ 3121.700446][T19017] device syzkaller0 entered promiscuous mode [ 3122.338840][T19033] netlink: 'syz.3.15327': attribute type 39 has an invalid length. [ 3122.720581][T19039] device syzkaller0 entered promiscuous mode [ 3127.969009][T19063] netlink: 'syz.4.15339': attribute type 39 has an invalid length. [ 3127.978034][T19074] netlink: 'syz.3.15344': attribute type 39 has an invalid length. [ 3128.364670][T19089] netlink: 'syz.4.15349': attribute type 21 has an invalid length. [ 3128.393176][T19089] netlink: 'syz.4.15349': attribute type 6 has an invalid length. [ 3128.411953][T19089] netlink: 132 bytes leftover after parsing attributes in process `syz.4.15349'. [ 3129.004097][T19111] netlink: 'syz.3.15358': attribute type 21 has an invalid length. [ 3129.030175][T19111] netlink: 'syz.3.15358': attribute type 6 has an invalid length. [ 3129.073172][T19111] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15358'. [ 3129.188547][T19113] netlink: 'syz.0.15359': attribute type 39 has an invalid length. [ 3129.965624][T19115] device syzkaller0 entered promiscuous mode [ 3129.989672][T19124] netlink: 'syz.1.15361': attribute type 39 has an invalid length. [ 3130.012483][T19130] netlink: 'syz.0.15366': attribute type 21 has an invalid length. [ 3130.025519][T19130] netlink: 'syz.0.15366': attribute type 6 has an invalid length. [ 3130.034327][T19130] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15366'. [ 3131.125413][T19152] netlink: 15999 bytes leftover after parsing attributes in process `syz.2.15375'. [ 3132.939368][T19154] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15376'. [ 3133.114460][T19158] validate_nla: 2 callbacks suppressed [ 3133.114503][T19158] netlink: 'syz.0.15377': attribute type 39 has an invalid length. [ 3133.315688][T19166] netlink: 'syz.1.15389': attribute type 39 has an invalid length. [ 3133.649658][T19174] netlink: 'syz.3.15382': attribute type 21 has an invalid length. [ 3133.662458][T19174] netlink: 'syz.3.15382': attribute type 6 has an invalid length. [ 3133.670675][T19174] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15382'. [ 3135.150920][T19194] device syzkaller0 entered promiscuous mode [ 3137.522785][T19212] netlink: 'syz.1.15397': attribute type 21 has an invalid length. [ 3137.553222][T19212] netlink: 'syz.1.15397': attribute type 6 has an invalid length. [ 3137.581897][T19212] netlink: 132 bytes leftover after parsing attributes in process `syz.1.15397'. [ 3137.622764][T19219] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15399'. [ 3137.807751][T19223] netlink: 'syz.0.15400': attribute type 39 has an invalid length. [ 3137.965980][T19230] netlink: 'syz.1.15401': attribute type 39 has an invalid length. [ 3139.822675][T19250] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.15411'. [ 3139.972453][T19255] netlink: 'syz.2.15412': attribute type 21 has an invalid length. [ 3140.015068][T19255] netlink: 'syz.2.15412': attribute type 6 has an invalid length. [ 3140.032586][T19255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.15412'. [ 3142.901690][T19270] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15416'. [ 3143.097345][T19281] netlink: 'syz.1.15418': attribute type 39 has an invalid length. [ 3144.222647][T19304] netlink: 'syz.3.15426': attribute type 21 has an invalid length. [ 3144.253479][T19304] netlink: 'syz.3.15426': attribute type 6 has an invalid length. [ 3144.272672][T19304] netlink: 132 bytes leftover after parsing attributes in process `syz.3.15426'. [ 3144.282967][T19305] netlink: 'syz.2.15427': attribute type 39 has an invalid length. [ 3145.343166][T19322] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15431'. [ 3145.890502][T19326] device syzkaller0 entered promiscuous mode [ 3148.599492][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3148.606300][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3148.690117][T19332] netlink: 'syz.1.15436': attribute type 39 has an invalid length. [ 3148.698971][T19341] netlink: 'syz.3.15437': attribute type 39 has an invalid length. [ 3149.017552][T19349] netlink: 'syz.3.15441': attribute type 39 has an invalid length. [ 3149.445542][T19365] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15448'. [ 3150.532104][T19378] netlink: 'syz.3.15451': attribute type 39 has an invalid length. [ 3150.773888][T19388] netlink: 'syz.0.15466': attribute type 39 has an invalid length. [ 3150.987877][T19393] device syzkaller0 entered promiscuous mode [ 3151.479620][T19407] netlink: 'syz.0.15461': attribute type 39 has an invalid length. [ 3153.056059][T19418] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.15468'. [ 3155.123445][T19408] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15462'. [ 3155.139273][T19417] netlink: 'syz.1.15467': attribute type 39 has an invalid length. [ 3155.162598][T19423] netlink: 'syz.2.15469': attribute type 39 has an invalid length. [ 3155.450798][T19434] netlink: 'syz.4.15473': attribute type 1 has an invalid length. [ 3155.541022][T19434] netlink: 'syz.4.15473': attribute type 4 has an invalid length. [ 3155.602597][T19434] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15473'. [ 3155.836474][T19439] device syzkaller0 entered promiscuous mode [ 3155.844217][T19443] netlink: 'syz.2.15477': attribute type 39 has an invalid length. [ 3159.179579][T19460] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15483'. [ 3159.210422][T19461] netlink: 'syz.1.15484': attribute type 39 has an invalid length. [ 3160.189177][T19466] device syzkaller0 entered promiscuous mode [ 3160.216576][T19476] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15496'. [ 3162.364074][T19484] netlink: 60583 bytes leftover after parsing attributes in process `syz.3.15490'. [ 3162.373885][T19484] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15490'. [ 3162.467537][T19491] device syzkaller0 entered promiscuous mode [ 3162.491725][T19495] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.15492'. [ 3165.848975][T19497] netlink: 'syz.3.15493': attribute type 39 has an invalid length. [ 3165.860426][T19506] netlink: 'syz.4.15494': attribute type 39 has an invalid length. [ 3165.884192][T19513] netlink: 'syz.0.15499': attribute type 39 has an invalid length. [ 3166.061491][T19524] netlink: 'syz.0.15503': attribute type 1 has an invalid length. [ 3166.082386][T19524] netlink: 'syz.0.15503': attribute type 4 has an invalid length. [ 3166.091011][T19524] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.15503'. [ 3166.499626][T19532] device syzkaller0 entered promiscuous mode [ 3167.367190][T19537] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.15507'. [ 3168.052178][T19536] device syzkaller0 entered promiscuous mode [ 3168.065237][T19540] netlink: 60583 bytes leftover after parsing attributes in process `syz.1.15508'. [ 3168.074841][T19540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15508'. [ 3170.423962][T19555] netlink: 'syz.2.15513': attribute type 39 has an invalid length. [ 3170.976820][T19574] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.15520'. [ 3171.294079][T19578] netlink: 'syz.1.15533': attribute type 39 has an invalid length. [ 3171.331399][T19580] netlink: 60583 bytes leftover after parsing attributes in process `syz.4.15522'. [ 3171.412842][T19580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15522'. [ 3174.274413][T19605] device syzkaller0 entered promiscuous mode [ 3174.343772][T19608] netlink: 'syz.4.15532': attribute type 39 has an invalid length. [ 3177.231903][T19615] netlink: 'syz.2.15536': attribute type 1 has an invalid length. [ 3177.240533][T19615] netlink: 'syz.2.15536': attribute type 4 has an invalid length. [ 3177.248781][T19615] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.15536'. [ 3180.203839][T19628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15549'. [ 3180.258074][T19628] netlink: 132 bytes leftover after parsing attributes in process `syz.0.15549'. [ 3180.693929][T19642] device syzkaller0 entered promiscuous mode [ 3186.923838][T19669] netlink: 'syz.1.15553': attribute type 39 has an invalid length. [ 3187.110215][T19680] netlink: 129384 bytes leftover after parsing attributes in process `syz.0.15565'. [ 3187.629083][T19699] device syzkaller0 entered promiscuous mode [ 3195.527173][T19712] netlink: 'syz.3.15568': attribute type 39 has an invalid length. [ 3196.286029][T19751] netlink: 'syz.0.15579': attribute type 39 has an invalid length. [ 3196.925157][T19770] device syzkaller0 entered promiscuous mode [ 3197.162457][T19779] netlink: 'syz.1.15587': attribute type 39 has an invalid length. [ 3202.212620][T19796] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15593'. [ 3202.222635][T19803] netlink: 'syz.3.15595': attribute type 39 has an invalid length. [ 3202.415546][T19811] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15608'. [ 3203.799608][T19842] netlink: 'syz.4.15609': attribute type 39 has an invalid length. [ 3204.377279][T19836] device syzkaller0 entered promiscuous mode [ 3204.413747][T19848] netlink: 'syz.2.15613': attribute type 39 has an invalid length. [ 3208.183509][T19859] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15616'. [ 3208.406345][T19882] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15633'. [ 3208.654603][T19891] netlink: 60 bytes leftover after parsing attributes in process `syz.4.15626'. [ 3209.536069][T19911] netlink: 'syz.0.15635': attribute type 2 has an invalid length. [ 3209.544917][T19911] netlink: 199848 bytes leftover after parsing attributes in process `syz.0.15635'. [ 3209.670345][T19907] device syzkaller0 entered promiscuous mode [ 3209.899431][T19917] device syzkaller0 entered promiscuous mode [ 3209.943632][T19920] device syzkaller0 left promiscuous mode [ 3210.024560][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3210.031008][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3212.613125][T19928] netlink: 60 bytes leftover after parsing attributes in process `syz.1.15642'. [ 3216.117664][T19998] netlink: 60 bytes leftover after parsing attributes in process `syz.2.15661'. [ 3218.079217][T20032] device syzkaller0 entered promiscuous mode [ 3221.427068][T20078] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15689'. [ 3223.152938][T20087] device syzkaller0 entered promiscuous mode [ 3223.384927][T20112] netlink: 'syz.0.15700': attribute type 2 has an invalid length. [ 3223.402786][T20112] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.15700'. [ 3225.958659][T20130] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15705'. [ 3226.446283][T20141] netlink: 'syz.0.15720': attribute type 39 has an invalid length. [ 3226.980687][T20159] netlink: 63503 bytes leftover after parsing attributes in process `syz.2.15715'. [ 3227.225889][T20168] netlink: 'syz.1.15721': attribute type 39 has an invalid length. [ 3227.579267][T20177] device syzkaller0 entered promiscuous mode [ 3227.731913][T20182] netlink: 'syz.0.15725': attribute type 39 has an invalid length. [ 3233.113831][T20194] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15729'. [ 3233.123200][T20196] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.15731'. [ 3233.162285][T20205] netlink: 'syz.4.15734': attribute type 39 has an invalid length. [ 3233.326898][T20210] netlink: 'syz.1.15738': attribute type 11 has an invalid length. [ 3233.338483][T20210] netlink: 176 bytes leftover after parsing attributes in process `syz.1.15738'. [ 3233.370708][T20212] netlink: 'syz.2.15735': attribute type 39 has an invalid length. [ 3233.383038][T20216] netlink: 15743 bytes leftover after parsing attributes in process `syz.0.15737'. [ 3233.605520][T20221] netlink: 'syz.0.15740': attribute type 39 has an invalid length. [ 3233.639085][T20223] netlink: 'syz.1.15739': attribute type 39 has an invalid length. [ 3233.958945][T20229] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.15742'. [ 3234.271644][T20238] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.15746'. [ 3234.377935][T20244] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15748'. [ 3234.754370][T20249] netlink: 63503 bytes leftover after parsing attributes in process `syz.1.15750'. [ 3234.870883][T20250] device syzkaller0 entered promiscuous mode [ 3234.914531][T20251] netlink: 'syz.0.15760': attribute type 39 has an invalid length. [ 3235.165537][T20256] netlink: 'syz.2.15751': attribute type 39 has an invalid length. [ 3237.611686][T20259] netlink: 'syz.3.15753': attribute type 39 has an invalid length. [ 3237.624840][T20266] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15763'. [ 3237.871664][T20276] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.15755'. [ 3237.899713][T20280] netlink: 'syz.0.15754': attribute type 39 has an invalid length. [ 3241.192922][T20301] netlink: 'syz.4.15765': attribute type 39 has an invalid length. [ 3241.215168][T20300] netlink: 'syz.1.15766': attribute type 39 has an invalid length. [ 3241.341231][T20308] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15768'. [ 3242.109271][T20310] device syzkaller0 entered promiscuous mode [ 3244.513283][T20318] netlink: 55631 bytes leftover after parsing attributes in process `syz.3.15770'. [ 3244.828939][T20325] netlink: 'syz.4.15773': attribute type 39 has an invalid length. [ 3245.187929][T20336] netlink: 'syz.3.15776': attribute type 11 has an invalid length. [ 3245.234660][T20336] netlink: 176 bytes leftover after parsing attributes in process `syz.3.15776'. [ 3245.248334][T20338] netlink: 'syz.1.15778': attribute type 22 has an invalid length. [ 3245.258986][T20338] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15778'. [ 3245.548962][T20347] netlink: 4079 bytes leftover after parsing attributes in process `syz.4.15783'. [ 3246.506405][T20351] device syzkaller0 entered promiscuous mode [ 3253.994865][T20368] netlink: 'syz.3.15789': attribute type 39 has an invalid length. [ 3254.003208][T20370] netlink: 'syz.2.15790': attribute type 39 has an invalid length. [ 3254.014862][T20372] netlink: 'syz.1.15792': attribute type 39 has an invalid length. [ 3256.284896][T20391] netlink: 'syz.0.15793': attribute type 11 has an invalid length. [ 3256.293035][T20391] netlink: 176 bytes leftover after parsing attributes in process `syz.0.15793'. [ 3257.345567][T20400] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15796'. [ 3257.355013][T20396] netlink: 'syz.4.15794': attribute type 22 has an invalid length. [ 3257.364089][T20396] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15794'. [ 3259.447366][T20439] netlink: 'syz.3.15812': attribute type 22 has an invalid length. [ 3259.456435][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15812'. [ 3259.598896][T20441] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15811'. [ 3262.455453][T20471] netlink: 'syz.2.15823': attribute type 39 has an invalid length. [ 3262.487047][T20484] netlink: 'syz.4.15827': attribute type 39 has an invalid length. [ 3262.504690][T20488] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15828'. [ 3263.916589][T20509] netlink: 'syz.2.15836': attribute type 22 has an invalid length. [ 3263.926721][T20509] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15836'. [ 3264.104543][T20513] netlink: 'syz.3.15840': attribute type 39 has an invalid length. [ 3266.267371][T20524] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15844'. [ 3266.853848][T20550] netlink: 'syz.1.15854': attribute type 39 has an invalid length. [ 3267.035897][T20560] netlink: 'syz.3.15857': attribute type 39 has an invalid length. [ 3267.099242][T20563] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15859'. [ 3267.911656][T20572] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15871'. [ 3268.180622][T20583] netlink: 140 bytes leftover after parsing attributes in process `syz.4.15865'. [ 3269.397839][T20591] netlink: 'syz.3.15868': attribute type 39 has an invalid length. [ 3270.271720][T20605] netlink: 'syz.4.15876': attribute type 39 has an invalid length. [ 3270.614016][T20617] netlink: 'syz.0.15888': attribute type 39 has an invalid length. [ 3270.925421][T20626] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15882'. [ 3271.464666][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 3271.471038][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 3271.538773][T20631] netlink: 'syz.1.15896': attribute type 39 has an invalid length. [ 3271.600828][T20634] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15895'. [ 3272.187663][T20642] netlink: 'syz.4.15885': attribute type 39 has an invalid length. [ 3272.480374][T20651] device syzkaller0 entered promiscuous mode [ 3277.183679][T20676] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15901'. [ 3277.197207][T20681] netlink: 'syz.3.15902': attribute type 39 has an invalid length. [ 3277.493256][T20690] netlink: 'syz.3.15906': attribute type 39 has an invalid length. [ 3280.324815][T20715] netlink: 14 bytes leftover after parsing attributes in process `syz.0.15914'. [ 3281.450755][T20728] device syzkaller0 entered promiscuous mode [ 3282.032436][T20730] netlink: 'syz.3.15916': attribute type 39 has an invalid length. [ 3282.304190][T20735] netlink: 'syz.0.15919': attribute type 39 has an invalid length. [ 3282.327150][T20737] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.15920'. [ 3282.367831][T20737] bridge_slave_1: default FDB implementation only supports local addresses [ 3283.794765][T20747] device syzkaller0 entered promiscuous mode [ 3286.184884][T20771] netlink: 14 bytes leftover after parsing attributes in process `syz.3.15930'. [ 3286.194840][T20778] netlink: 'syz.2.15932': attribute type 39 has an invalid length. [ 3287.535026][T20809] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15944'. [ 3288.068669][T20814] netlink: 'syz.0.15945': attribute type 39 has an invalid length. [ 3289.179224][T20821] device syzkaller0 left promiscuous mode [ 3292.126567][T20828] netlink: 'syz.0.15951': attribute type 10 has an invalid length. [ 3292.135020][T20828] netlink: 40 bytes leftover after parsing attributes in process `syz.0.15951'. [ 3292.148238][T20841] netlink: 'syz.1.15956': attribute type 39 has an invalid length. [ 3292.158882][T20843] netlink: 14 bytes leftover after parsing attributes in process `syz.4.15957'. [ 3292.446916][T20850] netlink: 'syz.0.15958': attribute type 39 has an invalid length. [ 3293.503996][T20867] netlink: 'syz.4.15967': attribute type 1 has an invalid length. [ 3293.552286][T20867] netlink: 'syz.4.15967': attribute type 4 has an invalid length. [ 3293.572604][T20867] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.15967'. [ 3294.666968][T20877] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15971'. [ 3294.778177][T20883] netlink: 'syz.4.15972': attribute type 39 has an invalid length. [ 3294.831067][T20885] netlink: 'syz.2.15974': attribute type 39 has an invalid length. [ 3295.381689][T20897] netlink: 'syz.2.15979': attribute type 39 has an invalid length. [ 3296.242686][T20916] netlink: 'syz.3.15986': attribute type 39 has an invalid length. [ 3296.419229][T20923] netlink: 'syz.1.15988': attribute type 39 has an invalid length. [ 3297.809667][T20941] netlink: 'syz.3.15995': attribute type 39 has an invalid length. [ 3297.820762][T20945] netlink: 'syz.1.15996': attribute type 33 has an invalid length. [ 3297.862380][T20945] netlink: 152 bytes leftover after parsing attributes in process `syz.1.15996'. [ 3298.193205][ C0] [ 3298.193217][ C0] ================================ [ 3298.193224][ C0] WARNING: inconsistent lock state [ 3298.193244][ C0] syzkaller #0 Not tainted [ 3298.193256][ C0] -------------------------------- [ 3298.193262][ C0] inconsistent {INITIAL USE} -> {IN-NMI} usage. [ 3298.193271][ C0] syz.4.16000/20954 [HC1[1]:SC0[0]:HE0:SE1] takes: [ 3298.193295][ C0] ffff88805905c820 (&htab->lockdep_key){....}-{2:2}, at: htab_lock_bucket+0x179/0x2f0 [ 3298.193441][ C0] {INITIAL USE} state was registered at: [ 3298.193449][ C0] lock_acquire+0x1bb/0x4a0 [ 3298.193475][ C0] _raw_spin_lock+0x2a/0x40 [ 3298.193499][ C0] htab_lock_bucket+0x179/0x2f0 [ 3298.193519][ C0] htab_lru_map_update_elem+0x2eb/0xe60 [ 3298.193539][ C0] bpf_map_update_value+0x59d/0x670 [ 3298.193618][ C0] generic_map_update_batch+0x52e/0x7f0 [ 3298.193642][ C0] bpf_map_do_batch+0x475/0x5f0 [ 3298.193670][ C0] __sys_bpf+0x6f7/0x780 [ 3298.193695][ C0] __x64_sys_bpf+0x78/0x90 [ 3298.193718][ C0] do_syscall_64+0x4c/0xa0 [ 3298.193738][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3298.193776][ C0] irq event stamp: 1714 [ 3298.193784][ C0] hardirqs last enabled at (1713): [] _raw_spin_unlock_irqrestore+0x82/0x120 [ 3298.193817][ C0] hardirqs last disabled at (1714): [] exc_debug+0x6e/0x130 [ 3298.193843][ C0] softirqs last enabled at (948): [] bpf_map_alloc_id+0x87/0xd0 [ 3298.193878][ C0] softirqs last disabled at (946): [] bpf_map_alloc_id+0x21/0xd0 [ 3298.193915][ C0] [ 3298.193915][ C0] other info that might help us debug this: [ 3298.193921][ C0] Possible unsafe locking scenario: [ 3298.193921][ C0] [ 3298.193926][ C0] CPU0 [ 3298.193930][ C0] ---- [ 3298.193934][ C0] lock(&htab->lockdep_key); [ 3298.193947][ C0] [ 3298.193951][ C0] lock(&htab->lockdep_key); [ 3298.193963][ C0] [ 3298.193963][ C0] *** DEADLOCK *** [ 3298.193963][ C0] [ 3298.193967][ C0] no locks held by syz.4.16000/20954. [ 3298.193976][ C0] [ 3298.193976][ C0] stack backtrace: [ 3298.193994][ C0] CPU: 0 PID: 20954 Comm: syz.4.16000 Not tainted syzkaller #0 [ 3298.194014][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 3298.194030][ C0] Call Trace: [ 3298.194038][ C0] <#DB> [ 3298.194079][ C0] dump_stack_lvl+0x188/0x24e [ 3298.194116][ C0] ? show_regs_print_info+0x12/0x12 [ 3298.194153][ C0] ? print_usage_bug+0x42a/0x690 [ 3298.194184][ C0] ? verify_lock_unused+0x15/0x140 [ 3298.194218][ C0] lock_acquire+0x2df/0x4a0 [ 3298.194252][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 3298.194280][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3298.194307][ C0] ? rcu_is_watching+0x11/0xa0 [ 3298.194348][ C0] ? lock_release+0xcf/0x920 [ 3298.194388][ C0] _raw_spin_lock+0x2a/0x40 [ 3298.194414][ C0] ? htab_lock_bucket+0x179/0x2f0 [ 3298.194438][ C0] htab_lock_bucket+0x179/0x2f0 [ 3298.194467][ C0] ? htab_lru_map_delete_node+0x610/0x610 [ 3298.194492][ C0] ? look_up_lock_class+0x75/0x140 [ 3298.194523][ C0] ? verify_lock_unused+0x15/0x140 [ 3298.194553][ C0] ? htab_map_hash+0x329/0x6d0 [ 3298.194581][ C0] htab_lru_map_delete_elem+0x1a1/0x760 [ 3298.194616][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 3298.194644][ C0] ? htab_lru_map_update_elem+0xe60/0xe60 [ 3298.194681][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x3e [ 3298.194710][ C0] bpf_overflow_handler+0x6d1/0x790 [ 3298.194735][ C0] ? perf_get_page_size+0x430/0x430 [ 3298.194771][ C0] ? bpf_overflow_handler+0xd9/0x790 [ 3298.194795][ C0] ? perf_swevent_overflow+0x230/0x230 [ 3298.194829][ C0] ? __perf_event_account_interrupt+0x187/0x280 [ 3298.194865][ C0] __perf_event_overflow+0x457/0x630 [ 3298.194904][ C0] perf_swevent_event+0x315/0x570 [ 3298.194939][ C0] ? perf_tp_event+0xc10/0xc10 [ 3298.194986][ C0] perf_bp_event+0x311/0x3f0 [ 3298.195023][ C0] ? perf_event_free_bpf_prog+0x120/0x120 [ 3298.195053][ C0] ? perf_trace_lock+0xf8/0x390 [ 3298.195111][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3298.195139][ C0] ? read_lock_is_recursive+0x10/0x10 [ 3298.195177][ C0] hw_breakpoint_exceptions_notify+0x14d/0x470 [ 3298.195243][ C0] atomic_notifier_call_chain+0x17a/0x2b0 [ 3298.195268][ C0] ? atomic_notifier_call_chain+0x2c/0x2b0 [ 3298.195298][ C0] notify_die+0x141/0x1a0 [ 3298.195326][ C0] ? srcu_init_notifier_head+0x90/0x90 [ 3298.195369][ C0] notify_debug+0x20/0x30 [ 3298.195410][ C0] exc_debug+0xd9/0x130 [ 3298.195438][ C0] asm_exc_debug+0x1a/0x40 [ 3298.195472][ C0] RIP: 0010:copy_user_short_string+0x24/0x40 [ 3298.195500][ C0] Code: 90 90 90 90 90 90 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a 06 <88> 07 48 ff c6 48 ff c7 ff c9 75 f2 31 c0 0f 01 ca c3 8d 14 ca eb [ 3298.195527][ C0] RSP: 0018:ffffc90003387bc8 EFLAGS: 00040202 [ 3298.195548][ C0] RAX: ffffffff840ff06e RBX: 0000000000000006 RCX: 0000000000000004 [ 3298.195563][ C0] RDX: 0000000000000006 RSI: 0000200000000300 RDI: ffff888028b92282 [ 3298.195578][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000006 [ 3298.195599][ C0] R10: dffffc0000000000 R11: ffffed1005172450 R12: 00007fffffffeffa [ 3298.195615][ C0] R13: 1ffff92000670f90 R14: ffff888028b92280 R15: 00002000000002fe [ 3298.195640][ C0] ? _copy_from_user+0x5e/0x170 [ 3298.195676][ C0] [ 3298.195683][ C0] [ 3298.195693][ C0] _copy_from_user+0xf4/0x170 [ 3298.195723][ C0] generic_map_update_batch+0x48d/0x7f0 [ 3298.195765][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 3298.195797][ C0] ? __fdget+0x17c/0x200 [ 3298.195860][ C0] ? rcu_read_unlock+0xa0/0xa0 [ 3298.195886][ C0] bpf_map_do_batch+0x475/0x5f0 [ 3298.195917][ C0] ? bpf_lsm_xfrm_state_pol_flow_match+0x10/0x10 [ 3298.195948][ C0] __sys_bpf+0x6f7/0x780 [ 3298.195980][ C0] ? bpf_link_show_fdinfo+0x380/0x380 [ 3298.196029][ C0] ? lock_chain_count+0x20/0x20 [ 3298.196069][ C0] __x64_sys_bpf+0x78/0x90 [ 3298.196099][ C0] do_syscall_64+0x4c/0xa0 [ 3298.196119][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3298.196137][ C0] ? clear_bhb_loop+0x60/0xb0 [ 3298.196159][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 3298.196189][ C0] RIP: 0033:0x7f320199ce59 [ 3298.196207][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 3298.196224][ C0] RSP: 002b:00007f32027e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 3298.196244][ C0] RAX: ffffffffffffffda RBX: 00007f3201c15fa0 RCX: 00007f320199ce59 [ 3298.196259][ C0] RDX: 0000000000000038 RSI: 0000200000000380 RDI: 000000000000001a [ 3298.196272][ C0] RBP: 00007f3201a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 3298.196284][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 3298.196296][ C0] R13: 00007f3201c16038 R14: 00007f3201c15fa0 R15: 00007ffdedaf1c18 [ 3298.196329][ C0] [ 3298.994835][T20956] netlink: 'syz.1.16001': attribute type 39 has an invalid length. [ 3299.025264][T20961] netlink: 'syz.2.16002': attribute type 39 has an invalid length.